Microsoft Security Patches for June 2009

Microsoft has released the security bulletin summary for June 2009 which details this month's software and system updates. A total of ten security bulletins have been released this month which patch vulnerabilities in a variety of Microsoft products including various Microsoft Windows operating systems, Microsoft Internet Explorer and Microsoft Office.

The easiest way to download and install the patches is by pointing the Internet Explorer web browser to Microsoft Update which will automatically detect and install the available patches for the computer system. Other possibilities include downloading the security patches from Microsoft Download Center from where they are available as well.

Six vulnerabilities have been rated as critical, three as important and one as moderate. Critical security vulnerabilities can usually be exploited for remote code execution meaning it is essential to fix these vulnerabilities quickly. You can follow the links below for additional information about each vulnerability.

• MS09-018 - Vulnerabilities in Active Directory Could Allow Remote Code Execution (971055)
• MS09-019 - Cumulative Security Update for Internet Explorer (969897)
• MS09-020 - Vulnerabilities in Internet Information Services (IIS) Could Allow Elevation of Privilege (970483)
• MS09-021 - Vulnerabilities in Microsoft Office Excel Could Allow Remote Code Execution (969462)
• MS09-022 - Vulnerabilities in Windows Print Spooler Could Allow Remote Code Execution (961501)
• MS09-023 - Vulnerability in Windows Search Could Allow Information Disclosure (963093)
• MS09-024 - Vulnerability in Microsoft Works Converters Could Allow Remote Code Execution (957632)
• MS09-025 - Vulnerabilities in Windows Kernel Could Allow Elevation of Privilege (968537)
• MS09-026 - Vulnerability in RPC Could Allow Elevation of Privilege (970238)
• MS09-027 - Vulnerabilities in Microsoft Office Word Could Allow Remote Code Execution (969514)

Update: In newer versions of Windows, Windows Update needs to be launched from the start menu and not from Internet Explorer anymore. The systems are by default configured to automatically update the system with important security related patches, so that most users should not have to worry about that.