Microsoft Update Tuesday June 2014: Internet Explorer, Internet Explorer, Internet Explorer

Summary: Microsoft's June 2014 Update Tuesday shipped seven advisories fixing 66 vulnerabilities, 59 of them in Internet Explorer under the critical bulletin MS14-035. Of those 59 IE flaws, 54 are memory corruption issues (many use-after-frees), two are information disclosure, three are privilege escalation, and one publicly known TLS renegotiation flaw could be exploited by a man-in-the-middle attacker.
Bottom line: Fifty-nine IE vulnerabilities in a single month, including a publicly known TLS renegotiation flaw and a publicly known use-after-free, means every unpatched browser on the estate is exposed to code that is already in the wild or close to it.

Read the original at Cisco Talos ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2014-0296 CVE-2014-1770 CVE-2014-1771 CVE-2014-1777 CVE-2014-1811 CVE-2014-1816 CVE-2014-1817 CVE-2014-1818 CVE-2014-1823 CVE-2014-2778
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026