Microsoft Patch Tuesday for February 2015: 56 vulnerabilities fixed

Summary: Microsoft's February 2015 Patch Tuesday released 9 bulletins addressing 56 CVEs, with 3 rated critical covering Internet Explorer, Windows, and Group Policy. MS15-009 alone fixed 41 CVEs in Internet Explorer versions 6 through 11, mostly use-after-free flaws that could allow remote code execution.
What's compelling: Windows Server 2003 is identified as vulnerable to the Group Policy remote code execution flaw CVE-2015-0008 but will not be patched due to architecture limitations, leaving any domain-configured system on that OS exposed when it connects to an untrusted network.

Read the original at Cisco Talos ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2014-6362 CVE-2014-8967 CVE-2015-0003 CVE-2015-0008 CVE-2015-0009 CVE-2015-0010 CVE-2015-0012 CVE-2015-0057 CVE-2015-0058 CVE-2015-0059 CVE-2015-0060 CVE-2015-0061 CVE-2015-0062 CVE-2015-0063 CVE-2015-0064 CVE-2015-0065
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026