For the last Patch Tuesday of 2014, Microsoft is releasing on December, seven security updates: Three of the updates are rated Critical and the remaining four are rated Important. December’s Patch Tuesday addresses 24 vulnerabilities in Windows, Internet Explorer, Office and Exchange.
The three critical updates patches remote execution holes in Internet Explorer from version 7 through 11. There has been a steady release of patches for Internet Explorer and because hackers are proactively exploiting vulnerabilities, Critical updates of IE will become more frequent, Microsoft says.
There are two updates for Windows: The one rated Important patches an information disclosure and the Critical prevents remote execution. Microsoft Office gets three updates to fix vulnerabilities that could allow remote execution.
For the Surface tablet family there is no firmware update in December, 2014. No firmware for Surface Pro 3, 2, or one, neither for Surface running Windows RT.
Like always update will download and install automatically, but you can manually install the patches by going to Windows Update in Control Panel.