Microsoft Patch Tuesday - December 2023

[Esben_D]

A light final Patch Tuesday of the year with 38 new fixes, 7 rated as critical. The most critical vulnerability being a MSHTML Platform RCE that can be exploited through Outlook. You can find the full summary and the usual audit to list all outdated devices in the December Patch Tuesday blog post.

[Panuwach]

I think, the link is not working.

[Mister_Nobody]

error 404

https://www.lansweeper.com/report/microsoft-december-2023-patch-tuesday-audit/

[matth]

404 for me

[Esben_D]

@Panuwach @Mister_Nobody @matth It has been fixed

[CDartois]

Server 2022 DataCenter Azure edition has a different monthly KB article compared to the "on-prem" version. I have tried many ways to get this to report properly but can't seem to get it working as they share just about every identifier possible and Or flags for the KB number don't seem to work for me. Can the report be updated to include this variation going forward?

On-premises - KB5033118
December 12, 2023—KB5033118 (OS Build 20348.2159) - Microsoft Support

Azure edition - KB5033464
December 12, 2023— KB5033464 (OS Build 20348.2144) - Microsoft Support

Please and Thank You.
Chris Dartois

[Esben_D]

@CDartois I wasn't aware that the Azure version had its own specific patches which seems a bit silly. But it doesn't really surprise me.

To add patches it needs to be added it two places. At the top to show which patch should be installed, and at the bottom where the KB updated are listed for the actual check.

I have updated the report to include KB5033464, you can check if that helps.

[CDartois]

Great, Thanks Esben. I'll re-import the report.