Latest vulnerabilities analysis

Select one or more of the following links for up-to-date information on the latest vulnerabilities and the associated risk of malware infection.

If you have further information or concerns about these or other vulnerabilities, and you wish to discuss them with us, please contact Sophos Technical Support.

Posted 19 August 2010

APSB10-17 Security Advisory for Adobe Reader and Acrobat

Posted 10 August 2010

MS10-047 - Vulnerabilities in Windows Kernel Could Allow Elevation of Privilege (981852)
MS10-048 - Vulnerabilities in Windows Kernel-Mode Drivers Could Allow Elevation of Privilege (2160329)
MS10-049 - Vulnerabilities in SChannel could allow Remote Code Execution (980436)
MS10-050 - Vulnerability in Windows Movie Maker Could Allow Remote Code Execution (981997)
MS10-051 - Vulnerability in Microsoft XML Core Services Could Allow Remote Code Execution (2079403)
MS10-052 - Vulnerability in Microsoft MPEG Layer-3 Codecs Could Allow Remote Code Execution (2115168)
MS10-053 - Critical Cumulative Security Update for Internet Explorer (2183461)
MS10-054 - Vulnerabilities in SMB Server Could Allow Remote Code Execution (982214)
MS10-055 - Vulnerability in Cinepak Codec Could Allow Remote Code Execution (982665)
MS10-056 - Critical Vulnerabilities in Microsoft Office Word Could Allow Remote Code Execution (2269638)
MS10-057 Vulnerability in Microsoft Office Excel Could Allow Remote Code Execution (2269707)
MS10-060 - Vulnerabilities in the Microsoft .NET Common Language Runtime and in Microsoft Silverlight Could Allow Remote Code Execution (2265906)

Posted 19 July 2010

(2286198) Vulnerability in Windows Shell Could Allow Remote Code Execution

Posted 19 July 2010

APSB10-15 Security Advisory for Adobe Reader and Acrobat

Posted 13 July 2010

MS10-043 - Vulnerability in Canonical Display Driver Could Allow Remote Code Execution (2032276)
MS10-044 - Vulnerabilities in Microsoft Office Access ActiveX Controls Could Allow Remote Code Execution (982335)
MS10-045 - Vulnerability in Microsoft Office Outlook Could Allow Remote Code Execution (978212)

Posted 11 June 2010

(2219475) Vulnerability in Windows Help and Support Center Could Allow Remote Code Execution

Posted 08 June 2010

MS10-032 - Vulnerabilities in Windows Kernel-Mode Drivers Could Allow Elevation of Privilege (979559)
MS10-033 - Vulnerabilities in Media Decompression Could Allow Remote Code Execution (979902)
MS10-034 - Cumulative Security Update of ActiveX Kill Bits (980195)
MS10-035 - Cumulative Security Update for Internet Explorer (982381)
MS10-036 - Vulnerabilities in COM validation in Microsoft Office Could Allow Remote Code Execution (983235)
MS10-037 - Vulnerability in the Open Type Compact Font Format (CFF) Driver Could Allow Elevation of Privilege (980218)
MS10-038 - Vulnerabilities in Microsoft Office Excel Could Allow Remove Code Execution (2027452)
MS10-039 - Vulnerabilities in Microsoft SharePoint Could Allow Elevation of Privilege (2028554)
MS10-040 - Vulnerability in Internet Information Services Could Allow Remote Code Execution (982666)
MS10-041 - Vulnerability in Microsoft .NET Framework Could Allow Tampering (981343)
APSA10-01 - Security Advisory for Flash Player, Adobe Reader and Acrobat

Posted 11 May 2010

MS10-030 - Vulnerability in Outlook Express and Windows Mail Could Allow Remote Code Execution (978542)
MS10-031 - Vulnerability in Microsoft Visual Basic for Applications Could Allow Remote Code Execution (978213)

Posted 13 April 2010

MS10-019 - Vulnerabilities in Windows Could Allow Remote Code Execution (981210)
MS10-020 - Vulnerabilities in SMB Client Could Allow Remote Code Execution (980232)
MS10-021 - Vulnerabilities in Windows Kernel Could Allow Elevation of Privilege (979683)
MS10-022 - Vulnerability in VBScript Scripting Engine Could Allow Remote Code Execution (981169)
MS10-023 - Vulnerability in Microsoft Office Publisher Could Allow Remote Code Execution (981160)
MS10-024 - Vulnerabilities in Microsoft Exchange and Windows SMTP Service could allow Denial of Service (981832)
MS10-025 - Vulnerability in Microsoft Windows Media Services Could Allow Remote Code Execution (980858)
MS10-026 - Vulnerability in Microsoft DirectShow Could Allow Remote Code Execution (977816)
MS10-027 - Vulnerability in Windows Media Player Could Allow Remote Code Execution (979402)
MS10-028 - Vulnerabilities in Microsoft Visio Could Allow Remote Code Execution (980094)

Posted 9 March 2010

(981374) Vulnerability in Internet Explorer Could Allow Remote Code Execution
MS10-016 - Vulnerability in Windows Movie Maker Could Allow Remote Code Execution (975561)
MS10-017 - Vulnerabilities in Microsoft Office Excel Could Allow Remote Code Execution (980150)

Posted 2 March 2010

(981169) - Vulnerability in VBScript Could Allow Remote Code Execution

Posted 9 February 2010

MS10-003 - Vulnerability in Microsoft Office (MSO) Could Allow Remote Code Execution (978214)
MS10-004 - Vulnerabilities in Microsoft Office PowerPoint Could Allow Remote Code Execution (975416)
MS10-005 - Vulnerability in Microsoft Paint Could Allow Remote Code Execution (978706)
MS10-006 - Vulnerabilities in SMB Client Could Allow Remote Code Execution (978251)
MS10-007 - Vulnerability in Windows Shell Handler Could Allow Remote Code Execution (975713)
MS10-008 - Cumulative Security Update of ActiveX Kill Bits (978262)
MS10-009 - Vulnerabilities in Windows TCP/IP Could Allow Remote Code Execution (974145)
MS10-012 - Vulnerabilities in SMB Server Could Allow Remote Code Execution (971468)
MS10-013 - Vulnerability in Microsoft DirectShow Could Allow Remote Code Execution (977935)
(977377) Vulnerability in TLS/SSL Could Allow Spoofing

Posted 4 February 2010

(980088) Vulnerability in Internet Explorer Could Allow Information Disclosure

Posted 21 January 2010

MS10-002 - Cumulative Security Update for Internet Explorer (978207)
(979682) Vulnerability in Windows Kernel Could Allow Elevation of Privilege

Posted 15 January 2010

Vulnerability in Internet Explorer Could Allow Remote Code Execution - Aurora (979352)

Posted 12 January 2010

MS10-001 - Vulnerability in the Embedded OpenType Font Engine Could Allow Remote Code Execution

Posted 15 December 2009

Vulnerability: Adobe Reader and Adobe Acrobat remote execution vulnerability CVE-2009-4324

Posted 8 December 2009

MS09-070 - Vulnerabilities in Active Directory Federation Services Could Allow Remote Code Execution
MS09-071 - Vulnerabilities in Internet Authentication Service Could Allow Remote Code Execution
MS09-072 - Cumulative Security Update for Internet Explorer
MS09-073 - Vulnerability in WordPad and Office Text Converters Could Allow Remote Code Execution
MS09-074 - Vulnerability in Microsoft Office Project Could Allow Remote Code Execution

Posted 25 November 2009

(977981) Vulnerability in Internet Explorer Could Allow Remote Code Execution

Posted 10 November 2009

MS09-063 - Critical Vulnerability in Web Services on Devices API Could Allow Remote Code Execution
MS09-064 - Critical Vulnerability in License Logging Server Could Allow Remote Code Execution
MS09-065 - Critical Vulnerabilities in Windows Kernel-Mode Drivers Could Allow Remote Code Execution
MS09-067 - Vulnerabilities in Microsoft Office Excel Could Allow Remote Code Execution
MS09-068 - Important Vulnerability in Microsoft Office Word Could Allow Remote Code Execution

Posted 14 October 2009

APSB09-15 Security Advisory for Adobe Reader and Acrobat
MS09-050 - Critical Vulnerabilities in SMBv2 Could Allow Remote Code Execution (975517)
MS09-051 - Critical Vulnerabilities in Windows Media Runtime Could Allow Remote Code Execution (975682)
MS09-052 - Critical Vulnerability in Windows Media Player Could Allow Remote Code Execution (974112)
MS09-053 - Important Vulnerabilities in FTP Service for Internet Information Services Could Allow Remote Code Execution (975254)
MS09-054 - Critical Cumulative Security Update for Internet Explorer (974455)
MS09-055 - Critical Cumulative Security Update of ActiveX Kill Bits (973525)
MS09-056 - Important - Vulnerabilities in Windows CryptoAPI Could Allow Spoofing (974571)
MS09-057 - Important Vulnerability in Indexing Service Could Allow Remote Code Execution (969059)
MS09-060 - Critical Vulnerabilities in Microsoft Active Template Library (ATL) ActiveX Controls for Microsoft Office Could Allow Remote Code Execution (973965)
MS09-061 - Critical Vulnerabilities in the Microsoft .NET Common Language Runtime Could Allow Remote Code Execution (974378)
MS09-062 - Critical Vulnerabilities in GDI+ Could Allow Remote Code Execution (957488)

Posted 9 September 2009

(975497) Vulnerabilities in SMB Could Allow Remote Code Execution
MS09-045 - Vulnerability in JScript Scripting Engine Could Allow Remote Code Execution (971961)
MS09-046 - Vulnerability in DHTML Editing Component ActiveX Control Could Allow Remote Code Execution (956844)
MS09-047 - Vulnerabilities in Windows Media Format Could Allow Remote Code Execution (973812)
MS09-048 - Critical Vulnerabilities in Windows TCP/IP Could Allow Remote Code Execution (967723)
MS09-049 - Critical Vulnerability in Wireless LAN AutoConfig Service Could Allow Remote Code Execution (970710)

Posted 2 September 2009

975191. Vulnerability in Internet Information Services FTP Service Could Allow for Remote Code Execution

Posted 12 August 2009

MS09-037. Vulnerabilities in Microsoft Active Template Library (ATL) Could Allow Remote Code Execution
MS09-038. Vulnerabilities in Windows Media File Processing Could Allow Remote Code Execution (971557)
MS09-039. Vulnerabilities in WINS Could Allow Remote Code Execution (969883)
MS09-042. Vulnerability in Telnet Could Allow Remote Code Execution (960859)
MS09-043. Critical Vulnerabilities in Microsoft Office Web Components Could Allow Remote Code Execution (957638)
MS09-044. Critical Vulnerabilities in Remote Desktop Connection Could Allow Remote Code Execution (970927)

Posted 28 July 2009

MS09-034 - Cumulative Security Update for Internet Explorer
MS09-035 - Vulnerabilities in Visual Studio Active Template Library Could Allow Remote Code Execution

Posted 13 July 2009

MS09-028 - Vulnerabilities in Microsoft DirectShow Could Allow Remote Code Execution
MS09-029 - Vulnerabilities in the Embedded OpenType Font Engine Could Allow Remote Code Execution
MS09-032 - Cumulative Security Update of ActiveX Kill Bits

Posted 13 July 2009

973472. Vulnerability in Microsoft Office Web Components Control Could Allow Remote Code Execution

Posted 8 July 2009

972890. Vulnerability in Microsoft Video ActiveX Control Could Allow Remote Code Execution

Posted 9 June 2009

MS09-018 - Vulnerabilities in Active Directory Could Allow Remote Code Execution
MS09-019 - Cumulative Security Update for Internet Explorer
MS09-021 - Vulnerabilities in Microsoft Office Excel Could Allow Remote Code Execution
MS09-022 - Vulnerabilities in Windows Print Spooler Could Allow Remote Code Execution
MS09-024 - Vulnerability in Microsoft Works Converters Could Allow Remote Code Execution
MS09-025 Vulnerabilities in Windows Kernel Could Allow Elevation of Privilege
MS09-027 - Vulnerabilities in Microsoft Office Word Could Allow Remote Code Execution

Posted 29 May 2009

971778. Vulnerability in Microsoft DirectShow Could Allow Remote Code Execution

Posted 13 May 2009

MS09-017 - Critical Vulnerabilities in Microsoft Office PowerPoint Could Allow Remote Code Execution (967340)

Posted 14 April 2009

MS09-009. Vulnerabilities in Microsoft Office Excel Could Allow Remote Code Execution (968557)
MS09-010. Vulnerabilities in WordPad and Office Text Converters Could Allow Remote Code Execution (960477)
MS09-011. Vulnerability in DirectShow Could Allow Remote Code Execution (961373)
MS09-013. Vulnerabilities in Windows HTTP Services Could Allow Remote Code Execution (960803)
MS09-014. Cumulative Security Update for Internet Explorer (963027)

Posted 3 April 2009

969136. Vulnerability in Microsoft Office PowerPoint Could Allow Remote Code Execution

Posted 11 March 2009

MS09-006. Critical Vulnerabilities in Windows Kernel Could Allow Remote Code Execution (958690)

Posted 25 February 2009

968272. Vulnerability in Microsoft Office Excel Could Allow Remote Code Execution

Posted 23 February 2009

APSA09-01. Buffer overflow issue in versions 9.0 and earlier of Adobe Reader and Acrobat

Posted 11 February 2009

MS09-002. Critical Cumulative Security Update for Internet Explorer (961260)
MS09-003. Critical Vulnerabilities in Microsoft Exchange Could Allow Remote Code Execution (959239)
MS09-004. Vulnerability in Microsoft SQL Server Could Allow Remote Code Execution (959420)

Posted 13 January 2009

MS09-001. Vulnerabilities in SMB Could Allow Remote Code Execution (958687)

Posted 18 December 2008

MS08-078. Security Update for Internet Explorer (960714)

Posted 11 December 2008

961051. Vulnerability in Internet Explorer Could Allow Remote Code Execution

Posted 10 December 2008

MS08-070. Vulnerabilities in Visual Basic 6.0 Runtime Extended Files (ActiveX Controls) Could Allow Remote Code Execution (932349)
MS08-071. Vulnerabilities in GDI Could Allow Remote Code Execution (956802)
MS08-072. Vulnerabilities in Microsoft Office Word Could Allow Remote Code Execution (957173)
MS08-073. Cumulative Security Update for Internet Explorer (958215)
MS08-074. Vulnerabilities in Microsoft Office Excel Could Allow Remote Code Execution (959070)
MS08-075. Vulnerabilities in Windows Search Could Allow Remote Code Execution (959349)
MS08-076. Vulnerabilities in Windows Media Components Could Allow Remote Code Execution (959807)

Posted 12 November 2008

MS08-068. Vulnerability in SMB Could Allow Remote Code Execution (957097)
MS08-069. Vulnerabilities in Microsoft XML Core Services Could Allow Remote Code Execution (955218)

Posted 23 October 2008

MS08-067. Vulnerability in Server Service Could Allow Remote Code Execution (958644)

Posted 15 October 2008

MS08-057. Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (956416)
MS08-058. Cumulative Security Update for Internet Explorer (956390)
MS08-059. Vulnerability in Host Integration Server RPC Service Could Allow Remote Code Execution (956695)
MS08-060. Vulnerability in Active Directory Could Allow Remote Code Execution (957280)

Posted 10 September 2008

MS08-052. Vulnerabilities in GDI+ Could Allow Remote Code Execution (954593)
MS08-053. Vulnerability in Windows Media Encoder 9 Could Allow Remote Code Execution (954156)
MS08-054. Vulnerability in Windows Media Player Could Allow Remote Code Execution (954154)
MS08-055. Vulnerability in Microsoft Office Could Allow Remote Code Execution (955047)

Posted 15 August 2008

MS08-049 - Vulnerabilities in Event System Could Allow Remote Code Execution (950974)

Posted 12 August 2008

MS08-051. Microsoft PowerPoint vulnerabilities could allow remote code execution (949785)
MS08-042. Malicious Word documents could allow arbitrary code execution
MS08-044. Multiple vulnerabilities in Microsoft Office filters could allow arbitrary code execution
MS08-045. Vulnerabilities in Internet Explorer could allow arbitrary code execution
MS08-046. A heap overflow in Microsoft Windows Image Color Management System could allow arbitrary code execution
MS08-043. Microsoft Excel vulnerabilities could allow remote code execution (954066)
MS08-041. Vulnerability in the ActiveX Control for the Snapshot Viewer for Microsoft Access could allow remote code execution (955617)