<p>Microsoft released seven patches yesterday to address 20 vulnerabilities, with one critical flaw addressed.</p><p>The flaws covered included elevation of privilege, denial-of-service and remote code execution and follow Microsoft's announcement about the rejection of certificates with fewer than 1024 bits.</p><p>The critical patch is MS12-064 and it fixes two vulnerabilities in Microsoft Word and applies to all versions of Microsoft Office. Wolfgang Kandek, CTO of Qualys, said: "It addresses a vulnerability that can be exploited via a malicious RTF formatted email through the Outlook Preview pane without having to open the email.</p><p>"Since the development complexity of an attack against this vulnerability is low, we believe this vulnerability will be the first to have an exploit developed and recommend applying the MS12-064 update as quickly as possible."</p><p><a href="http://www.scmagazineuk.com/microsoft-issues-one-critical-patch-and-seven-important-on-octobers-patch-tuesday/article/262995/">Keep reading...</a></p>