Exploit / PoCcritical

Microsoft fixes CVE-2019-1458 Zero-Day exploited in NK

Security Affairsby @securityaffairsDec 11, 2019 · 09:43 UTC (Dec 11, 2019)3 min read2 · 1 read

Read at securityaffairs.com

Analyze CVE-2019-1458 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2019-1458 CVE-2019-0859 CVE-2019-13720

Tags: cve-2019-1458 cve-2019-0859 cve-2019-13720 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2019-0859	Local Privilege Escalation in Microsoft Win32k on Windows	7.8	4%	KEVRansomware	Apr 9, 2019 KEV Nov 3, 2021
CVE-2019-13720	Use-After-Free in Google Chrome WebAudio Allows Heap Corruption (Actively Exploited)	8.8	49%	KEVPoC	Nov 25, 2019 KEV May 23, 2022
CVE-2019-1458	Win32k Object-Handling Flaw Enables Local Privilege Escalation in Microsoft Windows	7.8	74%	KEVRansomwarePoC ×2	Dec 10, 2019 KEV Jan 10, 2022

From the original article

3 min read at securityaffairs.com

Microsoft’s December 2019 Patch Tuesday updates fix a total of 36 flaws, including CVE-2019-1458 Windows zero-day exploited in North Korea-linked attacks Microsoft’s December 2019 Patch Tuesday updates address a total of 36 flaws, including a Windows zero-day, tracked as CVE-2019-1458 exploited in attacks linked to North Korea. The vulnerability could be exploited to execute arbitrary code in kernel mode.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.