February 2015 Updates

[Guest MSRC Team]

Today, as part of Update Tuesday, we released nine security bulletins – three rated Critical and six rated Important in severity, to address 56 unique Common Vulnerabilities and Exposures (CVEs) in Microsoft Windows, Microsoft Office, Internet Explorer, and Microsoft Server software.

 

We encourage you to apply all of these updates. For more information about this month’s security updates, including the detailed view of the Exploitability Index (XI) broken down by each CVE, visit the Microsoft Bulletin Summary webpage. If you are not familiar with how we calculate the XI, a full description can be found here.

 

We re-released one Security Bulletin:

 

• MS14-083 Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution
  

 

One new Security Advisory was released:

 

• Update for Windows Command Line Auditing (3004375).
  

 

One Security Advisory was revised:

 

• Vulnerability in SSL 3.0 Could Allow Information Disclosure (3009008).
  

 

We also announced changes related to SSL 3.0 and you can read more about these on the IE blog.

 

For the latest information, you can follow the Microsoft Security Response Center (MSRC) team on Twitter at @MSFTSecResponse.

 

MSRC Team

 

 

Continue reading...