Skip to content
Safeguarding Your Gadgets Galaxy — Unleashing the Power of Gadgets!

Microsoft's Patch Tuesday Fixes Nine Critical Bugs, Five Allowing Remote Code Execution

Microsoft patches five critical Remote Code Execution bugs. Prompt updates crucial to protect against potential threats.

,   and  Administrator
1 min read
In the picture we can see three boys standing near the desk on it, we can see two computer systems...
In the picture we can see three boys standing near the desk on it, we can see two computer systems towards them and one boy is talking into the microphone and they are in ID cards with red tags to it and behind them we can see a wall with an advertisement board and written on it as Russia imagine 2013.

Microsoft's Patch Tuesday Fixes Nine Critical Bugs, Five Allowing Remote Code Execution

Microsoft's latest Patch Tuesday addresses nine critical vulnerabilities, five of which allow for Remote Code Execution (RCE). This month's updates affect various platforms, including Windows, Mac OS X, and Microsoft Office 365.

The first RCE update, Bulletin #1, targets Internet Explorer versions 6 to 11 on all supported operating systems, including Windows RT. Attackers can exploit this by creating a malicious webpage and drawing traffic to it.

Bulletin #2, rated critical, addresses RCE vulnerabilities in .NET, impacting all operating systems. Meanwhile, Bulletin #5, another RCE-style vulnerability, affects Microsoft 365 and requires user interaction to be triggered.

Bulletin #3 is a critical vulnerability in the Windows operating system, likely residing in one of the graphics or media libraries. Bulletins #4, #7, #8, and #9 are local vulnerabilities in Windows, Office 365, and Microsoft developer's tools.

Mac OS X users with Office 365 2011 are affected by Bulletin #6, although no attacks have been reported on that platform. This bulletin is also an update for Microsoft Office 365 2007 and 2010, rated important by Microsoft but considered critical by security experts.

Oracle, in unrelated news, will release role-based AI agents embedded in Oracle Fusion Cloud Applications on October 6, 2025, but no new software components specifically linked to RCE vulnerabilities are mentioned for the upcoming week.

Microsoft urges users to apply the latest security updates to protect against potential threats. The five RCE vulnerabilities highlight the importance of prompt patching to prevent unauthorized access and code execution on affected systems.

Read also:

Related

Latest