Microsoft rolled out its monthly “Patch Tuesday” updates on Tuesday, delivering fixes for a total of 1,259 security vulnerabilities across its product line. This marks the second straight month in which the company has addressed more than 1,000 flaws in a single release.
The patches address a wide range of software, including 726 issues in Windows, 174 in Microsoft Office, 61 in Developer Tools, 59 in SQL Server, another 53 in Developer Tools, and 27 in SharePoint Server. In addition, the update bundle contains 165 CVE identifiers that were assigned by external security agencies rather than Microsoft itself.
Among the most notable fixes is an exploited bug in Microsoft Outlook that could allow attackers to capture NTLMv2 password hashes. Security researchers have warned that the vulnerability, if leveraged, may enable credential theft and further lateral movement within corporate networks.
Microsoft’s security advisory emphasizes that applying the patches promptly is critical, especially for organizations that rely heavily on Outlook and other widely deployed services such as Windows and Office. The company recommends that administrators verify the installation of all updates and monitor for any signs of exploitation.
Patch releases of this scale underscore the ongoing challenge of maintaining a large software ecosystem against an ever‑growing threat landscape. By addressing more than a thousand vulnerabilities in a single cycle, Microsoft aims to reduce the attack surface for both consumer and enterprise users.
<small>Source: The Hacker News — read the original story there.</small>
