Tripwire Patch Priority Index for January 2018 [source: tripwire]
Tripwire’s January 2018 Patch Priority Index (PPI) brings together the top vulnerabilities from Microsoft, Adobe, and Oracle.
First on the patch priority list this month are patches for Microsoft browsers and scripting engine. These patches address issues such as information disclosure, elevation of privilege, and memory corruption vulnerabilities.
Following these are patches for Adobe Flash and Oracle Java. The Adobe patch resolves an out-of-bounds read issue resulting in an information disclosure vulnerability. At the same time, Oracle resolved 19 vulnerabilities that impact confidentiality, integrity, and availability from multiple attack vectors.
Up next are various Microsoft products including Microsoft Excel, Access, Outlook Word, and Office. These patches resolve 19 vulnerabilities related to memory corruption, remote code execution, and tampering.
Lastly for this month, administrators should focus on the patching the remaining Microsoft 2018 patches that fix vulnerabilities in Windows, Sharepoint, and Developer tools. These resolve 18 vulnerabilities related to information disclosure, elevation of privilege, denial of service, and cross-site scripting.
For more, click here.