Vulnerabilitycritical
Microsoft Patch Tuesday — Oct. 2019: Vulnerability disclosures and Snort coverage
- CVEs
- CVE-2019-1333CVE-2019-1238CVE-2019-1239CVE-2019-1307CVE-2019-1308CVE-2019-1335CVE-2019-1366CVE-2019-1372CVE-2019-1060CVE-2019-0608CVE-2019-1070CVE-2019-1166CVE-2019-1230CVE-2019-1311CVE-2019-1313CVE-2019-1314CVE-2019-1315CVE-2019-1316CVE-2019-1317CVE-2019-1318CVE-2019-1319CVE-2019-1320CVE-2019-1321CVE-2019-1322CVE-2019-1323CVE-2019-1325CVE-2019-1326CVE-2019-1327CVE-2019-1328CVE-2019-1329CVE-2019-1330CVE-2019-1331CVE-2019-1334CVE-2019-1336CVE-2019-1337CVE-2019-1338CVE-2019-1339CVE-2019-1340CVE-2019-1341CVE-2019-1342CVE-2019-1343CVE-2019-1344CVE-2019-1345CVE-2019-1346CVE-2019-1347CVE-2019-1356CVE-2019-1357CVE-2019-1358CVE-2019-1359CVE-2019-1361CVE-2019-1362CVE-2019-1363CVE-2019-1364CVE-2019-1365CVE-2019-1368CVE-2019-1369CVE-2019-1371CVE-2019-1375CVE-2019-1376CVE-2019-1378
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2019-1239+4 related CVEs | A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability' | 7.5 group max | 8% | ||
| CVE-2019-1365 | An elevation of privilege vulnerability exists when Microsoft IIS Server fails to check the length of a buffer prior to copying memory to it.An attacker who… | 9.9 group max | 4% | ||
CVE-2019-1330+3 related CVEs | An elevation of privilege vulnerability exists in Microsoft SharePoint, aka 'Microsoft SharePoint Elevation of Privilege Vulnerability' | 6.5 group max | 3% | ||
CVE-2019-1307+3 related CVEs | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting… | 7.5 | 10% | ||
CVE-2019-1376+1 related CVE | An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when it improperly enforces permissions, aka 'SQL Server… | 6.5 | 5% | ||
| CVE-2019-1314 | A security feature bypass vulnerability exists in Windows 10 Mobile when Cortana allows a user to access files and folders through the locked screen, aka… | 6.8 | <1% | ||
CVE-2019-1322+1 related CVE | Local Privilege Escalation in Microsoft Windows 10 and Windows Server | 7.8 | 19% | KEVRansomwarePoC | KEV |
CVE-2019-1331+1 related CVE | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel… | 8.8 | 20% | ||
CVE-2019-1364+4 related CVEs | An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka 'Win32k Elevation… | 7.8 group max | 3% | ||
| CVE-2019-1356 | An information disclosure vulnerability exists when Microsoft Edge based on Edge HTML improperly handles objects in memory, aka 'Microsoft Edge based on Edge… | 6.5 | 6% | ||
| CVE-2019-1369 | An information disclosure vulnerability exists when affected Open Enclave SDK versions improperly handle objects in memory, aka 'Open Enclave SDK Information… | 5.5 | 2% | ||
| CVE-2019-1372 | An remote code execution vulnerability exists when Azure App Service/ Antares on Azure Stack fails to check the length of a buffer prior to copying memory to… | 10.0 | 19% | ||
| CVE-2019-1375 | A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected… | 5.4 | 2% | ||
| CVE-2019-1378 | An elevation of privilege vulnerability exists in Windows 10 Update Assistant in the way it handles permissions.A locally authenticated attacker could run… | 7.8 | 1% |
From the original article
3 min read at blog.talosintelligence.com
Microsoft released its monthly security update today, disclosing a variety of vulnerabilities in several of its products. The latest Patch Tuesday discloses 60 vulnerabilities, nine of which are considered "critical," with the rest being deemed "important."
blog.talosintelligence.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.