Assessing the risk of public issues currently being tracked by the MSRC
At Microsoft, as at most large software vendors, we are likely to have publicly known issues under investigation at any given time. This is what we do on the Security Research & Defense team. Recently we’ve seen confusion from folks trying to make sense of some of the current public issues. To help clear that up, we offer this table of information to help customers make a risk assessment for their particular environment. Note that applying the Microsoft-recommended workaround for any issue in the table removes the risk posed by the issue entirely.
Assessing the risk of public issues currently being tracked by the MSRC - Security Research & Defense - Site Home - TechNet Blogs