Tripwire’s November 2018 Patch Priority Index (PPI) brings together the top vulnerabilities from Microsoft and Adobe.

First on the patch priority list this month are patches for Microsoft’s Internet Explorer, Edge, and Scripting Engine. These patches resolve 13 vulnerabilities, including fixes for Memory Corruption, Elevation of Privilege (EoP), Spoofing, and Information Disclosure vulnerabilities.

Next on the list are patches for Adobe Flash, Acrobat, and Reader. These patches resolve 2 information disclosure vulnerabilities.

Up next are patches for Microsoft Office for Excel, Outlook, Project, Skype for Business, and Word. These patches resolve 10 vulnerabilities, including Remote Code Execution (RCE) and Denial of Service vulnerabilities.

Next on the list are the patches for Microsoft Windows. These patches address multiple vulnerabilities across Active Directory Federation Services, BitLocker, DirectX, MSRPC, Graphics components, PowerShell, JScript, RemoteFX, Win32k, ALCP, and other Windows components. These patches resolve 24 vulnerabilities including XSS, Security Feature Bypass, EoP, Information Disclosure, and RCE vulnerabilities.

Finally, this month administrators should focus on server-side patches for Microsoft Team Foundation Server, Exchange, SharePoint, and Dynamics 365. These patches resolve 10 vulnerabilities including XSS, EoP, Information Disclosure, and RCE vulnerabilities.

To learn more about Tripwire’s Vulnerability and Exposure Research Team (VERT), click here.

Or you can follow them on Twitter: @tripwirevert