Exploitability

MS11-053: Vulnerability in the Bluetooth stack could allow remote code execution

Security Research & Defense / By / June 20, 2019

The single Critical vulnerability in today’s batch of security updates addresses an issue in the Bluetooth stack. Your workstations’ risk to this vulnerability varies, depending on a number of factors. I’d like to use this blog post to outline those risk factors. How can I protect my system? The best way to protect any potentially …

MS11-053: Vulnerability in the Bluetooth stack could allow remote code execution Read More »

Assessing the risk of the June security updates

Security Research & Defense / By / June 20, 2019

Today we released 16 security bulletins. Nine have a maximum severity rating of Critical and seven have a maximum severity rating of Important. This release addresses several publicly disclosed vulnerabilities. We hope that the table below helps you prioritize the deployment of the updates appropriately for your environment. Bulletin Most likely attack vector Max Bulletin …

Assessing the risk of the June security updates Read More »

Q&A from May 2011 Security Bulletin Webcast

MSRC / By / June 20, 2019

Hello, Today we published the May Security Bulletin Webcast Questions & Answers page. We fielded twelve questions on various topics during the webcast, including bulletins released and the Malicious Software Removal Tool.  There were two questions during the webcast that we were unable to answer and we have included those questions and answers on the …

Q&A from May 2011 Security Bulletin Webcast Read More »

Exploitability Index Improvements & Advance Notification Service for May 2011 Bulletin Release

MSRC / By / June 20, 2019

Hello everyone, Today we are announcing changes to Microsoft’s Exploitability Index. Since October 2008, we have used the Exploitability Index to provide customers with valuable exploitability analysis for our security bulletins, and starting Tuesday this information will become even more comprehensive for those who use Microsoft’s latest platforms. The Exploitability Index assesses the likelihood of …

Exploitability Index Improvements & Advance Notification Service for May 2011 Bulletin Release Read More »

Exploitability Index Improvements Now Offer Additional Guidance

MSRC / By / June 20, 2019

Exploitability Index Improvements Now Offer Additional Guidance In October of 2008, Microsoft published its first Exploitability Index: a rating system that helps customers identify the likelihood that a specific vulnerability would be exploited within the first 30 days after bulletin release. As of this month, we are making some changes to the rating system to …

Exploitability Index Improvements Now Offer Additional Guidance Read More »

MS11-034: Addressing vulnerabilities in the win32k subsystem

Security Research & Defense / By / June 20, 2019

Today we released security bulletin MS11-034 to address vulnerabilities in the win32k subsystem. This update addresses externally reported issues as well as several internally found vulnerabilities that were discovered as part of our variant investigation. The bulletin may appear to address an alarmingly large number of issues. However, if you dig into the issues themselves, …

MS11-034: Addressing vulnerabilities in the win32k subsystem Read More »

Notes on exploitability of the recent Windows BROWSER protocol issue

Security Research & Defense / By / June 20, 2019

Earlier this week a PoC exploit for a vulnerability in the BROWSER protocol was released on Full Disclosure. There has been some discussion regarding whether this issue can result in Remote Code Execution (RCE) or is only a Denial of Service (DoS). This blog post provides details on the exploitability based on our internal analysis. …

Notes on exploitability of the recent Windows BROWSER protocol issue Read More »

Assessing the risk of the February security updates

Security Research & Defense / By / June 20, 2019

Today we released twelve security bulletins. Three have a maximum severity rating of Critical and nine have a maximum severity rating of Important. This release addresses three publicly disclosed vulnerabilities. We hope that the table below helps you prioritize the deployment of the updates appropriately for your environment. Bulletin Most likely attack vector Max Bulletin …

Assessing the risk of the February security updates Read More »

New Internet Explorer vulnerability affecting all versions of IE

Security Research & Defense / By / June 20, 2019

Today we released Security Advisory 2488013 to notify customers of a new publicly-disclosed vulnerability in Internet Explorer (IE). This vulnerability affects all versions of IE. Exploiting this vulnerability could lead to unauthorized remote code execution inside the iexplore.exe process. Proof-of-concept exploit bypasses ASLR and DEP The Metasploit project recently published an exploit for this vulnerability …

New Internet Explorer vulnerability affecting all versions of IE Read More »

On the effectiveness of DEP and ASLR

Security Research & Defense / By / June 20, 2019

DEP (Data Execution Prevention) and ASLR (Address Space Layout Randomization) have proven themselves to be important and effective countermeasures against the types of exploits that we see in the wild today.  Of course, any useful mitigation technology will attract scrutiny, and over the past year there has been an increasing amount of research and discussion …

On the effectiveness of DEP and ASLR Read More »