An elevation of privilege exists in Microsoft Windows when the Universal Description, Discovery, and Integration (UDDI) Services improperly validate or sanitize the search parameter in a FRAME tag. An attacker who successfully exploited this vulnerability could leak authorization cookies or unexpectedly redirect a user to a malicious webpage.
To exploit the vulnerability, an attacker could engineer a cross-site scripting (XSS) scenario by inserting a malicious script into a webpage search parameter. When a user visits the specially crafted webpage the malicious script is executed. This update addresses the vulnerability by correcting how the UDDI Services encode and validate the parameter.

Further information on this exploit is available at : MS15-087