• About Us/Policies
• Accounts
• Cable TV/Video
• Computing Services
• Computing Sites
• E-Mail
• Enterprise Apps
• Hardware
• Help
• Hosting/File Storage
• ID Cards
• IT Security
• IT Training
• Media Services
• Network Services
• New to MU?
• Printing
• Research Computing
• Software
• Student Phones
• Telecom Services

Security Alerts Archive

May 14, 2008

• Critical MS08-026: Vulnerabilities in Microsoft Word Could Allow Remote Code Execution
• Critical MS08-027: Vulnerability in Microsoft Publisher Could Allow Remote Code Execution
• Critical MS08-028: Vulnerability in Microsoft Jet Database Engine Could Allow Remote Code Execution
• Moderate MS08-029: Vulnerabilities in Microsoft Malware Protection Engine Could Allow Denial of Service

April 8, 2008

• Security Advisory: Apple Updates for QuickTime Vulnerabilities
• CRITICAL MS08-018: Vulnerability in Microsoft Project Could Allow Remote Code Execution (950183)
• IMPORTANT MS08-019: Vulnerabilities in Microsoft Visio Could Allow Remote Code Execution (949032)
• IMPORTANT MS08-020: Vulnerability in DNS Client Could Allow Spoofing (945553)
• CRITICAL MS08-021: Vulnerabilities in GDI Could Allow Remote Code Execution (948590)
• CRITICAL MS08-022: Vulnerability in VBScript and JScript Scripting Engines Could Allow Remote Code Execution (944338)
• CRITICAL MS08-023: Security Update of ActiveX Kill Bits (948881)
• CRITICAL MS08-024: Cumulative Security Update for Internet Explorer (947864)
• IMPORTANT MS08-025: Vulnerability in Windows Kernel Could Allow Elevation of Privilege (941693)

March 19, 2008

• Security Advisory: Apple Security Update 2008-002 Available
• Security Advisory: Apple Safari update available for Mac and Windows

March 11, 2008

• CRITICAL MS08-014: Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (949029)
• CRITICAL MS08-015: Vulnerability in Microsoft Outlook Could Allow Remote Code Execution (949031)
• CRITICAL MS08-016: Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (949030)
• CRITICAL MS08-017: Vulnerabilities in Microsoft Office Web Components Could Allow Remote Code Execution (933103)

February 13, 2008

• Security Advisory: Apple Security Update 2008-001 available

February 12, 2008

• IMPORTANT MS08-003: Vulnerability in Active Directory Could Allow Denial of Service (946538)
• IMPORTANT MS08-004: Vulnerability in Windows TCP/IP Could Allow Denial of Service (946456)
• IMPORTANT MS08-005: Vulnerability in Internet Information Services Could Allow Elevation of Privilege (942831)
• IMPORTANT MS08-006: Vulnerability in Internet Information Services Could Allow Remote Code Execution (942830)
• CRITICAL MS08-007: Vulnerability in WebDAV Mini-Redirector Could Allow Remote Code Execution (946026)
• CRITICAL MS08-008: Vulnerability in OLE Automation Could Allow Remote Code Execution (947890)
• CRITICAL MS08-009: Vulnerability in Microsoft Word Could Allow Remote Code Execution (947077)
• CRITICAL MS08-010: Cumulative Security Update for Internet Explorer (944533)
• IMPORTANT MS08-011: Vulnerabilities in Microsoft Works File Converter Could Allow Remote Code Execution (947081)
• CRITICAL MS08-012: Vulnerabilities in Microsoft Office Publisher Could Allow Remote Code Execution (947085)
• CRITICAL MS08-013: Vulnerability in Microsoft Office Could Allow Remote Code Execution (947108)

February 6, 2008

• Security Advisory: QuickTime 7.4.1 available

January 18, 2008

• Security Advisory: QuickTime 7.4 available

January 9, 2008

• CRITICAL MS08-001: Vulnerabilities in Windows TCP/IP Could Allow Remote Code Execution (941644)
• IMPORTANT MS08-002: Vulnerability in LSASS Could Allow Local Elevation of Privilege (943485)

December 19, 2007

• APPLE-SA-2007-12-17 Security Update 2007-009
• APPLE-SA-2007-12-17 Safari 3 Beta Update 3.0.4 Security Update
• CRITICAL APSB07-20: Critical vulnerability in Adobe Flash Player

December 14, 2007

• APPLE-SA-2007-12-13 QuickTime 7.3.1
• APPLE-SA-2007-12-14 Java Release 6 for Mac OS X 10.4

December 12, 2007

• IMPORTANT MS07-063: Vulnerability in SMBv2 Could Allow Remote Code Execution (942624)
• CRITICAL MS07-064: Vulnerabilities in DirectX Could Allow Remote Code Execution (941568)
• IMPORTANT MS07-065: Vulnerability in Message Queuing Could Allow Remote Code Execution (937894)
• IMPORTANT MS07-066: Vulnerability in Windows Kernel Could Allow Elevation of Privilege (943078)
• IMPORTANT MS07-067: Vulnerability in Macrovision Driver Could Allow Local Elevation of Privilege (944653)
• CRITICAL MS07-068: Vulnerability in Windows Media File Format Could Allow Remote Code Execution (941569 and 944275)
• CRITICAL MS07-069: Cumulative Security Update for Internet Explorer (942615)

November 15, 2007

• APPLE-SA-2007-11-15 Mac OS X v10.5.1 Update

November 14, 2007

• CRITICAL MS07-061: Vulnerability in Windows URI Handling Could Allow Remote Code Execution (943460)
• IMPORTANT MS07-062: Vulnerability in DNS Could Allow Spoofing (941672)

November 6, 2007

• APPLE-SA-2007-11-05 Security Update (QuickTime 7.3)

October 12, 2007

• CRITICAL MS07-055: Vulnerability in Kodak Image Viewer Could Allow Remote Code Execution (923810)
• CRITICAL MS07-056: Security Update for Outlook Express and Windows Mail (941202)
• CRITICAL MS07-057: Cumulative Security Update for Internet Explorer (939653)
• IMPORTANT MS07-058: Vulnerability in RPC Could Allow Denial of Service (933729)
• IMPORTANT MS07-059: Vulnerability in Windows SharePoint Services 3.0 and Office SharePoint Server 2007 Could Result in Elevation of Privilege Within the SharePoint Site (942017)
• CRITICAL MS07-060: Vulnerability in Microsoft Word Could Allow Remote Code Execution (942695)

September 12, 2007

• CRITICAL MS07-051: Vulnerability in Microsoft Agent Could Allow Remote Code Execution (938827)
• IMPORTANT MS07-052: Vulnerability in Crystal Reports for Visual Studio Could Allow Remote Code Execution (941522)
• IMPORTANT MS07-053: Vulnerability in Windows Services for UNIX Could Allow Elevation of Privilege (939778)
• IMPORTANT MS07-054: Vulnerability in MSN Messenger and Windows Live Messenger could allow Remote Code Execution (942099)

August 15, 2007

• CRITICAL MS07-042: Vulnerability in Microsoft XML Core Services Could Allow Remote Code Execution (936227)
• CRITICAL MS07-043: Vulnerability in OLE Automation Could Allow Remote Code Execution (921503)
• CRITICAL MS07-044: Vulnerability in Microsoft Excel Could Allow Remote Code Execution (940965)
• CRITICAL MS07-045: Cumulative Security Update for Internet Explorer (937143)
• CRITICAL MS07-046: Vulnerability in GDI Could Allow Remote Code Execution (938829)
• CRITICAL MS07-050: Vulnerability in Vector Markup Language Could Allow Remote Code Execution (938127)
• IMPORTANT MS07-047: Vulnerability in Windows Media Player Could Allow Remote Code Execution (936782)
• IMPORTANT MS07-048: Vulnerabilities in Windows Gadgets Could Allow Remote Code Execution (938123)
• IMPORTANT MS07-049: Vulnerability in Virtual PC and Virtual Server Could Allow Elevation of Privilege (937986)

June 12, 2007

• IMPORTANT MS07-030 Vulnerabilities in Microsoft Visio Could Allow Remote Code Execution (927051)
• CRITICAL MS07-031 Vulnerability in the Windows Schannel Security Package Could Allow Remote Code Execution (935840)
• MODERATE MS07-032 Vulnerability in Windows Vista Could Allow Information Disclosure (931213)
• CRITICAL MS07-033 Cumulative Security Update for Internet Explorer (933566)
• CRITICAL MS07-034 Cumulative Security Update for Outlook Express and Windows Mail (929123)
• CRITICAL MS07-035 Vulnerability in Win 32 API Could Allow Remote Code Execution (935839)

May 30, 2007

• APPLE-SA-2007-05-29 Security Update (QuickTime 7.1.6)
• APPLE-SA-2007-05-24 Security Update 2007-005

May 8, 2007

• CRITICAL MS07-023 Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (934233)
• CRITICAL MS07-024 Vulnerabilities in Microsoft Word Could Allow Remote Code Execution (934232)
• CRITICAL MS07-025 Vulnerability in Microsoft Office Could Allow Remote Code Execution (934873)
• CRITICAL MS07-026 Vulnerabilities in Microsoft Exchange Could Allow Remote Code Execution (931832)
• CRITICAL MS07-027 Cumulative Security Update for Internet Explorer (931768)
• CRITICAL MS07-028 Vulnerability in CAPICOM Could Allow Remote Code Execution (931906)
• CRITICAL MS07-029 Vulnerability in Windows DNS RPC Interface Could Allow Remote Code Execution (935966)

May 1, 2007

• APPLE-SA-2007-05-01 QuickTime 7.1.6
• APPLE-SA-2007-05-01 Security Update 2007-004 v1.1

April 27, 2007

• SECURITY ALERT: Critical Adobe Photoshop Vulnerability Announced

April 20, 2007

• APPLE-SA-2007-04-19 Security Update 2007-004

April 18, 2007

• SECURITY ALERT: Wormable exploit for Microsoft Windows servers

April 4, 2007

• CRITICAL MS07-017 Vulnerabilities in GDI Could Allow Remote Code Execution

March 13, 2007

• APPLE-SA-2007-03-13 iPhoto 6.0.6
• APPLE-SA-2007-03-13 Mac OS X v10.4.9 and Security Update 2007-003

March 9, 2007

• APPLE-SA-2007-03-08 AirPort Extreme Update 2007-002

Feb. 16, 2007

• APPLE-SA-2007-02-15 Security Update 2007-002

Feb. 13, 2007

• IMPORTANT MS07-005 Vulnerability in Step-by-Step Interactive Training Could Allow Remote Code Execution (923723)
• IMPORTANT MS07-006 Vulnerability in Windows Shell Could Allow Elevation of Privilege (928255)
• IMPORTANT MS07-007 Vulnerability in Windows Image Acquisition Service Could Allow Elevation of Privilege (927802)
• CRITICAL MS07-008 Vulnerability in HTML Help ActiveX Control Could Allow Remote Code Execution (928843)
• CRITICAL MS07-009 Vulnerability in Microsoft Data Access Components Could Allow Remote Code Execution (927779)
• CRITICAL MS07-010 Vulnerability in Microsoft Malware Protection Engine Could Allow Remote Code Execution (932135)
• IMPORTANT MS07-011 Vulnerability in Microsoft OLE Dialog Could Allow Remote Code Execution (926436)
• IMPORTANT MS07-012 Vulnerability in Microsoft MFC Could Allow Remote Code Execution (924667)
• IMPORTANT MS07-013 Vulnerability in Microsoft RichEdit Could Allow Remote Code Execution (918118)
• CRITICAL MS07-014 Vulnerabilities in Microsoft Word Could Allow Remote Code Execution (929434)
• CRITICAL MS07-014 Vulnerabilities in Microsoft Word Could Allow Remote Code Execution (929434)
• CRITICAL MS07-015 Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (932554)
• CRITICAL MS07-016 Cumulative Security Update for Internet Explorer (928090)

Jan. 23, 2007

• APPLE-SA-2007-01-23 Security Update 2007-001

Jan. 12, 2007

• CRITICAL APSB07-01 Acrobat Reader Flaw Allows Access to Hard Drive

Dec. 19, 2006

• Apple Security Update 2006-008

Dec. 13, 2006

• CRITICAL MS06-072 Cumulative Security Update for Internet Explorer (925454)
• CRITICAL MS06-073 Vulnerability in Visual Studio 2005 Could Allow Remote Code Execution (925674)
• IMPORTANT MS06-074 Vulnerability in SNMP Could Allow Remote Code Execution (926247)
• IMPORTANT MS06-075 Vulnerability in Windows Could Allow Elevation of Privilege (926255)
• IMPORTANT MS06-076 Cumulative Security Update for Outlook Express (923694)
• IMPORTANT MS06-077 Vulnerability in Remote Installation Service Could Allow Remote Code Execution (926121)
• CRITICAL MS06-078 Vulnerability in Windows Media Format Could Allow Remote Code Execution (923689)
• CRITICAL MS06-059 (Re-released) Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (924164)

Nov. 29, 2006

• Apple Security Update 2006-007

Nov. 16, 2006

• APPLE-SA-2006-11-16 Apple Remote Desktop 3.1 now available.

Nov. 14, 2006

• CRITICAL MS06-067 Cumulative Security Update for Internet Explorer (922760)
• CRITICAL MS06-068 Vulnerability in Microsoft Agent Could Allow Remote Code Execution (920213)
• CRITICAL MS06-069 Vulnerabilities in Macromedia Flash Player from Adobe Could Allow Remote Code Execution (923789)
• CRITICAL MS06-070 Vulnerability in Workstation Service Could Allow Remote Code Execution (924270)
• CRITICAL MS06-071 Vulnerability in Microsoft XML Core Services Could Allow Remote Code Execution (928088)
• IMPORTANT MS06-066 Vulnerabilities in Client Service for NetWare Could Allow Remote Code Execution (923980)

Nov. 1, 2006

• APPLE-SA-2006-10-31 Xcode Tools 2.4.1

Oct. 11, 2006

• MODERATE MS06-056 Vulnerability in ASP.NET 2.0 Could Allow Information Disclosure (922770)
• CRITICAL MS06-057 Vulnerability in Windows Explorer Could Allow Remote Execution (923191)
• CRITICAL MS06-058 Vulnerabilities in Microsoft PowerPoint Could Allow Remote Code Execution (924163)
• CRITICAL MS06-059 Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (924164)
• CRITICAL MS06-060 Vulnerabilities in Microsoft Word Could Allow Remote Code Execution (924554)
• CRITICAL MS06-061 Vulnerabilities in Microsoft XML Core Services Could Allow Remote Code Execution (924191)
• CRITICAL MS06-062 Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (922581)
• IMPORTANT MS06-063 Vulnerability in Server Service Could Allow Denial of Service (923414)
• LOW MS06-064 Vulnerabilities in TCP/IP IPv6 Could Allow Denial of Service (922819)
• MODERATE MS06-065 Vulnerability in Windows Object Packager Could Allow Remote Execution (924496)

Oct. 4, 2006

• ADVISORY Mac OS X v10.4.8 and Security Update 2006-006

Sept. 26, 2006

• CRITICAL MS06-055 Vulnerability in Vector Markup Language Could Allow Remote Code Execution (925486)
• Re-Released Advisory: IMPORTANT MS06-049 Vulnerability in Windows Kernel Could Result in Elevation of Privilege (920958)

Sept. 13, 2006

• CRITICAL MS06-054 Vulnerability in Microsoft Publisher Could Allow Remote Code Execution (910729)
• IMPORTANT MS06-052 Vulnerability in Pragmatic General Multicast (PGM) Could Allow Remote Code Execution (919007)
• MODERATE MS06-053 Vulnerability in Indexing Service Could Allow Cross-Site Scripting (920685)
• RE-RELEASE CRITICAL MS06-040 Vulnerability in Server Service Could Allow Remote Code Execution (921883)
• RE-RELEASE CRITICAL MS06-042 Cumulative Security Update for Internet Explorer (918899)

Sept. 12, 2006

• APPLE-SA-2006-09-12 QuickTime 7.1.3

Aug. 17, 2006

• APPLE-SA-2006-08-17 Xsan Filesystem 1.4

Aug. 11, 2006

• Security Update 2006-004 for Mac Pro

Aug. 8, 2006

• CRITICAL MS06-040 Vulnerability in Server Service Could Allow Remote Code Execution (KB921883)
• CRITICAL MS06-041 Vulnerability in DNS Resolution Could Allow Remote Code Execution (KB920683)
• CRITICAL MS06-042 Cumulative Security Update for Internet Explorer (KB918899)
• CRITICAL MS06-043 Vulnerability in Microsoft Windows Could Allow Remote Code Execution (KB920214)
• CRITICAL MS06-044 Vulnerability in Microsoft Management Console Could Allow Remote Code Execution (KB917008)
• IMPORTANT MS06-045 Vulnerability in Windows Explorer Could Allow Remote Code Execution (KB921398)
• CRITICAL MS06-046 Vulnerability in HTML Help Could Allow Remote Code Execution (KB922616)
• CRITICAL MS06-047 Vulnerability in Microsoft Visual Basic for Applications Could Allow Remote Code Execution (KB921645)
• CRITICAL MS06-048 Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (KB922968)
• IMPORTANT MS06-049 Vulnerability in Windows Kernel Could Result in Elevation of Privilege (KB920958)
• IMPORTANT MS06-050 Vulnerabilities in Microsoft Windows Hyperlink Object Library Could Allow Remote Code Execution (KB920670)
• CRITICAL MS06-051 Vulnerability in Windows Kernel Could Result in Remote Code Execution (KB917422)
• IMPORTANT MS05-004 ASP.NET Path Validation Vulnerability (KB887219)

April 3, 2006

• APPLE-SA-2006-04-03 Mac OS X v10.4.6 Firmware password can be bypassed on Intel-based Macintosh computers

March 24, 2006

• Microsoft Security Advisory (917077) Vulnerability in the way HTML Objects Handle Unexpected Method Calls Could Allow Remote Code Execution
• Sendmail 8.13.6

March 17, 2006

• Adobe Macromedia Flash Products Contain Vulnerabilities (National Cyber Alert System Technical Cyber Security Alert TA06-075A)

March 15, 2006

• Microsoft Security Bulletin MS06-012

March 14, 2006

• APPLE-SA-2006-03-13 Security Update 2006-002

Feb. 21, 2006

• ADVISORY Shell scripts can be packaged as ZIP files used to exploit the "open 'safe' files after downloading" feature in Safari

Feb. 14, 2006

• ADVISORY APPLE-SA-2006-02-14 Mac OS X v10.4.5

Jan. 31, 2006

• ADVISORY Malicious Software Encyclopedia: Win32/Mywife.E@mm

Jan. 12, 2006

• ADVISORY Apple QuickTime Vulnerabilities

Jan. 10, 2006

• CRITICAL Microsoft Security Bulletin MS06-002
• CRITICAL Microsoft Security Bulletin MS06-003

Jan. 5, 2006

• CRITICAL Microsoft Security Bulletin MS06-001