Cisco Blog >Threat Research

Threat Research

Today, Microsoft has released its monthly set of security advisories for vulnerabilities that have been identified and addressed in various products. This month's advisory release addresses 34 new vulnerabilities with 21 of them rated critical and 13 of them rated important. These vulnerabilities impact Edge, Exchange, Internet Explorer, Office, Scripting Engine, Windows, and more.

In addition to the 33 vulnerabilities addressed, Microsoft has also released an update for Microsoft Office which improves security by disabling the Dynamic Data Exchange (DDE) protocol. This update is detailed in ADV170021 and impacts all supported versions of Office. Organizations who are unable to install this update should consult the advisory for workaround that help mitigate DDE exploitation attempts.

Read More »

Cisco Systems Inc. published this content on 12 December 2017 and is solely responsible for the information contained herein.
Distributed by Public, unedited and unaltered, on 12 December 2017 23:48:06 UTC.

Original documenthttps://blogs.cisco.com/security/talos/ms-tuesday-dec-2017

Public permalinkhttp://www.publicnow.com/view/8507F76FE46EE4042675528FE2E4447BE5F92974