This alert is to provide you with an overview of the new security bulletins being released onJune 14, 2016. New security bulletins are released monthly to address security vulnerabilities in Microsoft products. The alert also provides information regarding two new security bulletin revisions.
New Security Bulletins
Microsoft is releasing 16 new security bulletins for newly discovered vulnerabilities:
Bulletin ID | Bulletin Title | Maximum Severity Rating | Vulnerability Impact | Restart Requirement | Affected Software |
MS16-063 | Cumulative Security Update for Internet Explorer (3163649) | Critical | Remote Code Execution | Requires restart | All supported versions of Microsoft Windows. |
MS16-068 | Cumulative Security Update for Microsoft Edge (3163656) | Critical | Remote Code Execution | Requires restart | Microsoft Edge on Windows 10. |
MS16-069 | Cumulative Security Update for JScript and VBScript (3163640) | Critical | Remote Code Execution | May require restart | Windows Vista, Windows Server 2008, and Windows Server 2008 R2. |
MS16-070 | Security Update for Microsoft Office (3163610) | Critical | Remote Code Execution | May require restart | Microsoft Office 2007, Office 2010, Office 2013, Office 2013 RT, Office 2016, Office for Mac 2011, Office 2016 for Mac, Office Compatibility Pack, Word Viewer, Visio Viewer, Word Automation Services on SharePoint Server 2010, Word Automation Services on SharePoint Server 2013, Office Web Apps 2010, Office Web Apps 2013, and Office Online Server. |
MS16-071 | Security Update for Microsoft Windows DNS Server (3164065) | Critical | Remote Code Execution | Requires restart | Windows Server 2012 and Windows Server 2012 R2. |
MS16-072 | Security Update for Group Policy (3163622) | Important | Elevation of Privilege | Requires restart | All supported versions of Microsoft Windows. |
MS16-073 | Security Update for Windows Kernel-Mode Drivers (3164028) | Important | Elevation of Privilege | Requires restart | All supported versions of Microsoft Windows. |
MS16-074 | Security Update for Microsoft Graphics Component (3164036) | Important | Elevation of Privilege | Requires restart | All supported versions of Microsoft Windows. |
MS16-075 | Security Update for Windows SMB Server (3164038) | Important | Elevation of Privilege | Requires restart | All supported versions of Microsoft Windows. |
MS16-076 | Security Update for Netlogon (3167691) | Important | Remote Code Execution | Requires restart | Windows Server 2008, Windows Server 2008 R2, Windows Server 2012, and Windows Server 2012 R2. |
MS16-077 | Security Update for WPAD (3165191) | Important | Elevation of Privilege | Requires restart | All supported versions of Microsoft Windows. |
MS16-078 | Security Update for Windows Diagnostic Hub (3165479) | Important | Elevation of Privilege | Requires restart | Windows 10 |
MS16-079 | Security Update for Microsoft Exchange (3160339) | Important | Information Disclosure | May require restart | Microsoft Exchange Server 2007, Exchange Server 2010, Exchange Server 2013, and Exchange Server 2016. |
MS16-080 | Security Update for Microsoft Windows PDF (3164302) | Important | Remote code Execution | May require restart | Windows 8.1, Windows Server 2012, Windows Server 2012 R2, and Windows 10. |
MS16-081 | Security Update for Active Directory (3160352) | Important | Denial of Service | Requires restart | Windows Server 2008 R2, Windows Server 2012, and Windows Server 2012 R2. |
MS16-082 | Security Update for Microsoft Windows Search Component (3165270) | Important | Denial of Service | Requires restart | Windows 7, Windows Server 2008 R2, Windows 8.1, Windows Server 2012, Windows Server 2012 R2, Windows RT 8.1, and Windows 10. |
The bulletin summary webpage is here: https://technet.microsoft.com/en-us/library/security/ms16-jun.aspx.
Revised Security Bulletins
Microsoft revised one security bulletin on June 14, 2016. Here is an overview:
MS16-039 | Security Update for Microsoft Graphics Component (3148522) |
Executive Summary | Microsoft has re-released security update 3144427 for affected editions of Microsoft Lync 2010 and Microsoft Lync 2010 Attendee. The re-release addresses issues customers might have experienced downloading security update 3144427. Customers running Microsoft Lync 2010 should install the update to be fully protected from the vulnerability. SeeMicrosoft Knowledge Base Article 3144427 for more information. |
Affected Software | This security update is rated Critical for:
This security update is rated Important for all affected editions of Microsoft Office 2007 and Microsoft Office 2010. |
More Information | https://technet.microsoft.com/library/security/ms16-039 |