ms12-066

The ms12-066 tag covers a Microsoft security bulletin addressing a vulnerability in the HTML Sanitization Component. This issue affects Microsoft Office, Communications Platforms, Server software, and Office Web Apps. The vulnerability could allow elevation of privilege if an attacker sends specially crafted content or a user clicks a malicious URL. The update resolves a publicly disclosed flaw. The bulletin was revised in January 2014 to include a detection change for update 2687356, which is offered as 2687442. Users who have already applied the update do not need further action.