SecPod

Learn Search

Search across all Learn content

← Back to Security Research
Microsoft Security Bulletin Summary for March 2014

Microsoft Security Bulletin Summary for March 2014

Mar 10, 2014By Veerendra GG2 min read

In this Patch Tuesday Microsoft released Five bulletins addressing a total of 23 vulnerabilities.

Two are rated as Critical (addressing 19 vulnerabilities) and three are rated as Important.

Critical security updates address security issues in Internet Explorer 6 to Internet Explorer 11 and Microsoft DirectShow. Both of them potentially allow Remote Code Execution.

The other three security updates address issues in Windows Kernel-Mode Driver, Security Account Manager Remote (SAMR) Protocol, and Microsoft Silverlight.

Microsoft Internet Explorer Zero-day CVE-2014-0322 which was exploited in the wild is also patched in MS14-012 bulletin. Apple Mac users with Silverlight 5 installed should apply the patch from MS14-014 bulletin

Microsoft security bulletin summary for March 2014 in order of severity.

MS14-012: Cumulative Security Update for Internet Explorer (2925418)
Severity Rating: Critical
Affected Software: Microsoft Windows, Internet Explorer
Vulnerability Impact: Remote Code Execution

MS14-013: Vulnerability in Microsoft DirectShow Could Allow Remote Code Execution (2929961)
Severity Rating: Critical
Affected Software: Microsoft Windows
Vulnerability Impact: Remote Code Execution

MS14-015: Vulnerabilities in Windows Kernel-Mode Driver Could Allow Elevation of Privilege (2930275)
Severity Rating: Important
Affected Software: Microsoft Windows
Vulnerability Impact: Elevation of Privilege

MS14-016: Vulnerability in Security Account Manager Remote (SAMR) Protocol Could Allow Security Feature Bypass (2934418)
Severity Rating: Important
Affected Software: Microsoft Windows
Vulnerability Impact: Security Feature Bypass

MS14-014: Vulnerability in Silverlight Could Allow Security Feature Bypass (2932677)
Severity Rating: Important
Affected Software: Microsoft Silverlight
Vulnerability Impact: Security Feature Bypass


Download Saner now and keep your systems updated and secure.


– Veerendra GG

Featured Posts

Open Operation CameraSwarm: Inside the Toolkit Behind 14,530 Compromised Dahua Cameras
Operation CameraSwarm: Inside the Toolkit Behind 14,530 Compromised Dahua Cameras

CVE Research

Operation CameraSwarm: Inside the Toolkit Behind 14,530 Compromised Dahua Cameras

A single operator compromised 14,530+ Dahua cameras across Ukraine and Russia in 35 days, chaining credential brute-force, a CVE-2021-33044/33045 authentication bypass, and P2P relay abuse to plant a persistent backdoor and harvest transferable admin access.

Aug 21, 2026

Open Critical GitLab Flaw Exposes Public Projects to Deletion — Two CVEs Patched, Including High-Severity CSRF
Critical GitLab Flaw Exposes Public Projects to Deletion — Two CVEs Patched, Including High-Severity CSRF

CVE Research

Critical GitLab Flaw Exposes Public Projects to Deletion — Two CVEs Patched, Including High-Severity CSRF

CVE-2026-19478 is a critical code injection vulnerability in GitLab CE/EE that allows an unauthenticated attacker to modify or delete public projects and user data by abusing a GraphQL directive. A second high-severity issue, CVE-2026-19650, involves cross-site request forgery in the GraphQL multiplex query handler. This article examines how the critical vulnerability works, the availability of a public proof-of-concept, the potential impact on self-managed instances, the affected versions, and the security updates released to remediate both issues.

Aug 19, 2026

Open No Password Needed: macOS Screen Sharing Flaw (CVE-2026-65400) Used to Deploy Monero Miners
No Password Needed: macOS Screen Sharing Flaw (CVE-2026-65400) Used to Deploy Monero Miners

CVE Research

No Password Needed: macOS Screen Sharing Flaw (CVE-2026-65400) Used to Deploy Monero Miners

Aug 19, 2026

Open Evooo1Bot: Mirai-Based Linux Botnet Turns Edge Devices Into SOCKS5 Proxies
Evooo1Bot: Mirai-Based Linux Botnet Turns Edge Devices Into SOCKS5 Proxies

CVE Research

Evooo1Bot: Mirai-Based Linux Botnet Turns Edge Devices Into SOCKS5 Proxies

Aug 19, 2026

Microsoft Security Bulletin Summary for March 2014 | SecPod