Loading story…
Microsoft released MS14-080, a cumulative security update for Internet Explorer that addressed 14 privately reported vulnerabilities across IE 6 through IE 11. The most severe flaws could allow remote code execution if a user visited a specially crafted webpage, with client systems generally rated Critical and affected Windows Server configurations rated Moderate. The bulletin said the update corrected multiple memory corruption issues, two XSS filter bypass flaws, an ASLR bypass, and the VBScript memory corruption bug tracked as CVE-2014-6363.
Microsoft also published MS14-084, another Critical security bulletin, alongside later revisions to the Internet Explorer advisory that required additional updates in some environments, including 3029449 for IE10 on Windows 8, Windows Server 2012, and Windows RT, and 3038314 for IE11 on Windows 7 and Windows Server 2008 R2. The combined advisories highlighted urgent patching needs for Microsoft platforms because successful exploitation could let attackers run arbitrary code through user interaction with malicious content.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
3 events from the most recent confirmed update back to the earliest known activity.
On April 14, 2015, Microsoft updated the bulletin to version 3.0 and advised that customers running Internet Explorer 11 on Windows 7 or Windows Server 2008 R2 should also install security update 3038314. This revision added additional remediation guidance for affected systems.
On January 13, 2015, Microsoft re-released MS14-080 to comprehensively address issues related to CVE-2014-6363. Customers running Internet Explorer 10 on Windows 8, Windows Server 2012, or Windows RT were instructed to install both updates 3008923 and 3029449.
On December 9, 2014, Microsoft published cumulative security update 3008923 as MS14-080 to fix fourteen privately reported vulnerabilities in Internet Explorer 6 through 11, including remote code execution, XSS filter bypass, ASLR bypass, and VBScript memory corruption issues. Microsoft said none of the vulnerabilities were publicly disclosed or under active exploitation at the time of release.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Microsoft released security update **3034682** to address **41 vulnerabilities** in Internet Explorer **6 through 11**, including multiple flaws that could allow **remote code execution** if a user visited a specially crafted webpage. The most severe issues could let an attacker run code with the same privileges as the current user, making the risk highest on systems where users have administrative rights. Microsoft rated the bulletin **Critical** for affected Windows client systems and **Moderate** for affected Windows server systems. The bulletin said one flaw, **CVE-2015-0071**, had been exploited in the wild, while **CVE-2014-8967** had been publicly disclosed before the patch was issued. Microsoft said the update corrects memory corruption and permission-validation issues, improves **ASLR** behavior, and strengthens cross-domain policy enforcement. It also noted that systems running Internet Explorer **9, 10, and 11** require updates **3021952** and **3034196** for full protection, with **3023607** and, on some platforms, **3036197** also potentially installed automatically.
Jun 29, 2026
Microsoft’s latest security updates include a broad set of fixes across Windows, Office, Azure, Exchange, SharePoint, Remote Desktop, and other enterprise products, with several critical issues rated as highly likely to be exploited. Among the most serious is **`CVE-2026-47291`**, a critical **HTTP.sys** flaw with a **CVSS 9.8** score that can reportedly allow **unauthenticated remote code execution** in the Windows kernel-mode HTTP protocol stack, potentially giving attackers **SYSTEM-level** access. Microsoft also flagged multiple other high-risk issues in core Windows components and network-facing services, including vulnerabilities in **DHCP**, the **NT OS Kernel**, **NTLM**, **Remote Desktop Client**, and **SharePoint**. Separate Microsoft disclosures also detail new **Microsoft Edge (Chromium-based)** flaws affecting versions earlier than **`150.0.4078.48`**. These include **`CVE-2026-58281`**, a **deserialization of untrusted data** bug that can lead to remote code execution, and **`CVE-2026-58596`**, an **untrusted pointer dereference** issue that can enable elevation of privilege. Both vulnerabilities require user interaction but carry high impact if exploited, reinforcing concerns that browser and internet-exposed Windows components remain priority targets as vendors accelerate patch releases in response to faster vulnerability discovery and exploitation timelines.
Jul 14, 2026
Microsoft released emergency security updates for severe remote code execution flaws that affected both supported and legacy Windows systems, including unusual patches for end-of-life platforms such as **Windows XP**, **Windows Server 2003**, and **Windows Vista**. One of the most serious cases was **CVE-2019-0708** (**BlueKeep**), a pre-authentication vulnerability in **Remote Desktop Services** that Microsoft and security researchers warned was **wormable**, meaning malware could spread between vulnerable machines without user interaction. Microsoft directed customers on unsupported systems to obtain out-of-band fixes through the Microsoft Update Catalog, while researchers urged organizations to patch exposed RDP services immediately. Microsoft had taken a similar extraordinary step earlier for a critical **Internet Explorer** zero-day affecting **IE 6 through IE 11**, issuing an emergency update even for retired Windows XP after active exploitation expanded in the wild. Reporting at the time said attackers were using malicious websites to trigger remote code execution and broadened targeting from defense and financial firms to government and energy organizations. Later coverage of BlueKeep warned that public exploit explanations increased the risk of destructive attacks, reinforcing concerns that unpatched legacy Windows systems remained a high-value entry point for widespread compromise.
Jun 29, 2026