December Patch Tuesday brings a mass of security fixes

ساخت وبلاگ

This month’s Patch Tuesday has brought along a large number of fixes affecting Windows, Office, Internet Explorer, Edge, Exchange Server and course the Malware Protection Engine used in Defender, discovered by the GCHQ.

In total 34 fixes are being delivered, including some of the bundled Flash Player in Windows.

Fortunately, none of the potential exploits has been used in the wild, meaning once applied your PC should be safe once more.

The full list of patches can be seen below.

TagCVE IDCVE Title
Microsoft OfficeMicrosoft Office Defense in Depth Update
Adobe Flash PlayerDecember 2017 Flash Security Update
Microsoft Exchange ServerMicrosoft Exchange Defense in Depth Update
Device GuardMicrosoft Windows Security Feature Bypass Vulnerability
Microsoft EdgeMicrosoft Edge Memory Corruption Vulnerability
Microsoft Exchange ServerMicrosoft Exchange Spoofing Vulnerability
Microsoft Malware Protection EngineMicrosoft Malware Protection Engine Remote Code Execution Vulnerability
Microsoft Malware Protection EngineMicrosoft Malware Protection Engine Remote Code Execution Vulnerability
Microsoft OfficeMicrosoft Office Information Disclosure Vulnerability
Microsoft OfficeMicrosoft SharePoint Elevation of Privilege Vulnerability
Microsoft OfficeMicrosoft Excel Remote Code Execution Vulnerability
Microsoft OfficeMicrosoft PowerPoint Information Disclosure Vulnerability
Microsoft Scripting EngineScripting Engine Memory Corruption Vulnerability
Microsoft Scripting EngineScripting Engine Memory Corruption Vulnerability
Microsoft Scripting EngineScripting Engine Memory Corruption Vulnerability
Microsoft Scripting EngineScripting Engine Memory Corruption Vulnerability
Microsoft Scripting EngineScripting Engine Memory Corruption Vulnerability
Microsoft Scripting EngineScripting Engine Information Disclosure Vulnerability
Microsoft Scripting EngineScripting Engine Information Disclosure Vulnerability
Microsoft Scripting EngineScripting Engine Memory Corruption Vulnerability
Microsoft Scripting EngineScripting Engine Memory Corruption Vulnerability
Microsoft Scripting EngineScripting Engine Memory Corruption Vulnerability
Microsoft Scripting EngineScripting Engine Information Disclosure Vulnerability
Microsoft Scripting EngineScripting Engine Memory Corruption Vulnerability
Microsoft Scripting EngineScripting Engine Memory Corruption Vulnerability
Microsoft Scripting EngineScripting Engine Memory Corruption Vulnerability
Microsoft Scripting EngineScripting Engine Memory Corruption Vulnerability
Microsoft Scripting EngineScripting Engine Memory Corruption Vulnerability
Microsoft Scripting EngineScripting Engine Memory Corruption Vulnerability
Microsoft Scripting EngineScripting Engine Memory Corruption Vulnerability
Microsoft Scripting EngineScripting Engine Memory Corruption Vulnerability
Microsoft Scripting EngineScripting Engine Memory Corruption Vulnerability
Microsoft Scripting EngineScripting Engine Memory Corruption Vulnerability
Microsoft Scripting EngineScripting Engine Memory Corruption Vulnerability
Microsoft Scripting EngineScripting Engine Memory Corruption Vulnerability
Microsoft WindowsWindows RRAS Service Remote Code Execution Vulnerability
Microsoft WindowsMicrosoft Windows Information Disclosure Vulnerability

The full details can be seen at Microsoft’s official Security Update Guide here.

Via BleepingComputer.

Some links in the article may not be viewable as you are using an AdBlocker. Please add us to your whitelist to enable the website to function properly.

Related
microsoft news...
ما را در سایت microsoft news دنبال می کنید

برچسب : نویسنده : محمد رضا جوادیان microsoftnews بازدید : 252 تاريخ : چهارشنبه 22 آذر 1396 ساعت: 19:15