About this tag
The revision note tag on WindowsForum.com covers Microsoft security advisories and their versioned updates. These threads document changes to advisory documents, such as initial publication or revisions that announce availability changes, like moving an update from the Microsoft Download Center to Microsoft Update and WSUS. Topics include cryptographic settings, such as Diffie-Hellman key exchange and cipher suite priority, as well as guidance for securing Active Directory accounts used by Azure AD Connect, safely opening Office documents with Dynamic Data Exchange fields, and the deprecation of SHA-1 certificates in Microsoft Edge and Internet Explorer. The tag is useful for IT professionals tracking the evolution of Microsoft security guidance and update availability.
-
Windows Adds Stronger Diffie-Hellman TLS Key Support
Revision Note: V1.0 (September 13, 2016): Advisory published. Summary: Continue reading...- News
- Security
- advisory diffie-hellman extended security updates key exchange microsoft revision note technology version 1.0
- Replies: 0
- Forum: Security Alerts
-
3042058 - Update to Default Cipher Suite Priority Order - Version: 1.1
Revision Note: V1.1 (October 13, 2015): Advisory revised to announce that the Default Cipher Suite Prioritization update (3042058), originally released May 12, 2015 via the Microsoft Download Center (DLC) only, is now also available via Microsoft Update (MU) and Windows Server Update Services...- News
- Security
- advisory cipher cryptography download center encryption microsoft priority revision note security server 2008 server 2012 update version 1.0 windows 7 windows 8 windows 8.1 windows server windows server 2012 r2 windows update wsus
- Replies: 0
- Forum: Security Alerts
-
4056318: Azure AD Connect AD DS Account Security Settings
Revision Note: V1.0 (December 12, 2017): Advisory published. Summary: Microsoft is releasing this security advisory to provide information regarding security settings for the AD DS (Active Directory Domain Services) account used by Azure AD Connect for directory synchronization. This advisory...- News
- Security
- 2017 account management account security active directory advisory azure ad directory services file synchronization guidance it administration microsoft on-premises revision note security security advisory settings sync technet version 1.0
- Replies: 0
- Forum: Security Alerts
-
Microsoft Office DDE Advisory Reduces Document Attack Risk
Revision Note: V1.0 (November 8, 2017): Advisory published. Summary: Microsoft is releasing this security advisory to provide information regarding security settings for Microsoft Office applications. This advisory provides guidance on what users can do to ensure that these applications are...- News
- Security
- 2017 advisory application dde documents dynamic data exchange field guidance information microsoft office process revision note safety security settings support update user tips v1.0
- Replies: 0
- Forum: Security Alerts
-
4010323 - Deprecation of SHA-1 for SSL/TLS Certificates in Microsoft Edge and Internet...
Revision Note: V1.0 (May 9, 2017): Advisory published. Summary: Beginning May 9, 2017, Microsoft released updates to Microsoft Edge and Internet Explorer 11 to block sites that are protected with a SHA-1 certificate from loading and displays an invalid certificate warning. This change will only...- News
- Security
- advisory certificate management certificate warning deprecation enterprise certificates extended security updates internet explorer microsoft edge migration revision note self-signed certificates sha-2 sha1 ssl certificates tech news tls certificates trusted root update web security windows
- Replies: 0
- Forum: Security Alerts
-
Microsoft Malware Protection Engine Gets Critical Security Fix
Severity Rating: Critical Revision Note: V1.0 (May 8, 2017): Advisory published. Summary: Microsoft is releasing this security advisory to inform customers that an update to the Microsoft Malware Protection Engine addresses a security vulnerability that was reported to Microsoft. Continue...- News
- Security
- 2017 advisory critical engine extended security updates malware microsoft revision note update vulnerability
- Replies: 0
- Forum: Security Alerts
-
MS17-007 - Critical: Cumulative Security Update for Microsoft Edge (4013071) - Version: 1.0
Severity Rating: Critical Revision Note: V1.0 (March 14, 2017): Bulletin published. Summary: This security update resolves vulnerabilities in Microsoft Edge. The most severe of the vulnerabilities could allow remote code execution if a user views a specially crafted webpage using Microsoft Edge...- News
- Security
- critical cumulative data security exploit extended security updates march microsoft edge ms17-007 remote code execution revision note system control update bulletin user rights vulnerability webpage
- Replies: 0
- Forum: Security Alerts
-
MS17-021 - Important: Security Update for Windows DirectShow (4010318) - Version: 1.0
Severity Rating: Important Revision Note: V1.0 (March 14, 2017): Bulletin published. Summary: This security update resolves a vulnerability in Microsoft Windows. The vulnerability could allow an Information Disclosure if Windows DirectShow opens specially crafted media content that is hosted on...- News
- Security
- 4010318 attack bulletin directshow exploitation information disclosure malicious website march media content microsoft patch revision note security security bulletin system compromise update version 1.0 vulnerability windows
- Replies: 0
- Forum: Security Alerts
-
ASP.NET Core MVC 1.1.0: Update Guidance for DoS Flaw
Revision Note: V1.0 (January 27, 2017): Advisory published. Summary: Microsoft is releasing this security advisory to provide information about a vulnerability in the public versions of ASP.NET Core MVC 1.1.0. This advisory also provides guidance on what developers can do to update their...- News
- Security
- advisory asp.net core mvc denial of service developers guidance january microsoft revision note security update version 1.0 vulnerability
- Replies: 0
- Forum: Security Alerts
-
3214296 - Vulnerabilities in Identity Model Extensions Token Signing Verification Could...
Revision Note: V1.0 (January 10, 2017): Advisory published. Summary: Microsoft is releasing this security advisory to provide information about a vulnerability in the public version of Identity Model Extensions 5.1.0. This advisory also provides guidance on what developers can do to help ensure...- News
- Security
- 5.1 advisory app development application bug fixes developers extensions guidance identity model information microsoft public versions revision note security security advisory technet token signing update vulnerability
- Replies: 0
- Forum: Security Alerts
-
MS17-003 - Critical: Security Update for Adobe Flash Player (3214628) - Version: 1.0
Severity Rating: Critical Revision Note: V1.0 (January 10, 2017): Bulletin published. Summary: This security update resolves vulnerabilities in Adobe Flash Player when installed on all supported editions of Windows 8.1, Windows Server 2012, Windows Server 2012 R2, Windows RT 8.1, and Windows 10...- News
- Security
- adobe flash bulletin critical january ms17-003 patch revision note security server 2012 software support technet update vulnerability windows 10 windows 8.1 windows rt windows server
- Replies: 0
- Forum: Security Alerts
-
MS17-JAN - Microsoft Security Bulletin Summary for January 2017 - Version: 1.1
Revision Note: V1.1 (January 10, 2017): Bulletin Summary revised to change the severity of CVE-2017-0003 to Important. This is an informational change only Summary: This bulletin summary lists security bulletins released for January2017 Continue reading...- News
- Security
- bulletin cve-2017-0003 important january microsoft revision note security security updates summary version 1.0
- Replies: 0
- Forum: Security Alerts
-
MS16-149 - Important: Security Update for Microsoft Windows (3205655) - Version: 1.0
Severity Rating: Important Revision Note: V1.0 (December 13, 2016): Bulletin published. Summary: This security update resolves vulnerabilities in Microsoft Windows. The most severe of the vulnerabilities could allow elevation of privilege if a locally authenticated attacker runs a specially...- News
- Security
- march 2016 microsoft ms16-149 patch management privilege escalation revision note security update vulnerability windows
- Replies: 0
- Forum: Security Alerts
-
MS16-155 - Important: Security Update for .NET Framework (3205640) - Version: 1.0
Severity Rating: Important Revision Note: V1.0 (December 13, 2016): Summary: This security update resolves a vulnerability in Microsoft .NET 4.6.2 Framework’s Data Provider for SQL Server. A security vulnerability exists in Microsoft .NET Framework 4.6.2 that could allow an attacker to access...- News
- Security
- encrypted extended security updates important microsoft ms16-155 net framework revision note security sql server update vulnerability
- Replies: 0
- Forum: Security Alerts
-
MS16-154 - Critical: Security Update for Adobe Flash Player (3209498) - Version: 1.0
Severity Rating: Critical Revision Note: V1.0 (December 13, 2016): Bulletin published. Summary: This security update resolves vulnerabilities in Adobe Flash Player when installed on all supported editions of Windows 8.1, Windows Server 2012, Windows Server 2012 R2, Windows RT 8.1, and Windows...- News
- Security
- adobe bulletin critical december 2016 flash player ms16-154 patch revision note security server 2012 software security supported editions technet update vulnerability windows 10 windows 8.1 windows rt 8.1
- Replies: 0
- Forum: Security Alerts
-
MS16-144 - Critical: Cumulative Security Update for Internet Explorer (3204059) - Version: 1.0
Severity Rating: Critical Revision Note: V1.0 (December 13, 2016): Bulletin published. Summary: This security update resolves vulnerabilities in Internet Explorer. The most severe of the vulnerabilities could allow remote code execution if a user views a specially crafted webpage using Internet...- News
- Security
- account management admin rights attack bulletin control critical cumulative data security december 2016 exploit internet explorer ms16-144 remote code execution revision note security update user rights vulnerability webpage
- Replies: 0
- Forum: Security Alerts
-
MS16-147 - Critical: Security Update for Microsoft Uniscribe (3204063) - Version: 1.0
Severity Rating: Critical Revision Note: V1.0 (December 13, 2016): Bulletin published. Summary: This security update resolves a vulnerability in Windows Uniscribe. The vulnerability could allow remote code execution if a user visits a specially crafted website or opens a specially crafted...- News
- Security
- bug fixes critical december 2016 extended security updates memory management microsoft ms16-147 patch remote code execution revision note security technical bulletin uniscribe update user rights vulnerability web security windows
- Replies: 0
- Forum: Security Alerts
-
MS16-148 - Critical: Security Update for Microsoft Office (3204068) - Version: 1.0
Severity Rating: Critical Revision Note: V1.0 (December 13, 2016): Bulletin published Summary: This security update resolves vulnerabilities in Microsoft Office. The most severe of the vulnerabilities could allow remote code execution if a user opens a specially crafted Microsoft Office file...- News
- Security
- arbitrary code critical cybersecurity december 2016 exploitation extended security updates information security malware prevention microsoft office ms16-148 patch remote code execution revision note software update system admin technical bulletin user impact user rights vulnerability
- Replies: 0
- Forum: Security Alerts
-
MS16-130 - Critical: Security Update for Microsoft Windows (3199172) - Version: 1.0
Severity Rating: Critical Revision Note: V1.0 (November 8, 2016): Bulletin published. Summary: This security update resolves vulnerabilities in Microsoft Windows. The most severe of the vulnerabilities could allow elevation of privilege if a locally authenticated attacker runs a specially...- News
- Security
- bulletin critical microsoft ms16-130 november privilege revision note security threat mitigation update vulnerability windows
- Replies: 0
- Forum: Security Alerts
-
MS16-141 - Critical: Security Update for Adobe Flash Player (3202790) - Version: 1.0
Severity Rating: Critical Revision Note: V1.0 (November 8, 2016): Bulletin published. Summary: This security update resolves vulnerabilities in Adobe Flash Player when installed on all supported editions of Windows 8.1, Windows Server 2012, Windows Server 2012 R2, Windows RT 8.1, and Windows 10...- News
- Security
- adobe bulletin critical flash player ms16-141 november patch revision note security security bulletin server 2012 software update support update vulnerability windows 10 windows 8.1 windows rt 8.1 windows server 2012 r2
- Replies: 0
- Forum: Security Alerts