Microsoft Security Response Center

The Microsoft Security Response Center (MSRC) identifies, monitors, responds to and resolves security incidents and vulnerabilities in Microsoft software.

May, 2014

  • Meet myBulletins: an online security bulletin customization service

    Microsoft is committed to promoting a safer, more trusted Internet and providing monthly security updates is one of the ways our customers keep their devices and connections to the Internet more secure. Packaging updates together into a monthly bulletin cycle stems from customer feedback and offers a predictable way to help protect them against newly discovered threats. Today, we are excited to introduce myBulletins , a new online security bulletin customization service. We’ve also created...
  • May 2014 Security Bulletin Webcast and Q&A

    Today we published the May 2014 Security Bulletin Webcast Questions & Answers page . We answered 17 questions in total, with the majority focusing on the update for SharePoint ( MS14-022 ), Group Policy ( MS14-025 ) and Internet Explorer ( MS14-029 ). Here is the video replay: We invite you to join us for the next scheduled webcast on Wednesday, June 11, 2014, at 11 a.m. PDT (UTC -7), when we will go into detail about the June bulletin release and answer your bulletin deployment questions...
  • The May 2014 Security Updates

    Today, we released eight security bulletins – two rated Critical and six rated Important – to address 13 Common Vulnerability & Exposures (CVEs) in .NET Framework, Office, SharePoint, Internet Explorer, and Windows. We encourage you to apply all of these updates, but for those who need to prioritize their deployment planning, we recommend focusing on MS14-024 , MS14-025 and MS14-029 . We also have some new security advisories releasing today. Security Advisory 2871997 provides...
  • Advance Notification Service for the May 2014 Security Bulletin Release

    Today we provide Advance Notification Service (ANS) for the release of eight bulletins, two rated Critical and six rated Important in severity. These updates will address vulnerabilities for .NET Framework, Office, Internet Explorer, and Windows. As we do every month, we’ve scheduled the security bulletin release for the second Tuesday of the month, May 13, 2014, at approximately 10:00 a.m. PDT. Revisit this blog then for deployment guidance and further analysis together with a brief video...
  • Security Update Released to Address Recent Internet Explorer Vulnerability

    Today, we released a security update to address the Internet Explorer (IE) vulnerability first described in Security Advisory 2963983 . This security update addresses every version of Internet Explorer. While we’ve seen only a limited number of targeted attacks, customers are advised to install this update promptly. The majority of our customers have automatic updates enabled and so will not need to take any action as protections will be downloaded and installed automatically. If you’re...
  • Out-of-Band Release to Address Microsoft Security Advisory 2963983

    At approximately 10 a.m. PDT, we will release an out-of-band security update to address the issue affecting Internet Explorer (IE) that was first discussed in Security Advisory 2963983. This update is fully tested and ready for release for all affected versions of the browser. The majority of customers have automatic updates enabled and will not need to take any action because protections will be downloaded and installed automatically. If you’re unsure if you have automatic updates, or you...