Eleven months down, one to go. Today is Patch Tuesday for November, and Microsoft is taking it easy on IT admins with a relatively meager three security bulletins. Microsoft Office has the dubious honor of being the focus of this month's patches--while a recently uncovered zero-day flaw in Internet Explorer remains unpatched.

A post on the Microsoft Security Response Center blog states, "As part of our usual cycle of monthly updates, today Microsoft is releasing three security bulletins, addressing 11 vulnerabilities. One of the bulletins has a Critical severity rating, while the other two are rated Important." This is in stark contrast to last month, when Microsoft unleashed a record 16 security bulletins to patch 49 vulnerabilities.

It's a light Patch Tuesday from Microsoft with only three security bulletins.Tyler Reguly, lead research engineer for nCircle, commented, "We knew this was going to be a lean month, but we didn't know how lean it would actually be. There are only three bulletins and one of them is for a product I'd never heard of before advance notification. As a researcher looking at the patches, it's hard to decide if this is a good month or just a boring month."

More: http://www.pcworld.com/businesscenter/article/210160/