From Lamar Bailey, director of security research and development:
"Microsoft will be delivering five critical and six important bulletins this month. It’s not the biggest drop this year but it's large enough to give Santa a hernia.
Next week's patch will have all the usual suspects including every supported Windows OS and every supported version of IE. We will also get fixes for Lync, Windows 8.1 and Server 2012 R2. Get ready to patch everything this month."
From Tyler Reguly, technical manager of security research and development:
“With 11 bulletins this month, Microsoft will easily break 100, beating last years’ numbers and even exceeding 2011's December 29th release of MS11-100. System administrators everywhere must have made Microsoft's naughty list because this holiday ‘gift’ is clearly a lump of coal. Microsoft is wrapping up the 2013 patch season with anything that was laying around. We're seeing patches for ASP.NET SignalR, Office, Exchange 2013, SharePoint 2013, and Lync 2013, as well as every version of Windows and Internet Explorer. Someone should tell Microsoft they forgot to include the kitchen sink.”
From Craig Young, security researcher:
“This month’s bulletin has something for everyone -- most Windows based systems will be impacted by these patches. Microsoft is plugging remote code execution bugs affecting most of the supported versions of Exchange, SharePoint, and Windows.