Tripwire Patch Priority Index for December 2024

Tripwire’s December 2024 Patch Priority Index (PPI) brings together important vulnerabilities for Microsoft and Adobe.

First on the list is a notice about Windows Common Log File System Driver (CLFS). CVE-2024-49138 impacts Windows CLFS, which Microsoft released a patch for in December 2024. This vulnerability has been detected as actively exploited and has been added to the CISA Known Exploited Vulnerabilities (KEV) catalog. This vulnerability will be patched with the main Windows OS cumulative update for December. Administrators should consider the elevated risk to their organizations and move to patch Windows OSs as soon as possible.

Up next are patches Microsoft Word, Excel, Office, Access, and Publisher that resolve remote code execution and elevation of privilege vulnerabilities.

Up next are patches for Adobe Reader and Acrobat that resolve 6 vulnerabilities including code execution, denial of service, and memory leak (information disclosure) vulnerabilities.

Next are patches that affect components of the core Windows operating system. These patches resolve over 35 vulnerabilities, including elevation of privilege, information disclosure, and remote code execution vulnerabilities. These vulnerabilities affect core Windows, Kernel, CLFS, Cloud Files Mini Filter driver, Mobile Broadband Driver, PrintWorkflowUserSvc, Routing and Remote Access Service (RRAS), and others.

Lastly, administrators should focus on server-side patches for Hyper-V, DNS Server, System Center Operations Manager (SCOM), SharePoint, Remote Desktop Services, and Windows Lightweight Directory Access Protocol (LDAP). These patches resolve denial of service, remote code execution, information disclosure, and elevation of privilege vulnerabilities.