Microsoft Bulletin Advance Notification for October, 2014

Microsoft has released [1] an advance notification for the October patchday.

This month, 9 security bulletins are being published:

  • 3 rated as critical allowing remote code execution in Internet Explorer, Windows and the .NET Framework
  • 1 rated as moderate allowing an elevation of privilege in Office
  • 5 rated as important allowing two remote code executions in Windows and Office ; two elevations of privileges in Windows as well as a security bypass in the Developer Tools

Microsoft fixes vulnerabilities affecting the following software:

  • Internet Explorer version 6 to 11
  • Office 2007 and 2010 as well as Office for Mac 2011
  • SharePoint Server 2010
  • Framework .NET 1.1 to 5.2

As well as the following Operating systems:

  • Windows Vista
  • Windows 7
  • Windows 8 & 8.1
  • Windows Server 2003
  • Windows Server 2008
  • Windows Server 2008 R2
  • Windows Server 2012
  • Windows Server 2012 R2
  • Windows RT & RT 8.1

As usual a detailed alert along with corresponding security bulletins will be published by the ARGOS team on Microsoft patch day October 14th 2014. [2].

[1] https://technet.microsoft.com/en-us/library/security/ms14-oct
[2] https://argos.lexsi.com