5669 matches found
Update Rollup for Microsoft Monitoring Agent
Describes the issues that are fixed in update rollup KB 3071396 for Microsoft Monitoring Agent.This article describes the issues that are fixed in an update rollup for the Microsoft Monitoring Agent. Additionally, this article contains installation instructions for the update rollup.Issues that a...
LoadLibrary function in Microsoft Windows fails to validate input properly
Overview The LoadLibrary function in Microsoft Windows fails to validate input properly. As a result, it may load a specially crafted DLL file CWE-114. Takashi Yoshikawa of Mitsui Bussan Secure Directions reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Informati...
MS15-057: Vulnerability in Windows Media Player could allow remote code execution: June 9, 2015
None None...
MS15-027: Vulnerability in NETLOGON could allow spoofing: March 10, 2015
None None...
MS15-008: Vulnerability in Windows kernel mode driver could allow elevation of privilege: January 13, 2015
None None...
MS15-004: Description of the security update for Windows: January 13, 2015
None None...
Microsoft Shuts Down Patch Tuesday Advanced Notifications
Microsoft today pulled the plug on its Advanced Notification Service ANS, offering it going forward only to paying Premier customers. ANS preceded the release of Microsoft’s monthly Patch Tuesday security bulletins; on the Thursday prior, Microsoft would provide users via its security website a...
MS14-064: Vulnerabilities in Windows OLE could allow remote code execution: November 11, 2014
Resolves vulnerabilities in Windows OLE that could allow remote code execution if a user views a specially crafted webpage by using Internet Explorer. An attacker who successfully exploited the vulnerabilities could run arbitrary code in the context of the current user.INTRODUCTIONMicrosoft has...
MS14-076: Vulnerability in Internet Information Services (IIS) could allow security feature bypass: November 11, 2014
None None...
MS14-058: Vulnerabilities in kernel-mode driver could allow remote code execution: October 14, 2014
None None...
MS14-053: Vulnerability in the .NET Framework could allow denial of service: September 9, 2014
Resolves a vulnerability in the .NET Framework that could allow denial of service if an attacker sends a few specially crafted requests to an affected .NET-enabled website.View products that this article applies to.IntroductionThis update resolves a vulnerability in the Microsoft .NET Framework...
Support has ended for Office 2003
Support has ended for Office 2003 Last updated 2014-10-28Support for Office 2003 has ended. All of your Office 2003 apps will continue to function. However, you could expose yourself to serious and potentially harmful security risks. Upgrade to a newer version of Office so you can stay up to date...
MS14-027: Vulnerability in Windows shell handler could allow elevation of privilege: May 13, 2014
Resolves a vulnerability in Windows that could allow elevation of privilege if an attacker runs a specially crafted application that uses ShellExecute.INTRODUCTIONMicrosoft has released security bulletin MS14-027. To learn more about this security bulletin: Home...
MS14-029: Security update for Internet Explorer 11 for systems that do not have update 2919355 (for Windows 8.1 or Windows Server 2012 R2) or update 2929437 (for Windows 7 SP1 or Windows Server 2008 R2 SP1) installed: May 13, 2014
Resolves vulnerabilities in Internet Explorer that could allow remote code execution if a user views a specially crafted webpage by using Internet Explorer.INTRODUCTION Microsoft has released security bulletin MS14-029. Learn more about how to obtain the fixes included in this security bulletin:F...
MS14-026: Vulnerability in the .NET Framework could allow elevation of privilege: May 13, 2014
Resolves a vulnerability in the Microsoft .NET Framework that could allow elevation of privilege if an unauthenticated attacker sends specially crafted data to an affected workstation or server that has the .NET Framework Remoting feature enabled.View products that this article applies...
MS14-027: Description of the security update for Windows: May 13, 2014
None None...
Description of the security update for Internet Explorer: May 1, 2014
Resolves a vulnerability in Internet Explorer that could allow remote code execution if a user views a specially crafted webpage by using Internet Explorer.INTRODUCTION Microsoft has released security bulletin MS14-021. Learn more about how to obtain the fixes that are included in this security...
MS14-017: Description of the security update for Office Web Apps Server 2013: April 8, 2014
Resolves vulnerabilities in Microsoft Office that could allow remote code execution if a specially crafted file is opened in an affected version of Microsoft Office.IntroductionThis update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a specially crafted...
MS14-017: Description of the security update for Word 2010 Service Pack 1 and Service Pack 2: April 8, 2014
Resolves vulnerabilities in Microsoft Office that could allow remote code execution if a specially crafted file is opened in an affected version of Microsoft Office.IntroductionThis update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a specially crafted...