September 2018 Preview of the Quality Rollups for .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, and 4.7.2 for Windows 7 SP1 and Windows Server 2008 R2 SP1 (KB 4458611)

September 2018 Preview of the Quality Rollups for .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, and 4.7.2 for Windows 7 SP1 and Windows Server 2008 R2 SP1 KB 4458611 Notice This update is included in the Security and Quality Rollup that's dated October 9, 2018. This update was...

Microsoft Visual Studio Information Disclosure Vulnerability

Microsoft Visual Studio is a family of development tool suites from Microsoft and a largely complete set of development tools that includes most of the tools needed throughout the software lifecycle. An information disclosure vulnerability exists in Microsoft Visual Studio 2010 SP1 and Visual...

Microsoft Windows GDI Information Disclosure Vulnerability (CNVD-2018-17082)

Microsoft Windows 7 SP1 and others are a series of operating systems released by Microsoft.Windows Graphics Device Interface GDI is one of the graphics device interfaces. An information disclosure vulnerability exists in Microsoft Windows GDI. A remote attacker could exploit this vulnerability to...

Microsoft SQL Server Buffer Overflow Vulnerability

Microsoft SQL Server is the United States Microsoft Microsoft company develops and maintains a set of applications in the Microsoft Windows system under the large commercial database system. A buffer overflow vulnerability exists in Microsoft SQL Server 2017, SQL Server SP1 and SP2. A remote...

Microsoft Windows GDI+ Component Remote Code Execution Vulnerability

Microsoft Windows 7 SP1 and Windows Server 2008 are a family of operating systems released by Microsoft Corporation.Microsoft Windows 7 SP1 is a set of operating systems for personal computers.Windows Server 2008 is a set of server operating systems.... Windows Graphics Device Interface GDI is on...

Trend Micro OfficeScan Out-of-Bounds Read Information Disclosure Vulnerability

Trend Micro OfficeScan provides protection against modern threats through anti-malware, ransomware protection, memory inspection, device control and and command and control C&C traffic. An out-of-bounds read information disclosure vulnerability exists in Trend Micro OfficeScan version 11.0 SP1 an...

CVE-2017-9275

NetIQ Identity Reporting, in versions prior to 5.5 Service Pack 1, is susceptible to an XSS attack...

Unbootable state for AMD devices in Windows 7 SP1 and Windows Server 2008 R2 SP1

Unbootable state for AMD devices in Windows 7 SP1 and Windows Server 2008 R2 SP1 Summary This update resolves the following issue: Microsoft has received reports of some customers on a small subset of older AMD processors getting into an unbootable state after you install January 3, 2018—KB405689...

Convenience rollup update for Windows 7 SP1 and Windows Server 2008 R2 SP1

Convenience rollup update for Windows 7 SP1 and Windows Server 2008 R2 SP1 Introduction This article describes a convenience rollup for Windows 7 Service Pack 1 SP1-based and Windows Server 2008 R2 SP1-based computers. This rollup package includes most updates that were released after the release...

Microsoft Windows GDI elevation of privilege vulnerability (CNVD-2018-06285)

Microsoft Windows is a series of operating systems released by Microsoft Corporation in the U.S. The Windows Graphics Device Interface GDI is one of the application program interfaces, whose main task is to be responsible for the exchange of information between the system and the graphics program...

Microsoft Internet Explorer Memory Corruption Vulnerability (CNVD-2018-07326)

Microsoft Windows 7 SP1 and others are a series of operating systems from Microsoft Corporation, U.S.A. Internet Explorer IE is one of the web browsers that comes with the Windows operating system. A remote code execution vulnerability exists in Microsoft IE 9, 10, and 11. A remote attacker can...

Microsoft Identity Manager Elevation of Privilege Vulnerability

Microsoft Identity Manager 2016 SP1 is a local identity management and access management solution from Microsoft Corporation USA. The solution supports synchronizing identities across directories, databases, and applications, and improves administrative security through policies, privileged acces...

CVE-2018-0755

The Microsoft Windows Embedded OpenType EOT font engine in Microsoft Windows 7 SP1 and Windows Server 2008 R2 allows information disclosure, due to how the Windows EOT font engine handles embedded fonts, aka "Windows EOT Font Engine Information Disclosure Vulnerability". This CVE ID is unique fro...

Microsoft Embedded OpenType Font Engine Information Disclosure Vulnerability

Microsoft Windows 7 and Windows Server 2008 are both products of Microsoft Corporation. The former is an operating system for personal computers and the latter is a server operating system.Windows Embedded OpenType EOT font engine is one of the font engines. An information disclosure vulnerabilit...

Microsoft Windows Kernel Elevation of Privilege Vulnerability (CNVD-2018-00516)

Microsoft Windows 7 SP1 and others are products of Microsoft Corporation in the United States. Microsoft Windows 7 SP1 is an operating system for personal computers; Windows Server 2008 SP2 is a server operating system. kernel is a kernel used in it. An elevation of privilege vulnerability exists...

Microsoft Windows Color Management Module Information Disclosure Vulnerability

Microsoft Windows is a series of operating systems released by Microsoft Corporation in the U.S. Color Management Module Icm32.dll is one of these color management modules. An information disclosure vulnerability exists in Color Management Module Icm32.dll in Microsoft Windows 7 SP1, Windows Serv...

CVE-2018-0741

The Color Management Module Icm32.dll in Windows 7 SP1 and Windows Server 2008 SP2 and R2 SP1 allows an information disclosure vulnerability due to the way objects are handled in memory, aka "Microsoft Color Management Information Disclosure Vulnerability"...

June 2016 update rollup for Windows 7 SP1 and Windows Server 2008 R2 SP1

June 2016 update rollup for Windows 7 SP1 and Windows Server 2008 R2 SP1 This update rollup is superseded by July 2016 update rollup for Windows 7 SP1 and Windows Server 2008 R2 SP1 KB3172605 that was released on July 21, 2016. The June 2016 update rollup package for Windows 7 Service Pack 1 SP1...

Windows 8.1 and Windows 7 SP1 end of free upgrade offer notification

Windows 8.1 and Windows 7 SP1 end of free upgrade offer notification Summary If you have Windows 8.1 or Windows 7 with Service Pack 1 SP1, the following full-screen notification might appear on your computer: Sorry to interrupt, but this is important. Windows 10 free upgrade offer ends July 29...

CVE-2017-11786

Skype for Business in Microsoft Lync 2013 SP1 and Skype for Business 2016 allows an attacker to steal an authentication hash that can be reused elsewhere, due to how Skype for Business handles authentication requests, aka "Skype for Business Elevation of Privilege Vulnerability."...