Tripwire Patch Priority Index for January 2025

Tripwire's January 2025 Patch Priority Index (PPI) brings together important vulnerabilities for Microsoft.

First on the list are patches for the Microsoft office platform, including Word, Access, Visio, Excel, OneNote, and Outlook. These patches resolve 13 issues such as remote code execution and security feature bypass vulnerabilities.

Next are patches that affect components of the core Windows operating system. These patches resolve over 120 vulnerabilities, including elevation of privilege, information disclosure, and remote code execution vulnerabilities. These vulnerabilities affect core Windows, Kernel, PrintWorkflowUserSvc, Event Tracing, Telephony, BranchCache, Search Service DVM Core, NTLM, COM Server, App Package Installer, and many others.

Up next are patches for .NET, .NET Framework, and Visual Studio that resolve remote code execution, elevation of privilege, and information disclosure vulnerabilities.

Lastly, administrators should focus on server-side patches for Hyper-V, SharePoint, Remote Desktop Services, Active Directory Domain Services, and Active Directory Federation Services. These patches resolve denial of service, remote code execution, spoofing, and elevation of privilege vulnerabilities.