Tripwire Patch Priority Index for November 2018

Image

Tripwire's November 2018 Patch Priority Index (PPI) brings together the top vulnerabilities from Microsoft and Adobe. First on the patch priority list this month are patches for Microsoft's Internet Explorer, Edge and Scripting Engine. These patches resolve 13 vulnerabilities, including fixes for Memory Corruption, Elevation of Privilege (EoP), Spoofing and Information Disclosure vulnerabilities. Next on the list are patches for Adobe Flash, Acrobat and Reader. These patches resolve two information disclosure vulnerabilities. Up next are patches for Microsoft Office for Excel, Outlook, Project, Skype for Business and Word. These patches resolve 10 vulnerabilities, including Remote Code Execution (RCE) and Denial of Service vulnerabilities. Next on the list are the patches for Microsoft Windows. These patches address multiple vulnerabilities across Active Directory Federation Services, BitLocker, DirectX, MSRPC, Graphics components, PowerShell, JScript, RemoteFX, Win32k, ALCP and other Windows components. These patches resolve 24 vulnerabilities including XSS, Security Feature Bypass, EoP, Information Disclosure and RCE vulnerabilities. Finally, this month administrators should focus on server-side patches for Microsoft Team Foundation Server, Exchange, SharePoint and Dynamics 365. These patches resolve 10 vulnerabilities including XSS, EoP, Information Disclosure and RCE vulnerabilities.

  To learn more about Tripwire’s Vulnerability and Exposure Research Team (VERT), click here. Or you can follow them on Twitter: @tripwirevert