The January 2024 Security Update Review

This Patch Tuesday write-up summarizes multiple Microsoft security fixes including remote code execution (notably an Office/FBX issue and various client/embedded-file RCEs), elevation-of-privilege bugs (including a VHDX kernel issue), information disclosure flaws (LSASS and TCP/IP/IPsec), security feature bypasses (BitLocker, IE zone restrictions), DoS and spoofing vulnerabilities, and several SFB/other component patches; most issues require user interaction or specific privileges and Microsoft recommends applying updates and auditing relevant permissions.