The Windows December 2023 security updates fix a 0-day vulnerability

Microsoft launched safety updates for all supported Home windows working techniques and different firm merchandise on the December 2023 Patch Day. The corporate fastened 36 distinctive Microsoft product vulnerabilities and 6 non Microsoft product vulnerabilities on the final Patch Day of the yr 2023.

It’s a smaller Patch Day that fixes three important safety points in all supported Home windows consumer and server merchandise. The replace fixes one publicly disclosed 0-day vulnerability. Listed as CVE-2023-20588, it impacts units with AMD processors solely.

Our overview is designed to be a useful resource for system directors and residential customers alike. It consists of details about all main safety updates that Microsoft launched. You discover hyperlinks to assist pages and sources, the listing of identified points, direct obtain hyperlinks and extra listed beneath.

Try the November 2023 Safety replace overview right here.

Microsoft Home windows Safety Updates: November 2023

Here’s a hyperlink to an Excel spreadsheet that lists details about the launched safety updates on the December 2023 Microsoft Patch Day. Comply with this hyperlink to obtain an archive file that incorporates the spreadsheet: Microsoft Home windows safety updates December 2023

Government Abstract

Every supported model of Home windows and their important vulnerabilities are listed beneath.

Home windows 10 model 22H2: 15 vulnerabilities, 3 important and 12 vital.
- Web Connection Sharing (ICS) Distant Code Execution Vulnerability — CVE-2023-35630
- Home windows MSHTML Platform Distant Code Execution Vulnerability — CVE-2023-35628
- Web Connection Sharing (ICS) Distant Code Execution Vulnerability — CVE-2023-35641
Home windows 11 model 22H2: 17 vulnerabilities, 3 important and 14 vital
- identical as Home windows 10 model 22H2
Home windows 11 model 23H2: 18 vulnerabilities, 3 important and 15 vital
- identical as Home windows 10 model 22H2

Home windows Server merchandise

Home windows Server 2008 R2 (prolonged assist solely): 15 vulnerabilities: 3 important and 12 vital
- Web Connection Sharing (ICS) Distant Code Execution Vulnerability — CVE-2023-35630
- Home windows MSHTML Platform Distant Code Execution Vulnerability — CVE-2023-35628
- Web Connection Sharing (ICS) Distant Code Execution Vulnerability — CVE-2023-35641
Home windows Server 2012 R2 (prolonged assist solely): 61 vulnerabilities: 11 important and 50 vital
Windows Server 2016: 17 vulnerabilities: 3 important and 14 vital
- identical as Home windows Server 2008 R2
Home windows Server 2019: 19 vulnerabilities: 3 important and 16 vital
- identical as Home windows Server 2008 R2
Home windows Server 2022: 18 vulnerabilities: 3 important and 15 vital.
- identical as Home windows Server 2008 R2

Home windows Safety Updates

Home windows 10 model 22H2

Updates and enhancements:

Safety updates.
Contains all non-security adjustments of the November 30, 2023 preview replace for the working system.

Home windows 11 model 22H2 and 23H2

Updates and enhancements:

This replace makes miscellaneous [unspecified] safety enhancements to inner OS performance.
Contains all non-security updates of the December 2023 Preview Replace, together with:
- Help for a number of shows when utilizing Copilot in Home windows (though points on multi-monitor techniques remains to be listed as a identified difficulty).
- Alt-Tab helps Copilot in Home windows now.
- Home windows Concentration is going to grow to be the default background on Home windows to exchange the inbox Home windows picture.
- Account-related notifications will show in Settings > Residence after the replace.

Safety updates

2023-12 Cumulative Replace for Home windows 10 Model 1507 (KB5033379)

2023-12 Cumulative Replace for Home windows 10 Model 1607 (KB5033373)

2023-12 Cumulative Replace for Home windows 10 Model 1809 (KB5033371)

2023-12 Cumulative Replace for Microsoft server working system model 21H2 for x64-based Techniques (KB5033118)

2023-12 Cumulative Replace for Home windows 10 Model 22H2 and Home windows 10 Model 21H2 (KB5033372)

2023-12 Cumulative Replace for Home windows 11 (KB5033369)

2023-12 Servicing Stack Replace for Home windows Server 2008 (KB5033466)

Home windows Server

2023-12 Cumulative Safety Replace for Web Explorer Home windows Server 2012 R2, Home windows Server 2012, Home windows Embedded Commonplace 7, Home windows Server 2008 R2, and Home windows Server 2008 (KB5033376)

2023-12 Safety Solely High quality Replace for Home windows Embedded Commonplace 7 and Home windows Server 2008 R2 (KB5033424)

2023-12 Safety Month-to-month High quality Rollup for Home windows Embedded Commonplace 7 and Home windows Server 2008 R2 (KB5033433)

2023-12 Safety Month-to-month High quality Rollup for Home windows Server 2008 (KB5033422)

2023-12 Safety Solely High quality Replace for Home windows Server 2008 (KB5033427)

2023-12 Safety Month-to-month High quality Rollup for Home windows Server 2012 R2 (KB5033420)

2023-12 Safety Month-to-month High quality Rollup for Home windows Server 2012 (KB5033429)

2023-12 Cumulative safety Hotpatch for Azure Stack HCI, model 21H2 and Home windows Server 2022 Datacenter: Azure Version for x64-based Techniques (KB5033464)

Non-Safety updates

None listed

Recognized Points

Home windows 10 model 22H2

Description: Desktop icons could also be moved round unexpectedly between displays when utilizing Copilot on a couple of monitor. Customers might also expertise “different alignment points” in line with Microsoft.

Workaround: none. Microsoft might disable Copilot on multimonitor units.

Description: Copilot in Home windows isn’t supported if the taskbar is situated vertically on the precise or left facet of the display.

Workaround: align the taskbar horizontally, both on the prime or backside of the display.

(OLD) Description: Utilizing the FixedDrivesEncryptionType or SystemDrivesEncryptionType coverage settings within the BitLocker configuration service supplier (CSP) node in cellular machine administration (MDM) apps would possibly incorrectly present a 65000 error within the “Require Machine Encryption” setting for some units in your surroundings.

Workaround: it is a reporting difficulty solely in line with Microsoft. Microsoft suggests to set the “Implement drive encryption kind on working system drives” or the “Implement drive encryption on fastened drives” insurance policies to not configured as a workaround.

Home windows 11 model 22H2 and 23H2

Description: Microsoft Narrator might not begin when putting in Home windows 11 from bodily media or disk photos.

Workaround: Microsoft is engaged on a decision.

(OLD) Description: Customers who use a number of displays on their Home windows units might discover that desktop icons transfer round unexpectedly. They could, for example, transfer between displays.

Workaround: Microsoft “might” have disabled Home windows Copilot on multi-monitor units till an answer is discovered.

(OLD) Description: The colour font format COLRv1 doesn’t render correctly. It’s used to show emoji with a 3D-like look.

Workaround: none on the time. Microsoft is engaged on an answer.

Safety advisories and updates

Microsoft Workplace Updates

You discover Workplace replace info right here.

obtain and set up the December 2023 safety updates

Safety updates roll out to all non-managed Home windows units mechanically by default. This course of might take some time to succeed in all units. Directors might obtain the updates as quickly as they’re launched, both through Home windows Replace or by downloading the updates manually.

Tip: create a backup prior to installing updates

To replace utilizing Home windows Replace, use the next information:

Choose Begin, kind Home windows Replace and cargo the Home windows Replace merchandise that’s displayed.
Choose test for updates to run a guide test for updates.

Managed techniques obtain updates when system directors permit them to be distributed to managed units.