Microsoft Identity Model Extensions Token Signing Verification Privilege Escalation Vulnerability

Description Microsoft Identity Model Extensions is prone to a privilege-escalation vulnerability. An attacker can exploit this issue to gain elevated privileges. Technologies Affected Microsoft .NET Framework 4.5 Microsoft .NET Framework 4.5.1 Microsoft .NET Framework 4.5.2 Microsoft...

MS15-041: Description of the security update for the .NET Framework 4.5, 4.5.1, and 4.5.2 on Windows 8, Windows RT, and Windows Server 2012: April 14, 2015

MS15-041: Description of the security update for the .NET Framework 4.5, 4.5.1, and 4.5.2 on Windows 8, Windows RT, and Windows Server 2012: April 14, 2015 View products that this article applies to. May 12, 2015 This security update has been re-released and contains updated files. We recommend...

MS15-048: Description of the security update for the .NET Framework 4.5, 4.5.1, and 4.5.2 on Windows 8, Windows RT, and Windows Server 2012: May 12, 2015

MS15-048: Description of the security update for the .NET Framework 4.5, 4.5.1, and 4.5.2 on Windows 8, Windows RT, and Windows Server 2012: May 12, 2015 View products that this article applies to. Introduction This update resolves vulnerabilities in the Microsoft .NET Framework. These...

MS15-041: Description of the security update for the .NET Framework 4.5.1 and 4.5.2 on Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2: April 14, 2015

MS15-041: Description of the security update for the .NET Framework 4.5.1 and 4.5.2 on Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2: April 14, 2015 View products that this article applies to. Introduction This update resolves a vulnerability in the Microsoft .NET Framework that could...

MS15-041: Description of the security update for the .NET Framework 3.5 on Windows 8 and Windows Server 2012: April 14, 2015

MS15-041: Description of the security update for the .NET Framework 3.5 on Windows 8 and Windows Server 2012: April 14, 2015 View products that this article applies to. Introduction This update resolves a vulnerability in the Microsoft .NET Framework that could allow information disclosure if an...

MS15-041: Description of the security update for the .NET Framework 3.5.1 on Windows 7 Service Pack 1 and Windows Server 2008 R2 Service Pack 1: April 14, 2015

MS15-041: Description of the security update for the .NET Framework 3.5.1 on Windows 7 Service Pack 1 and Windows Server 2008 R2 Service Pack 1: April 14, 2015 View products that this article applies to. Summary This update resolves a vulnerability in the Microsoft .NET Framework that could allow...

MS15-041: Description of the security update for the .NET Framework 4 on Windows Server 2003, Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2: April 14, 2015

MS15-041: Description of the security update for the .NET Framework 4 on Windows Server 2003, Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2: April 14, 2015 View products that this article applies to. Introduction This update resolves a vulnerability in the Microsoft .N...

MS15-041: Description of the security update for the .NET Framework 3.5 on Windows 8.1 and Windows Server 2012 R2: April 14, 2015

MS15-041: Description of the security update for the .NET Framework 3.5 on Windows 8.1 and Windows Server 2012 R2: April 14, 2015 View products that this article applies to. Introduction This update resolves a vulnerability in the Microsoft .NET Framework that could allow information disclosure i...

MS15-048: Description of the security update for the .NET Framework 3.5 on Windows 8.1 and Windows Server 2012 R2: May 12, 2015

MS15-048: Description of the security update for the .NET Framework 3.5 on Windows 8.1 and Windows Server 2012 R2: May 12, 2015 View products that this article applies to. Introduction This update resolves vulnerabilities in the Microsoft .NET Framework. These vulnerabilities allow denial of...

MS15-048: Description of the security update for the .NET Framework 3.5 on Windows 8 and Windows Server 2012: May 12, 2015

MS15-048: Description of the security update for the .NET Framework 3.5 on Windows 8 and Windows Server 2012: May 12, 2015 View products that this article applies to. Introduction This update resolves vulnerabilities in the Microsoft .NET Framework. These vulnerabilities allow denial of service...

MS14-053: Description of the security update for the .NET Framework 3.5.1 for Windows 7 Service Pack 1 and Windows Server 2008 R2 Service Pack 1: September 9, 2014

MS14-053: Description of the security update for the .NET Framework 3.5.1 for Windows 7 Service Pack 1 and Windows Server 2008 R2 Service Pack 1: September 9, 2014 View products that this article applies to. Introduction This update resolves a vulnerability in the Microsoft .NET Framework that...

MS14-046: Description of the security update for the .NET Framework 3.5 in Windows 8 and Windows Server 2012: August 12, 2014

MS14-046: Description of the security update for the .NET Framework 3.5 in Windows 8 and Windows Server 2012: August 12, 2014 View products that this article applies to.This update resolves a vulnerability in the Microsoft .NET Framework that could bypass the Address Space Layout Randomization AS...

MS14-053: Description of the security update for the .NET Framework 3.5.1 for Windows 7 Service Pack 1 and Windows Server 2008 R2 Service Pack 1: September 9, 2014

MS14-053: Description of the security update for the .NET Framework 3.5.1 for Windows 7 Service Pack 1 and Windows Server 2008 R2 Service Pack 1: September 9, 2014 View products that this article applies to. Introduction This update resolves a vulnerability in the Microsoft .NET Framework that...

MS14-057: Description of the security update for the .NET Framework 3.5.1 for Windows 7 Service Pack 1 and Windows Server 2008 R2 Service Pack 1: October 14, 2014

MS14-057: Description of the security update for the .NET Framework 3.5.1 for Windows 7 Service Pack 1 and Windows Server 2008 R2 Service Pack 1: October 14, 2014 View products that this article applies to. Introduction This security update resolves a security feature bypass vulnerability that...

MS14-057: Description of the security update for the .NET Framework 2.0 Service Pack 2 for Windows Vista Service Pack 2 and Windows Server 2008 Service Pack 2: October 14, 2014

MS14-057: Description of the security update for the .NET Framework 2.0 Service Pack 2 for Windows Vista Service Pack 2 and Windows Server 2008 Service Pack 2: October 14, 2014 View products that this article applies to. Introduction This security update resolves a security feature bypass...

MS14-046: Description of the security update for the .NET Framework 3.5 on Windows 8.1 and Windows Server 2012 R2: August 12, 2014

MS14-046: Description of the security update for the .NET Framework 3.5 on Windows 8.1 and Windows Server 2012 R2: August 12, 2014 View products that this article applies to.This update resolves a vulnerability in the Microsoft .NET Framework that could bypass the Address Space Layout Randomizati...

MS14-046: Description of the security update for the .NET Framework 3.5 on Windows 8 and Windows Server 2012: August 12, 2014

MS14-046: Description of the security update for the .NET Framework 3.5 on Windows 8 and Windows Server 2012: August 12, 2014 View products that this article applies to.This update resolves a vulnerability in the Microsoft .NET Framework that could bypass the Address Space Layout Randomization AS...

MS14-026: Description of the security update for the .NET Framework 3.5.1 on Windows 7 Service Pack 1 and Windows Server 2008 R2 Service Pack 1: May 13, 2014

MS14-026: Description of the security update for the .NET Framework 3.5.1 on Windows 7 Service Pack 1 and Windows Server 2008 R2 Service Pack 1: May 13, 2014 View products that this article applies to. Introduction This update resolves a vulnerability in the Microsoft .NET Framework that could...

Description of the security update for the .NET Framework 4.5.2 on Windows 7 Service Pack 1 and Windows Server 2008 R2 Service Pack 1: May 13, 2014

Description of the security update for the .NET Framework 4.5.2 on Windows 7 Service Pack 1 and Windows Server 2008 R2 Service Pack 1: May 13, 2014 View products that this article applies to. Introduction This update is for the Microsoft .NET Framework to disable RC4 in Transport Layer Security T...

MS14-026: Description of the security update for the .NET Framework 3.5 on Windows 8.1 and Windows Server 2012 R2 for systems that have update 2919355 installed: May 13, 2014

MS14-026: Description of the security update for the .NET Framework 3.5 on Windows 8.1 and Windows Server 2012 R2 for systems that have update 2919355 installed: May 13, 2014 View products that this article applies to. Introduction This update resolves a vulnerability in the Microsoft .NET...