April 2019 Patch Tuesday: Microsoft fixes two actively exploited bugs
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2019-0803+1 related CVE | Local Privilege Escalation in Microsoft Win32k Kernel Component | 7.8 | 45% | KEVRansomware | KEV |
| CVE-2019-0841 | Local Privilege Escalation via Hard-Link Flaw in Windows AppX Deployment Service | 7.8 | 41% | KEVRansomwarePoC ×2 | KEV |
CVE-2019-0853+2 related CVEs | A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code… | 8.8 group max | 29% | ||
| CVE-2019-7096 | Adobe Flash Player versions 32.0.0.156 and earlier, 32.0.0.156 and earlier, and 32.0.0.156 and earlier have an use after free vulnerability | 9.8 | 6% |
From the original article
3 min read at helpnetsecurity.com
Microsoft has plugged 74 CVE-numbered security holes on this April 2019 Patch Tuesday, including two vulnerabilities actively exploited by attackers. All of the bugs are rated either Critical or Important. Adobe has also released security updates for many of its products, including the widely used Flash Player and Shockwave Player (the freeware software plug-in for viewing multimedia and video games in web pages).
By @zeljkazorz · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.