PT-2017-1657 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions prior to the fixed version Description: The issue is related to the Graphics Device Interface GDI in Windows, which has insufficient access restrictions. This can be exploited by a local attacker to gain elevated...

KLA10998 Information disclosure vulnerability in Microsoft Windows Media Player

An improper handling of objects in memory was found in Microsoft Windows Media Player. By exploiting this vulnerability malicious users can obtain sensitive information. This vulnerability can be exploited remotely via a specially designed website. Original advisories Microsoft Security Update...

KLA10984 Privilege escalation vulnerabilities in Windows kernel

Multiple serious vulnerabilities have been found in Microsoft Windows kernel. Malicious users can exploit these vulnerabilities to gain privileges. Below is a complete list of vulnerabilities: 1. An improper check of a buffer length prior to copying memory to the buffer can be exploited remotely ...

KLA10988 Information disclosure vulnerability in Windows DirectShow

An improper objects handling in memory was found in Windows DirectShow. By exploiting this vulnerability malicious users can obtain sensitive information. This vulnerability can be exploited remotely via a specially designed website. Original advisories MS17-021 CVE-2017-0042 Exploitation Public...

Hyper-V hosts crash in csvfs.sys in Windows Server 2012 R2

Hyper-V hosts crash in csvfs.sys in Windows Server 2012 R2 Symptoms Windows Server 2012 R2 Hyper-V hosts may crash in the csvfs.sys file process when you perform backup with certain backup applications. Cause This issue occurs if a backup solution sends the CsvControlQueryFileRevision request on ...

MS15-118: Description of the security update for the .NET Framework 4.5.1 and 4.5.2 on Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2: November 10, 2015

MS15-118: Description of the security update for the .NET Framework 4.5.1 and 4.5.2 on Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2: November 10, 2015 View products that this article applies to. Summary This update resolves vulnerabilities in the Microsoft .NET Framework. The most seve...

Microsoft Dynamics CRM 2011 Update Rollup 18

Microsoft Dynamics CRM 2011 Update Rollup 18 INTRODUCTION Update Rollup 18 for Microsoft Dynamics CRM 2011 is available. This article describes the hotfixes and updates that are included in this update rollup. This update rollup is available for all languages that are supported by Microsoft...

MS17-004: Description of the security update for Local Security Authority Subsystem Service: January 10, 2017

None None...

January 2017 Security Only Quality Update for Windows 7 SP1 and Windows Server 2008 R2 SP1

January 2017 Security Only Quality Update for Windows 7 SP1 and Windows Server 2008 R2 SP1 Summary This security update resolves the following vulnerabilities in Windows: MS17-004 Security Update for Local Security Authority Subsystem Service 3216771 More Information Important The security fixes...

January 2017 Security Monthly Quality Rollup for Windows 7 SP1 and Windows Server 2008 R2 SP1

January 2017 Security Monthly Quality Rollup for Windows 7 SP1 and Windows Server 2008 R2 SP1 Summary This security update resolves the following vulnerabilities in Windows: MS17-004 Security Update for Local Security Authority Subsystem Service 3216771 This security update also includes...

January 10, 2017—KB3213986 (OS Build 14393.693)

None None...

KLA10937 Obsolete Adobe Flash Player for Windows

Microsoft released update to address vulnerabilities in Flash Player for Internet Explorer. For details look at KLA10936. Technical details To mitigate this vulnerability you can implement some of workarounds listed in original Microsoft advisory: disable Adobe Flash Player, prevent Adobe FP from...

MS17-001: Security update for Microsoft Edge: January 10, 2017

Resolves a vulnerability in Microsoft Edge that could allow remote code execution if a user views a specially crafted webpage in Microsoft Edge.SummaryThis security update resolves multiple vulnerabilities in Microsoft Edge. The most severe of these vulnerabilities could allow remote code executi...

KLA11903 DoS vulnerability in Microsoft Products (ESU)

A denial of service vulnerability was found in Microsoft Products Extended Support Update. Malicious users can exploit this vulnerability to cause denial of service. Original advisories CVE-2017-0004 Exploitation Related products Microsoft-Windows-Vista-4 Microsoft-Windows-7...

January 10, 2017—KB3210721 (OS Build 10586.753)

None None...

January 10, 2017—KB3213986 (OS Build 14393.693)

None None...

January 10, 2017—KB3210720 (OS Build 10240.17236)

None None...

MS16-035: Description of the security update for the .NET Framework 3.5 in Windows Server 2012: March 8, 2016

MS16-035: Description of the security update for the .NET Framework 3.5 in Windows Server 2012: March 8, 2016 View products that this article applies to. Summary This update resolves a vulnerability in the Microsoft .NET Framework. The security feature bypass exists in a .NET Framework component...

MS16-035: Description of the security update for the .NET Framework 3.5 in Windows Server 2012: March 8, 2016

MS16-035: Description of the security update for the .NET Framework 3.5 in Windows Server 2012: March 8, 2016 View products that this article applies to. Summary This update resolves a vulnerability in the Microsoft .NET Framework. The security feature bypass exists in a .NET Framework component...

MS14-057: Description of the security update for the .NET Framework 3.5.1 for Windows 7 Service Pack 1 and Windows Server 2008 R2 Service Pack 1: October 14, 2014

MS14-057: Description of the security update for the .NET Framework 3.5.1 for Windows 7 Service Pack 1 and Windows Server 2008 R2 Service Pack 1: October 14, 2014 View products that this article applies to. Introduction This security update resolves a security feature bypass vulnerability that...