Microsoft Security Bulletins for January, 2017

As this is the second Tuesday of the month, there will be one security monthly rollup for Windows 7 and 8.1 as well as Server 2008 and 2012.  The details of the updates included are listed below.

Reminder:  Today marks the last time Microsoft will release bulletins.  Starting in February, the information will only be available from the new Security Updates Guide which includes the ability to view and search security vulnerability information in a single online database. The guide is described as a "portal" by the MSRC Team in Furthering our commitment to security updates.

January Security Update Details:

Microsoft released four (4) bulletins.  Two (2) bulletins are identified as Critical and two (2) rated Important in severity. 

The updates address vulnerabilities in Microsoft Windows, Microsoft Edge, Microsoft Office, Microsoft Office Services and Web Appsand Adobe Flash Player for Windows 8.1 and above. 

Addressed in the updates are Remote Code Execution, Elevation of Privilege and Denial of Service.

Information about the update for Windows 10 is available at Windows 10 update history with KB3213986 for 1607. 

Critical:

• MS17-002 -- Security Update for Microsoft Office (3214291)
• MS17 -003 -- Security Update for Adobe Flash Player (3214628)

Important:

• MS17-001 -- Security Update for Windows Kernel-Mode Drivers (3205651)
• MS17-004 -- Security Update for Local Security Authority Subsystem Service (3216771

Additional Update Notes

• Adobe Flash Player -- For Windows Server 2012, Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, Windows 10, and Windows 10 Version 1511, Adobe Flash Player is now a security bulletin rather than a security advisory and is included with the updates as identified above.
• MSRT -- Microsoft released an updated version of the Microsoft Windows Malicious Software Removal Tool on Windows Update, Microsoft Update, Windows Server Update Services, and the Download Center. 
• Windows 10 -- A summary of important product developments included in each update, with links to more details is available at Windows 10 Update History. The page will be regularly refreshed, as new updates are released.

References

• MSRC
• Release Notes
• TechNet: Microsoft Security Bulletin for January 2017 
• Windows 10 Update History
• Windows Update Changes:  More on Windows 7 and Windows 8.1 servicing changes – Windows for IT Pros 

Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...