Microsoft Patch Tuesday August 12 2014

The Microsoft Patch Tuesday of August 12, 2014 is set to address nine bulletins affecting a wide variety of Microsoft products, including Internet Explorer, Windows, Office, SQL Server, and Sharepoint. 

Two of the bulletins are rated Critical, the company's highest rated label, as they allow for Remote Code Execution. Seven of the updates are rated Important.

Researchers at Qualys suggest that the most important critical security patch is Bulletin #1, which affects all versions of Internet Explorer (IE). This means IE6 to IE11 are affected, on both Windows 8.1 and Windows RT. 

"Since browsers are the attackers favorite targets, this patch should be top of your list. An attacker would exploit this vulnerability on your users through a malicious webpage. These pages can be on sites that are either set up specifically for this purpose, requiring him or her to attract your users to the site or are on sites that are already under control of the attacker with an established user community, such as blogs and forums," Qualys told WinBeta.

Bulletin #2 is a critical update for Windows, and it affects Windows 8 and Windows 8.1, along with the Media Center TV pack for Windows Vista. This update addresses bugs in the graphics processing pipeline allowing an attacker to trick you into opening a malicious file.

Bulletin #3 affects OneNote in Office 2007 and deals with a file format vulnerability as well as Remote Code Execution. "An attacker would have to convince your users to open a malicious file, most likely with a targeted email. Of course if you do not have OneNote installed or are on a newer version of Microsoft Office (you really should be, as 2007 lacks many of the newer security features) you are not affected," Qualys explains.

Bulletins 4-9 deal with elevation of privileges in Windows, SQL Server, and SharePoint Server. Windows 8.1 is slated to receive two critical updates, and four important updates. Microsoft recommends that customers apply Critical updates immediately, while the company recommends that customers apply Important updates at the earliest opportunity. 

Aside from security updates, Microsoft is set to roll out Windows 8.1 Update 2, now known as Windows 8.1 August Update. Originally planned to feature the returning Start Menu, Update 2 will now feature precision touchpad improvements, Miracast Receive support, and various other minor fixes.

Bulletins by the numbers:

Bulletin ID

Maximum Severity Rating and Vulnerability Impact

Restart Requirement

Affected Software

Bulletin 1

Critical 
Remote Code Execution

Requires restart

Microsoft Windows, 
Internet Explorer

Bulletin 2

Critical 
Remote Code Execution

May require restart

Microsoft Windows

Bulletin 3

Important 
Remote Code Execution

May require restart

Microsoft Office

Bulletin 4

Important 
Elevation of Privilege

May require restart

Microsoft SQL Server

Bulletin 5

Important 
Elevation of Privilege

Requires restart

Microsoft Windows

Bulletin 6

Important 
Elevation of Privilege

Requires restart

Microsoft Windows

Bulletin 7

Important 
Elevation of Privilege

May require restart

Microsoft Server Software

Bulletin 8

Important 
Security Feature Bypass

May require restart

Microsoft Windows,
Microsoft .NET Framework

Bulletin 9

Important 
Security Feature Bypass

Requires restart

Windows Operating System and Components

Microsoft Windows

Affected Software and Operating Systems

Windows Server 2003

Bulletin Identifier

Bulletin 1

Bulletin 2

Bulletin 5

Bulletin 6

Bulletin 8

Bulletin 9

Aggregate Severity Rating

Moderate

None

Important

Important

None

None

Windows Server 2003 Service Pack 2

Internet Explorer 6
(Moderate)

Internet Explorer 7
(Moderate)

Internet Explorer 8
(Moderate)

Not applicable

Windows Server 2003 Service Pack 2
(Important)

Windows Server 2003 Service Pack 2
(Important)

Not applicable

Not applicable

Windows Server 2003 x64 Edition Service Pack 2

Internet Explorer 6
(Moderate)

Internet Explorer 7
(Moderate)

Internet Explorer 8 (Moderate)

Not applicable

Windows Server 2003 x64 Edition Service Pack 2 
(Important)

Windows Server 2003 x64 Edition Service Pack 2 
(Important)

Not applicable

Not applicable

Windows Server 2003 with SP2 for Itanium-based Systems

Internet Explorer 6
(Moderate)

Internet Explorer 7
(Moderate)

Not applicable

Windows Server 2003 with SP2 for Itanium-based Systems 
(Important)

Windows Server 2003 with SP2 for Itanium-based Systems 
(Important)

Not applicable

Not applicable

Windows Vista

Bulletin Identifier

Bulletin 1

Bulletin 2

Bulletin 5

Bulletin 6

Bulletin 8

Bulletin 9

Aggregate Severity Rating

Critical

None

Important

Important

Important

None

Windows Vista Service Pack 2

Internet Explorer 7
(Critical)

Internet Explorer 8
(Critical)

Internet Explorer 9
(Critical)

Not applicable

Windows Vista Service Pack 2 
(Important)

Windows Vista Service Pack 2 
(Important)

Microsoft .NET Framework 2.0 Service Pack 2
(Important)

Microsoft .NET Framework 3.0 Service Pack 2
(Important)

Not applicable

Windows Vista x64 Edition Service Pack 2

Internet Explorer 7
(Critical)

Internet Explorer 8
(Critical)

Internet Explorer 9
(Critical)

Not applicable

Windows Vista x64 Edition Service Pack 2
(Important)

Windows Vista x64 Edition Service Pack 2
(Important)

Microsoft .NET Framework 2.0 Service Pack 2
(Important)

Microsoft .NET Framework 3.0 Service Pack 2
(Important)

Not applicable

Windows Server 2008

Bulletin Identifier

Bulletin 1

Bulletin 2

Bulletin 5

Bulletin 6

Bulletin 8

Bulletin 9

Aggregate Severity Rating

Moderate

None

Important

Important

Important

None

Windows Server 2008 for 32-bit Systems Service Pack 2

Internet Explorer 7
(Moderate)

Internet Explorer 8
(Moderate)

Internet Explorer 9
(Moderate)

Not applicable

Windows Server 2008 for 32-bit Systems Service Pack 2 
(Important)

Windows Server 2008 for 32-bit Systems Service Pack 2 
(Important)

Microsoft .NET Framework 2.0 Service Pack 2
(Important)

Microsoft .NET Framework 3.0 Service Pack 2
(Important)

Not applicable

Windows Server 2008 for x64-based Systems Service Pack 2

Internet Explorer 7
(Moderate)

Internet Explorer 8
(Moderate)

Internet Explorer 9
(Moderate)

Not applicable

Windows Server 2008 for x64-based Systems Service Pack 2 
(Important)

Windows Server 2008 for x64-based Systems Service Pack 2 
(Important)

Microsoft .NET Framework 2.0 Service Pack 2
(Important)

Microsoft .NET Framework 3.0 Service Pack 2
(Important)

Not applicable

Windows Server 2008 for Itanium-based Systems Service Pack 2

Internet Explorer 7
(Moderate)

Not applicable

Windows Server 2008 for Itanium-based Systems Service Pack 2 
(Important)

Windows Server 2008 for Itanium-based Systems Service Pack 2 
(Important)

Microsoft .NET Framework 2.0 Service Pack 2
(Important)

Microsoft .NET Framework 3.0 Service Pack 2
(Important)

Not applicable

Windows 7

Bulletin Identifier

Bulletin 1

Bulletin 2

Bulletin 5

Bulletin 6

Bulletin 8

Bulletin 9

Aggregate Severity Rating

Critical

Critical

Important

Important

Important

Important

Windows 7 for 32-bit Systems Service Pack 1

Internet Explorer 8
(Critical)

Internet Explorer 9
(Critical)

Internet Explorer 10
(Critical)

Internet Explorer 11
(Critical)

Windows 7 for 32-bit Systems Service Pack 1
(all editions except Starter and Home Basic editions) 
(Critical)

Windows 7 for 32-bit Systems Service Pack 1 
(Important)

Windows 7 for 32-bit Systems Service Pack 1 
(Important)

Microsoft .NET Framework 3.5.1
(Important)

Windows 7 for 32-bit Systems Service Pack 1 
(Important)

Windows 7 for x64-based Systems Service Pack 1

Internet Explorer 8
(Critical)

Internet Explorer 9
(Critical)

Internet Explorer 10
(Critical)

Internet Explorer 11
(Critical)

Windows 7 for x64-based Systems Service Pack 1
(all editions except Starter and Home Basic editions)
(Critical)

Windows 7 for x64-based Systems Service Pack 1 
(Important)

Windows 7 for x64-based Systems Service Pack 1 
(Important)

Microsoft .NET Framework 3.5.1
(Important)

Windows 7 for x64-based Systems Service Pack 1 
(Important)

Windows Server 2008 R2

Bulletin Identifier

Bulletin 1

Bulletin 2

Bulletin 5

Bulletin 6

Bulletin 8

Bulletin 9

Aggregate Severity Rating

Moderate

None

Important

Important

Important

Important

Windows Server 2008 R2 for x64-based Systems Service Pack 1

Internet Explorer 8
(Moderate)

Internet Explorer 9
(Moderate)

Internet Explorer 10
(Moderate)

Internet Explorer 11
(Moderate)

Not applicable

Windows Server 2008 R2 for x64-based Systems Service Pack 1 
(Important)

Windows Server 2008 R2 for x64-based Systems Service Pack 1 
(Important)

Microsoft .NET Framework 3.5.1
(Important)

Windows Server 2008 R2 for x64-based Systems Service Pack 1 
(Important)

Windows Server 2008 R2 for Itanium-based Systems Service Pack 1

Internet Explorer 8
(Moderate)

Not applicable

Windows Server 2008 R2 for Itanium-based Systems Service Pack 1 
(Important)

Windows Server 2008 R2 for Itanium-based Systems Service Pack 1 
(Important)

Microsoft .NET Framework 3.5.1
(Important)

Windows Server 2008 R2 for Itanium-based Systems Service Pack 1 
(Important)

Windows 8 and Windows 8.1

Bulletin Identifier

Bulletin 1

Bulletin 2

Bulletin 5

Bulletin 6

Bulletin 8

Bulletin 9

Aggregate Severity Rating

Critical

Critical

Important

Important

Important

Important

Windows 8 for 32-bit Systems

Internet Explorer 10
(Critical)

Windows 8 for 32-bit Systems
(Professional edition only)
(Critical)

Windows 8 for 32-bit Systems 
(Important)

Windows 8 for 32-bit Systems 
(Important)

Microsoft .NET Framework 3.5
(Important)

Windows 8 for 32-bit Systems 
(Important)

Windows 8 for x64-based Systems

Internet Explorer 10
(Critical)

Windows 8 for x64-based Systems
(Professional edition only)
(Critical)

Windows 8 for x64-based Systems 
(Important)

Windows 8 for x64-based Systems 
(Important)

Microsoft .NET Framework 3.5
(Important)

Windows 8 for x64-based Systems 
(Important)

Windows 8.1 for 32-bit Systems

Internet Explorer 11
(Critical)

Windows 8.1 for 32-bit Systems
(Professional edition only)
(Critical)

Windows 8.1 for 32-bit Systems
(Important)

Windows 8.1 for 32-bit Systems
(Important)

Microsoft .NET Framework 3.5
(Important)

Windows 8.1 for 32-bit Systems
(Important)

Windows 8.1 for x64-based Systems

Internet Explorer 11
(Critical)

Windows 8.1 for x64-based Systems
(Professional edition only)
(Critical)

Windows 8.1 for x64-based Systems
(Important)

Windows 8.1 for x64-based Systems
(Important)

Microsoft .NET Framework 3.5
(Important)

Windows 8.1 for x64-based Systems
(Important)

Windows Server 2012 and Windows Server 2012 R2

Bulletin Identifier

Bulletin 1

Bulletin 2

Bulletin 5

Bulletin 6

Bulletin 8

Bulletin 9

Aggregate Severity Rating

Moderate

None

Important

Important

Important

Important

Windows Server 2012

Internet Explorer 10
(Moderate)

Not applicable

Windows Server 2012 
(Important)

Windows Server 2012 
(Important)

Microsoft .NET Framework 3.5
(Important)

Windows Server 2012 
(Important)

Windows Server 2012 R2

Internet Explorer 11
(Moderate)

Not applicable

Windows Server 2012 R2
(Important)

Windows Server 2012 R2
(Important)

Microsoft .NET Framework 3.5
(Important)

Windows Server 2012 R2
(Important)

Windows RT and Windows RT 8.1

Bulletin Identifier

Bulletin 1

Bulletin 2

Bulletin 5

Bulletin 6

Bulletin 8

Bulletin 9

Aggregate Severity Rating

Critical

None

Important

Important

None

Important

Windows RT

Internet Explorer 10
(Critical)

Not applicable

Windows RT
(Important)

Windows RT
(Important)

Not applicable

Windows RT
(Important)

Windows RT 8.1

Internet Explorer 11
(Critical)

Not applicable

Windows RT 8.1
(Important)

Windows RT 8.1
(Important)

Not applicable

Windows RT 8.1
(Important)

Server Core installation option

Bulletin Identifier

Bulletin 1

Bulletin 2

Bulletin 5

Bulletin 6

Bulletin 8

Bulletin 9

Aggregate Severity Rating

None

None

Important

Important

Important

Important

Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)

Not applicable

Not applicable

Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)
(Important)

Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)
(Important)

Not applicable

Not applicable

Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)

Not applicable

Not applicable

Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) 
(Important)

Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) 
(Important)

Not applicable

Not applicable

Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)

Not applicable

Not applicable

Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) 
(Important)

Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) 
(Important)

Microsoft .NET Framework 3.5.1 (Server Core installation)
(Important)

Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) 
(Important)

Windows Server 2012 (Server Core installation)

Not applicable

Not applicable

Windows Server 2012 (Server Core installation) 
(Important)

Windows Server 2012 (Server Core installation) 
(Important)

Microsoft .NET Framework 3.5 (Server Core installation)
(Important)

Windows Server 2012 (Server Core installation) 
(Important)

Windows Server 2012 R2 (Server Core installation)

Not applicable

Not applicable

Windows Server 2012 R2 (Server Core installation) 
(Important)

Windows Server 2012 R2 (Server Core installation) 
(Important)

Microsoft .NET Framework 3.5 (Server Core installation)
(Important)

Windows Server 2012 R2 (Server Core installation) 
(Important)

 

The Bottom Line: Be sure to leave your Windows Computers and Servers turned on Tuesday Night to receive the updates, then restart them first thing Wednesday morning!

Special note for Linux and Apple Users: No updates are necessary!