Vulnerabilitycritical
October 2019 Patch Tuesday: A small batch of updates from Microsoft, none from Adobe
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2019-1315 | Elevation of Privilege in Microsoft Windows Error Reporting Manager via Hard Link Abuse | 7.8 | 3% | KEVRansomware | KEV |
CVE-2019-1365+1 related CVE | An elevation of privilege vulnerability exists when Microsoft IIS Server fails to check the length of a buffer prior to copying memory to it.An attacker who… | 9.9 group max | 4% | ||
| CVE-2019-1372 | An remote code execution vulnerability exists when Azure App Service/ Antares on Azure Stack fails to check the length of a buffer prior to copying memory to… | 10.0 | 19% |
From the original article
3 min read at helpnetsecurity.com
As predicted by Ivanti’s Chris Goettl, October 2019 Patch Tuesday came with a relatively small number of Microsoft updates and, curiously enough, with no security updates from Adobe. There is no report of any of the Microsoft bugs being exploited, but there is public PoC code for and info about a local privilege escalation flaw in Windows Error Reporting ( CVE-2019-1315 ).
By @zeljkazorz · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.