October's Patch Tuesday, Microsoft's monthly security update, will see the release of 11 security updates, some of which are critical.

Six of the bulletins deal with flaws in Windows (at least one, and possibly more, one of which is critical), four deal with flaws in Microsoft Office (again with at least one critical update). There's also a patch for Microsoft's .NET framework, but this one is less of a problem since it's rated only as "moderate". Redmond is also updating the Windows Malicious Software Removal Tool.

Hopefully, the patches will address software bugs that are currently the subject of active exploitation by hackers, such as a recently discovered flaw in WebViewFolderIcon ActiveX control.

Microsoft's advance bulletin notice can be found here. ®

Related stories

• MS January patch update omits critical Word fix (10 January 2007)
• Five critical vulns mark November Patch Tuesday (15 November 2006)
• Windows Update glitches derail Patch Tuesday (11 October 2006)
• Unofficial patches defend against further IE flaw (3 October 2006)
• Another day, another zero-day MS exploit (28 September 2006)
• MS releases emergency IE fix (27 September 2006)
• Warnings grow over unpatched IE flaw (18 September 2006)
• Patch Tuesday omits critical Word fix (14 September 2006)
• Microsoft flaw fix opens users to attack (24 August 2006)
• Vista joins MS patch treadmill (18 August 2006)
• MS releases dirty dozen (9 August 2006)
• MS releases third beta for IE7 (30 June 2006)
• Attack code follows patch update (15 June 2006)