News

Microsoft Releases Patches for a Raft of Critical Vulnerabilities

Microsoft on Tuesday had its biggest patch release day since instituting its monthly patching cycle in October, addressing 20 security vulnerabilities in several versions of Windows. Eight of the flaws represented critical security problems.

It was one of the largest bug fixing events by Microsoft in recent memory outside of a service pack or security rollup patch.

In all Microsoft released four security bulletins. Three were rated "critical" bulletins, and the other bulletin is rated "important," which is the level below critical. Affected operating systems included Windows NT 4.0, Windows 2000, Windows XP, Windows Server 2003, Windows 98, Windows 98 SE and Windows ME.

The blockbuster of the bunch was MS04-011, which included fixes for 14 individual security flaws. Six of those flaws were individually rated critical for one version of Windows or another. Windows Server 2003, which is locked down by default and was reviewed line-by-line for security before shipping, came through slightly less scathed. Only three of the vulnerabilities in MS04-011 were critical for Windows Server 2003, compared to five each for Windows XP and Windows 2000. For Windows NT 4.0 too, only three of the vulnerabilities were critical.

The bulletin can be found here:
www.microsoft.com/technet/security/bulletin/MS04-011.mspx.

The other critical bulletins are MS04-012, which contains patches for four flaws, one critical, and MS04-013, which contains a patch for one flaw, which is critical. Another patch, MS04-014, has a patch for one non-critical flaw.

Microsoft has a single page with information on all four bulletins here:
www.microsoft.com/security/security_bulletins/200404_windows.asp.

About the Author

Scott Bekker is editor in chief of Redmond Channel Partner magazine.

Featured

  • Microsoft Offers Support Extensions for Exchange 2016 and 2019

    Microsoft has introduced a paid Extended Security Update (ESU) program for on-premises Exchange Server 2016 and 2019, offering a crucial safety cushion as both versions near their Oct. 14, 2025 end-of-support date.

  • An image of planes flying around a globe

    2025 Microsoft Conference Calendar: For Partners, IT Pros and Developers

    Here's your guide to all the IT training sessions, partner meet-ups and annual Microsoft conferences you won't want to miss.

  • Notebook

    Microsoft Centers AI, Security and Partner Dogfooding at MCAPS

    Microsoft's second annual MCAPS for Partners event took place Tuesday, delivering a volley of updates and directives for its partners for fiscal 2026.

  • Microsoft Layoffs: AI Is the Obvious Elephant in the Room

    As Microsoft doubles down on an $80 billion bet on AI this fiscal year, its workforce reductions are drawing scrutiny over whether AI's ascent is quietly reshaping its human capital strategy, even as official messaging avoids drawing a direct line.