cve.bz

Microsoft Patch Tuesday, September 2014: the CVEs

Filter

Microsoft Patch Tuesday September 2014: the CVEs Microsoft published on 9 September 2014, the second Tuesday of the month, with CVSS, EPSS, CISA KEV and public exploits to show what to patch first. Narrow it: in CISA KEV · critical. The same day: Adobe, SAP. Earlier: Aug 2014, Jul 2014, Jun 2014, May 2014, Apr 2014, Mar 2014, Feb 2014, Jan 2014, Dec 2013, Nov 2013, Oct 2013, Sep 2013. Other lists: CISA KEV list, CVE exploit search, Latest critical CVEs, Ransomware CVEs, New CVEs today, This week, Patch Tuesday

  1. –CVE-2014-5711EPSS 2.7%

    The Microsoft Tech Companion (aka com.technet) application 1.0.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted cert…