This security update resolves a vulnerability in Microsoft Windows. The vulnerability could allow elevation of privilege if an attacker engineered a cross-site scripting (XSS) scenario by inserting a malicious script into a webpage search parameter. A user would have to visit a specially crafted webpage where the malicious script would then be executed.
To learn more about the vulnerability, see Microsoft Security Bulletin MS15-087.
To learn more about the vulnerability, see Microsoft Security Bulletin MS15-087.