Severity Rating: Important
Revision Note: V1.0 (March 10, 2015): Bulletin published.
Summary: This security update resolves four privately reported vulnerabilities in Microsoft Windows. The most severe of these vulnerabilities could allow security feature bypass if an attacker logs on to the...
Severity Rating: Important
Revision Note: V1.0 (March 10, 2015): Bulletin published.
Summary: This security update resolves a privately reported vulnerability in Microsoft Windows. The vulnerability could allow Security Feature Bypass if a user runs a specially crafted application that is...
Severity Rating: Critical
Revision Note: V1.0 (January 13, 2015): V1.0 (January 13, 2015): Bulletin published.
Summary: This security update resolves a privately reported vulnerability in Microsoft Windows. The vulnerability could allow remote code execution if an attacker sends specially...
bulletin
code execution
critical
exploit
microsoft
networking
operating system
patch
remote
remote access
risk
security update
server 2003
telnet
update
vista
vulnerability
windows
windows server
Severity Rating: Important
Revision Note: V1.0 (January 13, 2015): V1.0 (January 13, 2015): Bulletin published.
Summary: This security update resolves a privately reported vulnerability in Microsoft Windows. The vulnerability could allow security feature bypass by unintentionally relaxing the...
Severity Rating: Important
Revision Note: V1.0 (January 13, 2015): V1.0 (January 13, 2015): Bulletin published.
Summary: This security update resolves a privately reported vulnerability in Microsoft Windows. The vulnerability could allow elevation of privilege if an attacker convinces a user to...
Severity Rating: Important
Revision Note: V1.0 (January 13, 2015): V1.0 (January 13, 2015): Bulletin published.
Summary: This security update resolves a privately reported vulnerability in Microsoft Windows. The vulnerability could allow security feature bypass by unintentionally relaxing the...
attacker
awareness
bulletin
configuration
dns
firewall
important
january
ldap
location
microsoft
network
patch
policy
protection
security
service
threat
update
vulnerability
Severity Rating: Important
Revision Note: V1.0 (December 9, 2014): Bulletin published.
Summary: This security update resolves four privately reported vulnerabilities in Microsoft Exchange Server. The most severe of these vulnerabilities could allow elevation of privilege if a user clicks a...
attack
bulletin
crafted url
cybersecurity
elevation
email
exchange server
important
instant messenger
link
microsoft
outlook
privilege
protection
revision
security
severity
update
vulnerabilities
web app
Severity Rating: Important
Revision Note: V1.0 (December 9, 2014): Bulletin published.
Summary: This security update resolves a publicly disclosed vulnerability in Microsoft Windows. The vulnerability could allow information disclosure if a user browses to a website containing specially crafted...
aslr
attack
browsers
bulletin
compromise
disclosure
graphics
important
information
jpeg
microsoft
patch
public
revision
security
severity
system
update
vulnerability
windows
Severity Rating: Critical
Revision Note: V1.0 (December 9, 2014): Bulletin published.
Summary: This security update resolves fourteen privately reported vulnerabilities in Internet Explorer. The most severe of these vulnerabilities could allow remote code execution if a user views a specially...
Today, we provide advance notification for the release of seven Security Bulletins. Three of these updates are rated Critical and four are rated as Important in severity. These updates are for Microsoft Windows, Internet Explorer (IE), Office and Exchange.
As per our monthly process, we’ve...
advance notification
bulletin
critical updates
cybersecurity
december 2014
deployment
exchange
important updates
information technology
internet explorer
microsoft
office
patch management
pdt
response communications
security
testing
tracey pretorius
update release
windows
Revision Note: V1.0 (December 4, 2014): Advance notification published.
Summary: This is an advance notification of security bulletins that Microsoft is intending to release on December 9, 2014
Continue reading...
Today, we released an out-of-band security update to address a vulnerability in Kerberos which could allow Elevation of Privilege. This update is for all supported versions of Windows Server and includes a defense-in-depth update for all supported versions of Windows.
We strongly encourage...
Original release date: November 19, 2014
Systems Affected
Microsoft Windows Vista, 7, 8, and 8.1
Microsoft Server 2003, Server 2008, Server 2008 R2, Server 2012, and Server 2012 R2
Overview
A remote escalation of privilege vulnerability exists in implementations of Kerberos Key Distribution...
administrator
attack
bulletin
cve
defense
domain controller
domain user
escalation
impact
kerberos
microsoft
privilege escalation
remote access
research
security
service tickets
systems affected
update
vulnerability
windows
On Tuesday, November 18, 2014, at approximately 10 a.m. PST, we will release an out-of-band security update to address a vulnerability in Windows.
We strongly encourage customers to apply this update as soon as possible, following the directions in the security bulletin.
More information...
Original release date: November 14, 2014
Systems Affected
Microsoft Windows Vista, 7, 8, 8.1, RT, and RT 8.1
Microsoft Server 2003, Server 2008, Server 2008 R2, Server 2012, and Server 2012 R2
Microsoft Windows XP and 2000 may also be affected.
Overview
A critical vulnerability in...
Severity Rating: Moderate
Revision Note: V1.0 (November 11, 2014): Bulletin published.
Summary: This security update resolves a privately reported vulnerability in Microsoft Windows. The vulnerability could allow denial of service if an attacker places a specially crafted TrueType font on a...
bulletin
compromised websites
denial of service
email threats
exploit
internet safety
it security
kernel-mode
microsoft
moderate rating
network share
november 2014
security
technical article
truetype
update
user content
vulnerability
web attack
windows