Oracle's Critical Patch Update (CPU) plugged 37 holes in the popular Java browser plug-in.
Organizations vulnerable to the SSL/TLS encryption-breaking Heartbleed Bug, a critical vulnerability in widely used versions of the OpenSSL library, are updating quickly.
A Tuesday update addresses critical Adobe Flash Player vulnerabilities that could allow an attacker to take control of Windows, Macintosh and Linux systems.
This month's Patch Tuesday marks the end of support for the dated, but widely used, products.
The company also revealed that a zero-day flaw in Word 2010 will be patched next week.
Apple's Tuesday update to Safari 7.0.3 and 6.1.3 fixes 27 vulnerabilities, most of which can enable arbitrary code execution.
The zero-day vulnerability is a remote code execution flaw in Word 2010.
A PHP vulnerability originally disclosed in March 2012 - and revised in October 2013 after a hacker found an easier way to take advantage of the exploit - is still impacting users after all these years.
The tech giant addressed numerous bugs in Webkit, a software component that powers its Safari web browser.
Nineteen bugs in web browser engine Webkit were addressed with the update.
This month, five security updates, two which are rated "critical," address vulnerabilities in Windows, IE, and Silverlight.
Microsoft will be delivering five updates on upcoming Patch Tuesday, two of which are deemed critical, which means the vulnerabilities can be exploited to allow for code execution without any user interaction.
According to FireEye, the flaw was being actively exploited to target foreign policy and defense organizations.
On Wednesday, the tech giant provided the "Fix it" solution, or temporary workaround, for the remote code execution bug.
The player has been updated to version 18.104.22.168 for Windows and Mac systems.
Between Microsoft's Patch Tuesday preview and today, two critical patches for IE and Windows were added to the lineup.
Microsoft's upcoming Patch Tuesday will bring five fixes, two of them deemed critical, and also an update that will restrict the use of certificates with MD5 hash.
Google has expanded its vulnerability reward program to include Chrome apps and extensions that were developed directly by the internet and technology company, as well as upped bounties offered for its Patch Reward Program.
Mozilla released Firefox 27 on Tuesday, including 13 patches, four of which address critical vulnerabilities that could allow an attacker to take over a targeted computer.
The security update resolves an integer underflow vulnerability, which could allow an attacker to remotely take over systems on Windows, Mac and Linux platforms.
iTunes 11.1.4 for Mac and Windows platforms was released last Wednesday.
Although a number of Google services went down for longer than an hour on Friday, it was the absence of Gmail that seems to have hit internet users the hardest.
Adobe released updates to Flash, AIR, Reader and Acrobat on Tuesday to address vulnerabilities that can cause crashes and allow attackers to take control of affected computers.
Oracle patch update contains fixes for 144 vulnerabilities existing across hundreds of its products, including several in Java, which recently led to millions of Yahoo visitors being exposed to malicious advertisements.
No fixes for Internet Explorer are included in the January release, but Microsoft has patched a zero-day flaw in XP and Server 2003, which had been exploited in limited attacks.
It's anticipated that one of the patches will fix a zero-day flaw affecting Windows XP and Windows Server 2003 users.
The Safari browser update fixes eight arbitrary code execution flaws and a bug that could allow users credentials to be disclosed.
With the update, users can employ a patch for a TIFF zero-day, which - when exploited - gives attackers the same user rights as targeted individuals.
With the monthly update, Microsoft will fix a TIFF zero-day impacting users, but not a serious Windows XP flaw under active attack.
According to the researcher who discovered the bug, Google swiftly addressed the security issue, which could leave users' passwords vulnerable to theft.