Loading story…
Microsoft released security update 3034682 to address 41 vulnerabilities in Internet Explorer 6 through 11, including multiple flaws that could allow remote code execution if a user visited a specially crafted webpage. The most severe issues could let an attacker run code with the same privileges as the current user, making the risk highest on systems where users have administrative rights. Microsoft rated the bulletin Critical for affected Windows client systems and Moderate for affected Windows server systems.
The bulletin said one flaw, CVE-2015-0071, had been exploited in the wild, while CVE-2014-8967 had been publicly disclosed before the patch was issued. Microsoft said the update corrects memory corruption and permission-validation issues, improves ASLR behavior, and strengthens cross-domain policy enforcement. It also noted that systems running Internet Explorer 9, 10, and 11 require updates 3021952 and 3034196 for full protection, with 3023607 and, on some platforms, 3036197 also potentially installed automatically.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
16 events from the most recent confirmed update back to the earliest known activity.
Microsoft published Security Bulletin MS15-019, a separate critical security bulletin from the MS14-056, MS14-065, MS15-009, MS15-018, and MS15-032 entries already in the timeline. This represents a distinct Microsoft vulnerability disclosure and patch release event.
Microsoft published Security Bulletin MS15-018, a separate critical security bulletin from the MS14-056, MS14-065, MS15-009, and MS15-032 entries already in the timeline. This represents a distinct Microsoft vulnerability disclosure and patch release event.
Microsoft published Security Bulletin MS14-056, a separate critical security bulletin from the MS14-065, MS15-009, and MS15-032 entries already in the timeline. This represents a distinct Microsoft vulnerability disclosure and patch release event.
Microsoft published Security Bulletin MS14-052, a separate critical security bulletin from the MS14-056, MS14-065, MS15-009, MS15-018, MS15-019, and MS15-032 entries already in the timeline. This represents a distinct Microsoft vulnerability disclosure and patch release event.
Microsoft published Security Bulletin MS14-051, a distinct critical security bulletin not already represented in the existing timeline. This constitutes a separate Microsoft vulnerability disclosure and patch release event.
Microsoft published Security Bulletin MS14-037, a distinct critical security bulletin not already represented in the existing timeline. This constitutes a separate Microsoft vulnerability disclosure and patch release event.
Microsoft published Security Bulletin MS14-035, a distinct critical security bulletin not already represented in the existing timeline. This constitutes a separate Microsoft vulnerability disclosure and patch release event.
Microsoft published Security Bulletin MS14-029 as a distinct critical security bulletin. This constitutes a separate Microsoft vulnerability disclosure and patch release event not already represented in the timeline.
Microsoft published Security Bulletin MS14-021 as a distinct critical security bulletin. This constitutes a separate Microsoft vulnerability disclosure and patch release event not already represented in the timeline.
Microsoft published Security Bulletin MS14-018 as a distinct critical security bulletin. This constitutes a separate Microsoft vulnerability disclosure and patch release event not already represented in the timeline.
Microsoft published Security Bulletin MS14-010, a distinct critical security bulletin not already represented in the existing timeline. This constitutes a separate Microsoft vulnerability disclosure and patch release event.
Microsoft published Security Bulletin MS14-012 as part of its March 2014 security releases. The bulletin is listed as Critical for many client platforms and Moderate for many server platforms, affecting multiple supported Windows versions.
Microsoft published Security Bulletin MS15-032, a separate critical security bulletin from MS15-009. This represents a distinct Microsoft vulnerability disclosure and patch release event.
On March 4, 2015, Microsoft revised bulletin MS15-009 to clarify installation details for related updates required for full protection on Internet Explorer 9, 10, and 11. The revision noted dependencies involving updates 3021952 and 3034196, with additional updates 3023607 and in some cases 3036197 potentially installed automatically.
On February 10, 2015, Microsoft published Security Bulletin MS15-009 and released security update 3034682 for Internet Explorer. The update addressed 41 vulnerabilities in Internet Explorer 6 through 11, including a publicly disclosed flaw and an exploited vulnerability, with the most severe issues allowing remote code execution via a specially crafted webpage.
Microsoft published Security Bulletin MS14-065, a separate critical security bulletin from the MS15-009 and MS15-032 entries already in the timeline. This represents a distinct Microsoft vulnerability disclosure and patch release event.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
18 references tracked. Mallory keeps watching after this page renders.
go.microsoft.com
Open sourcego.microsoft.com
Open sourcego.microsoft.com
Open sourcego.microsoft.com
Open sourcego.microsoft.com
Open sourcego.microsoft.com
Open sourcego.microsoft.com
Open sourcetechnet.microsoft.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Microsoft disclosed **CVE-2025-33053**, an **Important** remote code execution flaw in **Internet Shortcut Files** that affects all supported versions of Windows and carries a **CVSS 8.8** rating. The vulnerability is tied to **CWE-73** (external control of file name or path) and can let an unauthenticated attacker execute code over a network if a user clicks a specially crafted URL. Microsoft said the bug had been **exploited in the wild**, that **functional exploit code** was available, and that security updates had been released. The advisory said the issue has implications beyond legacy browser use because underlying **MSHTML**, **EdgeHTML**, and scripting components remain supported on some platforms and are still used by **Internet Explorer mode**, the **WebBrowser control**, **WebView**, and some **UWP** applications. Microsoft also noted that **IE cumulative updates** still matter for certain older Windows Server systems, and later revised the advisory to correct the CVE title and description without changing the technical impact. Related Microsoft advisories show the flaw joins a broader pattern of remote code execution risks across Windows and server products, including **MSHTML**, **Hyper-V**, **Exchange Server**, and **SharePoint Server**.
Jun 29, 2026
Microsoft’s latest security updates include a broad set of fixes across Windows, Office, Azure, Exchange, SharePoint, Remote Desktop, and other enterprise products, with several critical issues rated as highly likely to be exploited. Among the most serious is **`CVE-2026-47291`**, a critical **HTTP.sys** flaw with a **CVSS 9.8** score that can reportedly allow **unauthenticated remote code execution** in the Windows kernel-mode HTTP protocol stack, potentially giving attackers **SYSTEM-level** access. Microsoft also flagged multiple other high-risk issues in core Windows components and network-facing services, including vulnerabilities in **DHCP**, the **NT OS Kernel**, **NTLM**, **Remote Desktop Client**, and **SharePoint**. Separate Microsoft disclosures also detail new **Microsoft Edge (Chromium-based)** flaws affecting versions earlier than **`150.0.4078.48`**. These include **`CVE-2026-58281`**, a **deserialization of untrusted data** bug that can lead to remote code execution, and **`CVE-2026-58596`**, an **untrusted pointer dereference** issue that can enable elevation of privilege. Both vulnerabilities require user interaction but carry high impact if exploited, reinforcing concerns that browser and internet-exposed Windows components remain priority targets as vendors accelerate patch releases in response to faster vulnerability discovery and exploitation timelines.
Jul 14, 2026
Microsoft released fixes for **117 vulnerabilities** across 15 product families, including **3 Critical**, **110 Important**, **3 Moderate**, and **1 Low** severity issues. Two flaws were already being exploited in the wild: `CVE-2024-43572` in **Microsoft Management Console** and `CVE-2024-43573` in the **Windows MSHTML Platform**. Microsoft also flagged eight additional vulnerabilities as more likely to be exploited within 30 days, while Windows accounted for the vast majority of the exposure with **93 CVEs** spanning remote code execution, elevation of privilege, and denial-of-service bugs. The most severe issues included `CVE-2024-43468`, a **Critical Microsoft Configuration Manager remote code execution** flaw with a **CVSS 9.8** score that requires an in-console update and additional hardening, and `CVE-2024-38124`, a **Windows Netlogon elevation of privilege** vulnerability with mitigation guidance. The release also addressed 15 Windows Mobile Broadband Driver flaws that generally require physical access or proximity, Windows 11 24H2-specific bugs such as `CVE-2024-43527` and `CVE-2024-43571`, and advisory items affecting Edge and curl-related components; Sophos said protections were available for `CVE-2024-43502`, `CVE-2024-43572`, and `CVE-2024-43573`.
Jun 29, 2026