Microsoft Tuesday Coverage for June
Summary: Cisco Talos covered Microsoft's June security release, which addressed programming errors in Windows LDAP (MS09-018), Internet Explorer (MS09-019), Word (MS09-027), Excel (MS09-021), the Print Spooler Service (MS09-022), Windows Search (MS09-023), the Works font converter (MS09-024), and IIS (MS09-020). Most of these flaws could let a remote attacker execute code, while Windows Search could disclose information through a specially crafted file and IIS could expose server information without authentication; Talos shipped detection rules for each, identified by GID 3 SIDs and, for IIS, the HTTP Inspect preprocessor.
Why it matters: Eight separate Microsoft products needed remote-code-execution or information-disclosure fixes in a single month, and IIS could be read without any authentication at all - a reminder that patch cadence has to keep pace with the breadth of the surface.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026