Microsoft has released a security advisory on the 15th of December 2021 in line with their regular monthly patch schedule which includes a number of updates to address extremely high risk vulnerabilities.
These updates address vulnerabilities which may impact Denial of Service, Elevation of Privilege, Remote Code Execution, Security Restriction Bypass, Information Disclosure and Spoofing
For more information please see: Microsoft Security Update Guide – Release Notes – Security Update
This release consists of security updates for the following products, features and roles
- Windows Media
- Microsoft Windows Codecs Library
- Microsoft Defender for IoT
- Internet Storage Name Service
- Microsoft Local Security Authority Server (lsasrv)
- Windows Encrypting File System (EFS)
- Windows DirectX
- Microsoft Message Queuing
- Windows Remote Access Connection Manager
- Windows Common Log File System Driver
- Azure Bot Framework SDK
- Windows Storage Spaces Controller
- Windows SymCrypt
- Windows NTFS
- Windows Event Tracing
- Remote Desktop Client
- Role: Windows Fax Service
- Windows Storage
- Windows Update Stack
- Windows Kernel
- Windows Digital TV Tuner
- Role: Windows Hyper-V
- Windows TCP/IP
- Office Developer Platform
- Microsoft Office
- ASP.NET Core & Visual Studio
- Visual Studio Code
- Microsoft Devices
- Windows Print Spooler Components
- Windows Mobile Device Management
- Windows Installer
- Microsoft PowerShell
Matsco recommends any affected systems are updated as soon as convenient.