Security News, Current News

News

Notes

Some companies — notably Microsoft — publish much more information about problems. This is not because their products are more prone to problems: it is because these companies make more products, or make a stronger effort to fix problems and inform customers.

Some companies don't release security fixes for old but widely used products: e.g. Microsoft doesn't support Windows 2000. Users are advised to upgrade to newer products, but many new products can't run on old PCs: such PCs will become increasingly vulnerable as time goes on.

For virus news see the Symantec Security Response Center or the Microsoft Virus Alert Center

Here are recent security fixes and tools to deal with security fixes:

May 2013

May 14, 2013 - Microsoft - Windows XP, Vista, 7, 8; Windows Server 2003, 2008, 2012; Windows RT: fix for elevation of privilege vulnerabilities. [get it…]

May 14, 2013 - Microsoft - Windows Essentials 2011, 2012: fix for information disclosure vulnerability. [get it…]

May 14, 2013 - Microsoft - Visio 2003, 2007, 2010: fix for information disclosure vulnerability. [get it…]

May 14, 2013 - Microsoft - Office 2003; Word Viewer: fix for remote code execution vulnerability. [get it…]

May 14, 2013 - Microsoft - Office 2003, 2007, 2010: fix for remote code execution vulnerabilities. [get it…]

May 14, 2013 - Microsoft - Communicator 2007; Lync 2010; Lync Server 2013: fix for remote code execution vulnerability. [get it…]

May 14, 2013 - Microsoft - Windows XP, Vista, 7, 8; Windows Server 2003, 2008, 2012; Windows RT: fix for spoofing vulnerability. [get it…]

May 14, 2013 - Microsoft - Windows 8; Windows Server 2012; Windows RT: fix for denial of service vulnerability. [get it…]

May 14, 2013 - Microsoft - Windows XP, Vista, 7; Windows Server 2003, 2008: fix for remote code execution vulnerability. [get it…]

May 14, 2013 - Microsoft - Windows XP, Vista, 7, 8; Windows Server 2003, 2008, 2012; Windows RT: cumulative security update for 11 new vulnerabilities. [get it…]

May 14, 2013 - Mozilla Corporation - Firefox Browser 21: FF 21.0 issued, fixing 8 security vulnerabilities. [get it…]

May 14, 2013 - Mozilla Corporation - Thunderbird Emailer / Newsreader: 17.0.6 issued, fixing 6 security vulnerabilities. [get it…]

April 2013

Apr 16, 2013 - Apple - Safari 6: version 6.0.4 issued, fixing a security vulnerability. [get it…]

Apr 9, 2013 - Microsoft - Windows XP, Vista, 7, 8; Windows Server 2003, 2008, 2012: fix for 4 elevation of privilege vulnerabilities. [get it…]

Apr 9, 2013 - Microsoft - Groove Server 2010; InfoPath 2010; Office Web Apps 2010; SharePoint Foundation 2010; SharePoint Server 2010: fix for an elevation of privilege vulnerability. [get it…]

Apr 9, 2013 - Microsoft - Windows Defender for Windows 8; Windows Defender for Windows RT: fix for an elevation of privilege vulnerability. [get it…]

Apr 9, 2013 - Microsoft - Windows XP, Vista; Windows Server 2003, 2008: fix for an elevation of privilege vulnerability. [get it…]

Apr 9, 2013 - Microsoft - Windows XP, Vista, 7, 8; Windows Server 2003, 2008, 2012: fix for a denial of service vulnerability. [get it…]

Apr 9, 2013 - Microsoft - Windows XP, Vista, 7, 8; Windows Server 2003, 2008, 2012; Windows RT: fix for 2 elevation of privilege vulnerabilities. [get it…]

Apr 9, 2013 - Microsoft - SharePoint Server 2013: fix for an information disclosure vulnerability. [get it…]

Apr 9, 2013 - Microsoft - Windows XP, Vista, 7; Windows Server 2003, 2008: fix for a remote code execution vulnerability. [get it…]

Apr 9, 2013 - Microsoft - Windows XP, Vista, 7, 8; Windows Server 2003, 2008, 2012: cumulative security update for 2 new vulnerabilities. [get it…]

Apr 4, 2013 - Opera Software - Opera Browser Suite: 12.15 issued to fix bugs and security vulnerabilities. [get it…]

Apr 3, 2013 - Mozilla Corporation - SeaMonkey Browser Suite 2.17: version 2.17 issued, fixing 9 security vulnerabilities. [get it…]

Apr 2, 2013 - Mozilla Corporation - Firefox Browser 20: FF 20.0 issued, fixing 11 security vulnerabilities. [get it…]

Apr 2, 2013 - Mozilla Corporation - Thunderbird Emailer / Newsreader: 17.0.5 issued, fixing security vulnerabilities. [get it…]

March 2013

Mar 26, 2013 - Google - Chrome Browser: 26.0.1410.43 issued, adding features, fixing bugs, and fixing security vulnerabilities. [get it…]

Mar 14, 2013 - Apple - Safari 6: version 6.0.3 issued, fixing 17 security vulnerabilities. [get it…]

Mar 14, 2013 - Apple - OS X 10.8 (Mountain Lion): version 10.8.3 issued, fixing 20 security vulnerability. [get it…]

Mar 12, 2013 - Microsoft - Windows XP, Vista, 7, 8; Windows Server 2003, 2008, 2012: fix for elevation of privilege vulnerabilities. [get it…]

Mar 12, 2013 - Microsoft - Office for Mac 2008, 2011: fix for information disclosure vulnerability. [get it…]

Mar 12, 2013 - Microsoft - OneNote 2010: fix for information disclosure vulnerability. [get it…]

Mar 12, 2013 - Microsoft - SharePoint Server 2010; SharePoint Foundation 2010: fix for elevation of privilege vulnerability. [get it…]

Mar 12, 2013 - Microsoft - Visio Viewer 2010: fix for remote code execution vulnerability. [get it…]

Mar 12, 2013 - Microsoft - Silverlight 5: fix for remote code execution vulnerability. [get it…]

Mar 12, 2013 - Microsoft - Windows XP, Vista, 7, 8; Windows Server 2003, 2008, 2012: cumulative security update for 9 new vulnerabilities. [get it…]

Mar 11, 2013 - Mozilla Corporation - Thunderbird Emailer / Newsreader: 17.0.4 issued, fixing a security vulnerability. [get it…]

Mar 10, 2013 - Mozilla Corporation - SeaMonkey Browser Suite 2.16.1: version 2.16.1 issued, fixing a security vulnerability. [get it…]

Mar 8, 2013 - Mozilla Corporation - Firefox Browser 19.0.2: FF 19.0.2 issued, fixing a security vulnerability. [get it…]

February 2013

Feb 22, 2013 - Mozilla Corporation - SeaMonkey Browser Suite 2.16: version 2.16 issued, fixing 8 security vulnerabilities. [get it…]

Feb 19, 2013 - Mozilla Corporation - Firefox Browser 19.0: FF 19 issued, fixing 8 security vulnerabilities. [get it…]

Feb 19, 2013 - Mozilla Corporation - Thunderbird Emailer / Newsreader: 17.0.3 issued, fixing 8 security vulnerabilities. [get it…]

Feb 12, 2013 - Microsoft - Windows XP: fix for remote code execution vulnerability. [get it…]

Feb 12, 2013 - Microsoft - Windows 7; Windows Server 2008: fix for elevation of privilege vulnerability. [get it…]

Feb 12, 2013 - Microsoft - Windows RT; Windows Vista, 7, 8; Windows Server 2008, 2012: fix for denial of service vulnerability. [get it…]

Feb 12, 2013 - Microsoft - Windows RT; Windows XP, Vista, 7, 8; Windows Server 2003, 2008, 2012: fix for elevation of privilege vulnerabilities. [get it…]

Feb 12, 2013 - Microsoft - Windows XP, Vista, 7, 8; Windows Server 2003, 2008, 2012: fix for elevation of privilege vulnerability. [get it…]

Feb 12, 2013 - Microsoft - Windows Server 2008, 2012: fix for denial of service vulnerability. [get it…]

Feb 12, 2013 - Microsoft - FAST Search Server 2010: fix for remote code execution vulnerabilities. [get it…]

Feb 12, 2013 - Microsoft - Exchange Server 2007, 2010: fix for remote code execution vulnerabilities. [get it…]

Feb 12, 2013 - Microsoft - Windows XP, Vista; Windows Server 2003, 2008: fix for remote code execution vulnerability. [get it…]

Feb 12, 2013 - Microsoft - Internet Explorer 6, 7, 8, 9, 10: fix for remote code execution vulnerability. [get it…]

Feb 12, 2013 - Microsoft - Internet Explorer 6, 7, 8, 9, 10: cumulative security update for 13 new vulnerabilities. [get it…]

Feb 5, 2013 - Opera Software - Opera Browser Suite: 12.14 issued to fix bugs and security vulnerabilities. [get it…]

January 2013

Jan 30, 2013 - Opera Software - Opera Browser Suite: 12.13 issued to fix bugs and 4 security vulnerabilities. [get it…]

Jan 18, 2013 - Mozilla Corporation - Firefox Browser 18.0.1: 18.0.1 issued, fixing security vulnerabilities. [get it…]

Jan 14, 2013 - Microsoft - Windows XP, Vista, 7; Windows Server 2003, 2008: fix for remote code execution vulnerability. [get it…]

Jan 10, 2013 - Google - Chrome Browser: 24.0.1312.52 issued, adding features, fixing bugs, and fixing security vulnerabilities. [get it…]

Jan 9, 2013 - Mozilla Corporation - SeaMonkey Browser Suite 2.15: version 2.15 issued, fixing 20 security vulnerabilities. [get it…]

Jan 8, 2013 - Microsoft - Windows XP, Vista, 7, 8; Windows RT; Windows Server 2008, 2012: fix for denial of service vulnerability. [get it…]

Jan 8, 2013 - Microsoft - Windows Vista, 7, 8; Windows RT; Windows Server 2008, 2012: fix for security feature bypass vulnerability. [get it…]

Jan 8, 2013 - Microsoft - Windows Vista, 7, 8; Windows RT; Windows Server 2008, 2012: fix for elevation of privilege vulnerability. [get it…]

Jan 8, 2013 - Microsoft - Windows XP, Vista, 7, 8; Windows RT; Windows Server 2003, 2008, 2012: fix for elevation of privilege vulnerabilities. [get it…]

Jan 8, 2013 - Microsoft - System Center Operations Manager 2007: fix for elevation of privilege vulnerabilities. [get it…]

Jan 8, 2013 - Microsoft - Windows XP, Vista, 7, 8; Windows Server 2003, 2008, 2012: fix for remote code execution vulnerabilities. [get it…]

Jan 8, 2013 - Microsoft - Windows 7: fix for remote code execution vulnerability. [get it…]

Jan 8, 2013 - Mozilla Corporation - Firefox Browser 18.0: 18.0 issued, fixing 21 security vulnerabilities. [get it…]

Jan 8, 2013 - Mozilla Corporation - Thunderbird Emailer / Newsreader: 17.0.2 issued, fixing 19 security vulnerabilities. [get it…]

December 2012

Dec 18, 2012 - Opera Software - Opera Browser Suite: 12.12 issued to fix bugs and 2 security vulnerabilities. [get it…]

Dec 11, 2012 - Microsoft - Windows Server 2008, 2012: fix for security feature bypass vulnerability. [get it…]

Dec 11, 2012 - Microsoft - Windows XP, Server 2003, Vista, Server 2008, 7, 8 Server 2012: fix for remote code execution vulnerability. [get it…]

Dec 11, 2012 - Microsoft - Windows XP, Server 2003, Vista, Server 2008, 7: fix for remote code execution vulnerability. [get it…]

Dec 11, 2012 - Microsoft - Exchange Server 2007, 2010: fix for remote code execution vulnerabilities. [get it…]

Dec 11, 2012 - Microsoft - Office 2003, 2007, 2010; Office Compatibility Pack; Office Web Apps 2010; Word Viewer: fix for remote code execution vulnerabilities. [get it…]

Dec 11, 2012 - Microsoft - Windows XP, Server 2003, Vista, Server 2008, 7, 8 Server 2012: fix for remote code execution vulnerabilities. [get it…]

Dec 11, 2012 - Microsoft - Windows XP, Server 2003, Vista, Server 2008, 7, 8 Server 2012: cumulative security update for Internet Explorer. [get it…]

November 2012

Nov 20, 2012 - Mozilla Corporation - Firefox Browser 17.0: 17.0 issued, fixing 16 security vulnerabilities. [get it…]

Nov 20, 2012 - Mozilla Corporation - SeaMonkey Browser Suite 2.143: version 2.14 issued, fixing 12 security vulnerabilities. [get it…]

Nov 20, 2012 - Mozilla Corporation - Thunderbird Emailer / Newsreader: 17.0 issued, fixing 12 security vulnerabilities. [get it…]

Nov 20, 2012 - Opera Software - Opera Browser Suite: 12.11 issued to fix bugs and 2 security vulnerabilities. [get it…]

Nov 13, 2012 - Microsoft - Excel Viewer; Office 2003, 2007, 2010; Office Compatibility Pack; Office for Mac 2008, 2011: fix for remote code execution vulnerabilities. [get it…]

Nov 13, 2012 - Microsoft - Windows XP, Server 2003, Vista, Server 2008, 7, 8, Server 2012: fix for remote code execution vulnerabilities. [get it…]

Nov 13, 2012 - Microsoft - Windows Vista, Server 2008, 7: fix for information disclosure vulnerabilities. [get it…]

Nov 13, 2012 - Microsoft - Windows XP, Server 2003, Vista, Server 2008, 7, 8: fix for remote code execution vulnerabilities. [get it…]

Nov 13, 2012 - Microsoft - Windows Vista, Server 2008, 7: cumulative security update for Internet Explorer. [get it…]

October 2012

Oct 29, 2012 - Mozilla Corporation - Thunderbird Emailer / Newsreader: 16.0.2 issued, fixing a security vulnerability. [get it…]

Oct 11, 2012 - Mozilla Corporation - Firefox Browser 16.0.1: version 16.0.1 issued, fixing a security vulnerability. [get it…]

Oct 11, 2012 - Mozilla Corporation - Thunderbird Emailer / Newsreader: 16.0.1 issued, fixing a security vulnerability. [get it…]

Oct 10, 2012 - Google - Chrome Browser: 22.0.1229.9 issued, fixing bugs and a security vulnerability. [get it…]

Oct 10, 2012 - Mozilla Corporation - SeaMonkey Browser Suite 2.13: version 2.13 issued, fixing 13 security vulnerabilities. [get it…]

Oct 10, 2012 - Mozilla Corporation - Thunderbird Emailer / Newsreader: 16 issued, fixing 13 security vulnerabilities. [get it…]

Oct 9, 2012 - Mozilla Corporation - Firefox Browser 16: version 16 issued, fixing 14 security vulnerabilities. [get it…]

September 2012

Sep 21, 2012 - Microsoft - Internet Explorer 6, 7, 8, 9: cumulative security update for Internet Explorer, fixing five new security issues. [get it…]

Sep 10, 2012 - Microsoft - Systems Management Server 2003; System Center Configuration Manager 2007: fix for elevation of privilege vulnerability. [get it…]

Sep 10, 2012 - Microsoft - Visual Studio Team Foundation Server 2010: fix for elevation of privilege vulnerability. [get it…]

August 2012

Aug 30, 2012 - Google - Chrome Browser: 21.0.1180.89 issued, fixing bugs and security vulnerabilities. [get it…]

Aug 30, 2012 - Opera Software - Opera Browser Suite: 12.02 issued to fix bugs and a security vulnerability. [get it…]

Aug 29, 2012 - Mozilla Corporation - SeaMonkey Browser Suite 2.12: version 2.12 issued, fixing 11 security vulnerabilities. [get it…]

Aug 28, 2012 - Mozilla Corporation - Firefox Browser 15: version 15 issued, fixing 16 security vulnerabilities. [get it…]

Aug 21, 2012 - Google - Chrome Browser: 21.0.1180.81 issued, fixing bugs and security vulnerabilities. [get it…]

Aug 14, 2012 - Microsoft - Office 2003, 2007, 2010: fix for remote code execution vulnerability. [get it…]

Aug 14, 2012 - Microsoft - Visio 2010: fix for remote code execution vulnerability. [get it…]

Aug 14, 2012 - Microsoft - Exchange Server 2007, 2010: fix for remote code execution vulnerabilities. [get it…]

Aug 14, 2012 - Microsoft - Office 2007, 2010: fix for remote code execution vulnerability. [get it…]

Aug 14, 2012 - Microsoft - Windows XP, Server 2003, Vista, Server 2008, 7: fix for remote code execution vulnerability. [get it…]

Aug 14, 2012 - Microsoft - Windows XP, Server 2003, Vista, Server 2008, 7: fix for elevation of privilege vulnerability. [get it…]

Aug 14, 2012 - Microsoft - Windows XP, Server 2003, Vista, Server 2008, 7: fix for remote code execution vulnerabilities. [get it…]

Aug 14, 2012 - Microsoft - Windows XP: fix for remote code execution vulnerability. [get it…]

Aug 14, 2012 - Microsoft - Internet Explorer 6, 7, 8, 9: cumulative security update for Internet Explorer, fixing four new security issues. [get it…]

Aug 2, 2012 - Opera Software - Opera Browser Suite: 12.01 issued to fix bugs and security vulnerabilities. [get it…]

July 2012

Jul 17, 2012 - Mozilla Corporation - Firefox Browser 14: version 14 issued, fixing 14 security vulnerabilities. [get it…]

Jul 17, 2012 - Mozilla Corporation - Thunderbird Emailer / Newsreader: 14 issued to fix bugs and security vulnerabilities. [get it…]

Jul 10, 2012 - Microsoft - Office for Mac 2011: fix for elevation of privilege vulnerability. [get it…]

Jul 10, 2012 - Microsoft - Groove Server 2010; InfoPath 2007, 2010; Office SharePoint Server 2007, 2010; Office Web Apps 2010; SharePoint Services 3.0; SharePoint Foundation 2010: fix for elevation of privilege vulnerabilities. [get it…]

Jul 10, 2012 - Microsoft - Windows XP, Server 2003, Vista, Server 2008, 7: fix for information disclosure vulnerability. [get it…]

Jul 10, 2012 - Microsoft - Windows XP, Server 2003, Vista, Server 2008, 7: fix for remote code execution vulnerability. [get it…]

Jul 10, 2012 - Microsoft - Windows XP, Server 2003, Vista, Server 2008, 7: fix for elevation of privilege vulnerabilities. [get it…]

Jul 10, 2012 - Microsoft - Office 2003, 2007, 2010; Visual Basic for Applications: fix for remote code execution vulnerability. [get it…]

Jul 10, 2012 - Microsoft - Windows XP, Server 2003, Vista, Server 2008, 7: fix for remote code execution vulnerability. [get it…]

Jul 10, 2012 - Microsoft - Internet Explorer 6, 7, 8, 9.: Cumulative Security Update, fixing 2 new vulnerabilities. [get it…]

Jul 10, 2012 - Microsoft - Expression Web 1, 2; Groove Server 2007; Office 2003, 2007; Office Compatibility Pack; Office SharePoint Server 2007; Office Word Viewer; Windows XP, Server 2003, Vista, Server 2008, 7: fix for remote code execution vulnerability. [get it…]

June 2012

Jun 16, 2012 - Mozilla Corporation - Firefox Browser 13.0.1: version 13 updated to fix bugs and security vulnerabilities. [get it…]

Jun 12, 2012 - Microsoft - Windows XP, Server 2003, Server 2008, 7: fix for elevation of privilege vulnerabilities. [get it…]

Jun 12, 2012 - Microsoft - Windows XP, Server 2003, Vista, Server 2008, 7: fix for elevation of privilege vulnerabilities. [get it…]

Jun 12, 2012 - Microsoft - Dynamics AX 2012: fix for elevation of privilege vulnerability. [get it…]

Jun 12, 2012 - Microsoft - Communicator 2007; Lync 2010; Lync 2010 Attendee; Lync 2010 Attendant: fix for remote code execution vulnerabilities. [get it…]

Jun 12, 2012 - Microsoft - Windows XP, Server 2003, Vista, Server 2008, 7: fix for remote code execution vulnerability. [get it…]

Jun 12, 2012 - Microsoft - Internet Explorer 6, 7, 8, 9.: Cumulative Security Update, fixing 13 new vulnerabilities. [get it…]

Jun 12, 2012 - Microsoft - Windows XP, Server 2003, Vista, Server 2008, 7: fix for remote code execution vulnerability. [get it…]

Jun 8, 2012 - Google - Chrome Browser: 19.0.1084.56 issued, fixing bugs and security vulnerabilities. [get it…]

Jun 5, 2012 - Mozilla Corporation - Thunderbird Emailer / Newsreader: 13 issued to fix bugs and security vulnerabilities. [get it…]

May 2012

May 24, 2012 - Google - Chrome Browser: 19.0.1084.52 issued, fixing bugs and security vulnerabilities. [get it…]

May 15, 2012 - Google - Chrome Browser: 19.0.1084.46 issued, fixing bugs and security vulnerabilities. [get it…]

For older news, visit the news archives.