Vulnerability (CVE)
Microsoft released 14 security bulletins in March 2015 addressing 45 CVEs, with the first 5 rated critical and covering Internet Explorer, Office, Windows, and VBScript. The remaining 9 important bulletins cover Windows Kernel Mode Drivers, Exchange, Task...
Google Project Zero researcher Mateusz Jurczyk detailed a memory disclosure vulnerability in the PostScript font engines shared by the Windows kernel ATMFD.DLL (CVE-2015-0089), Adobe Reader (CVE-2015-3049), DirectWrite and Windows Presentation Foundation...
Google Project Zero researcher Mateusz Jurczyk disclosed a set of font-engine vulnerabilities found in a shared PostScript Charstring interpreter, including CVE-2015-0093 (Adobe's CVE-2015-3052), a flaw in the BLEND Charstring instruction present in Adobe...