Severity: High Summary: These vulnerabilities affect: Microsoft Office related products, including Word, Visio, Publisher, and Lync How an attacker exploits them: Typically by enticing users to open or interact with maliciously crafted Office documents Impact: In the worst case, an attacker can gain complete control of your Windows computer What to do: Install the … [Read more...]
Microsoft Black Tuesday: Fix for IE8 Zero Day and More
Calling all Microsoft administrators. It's time to spin up your virtual test machines and download, test, and deploy May's batch of Microsoft security updates. This month's theme is IE updates; with a focus on a recent IE zero day vulnerability, as well as a continuation of the "use after free" vulnerability theme I commented on last month. According to their summary post, … [Read more...]
Microsoft Black Tuesday: Office, Windows, and SQL Server Updates
Like clockwork, Microsoft's Patch Tuesday has gone live. This month Microsoft seems to be focusing on Office and their Server Software, with the Windows updates posing only a moderate risk. As promised, Microsoft released seven bulletins fixing vulnerabilities in several of their products. The affected software includes: Word and the Word Viewer Works 9 SQL … [Read more...]