Vulnerabilities are weaknesses in software that enable an attacker to compromise the integrity, availability, or confidentiality of that software. This paper describes the process that Microsoft uses to investigate and release security updates that address vulnerabilities in the software it produces.