Microsoft releases December 2021 Security updates
Microsoft has released updates to address multiple vulnerabilities in Microsoft software. Microsoft has fixed 67 vulnerabilities with Microsoft's December 2021 Patch Tuesday, with seven classified as Critical and 60 as Important.
Of the fixed vulnerabilities: 21 are Elevation of Privilege vulnerabilities, 26 are Remote Code Execution vulnerabilities, 10 are Information Disclosure vulnerabilities, 3 are Denial of Service vulnerabilities, 7 are Spoofing vulnerabilities.
December's Patch Tuesday also includes fixes for six zero-day vulnerabilities:
CVE-2021-43890 - Windows AppX Installer Spoofing Vulnerability
CVE-2021-43240 - NTFS Set Short Name Elevation of Privilege Vulnerability
CVE-2021-41333 - Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2021-43880 - Windows Mobile Device Management Elevation of Privilege Vulnerability
CVE-2021-43883 - Windows Installer Elevation of Privilege Vulnerability
CVE-2021-43893 - Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability
More information on vulnerabilities and updates is available in the Microsoft’s December 2021 Security Updates page – microsoft.com.
Source: bleepingcomputer.com
15 December 2021