In keeping with its normal schedule, Microsoft today released its monthly batch of security bulletins for December. This month sets a new record, with 17 bulletins covering at least 38 identified vulnerabilities. Two of these have a maximum severity rating of Critical, fourteen are rated Important, and one Moderate. There are Critical updates for all supported versions of Windows. There are also two Important patches for Microsoft Office, and one each for Works 9 and SharePoint Server. There is one Moderate patch for Exchange Server. My preview post for this month has a breakdown of patches by Windows version and severity.
Microsoft says that eight of these patches will definitely require a system restart, and the remaining 9 may do so. Further details, and download links for the individual patches, are given in the Security Bulletin Summary. As always, you should update your system(s) as soon as you conveniently can.
As usual, the good folks at the SANS Internet Storm Center have posted their own summary of this month’s patches, along with their assessment of the severity of each.