Today, March 10, 2015 marks the day of another Patch Tuesday and in this new wave of Microsoft’s updates the company is releasing 14 security bulletins to address various vulnerabilities in all version of Windows, including Windows 10 Technical Preview, Microsoft Exchange, and Internet Explorer.
Out of the fourteen updates rolling out today, five are categorized as Critical and the remaining nine updates are categorized as Important.
The updates labeled as Critical deal specifically with vulnerabilities that could allow remote code execution if a user views a specifically crafted website and the attacker could gain control of the user rights.
The remaining nine Important updates patches specific vulnerabilities. For Example, KB3034344 deals with a vulnerability in the Kernel-Mode Driver that could allow elevation of privileges. KB3035132 resolves security vulnerability that could allow information disclosure if an attacker convinces a user to visit a website with a specific crafted PNG image.
The KB3002657 fixes a vulnerability in NETLOGON that could allow spoofing if an attacker is logged in to a domain and run specific crafted application to connect to other systems in the domain. This vulnerability could also allow the attacker to observe network traffic.
KB3035126 addresses vulnerability in Windows Photo Decoder component that could allow disclosure of information. For the full list of updates and summary, check the Microsoft’s March security bulletin.
Surface March firmware update
As part of the March Patch Tuesday, Microsoft is also making available a new firmware update for Surface Pro 3 and Surface RT.
Surface Pro 3 users will find the “System Firmware Update – 3/10/2015” or “System Hardware Update – 3/10/2015” the next time they update their system. However, the new firmware doesn’t do much, it just updates the Surface Pen Settings drive to version 22.214.171.124, enabling new functionality and features for the Surface app found in the Windows Store.
Surface RT gets new Audio and Display driver update (v9.17.13.0907) to improve audio and video experience and enhances system stability.
For the month of March, Surface Pro 2, Surface Pro, and Surface 2 do not get any new updates.
Xbox One March system update rolls out with screenshots, spam report, more tile transparency options
Like always if you have enabled automatic update, these updates will install automatically. However, you can always go to Windows Update from the Control Panel and install all the January updates manually.