The December cumulative security update for Internet Explorer 9 and 10 is available on Windows Update. It fixes three vulnerabilities that were reported in time before they were publicly disclosed. All fixes are related to remote code execution when a user visits an attacker’s Web page. The user can then gain the same rights as the user.
Users with UAC (User Account Control) enabled are better protected against attacks. The update is on Windows Update, so you don't need to take any special action if you have automatic updates enabled. Otherwise, I recommend deploying this update as soon as possible, because the most vulnerable systems are in the time between the disclosure of the vulnerability and the installation of the security update.
The update is rated critical for Internet Explorer 9 and 10 on Windows client and recommended for Internet Explorer 9 and 10 on Windows Server. Internet Explorer 6, 7 and 8 are not affected by the vulnerabilities.
The update also applies to Internet Explorer 10 Release Preview for Windows 7.
The update also includes fixes for Adobe Flash Player in Internet Explorer 10 for Windows 8.
For more information, please refer to the Security Bulletin and Technical Support.
The article was written for TechNet Blog CZ/SK.