Microsoft Patch Tuesday, January 2006: the CVEs

Microsoft Patch Tuesday January 2006: the CVEs Microsoft published on 10 January 2006, the second Tuesday of the month, with CVSS, EPSS, CISA KEV and public exploits to show what to patch first. Narrow it: in CISA KEV · critical. The same day: Adobe, SAP. Earlier: Dec 2005, Nov 2005, Oct 2005, Sep 2005, Aug 2005, Jul 2005, Jun 2005, May 2005, Apr 2005, Mar 2005, Feb 2005, Jan 2005. Other lists: CISA KEV list, CVE exploit search, Latest critical CVEs, Ransomware CVEs, New CVEs today, This week, Patch Tuesday

1. –CVE-2006-0010EPSS 33%2006-01-10

   Heap-based buffer overflow in T2EMBED.DLL in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 up to SP1, Windows 98, and Windows ME allows remote attackers to execute arbitrary code via an e-mail message or web page with a craft…

2. –CVE-2006-0002EPSS 46%2006-01-10

   Unspecified vulnerability in Microsoft Outlook 2000 through 2003, Exchange 5.0 Server SP2 and 5.5 SP4, Exchange 2000 SP3, and Office allows remote attackers to execute arbitrary code via an e-mail message with a crafted Transport Neutral E…

3. –CVE-2006-0020EPSS 19%2006-01-10

   An unspecified Microsoft WMF parsing application, as used in Internet Explorer 5.01 SP4 on Windows 2000 SP4, and 5.5 SP2 on Windows Millennium, and possibly other versions, allows attackers to cause a denial of service (crash) and possibly…