Microsoft Windows Security Bulletin for December reports the release of one security patch rated "critical" and one rated "important". Details of the vulnerabilities this patch pertains to are published in Microsoft's technical summary of the December Security Bulletin.
This month's bulletin reports the release of a critical patch for a vulnerability in Internet Explorer on all versions of Windows. This vulnerability could allow an attacker to gain complete control of an affected system, including the ability to exercise malicious code. The bulletin also reports an important patch against a vulnerability in the Windows Kernel. However, an attacker must be able to log on locally to exploit this vulnerability.
Users are advised to patch their systems against these vulnerabilities immediately. Patches can be downloaded via links posted within the appropriate Security Bulletins or by visiting Microsoft Update.
Microsoft Security Updates Summary for December
Technical Summary of December Security Bulletins
Critical:
Important: