Summary

This security update resolves vulnerabilities in Windows. These vulnerabilities could allow elevation of privilege if an attacker logs on to the system and runs a specially crafted application. To exploit these vulnerabilities, an attacker would first have to log on to the system. The security update addresses the vulnerabilities by correcting how Windows validates impersonation events. For more information about the vulnerabilities, see the "More Information" section.

Introduction

Microsoft has released security bulletin MS15-038. To learn more about this security bulletin:

How to obtain help and support for this security update

Help installing updates:Support for Microsoft UpdateSecurity solutions for IT professionals:TechNet Security Troubleshooting and SupportHelp protect your Windows-based computer from viruses and malware:Virus Solution and Security CenterLocal support according to your country:International Support

More Information

Known issues and more information about this security update

The following articles contain more information about this security update as it relates to individual product versions. The articles may contain known issue information. If this is the case, the known issue is listed under each article link.

  • 3045685 MS15-038: Description of the security update for Windows April 14, 2015

  • 3045999 MS15-038: Description of the security update for Windows April 14, 2015

Windows Server 2003 (all editions)Reference tableThe following table contains the security update information for this software.

Security update file names

For all supported 32-bit editions of Windows Server 2003:WindowsServer2003-KB3045685-x86-ENU.exeWindowsServer2003-KB3045999-x86-ENU.exe

For all supported x64-based editions of Windows Server 2003:WindowsServer2003-KB3045685-x64-ENU.exeWindowsServer2003-KB3045999-x64-ENU.exe

For all supported Itanium-based editions of Windows Server 2003:WindowsServer2003-KB3045685-ia64-ENU.exeWindowsServer2003-KB3045999-ia64-ENU.exe

Installation switches

See Microsoft Knowledge Base Article 934307

Update Log File

KB3045685.logKB3045999.log

Restart requirement

You must restart your system after you apply this security update.

Removal information

Use the Add or Remove Programs item in Control Panel or the Spuninst.exe utility that is located in the %Windir%\$NTUninstallKB3045685$\Spuninst folder.Use the Add or Remove Programs item in Control Panel or the Spuninst.exe that is utility located in the %Windir%\$NTUninstallKB3045999$\Spuninst folder

File information

See Microsoft Knowledge Base Article 3045685See Microsoft Knowledge Base Article 3045999

Registry key verification

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows Server 2003\SP3\KB3045685\FilelistHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows Server 2003\SP3\KB3045999\Filelist

Windows Vista (all editions)Reference tableThe following table contains the security update information for this software.

Security update file names

For all supported 32-bit editions of Windows Vista:Windows6.0-KB3045685-x86.msuWindows6.0-KB3045999-x86.msu

For all supported x64-based editions of Windows Vista:Windows6.0-KB3045685-x64.msuWindows6.0-KB3045999-x64.msu

Installation switches

See Microsoft Knowledge Base Article 934307

Restart requirement

You must restart your system after you apply this security update.

Removal information

WUSA.exe does not support the removal of updates. To uninstall an update that was installed by WUSA, click Control Panel, and then click Security. Under Windows Update, click View installed updates, and select from the list of updates.

File information

See Microsoft Knowledge Base Article 3045685See Microsoft Knowledge Base Article 3045999

Registry key verification

Note A registry key does not exist to validate the presence of this update.

Windows Server 2008 (all editions)Reference tableThe following table contains the security update information for this software.

Security update file names

For all supported 32-bit editions of Windows Server 2008:Windows6.0-KB3045685-x86.msuWindows6.0-KB3045999-x86.msu

For all supported x64-based editions of Windows Server 2008:Windows6.0-KB3045685-x64.msuWindows6.0-KB3045999-x64.msu

For all supported Itanium-based editions of Windows Server 2008:Windows6.0-KB3045685-ia64.msuWindows6.0-KB3045999-ia64.msu

Installation switches

See Microsoft Knowledge Base Article 934307

Restart requirement

You must restart your system after you apply this security update.

Removal information

WUSA.exe does not support the removal of updates. To uninstall an update that was installed by WUSA, click Control Panel, and then click Security. Under Windows Update, click View installed updates, and select from the list of updates.

File information

See Microsoft Knowledge Base Article 3045685See Microsoft Knowledge Base Article 3045999

Registry key verification

Note A registry key does not exist to validate the presence of this update.

Windows 7 (all editions)Reference tableThe following table contains the security update information for this software.

Security update file name

For all supported 32-bit editions of Windows 7:Windows6.1-KB3045685-x86.msu Windows6.1-KB3045999-x86.msu

For all supported x64-based editions of Windows 7:Windows6.1-KB3045685-x64.msu Windows6.1-KB3045999-x64.msu

Installation switches

See Microsoft Knowledge Base Article 934307

Restart requirement

You must restart your system after you apply this security update.

Removal information

To uninstall an update that was installed by WUSA, use the /Uninstall setup switch. Or click Control Panel, click System and Security, and then under Windows Update, click View installed updates, and select from the list of updates.

File information

See Microsoft Knowledge Base Article 3045685See Microsoft Knowledge Base Article 3045999

Registry key verification

Note A registry key does not exist to validate the presence of this update.

Windows Server 2008 R2 (all editions)Reference tableThe following table contains the security update information for this software.

Security update file name

For all supported x64-based editions of Windows Server 2008 R2:Windows6.1-KB3045685-x64.msuWindows6.1-KB3045999-x64.msu

For all supported Itanium-based editions of Windows Server 2008 R2:Windows6.1-KB3045685-ia64.msuWindows6.1-KB3045999-ia64.msu

Installation switches

See Microsoft Knowledge Base Article 934307

Restart requirement

You must restart your system after you apply this security update.

Removal information

To uninstall an update that was installed by WUSA, use the /Uninstall setup switch. Or click Control Panel, click System and Security, and then under Windows Update, click View installed updates, and select from the list of updates.

File information

See Microsoft Knowledge Base Article 3045685See Microsoft Knowledge Base Article 3045999

Registry key verification

Note A registry key does not exist to validate the presence of this update.

Windows 8 and Windows 8.1 (all editions)Reference TableThe following table contains the security update information for this software.

Security update file name

For all supported 32-bit editions of Windows 8:Windows8-RT-KB3045685-x86.msu Windows8-RT-KB3045999-x86.msu

For all supported x64-based editions of Windows 8:Windows8-RT-KB3045685-x64.msuWindows8-RT-KB3045999-x64.msu

For all supported 32-bit editions of Windows 8.1:Windows8.1-KB3045685-x86.msu Windows8.1-KB3045999-x86.msu

For all supported x64-based editions of Windows 8.1:Windows8.1-KB3045685-x64.msu Windows8.1-KB3045999-x64.msu

Installation switches

See Microsoft Knowledge Base Article 934307

Restart requirement

Yes, you must restart your system after you apply this security update.

Removal information

To uninstall an update installed by WUSA, use the /Uninstall setup switch or click Control Panel, click System and Security, click Windows Update, and then under See also, click Installed updates, and select from the list of updates.

File information

See Microsoft Knowledge Base Article 3045685See Microsoft Knowledge Base Article 3045999

Registry key verification

Note A registry key does not exist to validate the presence of this update.

Windows Server 2012 and Windows Server 2012 R2 (all editions)Reference tableThe following table contains the security update information for this software.

Security update file name

For all supported editions of Windows Server 2012:Windows8-RT-KB3045685-x64.msuWindows8-RT-KB3045999-x64.msu

For all supported editions of Windows Server 2012 R2:Windows8.1-KB3045685-x64.msuWindows8.1-KB3045999-x64.msu

Installation switches

See Microsoft Knowledge Base Article 934307

Restart requirement

You must restart your system after you apply this security update.

Removal information

To uninstall an update that was installed by WUSA, use the /Uninstall setup switch. Or click Control Panel, click System and Security, click Windows Update, and then under See also, click Installed updates, and select from the list of updates.

File information

See Microsoft Knowledge Base Article 3045685See Microsoft Knowledge Base Article 3045999

Registry key verification

Note A registry key does not exist to validate the presence of this update.

Windows RT and Windows RT 8.1 (all editions)Reference tableThe following table contains the security update information for this software.

Deployment

These updates are available through Windows Update only.

Restart Requirement

Yes, you must restart your system after you apply this security update.

Removal Information

Click Control Panel, click System and Security, click Windows Update, and then under See also, click Installed updates, and select from the list of updates.

File Information

See Microsoft Knowledge Base Article 3045685See Microsoft Knowledge Base Article 3045999

File information

The English (United States) version of this software update installs files that have the attributes that are listed in the following tables. The dates and times for these files are listed in Coordinated Universal Time (UTC). The dates and times for these files on your local computer are displayed in your local time and with your current daylight saving time (DST) bias. Additionally, the dates and times may change when you perform certain operations on the files.

Package name

Package Hash SHA1

Package Hash SHA2

Windows10.0-KB3045685-x64.msu

931D749E60883C1C03348EDB6F0FF5BC9268FE3C

6DE58473393C9037CB8DB713F6CCAFC583A30B3BBCFFDA39AD88C9135582EF3B

Windows10.0-KB3045685-x86.msu

B5E163493C58A8DD73269C06E2D45DFF7A2E6F18

1C8C67DCA56FC8C3C854EE925789AE60FF7C81F49D9F1B89B95343FE80DB4E78

Windows6.0-KB3045685-ia64.msu

F02C08B343D27261CB9B61C8A012A628C0C297C4

4DD8D35677AA14EB9E57C01465D22A82527490D470135224A23F5E33786E921C

Windows6.0-KB3045685-x64.msu

E01B78A19253A159E75A7434A19CFBA053B9E6AC

3F734FE8ED357AF897DF50A070997264C0E04BA8C9B8DD84175F56C82E179FE3

Windows6.0-KB3045685-x86.msu

376651B0D6E1EB5816A09B1D45C3FCA0EC756DC2

9F889230936F6A29FA85D7FA645466C1D968F2B156F38CE057A6362411F6720B

Windows6.0-KB3045999-ia64.msu

2331EE460DCC953BA9197212B4A56A4F0EFE0A96

C102BCB765E6C13ADF66E11A4C397AEC5BBB837D68CAF6460AE0462A8196FC81

Windows6.0-KB3045999-x64.msu

264BF4D2102BDBA0606E57A625C707BC380A3587

C98D5003C2C3D5A26A0F5A6736810FF46B6ECE877EDD059CD7D6E423A43746B4

Windows6.0-KB3045999-x86.msu

C08CC7A04839666CFA3D396229ACDDC4A2D46093

880A3AAE87F6180B98E65B5A3E9BDA02FD5C8476A38010CB2CF1F784FDF8540D

Windows6.1-KB3045685-ia64.msu

03FBA1677949593F188138928F26B8B80C55CAFF

31E3488176AF504C854A22BE65E90D30A97C1B8C842BE864D36F5680DD397D42

Windows6.1-KB3045685-x64.msu

C43565170F9830AAA10A790D0C13122A75E8172C

E12963531A4CDA3C9DCF0E9CEEC5A5E3ABB1566DD9CD63F7E691713826E79EB7

Windows6.1-KB3045685-x86.msu

4FD2C3120125222145ADFF12D4C3D5D4966C28B2

43382B381CD045EFD32AB07B4E6A0E3BE0993DCEEF054C1053B73A3482910538

Windows6.1-KB3045999-ia64.msu

CDD6D9E7164E29A1CA81A3DD9146945A855EBA23

806C15BE47FDFD96301B2422B64ADD7E44F70F578DE925DB47B5DD246EB0433C

Windows6.1-KB3045999-x64.msu

18CCFC0E12B525D2897003C476875579D342D4D6

41975028C08C48EE1486D147098453A4C3D0B46FF9493B0070C09340596F64AE

Windows6.1-KB3045999-x86.msu

C1B3FFE9729705276ABF7D369B81C734E62F5884

F0A2A8C9D3444009E756230A5D4C5770874E6CB3122EBF08EAB1C2FA574F0A32

Windows8.1-KB3045685-x64.msu

E34F6A8551808EEE89B2E4C58388D746CA1FB1EB

3891D796B26765A94A9D2278403AE8E9B4881BB896658A9229CB39C196723B2E

Windows8.1-KB3045685-x86.msu

626BC97F40FB3F4187966064FB85BE2D0A66075F

B4105A72416CD4D2DA5A91F818FEB38806F28EDCCD00F0F45ABE60C7EE5AB742

Windows8.1-KB3045999-x64.msu

24D58EC9A3369BF798CB8353D8D6055107966C06

C11744C3A04CBA2F796E7190EF1F2CC0EAE5D22C048CDFCE5723974B72F30DFE

Windows8.1-KB3045999-x86.msu

B8D8D4498F9265F505F6938ADA99DFCE0ACF0DDC

26308C1F8C427499635215482D97384DC4387C288A88F3D16743D33672D08524

Windows8-RT-KB3045685-x64.msu

6A4A1F930FE66FD4D9AB934A2FEDF65B22CE81E6

8CFEF95C6C74A89DDDF285C5DDA6FD063C051041DDFC16A7699540AEB64E3E72

Windows8-RT-KB3045685-x86.msu

5303C0FB4B695CD5EDABE08B286BA1DDA00C4451

51348A27F63342CBB04F9B31A1D6095A0C234D85214D02A1D1DB63FD245C889C

Windows8-RT-KB3045999-x64.msu

D504BFD4FD6C626B1C45ED6027C03259F85EF229

B2488FDFB11A22C7B0D0E0E1B3B6B05700D418FEA667E280FCA1701897CD8674

Windows8-RT-KB3045999-x86.msu

74F2E8C5F30EBEEF67662A5317220E54A1C4DCA5

79D90D046DB53ADC2E3EB1D2C244903B6E1492048558937A36C3B926A65FE88A

WindowsServer2003-KB3045685-x64-ENU.exe

7035B6F96B9A86E2B746E535A777A9448DA9D691

512791CF4C0231DDD0E54CFF9414DB4309F9C4E0B30D982A909ED3637D14BBCC

WindowsServer2003-KB3045685-x86-ENU.exe

6F64EDE3FA282D20578538041248FA9A8EA4172A

07277EBB4B072574CB07BD307773A98D801917D37C04084ABAFD57AE1A136E72

WindowsServer2003-KB3045999-ia64-DEU.exe

D3F69C1DD8886A22973E0988483E6B18A278B225

8AED9446F2864740D0058498842C420D6B6331D4F61189C570DCE4C5AF8B3D9A

WindowsServer2003-KB3045999-ia64-ENU.exe

D8E0B667F6A3AE81E7E1F669093FB92A3A0F9134

3D0EFECD1E877DA02F1DA26507962B57C0B40CB7CE1FDA945FEE742FD03C2F00

WindowsServer2003-KB3045999-ia64-FRA.exe

E30F03BE70533DF9D73C0328A18AA462F5B5FD7D

3D69883885A280E3B50BEC4293EBE14847D9F5F4717112284DC4C917F0988B64

WindowsServer2003-KB3045999-ia64-JPN.exe

EF705DF76752B4707449C4E5A1D7F04450DB5410

F2DF8A01AA71DB82E2B29285A9988A80BCEF84CE8AC896E868153DD279DB1F8C

WindowsServer2003-KB3045999-x64-CHS.exe

28C7E2816FE751725552998EC3AF3EB8AC6BE4C6

E4C7D21FC311CBA1305731610346851E04C9E052E6CF81DA8F330A5EF060C6F7

WindowsServer2003-KB3045999-x64-CHT.exe

33B194E8C474A98EF1607BF6ED5CA845F406937B

8C473B4681213D75C1913F192EC93E123D7EEDE696A1A3D7EF109C80DEBEDEBC

WindowsServer2003-KB3045999-x64-DEU.exe

0A90711D28EB6E1F3C8BAFF2C1BA826C29668E75

C8A5983D9E6F0F616EAAA9D98BB242193549117D7A3620D08FB393C72020DACE

WindowsServer2003-KB3045999-x64-ENU.exe

54E8C58006C37C5B968A7286F5DC4720B5D65C37

19FD204DA6BE6281A8B8BE57836B11E43A9491A6B34829E8EE7B8C070D6E1194

WindowsServer2003-KB3045999-x64-ESN.exe

AEF20645FB46F5552C6E025BB3B5DD8DDB80225D

45914A1A77751DA461391440225F4B107B0B946278F4CAF7325E1468619EAB80

WindowsServer2003-KB3045999-x64-FRA.exe

06071ACE70E3395E025DB3FBBF6B6F8ABBF15A88

B96017E56F9E335F076B323181C1CFD98D315AD21E97B18B955392F62BFD88D9

WindowsServer2003-KB3045999-x64-ITA.exe

2497972A041B0EB2E9B15F5115408F44E62C2263

ABC9937702541DD0F34C45CB1998E679BD215B49FE49C9EE7C31B67F8EE290A7

WindowsServer2003-KB3045999-x64-JPN.exe

4F29C518875799E93598811B8F5DDFF81EBA53D9

DD18D54579960C1A20668D12E86451A5D4811F6EEA399273B27519CDBE34ED0B

WindowsServer2003-KB3045999-x64-KOR.exe

AEF8810FBE86D2E34326C1D5B740DD4B73DCEB95

7D88FDF5C71F9DE7821C6C482D20FCFDD264D1A158BDDF64B86AEFCAC72CEB5D

WindowsServer2003-KB3045999-x64-PTB.exe

B95FEC93A01CC601EC200706BDEA4146A6AF0539

A02268BEAA6642E5CEDCDD7D450903FA4186CB10EF025A4A28ED006AF3D1BAEB

WindowsServer2003-KB3045999-x64-RUS.exe

9932200211E87D03F4CC970A03A33F52E51A36C9

84A52E3B0E1A3E4C06F27F90D22B97A1D16C51DE7379B430708936C45F1FC51F

WindowsServer2003-KB3045999-x86-CHS.exe

EE57245890B187F966AEA8AB04347375B03CB4CB

BFCA7652C480C6C22E652CD0993B1AB8685583174375DF099A5FF600144CD7C0

WindowsServer2003-KB3045999-x86-CHT.exe

EF8EC040CB21AA96E7897A877CB696FE5522DD7C

70E2B50D9661D5BA92C4E6D72E4AD1756A7261B878EA3C341B2DF3BB52D5A99D

WindowsServer2003-KB3045999-x86-CSY.exe

1A8E21F9B70EC1EAE857B8DACE3C486A19ACF633

29C9BB14E8E84BEAF25D732FDBBF84C0497F62C39BBF408A1314448CA711D8DE

WindowsServer2003-KB3045999-x86-DEU.exe

67B84D6C619A06260CC7B4E64A32BDC6D38F9024

C75EAE0775D0389F6F1749FA7B7A47720CAF9A57623C2594273235073D67C008

WindowsServer2003-KB3045999-x86-ENU.exe

C4D12A0867963ABD74CAC8E6C8F2F57CB8B019CC

9CE2E0B9C531B9A76C06D44F5ECAABEA3A1C4FA52198BCD890F8E0ACF0CF1BEA

WindowsServer2003-KB3045999-x86-ESN.exe

4222324038010C5792A11C21A7F6F10A0D3DDD0F

09D6DE8F4E0896A438EB450EEBA3DB67991A5A5E18454B409EADB218ED1F064C

WindowsServer2003-KB3045999-x86-FRA.exe

8596A6B2915CD76963118EB27F73D80BDFFA3C28

F84577DDF4577191B1F8AB72B0B3077D84EF809CF79A101D8B12967D5AA0449C

WindowsServer2003-KB3045999-x86-HUN.exe

325AF8F071E9A786D6F0AD7AC3580EC77307108D

82B1C03D1D8C13B98F25694A675D79D0D9224D28B089390399A888C3651B9676

WindowsServer2003-KB3045999-x86-ITA.exe

62A60D435D4E19FE8757D6D0484E1B4831983559

124F08156E9F20DAA4CD47644CE107605559B12360146D7AB310E704F232621D

WindowsServer2003-KB3045999-x86-JPN.exe

27BBF9919BDBA786B073223B7A22957D74C37E45

B491DE19A69E1931430FDE37EE53B3E0FCE663A0371D5C2D752EC82BE8BEBF96

WindowsServer2003-KB3045999-x86-KOR.exe

E2F0CECAA2FF618FB2660F6B60D7D0F67DB5FB1C

95DDB3B6FDE48D2934E234EE37A5923DFEF15CC996149E29A5B0A7F184DF35EE

WindowsServer2003-KB3045999-x86-NLD.exe

85374E47286BB075B4B878A8002349D27AA698F5

32C51E22F60AD14C2C994A45742B858EF73BCEF3E16AF192770E58AB48C2C72D

WindowsServer2003-KB3045999-x86-PLK.exe

DFA26FE8A9FF8122DCBCA74DC62043D363994E91

E86B1A0748FEAA6F96F16C548C44125AE063BE8BA364F4315756C48E71CBF5EC

WindowsServer2003-KB3045999-x86-PTB.exe

FD5070762E72957930986534CE17A04308A5E3C5

0DDAD7B8F69E28631847788F44F0EF5DF01095A922328F7A300744796992E6A0

WindowsServer2003-KB3045999-x86-PTG.exe

2596ED0E3845A2C59F4118990E46E14610B0547D

5A672687C4FD50BBC5CE036AA7011ACE2CF2586AB66EC1CFC35B3D6D44F05717

WindowsServer2003-KB3045999-x86-RUS.exe

D166B79F3BF7E4ECCD239297E4833A0D8957D6EC

9B52D608998133204DD97BF8D6A04B6A6CFF77FF4613D9DAF48B59A8BA46F67D

WindowsServer2003-KB3045999-x86-SVE.exe

8DF4FD9867FD2BBF632E1C2161AEF15362C9F208

80C8B3A236E05EB4206D1B097592B82C3C80346ABDD58781989D7156E5FFB67E

WindowsServer2003-KB3045999-x86-TRK.exe

21A5D65AD34110E36EB0AC13FC0DAC43D6EFB13F

D63F319F13C9046E3C6A0D05A37CF17312936E2F943C579A45AD2C83E2186BAF

Need more help?

Want more options?

Explore subscription benefits, browse training courses, learn how to secure your device, and more.

Communities help you ask and answer questions, give feedback, and hear from experts with rich knowledge.