Microsoft have released a security advisory on the 10th of January 2024 in line with their regular monthly patch schedule which includes a number of updates to address seven (7) medium risk vulnerabilities.
These updates address vulnerabilities which may impact services through Denial of Service, Elevation of Privilege, Remote Code Execution, Security Restriction Bypass, Information Disclosure and Spoofing.
For more information please see: Microsoft Security Update
This release consists of security updates for the following products, features and roles:
- SQL Server
- .NET and Visual Studio
- Windows Scripting
- Windows Common Log File System Driver
- Windows ODBC Driver
- Windows Online Certificate Status Protocol (OCSP) SnapIn
- Visual Studio
- Windows Group Policy
- Microsoft Virtual Hard Drive
- Windows Message Queuing
- Windows BitLocker
- .NET Core & Visual Studio
- Windows Authentication Methods
- Azure Storage Mover
- Microsoft Office
- Windows Subsystem for Linux
- Windows Cryptographic Services
- Windows Win32K
- Windows Win32 Kernel Subsystem
- Windows AllJoyn API
- Windows Nearby Sharing
- Windows Themes
- Windows Local Security Authority Subsystem Service (LSASS)
- Windows Collaborative Translation Framework
- Windows Libarchive
- Windows Kernel
- Windows Hyper-V
- Unified Extensible Firmware Interface
- Microsoft Bluetooth Driver
- Remote Desktop Client
- Windows Kernel-Mode Drivers
- Windows Cloud Files Mini Filter Driver
- .NET Framework
- Windows TCP/IP
- Windows Server Key Distribution Service
- Microsoft Office SharePoint
- Microsoft Identity Services
- Microsoft Devices
Matsco recommends any affected systems are updated as soon as convenient.