On May 12, Microsoft released thirteen security bulletins as part of a new Patch Tuesday. For the month of May, the software maker released eight new updates with a "Critical" rating and the remaining three updates with an "Important" rating to fix various vulnerabilities in Windows, Office, Internet Explorer and other products.
| Channel | Publish Date | Thumbnail & View Count | Actions |
|---|---|---|---|
 | Publish Date not found |  0 Views |
System Update No. 135: Microsoft's Patch Tuesday of June 2024
The updates, rated critical, resolve vulnerabilities in Internet Explorer (KB3049563), Windows, .NET Framework, Office, Lync, Silverlight, and Windows Journal (KB3057110 and KB3046002) that could allow remote execution if the user accesses a specially crafted web page or document using these products.
The updates, rated important, resolve vulnerabilities in Microsoft Server Software, .NET Framework, Silverlight, and Windows. The vulnerabilities could allow privilege escalation (KB3057191, KB3055642, KB 3058985, KB3057134), feature bypass (KB3050514, KB3050514, KB3057263), remote denial of service attack (KB3051768), and KB3061518 resolves "the vulnerability could allow information disclosure if Secure Channel (Schannel) allows the use of a weak Diffie-Hellman Ephemeral (DFE) key with a length of 512 bits in an encrypted TLS session. Allowing 512-bit DHE keys makes the DHE key exchange weak and vulnerable to various attacks. A server must support 512-bit DHE key lengths for an attack to be successful; the minimum allowed DHE key length in standard Windows server configurations is 1024 bits."
So far, it looks like Microsoft will not be releasing a new firmware update for Surface tablets in April, not even for Surface Pro 3. There also don't seem to be any new updates for the Windows 10 Technical Preview in April.
