Microsoft & Adobe's December Patch Tuesday: Critical Security Updates Await
Microsoft and Adobe are set to release significant security updates in December's Patch Tuesday. Microsoft will issue seven patches, five of which address Remote Code Execution (RCE) vulnerabilities. Adobe will release new versions of Adobe Reader and Acrobat to patch a critical vulnerability affecting both Windows and Mac OS X users.
Microsoft's updates will cover Windows, Internet Explorer, and Microsoft Office. Bulletin #3, rated critical, affects Word 2007, 2010, 2013, and 2011 for Mac OS X. This vulnerability can be triggered without user interaction, making it particularly serious. The patches are primarily developed by Microsoft's internal security and engineering teams, who also handle cumulative security patches and hotpatch updates for Windows 11 Enterprise version 25H2.
Adobe is also expected to release a new version of Flash. The company will address a critical vulnerability in Adobe Reader and Acrobat, affecting versions 10 and 11 on Windows and Mac OS X. Adobe's patches are typically developed by their own product security and development teams, though specific names are not publicly disclosed.
December's Patch Tuesday, the last of the year, will provide more information and updates. All versions of Windows, Internet Explorer, and Office are affected by at least one bulletin, highlighting the importance of these updates. Users are advised to install the patches as soon as they are available to protect against potential security threats.