December Patch Tuesday brings a mass of security fixes

This month’s Patch Tuesday has brought along a large number of fixes affecting Windows, Office, Internet Explorer, Edge, Exchange Server and course the Malware Protection Engine used in Defender, discovered by the GCHQ.

In total 34 fixes are being delivered, including some of the bundled Flash Player in Windows.

Fortunately, none of the potential exploits has been used in the wild, meaning once applied your PC should be safe once more.

The full list of patches can be seen below.

Tag	CVE ID	CVE Title
Microsoft Office		Microsoft Office Defense in Depth Update
Adobe Flash Player		December 2017 Flash Security Update
Microsoft Exchange Server		Microsoft Exchange Defense in Depth Update
Device Guard		Microsoft Windows Security Feature Bypass Vulnerability
Microsoft Edge		Microsoft Edge Memory Corruption Vulnerability
Microsoft Exchange Server		Microsoft Exchange Spoofing Vulnerability
Microsoft Malware Protection Engine		Microsoft Malware Protection Engine Remote Code Execution Vulnerability
Microsoft Malware Protection Engine		Microsoft Malware Protection Engine Remote Code Execution Vulnerability
Microsoft Office		Microsoft Office Information Disclosure Vulnerability
Microsoft Office		Microsoft SharePoint Elevation of Privilege Vulnerability
Microsoft Office		Microsoft Excel Remote Code Execution Vulnerability
Microsoft Office		Microsoft PowerPoint Information Disclosure Vulnerability
Microsoft Scripting Engine		Scripting Engine Memory Corruption Vulnerability
Microsoft Scripting Engine		Scripting Engine Memory Corruption Vulnerability
Microsoft Scripting Engine		Scripting Engine Memory Corruption Vulnerability
Microsoft Scripting Engine		Scripting Engine Memory Corruption Vulnerability
Microsoft Scripting Engine		Scripting Engine Memory Corruption Vulnerability
Microsoft Scripting Engine		Scripting Engine Information Disclosure Vulnerability
Microsoft Scripting Engine		Scripting Engine Information Disclosure Vulnerability
Microsoft Scripting Engine		Scripting Engine Memory Corruption Vulnerability
Microsoft Scripting Engine		Scripting Engine Memory Corruption Vulnerability
Microsoft Scripting Engine		Scripting Engine Memory Corruption Vulnerability
Microsoft Scripting Engine		Scripting Engine Information Disclosure Vulnerability
Microsoft Scripting Engine		Scripting Engine Memory Corruption Vulnerability
Microsoft Scripting Engine		Scripting Engine Memory Corruption Vulnerability
Microsoft Scripting Engine		Scripting Engine Memory Corruption Vulnerability
Microsoft Scripting Engine		Scripting Engine Memory Corruption Vulnerability
Microsoft Scripting Engine		Scripting Engine Memory Corruption Vulnerability
Microsoft Scripting Engine		Scripting Engine Memory Corruption Vulnerability
Microsoft Scripting Engine		Scripting Engine Memory Corruption Vulnerability
Microsoft Scripting Engine		Scripting Engine Memory Corruption Vulnerability
Microsoft Scripting Engine		Scripting Engine Memory Corruption Vulnerability
Microsoft Scripting Engine		Scripting Engine Memory Corruption Vulnerability
Microsoft Scripting Engine		Scripting Engine Memory Corruption Vulnerability
Microsoft Scripting Engine		Scripting Engine Memory Corruption Vulnerability
Microsoft Windows		Windows RRAS Service Remote Code Execution Vulnerability
Microsoft Windows		Microsoft Windows Information Disclosure Vulnerability

The full details can be seen at Microsoft’s official Security Update Guide here.

Via BleepingComputer.

برچسب: نویسنده: محمد رضا جوادیان تاريخ: چهارشنبه 22 آذر 1396 ساعت: 19:15

درباره سایت

آخرین مطالب

امکانات وب

December Patch Tuesday brings a mass of security fixes

صفحه بندی

آرشیو مطالب

پيوندهای روزانه

لینک دوستان

خبرنامه