IT pros get gift of 14 fixes in December Patch Tuesday update

The holiday season generally means a little more down time at work and even some time off for most business and government professionals, but thanks to Microsoft's December security bulletin those in the IT profession will be hopping busy.

The software conglomerate has announced it will be releasing 14 bulletin items for its update next week.  

Outlined in a Dec. 8 advance notification, there will be three "critical" and 11 "important" items on the docket for Dec. 13.

All three critical items deal with remote code execution flaws in Microsoft Windows, while the remaining bulletins cover a bevy of additional remote code execution vulnerabilities, three elevation of privileges issues and a rare information disclosure flaw. Unlike the critical inclusions, the important bulletin items will not be limited to Windows -- Microsoft Office, Internet Explorer, Windows Media Player and Microsoft Publisher will also be affected by the patch.

Due to the security risk of releasing specific details on the upcoming bulletins before the patch is released, Microsoft will go into more detail on the bulletin items once the patch goes live at a round 10 a.m. PST Dec. 13.


  • business meeting (Monkey Business Images/

    Civic tech volunteers help states with legacy systems

    As COVID-19 exposed vulnerabilities in state and local government IT systems, the newly formed U.S. Digital Response stepped in to help. Its successes offer insight into existing barriers and the future of the civic tech movement.

  • data analytics (

    More visible data helps drive DOD decision-making

    CDOs in the Defense Department are opening up their data to take advantage of artificial intelligence and machine learning tools that help surface insights and improve decision-making.

Stay Connected