Microsoft has updated security bulletin MS14-075 Vulnerabilities in Microsoft Exchange Server Could Allow Elevation of Privilege
Microsoft Security Bulletin Releases for December 10, 2014