This post has been republished via RSS; it originally appeared at: MSRC Security Update Guide.
Updated the vulnerability title and description to correctly identify Microsoft Configuration Manager as the affected product. Added an FAQ explaining the exploitation requirements. This is an informational change only; the affected products, security updates, severity, and CVSS scores are unchanged.