Microsoft plans to fix 19 vulnerabilities this Tuesday

Microsoft alleges they’re preparing six patches that will amend 19 vulnerabilities in Windows, Internet Explorer, Office and the .NET Framework.  Four of the six fixes, set to arrive on Tuesday as part of the software giant’s monthly security update, are rated “critical,” claims an advance notification.

“Most organizations will be affected by these critical bulletins as they relate to legacy codebase that is present even in Microsoft’s most recent releases, such as Windows 8 and Windows Server 2012,” Marcus Carey, a security researcher at vulnerability management firm Rapid7, said in prepared remarks. “This may come as a surprise to many who expected that Windows 8 and Windows Server 2012 to be much more secure than legacy versions. The truth is that Microsoft and other vendors have significant technical debt in their code base which results in security issues.”

Researchers aforementioned that of all of the patches, the one that should have the most attention regards issues in Internet Explorer. Bugs of this nature are quite easily exploited in the wild, thanks to drive-by and targeted-style attacks, which merely involve directing unknowing users to a malicious web page.