ms15-074

MS15-074 is a security bulletin published by Microsoft on July 14, 2015, addressing a vulnerability in the Windows Installer service. This vulnerability could allow elevation of privilege if the Windows Installer service improperly runs custom action scripts. An attacker would need to first compromise a user logged on to the target system to exploit this flaw, potentially gaining full administrative rights to install programs, view or modify data, or create new accounts. The update is rated Important and applies to affected versions of Microsoft Windows. Discussions on WindowsForum.com cover the bulletin's details, including the severity rating and revision notes.