SECURITY

MS16-056 – Critical: Security Update for Windows Journal (3156761) – Version: 1.0 Severity Rating: CriticalRevision Note: V1.0 (May 10, 2016): Bulletin published.Summary: This security update resolves a vulnerability in Microsoft Windows. The vulnerability could allow remote code execution if a user opens a specially crafted Journal file. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights. Source: MS16-056 – Critical: Security Update for Windows Journal (3156761) – Version: 1.0

MS16-065 – Important: Security Update for .NET Framework (3156757) – Version: 1.0 Severity Rating: ImportantRevision Note: V1.0 (May 10, 2016): Bulletin published.Summary: This security update resolves a vulnerability in Microsoft .NET Framework. The vulnerability could cause information disclosure if an attacker injects unencrypted data into the target secure channel and then performs a man-in-the-middle (MiTM) attack between the targeted client and a legitimate server. Source: MS16-065 – Important: Security Update for .NET Framework (3156757) – Version: 1.0

MS16-067 – Important: Security Update for Volume Manager Driver (3155784) – Version: 1.0 Severity Rating: ImportantRevision Note: V1.0 (May 10, 2016): Click here to enter text.Summary: This security update resolves a vulnerability in Microsoft Windows. The vulnerability could allow information disclosure if a USB disk mounted over Remote Desktop Protocol (RDP) via Microsoft RemoteFX is not correctly tied to the session of the mounting user. Source: MS16-067 – Important: Security Update for Volume Manager Driver (3155784) – Version: 1.0

MS16-053 – Critical: Cumulative Security Update for JScript and VBScript (3156764) – Version: 1.0 Severity Rating: CriticalRevision Note: V1.0 (May 10, 2016): Bulletin published.Summary: This security update resolves vulnerabilities in the JScript and VBScript scripting engines in Microsoft Windows. The vulnerabilities could allow remote code execution if a user visits a specially crafted website. An attacker who successfully exploited these vulnerabilities could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited these vulnerabilities could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Source: MS16-053 – Critical: Cumulative Security Update for JScript and VBScript (3156764) – Version: 1.0

MS16-054 – Critical: Security Update for Microsoft Office (3155544) – Version: 1.0 Severity Rating: CriticalRevision Note: V1.0 (May 10, 2016): Bulletin published.Summary: This security update resolves vulnerabilities in Microsoft Office. The vulnerabilities could allow remote code execution if a user opens a specially crafted Microsoft Office file. An attacker who successfully exploited the vulnerabilities could run arbitrary code in the context of the current user. Customers whose accounts are configured to have fewer user rights on the system could be less impacted than those who operate with administrative user rights. Source: MS16-054 – Critical: Security Update for Microsoft Office (3155544) – Version: 1.0