12325 matches found
MS14-011: Description of the security update for Visual Basic Scripting Edition (VBScript) 5.8: February 11, 2014
Addresses a vulnerability by changing how the VBScript scripting engine handles objects in memory.INTRODUCTIONMicrosoft has released security bulletin MS14-011. To view the complete security bulletin, go to one of the following Microsoft websites: Home...
MS14-011: Description of the security update for Visual Basic Scripting Edition (VBScript) 5.7: February 11, 2014
None None...
MS14-005: Vulnerability in Microsoft XML Core Services could allow information disclosure: February 11, 2014
None None...
Description of the SharePoint Workspace 2010 update 2760601: February 11, 2014
None None...
MS14-009: Vulnerabilities in the .NET Framework could allow elevation of privilege: February 11, 2014
Resolves vulnerabilities that could allow elevation of privilege if a user visits a specially crafted website or a website that contains specially crafted web content.View products that this article applies to.IntroductionThis update resolves vulnerabilities that could allow elevation of privileg...
MS14-007: Vulnerability in Direct2D could allow remote code execution: February 11, 2014
None None...
MS14-001: Description of the security update for Word 2013: January 14, 2014
Resolves vulnerabilities in Microsoft Office that could allow remote code execution if a specially crafted file is opened in an affected version of Microsoft Word or other affected Microsoft Office software. An attacker who successfully exploited the vulnerabilities could gain the same user right...
MS14-001: Vulnerabilities in Microsoft Word and Office web apps could allow remote code execution: January 14, 2014
Resolves vulnerabilities in Microsoft Office that could allow remote code execution if a specially crafted file is opened in an affected version of Microsoft Word or other affected Microsoft Office software. An attacker who successfully exploited the vulnerabilities could gain the same user right...
MS14-001: Description of the security update for Office Web Apps Server 2013: January 14, 2014
Resolves vulnerabilities in Microsoft Office that could allow remote code execution if a specially crafted file is opened in an affected version of Microsoft Word or other affected Microsoft Office software. An attacker who successfully exploited the vulnerabilities could gain the same user right...
MS14-003: Vulnerability in Windows kernel-mode drivers could allow elevation of privilege: January 14, 2014
Resolves a vulnerability in Windows that could allow elevation of privilege if a user logs on to the system and runs a specially crafted application. An attacker must have valid logon credentials and be able to log on locally to exploit this vulnerability.INTRODUCTIONMicrosoft has released securi...
MS14-004: Vulnerability in Microsoft Dynamics AX could allow denial of service: January 14, 2014
Resolves a vulnerability in Microsoft Dynamics AX that could allow denial of service if an authenticated attacker submits specially crafted data to an affected Dynamics AX server. An attacker who successfully exploited this vulnerability could cause the target Dynamics AX server to stop respondin...
MS14-001: Description of the security update for Word Automation Services in SharePoint Server 2010: January 14, 2014
Resolves vulnerabilities in Microsoft Office that could allow remote code execution if a specially crafted file is opened in an affected version of Microsoft Word or other affected Microsoft Office software. An attacker who successfully exploited the vulnerabilities could gain the same user right...
MS13-105: Vulnerabilities in Microsoft Exchange Server could allow remote code execution: December 10, 2013
Resolves vulnerabilities in the WebReady Document Viewing and Data Loss Prevention features of Microsoft Exchange Server. These vulnerabilities could allow remote code execution in the security context of the LocalService account if an attacker sends an email message that contains a specially...
MS13-100: Vulnerabilities in Microsoft SharePoint Server could allow remote code execution: December 10, 2013
The security update addresses the vulnerabilities by correcting how SharePoint Server sanitizes specially crafted page content.INTRODUCTIONMicrosoft has released security bulletin MS13-100. To view the complete security bulletin, visit one of the following Microsoft websites: Home...
MS13-097: Cumulative security update for Internet Explorer: December 10, 2013
Resolves vulnerabilities in Internet Explorer that could allow remote code execution if a user views a specially crafted webpage by using Internet Explorer.The update that this article describes has been replaced by a newer update. We recommend that you install the most current cumulative securit...
MS13-099: Vulnerability in Microsoft Scripting Runtime Object Library could allow remote code execution: December 10, 2013
Resolves a vulnerability in Windows that could allow remote code execution if an attacker convinces a user to go to a specially crafted website or a website that hosts specially crafted content.INTRODUCTIONMicrosoft has released security bulletin MS13-099. To view the complete security bulletin, ...
MS13-101: Description of the security update for Windows kernel-mode drivers: December 10, 2013
None None...
MS13-098: Vulnerability in Windows could allow remote code execution: December 10, 2013
None None...
MS13-099: Description of the security update for Windows Script 5.7: December 10, 2013
None None...
MS13-100: Description of the security update for Office Web Apps Server: December 10, 2013
The security update addresses the vulnerabilities by correcting how SharePoint server sanitizes specially crafted page content.INTRODUCTIONMicrosoft has released security bulletin MS13-100. To view the complete security bulletin, visit one of the following Microsoft websites: Home...
MS13-103: Description of the security update for Microsoft Visual Studio Team Foundation Server 2013: December 10, 2013
None None...
MS13-103: Vulnerability in ASP.NET SignalR could allow elevation of privilege: December 10, 2013
Resolves a vulnerability in ASP.NET SignalR that could allow elevation of privilege if an attacker reflects specially crafted JavaScript back to the browser of a targeted user.INTRODUCTIONMicrosoft has released security bulletin MS13-103. To view the complete security bulletin, visit one of the...
MS13-096: Vulnerability in Microsoft Graphics component could allow remote code execution: December 10, 2013
Resolves a vulnerability in Microsoft Windows, Microsoft Office, and Microsoft Lync that could allow remote code execution if a user views content that contains specially crafted TIFF files.INTRODUCTIONMicrosoft has released security bulletin MS13-096. To view the complete security bulletin, visi...
MS13-100: Description of the security update for SharePoint Server 2013 (coreserverloc): December 10, 2013
The security update addresses the vulnerabilities by correcting how SharePoint server sanitizes specially crafted page content.INTRODUCTIONMicrosoft has released security bulletin MS13-100. To view the complete security bulletin, visit one of the following Microsoft websites: Home...
MS13-106: Vulnerability in a Microsoft Office shared component could allow security feature bypass: December 10, 2013
This security update addresses the vulnerability by helping to make sure that the Microsoft Office shared component correctly implements address space layout randomization ASLR.INTRODUCTIONMicrosoft has released security bulletin MS13-106. To view the complete security bulletin, visit one of the...
MS13-104: Vulnerability in Microsoft Office could allow information disclosure: December 10, 2013
Describes a security update that addresses a vulnerability by helping to make sure that Microsoft Office software correctly handles specially crafted responses from websites.INTRODUCTIONMicrosoft has released security bulletin MS13-104. To view the complete security bulletin, go to one of the...
MS13-106: Description of the security update for the 2007 Office suite: December 10, 2013
None None...
MS13-099: Description of the security update for Windows Script 5.8: December 10, 2013
None None...
MS13-089: Vulnerability in Windows Graphics Device Interface could allow remote code execution: November 12, 2013
None None...
MS13-088: Cumulative security update for Internet Explorer: November 12, 2013
Resolves vulnerabilities in Internet Explorer that could allow remote code execution if a user views a specially crafted webpage by using Internet Explorer.The update that this article describes has been replaced by a newer update. We recommend that you install the most current cumulative securit...
MS13-092: Vulnerability in Hyper-V could allow elevation of privilege: November 12, 2013
None None...
MS13-095: Vulnerability in XML digital signatures could allow denial of service: November 12, 2013
None None...
MS13-094: Vulnerability in Outlook could allow information disclosure: November 12, 2013
Resolves a security vulnerability in Microsoft Outlook that could allow information disclosure when a specially crafted email message is opened or previewed.IntroductionThis update resolves a security vulnerability in Microsoft Outlook that could allow information disclosure when a specially...
MS13-091: Vulnerabilities in Microsoft Office could allow remote code execution: November 12, 2013
Describes a security update that addresses vulnerabilities by correcting how Office parses specially crafted files and how the XML parser that is used by Word resolves external entities in a specially crafted file.INTRODUCTIONMicrosoft has released security bulletin MS13-091. To view the complete...
MS13-084: Description of the security update for Excel Web App: October 8, 2013
Describes a security update that addresses vulnerabilities by correcting how affected Microsoft software validates data when the software parses specially crafted Office files and by changing the configuration of SharePoint pages to help provide additional protection against clickjacking...
MS13-081: Description of the security update for USB drivers: October 8, 2013
None None...
MS13-081: Description of the security update for kernel-mode drivers: October 8, 2013
None None...
MS13-085: Description of the security update for Microsoft Office 2010 (Oart.dll): October 8, 2013
Describes a security update that addresses vulnerabilities by correcting how Microsoft Excel and other affected Microsoft software validate data when they parse specially crafted Office files.INTRODUCTIONMicrosoft has released security bulletin MS13-085. To view the complete security bulletin, go...
MS13-085: Description of the security update for Microsoft Excel 2013: October 8, 2013
This security update addresses the vulnerabilities by correcting how Microsoft Excel and other affected Microsoft software validates data when parsing specially crafted Office files.INTRODUCTIONMicrosoft has released security bulletin MS13-085. To view the complete security bulletin, visit one of...
MS13-084: Description of the security update for Word Automation Services in SharePoint Server 2010: October 8, 2013
Describes a security update that addresses vulnerabilities by correcting how affected Microsoft software validates data when the software parses specially crafted Office files and by changing the configuration of SharePoint pages to help provide additional protection against clickjacking...
MS13-081: Description of the security update for USB drivers: October 8, 2013
None None...
MS13-080: Description of the security update for Internet Explorer 11 in Windows 8.1 and Windows Server 2012 R2: October 8, 2013
Resolves vulnerabilities in Internet Explorer 11 that could allow remote code execution if a user views a specially crafted webpage in Internet Explorer.INTRODUCTIONMicrosoft has released security bulletin MS13-080. To view the complete security bulletin, go to one of the following Microsoft...
MS13-084: Vulnerabilities in Microsoft SharePoint Server could allow remote code execution: October 8, 2013
This security update addresses the vulnerabilities by correcting how affected Microsoft software validates data when parsing specially crafted Office files and by changing configuration of SharePoint pages to help provide additional protection against clickjacking attacks.INTRODUCTIONMicrosoft ha...
MS13-084: Description of the security update for Word Online: October 8, 2013
This security update addresses the vulnerabilities by correcting how affected Microsoft software validates data when parsing specially crafted Office files and by changing configuration of SharePoint pages to help provide additional protection against clickjacking attacks.INTRODUCTIONMicrosoft ha...
MS13-084: Description of the security update for Office Web Apps Server 2013: October 8, 2013
This security update corrects the way affected Microsoft software validates data when parsing specially crafted Office files. It also changes the configuration of SharePoint pages to provide additional protection against click-jacking attacks.INTRODUCTIONMicrosoft has released security bulletin...
MS13-084: Description of the security update for Excel Services in SharePoint Server 2013: October 8, 2013
Describes a security update that addresses vulnerabilities by correcting how affected Microsoft software validates data when the software parses specially crafted Office files and by changing the configuration of SharePoint pages to help provide additional protection against clickjacking...
MS13-084: Description of the security update for Excel Services in Microsoft SharePoint Server 2010: October 8, 2013
This security update addresses the vulnerabilities by correcting how affected Microsoft software validates data when parsing specially crafted Office files and by changing configuration of SharePoint pages to help provide additional protection against clickjacking attacks.INTRODUCTIONMicrosoft ha...
MS13-082: Vulnerabilities in the .NET Framework could allow remote code execution: October 8, 2013
Resolves vulnerabilities in the Microsoft .NET Framework that could allow remote code execution or denial of service.View products that this article applies to.IntroductionThis update resolves vulnerabilities in the Microsoft .NET Framework that could allow remote code execution or denial of...
MS13-085: Vulnerabilities in Microsoft Excel could allow remote code execution: October 8, 2013
Describes a security update that addresses vulnerabilities by correcting how Microsoft Excel and other affected Microsoft software validate data when they parse specially crafted Office files.INTRODUCTIONMicrosoft has released security bulletin MS13-085. To view the complete security bulletin, go...
MS13-081: Vulnerabilities in Windows kernel-mode drivers could allow remote code execution: October 8, 2013
Resolves vulnerabilities in Windows that could allow remote code execution if a user views shared content that embeds OpenType or TrueType font files. An attacker who successfully exploited these vulnerabilities could take complete control of an affected system.INTRODUCTIONMicrosoft has released...