Microsoft-Patchday April 2015

Am heutigen Dienstag, dem 14. April 2015, ist wieder Patchday bei Microsoft. Insgesamt möchte Microsoft 11 Updates verteilen, die vier kritische und sieben als “hoch” eingestufte Sicherheitslücken schließen sollen. Nachfolgend ein grober Überblick, welche Patches veröffentlicht werden und welche Produkte betroffen sind. Weitere Details gibts auf dieser Microsoft-Webseite.

Bulletin ID	Bulletin Title	Maximum Severity Rating and Vulnerability Impact	Restart Requirement	Affected Software
MS15-032	Cumulative Security Update for Internet Explorer (3038314)	Critical Remote Code Execution	Requires restart	Internet Explorer on affected Microsoft Windows clients and servers.
MS15-033	Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (3048019)	Critical Remote Code Execution	May require restart	All supported editions of Microsoft Office 2007, Office 2010, Office 2013, Office 2013 RT, Office for Mac, Word Viewer, Office Compatibility Pack, SharePoint Server 2010, SharePoint Server 2013, Office Web Apps 2010, and Office Web Apps 2013.
MS15-034	Vulnerability in HTTP.sys Could Allow Remote Code Execution (3042553)	Critical Remote Code Execution	Requires restart	All supported editions of Microsoft Windows 7, Windows Server 2008 R2, Windows 8, Windows 8.1, Windows Server 2012, and Windows Server 2012 R2.
MS15-035	Vulnerability in Microsoft Graphics Component Could Allow Remote Code Execution (3046306)	Critical Remote Code Execution	May require restart	All supported editions of Microsoft Windows Server 2003, Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2.
MS15-036	Vulnerabilities in Microsoft SharePoint Server Could Allow Elevation of Privilege (3052044)	Important Elevation of Privilege	May require restart	All supported editions of Microsoft SharePoint Server 2010, SharePoint Server 2013, and SharePoint Foundation 2013.
MS15-037	Vulnerability in Windows Task Scheduler Could Allow Elevation of Privilege (3046269)	Important Elevation of Privilege	Does not require restart	All supported editions of Microsoft Windows 7 and Windows Server 2008 R2.
MS15-038	Vulnerabilities in Microsoft Windows Could Allow Elevation of Privilege (3049576)	Important Elevation of Privilege	Requires restart	All supported releases of Microsoft Windows.
MS15-039	Vulnerability in XML Core Services Could Allow Security Feature Bypass (3046482)	Important Security Feature Bypass	May require restart	All supported editions of Microsoft Windows Server 2003, Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2.
MS15-040	Vulnerability in Active Directory Federation Services Could Allow Information Disclosure (3045711)	Important Information Disclosure	May require restart	Active Directory Federation Services 3.0.
MS15-041	Vulnerability in .NET Framework Could Allow Information Disclosure (3048010)	Important Information Disclosure	May require restart	Microsoft .NET Framework 1.1 Service Pack 1, Microsoft .NET Framework 2.0 Service Pack 2, Microsoft .NET Framework 3.5, Microsoft .NET Framework 3.5.1, Microsoft .NET Framework 4, Microsoft .NET Framework 4.5, Microsoft .NET Framework 4.5.1, and Microsoft .NET Framework 4.5.2 on affected releases of Microsoft Windows.
MS15-042	Vulnerability in Windows Hyper-V Could Allow Denial of Service (3047234)	Important Denial of Service	Requires restart	Microsoft Windows 8.1 and Windows Server 2012 R2.