This month’s Patch Tuesday covers 25 vulnerabilities, two of which are considered critical. Talos also released a new set of SNORT rules that provide coverage for some of these vulnerabilities. This months security update covers security issues in a variety of Microsoft services and software, including Remote Desktop Protocol, Hyper-V and multiple Microsoft Office products. To trigger this vulnerability, a user would have to visit a malicious, specially crafted website in the Internet Explorer web browser. An attacker could exploit this bug by using a specially crafted, malicious embedded font on a web page and then trick the user into visiting that page.”]
Source: https://blog.talosintelligence.com/2019/12/microsoft-patch-tuesday-dec-2019.html