Microsoft Security Bulletin Summary for April 2015

Status
Not open for further replies.

Petrovic

Level 64
Thread author
Verified
Honorary Member
Top Poster
Well-known
Apr 25, 2013
5,355
Critical:

  • MS15-032 Cumulative Security Update for Internet Explorer (3038314)
  • MS15-033 Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (3048019)
  • MS15-034 Vulnerability in HTTP.sys Could Allow Remote Code Execution (3042553)
  • MS15-035 Vulnerability in Microsoft Graphics Component Could Allow Remote Code Execution (3046306)
Important:

  • MS15-036 Vulnerabilities in Microsoft SharePoint Server Could Allow Elevation of Privilege (3052044)
  • MS15-037 Vulnerability in Windows Task Scheduler Could Allow Elevation of Privilege (3046269)
  • MS15-038 Vulnerabilities in Microsoft Windows Could Allow Elevation of Privilege (3049576)
  • MS15-039 Vulnerability in XML Core Services Could Allow Security Feature Bypass (3046482)
  • MS15-040 Vulnerability in Active Directory Federation Services Could Allow Information Disclosure (3045711)
  • MS15-041 Vulnerability in .NET Framework Could Allow Information Disclosure (3048010)
  • MS15-042 Vulnerability in Windows Hyper-V Could Allow Denial of Service (3047234)
Additional Update Notes
  • MSRT -- Microsoft released an updated version of the Microsoft Windows Malicious Software Removal Tool on Windows Update, Microsoft Update, Windows Server Update Services, and the Download Center.

    The updated version includes the Win32/Saluchtra, Win32/Dexter, Win32/Unskal andWin32/IeEnablerCby malware families. Additional details ave available in the MMPC blog post.
  • Internet Explorer -- For additional information about the blocking of out-of-date ActiveX controls see the TechNet article, Out-of-date ActiveX control blocking. Additional changes introduced this month include the blocking of outdated Silverlight. Additional information is available in the IE Blog.
  • Windows 8.x -- Non-security new features and improvements for Windows 8.1 are now included with the second Tuesday of the month updates. Additional information about this change is available here.
  • Windows XP -- Although Microsoft has stopped providing Microsoft Security Essentials for Windows XP, definitions will be available until July 15, 2015. See Microsoft antimalware support for Windows XP. The MSRT still works on Windows XP.
MSRC: April 2015 Updates

TechNet: Microsoft Security Bulletin for April 2015

via securitygarden.blogspot.ru
 

Terry Ganzi

Level 26
Verified
Top Poster
Well-known
Feb 7, 2014
1,540
Critical:

  • MS15-032 Cumulative Security Update for Internet Explorer (3038314)
  • MS15-033 Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (3048019)
  • MS15-034 Vulnerability in HTTP.sys Could Allow Remote Code Execution (3042553)
  • MS15-035 Vulnerability in Microsoft Graphics Component Could Allow Remote Code Execution (3046306)
Important:

  • MS15-036 Vulnerabilities in Microsoft SharePoint Server Could Allow Elevation of Privilege (3052044)
  • MS15-037 Vulnerability in Windows Task Scheduler Could Allow Elevation of Privilege (3046269)
  • MS15-038 Vulnerabilities in Microsoft Windows Could Allow Elevation of Privilege (3049576)
  • MS15-039 Vulnerability in XML Core Services Could Allow Security Feature Bypass (3046482)
  • MS15-040 Vulnerability in Active Directory Federation Services Could Allow Information Disclosure (3045711)
  • MS15-041 Vulnerability in .NET Framework Could Allow Information Disclosure (3048010)
  • MS15-042 Vulnerability in Windows Hyper-V Could Allow Denial of Service (3047234)
Additional Update Notes
  • MSRT -- Microsoft released an updated version of the Microsoft Windows Malicious Software Removal Tool on Windows Update, Microsoft Update, Windows Server Update Services, and the Download Center.

    The updated version includes the Win32/Saluchtra, Win32/Dexter, Win32/Unskal andWin32/IeEnablerCby malware families. Additional details ave available in the MMPC blog post.
  • Internet Explorer -- For additional information about the blocking of out-of-date ActiveX controls see the TechNet article, Out-of-date ActiveX control blocking. Additional changes introduced this month include the blocking of outdated Silverlight. Additional information is available in the IE Blog.
  • Windows 8.x -- Non-security new features and improvements for Windows 8.1 are now included with the second Tuesday of the month updates. Additional information about this change is available here.
  • Windows XP -- Although Microsoft has stopped providing Microsoft Security Essentials for Windows XP, definitions will be available until July 15, 2015. See Microsoft antimalware support for Windows XP. The MSRT still works on Windows XP.
MSRC: April 2015 Updates

TechNet: Microsoft Security Bulletin for April 2015

via securitygarden.blogspot.ru
Critical:
Important:
http://securitygarden.blogspot.ru/2015/04/microsoft-security-bulletin-release-for.html
Additional Update Notes
MSRC: April 2015 Updates

TechNet: Microsoft Security Bulletin for April 2015

via securitygarden.blogspot.ru
http://securitygarden.blogspot.ru/2015/04/microsoft-security-bulletin-release-for.html

Thanks for the heads up Champ.:)
 
Status
Not open for further replies.

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top