Microsoft have released a security advisory on the 13th of December 2023 in line with their regular monthly patch schedule which includes a number of updates to address seven (7) medium risk vulnerabilities.
These updates address vulnerabilities which may impact services through Denial of Service, Elevation of Privilege, Remote Code Execution, Information Disclosure and Spoofing.
For more information please see: Microsoft Security Update
This release consists of security updates for the following products, features and roles:
- Windows Media
- Microsoft Edge (Chromium-based)
- Microsoft Office Outlook
- Microsoft Dynamics
- Microsoft Windows DNS
- Azure Connected Machine Agent
- Azure Machine Learning
- Windows MSHTML Platform
- Windows USB Mass Storage Class Driver
- Windows Internet Connection Sharing (ICS)
- Windows Win32K
- Windows Kernel
- Microsoft Bluetooth Driver
- Windows DHCP Server
- Windows ODBC Driver
- Windows Kernel-Mode Drivers
- XAML Diagnostics
- Windows DPAPI (Data Protection Application Programming Interface)
- Windows Telephony Server
- Microsoft WDAC OLE DB provider for SQL
- Microsoft Office Word
- Windows Defender
- Microsoft Power Platform Connector
- Windows Local Security Authority Subsystem Service (LSASS)
- Windows Cloud Files Mini Filter Driver
Matsco recommends any affected systems are updated as soon as convenient.