February 2019 Patch Tuesday: PrivExchange hole plugged
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2019-0594 | A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka… | 8.8 | 12% | ||
| CVE-2019-0604 | RCE in Microsoft SharePoint via Application Package Markup Validation Flaw | 9.8 | 100% | KEVRansomware | KEV |
CVE-2019-0626+1 related CVE | A memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends specially crafted packets to a DHCP server, aka 'Windows… | 9.8 group max | 69% | ||
| CVE-2019-0676 | Information Disclosure in Microsoft Internet Explorer via Improper Memory Handling | 6.5 | 8% | KEV | KEV |
CVE-2019-0724+1 related CVE | An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka 'Microsoft Exchange Server Elevation of Privilege Vulnerability' | 8.1 group max | 24% | ||
| CVE-2019-7090 | Flash Player Desktop Runtime versions 32.0.0.114 and earlier, Flash Player for Google Chrome versions 32.0.0.114 and earlier, and Flash Player for Microsoft… | 6.5 | 5% |
From the original article
2 min read at helpnetsecurity.com
For the February 2019 Patch Tuesday, Microsoft has released fixes for over 70 CVE-numbered vulnerabilities, 20 of which are rated Critical. Also rated Critical are the Adobe Flash security update ( ADV190003 , which carries a fix for CVE-2019-7090 , an information disclosure flaw in Adobe Flash Player), and the latest servicing stack updates ( ADV990001 ).
By @zeljkazorz · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.