Microsoft Security Advisories Archive
This page offers the complete list of all published Microsoft Security Advisories, ordered by the last date they were updated. For more information, visit the Security Advisories Web Site
Available Notifications:
- RSS: Security Advisory RSS Feed
- Instant Message: Technical Security Update: Security Advisory
- Email: Microsoft Security Notification Service: Comprehensive Edition
All Published or Updated Security Advisories:
| Security Advisories | ||
| Advisory Number | Advisory Description | Date |
Vulnerabilities in SMB Could Allow Denial of Service | 11/13/2009 | |
Extended Protection for Authentication | 10/14/2009 | |
Vulnerabilities in SMB Could Allow Remote Code Execution | 10/13/2009 | |
Vulnerabilities in the FTP Service in Internet Information Services | 10/13/2009 | |
Vulnerabilities in Microsoft Active Template Library (ATL) Could Allow Remote Code Execution | 10/13/2009 | |
Update for Windows Autorun | 8/25/2009 | |
Vulnerability in Microsoft Office Web Components Control Could Allow Remote Code Execution | 8/11/2009 | |
Vulnerability in Microsoft Video ActiveX Control Could Allow Remote Code Execution | 7/14/2009 | |
Vulnerability in Microsoft DirectShow Could Allow Remote Code Execution | 7/14/2009 | |
Update Rollup for ActiveX Kill Bits | 6/17/2009 | |
Update Rollup for ActiveX Kill Bits | 6/17/2009 | |
Update Rollup for ActiveX Kill Bits | 6/17/2009 | |
Update for DNS Devolution | 6/9/2009 | |
Vulnerability in Internet Information Services Could Allow Elevation of Privilege | 6/9/2009 | |
Vulnerability in Web Proxy Auto-Discovery (WPAD) Could Allow Information Disclosure | 6/9/2009 | |
Vulnerability in Microsoft Office PowerPoint Could Allow Remote Code Execution | 5/12/2009 | |
Vulnerability in Microsoft Office Excel Could Allow Remote Code Execution | 4/14/2009 | |
Vulnerability in WordPad Text Converter Could Allow Remote Code Execution | 4/14/2009 | |
Blended Threat from Combined Attack Using Apple’s Safari on the Windows Platform | 4/14/2009 | |
Vulnerability in Windows Could Allow Elevation of Privilege | 4/14/2009 | |
Update Rollup for ActiveX Kill Bits | 3/11/2009 | |
Vulnerability in SQL Server Could Allow Remote Code Execution | 2/10/2009 | |
Research proves feasibility of collision attacks against MD5 | 12/30/2008 | |
Vulnerability in Internet Explorer Could Allow Remote Code Execution | 12/17/2008 | |
Exploit Code Published Affecting the Server Service | 10/27/2008 | |
Vulnerability in the ActiveX Control for the Snapshot Viewer for Microsoft Access Could Allow Remote Code Execution | 8/12/2008 | |
Microsoft Windows Server Update Services (WSUS) Blocked from Deploying Security Updates | 8/12/2008 | |
Vulnerability in Microsoft Word Could Allow Remote Code Execution | 8/12/2008 | |
Increased Threat for DNS Spoofing Vulnerability | 7/25/2008 | |
Rise in SQL Injection Attacks Exploiting Unverified User Data Input | 6/25/2008 | |
System Center Configuration Manager 2007 Blocked from Deploying Security Updates | 6/17/2008 | |
Vulnerability in Microsoft Jet Database Engine Could Allow Remote Code Execution | 5/13/2008 | |
Update to Improve Kernel Patch Protection | 4/23/2008 | |
Vulnerability in Microsoft Excel Could Allow Remote Code Execution | 3/12/2008 | |
Update to Improve Windows Sidebar Protection | 1/8/2008 | |
Vulnerability in Macrovision SECDRV.SYS Driver on Windows Could Allow Elevation of Privilege | 12/11/2007 | |
URL Handling Vulnerability in Windows XP and Windows Server 2003 with Windows Internet Explorer 7 Could Allow Remote Code Execution | 11/13/2007 | |
Update for Windows Installer (MSI) | 5/24/2007 | |
Release of Microsoft Office Isolated Conversion Environment (MOICE) and File Block Functionality for Microsoft Office | 5/21/2007 | |
Vulnerability in Microsoft Word Could Allow Remote Code Execution | 5/9/2007 | |
Vulnerability in RPC on Windows DNS Server Could Allow Remote Code Execution | 5/8/2007 | |
Vulnerability in Windows Animated Cursor Handling | 4/3/2007 | |
Vulnerability in Microsoft Office Could Allow Remote Code Execution | 2/13/2007 | |
Vulnerability in Microsoft Word 2000 Could Allow Remote Code Execution | 2/13/2007 | |
Vulnerability in Microsoft Word Could Allow Remote Code Execution | 2/13/2007 | |
Vulnerability in Visual Studio 2005 Could Allow Remote Code Execution | 12/12/2006 | |
Exploit Code Published Affecting the Windows Client Server Run-Time Subsystem | 11/16/2006 | |
Vulnerability in Microsoft XML Core Services Could Allow Remote Code Execution | 11/14/2006 | |
Vulnerability in the Microsoft DirectAnimation Path ActiveX Control Could Allow Remote Code Execution | 11/14/2006 | |
Adobe Security Bulletin: APSB06-11 Flash Player Update to Address Security Vulnerabilities | 11/14/2006 | |
Description of the Wi-Fi Protected Access 2 support for Wireless Group Policy in Windows XP Service Pack 2 | 10/17/2006 | |
Vulnerability in Windows Shell Could Allow Remote Code Execution | 10/10/2006 | |
Vulnerability in PowerPoint Could Allow Remote Code Execution | 10/10/2006 | |
Vulnerability in Word Could Allow Remote Code Execution | 10/10/2006 | |
Vulnerability in Vector Markup Language Could Allow Remote Code Execution | 9/26/2006 | |
Update for Windows | 9/12/2006 | |
Microsoft Security Advisory (923762): Long URLs to sites using HTTP 1.1 and compression Could Cause Internet Explorer 6 Service Pack 1 to Unexpectedly Exit | 8/24/2006 | |
Exploit Code Published Affecting the Server Service | 8/13/2006 | |
Vulnerability in PowerPoint Could Allow Remote Code Execution | 8/11/2006 | |
Vulnerability in Excel Could Allow Remote Code Execution | 7/11/2006 | |
Proof of Concept Code Published Affecting the Remote Access Connection Manager Service | 6/23/2006 | |
Vulnerability in Word Could Allow Remote Code Execution | 6/13/2006 | |
Update to Improve Kernel Patch Protection | 6/13/2006 | |
Non-Security Update for Internet Explorer | 6/13/2006 | |
Adobe Security Bulletin: APSB06-03 Flash Player Update to Address Security Vulnerabilities | 5/11/2006 | |
Macromedia Security Bulletin: MPSB05-07 Flash Player 7 Improper Memory Access Vulnerability | 5/11/2006 | |
Vulnerability in the way HTML Objects Handle Unexpected Method Calls Could Allow Remote Code Execution | 4/11/2006 | |
Vulnerability in Windows Service ACLs | 3/14/2006 | |
A COM Object (Msdds.dll) Could Cause Internet Explorer to Unexpectedly Exit | 2/21/2006 | |
Vulnerability in Internet Explorer Could Allow Remote Code Execution | 2/14/2006 | |
Win32/Mywife.E@mm | 2/1/2006 | |
Vulnerability in Graphics Rendering Engine Could Allow Remote Code Execution. | 1/5/2006 | |
Systems that are infected with Win32/Sober.Z@mm may download and run malicious files from certain Web domains beginning on January 6, 2006 | 1/3/2006 | |
Vulnerability in the way Internet Explorer Handles Mismatched Document Object Model Objects Could Allow Remote Code Execution. | 12/13/2005 | |
Memory Allocation Denial of Service Via RPC | 11/18/2005 | |
Various Issues After Installing Microsoft Security Bulletin MS05-051 on Systems That Have Non-default File Permissions | 10/14/2005 | |
Windows Firewall Exception May Not Display in the User Interface | 8/31/2005 | |
Clarification of Simple File Sharing and ForceGuest | 8/23/2005 | |
Vulnerability in Plug and Play Could Allow Remote Code Execution and Elevation of Privilege | 8/17/2005 | |
Vulnerability in Remote Desktop Protocol (RDP) Could Lead to Denial of Service | 8/9/2005 | |
A COM Object (Javaprxy.dll) Could Cause Internet Explorer to Unexpectedly Exit | 7/12/2005 | |
Release of Update Rollup 1 for Windows 2000 Service Pack 4 (SP4) | 6/28/2005 | |
Browser Windows Without Indications of Their Origins may be Used in Phishing Attempts | 6/21/2005 | |
Vulnerability in TCP Could Allow Connection Reset | 5/18/2005 | |
Default Setting in Windows Media Player Digital Rights Management Could Allow a User to Open a Web Page Without Requesting Permission | 5/10/2005 | |
Clarification Of The SMTP Tar Pit Feature That Is Provided For Exchange Server 2003 in Windows Server 2003 Service Pack 1 | 5/10/2005 | |
Security Information:
| • | |
| • | |
| • | |
| • | |
| • |
Protect Your PC:
Microsoft has provided information about how you can help protect your PC at the following locations:
- IT Professionals can visit the
Security Guidance Center Web site.
- The
Microsoft TechNet Security Web site provides additional information about security in Microsoft products.
-
IT Pro Security Zone Web site
Support:
-
Microsoft Product Support Services.
-
International Support Web site.
Disclaimer
The information provided in this document is provided "as is" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.
