Last updated: April 13, 2016
Microsoft Patch Tuesday December 2015 – 8 Critical Ratings
It’s Microsoft Patch Tuesday December 2015! Patch Tuesday, or Update Tuesday, refers to the day each month when Microsoft regularly releases security patches for its software that requires an update. Microsoft issues the security bulletins and updates on the second Tuesday of each month.
As part of today’s Patch Tuesday, Microsoft released 12 security bulletins. Out of the 12 security bulletins, 8 received Critical ratings — including a security update for both the Internet Explorer web browser and Microsoft Edge web browser — because the patched vulnerabilities could have allowed remote code execution:
Microsoft Security Bulletin MS15-124 – Critical
Cumulative Security Update for Internet Explorer (3116180)
Microsoft Security Bulletin MS15-125 – Critical
Cumulative Security Update for Microsoft Edge (3116184)
Microsoft Security Bulletin MS15-126 – Critical
Cumulative Security Update for JScript and VBScript to Address Remote Code Execution (3116178)
Microsoft Security Bulletin MS15-127 – Critical
Security Update for Microsoft Windows DNS to Address Remote Code Execution (3100465)
Microsoft Security Bulletin MS15-128 – Critical
Security Update for Microsoft Graphics Component to Address Remote Code Execution (3104503)
Microsoft Security Bulletin MS15-129 – Critical
Security Update for Silverlight to Address Remote Code Execution (3106614)
Microsoft Security Bulletin MS15-130 – Critical
Security Update for Microsoft Uniscribe to Address Remote Code Execution (3108670)
Microsoft Security Bulletin MS15-131 – Critical
Security Update for Microsoft Office to Address Remote Code Execution (3116111)
According to Microsoft’s Security Bulletin Severity Rating System, Critical means:
A vulnerability whose exploitation could allow code execution without user interaction. These scenarios include self-propagating malware (e.g. network worms), or unavoidable common use scenarios where code execution occurs without warnings or prompts. This could mean browsing to a web page or opening email.
Microsoft recommends that customers apply Critical updates immediately.
The remaining 4 security bulletins received Important ratings. Microsoft encourages its customers to apply Important updates at the earliest opportunity.
Download and install the Microsoft Patch Tuesday December 2015 updates using Windows Update. Before starting, you may wish to consider exiting out of any programs that may be running on your computer. Windows 7 users click the Start button, choose All Programs directly above the Search input field, and click Windows Update. Click the Check for updates link.
Windows 8 users, click the Search icon in the upper right-hand corner of the Start screen, input Windows Update, and click Check for updates in the search results.
Windows 10 users, input Windows Update into the Windows search bar to the right of the Start button, and click Check for updates in the search results.
Windows will inform you if updates are available to download and install. Click the Install updates button to begin the download and installation process.
Once the updates have been installed, you may be prompted to restart your computer. If presented with this option, consider restarting your computer right away rather than choosing to restart it later. This will allow the updates to take effect immediately.
For more information about Microsoft Patch Tuesday December 2015, please visit:
Microsoft Security Bulletin Summary for December 2015
Microsoft Security Response Center December 2015 Updates
US-CERT: Microsoft Releases December 2015 Security Bulletin
Thank you for visiting Tech Help Knowledgebase to learn about Microsoft Patch Tuesday December 2015.
Tech Help Knowledgebase creates how-to articles and video tutorials for common issues, and provides technical support for the categories covered by our site.
Get Support.
