February 2015 Updates

Today, as part of Update Tuesday, we released nine security bulletins – three rated Critical and six rated Important in severity, to address 56 unique Common Vulnerabilities and Exposures (CVEs) in Microsoft Windows, Microsoft Office, Internet Explorer, and Microsoft Server software.

We encourage you to apply all of these updates. For more information about this month’s security updates, including the detailed view of the Exploitability Index (XI) broken down by each CVE, visit the Microsoft Bulletin Summary webpage. If you are not familiar with how we calculate the XI, a full description can be found here.

We re-released one Security Bulletin:

• MS14-083 Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution

One new Security Advisory was released:

• Update for Windows Command Line Auditing (3004375).

One Security Advisory was revised:

• Vulnerability in SSL 3.0 Could Allow Information Disclosure (3009008).

We also announced changes related to SSL 3.0 and you can read more about these on the IE blog.

For the latest information, you can follow the Microsoft Security Response Center (MSRC) team on Twitter at @MSFTSecResponse.

MSRC Team



Continue reading...