"When administrators get this patch, the amount of due diligence necessary will be a lot more than the usual update," Storms said, talking about the internal testing enterprises usually conduct on 's fixes before deploying them to their machines.

While other researchers didn't slot Bulletin 4 in the first spot -- instead they highlighted Bulletin 1, the bi-monthly update for IE -- they did make note of the former.

"Bulletin 4 will be challenging as it addresses a wide variety of applications including server side software," said Wolfgang Kandek, chief technology officer at Qualys, in an email today.

Marcus Carey, a researcher at Rapid7, called Bulletin 4 "interesting," and like Storms and Kandek, cited the update's diverse targets as the reason.

Although Microsoft's bare-bones advanced notification did not specify the software module(s) that Bulletin 4 will patch, Storms speculated that it would be in the Microsoft Data Access Components (MDAC), a set of components that lets Windows access databases such as Microsoft's own SQL Server.