Microsoft Update Tuesday November 2014: Fixes for 3 0
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2014-4077 | Sandbox Escape Privilege Escalation in Microsoft Japanese IME (Windows) | — | 55% | KEV | — KEV |
| CVE-2014-4114 | Remote Code Execution in Microsoft Windows OLE via Crafted Files | — | 82% | KEV | — KEV |
| CVE-2014-6332 | Remote Code Execution via Array Bounds Flaw in Microsoft Windows OLE Automation | — | 95% | KEV | — KEV |
| CVE-2014-6352 | Remote Code Execution in Microsoft Windows via Crafted OLE Objects (CVE-2014-6352) | — | 77% | KEV | — KEV |
From the original article
3 min read at blog.talosintelligence.com
This month Microsoft is releasing 14 security bulletins. Originally they had planned to release 16, but due to issues that emerged in late testing, two bulletins that were announced in the Advance Security Notification, MS14-068 and MS14-075, have been postponed. Of the 14 bulletins, four are considered critical, eight are important, while two are moderate.
blog.talosintelligence.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.