SecPod

Learn Search

Search across all Learn content

← Back to Security Research

Patch Tuesday: Microsoft Security Bulletin Summary for July 2015

Microsoft Patch Tuesday July 2015 bring 14 security bulletins which address 58 CVE’s using their vulnerability scanning solution. This month has 3 high priority bulletins, MS15-065 for Internet Explorer, MS15-070 for Microsoft Office, and MS15-077 for Windows. 4 bulletins are rated as Critical , MS1

Jul 16, 20153 min read
PT-July-2015-image
PT-July-2015-image

Microsoft Patch Tuesday July 2015 bring 14 security bulletins which address 58 CVE’s using their vulnerability scanning solution. This month has 3 high priority bulletins, MS15-065 for Internet Explorer, MS15-070 for Microsoft Office, and MS15-077 for Windows.

4 bulletins are rated as Critical , MS15-065 for Internet Explorer 6 through 11 addressing 29 vulnerabilities, MS15-066 for VBScript engine in Windows Server 2003, Windows Server 2008 and Windows Vista, MS15-067 for Remote Desktop Protocol (RDP) in Windows 7 and Windows 8, and MS15-068 for Windows Hyper-V on Windows Server 2008, Windows Server 2008 R2, Windows 8,  Windows Server 2012, Windows 8.1 and Windows Server 2012 R2. However, a patch management tool can patch these critical vulnerabilities.

Microsoft security bulletin summary for July 2015 in order of severity

MS15-058 : Vulnerabilities in SQL Server Could Allow Remote Code Execution (3065718)
Severity Rating: Important
Affected Software: Microsoft SQL Server
Impact: Remote Code Execution

MS15-065 : Security Update for Internet Explorer (3076321)
Severity Rating: Critical
Impact: Remote Code Execution
Affected Software: Microsoft Windows, Internet Explorer

MS15-066 : Vulnerability in VBScript Scripting Engine Could Allow Remote Code Execution (3072604)
Severity Rating: Critical
Impact: Remote Code Execution
Affected Software: Microsoft Windows

MS15-067 : Vulnerability in RDP Could Allow Remote Code Execution (3073094)
Severity Rating: Critical
Impact: Remote Code Execution
Affected Software: Microsoft Windows

More Microsoft security bulletin summary

MS15-068 : Vulnerabilities in Windows Hyper-V Could Allow Remote Code Execution (3072000)
Severity Rating: Critical
Impact: Remote Code Execution
Affected Software: Microsoft Windows

MS15-069 : Vulnerabilities in Windows Could Allow Remote Code Execution (3072631)
Severity Rating: Important
Impact: Remote Code Execution
Affected Software: Microsoft Windows
MS15-070 : Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (3072620)
Severity Rating: Important
Impact: Remote Code Execution
Affected Software: Microsoft Office

MS15-071 : Vulnerability in Netlogon Could Allow Elevation of Privilege (3068457)
Severity Rating: Important
Impact: Elevation of Privilege
Affected Software: Microsoft Windows

MS15-072 : Vulnerability in Windows Graphics Component Could Allow Elevation of Privilege (3069392)
Severity Rating: Important
Impact: Elevation of Privilege
Affected Software: Microsoft Windows
MS15-073 : Vulnerability in Windows Kernel-Mode Driver Could Allow Elevation of Privilege (3070102)
Severity Rating: Important
Impact: Elevation of Privilege
Affected Software: Microsoft Windows

MS15-074 : Vulnerability in Windows Installer Service Could Allow Elevation of Privilege (3072630)
Severity Rating: Important
Impact: Elevation of Privilege
Affected Software: Microsoft Windows

MS15-075 : Vulnerabilities in OLE Could Allow Elevation of Privilege (3072633)
Severity Rating: Important
Impact: Elevation of Privilege
Affected Software: Microsoft Windows

MS15-076 : Vulnerability in Windows Remote Procedure Call Could Allow Elevation of Privilege (3067505)
Severity Rating: Important
Impact: Elevation of Privilege
Affected Software: Microsoft Windows

MS15-077 : Vulnerability in ATM Font Driver Could Allow Elevation of Privilege (3077657)
Severity Rating: Important
Impact: Elevation of Privilege
Affected Software: Microsoft Windows

SecPod Saner detects these vulnerabilities and automatically fixes by applying security updates. Download Saner now and keep your systems updated and secure.

  • Deependra Bapna

Featured Posts

Open PHP2Shell After the Patch: The FAQ for Verification, Detection and Response
PHP2Shell After the Patch: The FAQ for Verification, Detection and Response

CVE Research

PHP2Shell After the Patch: The FAQ for Verification, Detection and Response

Patches for PHP2Shell are out, but verifying them, trusting interim mitigations and checking for earlier compromise are where teams are stuck. This FAQ covers stale version banners, container rebuilds, WAF limits, detection signals and what to rotate.

Oct 26, 2026

Open AI-Powered Ransomware Intrusions: Inside the Phantom Framework Linked to INC and The Gentlemen
AI-Powered Ransomware Intrusions: Inside the Phantom Framework Linked to INC and The Gentlemen

CVE Research

AI-Powered Ransomware Intrusions: Inside the Phantom Framework Linked to INC and The Gentlemen

The Phantom Framework supports AI-assisted cyber intrusions by enabling lateral movement, persistence, data exfiltration, and progression toward ransomware deployment, putting enterprise networks and sensitive organizational data at risk.

Oct 26, 2026

Open Tailscale SSH Flaws Turn a Single Foothold Into Root Access on Target Servers
vulnerability researchTailscale SSH Flaws Turn a Single Foothold Into Root Access on Target Servers

CVE Research

Tailscale SSH Flaws Turn a Single Foothold Into Root Access on Target Servers

Tailworm reports high-severity Tailscale SSH issues on version 1.104.2 where Unix-socket forwarding can run as root inside tailscaled, including TOCTOU races on path checks. A policy-approved device may escalate on reachable hosts. Tailscale is reviewing the report and working on fixes. Interim steps center on tighter SSH policy and disabling forwarding.

Oct 26, 2026

Open ARTEX and the South Korean Bank Attacks: Why Removing an AI Penetration Testing Tool Is Not Enough
ARTEX and the South Korean Bank Attacks: Why Removing an AI Penetration Testing Tool Is Not Enough

CVE Research

ARTEX and the South Korean Bank Attacks: Why Removing an AI Penetration Testing Tool Is Not Enough

Oct 23, 2026