Vulnerabilitycritical
Microsoft Security Updates July 2015
- CVEs
- CVE-2015-2424CVE-2015-2387CVE-2015-2419CVE-2015-2361CVE-2015-2362CVE-2015-1729CVE-2015-1733CVE-2015-1738CVE-2015-1761CVE-2015-1762CVE-2015-1763CVE-2015-1767CVE-2015-2363CVE-2015-2364CVE-2015-2365CVE-2015-2366CVE-2015-2367CVE-2015-2368CVE-2015-2369CVE-2015-2370CVE-2015-2371CVE-2015-2372CVE-2015-2373CVE-2015-2374CVE-2015-2375CVE-2015-2376CVE-2015-2377CVE-2015-2378CVE-2015-2379CVE-2015-2380CVE-2015-2381CVE-2015-2382CVE-2015-2383CVE-2015-2384CVE-2015-2385CVE-2015-2388CVE-2015-2389CVE-2015-2390CVE-2015-2391CVE-2015-2397CVE-2015-2398CVE-2015-2401CVE-2015-2402CVE-2015-2403CVE-2015-2404CVE-2015-2406CVE-2015-2408CVE-2015-2410CVE-2015-2411CVE-2015-2412CVE-2015-2413CVE-2015-2414CVE-2015-2415CVE-2015-2416CVE-2015-2417CVE-2015-2421CVE-2015-2422CVE-2015-2425
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2015-2387 | Local Privilege Escalation in Microsoft ATM Font Driver (ATMFD.DLL) | — | 35% | KEV | — KEV |
| CVE-2015-2419 | Memory Corruption RCE in Microsoft Internet Explorer JScript Engine | — | 53% | KEV | — KEV |
| CVE-2015-2424 | Memory Corruption RCE in Microsoft PowerPoint via Crafted Office Documents | — | 40% | KEV | — KEV |
| CVE-2015-2425 | Memory Corruption RCE in Microsoft Internet Explorer | — | 45% | KEV | — KEV |
From the original article
3 min read at securelist.com
A month of remote code execution vulnerabilities in RDP and Hyper-V, limited targeted exploitation, and responsible disclosure Microsoft releases a long list of updates to multiple technologies today with 14 Security Bulletins (MS15-058, MS15-065 – MS15-077) patching 58 vulnerabilities, and at least 47 of them reported through a a responsible disclosure channel.
By @Securelist · securelist.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.