MS15-087  Vulnerability in UDDI Services Could Allow Elevation of Privilege

2015-08-11 This security update resolves a vulnerability in Microsoft Windows. The vulnerability could allow elevation of privilege if an attacker engineered a cross-site scripting (XSS) scenario by inserting a malicious script into a webpage search parameter. A user would have to visit a specially crafted webpage where the malicious script would then be executed.
Vulnerabilities addressed in this bulletin:

UDDI Services Elevation of Privilege Vulnerability

An elevation of privilege exists in Microsoft Windows when the Universal Description, Discovery, and Integration (UDDI) Services improperly validate or sanitize the search parameter in a FRAME tag. An attacker who successfully exploited this vulnerability could leak authorization cookies or unexpectedly redirect a user to a malicious webpage.
CVE-2015-2475

Bulletin details at Microsoft.com