Patch Tuesday, September 2015
Microsoft's monthly security release, Tuesday, September 8, 2015. Includes CVEs published within two days either side; Adobe and SAP ride the same day.
2 CVEs · 0 critical · 2 exploited · 1 with public exploit code
Microsoft only. Adobe and SAP are below. Exploited first, then public exploit code, then highest CVSS.
Microsoft
2 CVEs · 0 critical · 2 exploited · 1 with public exploit code
- 8.2HighSep 9, 2015Microsoft Win32k Memory corruptionCVE-2015-2546The kernel-mode driver in Microsoft Windows OS and Server allows local users to gain privileges via a crafted application.Exploited10% likelyExploit code
- 7.8HighSep 9, 2015Microsoft OfficeCVE-2015-2545Microsoft Office allows remote attackers to execute arbitrary code via a crafted EPS image.Exploited86% likelyDetection
Adobe
No tracked Adobe CVEs in this window.
SAP
No tracked SAP CVEs in this window.
The release date follows Microsoft's usual schedule (second Tuesday). Chips show what Watch Floor knows: CISA KEV listing, public exploit code and published detection rules.