<p>Microsoft will be finishing off 2012 with a monthly security update that addresses 11 vulnerabilities in Internet Explorer, Microsoft Exchange Server, Office and Windows.</p><p>This months patch will feature five bulletins rated "critical" (highest severity warning) and two rated "important," (second-highest severity warning) according to Microsoft's Security Bulletin Advance Notification. Six of the seven items in Microsoft's patch rollout will address remote code execution (RCE) flaws.</p><p>Marcus Carey, security researcher at Rapid7, advises that IT prioritizes bulletin 1, a fix for Internet Explorer, first.</p><p>"Since it is a browser vulnerability this should be the first of the patch triage list, as a victim could be compromised by visiting a malicious site via drive-by attack," said Carey in an e-mailed statement. "With this update, Microsoft will also harden IE 6, IE 7 and IE 8, even though they aren't vulnerable to these vulnerabilities. The vulnerabilities only exist in IE 9 and IE 10."</p><p><a href="http://redmondmag.com/articles/2012/12/06/critical-updates-for-december.aspx">Keep reading...</a></p>