The company says that one of its bulletins actually fixed nine, not 10, vulnerabilities

Oct 11, 2013 06:09 GMT  ·  By

Microsoft has updated the details of one of its security bulletins released on Patch Tuesday, saying that it actually fixed 9 vulnerabilities, not 10 as it previously stated.

The MS13-080, described as a Cumulative Update for Internet Explorer, was supposed to address memory corruption vulnerabilities in several versions of the browser, as ZDNet points out.

According to Microsoft, the CVE-2013-3871 vulnerability is scheduled to be addressed in a future security update, which means that at least one security flaw still exists in Internet Explorer.

“Remote code execution vulnerabilities exist when Internet Explorer improperly accesses an object in memory. These vulnerabilities could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user,” the original bulletin was reading.

The company has since updated the advisory to inform that only nine vulnerabilities have been patched by security bulletin MS13-080.