Make Homepage | Add To Favorites | Print Page | Submit News | Feedback | Contact | 

Your Technical Computer Information Resource!  
     
  OS Technical Updates [Page: 3 of 275] @ TACKtech Corp.  

03.10.2015 - MS15-021 - Critical: Vulnerabilities in Adobe Font Driver Could Allow Remote Code Execution (3032323) - Version: 1.0



View Microsoft related news. Severity Rating: Critical
Revision Note: V1.0 (March 10, 2015): Bulletin published.
Summary: This security update resolves vulnerabilities in Microsoft Windows. The most severe of the vulnerabilities could allow remote code execution if a user views a specially crafted file or website. An attacker who successfully exploited these vulnerabilities could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited these vulnerabilities could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Customers whose accounts are configured to have fewer user rights on the system could be less impacted than those who operate with administrative user rights.
Full View / NID: 53178 / Submitted by: The Zilla of Zuron

03.10.2015 - MS15-019 - Critical: Vulnerability in VBScript Scripting Engine Could Allow Remote Code Execution (3040297) - Version: 1.0



View Microsoft related news. Severity Rating: Critical
Revision Note: V1.0 (March 10, 2015): Bulletin published.
Summary: This security update resolves a vulnerability in the VBScript scripting engine in Microsoft Windows. The vulnerability could allow remote code execution if a user visits a specially crafted website. An attacker who successfully exploited this vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
Full View / NID: 53177 / Submitted by: The Zilla of Zuron

03.10.2015 - MS15-026 - Important: Vulnerabilities in Microsoft Exchange Server Could Allow Elevation of Privilege (3040856) - Version: 1.0



View Microsoft related news. Severity Rating: Important
Revision Note: V1.0 (March 10, 2015): Bulletin published.
Summary: This security update resolves vulnerabilities in Microsoft Exchange Server. The most severe of the vulnerabilities could allow elevation of privilege if a user clicks a specially crafted URL that takes them to a targeted Outlook Web App site. An attacker would have no way to force users to visit a specially crafted website. Instead, an attacker would have to convince them to visit the website, typically by getting them to click a link in an instant messenger or email message that takes them to the attacker's website, and then convince them to click the specially crafted URL.
Full View / NID: 53176 / Submitted by: The Zilla of Zuron

03.10.2015 - MS15-028 - Important: Vulnerability in Windows Task Scheduler Could Allow Security Feature Bypass (3030377) - Version: 1.0



View Microsoft related news. Severity Rating: Important
Revision Note: V1.0 (March 10, 2015): Bulletin published.
Summary: This security update resolves a privately reported vulnerability in Microsoft Windows. The vulnerability could allow Security Feature Bypass if a user runs a specially crafted application that is designed to cause Task Scheduler to improperly validate impersonation-level security.
Full View / NID: 53145 / Submitted by: The Zilla of Zuron

03.10.2015 - MS15-029 - Important: Vulnerability in Windows Photo Decoder Component Could Allow Information Disclosure (3035126) - Version: 1.0



View Microsoft related news. Severity Rating: Important
Revision Note: V1.0 (March 10, 2015): Bulletin published.
Summary: This security update resolves a privately reported vulnerability in Microsoft Windows. The vulnerability could allow information disclosure if a user browses to a website containing a specially crafted JPEG XR (.JXR) image. This vulnerability would not allow an attacker to execute code or to elevate their user rights directly, but it could be used to obtain information that could be used to try to further compromise the affected system.
Full View / NID: 53144 / Submitted by: The Zilla of Zuron

03.10.2015 - MS15-025 - Important: Vulnerabilities in Windows Kernel Could Allow Elevation of Privilege (3038680) - Version: 1.0



View Microsoft related news. Severity Rating: Important
Revision Note: V1.0 (March 10, 2015): Bulletin published.
Summary: This security update resolves two privately reported vulnerabilities in Microsoft Windows. The vulnerabilities could allow elevation of privilege if an attacker logs on to an affected system and runs a specially crafted application. An attacker who successfully exploited this vulnerability could run arbitrary code in the security context of the local system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
Full View / NID: 53143 / Submitted by: The Zilla of Zuron

03.10.2015 - MS15-024 - Important: Vulnerability in PNG Processing Could Allow Information Disclosure (3035132) - Version: 1.0



View Microsoft related news. Severity Rating: Important
Revision Note: V1.0 (March 10, 2015): Bulletin published.
Summary: This security update resolves a privately reported vulnerability in Microsoft Windows. The vulnerability could allow information disclosure if an attacker runs a specially crafted application on an affected system or convinces a user to visit a website that contains specially crafted PNG images.
Full View / NID: 53142 / Submitted by: The Zilla of Zuron

03.10.2015 - MS15-020 - Critical: Vulnerabilities in Microsoft Windows Could Allow Remote Code Execution (3041836) - Version: 1.1



View Microsoft related news. Severity Rating: Critical
Revision Note: V1.1 (March 10, 2015): Bulletin revised to better explain the attack vector for the DLL Planting Remote Code Execution Vulnerability (CVE-2015-0096).
Summary: This security update resolves two privately reported vulnerabilities in Microsoft Windows. The vulnerabilities could allow remote code execution if an attacker successfully convinces a user to browse to a specially crafted website, open a specially crafted file, or open a file in a working directory that contains a specially crafted DLL file.
Full View / NID: 53141 / Submitted by: The Zilla of Zuron

03.10.2015 - MS15-023 - Important: Vulnerabilities in Kernel-Mode Driver Could Allow Elevation of Privilege (3034344) - Version: 1.0



View Microsoft related news. Severity Rating: Important
Revision Note: V1.0 (March 10, 2015): Bulletin published.
Summary: This security update resolves four privately reported vulnerabilities in Microsoft Windows. The most severe of these vulnerabilities could allow security feature bypass if an attacker logs on to the system and runs a specially crafted application designed to increase privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full administrative rights.
Full View / NID: 53140 / Submitted by: The Zilla of Zuron

03.04.2015 - MS15-009 - Critical: Security Update for Internet Explorer (3034682) - Version: 1.1



View Microsoft related news. Severity Rating: Critical
Revision Note: V1.1 (March 4, 2015): Revised bulletin to clarify what additional updates will be installed, and how they will be installed, when security update 3021952 is installed on systems running Internet Explorer 9, Internet Explorer 10, or Internet Explorer 11. See the Update FAQ for more information. This is an informational change only. There were no changes to the update files. Customers who have already successfully updated their systems do not need to take any action.
Summary: This security update resolves one publicly disclosed and forty privately reported vulnerabilities in Internet Explorer. The most severe of these vulnerabilities could allow remote code execution if a user views a specially crafted webpage using Internet Explorer. An attacker who successfully exploited these vulnerabilities could gain the same user rights as the current user. Customers whose accounts are configured to have fewer user rights on the system could be less impacted than those who operate with administrative user rights.
Full View / NID: 53056 / Submitted by: The Zilla of Zuron

02.18.2015 - MS15-010 - Critical: Vulnerabilities in Windows Kernel-Mode Driver Could Allow Remote Code Execution (3036220) - Version: 1.1



View Microsoft related news. Severity Rating: Critical
Revision Note: V1.1 (February 18, 2015): Bulletin revised to add an Update FAQ that explains why there are two packages on the Microsoft Download Center pages for affected editions of Windows Server 2003, Windows Server 2008, and Windows Vista. The additional package (3037639) is not needed to be protected from the vulnerabilities addressed by the 3013455 update; it simply corrects a text quality problem that some customers experienced after installing the 3013455 update on the indicated systems.
Summary: This security update resolves six privately reported vulnerabilities in Microsoft Windows. The most severe of the vulnerabilities could allow remote code execution if an attacker convinces a user to open a specially crafted document or to visit an untrusted website that contains embedded TrueType fonts. To exploit the vulnerability an attacker would need to convince a user to open a specially crafted document or visit an untrusted website that contains embedded TrueType Fonts.
Full View / NID: 52818 / Submitted by: The Zilla of Zuron

02.10.2015 - MS15-009 - Critical: Security Update for Internet Explorer (3034682) - Version: 1.0



View Microsoft related news. Severity Rating: Critical
Revision Note: V1.0 (February 10, 2015): Bulletin published.
Summary: This security update resolves one publicly disclosed and forty privately reported vulnerabilities in Internet Explorer. The most severe of these vulnerabilities could allow remote code execution if a user views a specially crafted webpage using Internet Explorer. An attacker who successfully exploited these vulnerabilities could gain the same user rights as the current user. Customers whose accounts are configured to have fewer user rights on the system could be less impacted than those who operate with administrative user rights.
Full View / NID: 52769 / Submitted by: The Zilla of Zuron

02.10.2015 - MS15-016 - Important: Vulnerability in Microsoft Graphics Component Could Allow Information Disclosure (3029944) - Version: 1.0



View Microsoft related news. Severity Rating: Important
Revision Note: V1.0 (February 10, 2015): Bulletin published.
Summary: This security update resolves a privately reported vulnerability in Microsoft Windows. The vulnerability could allow information disclosure if a user browses to a website containing a specially crafted TIFF image. This vulnerability would not allow an attacker to execute code or to elevate their user rights directly, but it could be used to obtain information that could be used to try to further compromise the affected system.
Full View / NID: 52768 / Submitted by: The Zilla of Zuron

02.10.2015 - MS15-017 - Important: Vulnerability in Virtual Machine Manager Could Allow Elevation of Privilege (3035898) - Version: 1.0



View Microsoft related news. Severity Rating: Important
Revision Note: V1.0 (February 10, 2015): Bulletin published.
Summary: This security update resolves a privately reported vulnerability in Virtual Machine Manager (VMM). The vulnerability could allow elevation of privilege if an attacker logs on an affected system. An attacker must have valid Active Directory logon credentials and be able to log on with those credentials to exploit the vulnerability.
Full View / NID: 52767 / Submitted by: The Zilla of Zuron

02.10.2015 - MS15-011 - Critical: Vulnerability in Group Policy Could Allow Remote Code Execution (3000483) - Version: 1.0



View Microsoft related news. Severity Rating: Critical
Revision Note: V1.0 (February 10, 2015): Bulletin published.
Summary: This security update resolves a privately reported vulnerability in Microsoft Windows. A remote code execution vulnerability exists in how group policy receives and applies connection data when a domain-joined system connects to a domain controller. An attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
Full View / NID: 52766 / Submitted by: The Zilla of Zuron

02.10.2015 - MS15-010 - Critical: Vulnerabilities in Windows Kernel-Mode Driver Could Allow Remote Code Execution (3036220) - Version: 1.0



View Microsoft related news. Severity Rating: Critical
Revision Note: V1.0 (February 10, 2015): Bulletin published.
Summary: This security update resolves six privately reported vulnerabilities in Microsoft Windows. The most severe of the vulnerabilities could allow remote code execution if an attacker convinces a user to open a specially crafted document or to visit an untrusted website that contains embedded TrueType fonts. To exploit the vulnerability an attacker would need to convince a user to open a specially crafted document or visit an untrusted website that contains embedded TrueType Fonts.
Full View / NID: 52720 / Submitted by: The Zilla of Zuron

02.10.2015 - MS15-015 - Important: Vulnerability in Microsoft Windows Could Allow Elevation of Privilege (3031432) - Version: 1.0



View Microsoft related news. Severity Rating: Important
Revision Note: V1.0 (February 10, 2015): Bulletin published.
Summary: This security update resolves a privately reported vulnerability in Microsoft Windows. The vulnerability could allow elevation of privilege if an authenticated attacker acquires administrator credentials and runs a specially crafted application designed to increase privileges.
Full View / NID: 52713 / Submitted by: The Zilla of Zuron

02.10.2015 - MS15-014 - Important: Vulnerability in Group Policy Could Allow Security Feature Bypass (3004361) - Version: 1.0



View Microsoft related news. Severity Rating: Important
Revision Note: V1.0 (February 10, 2015): V1.0 (February 10, 2015): Bulletin published.
Summary: Bulletin published.
Full View / NID: 52712 / Submitted by: The Zilla of Zuron

02.10.2015 - MS15-013 - Important: Vulnerability in Microsoft Office Could Allow Security Feature Bypass (3033857) - Version: 1.0



View Microsoft related news. Severity Rating: Important
Revision Note: V1.0 (February 10, 2015): Bulletin published.
Summary: This security update resolves one publicly disclosed vulnerability in Microsoft Office. The vulnerability could allow security feature bypass if a user opens a specially crafted Microsoft Office file. The security feature bypass by itself does not allow arbitrary code execution. However, an attacker could use this security feature bypass vulnerability in conjunction with another vulnerability, such as a remote code execution vulnerability, to run arbitrary code.
Full View / NID: 52711 / Submitted by: The Zilla of Zuron

02.10.2015 - MS15-012 - Important: Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (3032328) - Version: 1.0



View Microsoft related news. Severity Rating: Important
Revision Note: V1.0 (February 10, 2015): Bulletin published.
Summary: This security update resolves three privately reported vulnerabilities in Microsoft Office. The vulnerabilities could allow remote code execution if a user opens a specially crafted Microsoft Office file. An attacker who successfully exploited the vulnerabilities could gain the same user rights as the current user. Customers whose accounts are configured to have fewer user rights on the system could be less impacted than those who operate with administrative user rights.
Full View / NID: 52710 / Submitted by: The Zilla of Zuron
  Most Viewed  
  Quick Links  
  Top Affiliates  
.......