[월:] 2016년 10월

MS16-125 – Important: Security Update for Diagnostics Hub (3193229) – Version: 1.0 Severity Rating: ImportantRevision Note: V1.0 (October 11, 2016): Bulletin published.Summary: This security update resolves a vulnerability in Microsoft Windows. The vulnerability could allow elevation of privilege if an attacker logs on to an affected system and runs a specially crafted application. Source: MS16-125 – Important: Security Update for Diagnostics Hub (3193229) – Version: 1.0

MS16-122 – Critical: Security Update for Microsoft Video Control (3195360) – Version: 1.0 Severity Rating: CriticalRevision Note: V1.0 (October 11, 2016): Bulletin published.Summary: This security update resolves a vulnerability in Microsoft Windows. The vulnerability could allow remote code execution if an attacker successfully convinces a user of an affected system to visit a malicious or compromised website. Note that you must install two updates to be protected from the vulnerability discussed in this bulletin: The update in this bulletin, MS16-116, and the update in MS16-104. Source: MS16-122 – Critical: Security Update for Microsoft Video Control (3195360) – Version: 1.0

MS16-126 – Moderate: Security Update for Microsoft Internet Messaging API (3196067) – Version: 1.0 Severity Rating: ModerateRevision Note: V1.0 (October 11, 2016): Bulletin published.Summary: This security update resolves a vulnerability in Microsoft Windows. The vulnerability could allow remote code execution if an attacker successfully convinces a user of an affected system to visit a malicious or compromised website. Note that you must install two updates to be protected from the vulnerability discussed in this bulletin: The update in this bulletin, MS16-126, and the update in MS16-118. Source: MS16-126 – Moderate: Security Update for Microsoft Internet Messaging API (3196067) – Version: 1.0

MS16-119 – Critical: Cumulative Security Update for Microsoft Edge (3192890) – Version: 1.0 Severity Rating: CriticalRevision Note: V1.0 (October 11, 2016): Bulletin published.Summary: This security update resolves vulnerabilities in Microsoft Edge. The most severe of the vulnerabilities could allow remote code execution if a user views a specially crafted webpage using Microsoft Edge. An attacker who successfully exploited the vulnerabilities could gain the same user rights as the current user. Customers whose accounts are configured to have fewer user rights on the system could be less impacted than users with administrative user rights. Source: MS16-119 – Critical: Cumulative Security Update for Microsoft Edge (3192890) – Version: 1.0