MS14-075: Vulnerabilities in Microsoft Exchange Server could allow elevation of privilege: December 9, 2014

Resolves a vulnerability in Microsoft Exchange Server that could allow spoofing if an attacker sends an email message that contains a malicious link to a specially crafted website to a user on an affected Exchange server.INTRODUCTIONMicrosoft has released security bulletin MS14-075. To learn more...

MS14-082: Vulnerabilities in Microsoft Office could allow remote code execution: December 9, 2014

Resolves vulnerabilities that could allow remote code execution or security feature bypass if a specially crafted file is opened in an affected edition of Microsoft Office.IntroductionThis security update resolves a vulnerability that could allow remote code execution or security feature bypass i...

MS14-084: Description of the security update for VBScript 5.7: December 9, 2014

None None...

MS14-085: Vulnerability in Microsoft graphics component could allow information disclosure: December 9, 2014

None None...

MS14-068: Vulnerability in Kerberos could allow elevation of privilege: November 18, 2014

None None...

MS14-072: Vulnerability in the .NET Framework could allow elevation of privilege: November 11, 2014

Resolves a vulnerability in the Microsoft .NET Framework that could allow elevation of privilege.View products that this article applies to.IntroductionThis update resolves a vulnerability in the Microsoft .NET Framework that could allow elevation of privilege.SummaryMicrosoft has released securi...

MS14-073: Vulnerability in Microsoft SharePoint Foundation could allow for elevation of privilege: November 11, 2014

Resolves a vulnerability in Microsoft SharePoint Server. An authenticated attacker who successfully exploited this vulnerability could run arbitrary script in the context of the user on the current SharePoint site.INTRODUCTIONMicrosoft has released security bulletin MS14-073. To learn more about...

MS14-064: Vulnerabilities in Windows OLE could allow remote code execution: November 11, 2014

Resolves vulnerabilities in Windows OLE that could allow remote code execution if a user views a specially crafted webpage by using Internet Explorer. An attacker who successfully exploited the vulnerabilities could run arbitrary code in the context of the current user.INTRODUCTIONMicrosoft has...

MS14-064: Description of the security update for Windows OLE: November 11, 2014 (KB3006226)

None None...

MS14-064: Description of the security update for Windows OLE: November 11, 2014 (KB3010788)

None None...

MS14-067: Vulnerabilities in XML Core Services could allow remote code execution: November 11, 2014

None None...

MS14-071: Vulnerability in Windows Audio Service could cause Elevation of Privilege: November 11, 2014

None None...

MS14-074: Vulnerability in Remote Desktop Protocol could allow security feature bypass: November 11, 2014

None None...

MS14-077: Vulnerability in Active Directory Federation Services could allow information disclosure: November 11, 2014

None None...

MS14-079: Vulnerabilities in kernel-mode driver could allow denial of service: November 11, 2014

None None...

MS14-076: Vulnerability in Internet Information Services (IIS) could allow security feature bypass: November 11, 2014

None None...

MS14-078: Description of the security update for IME: November 11, 2014

None None...

MS14-066: Vulnerability in SChannel could allow remote code execution: November 11, 2014

None None...

MS14-069: Description of the security update for Microsoft Word Viewer: November 11, 2014

None None...

MS14-073: Description of the security update for SharePoint Foundation 2010: November 11, 2014

Resolves a vulnerability in Microsoft SharePoint Server. An authenticated attacker who successfully exploited this vulnerability could run arbitrary script in the context of the user on the current SharePoint site.INTRODUCTIONMicrosoft has released security bulletin MS14-073. To learn more about...

MS14-057: Vulnerabilities in the .NET Framework could allow remote code execution: October 14, 2014

Resolves vulnerabilities that could allow elevation of privilege, remote code execution, or bypass the Address Space Layout Randomization ASLR security feature.View products that this article applies to.IntroductionThis security update resolves the following:The vulnerabilities that could allow...

MS14-061: Description of the security update for Microsoft Word 2010: October 14, 2014

This security update resolves a vulnerability in Microsoft Word that could allow remote code execution if an attacker convinces a user to open a specially crafted Microsoft Office file.INTRODUCTIONMicrosoft has released security bulletin MS14-061. To learn more about this security bulletin:Home...

MS14-061: Description of the security update for Microsoft Office Web Apps Server 2010: October 14, 2014

This security update resolves a vulnerability in Microsoft Word that could allow remote code execution if an attacker convinces a user to open a specially crafted Microsoft Office file.INTRODUCTIONMicrosoft has released security bulletin MS14-061. To learn more about this security bulletin: Home...

MS14-061: Vulnerability in Microsoft Word and Office Web Apps could allow remote code execution: October 14, 2014

This security update resolves a vulnerability in Microsoft Word that could allow remote code execution if an attacker convinces a user to open a specially crafted Microsoft Office file.INTRODUCTIONMicrosoft has released security bulletin MS14-061. To learn more about this security bulletin:Home...

MS14-061: Description of the security update for Microsoft Office 2010: October 14, 2014

This security update resolves a vulnerability in Microsoft Word that could allow remote code execution if an attacker convinces a user to open a specially crafted Microsoft Office file.INTRODUCTIONMicrosoft has released security bulletin MS14-061. To learn more about this security bulletin: Home...

MS14-061: Description of the security update for Microsoft SharePoint Server 2010: October 14, 2014

This security update resolves a vulnerability in Microsoft Word that could allow remote code execution if an attacker convinces a user to open a specially crafted Microsoft Office file.INTRODUCTIONMicrosoft has released security bulletin MS14-061. To learn more about this security bulletin: Home...

MS14-059: Vulnerability in ASP.NET MVC could allow security feature bypass: October 14, 2014

Describes a security update that resolves a vulnerability in ASP.NET MVC that could allow security feature bypass if an attacker convinces a user to click a specially crafted link or to go to a webpage that contains specially crafted content.View products that this article applies...

MS14-058: Vulnerabilities in kernel-mode driver could allow remote code execution: October 14, 2014

None None...

MS14-063: Vulnerability in Fat32 disk partition driver could allow elevation of privilege: October 14, 2014

None None...

MS14-060: Vulnerability in Windows OLE could allow for remote code execution: October 14, 2014

None None...

Microsoft security advisory: Update for Microsoft EAP implementation that enables the use of TLS: October 14, 2014

None None...

MS14-053: Vulnerability in the .NET Framework could allow denial of service: September 9, 2014

Resolves a vulnerability in the .NET Framework that could allow denial of service if an attacker sends a few specially crafted requests to an affected .NET-enabled website.View products that this article applies to.IntroductionThis update resolves a vulnerability in the Microsoft .NET Framework...

MS14-054: Vulnerability in Windows Task Scheduler could allow elevation of privilege: September 9, 2014

None None...

MS14-045: Description of the security update for kernel-mode drivers: August 27, 2014

None None...

MS14-049: Vulnerability in Windows installer service could allow elevation of privilege: August 12, 2014

Resolves a vulnerability in Windows that could allow elevation of privilege if an attacker runs a specially crafted application that tries to repair a previously installed application.INTRODUCTIONMicrosoft has released security bulletin MS14-049. To learn more about this security bulletin:Home...

MS14-045: Vulnerabilities in kernel-mode drivers could allow elevation of privilege: August 12, 2014

Resolves vulnerabilities in Windows that could allow elevation of privilege if an attacker logs on to the system and runs a specially crafted application.INTRODUCTIONMicrosoft has released security bulletin MS14-045. To learn more about this security bulletin:Home...

MS14-044: Vulnerabilities in SQL Server could allow elevation of privilege: August 12, 2014

Resolves vulnerabilities in SQL Server that could allow elevation of privilege if a user goes to a specially crafted website that injects a client-side script into the user's instance of Internet Explorer.INTRODUCTIONMicrosoft has released security bulletin MS14-044. To learn more about this...

MS14-050: Vulnerability in Microsoft SharePoint Server could allow elevation of privilege: August 12, 2014

Resolves a vulnerability in Microsoft SharePoint Services. An authenticated attacker who successfully exploits this vulnerability could use a specially crafted app to run arbitrary code in the security context of the logged-on user.INTRODUCTIONMicrosoft has released security bulletin MS14-050. To...

MS14-050: Description of the security update for SharePoint Services: August 12, 2014

Resolves a vulnerability in Microsoft SharePoint Services. An authenticated attacker who successfully exploited this vulnerability could use a specially crafted app to run arbitrary code in the security context of the logged-on user.INTRODUCTIONMicrosoft has released security bulletin MS14-050. T...

MS14-046: Vulnerability in the .NET Framework could allow security feature bypass: August 12, 2014

Resolves a vulnerability in the Microsoft .NET Framework that could bypass the Address Space Layout Randomization ASLR security feature if a user goes to a specially crafted website.View products that this article applies to.IntroductionThis update resolves a vulnerability in the Microsoft .NET...

MS14-049: Description of the security update for Windows Installer Service: August 12, 2014

None None...

MS14-043: Vulnerability in Windows Media Center could allow remote code execution: August 12, 2014

None None...

MS14-045: Description of the security update for kernel-mode drivers: August 12, 2014 (KB2982791)

None None...

MS14-047: Vulnerability in LRPC could allow security feature bypass: August 12, 2014

None None...

MS14-045: Description of the security update for kernel-mode drivers: August 12, 2014 (KB2976897)

None None...

August 12, 2014 update for Office Web Apps Server 2013(KB2883057)

None None...

MS14-038: Description of the security update for Windows-based systems that don't have update 2919355 installed: July 8, 2014

Resolves a vulnerability in Windows that could allow remote code execution if a user opens a specially crafted Journal file.INTRODUCTIONMicrosoft has released security bulletin MS14-038. To learn more about this security bulletin: Home...

MS14-037: Security update for Internet Explorer versions 6, 7, 8, 9, 10, and 11: July 8, 2014

Resolves vulnerabilities in Internet Explorer that could allow remote code execution if a user views a specially crafted webpage by using Internet Explorer.IntroductionThe security update addresses the vulnerabilities by modifying the way that Internet Explorer handles objects in memory, validate...

MS14-037: Security update for Internet Explorer 11 for systems that do not have update 2919355 or update 2929437 installed: July 8, 2014

Resolves vulnerabilities in Internet Explorer that could allow remote code execution if a user views a specially crafted webpage by using Internet Explorer.INTRODUCTIONThe security update addresses the vulnerabilities by modifying the way that Internet Explorer handles objects in memory, validate...

MS14-038: Vulnerability in Windows journal could allow remote code execution: July 8, 2014

Resolves a vulnerability in Windows that could allow remote code execution if a user opens a specially crafted journal file. An attacker would be unable to force users to go to a specially crafted website.INTRODUCTIONMicrosoft has released security bulletin MS14-038. To learn more about this...