Microsoft Security Advisory Archive
This page offers the complete list of all published Microsoft Security Advisories, ordered by the last date they were updated. For more information, visit Microsoft Security Advisories.
Available Notifications
All Published or Updated Security Advisories:
| Advisory Number | Advisory Description | Date |
| Update Rollup for ActiveX Kill Bits | ||
| Update Rollup for ActiveX Kill Bits | ||
| Insecure Library Loading Could Allow Remote Code Execution | ||
| Fraudulent Digital Certificates Could Allow Spoofing | ||
| Vulnerability in SSL/TLS Could Allow Information Disclosure | ||
| Vulnerability in ASP.NET Could Allow Denial of Service | ||
| Vulnerability in TrueType Font Parsing Could Allow Elevation of Privilege | ||
| Fraudulent Digital Certificates Could Allow Spoofing | ||
| Update Rollup for ActiveX Kill Bits | ||
| Fraudulent Digital Certificates Could Allow Spoofing | ||
| Release of Microsoft Office File Validation for Microsoft Office | ||
| Extended Protection for Authentication | ||
| Update for the Windows Operating System Loader | ||
| Vulnerability in MHTML Could Allow Information Disclosure | ||
| Vulnerability in Microsoft Malware Protection Engine Could Allow Elevation of Privilege | ||
| Update for Windows Autorun | ||
| Vulnerability in Graphics Rendering Engine Could Allow Remote Code Execution | ||
| Vulnerability in Internet Explorer Could Allow Remote Code Execution | ||
| Vulnerability in Internet Explorer Could Allow Remote Code Execution | ||
| Vulnerability in ASP.NET Could Allow Information Disclosure | ||
| Vulnerability in Outlook Web Access Could Allow Elevation of Privilege | ||
| Vulnerability in TLS/SSL Could Allow Spoofing | ||
| Elevation of Privilege Using Windows Service Isolation Bypass | ||
| Vulnerability in Windows Shell Could Allow Remote Code Execution | ||
| Vulnerability in Windows Help and Support Center Could Allow Remote Code Execution | ||
| Vulnerability in Canonical Display Driver Could Allow Remote Code Execution | ||
| Vulnerability in Internet Explorer Could Allow Information Disclosure | ||
| Vulnerability in Microsoft SharePoint Could Allow Elevation of Privilege | ||
| Vulnerability in VBScript Could Allow Remote Code Execution | ||
| Vulnerability in SMB Could Allow Denial of Service | ||
| Vulnerability in Internet Explorer Could Allow Remote Code Execution | ||
| Vulnerability in Windows Kernel Could Allow Elevation of Privilege | ||
| Vulnerability in Internet Explorer Could Allow Remote Code Execution | ||
| Vulnerabilities in Adobe Flash Player 6 Provided in Windows XP Could Allow Remote Code Execution | ||
| Vulnerability in Internet Explorer Could Allow Remote Code Execution | ||
| Credential Relaying Attacks on Integrated Windows Authentication | ||
| Security Enhancements for the Indeo Codec | ||
| Vulnerabilities in SMB Could Allow Remote Code Execution | ||
| Vulnerabilities in the FTP Service in Internet Information Services | ||
| Vulnerabilities in Microsoft Active Template Library (ATL) Could Allow Remote Code Execution | ||
| Vulnerability in Microsoft Office Web Components Control Could Allow Remote Code Execution | ||
| Vulnerability in Microsoft Video ActiveX Control Could Allow Remote Code Execution | ||
| Vulnerability in Microsoft DirectShow Could Allow Remote Code Execution | ||
| Update Rollup for ActiveX Kill Bits | ||
| Update Rollup for ActiveX Kill Bits | ||
| Update Rollup for ActiveX Kill Bits | ||
| Update for DNS Devolution | ||
| Vulnerability in Internet Information Services Could Allow Elevation of Privilege | ||
| Vulnerability in Web Proxy Auto-Discovery (WPAD) Could Allow Information Disclosure | ||
| Vulnerability in Microsoft Office PowerPoint Could Allow Remote Code Execution | ||
| Vulnerability in Microsoft Office Excel Could Allow Remote Code Execution | ||
| Vulnerability in WordPad Text Converter Could Allow Remote Code Execution | ||
| Blended Threat from Combined Attack Using Apple’s Safari on the Windows Platform | ||
| Vulnerability in Windows Could Allow Elevation of Privilege | ||
| Update Rollup for ActiveX Kill Bits | ||
| Vulnerability in SQL Server Could Allow Remote Code Execution | ||
| Research proves feasibility of collision attacks against MD5 | ||
| Vulnerability in Internet Explorer Could Allow Remote Code Execution | ||
| Exploit Code Published Affecting the Server Service | ||
| Vulnerability in the ActiveX Control for the Snapshot Viewer for Microsoft Access Could Allow Remote Code Execution | ||
| Microsoft Windows Server Update Services (WSUS) Blocked from Deploying Security Updates | ||
| Vulnerability in Microsoft Word Could Allow Remote Code Execution | ||
| AutoRun Enforcement in Windows | ||
| Increased Threat for DNS Spoofing Vulnerability | ||
| Rise in SQL Injection Attacks Exploiting Unverified User Data Input | ||
| System Center Configuration Manager 2007 Blocked from Deploying Security Updates | ||
| Vulnerability in Microsoft Jet Database Engine Could Allow Remote Code Execution | ||
| Update to Improve Kernel Patch Protection | ||
| Vulnerability in Microsoft Excel Could Allow Remote Code Execution | ||
| Update to Improve Windows Sidebar Protection | ||
| Vulnerability in Macrovision SECDRV.SYS Driver on Windows Could Allow Elevation of Privilege | ||
| URL Handling Vulnerability in Windows XP and Windows Server 2003 with Windows Internet Explorer 7 Could Allow Remote Code Execution | ||
| Update for Windows Installer (MSI) | ||
| Release of Microsoft Office Isolated Conversion Environment (MOICE) and File Block Functionality for Microsoft Office | ||
| Vulnerability in Microsoft Word Could Allow Remote Code Execution | ||
| Vulnerability in RPC on Windows DNS Server Could Allow Remote Code Execution | ||
| Vulnerability in Windows Animated Cursor Handling | ||
| Vulnerability in Microsoft Office Could Allow Remote Code Execution | ||
| Vulnerability in Microsoft Word 2000 Could Allow Remote Code Execution | ||
| Vulnerability in Microsoft Word Could Allow Remote Code Execution | ||
| Vulnerability in Visual Studio 2005 Could Allow Remote Code Execution | ||
| Exploit Code Published Affecting the Windows Client Server Run-Time Subsystem | ||
| Vulnerability in Microsoft XML Core Services Could Allow Remote Code Execution | ||
| Vulnerability in the Microsoft DirectAnimation Path ActiveX Control Could Allow Remote Code Execution | ||
| Adobe Security Bulletin: APSB06-11 Flash Player Update to Address Security Vulnerabilities | ||
| Description of the Wi-Fi Protected Access 2 support for Wireless Group Policy in Windows XP Service Pack 2 | ||
| Vulnerability in Windows Shell Could Allow Remote Code Execution | ||
| Vulnerability in PowerPoint Could Allow Remote Code Execution | ||
| Vulnerability in Word Could Allow Remote Code Execution | ||
| Vulnerability in Vector Markup Language Could Allow Remote Code Execution | ||
| Update for Windows | ||
| Microsoft Security Advisory (923762): Long URLs to sites using HTTP 1.1 and compression Could Cause Internet Explorer 6 Service Pack 1 to Unexpectedly Exit | ||
| Exploit Code Published Affecting the Server Service | ||
| Vulnerability in PowerPoint Could Allow Remote Code Execution | ||
| Vulnerability in Excel Could Allow Remote Code Execution | ||
| Proof of Concept Code Published Affecting the Remote Access Connection Manager Service | ||
| Vulnerability in Word Could Allow Remote Code Execution | ||
| Update to Improve Kernel Patch Protection | ||
| Non-Security Update for Internet Explorer | ||
| Adobe Security Bulletin: APSB06-03 Flash Player Update to Address Security Vulnerabilities | ||
| Macromedia Security Bulletin: MPSB05-07 Flash Player 7 Improper Memory Access Vulnerability | ||
| Vulnerability in the way HTML Objects Handle Unexpected Method Calls Could Allow Remote Code Execution | ||
| Vulnerability in Windows Service ACLs | ||
| A COM Object (Msdds.dll) Could Cause Internet Explorer to Unexpectedly Exit | ||
| Vulnerability in Internet Explorer Could Allow Remote Code Execution | ||
| Win32/Mywife.E@mm | ||
| Vulnerability in Graphics Rendering Engine Could Allow Remote Code Execution. | ||
| Systems that are infected with Win32/Sober.Z@mm may download and run malicious files from certain Web domains beginning on January 6, 2006 | ||
| Vulnerability in the way Internet Explorer Handles Mismatched Document Object Model Objects Could Allow Remote Code Execution. | ||
| Memory Allocation Denial of Service Via RPC | ||
| Various Issues After Installing Microsoft Security Bulletin MS05-051 on Systems That Have Non-default File Permissions | ||
| Windows Firewall Exception May Not Display in the User Interface | ||
| Clarification of Simple File Sharing and ForceGuest | ||
| Vulnerability in Plug and Play Could Allow Remote Code Execution and Elevation of Privilege | ||
| Vulnerability in Remote Desktop Protocol (RDP) Could Lead to Denial of Service | ||
| A COM Object (Javaprxy.dll) Could Cause Internet Explorer to Unexpectedly Exit | ||
| Release of Update Rollup 1 for Windows 2000 Service Pack 4 (SP4) | ||
| Browser Windows Without Indications of Their Origins may be Used in Phishing Attempts | ||
| Vulnerability in TCP Could Allow Connection Reset | ||
| Default Setting in Windows Media Player Digital Rights Management Could Allow a User to Open a Web Page Without Requesting Permission | ||
| Clarification Of The SMTP Tar Pit Feature That Is Provided For Exchange Server 2003 in Windows Server 2003 Service Pack 1 |
For More Information
Support
Disclaimer
The information provided in this document is provided "as is" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.