MS – SECURITY

MS16-NOV – Microsoft Security Bulletin Summary for November 2016 – Version: 1.0 Revision Note: V1.0 (November 8, 2016): Bulletin publishedSummary: This bulletin summary lists security bulletins released for November 2016. Source: MS16-NOV – Microsoft Security Bulletin Summary for November 2016 – Version: 1.0

MS16-138 – Important: Security Update for Microsoft Virtual Hard Disk Driver (3199647) – Version: 1.0 Severity Rating: ImportantRevision Note: V1.0 (November 8, 2016): Bulletin published.Summary: The Windows Virtual Hard Disk Driver improperly handles user access to certain files. An attacker can manipulate files in locations not intended to be available to the user by exploiting this vulnerability. Source: MS16-138 – Important: Security Update for Microsoft Virtual Hard Disk Driver (3199647) – Version: 1.0

MS16-128 – Critical: Security Update for Adobe Flash Player (3201860) – Version: 1.0 Severity Rating: CriticalRevision Note: V1.0 (October 27, 2016): Bulletin published.Summary: This security update resolves a vulnerability in Adobe Flash Player when installed on all supported editions of Windows 8.1, Windows Server 2012, Windows Server 2012 R2, Windows RT 8.1, and Windows 10. Source: MS16-128 – Critical: Security Update for Adobe Flash Player (3201860) – Version: 1.0

MS16-119 – Critical: Cumulative Security Update for Microsoft Edge (3192890) – Version: 1.0 Severity Rating: CriticalRevision Note: V1.0 (October 11, 2016): Bulletin published.Summary: This security update resolves vulnerabilities in Microsoft Edge. The most severe of the vulnerabilities could allow remote code execution if a user views a specially crafted webpage using Microsoft Edge. An attacker who successfully exploited the vulnerabilities could gain the same user rights as the current user. Customers whose accounts are configured to have fewer user rights on the system could be less impacted than users with administrative user rights. Source: MS16-119 – Critical: Cumulative Security Update for Microsoft Edge (3192890) – Version: 1.0

MS16-126 – Moderate: Security Update for Microsoft Internet Messaging API (3196067) – Version: 1.0 Severity Rating: ModerateRevision Note: V1.0 (October 11, 2016): Bulletin published.Summary: This security update resolves a vulnerability in Microsoft Windows. The vulnerability could allow remote code execution if an attacker successfully convinces a user of an affected system to visit a malicious or compromised website. Note that you must install two updates to be protected from the vulnerability discussed in this bulletin: The update in this bulletin, MS16-126, and the update in MS16-118. Source: MS16-126 – Moderate: Security Update for Microsoft Internet Messaging API (3196067) – Version: 1.0