IDG Contributor Network: 8 critical updates for this December Patch Tuesday
Microsoft has delivered a massive December Patch Tuesday with eight critical and four important updates. This month's patch release addresses a hefty 71 Windows vulnerabilities with two publicly reported exploits already "in the wild." The two Microsoft browser updates are good candidates for quick deployment but one Office update and a key Windows component may need some further testing.
MS15-124 -- Critical
The first update rated as critical for this December Patch Tuesday is MS15-124 which addresses a reported 30 vulnerabilities that could lead to a potential remote code execution scenario in Microsoft Internet Explorer (IE). MS15-124 affects all currently supported versions of IE and addresses a number of VBScript, memory handling, XSS and cross-domain security handling issues. This update refreshes all of the IE related binaries and therefore a full system restart will be required for all affected workstations and servers. The exploitation profile for this update is quite high, but does not include any zero-day vulnerabilities. This is a patch now update.
To read this article in full or to leave a comment, please click here