Welcome to this November Patch Monday Bulletin. This month we have patches for Photoshop, Acrobat/Reader, iCloud/iTunes, Chrome, Firefox, and Thunderbird. The top priority this month is patching CVE-2018-15979 that affects Adobe Acrobat and Reader. This vulnerability has proof of concept code available and could cause a user to send their NTLM password hash to malicious external resources. An attacker would have to convince a user to open a maliciously crafted PDF to exploit this vulnerability. Follow up with Adobe Flash since it is a Critical Priority 1 update but keep in mind there are no known attacks leveraging any of the remediated vulnerabilities in this product. Next, review and update 3rd party browsers Chrome and Firefox since these browsers are widely deployed and are affected by multiple vulnerabilities. The remaining products may be present but are not widely deployed in the enterprise. Review your environment for the existence of the following products and test updates for iCloud for Windows, iTunes for Windows, Thunderbird, and Photoshop.

Over the years we've had millions of visitors to UltimateWindowsSecurity.com. Every month we have thousands and thousands of visitors to our Security Log Encyclopedia which documents all of the Security Log event ID’s for Windows Server OS’s. Back in 2007 when SharePoint added auditing capability, I realized that my audience not only needed the event information from SharePoint but I also found a similar need in SQL Server and Exchange. So not only did I document the data but I also started to develop the means to extract that event data from these applications so that it’s accessible and useable to the end user. Some 8 years later and LOGbinder is continuing to grow as companies realize LOGbinder bridges the gap between these applications and their infosec team. Visit LOGbinder.com to download a free 30-day fully functional trial and see the security event data that you have literally been missing.

So, without further ado, here’s the chart of non-MS patches that affect Windows platforms in the past month.