Original release date: December 09, 2014

Microsoft has released updates to address vulnerabilities in Exchange, Windows, Internet Explorer, and Office as part of the Microsoft Security Bulletin Summary for December 2014. Some of these vulnerabilities could allow elevation of privilege, remote code execution, or disclosure of information.

US-CERT encourages users and administrators to review Microsoft Security Bulletin MS14-DEC and apply the necessary updates.

This product is provided subject to this Notification and this Privacy & Use policy.