12325 matches found
MS15-008: Vulnerability in Windows kernel mode driver could allow elevation of privilege: January 13, 2015
None None...
MS15-007: Vulnerability in Network Policy Server RADIUS implementation could cause denial of service: January 13, 2015
None None...
MS15-006: Vulnerability in Windows Error Reporting could allow security feature bypass: January 13, 2015
None None...
MS15-002: Vulnerability in the Windows Telnet service could cause remote code execution: January 13, 2015
None None...
MS14-080: Description of the security update for VBScript 5.8: January 13, 2015
Describes an update package that contains VBScript 5.8 updates for Internet Explorer 10. Apply this update package after you install the December cumulative security update for Internet Explorer.SummaryThis package contains the VBScript 5.8 updates that are intended for Internet Explorer 10 in a...
MS15-004: Vulnerability in Windows components could allow elevation of privilege: January 13, 2015
Resolves a vulnerability in the TS WebProxy Windows component that could allow elevation of privilege if an attacker convinces a user to run a specially crafted application. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user.SummaryThis...
MS15-005: Vulnerability in Network Location Awareness service could allow security feature bypass: January 13, 2015
None None...
MS15-003: Vulnerability in Windows User Profile service could allow elevation of privilege: January 13, 2015
None None...
MS15-004: Description of the security update for Windows: January 13, 2015
None None...
MS14-081: Vulnerabilities in Microsoft Word and Office Web Apps could allow remote code execution: December 9, 2014
Resolves vulnerabilities in Microsoft Office that could allow remote code execution if an attacker convinces a user to open or preview a specially crafted Microsoft Word file in an affected version of Office.IntroductionThis security update resolves vulnerabilities in Microsoft Office that could...
MS14-075: Vulnerabilities in Microsoft Exchange Server could allow elevation of privilege: December 9, 2014
Resolves a vulnerability in Microsoft Exchange Server that could allow spoofing if an attacker sends an email message that contains a malicious link to a specially crafted website to a user on an affected Exchange server.INTRODUCTIONMicrosoft has released security bulletin MS14-075. To learn more...
MS14-084: Description of the security update for VBScript 5.8: December 9, 2014
Resolves a vulnerability in the VBScript scripting engine in Microsoft Windows that could allow remote code execution if a user visits a specially crafted website. An attacker who successfully exploited this vulnerability could gain the same user rights as the current user.INTRODUCTIONMicrosoft h...
MS14-082: Vulnerabilities in Microsoft Office could allow remote code execution: December 9, 2014
Resolves vulnerabilities that could allow remote code execution or security feature bypass if a specially crafted file is opened in an affected edition of Microsoft Office.IntroductionThis security update resolves a vulnerability that could allow remote code execution or security feature bypass i...
MS14-085: Vulnerability in Microsoft graphics component could allow information disclosure: December 9, 2014
None None...
MS14-084: Description of the security update for VBScript 5.7: December 9, 2014
None None...
MS14-084: Vulnerability in VBScript scripting engine could allow remote code execution: December 9, 2014
Resolves a vulnerability in the VBScript scripting engine in Microsoft Windows that could allow remote code execution if a user visits a specially crafted website. An attacker who successfully exploited this vulnerability could gain the same user rights as the current user.INTRODUCTIONMicrosoft h...
MS14-083: Description of the security update for Microsoft Excel 2013: December 9, 2014
Resolves vulnerabilities in Microsoft Office that could allow remote code execution if an attacker convinces a user to open or preview a specially crafted Microsoft Excel workbook in an affected version of Office software. An attacker who successfully exploited the vulnerabilities could gain the...
MS14-068: Vulnerability in Kerberos could allow elevation of privilege: November 18, 2014
None None...
MS14-064: Vulnerabilities in Windows OLE could allow remote code execution: November 11, 2014
Resolves vulnerabilities in Windows OLE that could allow remote code execution if a user views a specially crafted webpage by using Internet Explorer. An attacker who successfully exploited the vulnerabilities could run arbitrary code in the context of the current user.INTRODUCTIONMicrosoft has...
MS14-067: Vulnerabilities in XML Core Services could allow remote code execution: November 11, 2014
None None...
MS14-064: Description of the security update for Windows OLE: November 11, 2014
None None...
MS14-078: Description of the security update for IME: November 11, 2014
None None...
MS14-076: Vulnerability in Internet Information Services (IIS) could allow security feature bypass: November 11, 2014
None None...
MS14-073: Vulnerability in Microsoft SharePoint Foundation could allow for elevation of privilege: November 11, 2014
Resolves a vulnerability in Microsoft SharePoint Server. An authenticated attacker who successfully exploited this vulnerability could run arbitrary script in the context of the user on the current SharePoint site.INTRODUCTIONMicrosoft has released security bulletin MS14-073. To learn more about...
MS14-073: Description of the security update for SharePoint Foundation 2010: November 11, 2014
Resolves a vulnerability in Microsoft SharePoint Server. An authenticated attacker who successfully exploited this vulnerability could run arbitrary script in the context of the user on the current SharePoint site.INTRODUCTIONMicrosoft has released security bulletin MS14-073. To learn more about...
MS14-077: Vulnerability in Active Directory Federation Services could allow information disclosure: November 11, 2014
None None...
MS14-079: Vulnerabilities in kernel-mode driver could allow denial of service: November 11, 2014
None None...
MS14-074: Vulnerability in Remote Desktop Protocol could allow security feature bypass: November 11, 2014
None None...
MS14-071: Vulnerability in Windows Audio Service could cause Elevation of Privilege: November 11, 2014
None None...
MS14-069: Description of the security update for Microsoft Word Viewer: November 11, 2014
None None...
MS14-072: Vulnerability in the .NET Framework could allow elevation of privilege: November 11, 2014
Resolves a vulnerability in the Microsoft .NET Framework that could allow elevation of privilege.View products that this article applies to.IntroductionThis update resolves a vulnerability in the Microsoft .NET Framework that could allow elevation of privilege.SummaryMicrosoft has released securi...
MS14-064: Description of the security update for Windows OLE: November 11, 2014
None None...
MS14-066: Vulnerability in SChannel could allow remote code execution: November 11, 2014
None None...
MS14-061: Description of the security update for Microsoft Office 2010: October 14, 2014
This security update resolves a vulnerability in Microsoft Word that could allow remote code execution if an attacker convinces a user to open a specially crafted Microsoft Office file.INTRODUCTIONMicrosoft has released security bulletin MS14-061. To learn more about this security bulletin: Home...
MS14-063: Vulnerability in Fat32 disk partition driver could allow elevation of privilege: October 14, 2014
None None...
MS14-057: Vulnerabilities in the .NET Framework could allow remote code execution: October 14, 2014
Resolves vulnerabilities that could allow elevation of privilege, remote code execution, or bypass the Address Space Layout Randomization ASLR security feature.View products that this article applies to.IntroductionThis security update resolves the following:The vulnerabilities that could allow...
MS14-061: Description of the security update for Microsoft Office Web Apps Server 2010: October 14, 2014
This security update resolves a vulnerability in Microsoft Word that could allow remote code execution if an attacker convinces a user to open a specially crafted Microsoft Office file.INTRODUCTIONMicrosoft has released security bulletin MS14-061. To learn more about this security bulletin: Home...
MS14-061: Description of the security update for Microsoft Word 2010: October 14, 2014
This security update resolves a vulnerability in Microsoft Word that could allow remote code execution if an attacker convinces a user to open a specially crafted Microsoft Office file.INTRODUCTIONMicrosoft has released security bulletin MS14-061. To learn more about this security bulletin:Home...
MS14-060: Vulnerability in Windows OLE could allow for remote code execution: October 14, 2014
None None...
MS14-061: Description of the security update for Microsoft SharePoint Server 2010: October 14, 2014
This security update resolves a vulnerability in Microsoft Word that could allow remote code execution if an attacker convinces a user to open a specially crafted Microsoft Office file.INTRODUCTIONMicrosoft has released security bulletin MS14-061. To learn more about this security bulletin: Home...
MS14-061: Vulnerability in Microsoft Word and Office Web Apps could allow remote code execution: October 14, 2014
This security update resolves a vulnerability in Microsoft Word that could allow remote code execution if an attacker convinces a user to open a specially crafted Microsoft Office file.INTRODUCTIONMicrosoft has released security bulletin MS14-061. To learn more about this security bulletin:Home...
MS14-059: Vulnerability in ASP.NET MVC could allow security feature bypass: October 14, 2014
Describes a security update that resolves a vulnerability in ASP.NET MVC that could allow security feature bypass if an attacker convinces a user to click a specially crafted link or to go to a webpage that contains specially crafted content.View products that this article applies...
MS14-058: Vulnerabilities in kernel-mode driver could allow remote code execution: October 14, 2014
None None...
Microsoft security advisory: Update for Microsoft EAP implementation that enables the use of TLS: October 14, 2014
None None...
MS14-053: Vulnerability in the .NET Framework could allow denial of service: September 9, 2014
Resolves a vulnerability in the .NET Framework that could allow denial of service if an attacker sends a few specially crafted requests to an affected .NET-enabled website.View products that this article applies to.IntroductionThis update resolves a vulnerability in the Microsoft .NET Framework...
MS14-054: Vulnerability in Windows Task Scheduler could allow elevation of privilege: September 9, 2014
None None...
MS14-045: Description of the security update for kernel-mode drivers: August 27, 2014
None None...
MS14-044: Vulnerabilities in SQL Server could allow elevation of privilege: August 12, 2014
Resolves vulnerabilities in SQL Server that could allow elevation of privilege if a user goes to a specially crafted website that injects a client-side script into the user's instance of Internet Explorer.INTRODUCTIONMicrosoft has released security bulletin MS14-044. To learn more about this...
MS14-045: Description of the security update for kernel-mode drivers: August 12, 2014
None None...
MS14-045: Vulnerabilities in kernel-mode drivers could allow elevation of privilege: August 12, 2014
Resolves vulnerabilities in Windows that could allow elevation of privilege if an attacker logs on to the system and runs a specially crafted application.INTRODUCTIONMicrosoft has released security bulletin MS14-045. To learn more about this security bulletin:Home...