SecPod

Learn Search

Search across all Learn content

← Back to Security Research

Patch Tuesday: Microsoft Security Bulletin Summary for July 2015

Microsoft Patch Tuesday July 2015 bring 14 security bulletins which address 58 CVE’s using their vulnerability scanning solution. This month has 3 high priority bulletins, MS15-065 for Internet Explorer, MS15-070 for Microsoft Office, and MS15-077 for Windows. 4 bulletins are rated as Critical , MS1

Jul 16, 20153 min read
PT-July-2015-image
PT-July-2015-image

Microsoft Patch Tuesday July 2015 bring 14 security bulletins which address 58 CVE’s using their vulnerability scanning solution. This month has 3 high priority bulletins, MS15-065 for Internet Explorer, MS15-070 for Microsoft Office, and MS15-077 for Windows.

4 bulletins are rated as Critical , MS15-065 for Internet Explorer 6 through 11 addressing 29 vulnerabilities, MS15-066 for VBScript engine in Windows Server 2003, Windows Server 2008 and Windows Vista, MS15-067 for Remote Desktop Protocol (RDP) in Windows 7 and Windows 8, and MS15-068 for Windows Hyper-V on Windows Server 2008, Windows Server 2008 R2, Windows 8,  Windows Server 2012, Windows 8.1 and Windows Server 2012 R2. However, a patch management tool can patch these critical vulnerabilities.

Microsoft security bulletin summary for July 2015 in order of severity

MS15-058 : Vulnerabilities in SQL Server Could Allow Remote Code Execution (3065718)
Severity Rating: Important
Affected Software: Microsoft SQL Server
Impact: Remote Code Execution

MS15-065 : Security Update for Internet Explorer (3076321)
Severity Rating: Critical
Impact: Remote Code Execution
Affected Software: Microsoft Windows, Internet Explorer

MS15-066 : Vulnerability in VBScript Scripting Engine Could Allow Remote Code Execution (3072604)
Severity Rating: Critical
Impact: Remote Code Execution
Affected Software: Microsoft Windows

MS15-067 : Vulnerability in RDP Could Allow Remote Code Execution (3073094)
Severity Rating: Critical
Impact: Remote Code Execution
Affected Software: Microsoft Windows

More Microsoft security bulletin summary

MS15-068 : Vulnerabilities in Windows Hyper-V Could Allow Remote Code Execution (3072000)
Severity Rating: Critical
Impact: Remote Code Execution
Affected Software: Microsoft Windows

MS15-069 : Vulnerabilities in Windows Could Allow Remote Code Execution (3072631)
Severity Rating: Important
Impact: Remote Code Execution
Affected Software: Microsoft Windows
MS15-070 : Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (3072620)
Severity Rating: Important
Impact: Remote Code Execution
Affected Software: Microsoft Office

MS15-071 : Vulnerability in Netlogon Could Allow Elevation of Privilege (3068457)
Severity Rating: Important
Impact: Elevation of Privilege
Affected Software: Microsoft Windows

MS15-072 : Vulnerability in Windows Graphics Component Could Allow Elevation of Privilege (3069392)
Severity Rating: Important
Impact: Elevation of Privilege
Affected Software: Microsoft Windows
MS15-073 : Vulnerability in Windows Kernel-Mode Driver Could Allow Elevation of Privilege (3070102)
Severity Rating: Important
Impact: Elevation of Privilege
Affected Software: Microsoft Windows

MS15-074 : Vulnerability in Windows Installer Service Could Allow Elevation of Privilege (3072630)
Severity Rating: Important
Impact: Elevation of Privilege
Affected Software: Microsoft Windows

MS15-075 : Vulnerabilities in OLE Could Allow Elevation of Privilege (3072633)
Severity Rating: Important
Impact: Elevation of Privilege
Affected Software: Microsoft Windows

MS15-076 : Vulnerability in Windows Remote Procedure Call Could Allow Elevation of Privilege (3067505)
Severity Rating: Important
Impact: Elevation of Privilege
Affected Software: Microsoft Windows

MS15-077 : Vulnerability in ATM Font Driver Could Allow Elevation of Privilege (3077657)
Severity Rating: Important
Impact: Elevation of Privilege
Affected Software: Microsoft Windows

SecPod Saner detects these vulnerabilities and automatically fixes by applying security updates. Download Saner now and keep your systems updated and secure.

  • Deependra Bapna

Featured Posts

Open F5 Strengthens NGINX Security with Fixes for Critical Code Execution Flaws
vulnerability researchF5 Strengthens NGINX Security with Fixes for Critical Code Execution Flaws

CVE Research

F5 Strengthens NGINX Security with Fixes for Critical Code Execution Flaws

Oct 19, 2026

Open Silent Lynx Hits CIS Governments With WinRAR Flaw
threat intelligenceSilent Lynx Hits CIS Governments With WinRAR Flaw

CVE Research

Silent Lynx Hits CIS Governments With WinRAR Flaw

Silent Lynx (UAT-6275 / TAG-193) is a cyber-espionage actor targeting government organizations across the Commonwealth of Independent States. From June 2025 through August 2026, the group used four infection chains, including macro-enabled documents, PS2EXE downloaders, LNK-based PowerShell loaders, and WinRAR archives that exploit CVE-2025-8088, to deploy custom reverse shells such as FoalShell, Chvost, Laplas, and PickleShell. Activity spans nine countries and focuses on diplomacy, economic development, environmental management, water resources, and energy. This article summarizes the campaign’s delivery methods, infrastructure exposure, indicators of compromise, and practical mitigations for defenders.

Oct 16, 2026

Open Drupal Fixes Critical Field UI Flaw Linked to Remote Code Execution
Drupal Fixes Critical Field UI Flaw Linked to Remote Code Execution

CVE Research

Drupal Fixes Critical Field UI Flaw Linked to Remote Code Execution

A critical vulnerability in Drupal core's Field UI module could allow attackers to execute arbitrary code on vulnerable websites through exposed contributed modules or custom code. Tracked as CVE-2026-108097, the flaw stems from improper validation of PHP callbacks during table rendering. At least one known exploitation path does not require authentication, potentially putting affected websites at risk of server compromise.

Oct 16, 2026

Open Palo Alto PAN-OS Vulnerability CVE-2026-0322 Could Allow Root-Level Code Execution
vulnerability researchPalo Alto PAN-OS Vulnerability CVE-2026-0322 Could Allow Root-Level Code Execution

CVE Research

Palo Alto PAN-OS Vulnerability CVE-2026-0322 Could Allow Root-Level Code Execution

Oct 15, 2026