Tripwire Patch Priority Index for December 2022

Image

Tripwire's December 2022 Patch Priority Index (PPI) brings together important vulnerabilities for Microsoft.

First on the patch priority list this month are patches for Microsoft Edge, which resolve over 25 issues including use-after-free, type confusion, insufficient data validation, insufficient policy enforcement, and other vulnerabilities.

Next are patches for Microsoft Office, Outlook, OneNote, and Visio that resolve 8 vulnerabilities, including remote code execution and elevation of privilege vulnerabilities.

Up next are patches that affect components of the core Windows operating system. These patches resolve over 30 vulnerabilities, including elevation of privilege, information disclosure, security feature bypass, remote code execution, and denial of service vulnerabilities. These vulnerabilities affect core Windows, Kernel, Fax Service, Print Spooler, Secure Socket Tunneling Protocol, Graphics, Bluetooth Driver, WSL2, CSRSS, and others.

Next is a patch for .NET that resolves a remote code execution vulnerability.

Lastly, administrators should focus on server-side patches for SharePoint, Hyper-V, and Dynamics. These patches resolve denial of service and remote code execution vulnerabilities.