Microsoft Patch Tuesday 2010-08-10

MS10-047
Title Vulnerabilities in Windows Kernel Could Allow Elevation of Privilege
Replaces MS10-021
Affected Windows Kernel
KB KB981852
Known Exploits No
Microsoft Rating Important
ISC Client Rating Important
ISC Server Rating Important
CVE Exploitability
2010-1888 1
2010-1889 2
2010-1890 0
Top of page
MS10-048
Title Vulnerabilities in Windows Kernel-Mode Drivers Could Allow Elevation of Privilege
Replaces MS10-032
Affected Windows Kernel
KB KB2160329
Known Exploits No
Microsoft Rating Important
ISC Client Rating Critical
ISC Server Rating Critical
CVE Exploitability
2010-1887 0
2010-1894 1
2010-1895 1
2010-1896 1
2010-1897 1
Top of page
MS10-049
Title Vulnerabilities in SChannel could allow Remote Code Execution
Replaces
Affected IIS and SChannel
KB KB980436
Known Exploits No
Microsoft Rating Important
ISC Client Rating Important
ISC Server Rating Important
CVE Exploitability
2010-2566 2
2009-3555 3
Top of page
MS10-050
Title Vulnerability in Windows Movie Maker Could Allow Remote Code Execution
Replaces MS10-016
Affected Windows Movie Maker
KB KB981997
Known Exploits No
Microsoft Rating Important
ISC Client Rating Critical
ISC Server Rating Critical
CVE Exploitability
2010-2564 1
Top of page
MS10-051
Title Vulnerability in Microsoft XML Core Services Could Allow Remote Code Execution
Replaces MS80-69
Affected Microsoft XML core services
KB KB2079403
Known Exploits No
Microsoft Rating Critical
ISC Client Rating Critical
ISC Server Rating Critical
CVE Exploitability
2010-2561 2
Top of page
MS10-052
Title Vulnerability in Microsoft MPEG Layer-3 Codecs Could Allow Remote Code Execution
Replaces
Affected Microsoft MPEG Layer-3 Codecs
KB KB2115168
Known Exploits No
Microsoft Rating Critical
ISC Client Rating Critical
ISC Server Rating Critical
CVE Exploitability
2010-1882 1
Top of page
MS10-053
Title Cumulative Security Update for Internet Explorer
Replaces MS10-035
Affected Internet Explorer
KB KB2183461
Known Exploits No
Microsoft Rating Critical
ISC Client Rating Critical
ISC Server Rating Critical
CVE Exploitability
2010-1258 3
2010-2556 2
2010-2557 1
2010-2558 2
2010-2559 2
2010-2560 1
Top of page
MS10-054
Title Vulnerabilities in SMB Server Could Allow Remote Code Execution
Replaces
Affected SMB server
KB KB982214
Known Exploits No
Microsoft Rating Critical
ISC Client Rating Critical
ISC Server Rating Critical
CVE Exploitability
2010-2550 2
2010-2551 3
2010-2552 3
Top of page
MS10-055
Title Vulnerability in Cinepak Codec Could Allow Remote Code Execution
Replaces
Affected Cinepak codec
KB KB982665
Known Exploits No
Microsoft Rating Critical
ISC Client Rating Critical
ISC Server Rating Critical
CVE Exploitability
2010-2553 1
Top of page
MS10-056
Title Vulnerabilities in Microsoft Office Word Could Allow Remote Code Execution
Replaces MS90-68, MS10-036
Affected Word
KB KB2269707
Known Exploits No
Microsoft Rating Important
ISC Client Rating Critical
ISC Server Rating Critical
CVE Exploitability
2010-1900 1
2010-1901 1
2010-1902 2
2010-1903 2
Top of page
MS10-057
Title Vulnerability in Microsoft Office Excel Could Allow Remote Code Execution
Replaces MS10-036, MS10-038
Affected Excel
KB KB2269707
Known Exploits No
Microsoft Rating Important
ISC Client Rating Critical
ISC Server Rating Critical
CVE Exploitability
2010-2562 1
Top of page
MS10-058
Title Vulnerabilities in TCP/IP Could Allow Elevation of Privilege
Replaces
Affected Windows Networking (TCP/IP)
KB KB978886
Known Exploits No
Microsoft Rating Important
ISC Client Rating Important
ISC Server Rating Important
CVE Exploitability
2010-1892 3
2010-1893 1
Top of page
MS10-059
Title Vulnerabilities in the Tracing Feature for Services Could Allow Elevation of Privilege
Replaces
Affected Tracing Facility for Services
KB KB982799
Known Exploits No
Microsoft Rating Important
ISC Client Rating Important
ISC Server Rating Important
CVE Exploitability
2010-2554 0
2010-2555 1
Top of page
MS10-060
Title Vulnerabilities in the Microsoft .NET Common Language Runtime and in Microsoft Silverlight Could Allow Remote Code Execution
Replaces MS90-61
Affected .NET and Silverlight
KB KB2265906
Known Exploits No
Microsoft Rating Critical
ISC Client Rating Critical
ISC Server Rating Critical
CVE Exploitability
2010-0019 1
2010-1898 1
Top of page
We will update issues on this page for about a week or so as they evolve. We appreciate your updates!
US based customers can call Microsoft for free patch related support on 1-866-PCSAFETY
(*): ISC rating
  • We use 4 levels:
    • PATCH NOW: Typically used where we see immediate danger of exploitation. Typical environments will want to deploy these patches ASAP. Workarounds are typically not accepted by users or are not possible. This rating is often used when typical deployments make it vulnerable and exploits are being used or easy to obtain or make.
    • Critical: Anything that needs little to become "interesting" for the dark side. Best approach is to test and deploy ASAP. Workarounds can give more time to test.
    • Important: Things where more testing and other measures can help.
    • Less Urgent: practices for servers such as not using outlook, MSIE, word etc. to do traditional office or leisure work.
    • The rating is not a risk analysis as such. It is a rating of importance of the vulnerability and the perceived or even predicted threatatches.