Patch Tuesday: Microsoft Security Bulletin Summary for December 2014

Last Microsoft Security Bulletin December 2014 Patch Tuesday of this year brings Seven security bulletins covering a total of 24 vulnerabilities. Now the total count for this year reached to 85. The high priority fix is for Internet Explorer, Microsoft Word and Microsoft Office Web Apps, VBScript Scripting Engine. Internet Explorer alone addresses 14 out of 24 vulnerabilities.

This month Three bulletins are rated as Critical addressing 17 vulnerabilities and four are rated as Important.

Critical security updates addresses security issues in Internet Explorer 6 to Internet Explorer 11, Microsoft Word and Microsoft Office Web Apps and VBScript Scripting Engine. All of them potentially allow Remote Code Execution and even though Microsoft Office, Microsoft Excel are marked as Important it allows Remote Code Execution. Overall Five out of 7 bulletins allow Remote Code Execution.

Four important security updates address issues in Microsoft Exchange Server, Microsoft Office, Microsoft Excel and Microsoft Graphics Component

The Microsoft Exchange Sever patch was supposed to be released last month, but was held back due to some breaking issue in the Installer package. Microsoft also re-released two bulletins today MS14-065 (Internet Explorer) and MS14-066 (Schannel).

Microsoft security bulletin summary for December 2014 in order of severity.

MS14-075: Vulnerabilities in Microsoft Exchange Server Could Allow Elevation of Privilege (3009712)

Severity Rating: Important

Affected Software: Microsoft Exchange Server

Impact: Elevation of Privilege

MS14-080: Cumulative Security Update for Internet Explorer (3008923)

Severity Rating: Critical

Affected Software: Internet Explorer

Impact: Remote Code Execution

MS14-081: Vulnerabilities in Microsoft Word and Microsoft Office Web Apps Could Allow Remote Code Execution (3017301)

Severity Rating: Critical

Affected Software: Microsoft Word and Microsoft Office Web Apps

Impact: Remote Code Execution

MS14-082: Vulnerability in Microsoft Office Could Allow Remote Code Execution (3017349)

Severity Rating: Important

Affected Software: Microsoft Office

Impact: Remote Code Execution

MS14-083: Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (3017347)

Severity Rating: Important

Affected Software: Microsoft Excel

Impact: Remote Code Execution

MS14-084: Vulnerability in VBScript Scripting Engine Could Allow Remote Code Execution (3016711)

Severity Rating: Critical

Affected Software: VBScript Scripting Engine

Impact: Remote Code Execution

MS14-085: Vulnerability in Microsoft Graphics Component Could Allow Information Disclosure (3013126)

Severity Rating: Important

Affected Software: Microsoft Graphics Component

Impact: Information Disclosure

SecPod Saner detects these vulnerabilities and automatically fixes by applying security updates. Download Saner now and keep your systems updated and secure.

– Veerendra GG