October 2015 – Microsoft Releases 6 Security Advisories

Microsoft addresses the following vulnerabilities in its batch of patches for Octover 2015:

• (MS15-106) Cumulative Security Update for Internet Explorer (3096441)
  Risk Rating: Critical
  
  This security update resolves vulnerabilities in Internet Explorer. The most severe of the vulnerabilities could allow remote code execution if a user views a specially crafted webpage using Internet Explorer.



• (MS15-107) Cumulative Security Update for Microsoft Edge (3089665)
  Risk Rating: Important
  
  This security update resolves vulnerabilities in Microsoft Edge. The most severe of the vulnerabilities could allow information disclosure if a user views a specially crafted webpage using Microsoft Edge.



• (MS15-108) Security Update for JScript and VBScript to Address Remote Code Execution (3089659)
  Risk Rating: Critical
  
  This security update resolves vulnerabilities in the VBScript and JScript scripting engines in Microsoft Windows. The more severe of the vulnerabilities could allow remote code execution if an attacker hosts a specially crafted website that is designed to exploit the vulnerabilities through Internet Explorer.



• (MS15-109)Security Update for Windows Shell to Address Remote Code Execution (3096443)
  Risk Rating: Critical
  
  This security update resolves vulnerabilities in Microsoft Windows. The vulnerabilities could allow remote code execution if a user opens a specially crafted toolbar object in Windows or an attacker convinces a user to view specially crafted content online.



• (MS15-110) Security Updates for Microsoft Office to Address Remote Code Execution (3096440)
  Risk Rating: Important
  
  This security update resolves vulnerabilities in Microsoft Office. The most severe of the vulnerabilities could allow remote code execution if a user opens a specially crafted Microsoft Office file.



• (MS15-111) Security Update for Windows Kernel to Address Elevation of Privilege (3096447)
  Risk Rating: Important
  
  This security update resolves vulnerabilities in Microsoft Windows. The more severe of the vulnerabilities could allow elevation of privilege if an attacker logs on to an affected system and runs a specially crafted application.