Microsoft Security Bulletins (September 2015)

[212eta]

The patch day overview for September 2015 provides you with everything you need to know

in regards to security and non-security patches that Microsoft released this month.

It begins with an executive summary listing the most important information about this month's patch day.

It is then followed by lists of affected client and server versions of Windows, and other Microsoft products.

The next three groups list security bulletins, security advisories and revisions,

and non-security updates released since the last patch day in August.

The final chapters provide you with download and deployment information, and links to important resources.

Executive Summary

1. Microsoft released a total of 12 security bulletins this patch day.
2. Five bulletins have a maximum severity rating of critical.
3. All Windows client operating systems are affected by at least one critical vulnerability.
4. Other Microsoft products affected this patch day include Microsoft Office and Microsoft Exchange Server 2013.

Microsoft Security Bulletins (September 2015) by ghacks

[steven36]

Microsoft released security updates to fix critical vulnerabilities

Recently Microsoft addressed vulnerabilities in their recent products . Some of the bugs were severe to the extent that they can enable code execution at the remote server .

Wolfgang Kandek, CTO of Qualys confirmed that the highest priority patch is MS15-097 , which includes critical bug fixes for Windows Vista, Windows Server 2008, Microsoft Office 2007 and 2010, and Lync 2007, 2010, and 2013.

Talking about bugs, there was a Win32k memory leak, named CVE -2015-2546 found in all versions of window was deemed important and discussed in open. One of the other flaws was CVE-2015-2545, a microsoft Office malformed EPS file. This bug allowed remote code execution and has been fixed in bulletin MS15-099 along with other bug fixes.

Other bulletins that has bug fixes have been released , namely MS15-094 through MS15-103 . MS15-094 addresses all the issues regarding browsers ,that is vulnerability in internet explorer and Edge browser has been fixed in this bulletin . MS15-098 bulletin addresses remote code execution for journal bug , MS15-103 addresses problems in exchange servers like microsoft outlook .

http://www.ehackingnews.com/2015/09/microsoft-released-security-updates-to.html