December's Patch Tuesday is a relatively quiet one on the Microsoft front.
Redmond has patched 34 vulnerabilities with only four rated as critical.
One vulnerability, a previously disclosed unpatched vulnerability in AMD central processing units, was shifted by AMD to software developers.
Then ensure that no privileged data is used in division operations prior to changing privilege boundaries, AMD adds, which is about as hard as it sounds.
We're not sure how Microsoft solved it, but the company noted that the latest builds of Windows enable the mitigation and provide protection against the vulnerability.
MSHTML is a core component of Windows that is used to render browser-based content.
An attacker could exploit this vulnerability by sending a specially crafted email which triggers automatically when it is retrieved and processed by the Outlook client.
This could lead to exploitation even before the email is viewed in the Preview Pane.
This could result in the attacker executing remote code on the victim's machine.
In other words, they could install or trigger malware on the target's machine.
Other vendors have synchronized their periodic updates with Microsoft.
Here are few major ones that you may find in your environment.
Adobe has released security updates to address multiple vulnerabilities in Adobe software.
Roid: Google released the Android December 2023 security updates with a fix for a critical zero-day.
Apache released security updates to address a vulnerability in Struts 2.
A remote attacker could exploit this vulnerability to take control of an affected system.
Apple issued emergency updates including patches for older iOS devices concerning two actively used zero-day vulnerabilities.
WordPress released version 6.4.2 that addresses a remote code execution vulnerability.
Cybersecurity risks should never spread beyond a headline.
Keep vulnerabilities in tow by using ThreatDown Vulnerability and Patch Management.
This Cyber News was published on www.malwarebytes.com. Publication date: Wed, 13 Dec 2023 17:43:24 +0000