Energy.gov

A vulnerability was reported in Microsoft Internet Explorer. A remote user can cause arbitrary code to be executed on the target user's system.

Several vulnerabilities were reported in FreeType. A remote user can cause arbitrary code to be executed on the target user's system.

A vulnerability was reported in the IBM HTTP Server component 5.3 in IBM WebSphere Application Server (WAS) for z/OS

Oracle has acknowledged multiple vulnerabilities in Java included in Solaris.

Several vulnerabilities were reported in Adobe Flash Player.

A vulnerability was reported in Adobe ColdFusion.

A vulnerability was reported in IBM Informix.

Microsoft Security Bulletin Advance Notification for December 2012. Microsoft has posted 5 Critical Bulletins and 2 Important Bulletins. Bulletins with the Maximum Severity Rating and Vulnerability Impact of "Critical" may allow remote execution of code. Microsoft will host a webcast to address customer questions on the security bulletins on December 12, 2012, at 11:00 AM Pacific Time (US & Canada).

A vulnerability was reported in Apache Tomcat.

Several vulnerabilities were reported in Google Chrome.