The host is missing a critical security update according to Microsoft security bulletin, MS15-128. The update is required to fix a graphics memory corruption vulnerability. A flaw is present in application, which improperly handles specially crafted embedded fonts. An attacker who successfully exploited these vulnerabilities could install programs; view, change, or delete data; or create new accounts with full user rights.