Microsoft Patch Tuesday — Aug. 2019: Vulnerability disclosures and Snort coverage
- CVEs
- CVE-2019-1181CVE-2019-1182CVE-2019-1200CVE-2019-0719CVE-2019-0720CVE-2019-0736CVE-2019-0965CVE-2019-1131CVE-2019-1133CVE-2019-1139CVE-2019-1140CVE-2019-1141CVE-2019-1144CVE-2019-1145CVE-2019-1149CVE-2019-1150CVE-2019-1151CVE-2019-1152CVE-2019-1183CVE-2019-1188CVE-2019-1194CVE-2019-1195CVE-2019-1196CVE-2019-1197CVE-2019-1199CVE-2019-1201CVE-2019-1204CVE-2019-1205CVE-2019-1213CVE-2019-1222CVE-2019-1226CVE-2019-9506CVE-2019-0712CVE-2019-0714CVE-2019-0715CVE-2019-0716CVE-2019-0717CVE-2019-0718CVE-2019-0723CVE-2019-1030CVE-2019-1057CVE-2019-1078CVE-2019-1143CVE-2019-1146CVE-2019-1147CVE-2019-1148CVE-2019-1153CVE-2019-1154CVE-2019-1155CVE-2019-1156CVE-2019-1157CVE-2019-1158CVE-2019-1159CVE-2019-1160CVE-2019-1161CVE-2019-1162CVE-2019-1163CVE-2019-1164CVE-2019-1168CVE-2019-1169CVE-2019-1170CVE-2019-1171CVE-2019-1172CVE-2019-1173CVE-2019-1174CVE-2019-1175CVE-2019-1176CVE-2019-1177CVE-2019-1178CVE-2019-1179CVE-2019-1180CVE-2019-1184CVE-2019-1185CVE-2019-1186CVE-2019-1187CVE-2019-1190CVE-2019-1192CVE-2019-1193CVE-2019-1198CVE-2019-1202CVE-2019-1203CVE-2019-1206CVE-2019-1211CVE-2019-1212CVE-2019-1218CVE-2019-1223CVE-2019-1224CVE-2019-1225CVE-2019-1227CVE-2019-1228CVE-2019-1229CVE-2019-9511CVE-2019-9512CVE-2019-9513CVE-2019-9514CVE-2019-9518
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2019-0719+1 related CVE | A remote code execution vulnerability exists when Windows Hyper-V Network Switch on a host server fails to properly validate input from an authenticated user… | 9.1 group max | 11% | ||
| CVE-2019-1181 | A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker connects to… | 9.8 group max | 76% | ||
| CVE-2019-1140 | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based) | 8.8 group max | 4% | ||
CVE-2019-1194+3 related CVEs | A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer | 7.5 group max | 3% | ||
| CVE-2019-1205 | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory | 9.8 group max | 4% | ||
| CVE-2019-1160 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER | — | — | ||
| CVE-2019-1161 | An elevation of privilege vulnerability exists when the MpSigStub.exe for Defender allows file deletion in arbitrary locations | 7.1 | <1% | ||
CVE-2019-1203+1 related CVE | A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected… | 5.4 group max | 2% | ||
| CVE-2019-1206 | A memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends specially crafted packets to a DHCP failover server | 7.5 | 5% | ||
| CVE-2019-1211 | An elevation of privilege vulnerability exists in Git for Visual Studio when it improperly parses configuration files | 7.3 | 2% | ||
| CVE-2019-1213 | A memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends specially crafted packets to a DHCP server | 9.8 | 4% | ||
| CVE-2019-1218 | A spoofing vulnerability exists in the way Microsoft Outlook iOS software parses specifically crafted email messages | 5.4 | 4% | ||
| CVE-2019-1229 | An elevation of privilege vulnerability exists in Dynamics On-Premise v9 | 8.8 | 3% | ||
| CVE-2019-9506 | The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key length and does not prevent an attacker from… | 8.1 | 3% | ||
CVE-2019-9512+4 related CVEs | Some HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service | 7.5 | 83% |
From the original article
3 min read at blog.talosintelligence.com
Microsoft released its monthly security update today, disclosing a variety of vulnerabilities in several of its products. The latest Patch Tuesday covers 97 vulnerabilities, 31 of which are rated “critical," 65 that are considered "important" and one "moderate."
blog.talosintelligence.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.