Security News > 2023 > December > December 2023 Patch Tuesday forecast: ‘Tis the season for vigilance
The good news for the rest of you is that December Patch Tuesday is usually light regarding CVEs reported.
Exploitable across the internet, the vulnerability is ideal for a phishing exploit as it only requires the user to click on a malicious URL. A fix was included in the November Patch Tuesday updates and the CVE was reported as Known Exploited, but now it is Publicly Disclosed as well.
December 2023 Patch Tuesday forecast Microsoft introduced a series of Service Stack Updates last month and there may be more to come.
The Extended Security Updates for Server 2012 were rolled out without issue last month and will show up again next week, so if you are running unprotected on these older systems consider them an important risk-reducing Christmas purchase.
Mozilla has shifted away from Patch Tuesday releases the last three months.
The holiday season can be hectic, but it looks like we may have a standard, easy Patch Tuesday week.
News URL
https://www.helpnetsecurity.com/2023/12/08/december-2023-patch-tuesday-forecast/
Related news
- March 2025 Patch Tuesday forecast: A return to normalcy (source)
- Microsoft March 2025 Patch Tuesday fixes 7 zero-days, 57 flaws (source)
- Choose your own Patch Tuesday adventure: Start with six zero day fixes, or six critical flaws (source)
- Patch Tuesday: Microsoft Fixes 57 Security Flaws – Including Active Zero-Days (source)
- April 2025 Patch Tuesday forecast: More AI security introduced by Microsoft (source)
- Week in review: Probing activity on Palo Alto Networks GlobalProtect portals, Patch Tuesday forecast (source)
- Microsoft April 2025 Patch Tuesday fixes exploited zero-day, 134 flaws (source)
- Patch Tuesday: Microsoft Fixes 134 Vulnerabilities, Including 1 Zero-Day (source)
- April's Patch Tuesday leaves unlucky Windows Hello users unable to login (source)