IE | Microsoft Security Response Center

Advance Notification Service for the December 2014 Security Bulletin Release

Thursday, December 04, 2014

Today, we provide advance notificationfor the release of seven Security Bulletins. Three of these updates are rated Critical and four are rated as Important in severity. These updates are for Microsoft Windows, Internet Explorer (IE), Office and Exchange. As per our monthly process, we’ve scheduled the Security Bulletin release for the second Tuesday of the month, December 9, 2014, at approximately 10 a.

古いバージョンの Java ActiveX コントロールのブロックを開始しました

Tuesday, September 09, 2014

先日、[IT 管理者向け] 古いバージョンの ActiveX コントロールをブロックする機能でもご紹介したとおり、本日 2014

[回避策まとめ] セキュリティアドバイザリ 2963983 – Internet Explorer の脆弱性により、リモートでコードが実行される

Wednesday, April 30, 2014

2014/5/2 更新：本 Internet Explorer の脆弱性に対処するセキュリティ更新プログラムをセキュリティ情報 MS14-021 として公開しました。詳

セキュリティアドバイザリ 2934088「Internet Explore の脆弱性により、リモートでコードが実行される」を公開

Wednesday, February 19, 2014

[2014/3/12 追記] セキュリティ情報 MS14-012 を公開し、本脆弱性に対処したセキュリティ更新プログラムを公開しました。 2014 年

Technical details of the targeted attack using IE vulnerability CVE-2013-3918

Tuesday, November 12, 2013

Over the weekend we became aware of an active attack relying on an unknown remote code execution vulnerability of a legacy ActiveX component used by Internet Explorer. We are releasing this blog to confirm one more time that the code execution vulnerability will be fixed in today’s UpdateTuesday release and to clarify some details about the second vulnerability reported.

MS13-080 addresses two vulnerabilities under limited, targeted attacks

Tuesday, October 08, 2013

Today we released MS13-080 which addresses nine CVEs in Internet Explorer. This bulletin fixes multiple security issues, including two critical vulnerabilities that haven been actively exploited in limited targeted attacks, which we will discuss in details in this blog entry. CVE-2013-3893: the final patch after Fix it workaround Previously, Microsoft released Security Advisory 2887505 and made available the Fix it workaround 51001 to provide earlier protection to all customers for an actively exploited security issue that was reported to us.

New Bounty Program Details

Wednesday, June 19, 2013

Today we announced the upcoming Mitigation Bypass Bounty, the BlueHat Bonus for Defense, and the Internet Explorer 11 Preview Bug Bounty program. It’s very exciting to finally take the wraps off of these initiatives and we are anticipating some great submissions from the security research community! These programs will allow us to reward great work by researchers and improve the security of our software – all to the benefit of our customers.