Tripwire Patch Priority Index for March 2018

Image

Tripwire's March 2018 Patch Priority Index (PPI) brings together the top vulnerabilities from Microsoft and Adobe. First on the patch priority list this month are patches for Microsoft Browsers and Scripting Engine. The patches for Internet Explorer and Microsoft Edge resolve one elevation of privilege vulnerability and four information disclosure vulnerabilities. The patches for Microsoft's Scripting Engine address numerous memory corruption and information disclosure vulnerabilities. Next on the patch priority list this month are patches for Adobe Flash Player for Windows, Macintosh, Linux, and Chrome OS. These Adobe Flash patches address use-after-free and type-confusion vulnerabilities, which can lead to code execution in the contexts of the current user if successfully exploited. Up next are patches for Microsoft Office and Microsoft Access. These patches address security feature bypass, information disclosure, memory corruption, and remote code execution vulnerabilities. Next, administrators want to focus on the patches available for Windows, Hyper-V, and Windows Kernel. These patches address numerous vulnerabilities throughout the Windows systems. Last but not least for this month, administrators should focus on patches available for Microsoft Exchange Server and SharePoint. An elevation of privilege and two information disclosure vulnerabilities are fixed by the Exchange patch. The patches for SharePoint address 13 elevation of privilege vulnerabilities. To learn more about Tripwire’s Vulnerability and Exposure Research Team (VERT), click here.