Most of the security holes plugged in this month’s Patch Tuesday are in either Internet Explorer or in Microsoft’s newest browser, Edge. So far this year Microsoft’s claim that Edge is a more secure browser than Internet explorer seems to be confirmed, Edge has required 19 fixes versus IE’s 27.
Windows users who use a non-Microsoft browser still need to perform the patches. Ten of the updates affect Windows, including three other critical updates from Microsoft.
Ten of the Microsoft updates affect Windows, including the other three critical updates from Microsoft. Those updates repair vulnerabilities in graphic fonts, Windows Media and Windows PDF Library. In all three areas, the attacker could exploit vulnerabilities by convincing a user to open specifically created files and media content. As a result, the attacker would gain equal privileges as the current user; so least-privilege rules will reduce the impact of these vulnerabilities.
This patch Tuesday, along with Microsoft, Adobe issued security updates for its PDF Reader and Acrobat software. So far these updates don’t include any for Adobe’s Flash Player plugin. However, if you look through the Flash Player distribution page, a new version has appeared, but none of the links have been updated to distribute it. This indicates an update for Adobe’s Flash Player plugin may be released soon.