Patches Issued for Microsoft Products

Multiple vulnerabilities have been discovered in Microsoft products, the most severe of which could allow for remote code execution in the context of the logged-on user. Depending on the privileges associated with the user, an attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than those who operate with administrative user rights. THREAT INTELLIGENCE: There are currently no reports of these vulnerabilities being exploited in the wild. SYSTEMS AFFECTED:

Microsoft Office
Microsoft Edge (Chromium-based)
Microsoft Defender for Endpoint
Microsoft Office SharePoint
GitHub
Microsoft Office Word
Microsoft Office Excel
Windows Task Scheduler
Windows Mobile Broadband
Windows Kernel-Mode Drivers
Windows Remote Desktop Services
Windows Virtualization-Based Security (VBS) Enclave
Microsoft Office Publisher
Windows IP Routing Management Snapin
Windows Wireless Wide Area Network Service
Windows File Explorer
Windows Kernel
Windows Routing and Remote Access Service (RRAS)
Windows Common Log File System Driver
Role: DNS Server
Windows Resilient File System (ReFS)
Windows PrintWorkflowUserSvc
Windows Message Queuing
Remote Desktop Client
WmsRepair Service
Windows LDAP - Lightweight Directory Access Protocol
Windows Cloud Files Mini Filter Driver
Role: Windows Hyper-V
Windows Local Security Authority Subsystem Service (LSASS)
Windows Remote Desktop
Microsoft Office Access

RISK: Government:

Large and medium government entities: High
Small government entities: Medium

Businesses:

Large and medium business entities: High
Small business entities: Medium

Home users: Low TECHNICAL SUMMARY: Multiple vulnerabilities have been discovered in Microsoft products, the most severe of which could allow for remote code execution. A full list of all vulnerabilities can be found in the Microsoft link in the References section. Successful exploitation of the most severe of these vulnerabilities could result in remote code execution in the context of the logged-on user. Depending on the privileges associated with the user, an attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than those who operate with administrative user rights.

REFERENCES:

Microsoft: https://portal.msrc.microsoft.<wbr />com/en-us/security-guidance https://msrc.microsoft.com/<wbr />update-guide/releaseNote/2024-<wbr />Dec