Microsoft Update Tuesday, June 2013: mostly about Internet Explorer
Summary: Microsoft's June 2013 Update Tuesday released 5 bulletins covering 23 CVEs, with the critical Internet Explorer update (MS13-047) addressing 19 CVEs across IE6 through IE10, some allowing remote code execution. The remaining bulletins cover an information disclosure flaw in the Windows Kernel (MS13-048), a denial of service in a Windows Kernel Driver (MS13-049) triggerable after SYN Attack Protection engages, a privilege escalation in the Windows Print Spooler (MS13-050), and a remote code execution flaw in Office 2003 and Office for Mac 2011 (MS13-051) that has been exploited in the wild.
Bottom line: The IE issues were reported through Coordinated Vulnerability Disclosure and not seen exploited in the wild, but the Office flaw (MS13-051) already has been - and CVE-2013-3126 only triggers for users running script debugging, a population skewed toward web developers.
Read the original at Cisco Talos ↗
- Topics
- Zero-Days & Exploits
- Mentions
- CVE-2013-3126
- Related
- Adobe, Microsoft Patch Flash, Windows Cyber Risks ·New Sign Drop Exploit Can Abuse Windows Defender to Bypass Security Protections Cyber Risks · Nov 13, 2026New Sign Drop Zero-Day Exploit Turns Windows CLFS Security Feature Into SYSTEM Access Cyber Risks · Nov 12, 2026