Free File

Microsoft Security Bulletin Release for January 2016

Microsoft Security Bulletin Release for January 2016

Microsoft released nine (9) bulletins.  Six (6) bulletins are identified as Critical and the remaining three (3) are rated Important in severity.

The updates address vulnerabilities in Microsoft Windows, Microsoft Edge, Internet Explorer, Microsoft .NET Framework, Microsoft Office, Visual Basic and Microsoft Silverlight.

Details about the 25 CVEs can be found in the below-referenced TechNet Security Bulletin.  If you are prioritizing updates, the most critical appears to be MS16-05 which indicates "more severe of the vulnerabilities could allow remote code execution if a user visits a malicious website".  Attention is also directed to MS16-001 which has the last updates for versions of Internet Explorer that have reached end of support.

Critical:

• MS16-001-- Cumulative Security Update for Internet Explorer (3124903) 
• MS16-002-- Cumulative Security Update for Microsoft Edge (3124904) 
• MS16-003-- Cumulative Security Update for JScript and VBScript to Address Remote Code Execution (3125540) 
• MS16-004-- Security Update for Microsoft Office to Address Remote Code Execution (3124585) 
• MS16-005-- Security Update for Windows Kernel-Mode Drivers to Address Remote Code Execution (3124584) 
• MS16-006-- Security Update for Silverlight to Address Remote Code Execution (3126036) 

Important:

• MS16-007-- Security Update for Microsoft Windows to Address Remote Code Execution (3124901) 
• MS16-008-- Security Update for Windows Kernel to Address Elevation of Privilege (3124605) 
• MS16-010-- Security Update in Microsoft Exchange Server to Address Spoofing (3124557)

Additional Update Notes

• MSRT -- Microsoft released an updated version of the Microsoft Windows Malicious Software Removal Tool on Windows Update, Microsoft Update, Windows Server Update Services, and the Download Center. 
• Windows 8.x and Windows 10 -- Non-security new features and improvements for Windows 8.1 and Windows 10 are included with the updates.
  

References

• MSRC
• TechNet: Microsoft Security Bulletin for January 2016 

Available link for download