Tripwire Patch Priority Index for August 2024

Tripwire's August 2024 Patch Priority Index (PPI) brings together important vulnerabilities for Microsoft, Adobe and Google.

First on the list are patches for Microsoft Edge and Google Chromium that resolve 12 vulnerabilities, including information disclosure, remote code execution, and memory corruption vulnerabilities.

Up next are patches for Microsoft Outlook, PowerPoint, Visio, Excel, Project, and Office that resolve remote code execution, elevation of privilege, and spoofing vulnerabilities.

Up next are patches for Adobe Reader and Acrobat. These patches resolve 12 issues, including arbitrary code execution, elevation of privilege, and information disclosure vulnerabilities.

Next are patches that affect components of the core Windows operating system. These patches resolve over 65 vulnerabilities, including elevation of privilege, information disclosure, security feature bypass, denial of service, and remote code execution vulnerabilities. These vulnerabilities affect core Windows, Kernel, Layer-2 Bridge Network Driver, Secure Boot, LSA, Network Virtualization, Win32k, Mark of the Web, DWM core, and others.

Next up are patches for .NET and Visual Studio that resolve information disclosure and denial of service vulnerabilities.

Lastly, administrators should focus on server-side patches for Windows DNS and Dynamics. These patches resolve spoofing and cross-site scripting vulnerabilities.