Patch Tuesday in December rarely brings anything worthwhile— everybody on vacation, or wants to be on vacation— and this month no exception.
We got patches for 36 separately identified security holes and two new advisories, full of sound and fury but covering very little.The one &exploited& security hole—CVE-2019-1458 Win32k Elevation of Privilege Vulnerability— shouldn&t cause any heartburn.
Microsoft says: