MS15-067: Vulnerability in RDP could allow remote code execution: July 14, 2015

Resolves a vulnerability in Windows that could allow remote code execution if an attacker sends a specially crafted sequence of packets to a targeted system that has the Remote Desktop Protocol RDP server service enabled. By default, the RDP server service is not enabled on any Windows operating...

MS15-077: Vulnerability in ATM font driver could allow elevation of privilege: July 14, 2015

None None...

Samsung to Patch Windows Update Issue Within Days

Samsung said today it will no longer automatically disable Windows updates on PCs and laptops it manufactures and will release a patch “within a few days.” The practice was outed this week by a 22-year-old Microsoft MVP named Patrick Barker who posted a report to his personal website the explaine...

Samsung Disables Windows Update

Samsung PC owners could soon find themselves in an endless carousel of enabling Windows Update with each reboot of their machine after a computing enthusiast discovered that a Samsung feature disables Microsoft’s update mechanism by default. Windows Update is a service that delivers, among other...

Microsoft security advisory: Update to default cipher suite priority order: May 12, 2015

None None...

KLA10581 Privilege escalation vulnerability in Microsoft Silverlight

An unspecified vulnerability was found in Microsoft Silverlight. By exploiting this vulnerability malicious users can gain privileges. This vulnerability can be exploited remotely via a specially designed Silverlight application. Original advisories Microsoft advisory CVE-2015-1715 Related produc...

May 2015 Adobe Reader, Acrobat Security Updates

Microsoft may no longer provide its customers with free advance notification of upcoming Patch Tuesday security updates, but Adobe continues to give users of its Reader and Acrobat products a gratis head’s up of what’s coming. The company yesterday said it is planning to release security updates...

Windows Update for Business Uproots Patch Tuesday

Scheduled patch deliveries are so last decade—and thankfully, it looks like they’re over when it comes to Microsoft Patch Tuesday. Microsoft this week at its Ignite event introduced its new security update scheme called Windows Update for Business, which debuts in Windows 10 with several new...

MS15-035: Vulnerability in Microsoft graphics component could allow remote code execution: April 14, 2015

None None...

KLA10557 Security bypass vulnerability in Active Directory

Improper logoff handling was found in Microsoft Active Directory. By exploiting this vulnerability malicious users can bypass security restrictions. This vulnerability can be exploited remotely via workstation manipulations. Original advisories MS15-040 CVE-2015-1638 Related products...

MS15-038: Description of the security update for Windows: April 14, 2015

None None...

KLA10468 Multiple vulnerabilities in Microsoft products

Multiple critical vulnerabilities have been found in Microsoft products. Malicious users can exploit these vulnerabilities to cause denial of service, obtain sensitive information or execute arbitrary code. Below is a complete list of vulnerabilities 1. Improper memory allocation and some other...

KLA10591 Code injection in Microsoft Exchange Server

Multiple XSS vulnerabilities were found in Microsoft Exchange Server. By exploiting these vulnerabilities malicious users can inject arbitrary web script or spoof user interface. These vulnerabilities can be exploited remotely via a specially designed URL, msgParam or other unknown vectors...

KLA10473 Code execution vulnerability in Microsoft products

Lack of authentication control was found in Microsoft products. By exploiting this vulnerability malicious users execute arbitrary code. This vulnerability can be exploited remotely via a specially designed UNC share. Original advisories MS advisory CVE-2015-0008 Related products...

KLA10459 Security bypass vulnerability in Microsoft Windows

Improper TLS restriction was found in Microsoft products. By exploiting this vulnerability malicious users bypass security. This vulnerability can be exploited remotely via a specially designed TLS traffic. Original advisories MS bulletin CVE-2015-1637 Related products Microsoft-Windows-Vista...

MS15-020: Description of the security update for Windows shell: March 10, 2015

None None...

KLA10454 PE vulnerabilities in MSCVMM

Improper user roles validating was found in MSCVMM. By exploiting this vulnerability malicious users can gain privileges. This vulnerability can be exploited remotely via a specially designed credentials. Original advisories MS bulletin CVE-2015-0012 Related products...

KLA10605 Code execution vulnerability in Microsoft VBScript

An unspecified vulnerabilities were found in Microsoft VBScript engine. By exploiting these vulnerabilities malicious users can execute arbitrary code. These vulnerabilities can be exploited remotely via a specially designed web site. Original advisories CVE-2014-6363 CVE-2014-0271 Exploitation...

Hyper-V backup or replication job with guest-processing fails after installing Windows Update KB3000853

After installing November roll-up update http://support.microsoft.com/kb/3000853 on 2012 Hyper-V hosts, VSS-enabled backups may be failing in any backup solution. In Veeam you will get "Unable t...

KLA10604 Multiple vulnerabilities in Microsoft SharePoint

Multiple serious vulnerabilities have been found in Microsoft SharePoint. Malicious users can exploit these vulnerabilities to gain privileges or execute arbitrary code. Below is a complete list of vulnerabilities 1. XSS vulnerability can be exploited remotely via a specially designed requests; 2...