Patch Tuesday is upon us once again. And, like so many times this year since Microsoft stopped warning about it, it simply snuck up. So, it might come as a shock that today Microsoft is planning to deliver 12 new security patches.
Here's a quick breakdown…
The belle of the ball each month has been Internet Explorer. And, while IE does get its security update this month, it looks like Microsoft Edge is starting to join the regular ranks. Both IE (MS15-094) and Edge (MS15-095) are getting critical updates to protect against Remote Code Execution flaws.
Additional products include:
-
Active Directory Service (MS15-096). Marked as Important for a Denial of Service.
-
Microsoft Graphics Component (MS15-097). Marked as Critical for Remote Code Execution.
-
Windows Journal (MS15-098). Marked as Critical for Remote Code Execution.
-
Microsoft Office (MS15-099). Marked as Critical for Remote Code Execution.
-
Windows Media Center (MS15-100). Marked as Important for Remote Code Execution.
-
.NET Framework (MS15-101). Marked as Important for Elevation of Privilege.
-
Windows Task Management (MS15-102). Marked as Important for Elevation of Privilege.
-
Microsoft Exchange Server (MS15-103). Marked as Important for Information Disclosure.
-
Skype for Business and Lync Server (MS15-104). Marked as Important for Elevation of Privilege.
-
Hyper-V (MS15-105). Marked as Important for Security Feature Bypass.
I'm sure someone has already started a pool to see which of these will be the first to cause issues or which will be the first to be recalled.
The full summary is here: Microsoft Security Bulletin Summary for September 2015
