【威胁通告】微软发布12月补丁修复37个安全问题

微软于周二发布了12月安全更新补丁,修复了37个从简单的欺骗攻击到远程执行代码的安全问题,产品涉及Adobe Flash Player、Device Guard、Microsoft Edge、Microsoft Exchange Server、Microsoft Malware Protection Engine、Microsoft Office、Microsoft Scripting Engine以及Microsoft Windows。

相关信息如下(红色部分威胁相对比较高):

产品 CVE 编号 CVE 标题
Adobe Flash Player ADV170022 December 2017 Flash 安全更新
Device Guard CVE-2017-11899 Microsoft Windows 安全功能绕过漏洞
Microsoft Edge CVE-2017-11888 Microsoft Edge 内存破坏漏洞
Microsoft Exchange Server CVE-2017-11932 Microsoft Exchange 欺骗漏洞
Microsoft Exchange Server ADV170023 Microsoft Exchange Defense in Depth Update
Microsoft Malware Protection Engine CVE-2017-11937 Microsoft Malware Protection Engine 远程代码执行漏洞
Microsoft Malware Protection Engine CVE-2017-11940 Microsoft Malware Protection Engine 远程代码执行漏洞
Microsoft Office ADV170021 Microsoft Office Defense in Depth Update
Microsoft Office CVE-2017-11934 Microsoft PowerPoint 信息泄露漏洞
Microsoft Office CVE-2017-11935 Microsoft Excel 远程代码执行漏洞
Microsoft Office CVE-2017-11936 Microsoft SharePoint 特权提升漏洞
Microsoft Office CVE-2017-11939 Microsoft Office 信息泄露漏洞
Microsoft Scripting Engine CVE-2017-11889 Scripting Engine 内存破坏漏洞
Microsoft Scripting Engine CVE-2017-11890 Scripting Engine 内存破坏漏洞
Microsoft Scripting Engine CVE-2017-11893 Scripting Engine 内存破坏漏洞
Microsoft Scripting Engine CVE-2017-11895 Scripting Engine 内存破坏漏洞
Microsoft Scripting Engine CVE-2017-11901 Scripting Engine 内存破坏漏洞
Microsoft Scripting Engine CVE-2017-11903 Scripting Engine 内存破坏漏洞
Microsoft Scripting Engine CVE-2017-11906 Scripting Engine 信息泄露漏洞
Microsoft Scripting Engine CVE-2017-11908 Scripting Engine 内存破坏漏洞
Microsoft Scripting Engine CVE-2017-11909 Scripting Engine 内存破坏漏洞
Microsoft Scripting Engine CVE-2017-11910 Scripting Engine 内存破坏漏洞
Microsoft Scripting Engine CVE-2017-11911 Scripting Engine 内存破坏漏洞
Microsoft Scripting Engine CVE-2017-11912 Scripting Engine 内存破坏漏洞
Microsoft Scripting Engine CVE-2017-11913 Scripting Engine 内存破坏漏洞
Microsoft Scripting Engine CVE-2017-11914 Scripting Engine 内存破坏漏洞
Microsoft Scripting Engine CVE-2017-11918 Scripting Engine 内存破坏漏洞
Microsoft Scripting Engine CVE-2017-11930 Scripting Engine 内存破坏漏洞
Microsoft Scripting Engine CVE-2017-11886 Scripting Engine 内存破坏漏洞
Microsoft Scripting Engine CVE-2017-11887 Scripting Engine 信息泄露漏洞
Microsoft Scripting Engine CVE-2017-11894 Scripting Engine 内存破坏漏洞
Microsoft Scripting Engine CVE-2017-11907 Scripting Engine 内存破坏漏洞
Microsoft Scripting Engine CVE-2017-11905 Scripting Engine 内存破坏漏洞
Microsoft Scripting Engine CVE-2017-11916 Scripting Engine 内存破坏漏洞
Microsoft Scripting Engine CVE-2017-11919 Scripting Engine 信息泄露漏洞
Microsoft Windows CVE-2017-11885 Windows RRAS Service 远程代码执行漏洞
Microsoft Windows CVE-2017-11927 Microsoft Windows 信息泄露漏洞

修复建议

微软官方已经发布更新补丁,请及时进行补丁更新。

附件下载

微软发布12月补丁修复37个安全问题

 

 



发表评论