Microsoft fixes critical Windows 8, IE10 flaws for Patch Tuesday

Microsoft has released five critical security updates for Windows 8 and Windows RT in order to protect against a range of vulnerabilities identified in the recently released software.

Read this

10 security stories that shaped 2012

From a major malware attack on the Mac OS X to state-sponsored cyber-espionage attacks, IT security in 2012 will be remembered as the year that piqued the imagination.

Read now

All in all, there are seven updates for Windows users, with five rated "critical" that could lead to remote code execution, while two are rated "important," which fix flaws that could result in the operating system's security features being bypassed.

Critical updates are generally those that could compromise the security of a device or system data, while important updates are reserved for those that could lead to an increased scope of attack by malware or hackers.

Surface RT owners will also be asked to update their tablets with the latest security patches. According to Microsoft, there are two "critical" fixes for Surface RT owners.

One of the "critical" patches will plug a security hole in Internet Explorer 10, which is found only on Windows 8 and Windows RT, which will resolve three reported vulnerabilities in the browser that could allow remote code execution on the device from "specially crafted" Web pages.

Another "critical" patch will update Microsoft's email server, Exchange, which will prevent a weakness in the server's WebReady Document Viewing feature.

Other platforms that are covered under this month's bevy of security patches include Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008, Windows 7, Windows Server 2008 R2, and the latest server offering, Windows Server 2012.

Updates are available on Windows Update, Microsoft Update, and the usual channels for Windows Server customers.