Microsoft's May 2024 Patch Tuesday updates have addressed critical vulnerabilities in .NET 6.0.31 (KB5039843) and .NET 7.0.20 (KB5039844), among other products. These updates are crucial for enhancing the security and stability of systems running these frameworks. .NET 6.0.31 (KB5039843) This...
.net 6
application security
codeexecution
cve-2024-30045
cve-2024-30051
elevation of privilege
exploits
information disclosure
microsoft
microsoft security
net 7
net framework
patch tuesday
protection
remote codeexecution
security
system stability
updates
visual studio
vulnerabilities
Original release date: January 20, 2020<br/><h3>Summary</h3><p>On January 19, 2020, Citrix released firmware updates for Citrix Application Delivery Controller (ADC) and Citrix Gateway versions 11.1 and 12.0 to address CVE-2019-19781. Citrix expects to release updates for other vulnerable...
Microsoft announces the extension of the Microsoft Office Bounty Program through December 31, 2017. This extension is retroactive for any cases submitted during the interim.
The engagement we have had with the security community has been great and we are looking to continue that collaboration...
bounty program
codeexecution
collaboration
community
early access
innovation
macro security
microsoft
office
office insider
outlook
payout
protect customers
protected view
quality improvement
security
submission
testing
user engagement
vulnerabilities
We’ve engineered Office to be secure by design and continually invest in enhancing its security capabilities. In the spirit of maintaining a high security bar in Office, we’re launching the Bug Bounty Program for Office Insider Builds on Windows.
The Office Bug Bounty Program complements our...
Severity Rating: Critical
Revision Note: V1.0 (March 14, 2017): Bulletin published.
Summary: This security update resolves vulnerabilities in Microsoft Windows, Microsoft Office, Skype for Business, Silverlight and Microsoft Lync. The most serious of these vulnerabilities could allow remote code...
bulletin
codeexecution
critical
documents
graphics
lync
march 2017
microsoft
ms17-013
office
remote
revision
security
silverlight
skype
update
user rights
vulnerabilities
websites
windows
Some of the most important security features in modern web browsers are those that you never actually see as you browse the web. These security features work behind the scenes to protect you from browser-based vulnerabilities that could be abused by hackers to compromise your device or personal...
Severity Rating: Critical
Revision Note: V1.0 (December 13, 2016): Bulletin published.
Summary: This security update resolves vulnerabilities in Microsoft Windows. The most severe of the vulnerabilities could allow remote code execution if a user either visits a specially crafted website or...
administrative
codeexecution
critical
december 2016
graphics component
microsoft
ms16-146
patch
remote codeexecution
revision note
security bulletin
security risks
security update
software vulnerability
system security
update
user rights
vulnerability
windows
Severity Rating: Critical
Revision Note: V1.0 (October 11, 2016): Bulletin published.
Summary: This security update resolves vulnerabilities in Microsoft Windows, Microsoft Office, Skype for Business, Silverlight and Microsoft Lync. The most serious of these vulnerabilities could allow remote...
administrative
codeexecution
critical
graphics
microsoft office
microsoft windows
ms16-120
october 2016
patch management
remote codeexecution
revision note
security
security bulletin
silverlight
skype
system security
update
user rights
vulnerabilities
A security vulnerability exists in Microsoft Office 2016 64-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability.
Link Removed
A security vulnerability exists in Microsoft Office 2016 32-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability.
Link Removed
Severity Rating: Critical
Revision Note: V1.0 (January 13, 2015): V1.0 (January 13, 2015): Bulletin published.
Summary: This security update resolves a privately reported vulnerability in Microsoft Windows. The vulnerability could allow remote code execution if an attacker sends specially...
bulletin
codeexecution
critical
exploit
microsoft
networking
operating system
patch
remote
remote access
risk
security update
server 2003
telnet
update
vista
vulnerability
windows
windows server
Severity Rating: Critical
Revision Note: V1.0 (October 14, 2014): Bulletin published.
Summary: This security update resolves fourteen privately reported vulnerabilities in Internet Explorer. The most severe of these vulnerabilities could allow remote code execution if a user views a specially...
Severity Rating: Important
Revision Note: V1.0 (August 12, 2014): Bulletin published.
Summary: This security update resolves a privately reported vulnerability in Microsoft Windows. The vulnerability could allow security feature bypass if an attacker uses the vulnerability in conjunction with...
Severity Rating: Critical
Revision Note: V2.0 (January 14, 2014): Rereleased bulletin to announce the reoffering of the 2862330 update to systems running Windows 7 or Windows Server 2008 R2. See the Update FAQ for details.
Summary: This security update resolves seven privately reported...
bulletin
codeexecution
control
critical
drivers
exploitation
font files
january 2014
kernel
microsoft
patch
remote
rereleased
security
server 2008
update
update faq
vulnerabilities
windows
windows 7
Today we released Security Advisory 2953095 to notify customers of a vulnerability in Microsoft Word. At this time, we are aware of limited, targeted attacks directed at Microsoft Word 2010. An attacker could cause remote code execution if someone was convinced to open a specially crafted Rich...
There are times when we get too close to a topic. We familiarize ourselves with every aspect and nuance, but fail to recognize not everyone else has done the same. Whether you consider this myopia, navel-gazing, or human nature, the effect is the same. I recognized this during the recent webcast...
advisory
asp.net
authenticode
bulletin
codeexecution
cumulative update
cves
december 2013
deployment
internet explorer
it staff
microsoft
mitigation
patch management
remote codeexecution
security update
severity
update tuesday
vulnerability
windows
Severity Rating: Important
Revision Note: V1.1 (July 9, 2013): Bulletin revised to announce a detection change in the Windows Vista packages for the 2579686 update to correct a Windows Update reoffering issue. This is a detection change only. Customers who have already successfully updated their...
Severity Rating: Critical
Revision Note: V2.1 (July 9, 2013): Bulletin revised to announce a detection change that excludes Windows 7 language packs from the 2485376 update for Windows XP Professional x64 Edition Service Pack 2. This is a detection change only. Customers who have already...
attack
cff driver
codeexecution
critical
detection
e-mail
execution
font
instant messenger
ms11-007
opentype
patch
remote
security
update
user action
vulnerability
web security
windows 7
windows xp