Microsoft has patched more critical vulnerabilities than 2004 and 2005 combined

Today Microsoft patched 23 vulnerabilities of which 15 are rated critical. One of the critical vulnerabilities, (MS06-040) Service Server vulnerability, can be remotely exploited by an anonymous user on all Windows operating systems and has been labeled a worm candidate.
The update of our graphs of last month is found below. The top graph shows that this year Microsoft has already addressed more critical vulnerabilities than in 2004 and 2005 combined. The bottom graph shows that the number of important vulnerabilities has not changed.

This month 11 patched vulnerabilities were already public or were already exploited in-the-wild prior to today’s announcements. Among them is the vulnerability in Powerpoint that was exploited in targeted attacks in mid-July.

No need to remind you to review your deployments now!