MSRC update 2026-11-14T08:41:59Z

data/cvrf/2018/2018-Jan.json

@@ -1 +1 @@
-{"DocumentNotes":[{"Audience":"Public","Ordinal":"0","Title":"Release Notes","Type":1,"Value":"<p>The January security release consists of security updates for the following software:</p>\n<ul>\n<li>Internet Explorer</li>\n<li>Microsoft Edge</li>\n<li>Microsoft Windows</li>\n<li>Microsoft Office and Microsoft Office Services and Web Apps</li>\n<li>SQL Server</li>\n<li>ChakraCore</li>\n<li>.NET Framework</li>\n<li>.NET Core</li>\n<li>ASP.NET Core</li>\n<li>Adobe Flash</li>\n</ul>\n<p>Please note the following information regarding the security updates:</p>\n<ul>\n<li>Windows 10 updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows 10, in addition to non-security updates. The updates are available via the <a href=\"http://catalog.update.microsoft.com/v7/site/Home.aspx\">Microsoft Update Catalog</a>.</li>\n<li>Starting in March 2017, a delta package will be available on the Microsoft Update Catalog for Windows 10 version 1607 and newer.  This delta package contains just the delta changes between the previous month and the current release.</li>\n<li>Updates for Windows RT 8.1 and Microsoft Office RT software are only available via <a href=\"http://go.microsoft.com/fwlink/?LinkId=21130\">Windows Update</a>.</li>\n<li>In addition to security changes for the vulnerabilities, updates include defense-in-depth updates to help improve security-related features.</li>\n<li>For information on lifecycle and support dates for Windows 10 operating systems, please see <a href=\"https://support.microsoft.com/en-us/help/13853/windows-lifecycle-fact-sheet\">Windows Lifecycle Facts Sheet</a>.</li>\n</ul>\n<p><strong>Known Issues</strong></p>\n<ul>\n<li><a href=\"https://support.microsoft.com/help/4011021\">4011021</a></li>\n<li><a href=\"https://support.microsoft.com/help/4011626\">4011626</a></li>\n<li><a href=\"https://support.microsoft.com/help/4055002\">4055002</a></li>\n<li><a href=\"https://support.microsoft.com/help/4055532\">4055532</a></li>\n<li><a href=\"https://support.microsoft.com/help/4056888\">4056888</a></li>\n<li><a href=\"https://support.microsoft.com/help/4056890\">4056890</a></li>\n<li><a href=\"https://support.microsoft.com/help/4056891\">4056891</a></li>\n<li><a href=\"https://support.microsoft.com/help/4056892\">4056892</a></li>\n<li><a href=\"https://support.microsoft.com/help/4056893\">4056893</a></li>\n<li><a href=\"https://support.microsoft.com/help/4056894\">4056894</a></li>\n<li><a href=\"https://support.microsoft.com/help/4056895\">4056895</a></li>\n<li><a href=\"https://support.microsoft.com/help/4056896\">4056896</a></li>\n<li><a href=\"https://support.microsoft.com/help/4056897\">4056897</a></li>\n<li><a href=\"https://support.microsoft.com/help/4056898\">4056898</a></li>\n<li><a href=\"https://support.microsoft.com/help/4056899\">4056899</a></li>\n<li><a href=\"https://support.microsoft.com/help/4057116\">4057116</a></li>\n</ul>\n"},{"Audience":"Public","Ordinal":"1","Title":"Legal Disclaimer","Type":5,"Value":"The information provided in the Microsoft Knowledge Base is provided \"as is\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply."}],"DocumentPublisher":{"ContactDetails":{"Value":"secure@microsoft.com"},"IssuingAuthority":{"Value":"The Microsoft Security Response Center (MSRC) identifies, monitors, resolves, and responds to security incidents and Microsoft software security vulnerabilities. For more information, see http://www.microsoft.com/security/msrc."},"Type":0},"DocumentTitle":{"Value":"January 2018 Security Updates"},"DocumentTracking":{"CurrentReleaseDate":"2026-08-12T21:23:49","Identification":{"Alias":{"Value":"2018-Jan"},"ID":{"Value":"2018-Jan"}},"InitialReleaseDate":"2018-01-09T08:00:00Z","RevisionHistory":[{"Date":"2026-08-12T21:23:49","Description":{"Value":"January 2018 Security Updates"},"Number":"119"}],"Status":2,"Version":"1.0"},"DocumentType":{"Value":"Security Update"},"ProductTree":{"Branch":[{"Items":[{"Items":[{"ProductID":"10753","Value":"Microsoft Office 2016 (32-bit edition)"},{"ProductID":"10754","Value":"Microsoft Office 2016 (64-bit edition)"},{"ProductID":"10905","Value":"Microsoft Office 2016 Click-to-Run (C2R) for 32-bit editions"},{"ProductID":"10906","Value":"Microsoft Office 2016 Click-to-Run (C2R) for 64-bit editions"},{"ProductID":"10150","Value":"Microsoft Office 2007 Service Pack 3"},{"ProductID":"10521","Value":"Microsoft Line truncated
+{"DocumentNotes":[{"Audience":"Public","Ordinal":"0","Title":"Release Notes","Type":1,"Value":"<p>The January security release consists of security updates for the following software:</p>\n<ul>\n<li>Internet Explorer</li>\n<li>Microsoft Edge</li>\n<li>Microsoft Windows</li>\n<li>Microsoft Office and Microsoft Office Services and Web Apps</li>\n<li>SQL Server</li>\n<li>ChakraCore</li>\n<li>.NET Framework</li>\n<li>.NET Core</li>\n<li>ASP.NET Core</li>\n<li>Adobe Flash</li>\n</ul>\n<p>Please note the following information regarding the security updates:</p>\n<ul>\n<li>Windows 10 updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows 10, in addition to non-security updates. The updates are available via the <a href=\"http://catalog.update.microsoft.com/v7/site/Home.aspx\">Microsoft Update Catalog</a>.</li>\n<li>Starting in March 2017, a delta package will be available on the Microsoft Update Catalog for Windows 10 version 1607 and newer.  This delta package contains just the delta changes between the previous month and the current release.</li>\n<li>Updates for Windows RT 8.1 and Microsoft Office RT software are only available via <a href=\"http://go.microsoft.com/fwlink/?LinkId=21130\">Windows Update</a>.</li>\n<li>In addition to security changes for the vulnerabilities, updates include defense-in-depth updates to help improve security-related features.</li>\n<li>For information on lifecycle and support dates for Windows 10 operating systems, please see <a href=\"https://support.microsoft.com/en-us/help/13853/windows-lifecycle-fact-sheet\">Windows Lifecycle Facts Sheet</a>.</li>\n</ul>\n<p><strong>Known Issues</strong></p>\n<ul>\n<li><a href=\"https://support.microsoft.com/help/4011021\">4011021</a></li>\n<li><a href=\"https://support.microsoft.com/help/4011626\">4011626</a></li>\n<li><a href=\"https://support.microsoft.com/help/4055002\">4055002</a></li>\n<li><a href=\"https://support.microsoft.com/help/4055532\">4055532</a></li>\n<li><a href=\"https://support.microsoft.com/help/4056888\">4056888</a></li>\n<li><a href=\"https://support.microsoft.com/help/4056890\">4056890</a></li>\n<li><a href=\"https://support.microsoft.com/help/4056891\">4056891</a></li>\n<li><a href=\"https://support.microsoft.com/help/4056892\">4056892</a></li>\n<li><a href=\"https://support.microsoft.com/help/4056893\">4056893</a></li>\n<li><a href=\"https://support.microsoft.com/help/4056894\">4056894</a></li>\n<li><a href=\"https://support.microsoft.com/help/4056895\">4056895</a></li>\n<li><a href=\"https://support.microsoft.com/help/4056896\">4056896</a></li>\n<li><a href=\"https://support.microsoft.com/help/4056897\">4056897</a></li>\n<li><a href=\"https://support.microsoft.com/help/4056898\">4056898</a></li>\n<li><a href=\"https://support.microsoft.com/help/4056899\">4056899</a></li>\n<li><a href=\"https://support.microsoft.com/help/4057116\">4057116</a></li>\n</ul>\n"},{"Audience":"Public","Ordinal":"1","Title":"Legal Disclaimer","Type":5,"Value":"The information provided in the Microsoft Knowledge Base is provided \"as is\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply."}],"DocumentPublisher":{"ContactDetails":{"Value":"secure@microsoft.com"},"IssuingAuthority":{"Value":"The Microsoft Security Response Center (MSRC) identifies, monitors, resolves, and responds to security incidents and Microsoft software security vulnerabilities. For more information, see http://www.microsoft.com/security/msrc."},"Type":0},"DocumentTitle":{"Value":"January 2018 Security Updates"},"DocumentTracking":{"CurrentReleaseDate":"2026-11-14T01:12:34","Identification":{"Alias":{"Value":"2018-Jan"},"ID":{"Value":"2018-Jan"}},"InitialReleaseDate":"2018-01-09T08:00:00Z","RevisionHistory":[{"Date":"2026-11-14T01:12:34","Description":{"Value":"January 2018 Security Updates"},"Number":"126"}],"Status":2,"Version":"1.0"},"DocumentType":{"Value":"Security Update"},"ProductTree":{"Branch":[{"Items":[{"Items":[{"ProductID":"10753","Value":"Microsoft Office 2016 (32-bit edition)"},{"ProductID":"10754","Value":"Microsoft Office 2016 (64-bit edition)"},{"ProductID":"10905","Value":"Microsoft Office 2016 Click-to-Run (C2R) for 32-bit editions"},{"ProductID":"10906","Value":"Microsoft Office 2016 Click-to-Run (C2R) for 64-bit editions"},{"ProductID":"10150","Value":"Microsoft Office 2007 Service Pack 3"},{"ProductID":"10521","Value":"Microsoft Line truncated

data/cvrf/2018/2018-Jun.json

@@ -1 +1 @@
-{"DocumentNotes":[{"Audience":"Public","Ordinal":"0","Title":"Release Notes","Type":1,"Value":"<p>The June security release consists of security updates for the following software:</p>\n<ul>\n<li>Internet Explorer</li>\n<li>Microsoft Edge</li>\n<li>Microsoft Windows</li>\n<li>Microsoft Office and Microsoft Office Services and Web Apps</li>\n<li>ChakraCore</li>\n<li>Adobe Flash Player</li>\n<li>Microsoft Exchange Server</li>\n</ul>\n<p>In addition, Microsoft is releasing the following advisory:</p>\n<p><a href=\"https://docs.microsoft.com/en-us/security-updates/securityadvisories/2018/4338110\">Microsoft Security Advisory 4338110</a></p>\n<p>Please note the following information regarding the security updates:</p>\n<ul>\n<li><p>There are prerequitsites for the new Microsoft Exchange Server release. Please see: <a href=\"https://support.microsoft.com/en-us/help/4295081\">4295081</a> and <a href=\"https://aka.ms/msexchangeteam\">Exchange Blog</a></p>\n</li>\n<li><p>Windows 10 version 1607 and Windows Server 2016 users must install KB4132216 prior to installing the June 2018 cumulative security update. See <a href=\"https://support.microsoft.com/en-us/help/4132216\">4132216</a> for more information.</p>\n</li>\n<li><p>Windows 10 updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows 10, in addition to non-security updates. The updates are available via the <a href=\"http://catalog.update.microsoft.com/v7/site/Home.aspx\">Microsoft Update Catalog</a>.</p>\n</li>\n<li><p>Starting in March 2017, a delta package will be available on the Microsoft Update Catalog for Windows 10 version 1607 and newer. This delta package contains just the delta changes between the previous month and the current release.</p>\n</li>\n<li><p>Updates for Windows RT 8.1 and Microsoft Office RT software are only available via <a href=\"http://go.microsoft.com/fwlink/?LinkId=21130\">Windows Update</a>.</p>\n</li>\n<li><p>For information on lifecycle and support dates for Windows 10 operating systems, please see <a href=\"https://support.microsoft.com/en-us/help/13853/windows-lifecycle-fact-sheet\">Windows Lifecycle Facts Sheet</a>.</p>\n</li>\n<li><p>In addition to security changes for the vulnerabilities, updates include defense-in-depth updates to help improve security-related features.</p>\n</li>\n<li><p>After installing the June security updates, customers may need to complete one or more manual steps to be fully protected. See the following:</p>\n<ul>\n<li>After installing the updates for SharePoint Foundation 2013 Service Pack 1 or SharePoint Enterprise Server 2016, customers need to run psconfig.exe. See <a href=\"https://blogs.technet.microsoft.com/stefan_gossner/2015/09/09/why-we-recommend-require-to-run-the-configuration-wizard-also-for-security-fixes/\">Why we recommend / require to run the Configuration Wizard also for Security fixes</a></li>\n<li>After installing Windows updates, refer to the following table for further action to be protected from Spectre/Meltdown vulnerabilities:</li>\n</ul>\n</li>\n</ul>\n<table>\n<thead>\n<tr>\n<th>Operating System</th>\n<th>CVE-2017-5715</th>\n<th>CV-2017-5754</th>\n<th>CVE-2018-3639</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Windows 10</td>\n<td>Enabled by default</td>\n<td>Enabled by default</td>\n<td>Disabled by default - see <a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV180012\">ADV180012</a></td>\n</tr>\n<tr>\n<td>Windows Server 2016</td>\n<td>Disabled by default - see <a href=\"https://support.microsoft.com/help/4072698\">KB4072698</a></td>\n<td>Disabled by default - see <a href=\"https://support.microsoft.com/help/4072698\">KB4072698</a></td>\n<td>Disabled by default - see <a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV180012\">ADV180012</a></td>\n</tr>\n<tr>\n<td>Windows 8.1</td>\n<td>Enabled by default</td>\n<td>Enabled by default</td>\n<td>Not available - see <a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV180012\">ADV180012</a></td>\n</tr>\n<tr>\n<td>Windows Server 2012 R2</td>\n<td>Disabled by default - see <a href=\"https://support.microsoft.com/help/4072698\">KB4072698</a></td>\n<td>Disabled by default - see <a href=\"https://support.microsoft.com/help/4072698\">KB4072698</a></td>\n<td>Not available - see <a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV180012\">ADV180012</a></td>\n</tr>\n<tr>\n<td>Windows RT 8.1</td>\n<td>Enabled by default</td>\n<td>Enabled by default</td>\n<td>Not available - see <a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV180012\">ADV180012</a></td>\n</tr>\n<tr>\n<td>Windows 7</td>\n<td>Enabled by default</td>\n<td>Enabled by default</td>\n<td>Disabled by default - see <a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV180012\">ADV180012</a></td>\n</tr>\n<tr>\n<td>Windows Server 2008 R2</td>\n<td>DisaLine truncated
+{"DocumentNotes":[{"Audience":"Public","Ordinal":"0","Title":"Release Notes","Type":1,"Value":"<p>The June security release consists of security updates for the following software:</p>\n<ul>\n<li>Internet Explorer</li>\n<li>Microsoft Edge</li>\n<li>Microsoft Windows</li>\n<li>Microsoft Office and Microsoft Office Services and Web Apps</li>\n<li>ChakraCore</li>\n<li>Adobe Flash Player</li>\n<li>Microsoft Exchange Server</li>\n</ul>\n<p>In addition, Microsoft is releasing the following advisory:</p>\n<p><a href=\"https://docs.microsoft.com/en-us/security-updates/securityadvisories/2018/4338110\">Microsoft Security Advisory 4338110</a></p>\n<p>Please note the following information regarding the security updates:</p>\n<ul>\n<li><p>There are prerequitsites for the new Microsoft Exchange Server release. Please see: <a href=\"https://support.microsoft.com/en-us/help/4295081\">4295081</a> and <a href=\"https://aka.ms/msexchangeteam\">Exchange Blog</a></p>\n</li>\n<li><p>Windows 10 version 1607 and Windows Server 2016 users must install KB4132216 prior to installing the June 2018 cumulative security update. See <a href=\"https://support.microsoft.com/en-us/help/4132216\">4132216</a> for more information.</p>\n</li>\n<li><p>Windows 10 updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows 10, in addition to non-security updates. The updates are available via the <a href=\"http://catalog.update.microsoft.com/v7/site/Home.aspx\">Microsoft Update Catalog</a>.</p>\n</li>\n<li><p>Starting in March 2017, a delta package will be available on the Microsoft Update Catalog for Windows 10 version 1607 and newer. This delta package contains just the delta changes between the previous month and the current release.</p>\n</li>\n<li><p>Updates for Windows RT 8.1 and Microsoft Office RT software are only available via <a href=\"http://go.microsoft.com/fwlink/?LinkId=21130\">Windows Update</a>.</p>\n</li>\n<li><p>For information on lifecycle and support dates for Windows 10 operating systems, please see <a href=\"https://support.microsoft.com/en-us/help/13853/windows-lifecycle-fact-sheet\">Windows Lifecycle Facts Sheet</a>.</p>\n</li>\n<li><p>In addition to security changes for the vulnerabilities, updates include defense-in-depth updates to help improve security-related features.</p>\n</li>\n<li><p>After installing the June security updates, customers may need to complete one or more manual steps to be fully protected. See the following:</p>\n<ul>\n<li>After installing the updates for SharePoint Foundation 2013 Service Pack 1 or SharePoint Enterprise Server 2016, customers need to run psconfig.exe. See <a href=\"https://blogs.technet.microsoft.com/stefan_gossner/2015/09/09/why-we-recommend-require-to-run-the-configuration-wizard-also-for-security-fixes/\">Why we recommend / require to run the Configuration Wizard also for Security fixes</a></li>\n<li>After installing Windows updates, refer to the following table for further action to be protected from Spectre/Meltdown vulnerabilities:</li>\n</ul>\n</li>\n</ul>\n<table>\n<thead>\n<tr>\n<th>Operating System</th>\n<th>CVE-2017-5715</th>\n<th>CV-2017-5754</th>\n<th>CVE-2018-3639</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Windows 10</td>\n<td>Enabled by default</td>\n<td>Enabled by default</td>\n<td>Disabled by default - see <a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV180012\">ADV180012</a></td>\n</tr>\n<tr>\n<td>Windows Server 2016</td>\n<td>Disabled by default - see <a href=\"https://support.microsoft.com/help/4072698\">KB4072698</a></td>\n<td>Disabled by default - see <a href=\"https://support.microsoft.com/help/4072698\">KB4072698</a></td>\n<td>Disabled by default - see <a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV180012\">ADV180012</a></td>\n</tr>\n<tr>\n<td>Windows 8.1</td>\n<td>Enabled by default</td>\n<td>Enabled by default</td>\n<td>Not available - see <a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV180012\">ADV180012</a></td>\n</tr>\n<tr>\n<td>Windows Server 2012 R2</td>\n<td>Disabled by default - see <a href=\"https://support.microsoft.com/help/4072698\">KB4072698</a></td>\n<td>Disabled by default - see <a href=\"https://support.microsoft.com/help/4072698\">KB4072698</a></td>\n<td>Not available - see <a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV180012\">ADV180012</a></td>\n</tr>\n<tr>\n<td>Windows RT 8.1</td>\n<td>Enabled by default</td>\n<td>Enabled by default</td>\n<td>Not available - see <a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV180012\">ADV180012</a></td>\n</tr>\n<tr>\n<td>Windows 7</td>\n<td>Enabled by default</td>\n<td>Enabled by default</td>\n<td>Disabled by default - see <a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV180012\">ADV180012</a></td>\n</tr>\n<tr>\n<td>Windows Server 2008 R2</td>\n<td>DisaLine truncated