Microsoft Releases December 2014 Security Bulletin
Microsoft has released updates to address vulnerabilities in Exchange, Windows, Internet Explorer, and Office as part of the Microsoft Security Bulletin Summary for December 2014. Some of these vulnerabilities could allow elevation of privilege, remote code execution, or disclosure of information.
US-CERT encourages users and administrators to review Microsoft Security Bulletin MS14-DEC and apply the necessary updates.