patching

  1. MS15-127 - Critical: Security Update for Microsoft Windows DNS to Address Remote Code...

    Severity Rating: Critical Revision Note: V1.0 (December 8, 2015): Bulletin published. Summary: This security update resolves a vulnerability in Microsoft Windows. The vulnerability could allow remote code execution if an attacker sends specially crafted requests to a DNS server. Continue reading...
  2. MS15-135 - Important: Security Update for Windows Kernel-Mode Drivers to Address Elevation...

    Severity Rating: Important Revision Note: V1.0 (December 8, 2015): Bulletin published. Summary: This security update resolves vulnerabilities in Microsoft Windows. The vulnerabilities could allow elevation of privilege if an attacker logs on to a target system and runs a specially crafted...
  3. Update for Windows Server 2008 R2 x64 Edition (KB2999226)

    Install this update to resolve issues in Windows. Link Removed
  4. TA15-119A: Top 30 Targeted High Risk Vulnerabilities

    Original release date: April 29, 2015 Systems Affected Systems running unpatched software from Adobe, Microsoft, Oracle, or OpenSSL. Overview Cyber threat actors continue to exploit unpatched software to conduct attacks against critical infrastructure organizations. As many as 85 percent of...
  5. TA14-318A: Microsoft Secure Channel (Schannel) Vulnerability (CVE-2014-6321)

    Original release date: November 14, 2014 Systems Affected Microsoft Windows Vista, 7, 8, 8.1, RT, and RT 8.1 Microsoft Server 2003, Server 2008, Server 2008 R2, Server 2012, and Server 2012 R2 Microsoft Windows XP and 2000 may also be affected. Overview A critical vulnerability in...
  6. Microsoft ASP.NET MVC Security Update MS14-059 (KB2990942)

    This security update addresses the security vulnerability MS14-059 for Microsoft ASP.NET MVC 2.0, MVC 3.0, MVC 4.0, MVC 5.0, and MVC 5.1 (KB2990942) Link Removed
  7. October 2014 Updates

    Today, as part of Update Tuesday, we released eight security updates – three rated Critical and five rated Important - to address 24 Common Vulnerabilities & Exposures (CVEs) in Windows, Office, .NET Framework, .ASP.NET, and Internet Explorer (IE). We encourage you to apply all of these updates...
  8. Surprise patch KB 3005628 bodes ill for Microsoft's patching strategy

    Yesterday Microsoft released patch KB 3005628 for Windows 8, 8.1, Server 2012, and Server 2012 R2. It's a trivial, non-security patch. Continue reading...
  9. MS14-047: Vulnerability in LRPC could allow security feature bypass: August 12, 2014

    Continue reading...
  10. Advance Notification for July 2013 - Version: 1.0

    Revision Note: Advance Notification published. Summary: This is an advance notification of security bulletins that Microsoft is intending to release on July 9, 2013. More...
  11. TA13-024A: Content Management Systems Security and Associated Risks

    Original release date: January 24, 2013 | Last revised: February 06, 2013 Systems Affected Web-based Content Management Systems, specifically Joomla! installations. Overview This Alert was developed as a collaborative effort between Public Safety Canada and the U.S. Link...
  12. Windows 7 Is your browser safe?

    Once again, MS continues to prove they are taking security seriously and that Internet Explorer does not deserve being bashed or discarded due to security. Note that NSSLabs is a highly respected, independent testing facility. Link Removed Link Removed Note these finding do NOT...
  13. B

    Windows 7 Windows 7 update failure

    Since August I cannot install Windows 7 updates. Everything seem to go OK until "restart Computer" The installation gets to 16% then hangs and "Reverting back" message appears. I now have 11 updates but don't know what to do. Is this something I can fix ? Thanks
  14. MS12-061 - Important : Vulnerability in Visual Studio Team Foundation Server Could Allow Elevation o

    Severity Rating: Important Revision Note: V1.0 (September 11, 2012): Bulletin published. Summary: This security update resolves a privately reported vulnerability in Visual Studio Team Foundation Server. The vulnerability could allow elevation of privilege if a user clicks...
  15. December 2011 Out-Of-Band Security Bulletin Webcast Q&A

    Hosts: Jonathan Ness, Security Development Manager, MSRC Pete Voss, Sr. Response Communications Manager, Trustworthy Computing Website: TechNet/Security Chat Topic: December 2011 Out-Of-Band Security Bulletin Release Date...
  16. Microsoft patching 34 vulnerabilities tomorrow

    According to a news item on the Fudzilla site: Reference
  17. P

    programs secured

    I have used Secunia without incident for years and it alerts me to any programs that are a threat, end of life, or need patching. I think it woud solve many of the problems I have read on this page. Peter
  18. P

    Windows 7 Windows 7 OCSP malformed request

    Hi, I couldn't get OCSP revocation check to work on Windows 7. I installed my self-signed Root and Intermediate certificates (generated using openssl 0.9.8) on my Windows 7 machine. I then go to Internet Explorer and type in the https://....com:4440. The port sends back a leaf certificate...
  19. S

    Windows 7 Vista / 7 Gadgets Difference.

    Greetings, I was wondering, if someone could try to explain me, what's the biggest difference between Windows Vista and Windows 7 gadgets / sidebar applications. You see, there're some gadgets out there, which were originally designed for Windows Vista and still work for Windows 7, but others...
  20. MS10-097 - Important: Insecure Library Loading in Internet Connection Signup Wizard Could Allow Remo

    Severity Rating: Important - Revision Note: V1.0 (December 14, 2010): Bulletin published.Summary: This security update resolves a publicly disclosed vulnerability in the Internet Connection Signup Wizard of Microsoft Windows. This security update is rated Important for all supported editions of...