Add as a preferred source on Google


News

Microsoft Releases 10 Security Bulletins

In one of its biggest monthly "Patch Tuesday" events yet, Microsoft posted 10 new security bulletins, seven of them for critical flaws that could allow attackers to remotely take control of a computer.

The new bulletins are Microsoft's 29th through 38th of the year. They follow a month when Microsoft released only one bulletin for flaw in Microsoft's component for processing JPEG images. Microsoft also on Tuesday released an updated version of its tool for detecting programs that require the patch for the JPEG component.

The bulletins are:

  • MS04-029 for an important flaw affecting Windows NT 4.
  • MS04-030 for an important flaw affecting Windows XP, Windows 2000, Windows Server 2003 and IIS 5.0/5.1/6.0.
  • MS04-031 for an important flaw affecting Windows NT 4, Windows 2000, Windows XP and Windows Server 2003.
  • MS04-032 for a critical problem affecting Windows NT 4, Windows 2000, Windows XP and Windows Server 2003.
  • MS04-033 for a critical flaw affecting Office 2000, Office XP, Office 2001 for Mac and Office v. X for Mac and all corresponding versions of Excel.
  • MS04-034 for a critical flaw affecting Windows XP and Windows Server 2003.
  • MS04-035 for a critical flaw involving Windows 2003, Windows XP 64-bit Edition Version 2003 and Exchange Server 2003.
  • MS04-036 for a flaw affecting Windows NT, Windows 2000 Server, Windows Server 2003, Exchange 2000 Server and Exchange Server 2003.
  • MS04-037 for a critical flaw affecting Windows NT 4, Windows 2000, Windows XP, Windows Server 2003, Windows 98 and Windows ME.
  • MS04-038 for a critical flaw affecting Windows NT 4, Windows 2000, Windows XP, Windows Server 2003, Windows 98 and Windows ME

    • About the Author

    Scott Bekker is editor in chief of Redmond Channel Partner magazine.

    Featured

    • Microsoft Dismantles RedVDS Cybercrime Marketplace Linked to $40M in Phishing Fraud

      In a coordinated action spanning the United States and the United Kingdom, Microsoft’s Digital Crimes Unit (DCU) and international law enforcement collaborators have taken down RedVDS, a subscription based cybercrime platform tied to an estimated $40 million in fraud losses in the U.S. since March 2025.

    • Sound Wave Illustration

      CrowdStrike's Acquisition of SGNL Aims to Strengthen Identity Security

      CrowdStrike signs definitive agreement to purchase SGNL, an identity security specialist, in a deal valued at about $740 million.

    • Microsoft Acquires Osmos, Automating Data Engineering inside Fabric

      In a strategic move to reduce time-consuming manual data preparation, Microsoft has acquired Seattle-based startup Osmos, specializing in agentic AI for data engineering.

    • Linux Foundation Unites Major Tech Firms to Launch Agentic AI Foundation

      The Linux Foundation today announced the creation of a new collaborative initiative — the Agentic AI Foundation (AAIF) — bringing together major AI and cloud players such as Microsoft, OpenAI, Anthropic and other major tech companies.

    Most   Popular