July 2015 – Microsoft Releases 14 Security Advisories

Microsoft addresses the following vulnerabilities in its batch of patches for July 2015:

• (MS15-058) Vulnerabilities in SQL Server Could Allow Remote Code Execution (3065718)
  Risk Rating: Important
  
  This security update resolves vulnerabilities in several versions of Microsoft SQL Server. These vulnerabilities, when exploited, may allow remote code execution.



• (MS15-065) Security Update for Internet Explorer (3076321)
  Risk Rating: Critical
  
  This security update resolves several vulnerabilities in several versions of Internet Explorer installed on various Windows operating systems. The vulnerabilities could allow remote code execution if exploited successfully by an attacker.



• (MS15-066) Vulnerability in VBScript Scripting Engine Could Allow Remote Code Execution (3072604)
  Risk Rating: Critical
  
  This security update resolves a vulnerability in the Windows VB Scripting Engine. Users with administrator rights that are currently logged on in a vulnerable system are most affected by attacks leveraging this vulnerability.



• (MS15-067) Vulnerability in RDP Could Allow Remote Code Execution (3073094)
  Risk Rating: Critical
  
  This security update resolves several vulnerabilities in Windows operating systems that have Remote Desktop Protocol (RDP) enabled. The vulnerability, when exploited successfully, could allow remote attackers to execute code on the vulnerable system.



• (MS15-068) Vulnerabilities in Windows Hyper-V Could Allow Remote Code Execution (3072000)
  Risk Rating: Critical
  
  This security update resolves vulnerabilities in Microsoft Windows. The vulnerabilities could allow remote code execution on the vulnerable system. An attacker must have valid logon credentials on a guest Hyper-V machine in the vulnerable system in order to successfully exploit this vulnerability.



• (MS15-069) Vulnerabilities in Windows Could Allow Remote Code Execution (3072631)
  Risk Rating: Important
  
  This security bulletin issues updates on several vulnerabilities in Windows. The vulnerabilities could allow remote code execution on the vulnerable system. An attacker issues a specially crafted .DLL file to exploit these vulnerabilities.



• (MS15-070) Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (3072620)
  Risk Rating: Important
  
  This security update resolves several vulnerabilities in Microsoft Office, most severe of which could cause remote code execution. Users with administrator rights currently logged in on the vulnerable system are more susceptible to the risks of these vulnerabilities.



• (MS15-071) Vulnerability in Netlogon Could Allow Elevation of Privilege (3068457)
  Risk Rating: Important
  
  This security update resolves an elevation of privilege vulnerability in Microsoft Windows. An attacker must have access to a primary domain controller (PDC) in order to successfully exploit this vulnerability.



• (MS15-072) Vulnerability in Windows Graphics Component Could Allow Elevation of Privilege (3069392)
  Risk Rating: Important
  
  This security update resolves an elevation of privilege vulnerability in Microsoft Windows. It resolves the way the Windows Graphics Component handles bitmap conversions.



• (MS15-073) Vulnerability in Windows Kernel-Mode Driver Could Allow Elevation of Privilege (3070102)
  Risk Rating: Important
  
  This security update resolves an elevation of privilege vulnerability in Microsoft Windows. An attacker exploits this vulnerability by running a specially crafted application on the vulnerable system.



• (MS15-074) Vulnerability in Windows Installer Service Could Allow Elevation of Privilege (3072630)
  Risk Rating: Important
  
  This security update resolves an elevation of privilege vulnerability in Microsoft Windows Installer service. The vulnerability lies in the way the Installer service improperly handles custom action scripts.



• (MS15-075) Vulnerabilities in OLE Could Allow Elevation of Privilege (3072633)
  Risk Rating: Important
  
  This security update resolves several vulnerabilities in Microsoft Windows. The vulnerabilities could allow elevation of privilege if exploited one after the other.



• (MS15-076) Vulnerability in Windows Remote Procedure Call Could Allow Elevation of Privilege (3067505)
  Risk Rating: Important
  
  This security update resolves a vulnerability in Microsoft Windows Remote Call Procedure (RPC) authentication. When exploited successfully, an attacker may elevate his privileges on the vulnerable system.



• (MS15-077) Vulnerability in ATM Font Driver Could Allow Elevation of Privilege (3077657)
  Risk Rating: Important
  
  This security update resolves a vulnerability in Microsoft Windows. When exploited successfully, an attacker may elevate his privileges on the vulnerable system.