Vulnerabilitycritical
Microsoft Patch Tuesday — Nov. 2019: Vulnerability disclosures and Snort coverage
- CVEs
- CVE-2019-1448CVE-2019-0721CVE-2019-1389CVE-2019-1397CVE-2019-1398CVE-2019-1390CVE-2019-1426CVE-2019-1427CVE-2019-1428CVE-2019-1429CVE-2019-1373CVE-2019-1419CVE-2019-1430CVE-2019-1441CVE-2019-1020CVE-2018-12207CVE-2019-0712CVE-2019-11135CVE-2019-1234CVE-2019-1309CVE-2019-1310CVE-2019-1324CVE-2019-1370CVE-2019-1374CVE-2019-1379CVE-2019-1380CVE-2019-1381CVE-2019-1382CVE-2019-1383CVE-2019-1384CVE-2019-1385CVE-2019-1388CVE-2019-1391CVE-2019-1392CVE-2019-1393CVE-2019-1394CVE-2019-1395CVE-2019-1396CVE-2019-1399CVE-2019-1402CVE-2019-1405CVE-2019-1406CVE-2019-1407CVE-2019-1408CVE-2019-1409CVE-2019-1411CVE-2019-1412CVE-2019-1413CVE-2019-1415CVE-2019-1416CVE-2019-1417CVE-2019-1418CVE-2019-1420CVE-2019-1422CVE-2019-1423CVE-2019-1424CVE-2019-1425CVE-2019-1432CVE-2019-1433CVE-2019-1434CVE-2019-1435CVE-2019-1436CVE-2019-1437CVE-2019-1438CVE-2019-1439CVE-2019-1440CVE-2019-1442CVE-2019-1443CVE-2019-1445CVE-2019-1446CVE-2019-1447CVE-2019-1449CVE-2019-1456
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2018-12207 | Improper invalidation for page table updates by a virtual guest operating system for multiple Intel(R) Processors may allow an authenticated user to… | 6.5 | <1% | ||
| CVE-2019-1384 | A security feature bypass vulnerability exists where a NETLOGON message is able to obtain the session key and sign messages.To exploit this vulnerability, an… | 9.9 group max | 8% | ||
| CVE-2019-1020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER | — | — | ||
| CVE-2019-11135 | TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via… | 6.5 | 3% | ||
| CVE-2019-1234 | A spoofing vulnerability exists when Azure Stack fails to validate certain requests, aka 'Azure Stack Spoofing Vulnerability' | 7.5 | 75% | ||
| CVE-2019-1370 | An information disclosure vulnerability exists when affected Open Enclave SDK versions improperly handle objects in memory, aka 'Open Enclave SDK Information… | 5.5 | 2% | ||
| CVE-2019-1373 | A remote code execution vulnerability exists in Microsoft Exchange through the deserialization of metadata via PowerShell, aka 'Microsoft Exchange Remote Code… | 9.8 | 21% | ||
CVE-2019-1405+2 related CVEs | Local Privilege Escalation in Microsoft Windows UPnP Service | 7.8 | 30% | KEVRansomware | KEV |
CVE-2019-1429+1 related CVE | Memory corruption RCE in Microsoft Internet Explorer scripting engine | 7.5 | 77% | KEVPoC | KEV |
CVE-2019-1449+1 related CVE | A security feature bypass vulnerability exists in the way that Office Click-to-Run (C2R) components handle a specially crafted file, which could lead to a… | 9.8 group max | 7% | ||
CVE-2019-1441+2 related CVEs | A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka 'Win32k Graphics Remote… | 8.8 group max | 13% | ||
CVE-2019-1428+3 related CVEs | A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge (HTML-based), aka 'Scripting… | 7.5 group max | 10% | ||
| CVE-2019-1425 | An elevation of privilege vulnerability exists when Visual Studio fails to properly validate hardlinks while extracting archived files, aka 'Visual Studio… | 6.5 | 3% | ||
| CVE-2019-1442 | A security feature bypass vulnerability exists when Microsoft Office does not validate URLs.An attacker could send a victim a specially crafted file, which… | 5.5 | 2% | ||
| CVE-2019-1443 | An information disclosure vulnerability exists in Microsoft SharePoint when an attacker uploads a specially crafted file to the SharePoint Server.An… | 6.5 | 6% | ||
CVE-2019-1445+1 related CVE | A spoofing vulnerability exists when Office Online does not validate origin in cross-origin communications handlers correctly, aka 'Microsoft Office Online… | 5.4 | <1% | ||
CVE-2019-1448+1 related CVE | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel… | 7.8 group max | 30% |
From the original article
3 min read at blog.talosintelligence.com
Microsoft released its monthly security update today, disclosing a variety of vulnerabilities in several of its products. The latest Patch Tuesday discloses 75 vulnerabilities, 13 of which are considered "critical," with the rest being deemed "important."
blog.talosintelligence.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.