This security update resolves vulnerabilities in Microsoft Windows. The more severe of the vulnerabilities could allow remote code execution if Microsoft Windows PDF Library incorrectly handles application programming interface (API) calls. This could allow an attacker to run arbitrary code on the user’s system. An attacker who successfully exploited the vulnerabilities could gain the same user rights as the current user. Customers whose accounts are configured to have fewer user rights on the system could be less affected than those who operate with administrative user rights. However, an attacker would be unable to force users to download or open a malicious PDF document.
To learn more about the vulnerability, see Microsoft Security Bulletin MS16-012.
To learn more about the vulnerability, see Microsoft Security Bulletin MS16-012.