Navigation section
attack vector
-
Should You Send Your Pen Test Report to the MSRC?
Every day, the Microsoft Security Response Center (MSRC) receives vulnerability reports from security researchers, technology/industry partners, and customers. We want those reports, because they help us make our products and services more secure. High-quality reports that include proof of...- News
- Thread
- account lockout active directory attack vector audit logging brute force attack customer deployment cybersecurity defense in depth iis arr lync server 2013 microsoft msrc password policy penetration testing risk assessment security security best practices security mitigations vulnerability reporting web application security
- Replies: 0
- Forum: Security Alerts
-
MS16-104 - Critical: Cumulative Security Update for Internet Explorer (3183038) - Version: 1.0
Severity Rating: Critical Revision Note: V1.0 (September 13, 2016): Bulletin published. Summary: This security update resolves vulnerabilities in Internet Explorer. The most severe of the vulnerabilities could allow remote code execution if a user views a specially crafted webpage using Internet...- News
- Thread
- administrative access attack vector critical severity cumulative update data protection exploit internet explorer malware prevention ms16-104 patch remote code execution risk mitigation security bulletin security update september 2016 system control update bulletin user accounts user rights vulnerabilities
- Replies: 0
- Forum: Security Alerts
-
MS16-001 - Critical: Cumulative Security Update for Internet Explorer (3124903) - Version: 1.0
Severity Rating: Critical Revision Note: V1.0 (January 12, 2016): Bulletin published. Summary: This security update resolves vulnerabilities in Internet Explorer. The more severe of the vulnerabilities could allow remote code execution if a user views a specially crafted webpage using Internet...- News
- Thread
- administrative attack vector critical cumulative update cybersecurity data protection exploit full user rights internet explorer malware microsoft ms16-001 patch management remote code execution revision note security update system security user rights vulnerability webpage
- Replies: 0
- Forum: Security Alerts
-
MS15-072 - Important: Vulnerability in Windows Graphics Component Could Allow Elevation of...
Severity Rating: Important Revision Note: V1.0 (July 14, 2015): Bulletin published. Summary: This security update resolves a vulnerability in Microsoft Windows. The vulnerability could allow elevation of privilege if the Windows graphics component fails to properly process bitmap conversions. An...- News
- Thread
- administrative rights attack vector authenticated attack critical elevation of privilege graphics component july 2015 malware microsoft ms15-072 patch privilege escalation risk assessment security software update system security update vulnerability windows
- Replies: 0
- Forum: Security Alerts
-
MS14-066 - Critical: Vulnerability in Schannel Could Allow Remote Code Execution (2992611) -...
Severity Rating: Critical Revision Note: V1.0 (November 11, 2014): Bulletin published. Summary: This security update resolves a privately reported vulnerability in the Microsoft Secure Channel (Schannel) security package in Windows. The vulnerability could allow remote code execution if an...- News
- Thread
- attack vector critical patch ms14-066 packet manipulation remote code execution schannel security update vulnerability windows server
- Replies: 0
- Forum: Security Alerts
-
3009008 - Vulnerability in SSL 3.0 Could Allow Information Disclosure - Version: 1.0
Revision Note: V1.0 (October 14, 2014): Advisory published Summary: Microsoft is aware of detailed information that has been published describing a new method to exploit a vulnerability in SSL 3.0, affecting the Windows operating system. This vulnerability affects the protocol itself and is not...- News
- Thread
- attack vector browser encryption https information disclosure microsoft security ssl 3.0 vulnerability windows
- Replies: 0
- Forum: Security Alerts
-
3009008 - Vulnerability in SSL 3.0 Could Allow Information Disclosure - Version: 1.0
Revision Note: V1.0 (October 14, 2014): Advisory published Summary: Microsoft is aware of detailed information that has been published describing a new method to exploit a vulnerability in SSL 3.0, affecting the Windows operating system. This vulnerability affects the protocol itself and is not...- News
- Thread
- attack vector browser security decryption encryption https traffic information disclosure microsoft mixed content protocol vulnerability risk assessment security advisory ssl vulnerability
- Replies: 0
- Forum: Security Alerts
-
Insecure Library Loading Could Allow Remote Code Execution - Version: 18.0
Severity Rating: Revision Note: V18.0 November 13, 2012): Added the following Microsoft Security Bulletin to the Updates relating to Insecure Library Loading section: MS12-074, "Vulnerabilities in .NET Framework Could Allow Remote Code Execution." Summary: Microsoft is aware that research has...- News
- Thread
- .net framework attack vector insecure loading microsoft remote code execution research security bulletin updates vulnerabilities
- Replies: 0
- Forum: Security Alerts
-
TA13-051A: Oracle Java Multiple Vulnerabilities
Original release date: February 20, 2013 Systems Affected Any system using Oracle Java including JDK and JRE 7 Update 13 and earlier JDK and JRE 6 Update 39 and earlier JDK and JRE 5.0 Update 39 and earlier SDK and JRE 1.4.2_41 and earlier Web browsers using the Java plug-in are at...- News
- Thread
- access control applets attack vector cyber threats drive-by download java control panel jdk jre malicious code mitigation network security oracle java patch plugin security stand-alone applications update vulnerabilities web browsers
- Replies: 0
- Forum: Security Alerts
-
MS13-002 - Critical : Vulnerabilities in Microsoft XML Core Services Could Allow Remote Code Executi
Severity Rating: Critical Revision Note: V1.1 (January 8, 2013): Corrected download links for Microsoft XML Core Services 3.0 on Windows Server 2003 with SP2 for Itanium-based Systems and for Microsoft XML Core Services 6.0 when installed on Windows Server 2003 with SP2 for...- News
- Thread
- affected software attack vector code execution critical update email threats information change internet explorer microsoft xml ms13-002 remote code execution revision note security security update server core service pack update users vulnerabilities windows server
- Replies: 0
- Forum: Security Alerts
-
MS12-072 - Critical : Vulnerabilities in Windows Shell Could Allow Remote Code Execution (2727528) -
Severity Rating: Critical Revision Note: V1.0 (November 13, 2012): Bulletin published. Summary: This security update resolves two privately reported vulnerabilities in Microsoft Windows. The vulnerabilities could allow remote code execution if a user browses to a specially...- News
- Thread
- administrative rights attack vector critical update ms12-072 remote code execution security user rights vulnerabilities windows explorer windows shell
- Replies: 0
- Forum: Security Alerts
-
MS12-043 - Critical : Vulnerability in Microsoft XML Core Services Could Allow Remote Code Execution
Severity Rating: Critical Revision Note: V1.0 (July 10, 2012): Bulletin published. Summary: This security update resolves a publicly disclosed vulnerability in Microsoft XML Core Services. The vulnerability could allow remote code execution if a user views a specially...- News
- Thread
- attack vector critical email scams internet explorer ms12-043 remote code execution security update vulnerability web threat xml services
- Replies: 0
- Forum: Security Alerts
-
Microsoft Security Advisory (2269637): Insecure Library Loading Could Allow Remote Code Execution -
Revision Note: V15.0 (March 13, 2012): Added the following Microsoft Security Bulletin to the Updates relating to Insecure Library Loading section: MS12-022, "Vulnerability in Expression Design Could Allow Remote Code Execution." Summary: Microsoft is aware that research has been...- News
- Thread
- advisory attack vector bulletin expression design insecure library loading microsoft ms12-022 patch management remote code execution research security system security updates vulnerabilities
- Replies: 0
- Forum: Security Alerts
-
MS10-092: Vulnerability in Task Scheduler could allow for elevation of privilege
Resolves vulnerabilities in Windows Task Scheduler that could allow elevation of privilege if an attacker logged on to an affected system and ran a specially crafted application. An attacker must have valid logon credentials and be able to log on... More...- News
- Thread
- attack vector elevate privilege logon credentials microsoft update security patch system administration task scheduler threat mitigation vulnerability windows security
- Replies: 0
- Forum: Knowledge Base (KB)
-
MS12-006 - Important : Vulnerability in SSL/TLS Could Allow Information Disclosure (2643584) - Versi
Severity Rating: Important Revision Note: V1.0 (January 10, 2012): Bulletin published. Summary: This security update resolves a publicly disclosed vulnerability in SSL 3.0 and TLS 1.0. This vulnerability affects the protocol itself and is not specific to the Windows...- News
- Thread
- attack vector cipher suites encrypted traffic information disclosure ms12-006 publicly disclosed security update ssl tls vulnerability
- Replies: 0
- Forum: Security Alerts
-
MS11-058 - Critical : Vulnerabilities in DNS Server Could Allow Remote Code Execution (2562485) - Ve
Severity Rating: Critical Revision Note: V1.2 (October 25, 2011): Announced a change to detection logic and corrected bulletin replacement information for some affected configurations. There were no changes to the security update files. See the Update FAQ for details...- News
- Thread
- attack vector critical dns server ms11-058 naptr query remote code execution security update update faq vulnerabilities windows
- Replies: 0
- Forum: Security Alerts
-
MS11-076 - Important : Vulnerability in Windows Media Center Could Allow Remote Code Execution (2604
Severity Rating: Important Revision Note: V1.0 (October 11, 2011): Bulletin published. Summary: This security update resolves a publicly disclosed vulnerability in Windows Media Center. The vulnerability could allow remote code execution if an attacker convinces a user to...- News
- Thread
- attack vector critical update dynamic link library network security remote code execution security update user awareness vulnerability webdav share windows media center
- Replies: 0
- Forum: Security Alerts
-
Microsoft Security Advisory (2588513): Vulnerability in SSL/TLS Could Allow Information Disclosure -
Revision Note: V1.0 (September 26, 2011): Advisory published. Summary: Microsoft is aware of detailed information that has been published describing a new method to exploit a vulnerability in SSL 3.0 and TLS 1.0, affecting the Windows operating system. This vulnerability affects the...- News
- Thread
- advisory attack vector cybersecurity decryption https information disclosure microsoft protocol risk assessment security ssl tls vulnerability web traffic windows
- Replies: 0
- Forum: Security Alerts
-
MS11-036 - Important : Vulnerabilities in Microsoft PowerPoint Could Allow Remote Code Execution (25
Severity Rating: Important Revision Note: V1.2 (June 14, 2011): Announced that the updates for Microsoft Office for Mac, which were not available when the bulletin was originally published, are now available in bulletin MS11-045. Also, for both vulnerabilities addressed by this...- News
- Thread
- attack vector bulletin cve-2011-1269 cve-2011-1270 exploitation important mac office malware microsoft microsoft office office file validation patch powerpoint registry remote code execution security update user rights vulnerabilities workaround
- Replies: 0
- Forum: Security Alerts
-
MS11-058 - Critical: Vulnerabilities in DNS Server Could Allow Remote Code Execution (2562485) - Ver
Severity Rating: Critical - Revision Note: V1.0 (August 9, 2011): Bulletin published.Summary: This security update resolves two privately reported vulnerabilities in Windows DNS server. The more severe of these vulnerabilities could allow remote code execution if an attacker registers a domain...- News
- Thread
- attack vector code execution critical dns server ms11-058 network security remote execution security update vulnerabilities windows dns
- Replies: 0
- Forum: Security Alerts