Microsoft patches critical IE, Silverlight drive-by bugs

Microsoft fixed 23 vulnerabilities across eight security bulletins as part of its October Patch Tuesday release. The release addresses flaws in Internet Explorer, .NET Framework and Silverlight, Windows, Forefront UAG and Host Integration Server.

Two of the updates were labeled "critical," Microsoft's most-serious threat ranking, while the other six were rated "important," the next-most-severe tag. One critical vulnerability, MS11-081, is a cumulative security update that affects Internet Explorer. This update patches eight privately reported vulnerabilities and could also allow remote code execution if a user views a specially crafted Web page while using Internet Explorer.

"Patching browsers will be top priority because the vulnerabilities fixed with each security bulletin release in browsers are top exploit targets for attackers," Jason Miller, manager of research and development at VMware said.

Read more -here-