SECURITY

MS16-149 – Important: Security Update for Microsoft Windows (3205655) – Version: 1.0 Severity Rating: ImportantRevision Note: V1.0 (December 13, 2016): Bulletin published.Summary: This security update resolves vulnerabilities in Microsoft Windows. The most severe of the vulnerabilities could allow elevation of privilege if a locally authenticated attacker runs a specially crafted application. Source: MS16-149 – Important: Security Update for Microsoft Windows (3205655) – Version: 1.0

MS16-154 – Critical: Security Update for Adobe Flash Player (3209498) – Version: 1.0 Severity Rating: CriticalRevision Note: V1.0 (December 13, 2016): Bulletin published.Summary: This security update resolves vulnerabilities in Adobe Flash Player when installed on all supported editions of Windows 8.1, Windows Server 2012, Windows Server 2012 R2, Windows RT 8.1, and Windows 10. Source: MS16-154 – Critical: Security Update for Adobe Flash Player (3209498) – Version: 1.0

MS16-DEC – Microsoft Security Bulletin Summary for December 2016 – Version: 1.0 Revision Note: V1.0 (December 13, 2016): Bulletin publishedSummary: This bulletin summary lists security bulletins released for December 2016. Source: MS16-DEC – Microsoft Security Bulletin Summary for December 2016 – Version: 1.0

MS16-155 – Important: Security Update for .NET Framework (3205640) – Version: 1.0 Severity Rating: ImportantRevision Note: V1.0 (December 13, 2016): Summary: This security update resolves a vulnerability in Microsoft .NET 4.6.2 Framework’s Data Provider for SQL Server. A security vulnerability exists in Microsoft .NET Framework 4.6.2 that could allow an attacker to access information that is defended by the Always Encrypted feature. Source: MS16-155 – Important: Security Update for .NET Framework (3205640) – Version: 1.0

MS16-145 – Critical: Cumulative Security Update for Microsoft Edge (3204062) – Version: 1.0 Severity Rating: CriticalRevision Note: V1.0 (December 13, 2016): Bulletin published.Summary: This security update resolves vulnerabilities in Microsoft Edge. The most severe of the vulnerabilities could allow remote code execution if a user views a specially crafted webpage using Microsoft Edge. An attacker who successfully exploited the vulnerabilities could gain the same user rights as the current user. Customers whose accounts are configured to have fewer user rights on the system could be less impacted than users with administrative user rights. Source: MS16-145 – Critical: Cumulative Security Update for Microsoft Edge (3204062) – Version: 1.0