This month, though, the tune has changed, as nine patches are on tap, some of them rated 'critical'. According to reports, Windows XP itself also may be getting a Service Pack 3 release in 2006.
True to form, Microsoft is vague in its advance bulletins about patches and has not disclosed the specific issues that will be addressed. Eight of the issues set to be patched will involve Windows, and there's one that specifically affects Microsoft Exchange.
Internet Explorer is among the Windows applications that are likely to be patched. Security firm Secunia reports there are numerous unpatched vulnerabilities in IE. Among them is the 'XMLHTTP' HTTP Request Injection vulnerability which 'can be exploited by malicious people to manipulate certain data and conduct HTTP request smuggling attacks'.
This article was first published on internetnews.com.