Mandatory seems to be the buzzword at the Redmond these days. After making Windows 8.1 Update a compulsory install, the company has launched a new must have patch for an earlier operating system.
The most popular operating system in the world, actually, Windows 7.
Users are recommended to install the MS14-18 security bulletin, which was actually released in April, as a cumulative update for Internet Explorer. And all users are now required to have this installed — that is, if they want to receive future fixes.
Redmond has not clearly mentioned that the above April 2014 patch is a must, but a short notice on the page for MS14-035 states that everyone needs to install this two month old bulletin:
“Customers running Internet Explorer 11 on Windows 7 or Windows Server 2008 R2, must first install the 2929437 update released in April, 2014 before installing the 2957689 update.”
Both these updates fix similar issues that could allow an attacked to attain the same usage rights as the currently logged in users by directing them to a compromised website.
And both patches are automatically delivered via the Windows Update option.