March 2019 Patch Tuesday: Microsoft patches two actively exploited Windows flaws
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2019-0603 | A remote code execution vulnerability exists in the way that Windows Deployment Services TFTP Server handles objects in memory | 7.5 | 34% | ||
CVE-2019-0698+2 related CVEs | A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client, aka 'Windows DHCP… | 9.8 | 63% | ||
CVE-2019-0809+1 related CVE | A remote code execution vulnerability exists when the Visual Studio C++ Redistributable Installer improperly validates input before loading dynamic link… | 7.8 group max | 11% | ||
CVE-2019-0808+1 related CVE | Local Privilege Escalation in Microsoft Win32k on Windows 7 and Server 2008 | 7.8 | 53% | KEVPoC | KEV |
From the original article
2 min read at helpnetsecurity.com
As part of the March 2019 Patch Tuesday, Microsoft has released fixes for 64 CVE-numbered vulnerabilities, 17 of which are rated Critical and 45 Important. Interestingly enough, none of the two vulnerabilities that are being actively exploited in the wild and of the four listed as being publicly known are rated Critical.
By @zeljkazorz · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.