Qualys Vulnerability R&D Lab has released new vulnerability checks in the Qualys Cloud Platform to protect organizations against 49 vulnerabilities that were fixed in 12 bulletins announced today by Microsoft. Customers can immediately audit their networks for these and other new vulnerabilities by accessing their Qualys subscription. Visit Qualys Security Blog to prioritize remediation.
Non-Qualys customers can audit their network for these and other vulnerabilities by signing up for a Qualys Free Trial, or by trying Qualys Community Edition.
Microsoft has released 12 security bulletins to fix newly discovered flaws in their software. Qualys has released the following checks for these new vulnerabilities:
Microsoft has released a security update that corrects how NDIS validates buffer length.
This security update is rated Important for all supported editions of Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2.
Patches:
The following are links for downloading patches to fix these vulnerabilities:
MS15-117 Windows 7 for 32-bit Systems Service Pack 1
MS15-117 Windows 7 for x64-based Systems Service Pack 1
MS15-117 Windows Server 2008 R2 for Itanium-based Systems Service Pack 1
MS15-117 Windows Server 2008 R2 for x64-based Systems Service Pack 1
MS15-117 Windows Server 2008 for 32-bit Systems Service Pack 2
MS15-117 Windows Server 2008 for Itanium-based Systems Service Pack 2
MS15-117 Windows Server 2008 for x64-based Systems Service Pack 2
MS15-117 Windows Vista Service Pack 2
MS15-117 Windows Vista x64 Edition Service Pack 2
An elevation of privilege vulnerability exists in Microsoft Office software when an attacker instantiates an affected Office application via a COM control.
A spoofing vulnerability that could lead to information disclosure exists when Microsoft Outlook for Mac does not sanitize HTML or treat it in a safe manner.
The security update addresses the vulnerabilities by:
- Correcting how Office handles objects in memory
- Ensuring that Internet Explorer prevents affected Office applications from being instantiated via a COM control
- Correcting how Microsoft Outlook validates and sanitizes HTML input
The security update is rated Important for all supported versions of Office.
Patches:
The following are links for downloading patches to fix these vulnerabilities:
MS15-116 Excel Services on Microsoft SharePoint Server 2007 Service Pack 3 (32-bit editions)
MS15-116 Excel Services on Microsoft SharePoint Server 2007 Service Pack 3 (64-bit editions)
MS15-116 Excel Services on Microsoft SharePoint Server 2010 Service Pack 2
MS15-116 Excel Services on Microsoft SharePoint Server 2013 Service Pack 1
MS15-116 Microsoft Access 2007 Service Pack 3
MS15-116 Microsoft Access 2010 Service Pack 2 (32-bit editions)
MS15-116 Microsoft Access 2010 Service Pack 2 (64-bit editions)
MS15-116 Microsoft Access 2013 Service Pack 1 (32-bit editions)
MS15-116 Microsoft Access 2013 Service Pack 1 (64-bit editions)
MS15-116 Microsoft Access 2016 (32-bit edition)
MS15-116 Microsoft Access 2016 (64-bit edition)
MS15-116 Microsoft Excel 2007 Service Pack 3
MS15-116 Microsoft Excel 2010 Service Pack 2 (32-bit editions)
MS15-116 Microsoft Excel 2010 Service Pack 2 (64-bit editions)
MS15-116 Microsoft Excel 2013 Service Pack 1 (32-bit editions)
MS15-116 Microsoft Excel 2013 Service Pack 1 (64-bit editions)
MS15-116 Microsoft Excel 2016 (32-bit edition)
MS15-116 Microsoft Excel 2016 (64-bit edition)
MS15-116 Microsoft Excel 2016 for Mac
MS15-116 Microsoft Excel Viewer
MS15-116 Microsoft Excel for Mac 2011
MS15-116 Microsoft InfoPath 2007 Service Pack 3
MS15-116 Microsoft InfoPath 2010 Service Pack 2 (32-bit editions)
MS15-116 Microsoft InfoPath 2010 Service Pack 2 (64-bit editions)
MS15-116 Microsoft InfoPath 2013 Service Pack 1 (32-bit editions)
MS15-116 Microsoft InfoPath 2013 Service Pack 1 (64-bit editions)
MS15-116 Microsoft Office 2007 IME (Japanese) Service Pack 3
MS15-116 Microsoft Office 2007 Service Pack 3
MS15-116 Microsoft Office 2010 Service Pack 2 (32-bit editions)
MS15-116 Microsoft Office 2010 Service Pack 2 (32-bit editions)
MS15-116 Microsoft Office 2010 Service Pack 2 (64-bit editions)
MS15-116 Microsoft Office 2010 Service Pack 2 (64-bit editions)
MS15-116 Microsoft Office 2013 Service Pack 1 (32-bit editions)
MS15-116 Microsoft Office 2013 Service Pack 1 (64-bit editions)
MS15-116 Microsoft Office 2016 (32-bit edition)
MS15-116 Microsoft Office 2016 (32-bit edition)
MS15-116 Microsoft Office 2016 (64-bit edition)
MS15-116 Microsoft Office 2016 (64-bit edition)
MS15-116 Microsoft Office Compatibility Pack Service Pack 3
MS15-116 Microsoft Office Compatibility Pack Service Pack 3
MS15-116 Microsoft Office Web Apps 2010 Service Pack 2
MS15-116 Microsoft Office Web Apps Server 2013 Service Pack 1
MS15-116 Microsoft OneNote 2007 Service Pack 3
MS15-116 Microsoft OneNote 2010 Service Pack 2 (32-bit editions)
MS15-116 Microsoft OneNote 2010 Service Pack 2 (64-bit editions)
MS15-116 Microsoft OneNote 2013 Service Pack 1 (32-bit editions)
MS15-116 Microsoft OneNote 2013 Service Pack 1 (64-bit editions)
MS15-116 Microsoft OneNote 2016 (32-bit edition)
MS15-116 Microsoft OneNote 2016 (64-bit edition)
MS15-116 Microsoft Pinyin IME 2010 (32-bit version)
MS15-116 Microsoft Pinyin IME 2010 (64-bit version)
MS15-116 Microsoft PowerPoint 2007 Service Pack 3
MS15-116 Microsoft PowerPoint 2010 Service Pack 2 (32-bit editions)
MS15-116 Microsoft PowerPoint 2010 Service Pack 2 (64-bit editions)
MS15-116 Microsoft PowerPoint 2013 Service Pack 1 (32-bit editions)
MS15-116 Microsoft PowerPoint 2013 Service Pack 1 (64-bit editions)
MS15-116 Microsoft PowerPoint 2016 (32-bit edition)
MS15-116 Microsoft PowerPoint 2016 (64-bit edition)
MS15-116 Microsoft Project 2007 Service Pack 3
MS15-116 Microsoft Project 2010 Service Pack 2 (32-bit editions)
MS15-116 Microsoft Project 2010 Service Pack 2 (64-bit editions)
MS15-116 Microsoft Project 2013 Service Pack 1 (32-bit editions)
MS15-116 Microsoft Project 2013 Service Pack 1 (64-bit editions)
MS15-116 Microsoft Project 2016 (32-bit edition)
MS15-116 Microsoft Project 2016 (64-bit edition)
MS15-116 Microsoft Publisher 2007 Service Pack 3
MS15-116 Microsoft Publisher 2010 Service Pack 2 (32-bit editions)
MS15-116 Microsoft Publisher 2010 Service Pack 2 (64-bit editions)
MS15-116 Microsoft Publisher 2013 Service Pack 1 (32-bit editions)
MS15-116 Microsoft Publisher 2013 Service Pack 1 (64-bit editions)
MS15-116 Microsoft Publisher 2016 (32-bit edition)
MS15-116 Microsoft Publisher 2016 (64-bit edition)
MS15-116 Microsoft Visio 2007 Service Pack 3
MS15-116 Microsoft Visio 2010 Service Pack 2 (32-bit editions)
MS15-116 Microsoft Visio 2010 Service Pack 2 (64-bit editions)
MS15-116 Microsoft Visio 2013 Service Pack 1 (32-bit editions)
MS15-116 Microsoft Visio 2013 Service Pack 1 (64-bit editions)
MS15-116 Microsoft Visio 2016 (32-bit edition)
MS15-116 Microsoft Visio 2016 (64-bit edition)
MS15-116 Microsoft Word 2007 Service Pack 3
MS15-116 Microsoft Word 2010 Service Pack 2 (32-bit editions)
MS15-116 Microsoft Word 2010 Service Pack 2 (64-bit editions)
MS15-116 Microsoft Word 2013 Service Pack 1 (32-bit editions)
MS15-116 Microsoft Word 2013 Service Pack 1 (64-bit editions)
MS15-116 Microsoft Word 2016 (32-bit edition)
MS15-116 Microsoft Word 2016 (64-bit edition)
MS15-116 Microsoft Word Viewer
MS15-116 Word Automation Services on Microsoft SharePoint Server 2010 Service Pack 2
MS15-116 Word Automation Services on Microsoft SharePoint Server 2013 Service Pack 1
This security update resolves vulnerabilities in Internet Explorer. The most severe of the vulnerabilities could allow remote code execution if a user views a specially crafted webpage using Internet Explorer.
This security update is rated Critical for Internet Explorer 7 (IE 7), Internet Explorer 8 (IE 8), Internet Explorer 9 (IE 9), Internet Explorer 10 (IE 10), and Internet Explorer 11 (IE 11) on affected Windows clients, and Moderate for Internet Explorer 7 (IE 7), Internet Explorer 8 (IE 8), Internet Explorer 9 (IE 9), Internet Explorer 10 (IE 10), and Internet Explorer 11 (IE 11) on affected Windows servers.
Patches:
The following are links for downloading patches to fix these vulnerabilities:
MS15-112 Windows 10 Version 1511 for 32-bit Systems
MS15-112 Windows 10 Version 1511 for x64-based Systems
MS15-112 Windows 10 for 32-bit Systems
MS15-112 Windows 10 for x64-based Systems
MS15-112 Windows 7 for 32-bit Systems Service Pack 1(Internet Explorer 10)
MS15-112 Windows 7 for 32-bit Systems Service Pack 1(Internet Explorer 11)
MS15-112 Windows 7 for 32-bit Systems Service Pack 1(Internet Explorer 8)
MS15-112 Windows 7 for 32-bit Systems Service Pack 1(Internet Explorer 9)
MS15-112 Windows 7 for x64-based Systems Service Pack 1(Internet Explorer 10)
MS15-112 Windows 7 for x64-based Systems Service Pack 1(Internet Explorer 11)
MS15-112 Windows 7 for x64-based Systems Service Pack 1(Internet Explorer 8)
MS15-112 Windows 7 for x64-based Systems Service Pack 1(Internet Explorer 9)
MS15-112 Windows 8 for 32-bit Systems(Internet Explorer 10)
MS15-112 Windows 8 for x64-based Systems(Internet Explorer 10)
MS15-112 Windows 8.1 for 32-bit Systems(Internet Explorer 11)
MS15-112 Windows 8.1 for x64-based Systems(Internet Explorer 11)
MS15-112 Windows Server 2008 R2 for Itanium-based Systems Service Pack 1(Internet Explorer 8)
MS15-112 Windows Server 2008 R2 for x64-based Systems Service Pack 1(Internet Explorer 10)
MS15-112 Windows Server 2008 R2 for x64-based Systems Service Pack 1(Internet Explorer 11)
MS15-112 Windows Server 2008 R2 for x64-based Systems Service Pack 1(Internet Explorer 8)
MS15-112 Windows Server 2008 R2 for x64-based Systems Service Pack 1(Internet Explorer 9)
MS15-112 Windows Server 2008 for 32-bit Systems Service Pack 2(Internet Explorer 7)
MS15-112 Windows Server 2008 for 32-bit Systems Service Pack 2(Internet Explorer 8)
MS15-112 Windows Server 2008 for 32-bit Systems Service Pack 2(Internet Explorer 9)
MS15-112 Windows Server 2008 for Itanium-based Systems Service Pack 2(Internet Explorer 7)
MS15-112 Windows Server 2008 for x64-based Systems Service Pack 2(Internet Explorer 7)
MS15-112 Windows Server 2008 for x64-based Systems Service Pack 2(Internet Explorer 8)
MS15-112 Windows Server 2008 for x64-based Systems Service Pack 2(Internet Explorer 9)
MS15-112 Windows Server 2012(Internet Explorer 10)
MS15-112 Windows Server 2012 R2(Internet Explorer 11)
MS15-112 Windows Vista Service Pack 2(Internet Explorer 7)
MS15-112 Windows Vista Service Pack 2(Internet Explorer 8)
MS15-112 Windows Vista Service Pack 2(Internet Explorer 9)
MS15-112 Windows Vista x64 Edition Service Pack 2(Internet Explorer 7)
MS15-112 Windows Vista x64 Edition Service Pack 2(Internet Explorer 8)
MS15-112 Windows Vista x64 Edition Service Pack 2(Internet Explorer 9)
This security update resolves vulnerabilities in Microsoft Edge. The most severe of the vulnerabilities could allow information disclosure if a user views a specially crafted webpage using Microsoft Edge.
This security update is rated Important for Microsoft Edge on Windows 10.
Patches:
The following are links for downloading patches to fix these vulnerabilities:
MS15-113 Windows 10 Version 1511 for 32-bit Systems
MS15-113 Windows 10 Version 1511 for x64-based Systems
MS15-113 Windows 10 for 32-bit Systems
MS15-113 Windows 10 for x64-based Systems
The update addresses the vulnerability by modifying how Windows Journal parses Journal files.
This security update is rated Critical.
Affected Versions:
Windows Vista, Windows Server 2008, Windows 7 and Windows Server 2008 R2.
Patches:
The following are links for downloading patches to fix these vulnerabilities:
MS15-114 Windows 7 for 32-bit Systems Service Pack 1
MS15-114 Windows 7 for x64-based Systems Service Pack 1
MS15-114 Windows Server 2008 R2 for x64-based Systems Service Pack 1
MS15-114 Windows Server 2008 for 32-bit Systems Service Pack 2
MS15-114 Windows Server 2008 for x64-based Systems Service Pack 2
MS15-114 Windows Vista Service Pack 2
MS15-114 Windows Vista x64 Edition Service Pack 2
- Multiple elevation of privilege vulnerabilities exist in the way that Windows handles objects in memory.
- Multiple information disclosure vulnerabilities exist when Windows fails to properly initialize memory addresses, allowing an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (KASLR) bypass.
- Multiple remote code execution vulnerabilities exist when the Adobe Type Manager Library in Windows improperly handles specially crafted embedded fonts.
Patches:
The following are links for downloading patches to fix these vulnerabilities:
MS15-115 Windows 10 Version 1511 for 32-bit Systems
MS15-115 Windows 10 Version 1511 for x64-based Systems
MS15-115 Windows 10 for 32-bit Systems
MS15-115 Windows 10 for x64-based Systems
MS15-115 Windows 7 for 32-bit Systems Service Pack 1
MS15-115 Windows 7 for 32-bit Systems Service Pack 1
MS15-115 Windows 7 for x64-based Systems Service Pack 1
MS15-115 Windows 7 for x64-based Systems Service Pack 1
MS15-115 Windows 8 for 32-bit Systems
MS15-115 Windows 8 for 32-bit Systems
MS15-115 Windows 8 for x64-based Systems
MS15-115 Windows 8 for x64-based Systems
MS15-115 Windows 8.1 for 32-bit Systems
MS15-115 Windows 8.1 for 32-bit Systems
MS15-115 Windows 8.1 for x64-based Systems
MS15-115 Windows 8.1 for x64-based Systems
MS15-115 Windows Server 2008 R2 for Itanium-based Systems Service Pack 1
MS15-115 Windows Server 2008 R2 for Itanium-based Systems Service Pack 1
MS15-115 Windows Server 2008 R2 for x64-based Systems Service Pack 1
MS15-115 Windows Server 2008 R2 for x64-based Systems Service Pack 1
MS15-115 Windows Server 2008 for 32-bit Systems Service Pack 2
MS15-115 Windows Server 2008 for 32-bit Systems Service Pack 2
MS15-115 Windows Server 2008 for Itanium-based Systems Service Pack 2
MS15-115 Windows Server 2008 for Itanium-based Systems Service Pack 2
MS15-115 Windows Server 2008 for x64-based Systems Service Pack 2
MS15-115 Windows Server 2008 for x64-based Systems Service Pack 2
MS15-115 Windows Server 2012
MS15-115 Windows Server 2012
MS15-115 Windows Server 2012 R2
MS15-115 Windows Server 2012 R2
MS15-115 Windows Vista Service Pack 2
MS15-115 Windows Vista Service Pack 2
MS15-115 Windows Vista x64 Edition Service Pack 2
MS15-115 Windows Vista x64 Edition Service Pack 2
A cross-site scripting (XSS) vulnerability exists in the way that .NET Framework validates the value of a HTTP request. An attacker who successfully exploited this vulnerability could inject a client-side script in the user's browser (CVE-2015-6099).
An information disclosure vulnerability exists in the .NET Framework DTD parsing of certain specially crafted XML files. An attacker who successfully exploited this vulnerability could gain read access to local files on the target system (CVE-2015-6096).
A security feature bypass exists in a .NET Framework component that does not properly implement the Address Space Layout Randomization (ASLR) security feature, which protects users from a broad class of vulnerabilities. The ASLR bypass could allow an attacker to bypass the security feature and then load additional malicious code in an attempt to exploit another vulnerability (CVE-2015-6115).
This security update is rated Important for Microsoft .NET Framework 2.0 Service Pack 2, Microsoft .NET Framework 3.5, Microsoft .NET Framework 3.5.1, Microsoft .NET Framework 4, Microsoft .NET Framework 4.5, Microsoft .NET Framework 4.5.1, Microsoft .NET Framework 4.5.2, and Microsoft .NET Framework 4.6 on affected releases of Microsoft Windows
Patches:
The following are links for downloading patches to fix these vulnerabilities:
MS15-118 Windows 10(Microsoft .NET Framework 3.5)
MS15-118 Windows 10(Microsoft .NET Framework 4.6)
MS15-118 Windows 7 Service Pack 1(Microsoft .NET Framework 3.5.1)
MS15-118 Windows 7 Service Pack 1(Microsoft .NET Framework 4)
MS15-118 Windows 7 Service Pack 1(Microsoft .NET Framework 4)
MS15-118 Windows 7 Service Pack 1(Microsoft .NET Framework 4.6)
MS15-118 Windows 7 Service Pack 1(Microsoft .NET Framework 4.6)
MS15-118 Windows 7 Service Pack 1(icrosoft .NET Framework 4.5/4.5.1/4.5.2)
MS15-118 Windows 7 Service Pack 1(icrosoft .NET Framework 4.5/4.5.1/4.5.2)
MS15-118 Windows 8(Microsoft .NET Framework 4.5/4.5.1/4.5.2)
MS15-118 Windows 8(Microsoft .NET Framework 4.6)
MS15-118 Windows 8(Microsoft .NET Framework 4.6)
MS15-118 Windows 8(Microsoft .NET Framework 3.5)
MS15-118 Windows 8(Microsoft .NET Framework 4.5/4.5.1/4.5.2)
MS15-118 Windows 8.1(Microsoft .NET Framework 3.5)
MS15-118 Windows 8.1(Microsoft .NET Framework 4.5.1)
MS15-118 Windows 8.1(Microsoft .NET Framework 4.5.1 and 4.5.2)
MS15-118 Windows 8.1(Microsoft .NET Framework 4.6)
MS15-118 Windows 8.1(Microsoft .NET Framework 4.6)
MS15-118 Windows Server 2008 R2 for x64-based Systems Service Pack 1(Microsoft .NET Framework 3.5.1)
MS15-118 Windows Server 2008 R2 for x64-based Systems Service Pack 1(Microsoft .NET Framework 4)
MS15-118 Windows Server 2008 R2 for x64-based Systems Service Pack 1(Microsoft .NET Framework 4)
MS15-118 Windows Server 2008 R2 for x64-based Systems Service Pack 1(Microsoft .NET Framework 4.6)
MS15-118 Windows Server 2008 R2 for x64-based Systems Service Pack 1(Microsoft .NET Framework 4.6)
MS15-118 Windows Server 2008 R2 for x64-based Systems Service Pack 1(icrosoft .NET Framework 4.5/4.5.1/4.5.2)
MS15-118 Windows Server 2008 R2 for x64-based Systems Service Pack 1(icrosoft .NET Framework 4.5/4.5.1/4.5.2)
MS15-118 Windows Server 2008 Service Pack 2(Microsoft .NET Framework 2.0 Service Pack 2)
MS15-118 Windows Server 2008 Service Pack 2(Microsoft .NET Framework 4)
MS15-118 Windows Server 2008 Service Pack 2(Microsoft .NET Framework 4)
MS15-118 Windows Server 2008 Service Pack 2(Microsoft .NET Framework 4.5/4.5.1/4.5.2)
MS15-118 Windows Server 2008 Service Pack 2(Microsoft .NET Framework 4.5/4.5.1/4.5.2)
MS15-118 Windows Server 2008 Service Pack 2(Microsoft .NET Framework 4.6)
MS15-118 Windows Server 2008 Service Pack 2(Microsoft .NET Framework 4.6)
MS15-118 Windows Server 2012(Microsoft .NET Framework 3.5)
MS15-118 Windows Server 2012(Microsoft .NET Framework 4.5/4.5.1/4.5.2)
MS15-118 Windows Server 2012(Microsoft .NET Framework 4.5/4.5.1/4.5.2)
MS15-118 Windows Server 2012(Microsoft .NET Framework 4.6)
MS15-118 Windows Server 2012(Microsoft .NET Framework 4.6)
MS15-118 Windows Server 2012 R2(Microsoft .NET Framework 3.5)
MS15-118 Windows Server 2012 R2(Microsoft .NET Framework 4.5.1)
MS15-118 Windows Server 2012 R2(Microsoft .NET Framework 4.5.1 and 4.5.2)
MS15-118 Windows Server 2012 R2(Microsoft .NET Framework 4.6)
MS15-118 Windows Server 2012 R2(Microsoft .NET Framework 4.6)
MS15-118 Windows Vista Service Pack 2(Microsoft .NET Framework 2.0 Service Pack 2)
MS15-118 Windows Vista Service Pack 2(Microsoft .NET Framework 4)
MS15-118 Windows Vista Service Pack 2(Microsoft .NET Framework 4)
MS15-118 Windows Vista Service Pack 2(Microsoft .NET Framework 4.5/4.5.1/4.5.2)
MS15-118 Windows Vista Service Pack 2(Microsoft .NET Framework 4.5/4.5.1/4.5.2)
MS15-118 Windows Vista Service Pack 2(Microsoft .NET Framework 4.6)
MS15-118 Windows Vista Service Pack 2(Microsoft .NET Framework 4.6)
An elevation of privilege vulnerability exists in Microsoft Windows when Winsock makes a call to a memory address without verifying that the address is valid.
Microsoft has released a security update that addresses the vulnerability by preventing Winsock from accessing invalid memory addresses.
This security update is rated Important for all supported releases of Microsoft Windows.
Patches:
The following are links for downloading patches to fix these vulnerabilities:
MS15-119 Windows 10 Version 1511 for 32-bit Systems
MS15-119 Windows 10 Version 1511 for x64-based Systems
MS15-119 Windows 10 for 32-bit Systems
MS15-119 Windows 10 for x64-based Systems
MS15-119 Windows 7 for 32-bit Systems Service Pack 1
MS15-119 Windows 7 for x64-based Systems Service Pack 1
MS15-119 Windows 8 for 32-bit Systems
MS15-119 Windows 8 for x64-based Systems
MS15-119 Windows 8.1 for 32-bit Systems
MS15-119 Windows 8.1 for x64-based Systems
MS15-119 Windows Server 2008 R2 for Itanium-based Systems Service Pack 1
MS15-119 Windows Server 2008 R2 for x64-based Systems Service Pack 1
MS15-119 Windows Server 2008 for 32-bit Systems Service Pack 2
MS15-119 Windows Server 2008 for Itanium-based Systems Service Pack 2
MS15-119 Windows Server 2008 for x64-based Systems Service Pack 2
MS15-119 Windows Server 2012
MS15-119 Windows Server 2012 R2
MS15-119 Windows Vista Service Pack 2
MS15-119 Windows Vista x64 Edition Service Pack 2
Affected Software:
Windows 8 for 32-bit Systems
Windows 8 for x64-based Systems
Windows 8.1 for 32-bit Systems
Windows 8.1 for x64-based Systems
Windows Server 2012
Windows Server 2012 R2
Windows RT
Windows RT 8.1
Windows Server 2012 (CORE)
Windows Server 2012 R2 (CORE)
This security update is rated Important for all supported releases of Microsoft Windows.
Refer to Microsoft Security Bulletin MS15-120 for further details.
Patches:
The following are links for downloading patches to fix these vulnerabilities:
MS15-120 Windows 8 for 32-bit Systems
MS15-120 Windows 8 for x64-based Systems
MS15-120 Windows 8.1 for 32-bit Systems
MS15-120 Windows 8.1 for x64-based Systems
MS15-120 Windows Server 2012
MS15-120 Windows Server 2012 R2
Affected Software:
Windows Vista Service Pack 2
Windows Vista x64 Edition Service Pack 2
Windows Server 2008 for 32-bit Systems Service Pack 2
Windows Server 2008 for x64-based Systems Service Pack 2
Windows 7 for 32-bit Systems Service Pack 1
Windows 7 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems Service Pack 1
Windows 8 for 32-bit Systems
Windows 8 for x64-based Systems
Windows 8.1 for 32-bit Systems
Windows 8.1 for x64-based Systems
Windows Server 2012
Windows Server 2012 R2
Windows RT
Windows RT 8.1
Windows Server 2008 (CORE) for 32-bit Systems Service Pack 2
Windows Server 2008 (CORE) for x64-based Systems Service Pack 2
Windows Server 2008 R2 (CORE) for x64-based Systems Service Pack 1
Windows Server 2012 (CORE)
Windows Server 2012 R2 (CORE)
This security update is rated Important for all supported releases of Microsoft Windows.
Refer to Microsoft Security Bulletin MS15-121 for further details.
Patches:
The following are links for downloading patches to fix these vulnerabilities:
MS15-121 Windows 7 for 32-bit Systems Service Pack 1
MS15-121 Windows 7 for x64-based Systems Service Pack 1
MS15-121 Windows 8 for 32-bit Systems
MS15-121 Windows 8 for x64-based Systems
MS15-121 Windows 8.1 for 32-bit Systems
MS15-121 Windows 8.1 for x64-based Systems
MS15-121 Windows Server 2008 R2 for Itanium-based Systems Service Pack 1
MS15-121 Windows Server 2008 R2 for x64-based Systems Service Pack 1
MS15-121 Windows Server 2008 for 32-bit Systems Service Pack 2
MS15-121 Windows Server 2008 for Itanium-based Systems Service Pack 2
MS15-121 Windows Server 2008 for x64-based Systems Service Pack 2
MS15-121 Windows Server 2012
MS15-121 Windows Server 2012 R2
MS15-121 Windows Vista Service Pack 2
MS15-121 Windows Vista x64 Edition Service Pack 2
A security feature bypass exists in Windows when Kerberos fails to checks the password change of a user signing in to a workstation. An attacker who successfully exploits the bypass could use it to unlock a workstation and decrypt drives protected by BitLocker (CVE-2015-6095).
This security update is rated Important for all supported editions of Windows.
Patches:
The following are links for downloading patches to fix these vulnerabilities:
MS15-122 Windows 10 Version 1511 for 32-bit Systems
MS15-122 Windows 10 Version 1511 for x64-based Systems
MS15-122 Windows 10 for 32-bit Systems
MS15-122 Windows 10 for x64-based Systems
MS15-122 Windows 7 for 32-bit Systems Service Pack 1
MS15-122 Windows 7 for x64-based Systems Service Pack 1
MS15-122 Windows 8 for 32-bit Systems
MS15-122 Windows 8 for x64-based Systems
MS15-122 Windows 8.1 for 32-bit Systems
MS15-122 Windows 8.1 for x64-based Systems
MS15-122 Windows Server 2008 R2 for Itanium-based Systems Service Pack 1
MS15-122 Windows Server 2008 R2 for x64-based Systems Service Pack 1
MS15-122 Windows Server 2008 for 32-bit Systems Service Pack 2
MS15-122 Windows Server 2008 for Itanium-based Systems Service Pack 2
MS15-122 Windows Server 2008 for x64-based Systems Service Pack 2
MS15-122 Windows Server 2012
MS15-122 Windows Server 2012 R2
MS15-122 Windows Vista Service Pack 2
MS15-122 Windows Vista x64 Edition Service Pack 2
Patches:
The following are links for downloading patches to fix these vulnerabilities:
MS15-123 Microsoft Lync 2010
MS15-123 Microsoft Lync 2010
MS15-123 Microsoft Lync 2010 Attendee
MS15-123 Microsoft Lync 2010 Attendee
MS15-123 Microsoft Lync 2013 Service Pack 1
MS15-123 Microsoft Lync 2013 Service Pack 1
MS15-123 Microsoft Lync Basic 2013 Service Pack 1
MS15-123 Microsoft Lync Basic 2013 Service Pack 1
MS15-123 Microsoft Lync Room System
MS15-123 Microsoft Lync Room System
MS15-123 Skype for Business 2016
MS15-123 Skype for Business 2016
MS15-123 Skype for Business Basic 2016
MS15-123 Skype for Business Basic 2016
These new vulnerability checks are included in Qualys vulnerability signature 2.3.158-3. Each Qualys account is automatically updated with the latest vulnerability signatures as they become available. To view the vulnerability signature version in your account, from the Qualys Help menu, select the About tab.
To perform a selective vulnerability scan, configure a scan profile to use the following options:
In addition, prior to running a scan for these new vulnerabilities, you can estimate your exposure to these new threats by running the Risk Analysis Report, available from the Qualys Vulnerability Management Reports tab.
Platforms and Platform Identification
For more information, customers may contact Qualys Technical Support.
The Qualys Cloud Platform and its integrated suite of security and compliance applications provides organizations of all sizes with a global view of their security and compliance solutions, while drastically reducing their total cost of ownership. Qualys solutions include: continuous monitoring, vulnerability management, policy compliance, PCI compliance, security assessment questionnaire, web application scanning, web application firewall, malware detection and SECURE Seal for security testing of web sites.