IDG Contributor Network: Four critical patches for November Patch Tuesday update core Windows and Office components

Microsoft's November Patch Tuesday brings us four critical updates and eight important patches that attempt to resolve 54 reported vulnerabilities in Microsoft Windows and Microsoft Office. In addition to this release of 12 updates, we will shortly see Microsoft refresh the Windows 10 desktop platform with the Fall Refresh or Threshold 2 (build 1511). I expect to see this larger update of build 1511 released on Thursday.

MS15-112 -- Critical

The first Microsoft update for this November Patch Tuesday is MS15-112 which attempts to resolve 25 reported memory corruption errors in Microsoft Internet Explorer (IE). This update affects all versions of IE on both Microsoft's desktop and server platforms, with the potential for a remote code execution scenario. MS15-112 attempts to address numerous JScript, VBScript and improperly implemented ASLR security features. As is usually the case with these kinds of IE updates from Microsoft, the patch manifest includes a full refresh of all IE related DLL's and system files. In addition, the Microsoft exploitability ratings for each of these 25 issues range from lower severities to significant security issues. This is a patch now update from Microsoft.

To read this article in full or to leave a comment, please click here