Microsoft Security Bulletin Release for October, 2016

[Corrine]

Microsoft released ten (10) bulletins. Five (5) bulletins are identified as Critical, four (4) as Important and one (1) rated Moderate in severity.

The updates address vulnerabilities in Microsoft Windows, Internet Explorer, Microsoft Edge, Microsoft Office, Microsoft Office Services and Web Apps, Microsoft .NET Framework, Skype for Business, Microsoft Lync as well as Adobe Flash Player for Windows 8.1 and above.

Addressed in the updates are Remote Code Execution, Elevation of Privilege and Information Disclosure.

---

The updates this month begin the new "patch rollup" for Windows 7 and 8.1 as well as Server 2008 and 2012.

Simply stated, on the second Tuesday of each month, "Patch Tuesday, rather than individual KB articles, there will be one security monthly rollup. The update includes new security fixes along with the security fixes from previous monthly rollups, available from Windows Update.

As explained in How to prepare for the Windows 7/8.1 ‘patchocalypse’,

"The most important note for most Windows Update users: You don’t have to change anything. The Automatic Update settings (that is, Automatically download and install, Download but let me choose when to install, Notify but don’t download, or Never check) work as they always have. The “Give me recommended updates the same way I receive important updates” check box works as it has before -- if Microsoft tags an update as “Recommended” and this box is checked, the update appears checked (ready to install) in the Windows Update list. If that box is unchecked, the update appears as unchecked in the Optional category."

For complete, albeit confusing, details, the changes are described in More on Windows 7 and Windows 8.1 servicing changes – Windows for IT Pros.

Microsoft Security Bulletin for October 2016
Windows 10 Update History