Microsoft Ships a Record-Breaking Patch Set: 622 Vulnerabilities and Two Actively Exploited 0-Days

Microsoft has rolled out the largest Patch Tuesday in its entire history, closing a total of 622 vulnerabilities across its own products. That number is more than triple the previous record, set in June, when roughly 200 CVEs were patched.

Two Exploited 0-Days

Drawing particular attention in this release are two zero-day vulnerabilities that are already being actively exploited by attackers in real-world attacks. These are precisely the ones Microsoft recommends addressing first.

According to the company, both vulnerabilities were discovered thanks to incident responders, whom Microsoft thanked in the materials accompanying the update.

A Record-Scale Update

The tally of 622 vulnerabilities is drawn from Microsoft's own Security Update Guide portal. Such a sharp jump compared with previous months makes the July update package unprecedented in volume over the entire history of the Patch Tuesday program.

The company discloses details about the nature and severity level of individual vulnerabilities, as well as which products and components are most heavily affected, as part of its standard cycle of publishing security bulletins.

What Users Should Do

Since two of the vulnerabilities are already being exploited in the wild, security specialists recommend that administrators and users install the relevant updates as soon as possible, without waiting for the scheduled patch-deployment cycle within their organizations.

Source: The Hacker News