微软在本月推送了超过50个漏洞的安全补丁更新，涵盖了windows系统、IE、Edge、ASP等漏洞，还发布了一项关于最近被滥用DDE攻击的缓解措施。在此次的推送中，包括一个过去17年中，所有Office版本都受到影响的远程代码执行漏洞CVE-2017-11882。

Release Notes

November 2017 Security Updates

Release Date: November 14, 2017

The November security release consists of security updates for the following software:

Please note the following information regarding the security updates:

Windows 10 updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows 10, in addition to non-security updates. The updates are available via the Microsoft Update Catalog.
Starting in March 2017, there will be a Windows 10 1607 delta package that contains just the delta changes between the previous month and the current release.
Updates for Windows RT 8.1 and Microsoft Office RT software are only available via Windows Update.
In addition to security changes for the vulnerabilities, updates include defense-in-depth updates to help improve security-related features.
After May 9, 2017, customers running Windows 10 version 1507 will no longer receive security and quality updates, with the exception of the Windows 10 2015 LTSB and the Windows 10 IoT Enterprise 2015 LTSB editions. Microsoft recommends that customers with devices running other editions of Windows 10 version 1507 that are no longer supported update these devices to the latest version of Windows 10. For more information see Microsoft Knowledge Base Article 4015562.


顶	踩