December 2019 Security Updates
Security Update
secure@microsoft.com
The Microsoft Security Response Center (MSRC) identifies, monitors, resolves, and responds to security incidents and Microsoft software security vulnerabilities. For more information, see http://www.microsoft.com/security/msrc.
2019-Dec
2019-Dec
Final
1.0
19
2026-04-30T01:53:50
December 2019 Security Updates
2019-12-10T08:00:00Z
2026-04-30T01:53:50
<p>The December security release consists of security updates for the following software:</p>
<ul>
<li>Microsoft Windows</li>
<li>Internet Explorer</li>
<li>Microsoft Office and Microsoft Office Services and Web Apps</li>
<li>SQL Server</li>
<li>Visual Studio</li>
<li>Skype for Business</li>
</ul>
<p>Please note the following information regarding the security updates:</p>
<ul>
<li>For information regarding enabling Windows 10, version 1909 features, please see <a href="https://techcommunity.microsoft.com/t5/Windows-IT-Pro-Blog/Windows-10-version-1909-delivery-options/ba-p/1002660">Windows 10, version 1909 delivery options</a>. Note that Windows 10, versions 1903 and 1909 share a common core operating system with an identical set of system files. They will also share the same security update KBs.</li>
<li>Windows 10 updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows 10, in addition to non-security updates. The updates are available via the <a href="http://catalog.update.microsoft.com/v7/site/Home.aspx">Microsoft Update Catalog</a>.</li>
<li>For information on lifecycle and support dates for Windows 10 operating systems, please see <a href="https://support.microsoft.com/en-us/help/13853/windows-lifecycle-fact-sheet">Windows Lifecycle Facts Sheet</a>.</li>
<li>A list of the latest servicing stack updates for each operating system can be found in <a href="https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/ADV990001">ADV990001</a>. This list will be updated whenever a new servicing stack update is released. It is important to install the latest servicing stack update.</li>
<li>Starting in May 2019, Internet Explorer 11 is available on Windows Server 2012. This configuration is present only in the IE Cumulative package.</li>
<li>Updates for Windows RT 8.1 and Microsoft Office RT software are only available via <a href="http://go.microsoft.com/fwlink/?LinkId=21130">Windows Update</a>.</li>
<li>In addition to security changes for the vulnerabilities, updates include defense-in-depth updates to help improve security-related features.</li>
</ul>
<p><strong>The following CVEs have FAQs with additional information and may include * further steps to take after installing the updates. Please note that this is not a complete list of CVEs for this release.</strong></p>
<ul>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV990001">ADV990001</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV190026">ADV190026</a> *</li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1349">CVE-2019-1349</a> *</li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1350">CVE-2019-1350</a> *</li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1351">CVE-2019-1351</a> *</li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1352">CVE-2019-1352</a> *</li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1354">CVE-2019-1354</a> *</li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1387">CVE-2019-1387</a> *</li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1400">CVE-2019-1400</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1461">CVE-2019-1461</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1462">CVE-2019-1462</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1463">CVE-2019-1463</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1464">CVE-2019-1464</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1465">CVE-2019-1465</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1466">CVE-2019-1466</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1467">CVE-2019-1467</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1469">CVE-2019-1469</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1470">CVE-2019-1470</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1472">CVE-2019-1472</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1474">CVE-2019-1474</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1480">CVE-2019-1480</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1481">CVE-2019-1481</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1486">CVE-2019-1486</a> *</li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1487">CVE-2019-1487</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1489">CVE-2019-1489</a></li>
</ul>
<p><strong>Known Issues</strong></p>
<p>The following KBs contain information about known issues with the security updates. For more information about Windows Known Issues, please see <a href="https://docs.microsoft.com/en-us/windows/release-information/windows-message-center">Windows message center</a> (links to currently-supported versions of Windows are in the left pane).</p>
<p>For a complete list of security update KBs, please see <a href="https://support.microsoft.com/help/20191210">20191210</a>.</p>
<table>
<thead>
<tr>
<th>KB Article</th>
<th>Applies To</th>
</tr>
</thead>
<tbody>
<tr>
<td><a href="https://support.microsoft.com/help/4484190">4484190</a></td>
<td>Excel 2013</td>
</tr>
<tr>
<td><a href="https://support.microsoft.com/help/4484179">4484179</a></td>
<td>Excel 2016</td>
</tr>
<tr>
<td><a href="https://support.microsoft.com/help/4461590">4461590</a></td>
<td>PowerPoint 2013</td>
</tr>
<tr>
<td><a href="https://support.microsoft.com/help/4484190">4484190</a></td>
<td>PowerPoint 2016</td>
</tr>
<tr>
<td><a href="https://support.microsoft.com/help/4484190">4484190</a></td>
<td>Word 2013</td>
</tr>
<tr>
<td><a href="https://support.microsoft.com/help/4484190">4484190</a></td>
<td>Word 2016</td>
</tr>
<tr>
<td><a href="https://support.microsoft.com/help/4530681">4530681</a></td>
<td>Windows 10</td>
</tr>
<tr>
<td><a href="https://support.microsoft.com/help/4530684">4530684</a></td>
<td>Windows 10, version 1803, Windows Server version 1803, Windows 10, version 1809, Windows Server version 1809</td>
</tr>
<tr>
<td><a href="https://support.microsoft.com/help/4530689">4530689</a></td>
<td>Windows 10, version 1607, Windows Server 2016</td>
</tr>
<tr>
<td><a href="https://support.microsoft.com/help/4530691">4530691</a></td>
<td>Windows Server 2012 (Monthly Rollup)</td>
</tr>
<tr>
<td><a href="https://support.microsoft.com/help/4530698">4530698</a></td>
<td>Windows Server 2012 (Security-only update)</td>
</tr>
<tr>
<td><a href="https://support.microsoft.com/help/4530702">4530702</a></td>
<td>Windows 8.1, Windows Server 2012 R2 (Monthly Rollup)</td>
</tr>
<tr>
<td><a href="https://support.microsoft.com/help/4530714">4530714</a></td>
<td>Windows 10, version 1709</td>
</tr>
<tr>
<td><a href="https://support.microsoft.com/help/4530715">4530715</a></td>
<td>Windows 10, version 1809, Windows Server 2019</td>
</tr>
<tr>
<td><a href="https://support.microsoft.com/help/4530717">4530717</a></td>
<td>Windows 10, version 1803, Windows Server version 1803</td>
</tr>
<tr>
<td><a href="https://support.microsoft.com/help/4530730">4530730</a></td>
<td>Windows 8.1, Windows Server 2012 R2 (Security-only update)</td>
</tr>
<tr>
<td><a href="https://support.microsoft.com/help/4530734">4530734</a></td>
<td>Windows 7 SP1, Windows Server 2008 R2 SP1 (Monthly Rollup)</td>
</tr>
</tbody>
</table>
The information provided in the Microsoft Knowledge Base is provided "as is" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.
Windows 10 Version 1909 for 32-bit Systems
Windows Server, version 1909 (Server Core installation)
Windows 10 Version 1909 for x64-based Systems
Windows 10 Version 1909 for ARM64-based Systems
Windows 10 Version 1803 for 32-bit Systems
Windows 10 Version 1803 for x64-based Systems
Windows Server, version 1803 (Server Core Installation)
Windows 10 Version 1803 for ARM64-based Systems
Windows 10 Version 1809 for 32-bit Systems
Windows 10 Version 1809 for x64-based Systems
Windows 10 Version 1809 for ARM64-based Systems
Windows Server 2019
Windows Server 2019 (Server Core installation)
Windows 10 Version 1709 for 32-bit Systems
Windows 10 Version 1709 for x64-based Systems
Windows 10 Version 1709 for ARM64-based Systems
Windows 10 Version 1903 for 32-bit Systems
Windows 10 Version 1903 for x64-based Systems
Windows 10 Version 1903 for ARM64-based Systems
Windows Server, version 1903 (Server Core installation)
Windows 10 for 32-bit Systems
Windows 10 for x64-based Systems
Windows 10 Version 1607 for 32-bit Systems
Windows 10 Version 1607 for x64-based Systems
Windows Server 2016
Windows Server 2016 (Server Core installation)
Windows 8.1 for 32-bit systems
Windows 8.1 for x64-based systems
Windows RT 8.1
Windows Server 2012
Windows Server 2012 (Server Core installation)
Windows Server 2012 R2
Windows Server 2012 R2 (Server Core installation)
Microsoft Windows XP Service Pack 3
Windows 10 Version 2004 for 32-bit Systems
Windows 10 Version 2004 for ARM64-based Systems
Windows 10 Version 2004 for x64-based Systems
Windows Server, version 2004 (Server Core installation)
None Available
Windows 7 for 32-bit Systems Service Pack 1
Windows 7 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)
Windows Server 2008 for x64-based Systems Service Pack 2
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)
Windows Server 2008 for 32-bit Systems Service Pack 2
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)
Windows Server 2008 for Itanium-Based Systems Service Pack 2
Internet Explorer 9 on Windows Server 2008 for 32-bit Systems Service Pack 2
Internet Explorer 9 on Windows Server 2008 for x64-based Systems Service Pack 2
Microsoft Authentication Library (MSAL) for Android
Microsoft SQL Server 2016 for x64-based Systems Service Pack 2 (CU)
Microsoft SQL Server 2016 for x64-based Systems Service Pack 2 (GDR)
SQL Server 2017 Reporting Services
Power BI Report Server
SQL Server 2019 Reporting Services
Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
Microsoft Visual Studio 2017 version 15.0
Microsoft Visual Studio 2019 version 16.0
Microsoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3)
Microsoft Visual Studio Live Share extension
Microsoft Visual Studio Code Live Share extension
Microsoft Office 2019 for 32-bit editions
Microsoft Office 2019 for 64-bit editions
Office 365 ProPlus for 32-bit Systems
Office 365 ProPlus for 64-bit Systems
Microsoft Office 2016 (32-bit edition)
Microsoft Office 2016 (64-bit edition)
Microsoft Office 2010 Service Pack 2 (32-bit editions)
Microsoft Office 2010 Service Pack 2 (64-bit editions)
Microsoft Office 2013 RT Service Pack 1
Microsoft Office 2013 Service Pack 1 (32-bit editions)
Microsoft Office 2013 Service Pack 1 (64-bit editions)
Microsoft Word 2016 (32-bit edition)
Microsoft Word 2016 (64-bit edition)
Microsoft Word 2010 Service Pack 2 (32-bit editions)
Microsoft Word 2010 Service Pack 2 (64-bit editions)
Microsoft Word 2013 RT Service Pack 1
Microsoft Word 2013 Service Pack 1 (32-bit editions)
Microsoft Word 2013 Service Pack 1 (64-bit editions)
Microsoft Office 2019 for Mac
Microsoft PowerPoint 2013 Service Pack 1 (32-bit editions)
Microsoft PowerPoint 2013 Service Pack 1 (64-bit editions)
Microsoft PowerPoint 2013 RT Service Pack 1
Microsoft PowerPoint 2016 (32-bit edition)
Microsoft PowerPoint 2016 (64-bit edition)
Microsoft Office 2016 for Mac
Microsoft PowerPoint 2010 Service Pack 2 (32-bit editions)
Microsoft PowerPoint 2010 Service Pack 2 (64-bit editions)
Microsoft Excel 2016 (32-bit edition)
Microsoft Excel 2016 (64-bit edition)
Microsoft Excel 2010 Service Pack 2 (32-bit editions)
Microsoft Excel 2010 Service Pack 2 (64-bit editions)
Microsoft Excel 2013 RT Service Pack 1
Microsoft Excel 2013 Service Pack 1 (32-bit editions)
Microsoft Excel 2013 Service Pack 1 (64-bit editions)
Skype for Business Server 2019 CU2
Microsoft SharePoint Enterprise Server 2016
Microsoft SharePoint Server 2019
Microsoft SharePoint Foundation 2010 Service Pack 2
Microsoft SharePoint Foundation 2013 Service Pack 1
Internet Explorer 10 on Windows Server 2012
Internet Explorer 11 on Windows 10 Version 1803 for 32-bit Systems
Internet Explorer 11 on Windows 10 Version 1803 for x64-based Systems
Internet Explorer 11 on Windows 10 Version 1803 for ARM64-based Systems
Internet Explorer 11 on Windows 10 Version 1809 for 32-bit Systems
Internet Explorer 11 on Windows 10 Version 1809 for x64-based Systems
Internet Explorer 11 on Windows 10 Version 1809 for ARM64-based Systems
Internet Explorer 11 on Windows Server 2019
Internet Explorer 11 on Windows 10 Version 1709 for 32-bit Systems
Internet Explorer 11 on Windows 10 Version 1709 for x64-based Systems
Internet Explorer 11 on Windows 10 Version 1709 for ARM64-based Systems
Internet Explorer 11 on Windows 10 Version 1903 for 32-bit Systems
Internet Explorer 11 on Windows 10 Version 1903 for x64-based Systems
Internet Explorer 11 on Windows 10 Version 1903 for ARM64-based Systems
Internet Explorer 11 on Windows 10 for 32-bit Systems
Internet Explorer 11 on Windows 10 for x64-based Systems
Internet Explorer 11 on Windows 10 Version 1607 for 32-bit Systems
Internet Explorer 11 on Windows 10 Version 1607 for x64-based Systems
Internet Explorer 11 on Windows Server 2016
Internet Explorer 11 on Windows 7 for 32-bit Systems Service Pack 1
Internet Explorer 11 on Windows 7 for x64-based Systems Service Pack 1
Internet Explorer 11 on Windows 8.1 for 32-bit systems
Internet Explorer 11 on Windows 8.1 for x64-based systems
Internet Explorer 11 on Windows RT 8.1
Internet Explorer 11 on Windows Server 2008 R2 for x64-based Systems Service Pack 1
Internet Explorer 11 on Windows Server 2012
Internet Explorer 11 on Windows Server 2012 R2
Internet Explorer 11 on Windows 10 Version 1909 for 32-bit Systems
Internet Explorer 11 on Windows 10 Version 1909 for ARM64-based Systems
Internet Explorer 11 on Windows 10 Version 1909 for x64-based Systems
Windows 7 for 32-bit Systems Service Pack 1
Windows 7 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)
Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems Service Pack 1
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)
Internet Explorer 9 on Windows Server 2008 for 32-bit Systems Service Pack 2
Internet Explorer 9 on Windows Server 2008 for x64-based Systems Service Pack 2
Windows Server 2012
Windows Server 2012 (Server Core installation)
Windows 8.1 for 32-bit systems
Windows 8.1 for x64-based systems
Windows Server 2012 R2
Windows RT 8.1
Internet Explorer 11 on Windows 7 for 32-bit Systems Service Pack 1
Internet Explorer 11 on Windows 7 for x64-based Systems Service Pack 1
Internet Explorer 11 on Windows Server 2008 R2 for x64-based Systems Service Pack 1
Internet Explorer 11 on Windows Server 2012
Internet Explorer 11 on Windows 8.1 for 32-bit systems
Internet Explorer 11 on Windows 8.1 for x64-based systems
Internet Explorer 11 on Windows Server 2012 R2
Internet Explorer 11 on Windows RT 8.1
Internet Explorer 11 on Windows 10 for 32-bit Systems
Internet Explorer 11 on Windows 10 for x64-based Systems
Internet Explorer 11 on Windows Server 2016
Internet Explorer 11 on Windows 10 Version 1607 for 32-bit Systems
Internet Explorer 11 on Windows 10 Version 1607 for x64-based Systems
Internet Explorer 11 on Windows 10 Version 1709 for 32-bit Systems
Internet Explorer 11 on Windows 10 Version 1709 for x64-based Systems
Internet Explorer 11 on Windows 10 Version 1803 for 32-bit Systems
Internet Explorer 11 on Windows 10 Version 1803 for x64-based Systems
Internet Explorer 11 on Windows 10 Version 1803 for ARM64-based Systems
Internet Explorer 11 on Windows 10 Version 1809 for 32-bit Systems
Internet Explorer 11 on Windows 10 Version 1809 for x64-based Systems
Internet Explorer 11 on Windows 10 Version 1809 for ARM64-based Systems
Internet Explorer 11 on Windows Server 2019
Internet Explorer 11 on Windows 10 Version 1709 for ARM64-based Systems
Internet Explorer 11 on Windows 10 Version 1903 for 32-bit Systems
Internet Explorer 11 on Windows 10 Version 1903 for x64-based Systems
Internet Explorer 11 on Windows 10 Version 1903 for ARM64-based Systems
Internet Explorer 11 on Windows 10 Version 1909 for 32-bit Systems
Internet Explorer 11 on Windows 10 Version 1909 for x64-based Systems
Internet Explorer 11 on Windows 10 Version 1909 for ARM64-based Systems
Microsoft Excel 2010 Service Pack 2 (32-bit editions)
Microsoft Excel 2010 Service Pack 2 (64-bit editions)
Microsoft PowerPoint 2010 Service Pack 2 (32-bit editions)
Microsoft PowerPoint 2010 Service Pack 2 (64-bit editions)
Microsoft SharePoint Foundation 2010 Service Pack 2
Microsoft Word 2010 Service Pack 2 (32-bit editions)
Microsoft Word 2010 Service Pack 2 (64-bit editions)
Microsoft Office 2010 Service Pack 2 (32-bit editions)
Microsoft Office 2010 Service Pack 2 (64-bit editions)
Windows Server 2012 R2 (Server Core installation)
Internet Explorer 10 on Windows Server 2012
Microsoft Office 2013 Service Pack 1 (32-bit editions)
Microsoft Office 2013 Service Pack 1 (64-bit editions)
Microsoft Office 2013 RT Service Pack 1
Microsoft Word 2013 Service Pack 1 (32-bit editions)
Microsoft Word 2013 Service Pack 1 (64-bit editions)
Microsoft Word 2013 RT Service Pack 1
Microsoft SharePoint Foundation 2013 Service Pack 1
Microsoft Excel 2013 Service Pack 1 (32-bit editions)
Microsoft Excel 2013 Service Pack 1 (64-bit editions)
Microsoft Excel 2013 RT Service Pack 1
Microsoft PowerPoint 2013 Service Pack 1 (32-bit editions)
Microsoft PowerPoint 2013 Service Pack 1 (64-bit editions)
Microsoft PowerPoint 2013 RT Service Pack 1
Windows 10 for 32-bit Systems
Microsoft Office 2016 for Mac
Windows 10 for x64-based Systems
Microsoft Excel 2016 (32-bit edition)
Microsoft Excel 2016 (64-bit edition)
Microsoft PowerPoint 2016 (32-bit edition)
Microsoft PowerPoint 2016 (64-bit edition)
Microsoft Word 2016 (32-bit edition)
Microsoft Word 2016 (64-bit edition)
Microsoft Office 2016 (32-bit edition)
Microsoft Office 2016 (64-bit edition)
Windows Server 2016
Windows 10 Version 1607 for 32-bit Systems
Windows 10 Version 1607 for x64-based Systems
Windows Server 2016 (Server Core installation)
Microsoft SharePoint Enterprise Server 2016
Windows 10 Version 1709 for 32-bit Systems
Windows 10 Version 1709 for x64-based Systems
Windows 10 Version 1803 for 32-bit Systems
Windows 10 Version 1803 for x64-based Systems
Windows Server, version 1803 (Server Core Installation)
Microsoft SQL Server 2016 for x64-based Systems Service Pack 2 (CU)
Microsoft SQL Server 2016 for x64-based Systems Service Pack 2 (GDR)
Windows 10 Version 1803 for ARM64-based Systems
Windows 10 Version 1809 for 32-bit Systems
Windows 10 Version 1809 for x64-based Systems
Windows 10 Version 1809 for ARM64-based Systems
Windows Server 2019
Windows Server 2019 (Server Core installation)
Microsoft Office 2019 for 32-bit editions
Microsoft Office 2019 for 64-bit editions
Microsoft Office 2019 for Mac
Office 365 ProPlus for 32-bit Systems
Office 365 ProPlus for 64-bit Systems
Windows 10 Version 1709 for ARM64-based Systems
Microsoft SharePoint Server 2019
Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
Windows 10 Version 1903 for 32-bit Systems
Windows 10 Version 1903 for x64-based Systems
Windows 10 Version 1903 for ARM64-based Systems
Windows Server, version 1903 (Server Core installation)
Microsoft Visual Studio 2017 version 15.0
Microsoft Visual Studio 2019 version 16.0
Windows 10 Version 1909 for 32-bit Systems
Windows 10 Version 1909 for x64-based Systems
Windows 10 Version 1909 for ARM64-based Systems
Windows Server, version 1909 (Server Core installation)
Microsoft Authentication Library (MSAL) for Android
SQL Server 2017 Reporting Services
SQL Server 2019 Reporting Services
Power BI Report Server
Microsoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3)
Microsoft Visual Studio Live Share extension
Skype for Business Server 2019 CU2
Microsoft Visual Studio Code Live Share extension
Windows 10 Version 2004 for 32-bit Systems
Windows 10 Version 2004 for ARM64-based Systems
Windows 10 Version 2004 for x64-based Systems
Windows Server, version 2004 (Server Core installation)
cm1 moby-buildx 0.4.1+azure-3 on CBL Mariner 1.0
cm1 qemu-kvm 4.2.0-13 on CBL Mariner 1.0
cbl2 mod_fcgid 2.3.9-21 on CBL Mariner 2.0
cbl2 openslp 2.0.0-26 on CBL Mariner 2.0
azl3 openslp 2.0.0-26 on Azure Linux 3.0
azl3 openslp 2.0.0-26 on Azure Linux 3.0
cbl2 snakeyaml 1.25-2 on CBL Mariner 2.0
azl3 ceph 18.2.1-1 on Azure Linux 3.0
azl3 ceph 18.2.1-1 on Azure Linux 3.0
cm1 xerces-c 3.2.3-2 on CBL Mariner 1.0
cbl2 libspiro 20221101-1 on CBL Mariner 2.0
cm1 cyrus-sasl 2.1.27-4 on CBL Mariner 1.0
cbl2 cyrus-sasl 2.1.27-10 on CBL Mariner 2.0
cbl2 libesmtp 1.0.6-21 on CBL Mariner 2.0
azl3 libesmtp 1.0.6-21 on Azure Linux 3.0
azl3 libesmtp 1.0.6-21 on Azure Linux 3.0
cm1 vim 8.1.1667-1 on CBL Mariner 1.0
cbl2 js-jquery 3.5.0-4 on CBL Mariner 2.0
azl3 js-jquery 3.5.0-4 on Azure Linux 3.0
azl3 js-jquery 3.5.0-4 on Azure Linux 3.0
azl3 heimdal 7.8.0-3 on Azure Linux 3.0
azl3 mozjs 102.15.1-1 on Azure Linux 3.0
azl3 libdb 5.3.28-9 on Azure Linux 3.0
cbl2 ceph 16.2.10-7 on CBL Mariner 2.0
azl3 ceph 16.2.10-3 on Azure Linux 3.0
azl3 nss 3.96.1-3 on Azure Linux 3.0
cbl2 cloud-hypervisor 32.0-7 on CBL Mariner 2.0
cbl2 rust 1.72.0-15 on CBL Mariner 2.0
azl3 rust 1.75.0-27 on Azure Linux 3.0
cbl2 qemu 6.2.0-27 on CBL Mariner 2.0
azl3 rust 1.90.0-6 on Azure Linux 3.0
cbl2 edk2 20230301gitf80f052277c8-47 on CBL Mariner 2.0
cbl2 hvloader 1.0.1-18 on CBL Mariner 2.0
cbl2 openssl 1.1.1k-39 on CBL Mariner 2.0
azl3 rust 1.75.0-28 on Azure Linux 3.0
azl3 rust 1.90.0-7 on Azure Linux 3.0
Microsoft Windows XP Service Pack 3
None Available
Windows Server 2008 for Itanium-Based Systems Service Pack 2
Windows Server 2008 for 32-bit Systems Service Pack 2
Windows Server 2008 for x64-based Systems Service Pack 2
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)
The Apache Xerces-C 3.0.0 to 3.2.3 XML parser contains a use-after-free error triggered during the scanning of external DTDs. This flaw has not been addressed in the maintained version of the library and has no current mitigation other than to disable DTD processing. This can be accomplished via the DOM using a standard parser feature or via SAX using the XERCES_DISABLE_DTD environment variable.
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
apache
Yes
CVE-2018-1311
Use After Free
16941-16820
16941-16820
Important
16941-16820
8.1
8.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
16941-16820
CBL-Mariner Releases
16941-16820
No
Security Update
3.2.3-2
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
16941-16820
CBL-Mariner Releases
1.0
2022-04-06T00:00:00
<p>Information published.</p>
Libspiro through 20190731 has a stack-based buffer overflow in the spiro_to_bpath0() function in spiro.c.
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
mitre
Yes
CVE-2019-19847
Out-of-bounds Write
17038-16823
17038-16823
Important
17038-16823
8.1
8.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
17038-16823
CBL-Mariner Releases
17038-16823
No
Security Update
20221101-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
17038-16823
CBL-Mariner Releases
1.0
2022-01-19T00:00:00
<p>Information published.</p>
cyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading to unauthenticated remote denial-of-service in OpenLDAP via a malformed LDAP packet. The OpenLDAP crash is ultimately caused by an off-by-one error in _sasl_add_string in common.c in cyrus-sasl.
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
mitre
Yes
CVE-2019-19906
Out-of-bounds Write
17039-16820
17040-16823
17039-16820
17040-16823
Important
17039-16820
Important
17040-16823
7.5
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
17039-16820
7.5
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
17040-16823
CBL-Mariner Releases
17039-16820
No
Security Update
2.1.27-4
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
17039-16820
CBL-Mariner Releases
CBL-Mariner Releases
17040-16823
No
Security Update
2.1.27-10
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
17040-16823
CBL-Mariner Releases
1.0
2020-08-18T00:00:00
<p>Information published.</p>
1.1
2021-12-16T00:00:00
<p>Added cyrus-sasl to CBL-Mariner 2.0</p>
libESMTP through 1.0.6 mishandles domain copying into a fixed-size buffer in ntlm_build_type_2 in ntlm/ntlmstruct.c as demonstrated by a stack-based buffer over-read.
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
mitre
Yes
CVE-2019-19977
Out-of-bounds Read
17041-16823
17042-16817
17042-17084
17041-16823
17042-16817
17042-17084
Critical
17041-16823
Critical
17042-16817
Critical
17042-17084
9.8
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
17041-16823
9.8
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
17042-16817
9.8
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
17042-17084
CBL-Mariner Releases
17041-16823
17042-16817
17042-17084
No
Security Update
1.0.6-21
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
17041-16823
17042-16817
17042-17084
CBL-Mariner Releases
1.0
2022-01-19T00:00:00
<p>Information published.</p>
1.1
2024-06-30T07:00:00
<p>Information published.</p>
An issue was discovered in ide_dma_cb() in hw/ide/core.c in QEMU 2.4.0 through 4.2.0. The guest system can crash the QEMU process in the host system via a special SCSI_IOCTL_SEND_COMMAND. It hits an assertion that implies that the size of successful DMA transfers there must be a multiple of 512 (the size of a sector). NOTE: a member of the QEMU security team disputes the significance of this issue because a "privileged guest user has many ways to cause similar DoS effect without triggering this assert.
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
mitre
Yes
CVE-2019-20175
Improper Check for Unusual or Exceptional Conditions
16843-16820
16843-16820
Important
16843-16820
7.5
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
16843-16820
CBL-Mariner Releases
16843-16820
No
Security Update
4.2.0-13
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
16843-16820
CBL-Mariner Releases
1.0
2020-08-18T00:00:00
<p>Information published.</p>
OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated the severity of this issue to be in the Critical severity range with a maximum CVSSv3 base score of 9.8.
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
vmware
Yes
CVE-2019-5544
Out-of-bounds Write
16874-16823
16877-16817
16877-17084
16874-16823
16877-16817
16877-17084
Critical
16874-16823
Critical
16877-16817
Critical
16877-17084
9.8
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
16874-16823
9.8
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
16877-16817
9.8
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
16877-17084
CBL-Mariner Releases
16874-16823
16877-16817
16877-17084
No
Security Update
2.0.0-26
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
16874-16823
16877-16817
16877-17084
CBL-Mariner Releases
1.0
2022-01-19T00:00:00
<p>Information published.</p>
1.1
2024-06-30T07:00:00
<p>Information published.</p>
Docker Engine before 1.8.3 and CS Docker Engine before 1.6.2-CS7 do not use a globally unique identifier to store image layers which makes it easier for attackers to poison the image cache via a crafted image in pull or push commands.
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
redhat
Yes
CVE-2014-8178
Improper Input Validation
16833-16820
16833-16820
Moderate
16833-16820
5.5
5.5
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
16833-16820
CBL-Mariner Releases
16833-16820
No
Security Update
-
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
16833-16820
CBL-Mariner Releases
1.0
2021-07-16T00:00:00
<p>Information published.</p>
Docker Engine before 1.8.3 and CS Docker Engine before 1.6.2-CS7 does not properly validate and extract the manifest object from its JSON representation during a pull which allows attackers to inject new attributes in a JSON object and bypass pull-by-digest validation.
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
redhat
Yes
CVE-2014-8179
Improper Input Validation
16833-16820
16833-16820
Important
16833-16820
7.5
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
16833-16820
CBL-Mariner Releases
16833-16820
No
Security Update
-
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
16833-16820
CBL-Mariner Releases
1.0
2021-07-16T00:00:00
<p>Information published.</p>
multiSelect in select.c in SQLite 3.30.1 mishandles certain errors during parsing, as demonstrated by errors from sqlite3WindowRewrite() calls. NOTE: this vulnerability exists because of an incomplete fix for CVE-2019-19880.
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
mitre
Yes
CVE-2019-19926
NULL Pointer Dereference
19212-17084
19212-17084
Important
19212-17084
7.5
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
19212-17084
1.1
2026-02-18T01:46:06
<p>Information published.</p>
1.0
2025-09-03T21:18:34
<p>Information published.</p>
lookupName in resolve.c in SQLite 3.30.1 omits bits from the colUsed bitmask in the case of a generated column, which allows attackers to cause a denial of service or possibly have unspecified other impact.
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
mitre
Yes
CVE-2019-19317
Incorrect Conversion between Numeric Types
19212-17084
19212-17084
Critical
19212-17084
9.8
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
19212-17084
1.0
2025-09-03T21:25:50
<p>Information published.</p>
1.1
2026-02-18T01:49:00
<p>Information published.</p>
rsaz_512_sqr overflow bug on x86_64
Mariner
openssl
Yes
CVE-2019-1551
21183-17086
21184-17086
21185-17086
21118-17086
21110-17084
21123-17084
21249-17084
21266-17084
20115-17086
21108-17086
21183-17086
21184-17086
21185-17086
21118-17086
21110-17084
21123-17084
21249-17084
21266-17084
20115-17086
21108-17086
Moderate
21183-17086
Moderate
21184-17086
Moderate
21185-17086
Moderate
21118-17086
Moderate
21110-17084
Moderate
21123-17084
Moderate
21249-17084
Moderate
21266-17084
Moderate
20115-17086
Moderate
21108-17086
5.3
5.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
21183-17086
5.3
5.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
21184-17086
5.3
5.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
21185-17086
5.3
5.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
21118-17086
5.3
5.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
21110-17084
5.3
5.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
21123-17084
5.3
5.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
21249-17084
5.3
5.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
21266-17084
5.3
5.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
20115-17086
5.3
5.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
21108-17086
1.0
2026-04-29T01:07:57
<p>Information published.</p>
2.0
2026-04-29T15:00:00
<p>Information published.</p>
3.0
2026-04-30T01:53:50
<p>Information published.</p>
alter.c in SQLite through 3.30.1 allows attackers to trigger infinite recursion via certain types of self-referential views in conjunction with ALTER TABLE statements.
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
mitre
Yes
CVE-2019-19645
Uncontrolled Recursion
19814-17086
19212-17084
16939-16817
16939-17084
19856-17084
18469-17084
18431-17084
20070-17084
19814-17086
19212-17084
16939-16817
16939-17084
19856-17084
18469-17084
18431-17084
20070-17084
Moderate
19814-17086
Moderate
19212-17084
Moderate
16939-16817
Moderate
16939-17084
Moderate
19856-17084
Moderate
18469-17084
Moderate
18431-17084
Moderate
20070-17084
5.5
5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
19814-17086
5.5
5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
19212-17084
5.5
5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
16939-16817
5.5
5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
16939-17084
5.5
5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
19856-17084
5.5
5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
18469-17084
5.5
5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
18431-17084
5.5
5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
20070-17084
CBL-Mariner Releases
16939-16817
16939-17084
19856-17084
No
Security Update
18.2.1-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
16939-16817
16939-17084
19856-17084
CBL-Mariner Releases
1.1
2026-02-18T14:43:29
<p>Information published.</p>
1.0
2024-06-30T07:00:00
<p>Information published.</p>
pragma.c in SQLite through 3.30.1 mishandles NOT NULL in an integrity_check PRAGMA command in certain cases of generated columns.
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
mitre
Yes
CVE-2019-19646
Improper Check for Unusual or Exceptional Conditions
19856-17084
18431-17084
20070-17084
18469-17084
16939-16817
16939-17084
19814-17086
19856-17084
18431-17084
20070-17084
18469-17084
16939-16817
16939-17084
19814-17086
Critical
19856-17084
Critical
18431-17084
Critical
20070-17084
Critical
18469-17084
Critical
16939-16817
Critical
16939-17084
Critical
19814-17086
9.8
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
19856-17084
9.8
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
18431-17084
9.8
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
20070-17084
9.8
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
18469-17084
9.8
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
16939-16817
9.8
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
16939-17084
9.8
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
19814-17086
CBL-Mariner Releases
19856-17084
16939-16817
16939-17084
No
Security Update
18.2.1-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
19856-17084
16939-16817
16939-17084
CBL-Mariner Releases
1.1
2026-02-18T15:17:33
<p>Information published.</p>
1.0
2024-06-30T07:00:00
<p>Information published.</p>
The autocmd feature in window.c in Vim before 8.1.2136 accesses freed memory.
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
mitre
Yes
CVE-2019-20079
Use After Free
17043-16820
17043-16820
Important
17043-16820
7.8
7.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
17043-16820
CBL-Mariner Releases
17043-16820
No
Security Update
8.1.1667-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
17043-16820
CBL-Mariner Releases
1.0
2020-09-25T00:00:00
<p>Information published.</p>
ctorName in index.js in kind-of v6.0.2 allows external user input to overwrite certain internal attributes via a conflicting name as demonstrated by 'constructor': {'name':'Symbol'}. Hence a crafted payload can overwrite this builtin attribute to manipulate the type detection result.
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
mitre
Yes
CVE-2019-20149
Exposure of Resource to Wrong Sphere
17044-16823
17045-16817
17045-17084
17044-16823
17045-16817
17045-17084
Important
17044-16823
Important
17045-16817
Important
17045-17084
7.5
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
17044-16823
7.5
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
17045-16817
7.5
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
17045-17084
CBL-Mariner Releases
17044-16823
17045-16817
17045-17084
No
Security Update
3.5.0-4
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
17044-16823
17045-16817
17045-17084
CBL-Mariner Releases
1.0
2024-09-11T00:00:00
<p>Information published.</p>
Path traversal vulnerability in Docker before 1.3.3 allows remote attackers to write to arbitrary files and bypass a container protection mechanism via a full pathname in a symlink in an (1) image or (2) build in a Dockerfile.
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
mitre
Yes
CVE-2014-9356
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
16833-16820
16833-16820
Important
16833-16820
8.6
8.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
16833-16820
CBL-Mariner Releases
16833-16820
No
Security Update
-
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
16833-16820
CBL-Mariner Releases
1.0
2021-07-16T00:00:00
<p>Information published.</p>
A security Bypass vulnerability exists in the FcgidPassHeader Proxy in mod_fcgid through 2016-07-07.
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
mitre
Yes
CVE-2016-1000104
Improper Input Validation
16858-16823
16858-16823
Important
16858-16823
8.8
8.8
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
16858-16823
CBL-Mariner Releases
16858-16823
No
Security Update
2.3.9-21
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
16858-16823
CBL-Mariner Releases
1.0
2025-10-01T23:10:54
<p>Information published.</p>
The Alias feature in SnakeYAML before 1.26 allows entity expansion during a load operation, a related issue to CVE-2003-1564.
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
mitre
Yes
CVE-2017-18640
Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')
16909-16823
16909-16823
Important
16909-16823
7.5
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
16909-16823
CBL-Mariner Releases
16909-16823
No
Security Update
1.25-2
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
16909-16823
CBL-Mariner Releases
1.0
2025-10-01T23:10:55
<p>Information published.</p>
Windows Remote Desktop Protocol (RDP) Denial of Service Vulnerability
<p>A denial of service vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connects to the target system using RDP and sends specially crafted requests. An attacker who successfully exploited this vulnerability could cause the RDP service on the target system to stop responding.</p>
<p>To exploit this vulnerability, an attacker would need to run a specially crafted application against a server which provides Remote Desktop Protocol (RDP) services.</p>
<p>The update addresses the vulnerability by correcting how RDP handles connection requests.</p>
Microsoft Windows
CVE-2019-1453
11712
11715
11713
11714
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
10050
10051
10049
10378
10379
10483
10543
Denial of Service
11712
Denial of Service
11715
Denial of Service
11713
Denial of Service
11714
Denial of Service
11497
Denial of Service
11498
Denial of Service
11499
Denial of Service
11563
Denial of Service
11568
Denial of Service
11569
Denial of Service
11570
Denial of Service
11571
Denial of Service
11572
Denial of Service
11453
Denial of Service
11454
Denial of Service
11583
Denial of Service
11644
Denial of Service
11645
Denial of Service
11646
Denial of Service
11647
Denial of Service
10729
Denial of Service
10735
Denial of Service
10852
Denial of Service
10853
Denial of Service
10816
Denial of Service
10855
Denial of Service
10047
Denial of Service
10048
Denial of Service
10481
Denial of Service
10482
Denial of Service
10484
Denial of Service
10050
Denial of Service
10051
Denial of Service
10049
Denial of Service
10378
Denial of Service
10379
Denial of Service
10483
Denial of Service
10543
Important
11712
Important
11715
Important
11713
Important
11714
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
10050
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:Permanent
7.5
6.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
11712
7.5
6.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
11715
7.5
6.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
11713
7.5
6.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
11714
7.5
6.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
11497
7.5
6.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
11498
7.5
6.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
11499
7.5
6.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
11563
7.5
6.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
11568
7.5
6.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
11569
7.5
6.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
11570
7.5
6.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
11571
7.5
6.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
11572
7.5
6.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
11453
7.5
6.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
11454
7.5
6.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
11583
7.5
6.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
11644
7.5
6.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
11645
7.5
6.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
11646
7.5
6.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
11647
7.5
6.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
10729
7.5
6.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
10735
7.5
6.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
10852
7.5
6.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
10853
7.5
6.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
10816
7.5
6.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
10855
7.5
6.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
10047
7.5
6.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
10048
7.5
6.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
10481
7.5
6.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
10482
7.5
6.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
10484
7.5
6.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
10050
7.5
6.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
10051
7.5
6.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
10049
7.5
6.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
10378
7.5
6.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
10379
7.5
6.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
10483
7.5
6.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
10543
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11712
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11712
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11715
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11715
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11713
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11713
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11714
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11714
4530717
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530717
4525237
11497
Yes
Security Update
4530717
https://support.microsoft.com/help/4530717
11497
4530717
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530717
4525237
11498
Yes
Security Update
4530717
https://support.microsoft.com/help/4530717
11498
4530717
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530717
4525237
11499
Yes
Security Update
4530717
https://support.microsoft.com/help/4530717
11499
4530717
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530717
4525237
11563
Yes
Security Update
4530717
https://support.microsoft.com/help/4530717
11563
4530715
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530715
4523205
11568
Yes
Security Update
4530715
https://support.microsoft.com/help/4530715
11568
4530715
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530715
4523205
11569
Yes
Security Update
4530715
https://support.microsoft.com/help/4530715
11569
4530715
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530715
4523205
11570
Yes
Security Update
4530715
https://support.microsoft.com/help/4530715
11570
4530715
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530715
4523205
11571
Yes
Security Update
4530715
https://support.microsoft.com/help/4530715
11571
4530715
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530715
4523205
11572
Yes
Security Update
4530715
https://support.microsoft.com/help/4530715
11572
4530714
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530714
4525241
11453
Yes
Security Update
4530714
https://support.microsoft.com/help/4530714
11453
4530714
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530714
4525241
11454
Yes
Security Update
4530714
https://support.microsoft.com/help/4530714
11454
4530714
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530714
4525241
11583
Yes
Security Update
4530714
https://support.microsoft.com/help/4530714
11583
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11644
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11644
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11645
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11645
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11646
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11646
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11647
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11647
4530681
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530681
4525232
10729
Yes
Security Update
4530681
https://support.microsoft.com/help/4530681
10729
4530681
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530681
4525232
10735
Yes
Security Update
4530681
https://support.microsoft.com/help/4530681
10735
4530689
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530689
4525236
10852
Yes
Security Update
4530689
https://support.microsoft.com/help/4530689
10852
4530689
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530689
4525236
10853
Yes
Security Update
4530689
https://support.microsoft.com/help/4530689
10853
4530689
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530689
4525236
10816
Yes
Security Update
4530689
https://support.microsoft.com/help/4530689
10816
4530689
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530689
4525236
10855
Yes
Security Update
4530689
https://support.microsoft.com/help/4530689
10855
4530734
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530734
4525235
10047
Yes
Monthly Rollup
4530692
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530692
10047
Yes
Security Only
4530734
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530734
4525235
10048
Yes
Monthly Rollup
4530692
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530692
10048
Yes
Security Only
4530702
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530702
4525243
10481
Yes
Monthly Rollup
4530702
https://support.microsoft.com/help/4530702
10481
4530730
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530730
10481
Yes
Security Only
4530730
https://support.microsoft.com/help/4530730
10481
4530702
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530702
4525243
10482
Yes
Monthly Rollup
4530702
https://support.microsoft.com/help/4530702
10482
4530730
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530730
10482
Yes
Security Only
4530730
https://support.microsoft.com/help/4530730
10482
4530702
4525243
10484
Yes
Monthly Rollup
4530702
https://support.microsoft.com/help/4530702
10484
4530734
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530734
4525235
10050
Yes
Monthly Rollup
4530692
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530692
10050
Yes
Security Only
4530734
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530734
4525235
10051
Yes
Monthly Rollup
4530692
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530692
10051
Yes
Security Only
4530734
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530734
4525235
10049
Yes
Monthly Rollup
4530692
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530692
10049
Yes
Security Only
4530691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530691
4525246
10378
Yes
Monthly Rollup
4530691
https://support.microsoft.com/help/4530691
10378
4530698
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530698
10378
Yes
Security Only
4530698
https://support.microsoft.com/help/4530698
10378
4530691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530691
4525246
10379
Yes
Monthly Rollup
4530691
https://support.microsoft.com/help/4530691
10379
4530698
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530698
10379
Yes
Security Only
4530698
https://support.microsoft.com/help/4530698
10379
4530702
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530702
4525243
10483
Yes
Monthly Rollup
4530702
https://support.microsoft.com/help/4530702
10483
4530730
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530730
10483
Yes
Security Only
4530730
https://support.microsoft.com/help/4530730
10483
4530702
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530702
4525243
10543
Yes
Monthly Rollup
4530702
https://support.microsoft.com/help/4530702
10543
4530730
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530730
10543
Yes
Security Only
4530730
https://support.microsoft.com/help/4530730
10543
A member of <a href="https://talosintelligence.com/vulnerability_reports">Cisco Talos</a>
1.0
2019-12-10T08:00:00Z
<p>Information published.</p>
Windows Hyper-V Information Disclosure Vulnerability
<p>An information disclosure vulnerability exists when Windows Hyper-V on a host operating system fails to properly validate input from an authenticated user on a guest operating system. To exploit the vulnerability, an attacker on a guest operating system could run a specially crafted application that could cause the Hyper-V host operating system to disclose memory information.</p>
<p>An attacker who successfully exploited the vulnerability could gain access to information on the Hyper-V host operating system.</p>
<p>The security update addresses the vulnerability by correcting how Hyper-V validates guest operating system user input.</p>
<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>
<p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is the contents of Kernel memory. An attacker could read the contents of Kernel memory from a user mode process.</p>
Windows Hyper-V
CVE-2019-1470
11498
11499
11569
11571
11572
11454
11645
11647
10735
10853
10816
10855
10048
10482
9318
9344
10051
10049
10378
10379
10483
10543
11715
11713
Information Disclosure
11498
Information Disclosure
11499
Information Disclosure
11569
Information Disclosure
11571
Information Disclosure
11572
Information Disclosure
11454
Information Disclosure
11645
Information Disclosure
11647
Information Disclosure
10735
Information Disclosure
10853
Information Disclosure
10816
Information Disclosure
10855
Information Disclosure
10048
Information Disclosure
10482
Information Disclosure
9318
Information Disclosure
9344
Information Disclosure
10051
Information Disclosure
10049
Information Disclosure
10378
Information Disclosure
10379
Information Disclosure
10483
Information Disclosure
10543
Information Disclosure
11715
Information Disclosure
11713
Important
11498
Important
11499
Important
11569
Important
11571
Important
11572
Important
11454
Important
11645
Important
11647
Important
10735
Important
10853
Important
10816
Important
10855
Important
10048
Important
10482
Important
9318
Important
9344
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Important
11715
Important
11713
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely
6.0
5.4
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N/E:P/RL:O/RC:C
11498
6.0
5.4
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N/E:P/RL:O/RC:C
11499
6.0
5.4
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N/E:P/RL:O/RC:C
11569
6.0
5.4
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N/E:P/RL:O/RC:C
11571
6.0
5.4
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N/E:P/RL:O/RC:C
11572
6.0
5.4
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N/E:P/RL:O/RC:C
11454
6.0
5.4
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N/E:P/RL:O/RC:C
11645
6.0
5.4
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N/E:P/RL:O/RC:C
11647
6.0
5.4
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N/E:P/RL:O/RC:C
10735
6.0
5.4
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N/E:P/RL:O/RC:C
10853
6.0
5.4
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N/E:P/RL:O/RC:C
10816
6.0
5.4
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N/E:P/RL:O/RC:C
10855
6.0
5.4
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N/E:P/RL:O/RC:C
10048
6.0
5.4
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N/E:P/RL:O/RC:C
10482
6.0
5.4
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N/E:P/RL:O/RC:C
9318
6.0
5.4
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N/E:P/RL:O/RC:C
9344
6.0
5.4
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N/E:P/RL:O/RC:C
10051
6.0
5.4
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N/E:P/RL:O/RC:C
10049
6.0
5.4
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N/E:P/RL:O/RC:C
10378
6.0
5.4
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N/E:P/RL:O/RC:C
10379
6.0
5.4
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N/E:P/RL:O/RC:C
10483
6.0
5.4
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N/E:P/RL:O/RC:C
10543
6.0
5.4
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N/E:P/RL:O/RC:C
11715
6.0
5.4
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N/E:P/RL:O/RC:C
11713
4530717
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530717
4525237
11498
Yes
Security Update
4530717
https://support.microsoft.com/help/4530717
11498
4530717
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530717
4525237
11499
Yes
Security Update
4530717
https://support.microsoft.com/help/4530717
11499
4530715
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530715
4523205
11569
Yes
Security Update
4530715
https://support.microsoft.com/help/4530715
11569
4530715
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530715
4523205
11571
Yes
Security Update
4530715
https://support.microsoft.com/help/4530715
11571
4530715
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530715
4523205
11572
Yes
Security Update
4530715
https://support.microsoft.com/help/4530715
11572
4530714
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530714
4525241
11454
Yes
Security Update
4530714
https://support.microsoft.com/help/4530714
11454
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11645
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11645
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11647
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11647
4530681
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530681
4525232
10735
Yes
Security Update
4530681
https://support.microsoft.com/help/4530681
10735
4530689
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530689
4525236
10853
Yes
Security Update
4530689
https://support.microsoft.com/help/4530689
10853
4530689
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530689
4525236
10816
Yes
Security Update
4530689
https://support.microsoft.com/help/4530689
10816
4530689
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530689
4525236
10855
Yes
Security Update
4530689
https://support.microsoft.com/help/4530689
10855
4530734
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530734
4525235
10048
Yes
Monthly Rollup
4530692
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530692
10048
Yes
Security Only
4530702
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530702
4525243
10482
Yes
Monthly Rollup
4530702
https://support.microsoft.com/help/4530702
10482
4530730
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530730
10482
Yes
Security Only
4530730
https://support.microsoft.com/help/4530730
10482
4530695
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530695
4525234
9318
Yes
Monthly Rollup
4530719
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530719
9318
Yes
Security Only
4530695
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530695
4525234
9344
Yes
Monthly Rollup
4530719
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530719
9344
Yes
Security Only
4530734
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530734
4525235
10051
Yes
Monthly Rollup
4530692
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530692
10051
Yes
Security Only
4530734
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530734
4525235
10049
Yes
Monthly Rollup
4530692
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530692
10049
Yes
Security Only
4530691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530691
4525246
10378
Yes
Monthly Rollup
4530691
https://support.microsoft.com/help/4530691
10378
4530698
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530698
10378
Yes
Security Only
4530698
https://support.microsoft.com/help/4530698
10378
4530691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530691
4525246
10379
Yes
Monthly Rollup
4530691
https://support.microsoft.com/help/4530691
10379
4530698
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530698
10379
Yes
Security Only
4530698
https://support.microsoft.com/help/4530698
10379
4530702
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530702
4525243
10483
Yes
Monthly Rollup
4530702
https://support.microsoft.com/help/4530702
10483
4530730
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530730
10483
Yes
Security Only
4530730
https://support.microsoft.com/help/4530730
10483
4530702
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530702
4525243
10543
Yes
Monthly Rollup
4530702
https://support.microsoft.com/help/4530702
10543
4530730
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530730
10543
Yes
Security Only
4530730
https://support.microsoft.com/help/4530730
10543
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11715
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11715
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11713
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11713
ChenNan of Tencent ZhanluLab
1.0
2019-12-10T08:00:00Z
<p>Information published.</p>
Windows Hyper-V Remote Code Execution Vulnerability
<p>A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system. To exploit the vulnerability, an attacker could run a specially crafted application on a guest operating system that could cause the Hyper-V host operating system to execute arbitrary code.</p>
<p>An attacker who successfully exploited the vulnerability could execute arbitrary code on the host operating system.</p>
<p>The security update addresses the vulnerability by correcting how Hyper-V validates guest operating system user input.</p>
Windows Hyper-V
CVE-2019-1471
11498
11499
11569
11571
11572
11645
11647
11715
11713
Remote Code Execution
11498
Remote Code Execution
11499
Remote Code Execution
11569
Remote Code Execution
11571
Remote Code Execution
11572
Remote Code Execution
11645
Remote Code Execution
11647
Remote Code Execution
11715
Remote Code Execution
11713
Critical
11498
Critical
11499
Critical
11569
Critical
11571
Critical
11572
Critical
11645
Critical
11647
Critical
11715
Critical
11713
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely
8.2
7.4
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
11498
8.2
7.4
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
11499
8.2
7.4
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
8.2
7.4
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
8.2
7.4
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
8.2
7.4
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
11645
8.2
7.4
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
11647
8.2
7.4
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
11715
8.2
7.4
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
11713
4530717
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530717
4525237
11498
Yes
Security Update
4530717
https://support.microsoft.com/help/4530717
11498
4530717
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530717
4525237
11499
Yes
Security Update
4530717
https://support.microsoft.com/help/4530717
11499
4530715
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530715
4523205
11569
Yes
Security Update
4530715
https://support.microsoft.com/help/4530715
11569
4530715
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530715
4523205
11571
Yes
Security Update
4530715
https://support.microsoft.com/help/4530715
11571
4530715
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530715
4523205
11572
Yes
Security Update
4530715
https://support.microsoft.com/help/4530715
11572
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11645
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11645
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11647
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11647
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11715
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11715
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11713
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11713
Microsoft Platform Security Assurance & Vulnerability Research
1.0
2019-12-10T08:00:00Z
<p>Information published.</p>
Windows Kernel Information Disclosure Vulnerability
<p>An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system.</p>
<p>To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application. The vulnerability would not allow an attacker to execute code or to elevate user rights directly, but it could be used to obtain information that could be used to try to further compromise the affected system.</p>
<p>The update addresses the vulnerability by correcting how the Windows kernel handles objects in memory.</p>
<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>
<p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is the contents of Kernel memory. An attacker could read the contents of Kernel memory from a user mode process.</p>
Windows Kernel
CVE-2019-1472
11712
11713
11714
11715
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
10729
10735
10852
10853
10816
10855
Information Disclosure
11712
Information Disclosure
11713
Information Disclosure
11714
Information Disclosure
11715
Information Disclosure
11497
Information Disclosure
11498
Information Disclosure
11499
Information Disclosure
11563
Information Disclosure
11568
Information Disclosure
11569
Information Disclosure
11570
Information Disclosure
11571
Information Disclosure
11572
Information Disclosure
11453
Information Disclosure
11454
Information Disclosure
11583
Information Disclosure
11644
Information Disclosure
11645
Information Disclosure
11646
Information Disclosure
11647
Information Disclosure
10729
Information Disclosure
10735
Information Disclosure
10852
Information Disclosure
10853
Information Disclosure
10816
Information Disclosure
10855
Important
11712
Important
11713
Important
11714
Important
11715
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11712
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11713
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11714
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11715
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11497
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11498
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11499
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11563
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11568
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11569
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11570
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11571
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11572
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11453
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11454
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11583
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11644
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11645
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11646
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11647
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10729
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10735
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10852
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10853
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10816
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10855
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11712
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11712
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11713
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11713
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11714
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11714
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11715
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11715
4530717
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530717
4525237
11497
Yes
Security Update
4530717
https://support.microsoft.com/help/4530717
11497
4530717
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530717
4525237
11498
Yes
Security Update
4530717
https://support.microsoft.com/help/4530717
11498
4530717
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530717
4525237
11499
Yes
Security Update
4530717
https://support.microsoft.com/help/4530717
11499
4530717
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530717
4525237
11563
Yes
Security Update
4530717
https://support.microsoft.com/help/4530717
11563
4530715
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530715
4523205
11568
Yes
Security Update
4530715
https://support.microsoft.com/help/4530715
11568
4530715
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530715
4523205
11569
Yes
Security Update
4530715
https://support.microsoft.com/help/4530715
11569
4530715
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530715
4523205
11570
Yes
Security Update
4530715
https://support.microsoft.com/help/4530715
11570
4530715
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530715
4523205
11571
Yes
Security Update
4530715
https://support.microsoft.com/help/4530715
11571
4530715
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530715
4523205
11572
Yes
Security Update
4530715
https://support.microsoft.com/help/4530715
11572
4530714
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530714
4525241
11453
Yes
Security Update
4530714
https://support.microsoft.com/help/4530714
11453
4530714
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530714
4525241
11454
Yes
Security Update
4530714
https://support.microsoft.com/help/4530714
11454
4530714
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530714
4525241
11583
Yes
Security Update
4530714
https://support.microsoft.com/help/4530714
11583
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11644
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11644
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11645
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11645
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11646
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11646
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11647
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11647
4530681
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530681
4525232
10729
Yes
Security Update
4530681
https://support.microsoft.com/help/4530681
10729
4530681
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530681
4525232
10735
Yes
Security Update
4530681
https://support.microsoft.com/help/4530681
10735
4530689
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530689
4525236
10852
Yes
Security Update
4530689
https://support.microsoft.com/help/4530689
10852
4530689
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530689
4525236
10853
Yes
Security Update
4530689
https://support.microsoft.com/help/4530689
10853
4530689
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530689
4525236
10816
Yes
Security Update
4530689
https://support.microsoft.com/help/4530689
10816
4530689
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530689
4525236
10855
Yes
Security Update
4530689
https://support.microsoft.com/help/4530689
10855
zhong_sf of <a href="http://www.360.com/">Qihoo 360 Vulcan Team</a>
1.0
2019-12-10T08:00:00Z
<p>Information published.</p>
Windows Kernel Information Disclosure Vulnerability
<p>An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system.</p>
<p>To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application. The vulnerability would not allow an attacker to execute code or to elevate user rights directly, but it could be used to obtain information that could be used to try to further compromise the affected system.</p>
<p>The update addresses the vulnerability by correcting how the Windows kernel handles objects in memory.</p>
<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>
<p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is Kernel memory read - unintentional read access to memory contents in kernel space from a user mode process.</p>
Microsoft Windows
CVE-2019-1474
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
9312
10287
9311
9318
9344
10050
10051
10049
10378
10379
10483
10543
11712
11713
11715
11714
Information Disclosure
11497
Information Disclosure
11498
Information Disclosure
11499
Information Disclosure
11563
Information Disclosure
11568
Information Disclosure
11569
Information Disclosure
11570
Information Disclosure
11571
Information Disclosure
11572
Information Disclosure
11453
Information Disclosure
11454
Information Disclosure
11583
Information Disclosure
11644
Information Disclosure
11645
Information Disclosure
11646
Information Disclosure
11647
Information Disclosure
10729
Information Disclosure
10735
Information Disclosure
10852
Information Disclosure
10853
Information Disclosure
10816
Information Disclosure
10855
Information Disclosure
10047
Information Disclosure
10048
Information Disclosure
10481
Information Disclosure
10482
Information Disclosure
10484
Information Disclosure
9312
Information Disclosure
10287
Information Disclosure
9311
Information Disclosure
9318
Information Disclosure
9344
Information Disclosure
10050
Information Disclosure
10051
Information Disclosure
10049
Information Disclosure
10378
Information Disclosure
10379
Information Disclosure
10483
Information Disclosure
10543
Information Disclosure
11712
Information Disclosure
11713
Information Disclosure
11715
Information Disclosure
11714
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9311
Important
9318
Important
9344
Important
10050
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Important
11712
Important
11713
Important
11715
Important
11714
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11497
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11498
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11499
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11563
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11568
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11569
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11570
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11571
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11572
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11453
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11454
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11583
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11644
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11645
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11646
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11647
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10729
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10735
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10852
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10853
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10816
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10855
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10047
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10048
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10481
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10482
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10484
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9312
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10287
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9311
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9318
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9344
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10050
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10051
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10049
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10378
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10379
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10483
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10543
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11712
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11713
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11715
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11714
4530717
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530717
4525237
11497
Yes
Security Update
4530717
https://support.microsoft.com/help/4530717
11497
4530717
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530717
4525237
11498
Yes
Security Update
4530717
https://support.microsoft.com/help/4530717
11498
4530717
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530717
4525237
11499
Yes
Security Update
4530717
https://support.microsoft.com/help/4530717
11499
4530717
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530717
4525237
11563
Yes
Security Update
4530717
https://support.microsoft.com/help/4530717
11563
4530715
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530715
4523205
11568
Yes
Security Update
4530715
https://support.microsoft.com/help/4530715
11568
4530715
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530715
4523205
11569
Yes
Security Update
4530715
https://support.microsoft.com/help/4530715
11569
4530715
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530715
4523205
11570
Yes
Security Update
4530715
https://support.microsoft.com/help/4530715
11570
4530715
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530715
4523205
11571
Yes
Security Update
4530715
https://support.microsoft.com/help/4530715
11571
4530715
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530715
4523205
11572
Yes
Security Update
4530715
https://support.microsoft.com/help/4530715
11572
4530714
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530714
4525241
11453
Yes
Security Update
4530714
https://support.microsoft.com/help/4530714
11453
4530714
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530714
4525241
11454
Yes
Security Update
4530714
https://support.microsoft.com/help/4530714
11454
4530714
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530714
4525241
11583
Yes
Security Update
4530714
https://support.microsoft.com/help/4530714
11583
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11644
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11644
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11645
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11645
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11646
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11646
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11647
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11647
4530681
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530681
4525232
10729
Yes
Security Update
4530681
https://support.microsoft.com/help/4530681
10729
4530681
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530681
4525232
10735
Yes
Security Update
4530681
https://support.microsoft.com/help/4530681
10735
4530689
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530689
4525236
10852
Yes
Security Update
4530689
https://support.microsoft.com/help/4530689
10852
4530689
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530689
4525236
10853
Yes
Security Update
4530689
https://support.microsoft.com/help/4530689
10853
4530689
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530689
4525236
10816
Yes
Security Update
4530689
https://support.microsoft.com/help/4530689
10816
4530689
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530689
4525236
10855
Yes
Security Update
4530689
https://support.microsoft.com/help/4530689
10855
4530734
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530734
4525235
10047
Yes
Monthly Rollup
4530692
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530692
10047
Yes
Security Only
4530734
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530734
4525235
10048
Yes
Monthly Rollup
4530692
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530692
10048
Yes
Security Only
4530702
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530702
4525243
10481
Yes
Monthly Rollup
4530702
https://support.microsoft.com/help/4530702
10481
4530730
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530730
10481
Yes
Security Only
4530730
https://support.microsoft.com/help/4530730
10481
4530702
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530702
4525243
10482
Yes
Monthly Rollup
4530702
https://support.microsoft.com/help/4530702
10482
4530730
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530730
10482
Yes
Security Only
4530730
https://support.microsoft.com/help/4530730
10482
4530702
4525243
10484
Yes
Monthly Rollup
4530702
https://support.microsoft.com/help/4530702
10484
4530695
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530695
4525234
9312
Yes
Monthly Rollup
4530719
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530719
9312
Yes
Security Only
4530695
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530695
4525234
10287
Yes
Monthly Rollup
4530719
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530719
10287
Yes
Security Only
4530695
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530695
4525234
9311
Yes
Monthly Rollup
4530719
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530719
9311
Yes
Security Only
4530695
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530695
4525234
9318
Yes
Monthly Rollup
4530719
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530719
9318
Yes
Security Only
4530695
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530695
4525234
9344
Yes
Monthly Rollup
4530719
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530719
9344
Yes
Security Only
4530734
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530734
4525235
10050
Yes
Monthly Rollup
4530692
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530692
10050
Yes
Security Only
4530734
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530734
4525235
10051
Yes
Monthly Rollup
4530692
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530692
10051
Yes
Security Only
4530734
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530734
4525235
10049
Yes
Monthly Rollup
4530692
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530692
10049
Yes
Security Only
4530691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530691
4525246
10378
Yes
Monthly Rollup
4530691
https://support.microsoft.com/help/4530691
10378
4530698
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530698
10378
Yes
Security Only
4530698
https://support.microsoft.com/help/4530698
10378
4530691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530691
4525246
10379
Yes
Monthly Rollup
4530691
https://support.microsoft.com/help/4530691
10379
4530698
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530698
10379
Yes
Security Only
4530698
https://support.microsoft.com/help/4530698
10379
4530702
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530702
4525243
10483
Yes
Monthly Rollup
4530702
https://support.microsoft.com/help/4530702
10483
4530730
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530730
10483
Yes
Security Only
4530730
https://support.microsoft.com/help/4530730
10483
4530702
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530702
4525243
10543
Yes
Monthly Rollup
4530702
https://support.microsoft.com/help/4530702
10543
4530730
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530730
10543
Yes
Security Only
4530730
https://support.microsoft.com/help/4530730
10543
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11712
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11712
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11713
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11713
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11715
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11715
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11714
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11714
<a href="https://twitter.com/edwardzpeng">Zhiniang Peng</a> of Qihoo 360 Core security and <a href="https://twitter.com/afang5472">Fangming Gu</a>
1.0
2019-12-10T08:00:00Z
<p>Information published.</p>
1.1
2019-12-11T08:00:00Z
<p>Updated acknowledgment. This is an informational change only.</p>
Windows Media Player Information Disclosure Vulnerability
<p>An information disclosure vulnerability exists in Windows Media Player when it fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could potentially read data that was not intended to be disclosed.</p>
<p>To exploit this vulnerability, an attacker would have to log on to an affected system and open a specifically crafted file.</p>
<p>The update addresses the vulnerability by correcting how Windows Media Player handles objects in memory.</p>
<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>
<p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is uninitialized memory.</p>
Windows Media Player
CVE-2019-1480
10047
10048
Information Disclosure
10047
Information Disclosure
10048
Important
10047
Important
10048
Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A;Older Software Release:Exploitation Less Likely
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10047
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10048
4530734
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530734
4525235
10047
Yes
Monthly Rollup
4530692
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530692
10047
Yes
Security Only
4530734
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530734
4525235
10048
Yes
Monthly Rollup
4530692
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530692
10048
Yes
Security Only
Hossein Lotfi of <a href="https://www.zerodayinitiative.com/">Trend Micro's Zero Day Initiative</a>
1.0
2019-12-10T08:00:00Z
<p>Information published.</p>
1.1
2019-12-11T08:00:00Z
<p>Updated acknowledgment. This is an informational change only.</p>
Windows Media Player Information Disclosure Vulnerability
<p>An information disclosure vulnerability exists in Windows Media Player when it fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could potentially read data that was not intended to be disclosed.</p>
<p>To exploit this vulnerability, an attacker would have to log on to an affected system and open a specifically crafted file.</p>
<p>The update addresses the vulnerability by correcting how Windows Media Player handles objects in memory.</p>
<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>
<p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is uninitialized memory.</p>
Windows Media Player
CVE-2019-1481
10047
10048
Information Disclosure
10047
Information Disclosure
10048
Important
10047
Important
10048
Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A;Older Software Release:Exploitation Less Likely
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10047
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10048
4530734
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530734
4525235
10047
Yes
Monthly Rollup
4530692
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530692
10047
Yes
Security Only
4530734
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530734
4525235
10048
Yes
Monthly Rollup
4530692
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530692
10048
Yes
Security Only
Hossein Lotfi of <a href="https://www.zerodayinitiative.com/">Trend Micro's Zero Day Initiative</a>
1.0
2019-12-10T08:00:00Z
<p>Information published.</p>
1.1
2019-12-11T08:00:00Z
<p>Updated acknowledgment. This is an informational change only.</p>
Windows Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists when the Windows AppX Deployment Server improperly handles junctions.</p>
<p>To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges.</p>
<p>The security update addresses the vulnerability by correcting how AppX Deployment Server handles junctions.</p>
Microsoft Windows
CVE-2019-1483
11714
11715
11713
11712
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
Elevation of Privilege
11714
Elevation of Privilege
11715
Elevation of Privilege
11713
Elevation of Privilege
11712
Elevation of Privilege
11497
Elevation of Privilege
11498
Elevation of Privilege
11499
Elevation of Privilege
11563
Elevation of Privilege
11568
Elevation of Privilege
11569
Elevation of Privilege
11570
Elevation of Privilege
11571
Elevation of Privilege
11572
Elevation of Privilege
11453
Elevation of Privilege
11454
Elevation of Privilege
11583
Elevation of Privilege
11644
Elevation of Privilege
11645
Elevation of Privilege
11646
Elevation of Privilege
11647
Important
11714
Important
11715
Important
11713
Important
11712
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11714
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11715
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11713
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11712
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11497
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11498
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11499
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11563
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11453
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11454
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11583
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11644
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11645
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11646
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11647
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11714
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11714
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11715
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11715
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11713
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11713
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11712
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11712
4530717
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530717
4525237
11497
Yes
Security Update
4530717
https://support.microsoft.com/help/4530717
11497
4530717
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530717
4525237
11498
Yes
Security Update
4530717
https://support.microsoft.com/help/4530717
11498
4530717
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530717
4525237
11499
Yes
Security Update
4530717
https://support.microsoft.com/help/4530717
11499
4530717
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530717
4525237
11563
Yes
Security Update
4530717
https://support.microsoft.com/help/4530717
11563
4530715
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530715
4523205
11568
Yes
Security Update
4530715
https://support.microsoft.com/help/4530715
11568
4530715
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530715
4523205
11569
Yes
Security Update
4530715
https://support.microsoft.com/help/4530715
11569
4530715
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530715
4523205
11570
Yes
Security Update
4530715
https://support.microsoft.com/help/4530715
11570
4530715
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530715
4523205
11571
Yes
Security Update
4530715
https://support.microsoft.com/help/4530715
11571
4530715
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530715
4523205
11572
Yes
Security Update
4530715
https://support.microsoft.com/help/4530715
11572
4530714
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530714
4525241
11453
Yes
Security Update
4530714
https://support.microsoft.com/help/4530714
11453
4530714
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530714
4525241
11454
Yes
Security Update
4530714
https://support.microsoft.com/help/4530714
11454
4530714
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530714
4525241
11583
Yes
Security Update
4530714
https://support.microsoft.com/help/4530714
11583
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11644
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11644
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11645
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11645
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11646
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11646
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11647
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11647
Jeong Oh Kyea(@kkokkokye) of THEORI working with <a href="https://www.zerodayinitiative.com/">Trend Micro's Zero Day Initiative</a>
1.0
2019-12-10T08:00:00Z
<p>Information published.</p>
Windows OLE Remote Code Execution Vulnerability
<p>A remote code execution vulnerability exists when Microsoft Windows OLE fails to properly validate user input. An attacker could exploit the vulnerability to execute malicious code.</p>
<p>To exploit the vulnerability, an attacker would have to convince a user to open a specially crafted file or a program, causing Windows to execute arbitrary code.</p>
<p>The update addresses the vulnerability by correcting how Windows OLE validates user input.</p>
Windows OLE
CVE-2019-1484
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
9312
10287
9311
9318
9344
10050
10051
10049
10378
10379
10483
10543
11715
11714
11712
11713
Remote Code Execution
11497
Remote Code Execution
11498
Remote Code Execution
11499
Remote Code Execution
11563
Remote Code Execution
11568
Remote Code Execution
11569
Remote Code Execution
11570
Remote Code Execution
11571
Remote Code Execution
11572
Remote Code Execution
11453
Remote Code Execution
11454
Remote Code Execution
11583
Remote Code Execution
11644
Remote Code Execution
11645
Remote Code Execution
11646
Remote Code Execution
11647
Remote Code Execution
10729
Remote Code Execution
10735
Remote Code Execution
10852
Remote Code Execution
10853
Remote Code Execution
10816
Remote Code Execution
10855
Remote Code Execution
10047
Remote Code Execution
10048
Remote Code Execution
10481
Remote Code Execution
10482
Remote Code Execution
10484
Remote Code Execution
9312
Remote Code Execution
10287
Remote Code Execution
9311
Remote Code Execution
9318
Remote Code Execution
9344
Remote Code Execution
10050
Remote Code Execution
10051
Remote Code Execution
10049
Remote Code Execution
10378
Remote Code Execution
10379
Remote Code Execution
10483
Remote Code Execution
10543
Remote Code Execution
11715
Remote Code Execution
11714
Remote Code Execution
11712
Remote Code Execution
11713
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9311
Important
9318
Important
9344
Important
10050
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Important
11715
Important
11714
Important
11712
Important
11713
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11497
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11498
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11499
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11563
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11453
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11454
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11583
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11644
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11645
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11646
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11647
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10729
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10735
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10852
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10853
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10816
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10855
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10047
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10048
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10481
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10482
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10484
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9312
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10287
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9311
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9318
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9344
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10050
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10051
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10049
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10378
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10379
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10483
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10543
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11715
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11714
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11712
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11713
4530717
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530717
4525237
11497
Yes
Security Update
4530717
https://support.microsoft.com/help/4530717
11497
4530717
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530717
4525237
11498
Yes
Security Update
4530717
https://support.microsoft.com/help/4530717
11498
4530717
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530717
4525237
11499
Yes
Security Update
4530717
https://support.microsoft.com/help/4530717
11499
4530717
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530717
4525237
11563
Yes
Security Update
4530717
https://support.microsoft.com/help/4530717
11563
4530715
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530715
4523205
11568
Yes
Security Update
4530715
https://support.microsoft.com/help/4530715
11568
4530715
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530715
4523205
11569
Yes
Security Update
4530715
https://support.microsoft.com/help/4530715
11569
4530715
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530715
4523205
11570
Yes
Security Update
4530715
https://support.microsoft.com/help/4530715
11570
4530715
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530715
4523205
11571
Yes
Security Update
4530715
https://support.microsoft.com/help/4530715
11571
4530715
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530715
4523205
11572
Yes
Security Update
4530715
https://support.microsoft.com/help/4530715
11572
4530714
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530714
4525241
11453
Yes
Security Update
4530714
https://support.microsoft.com/help/4530714
11453
4530714
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530714
4525241
11454
Yes
Security Update
4530714
https://support.microsoft.com/help/4530714
11454
4530714
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530714
4525241
11583
Yes
Security Update
4530714
https://support.microsoft.com/help/4530714
11583
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11644
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11644
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11645
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11645
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11646
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11646
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11647
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11647
4530681
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530681
4525232
10729
Yes
Security Update
4530681
https://support.microsoft.com/help/4530681
10729
4530681
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530681
4525232
10735
Yes
Security Update
4530681
https://support.microsoft.com/help/4530681
10735
4530689
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530689
4525236
10852
Yes
Security Update
4530689
https://support.microsoft.com/help/4530689
10852
4530689
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530689
4525236
10853
Yes
Security Update
4530689
https://support.microsoft.com/help/4530689
10853
4530689
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530689
4525236
10816
Yes
Security Update
4530689
https://support.microsoft.com/help/4530689
10816
4530689
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530689
4525236
10855
Yes
Security Update
4530689
https://support.microsoft.com/help/4530689
10855
4530734
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530734
4525235
10047
Yes
Monthly Rollup
4530692
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530692
10047
Yes
Security Only
4530734
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530734
4525235
10048
Yes
Monthly Rollup
4530692
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530692
10048
Yes
Security Only
4530702
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530702
4525243
10481
Yes
Monthly Rollup
4530702
https://support.microsoft.com/help/4530702
10481
4530730
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530730
10481
Yes
Security Only
4530730
https://support.microsoft.com/help/4530730
10481
4530702
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530702
4525243
10482
Yes
Monthly Rollup
4530702
https://support.microsoft.com/help/4530702
10482
4530730
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530730
10482
Yes
Security Only
4530730
https://support.microsoft.com/help/4530730
10482
4530702
4525243
10484
Yes
Monthly Rollup
4530702
https://support.microsoft.com/help/4530702
10484
4530695
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530695
4525234
9312
Yes
Monthly Rollup
4530719
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530719
9312
Yes
Security Only
4530695
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530695
4525234
10287
Yes
Monthly Rollup
4530719
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530719
10287
Yes
Security Only
4530695
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530695
4525234
9311
Yes
Monthly Rollup
4530719
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530719
9311
Yes
Security Only
4530695
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530695
4525234
9318
Yes
Monthly Rollup
4530719
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530719
9318
Yes
Security Only
4530695
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530695
4525234
9344
Yes
Monthly Rollup
4530719
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530719
9344
Yes
Security Only
4530734
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530734
4525235
10050
Yes
Monthly Rollup
4530692
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530692
10050
Yes
Security Only
4530734
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530734
4525235
10051
Yes
Monthly Rollup
4530692
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530692
10051
Yes
Security Only
4530734
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530734
4525235
10049
Yes
Monthly Rollup
4530692
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530692
10049
Yes
Security Only
4530691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530691
4525246
10378
Yes
Monthly Rollup
4530691
https://support.microsoft.com/help/4530691
10378
4530698
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530698
10378
Yes
Security Only
4530698
https://support.microsoft.com/help/4530698
10378
4530691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530691
4525246
10379
Yes
Monthly Rollup
4530691
https://support.microsoft.com/help/4530691
10379
4530698
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530698
10379
Yes
Security Only
4530698
https://support.microsoft.com/help/4530698
10379
4530702
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530702
4525243
10483
Yes
Monthly Rollup
4530702
https://support.microsoft.com/help/4530702
10483
4530730
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530730
10483
Yes
Security Only
4530730
https://support.microsoft.com/help/4530730
10483
4530702
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530702
4525243
10543
Yes
Monthly Rollup
4530702
https://support.microsoft.com/help/4530702
10543
4530730
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530730
10543
Yes
Security Only
4530730
https://support.microsoft.com/help/4530730
10543
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11715
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11715
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11714
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11714
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11712
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11712
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11713
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11713
Yuki Chen of <a href="http://www.360.com/">Qihoo 360 Vulcan Team</a>
1.0
2019-12-10T08:00:00Z
<p>Information published.</p>
Microsoft Authentication Library for Android Information Disclosure Vulnerability
<p>An information disclosure vulnerability in Android Apps using Microsoft Authentication Library (MSAL) 0.3.1-Alpha or later exists under specific conditions. This vulnerability could result in sensitive data being exposed.</p>
<p>To exploit this vulnerability an attacker would need to be authenticated to have rights to view the sensitive data.</p>
<p>This security update addresses the vulnerability by modifying how the data is sanitized.</p>
<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>
<p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is sensitive information.</p>
Open Source Software
CVE-2019-1487
11716
Information Disclosure
11716
Important
11716
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:N/A
Github Repository
https://github.com/AzureAD/microsoft-authentication-library-common-for-android
11716
Maybe
Security Update
1.0
2019-12-10T08:00:00Z
<p>Information published.</p>
1.1
2020-01-29T08:00:00Z
<p>Updated exploitability assessment for Older Software Release. This is an informational change only.</p>
Microsoft Defender Security Feature Bypass Vulnerability
<p>A security feature bypass vulnerability exists when Microsoft Defender improperly handles specific buffers. An attacker could exploit the vulnerability to trigger warnings and false positives when no threat is present.</p>
<p>To exploit the vulnerability, an attacker would first require execution permissions on the victim system.</p>
<p>The security update addresses the vulnerability by ensuring Microsoft Defender properly handles these buffers.</p>
Microsoft Windows
CVE-2019-1488
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
9312
10287
9311
9318
9344
10050
10051
10049
10378
10379
10483
10543
11712
11713
11714
11715
Security Feature Bypass
11497
Security Feature Bypass
11498
Security Feature Bypass
11499
Security Feature Bypass
11563
Security Feature Bypass
11568
Security Feature Bypass
11569
Security Feature Bypass
11570
Security Feature Bypass
11571
Security Feature Bypass
11572
Security Feature Bypass
11453
Security Feature Bypass
11454
Security Feature Bypass
11583
Security Feature Bypass
11644
Security Feature Bypass
11645
Security Feature Bypass
11646
Security Feature Bypass
11647
Security Feature Bypass
10729
Security Feature Bypass
10735
Security Feature Bypass
10852
Security Feature Bypass
10853
Security Feature Bypass
10816
Security Feature Bypass
10855
Security Feature Bypass
10047
Security Feature Bypass
10048
Security Feature Bypass
10481
Security Feature Bypass
10482
Security Feature Bypass
10484
Security Feature Bypass
9312
Security Feature Bypass
10287
Security Feature Bypass
9311
Security Feature Bypass
9318
Security Feature Bypass
9344
Security Feature Bypass
10050
Security Feature Bypass
10051
Security Feature Bypass
10049
Security Feature Bypass
10378
Security Feature Bypass
10379
Security Feature Bypass
10483
Security Feature Bypass
10543
Security Feature Bypass
11712
Security Feature Bypass
11713
Security Feature Bypass
11714
Security Feature Bypass
11715
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9311
Important
9318
Important
9344
Important
10050
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Important
11712
Important
11713
Important
11714
Important
11715
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely
3.3
3.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C
11497
3.3
3.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C
11498
3.3
3.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C
11499
3.3
3.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C
11563
3.3
3.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C
11568
3.3
3.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C
11569
3.3
3.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C
11570
3.3
3.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C
11571
3.3
3.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C
11572
3.3
3.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C
11453
3.3
3.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C
11454
3.3
3.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C
11583
3.3
3.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C
11644
3.3
3.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C
11645
3.3
3.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C
11646
3.3
3.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C
11647
3.3
3.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C
10729
3.3
3.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C
10735
3.3
3.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C
10852
3.3
3.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C
10853
3.3
3.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C
10816
3.3
3.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C
10855
3.3
3.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C
10047
3.3
3.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C
10048
3.3
3.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C
10481
3.3
3.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C
10482
3.3
3.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C
10484
3.3
3.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C
9312
3.3
3.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C
10287
3.3
3.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C
9311
3.3
3.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C
9318
3.3
3.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C
9344
3.3
3.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C
10050
3.3
3.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C
10051
3.3
3.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C
10049
3.3
3.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C
10378
3.3
3.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C
10379
3.3
3.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C
10483
3.3
3.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C
10543
3.3
3.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C
11712
3.3
3.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C
11713
3.3
3.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C
11714
3.3
3.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C
11715
4530717
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530717
4525237
11497
Yes
Security Update
4530717
https://support.microsoft.com/help/4530717
11497
4530717
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530717
4525237
11498
Yes
Security Update
4530717
https://support.microsoft.com/help/4530717
11498
4530717
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530717
4525237
11499
Yes
Security Update
4530717
https://support.microsoft.com/help/4530717
11499
4530717
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530717
4525237
11563
Yes
Security Update
4530717
https://support.microsoft.com/help/4530717
11563
4530715
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530715
4523205
11568
Yes
Security Update
4530715
https://support.microsoft.com/help/4530715
11568
4530715
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530715
4523205
11569
Yes
Security Update
4530715
https://support.microsoft.com/help/4530715
11569
4530715
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530715
4523205
11570
Yes
Security Update
4530715
https://support.microsoft.com/help/4530715
11570
4530715
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530715
4523205
11571
Yes
Security Update
4530715
https://support.microsoft.com/help/4530715
11571
4530715
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530715
4523205
11572
Yes
Security Update
4530715
https://support.microsoft.com/help/4530715
11572
4530714
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530714
4525241
11453
Yes
Security Update
4530714
https://support.microsoft.com/help/4530714
11453
4530714
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530714
4525241
11454
Yes
Security Update
4530714
https://support.microsoft.com/help/4530714
11454
4530714
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530714
4525241
11583
Yes
Security Update
4530714
https://support.microsoft.com/help/4530714
11583
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11644
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11644
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11645
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11645
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11646
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11646
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11647
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11647
4530681
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530681
4525232
10729
Yes
Security Update
4530681
https://support.microsoft.com/help/4530681
10729
4530681
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530681
4525232
10735
Yes
Security Update
4530681
https://support.microsoft.com/help/4530681
10735
4530689
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530689
4525236
10852
Yes
Security Update
4530689
https://support.microsoft.com/help/4530689
10852
4530689
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530689
4525236
10853
Yes
Security Update
4530689
https://support.microsoft.com/help/4530689
10853
4530689
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530689
4525236
10816
Yes
Security Update
4530689
https://support.microsoft.com/help/4530689
10816
4530689
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530689
4525236
10855
Yes
Security Update
4530689
https://support.microsoft.com/help/4530689
10855
4530734
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530734
4525235
10047
Yes
Monthly Rollup
4530692
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530692
10047
Yes
Security Only
4530734
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530734
4525235
10048
Yes
Monthly Rollup
4530692
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530692
10048
Yes
Security Only
4530702
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530702
4525243
10481
Yes
Monthly Rollup
4530702
https://support.microsoft.com/help/4530702
10481
4530730
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530730
10481
Yes
Security Only
4530730
https://support.microsoft.com/help/4530730
10481
4530702
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530702
4525243
10482
Yes
Monthly Rollup
4530702
https://support.microsoft.com/help/4530702
10482
4530730
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530730
10482
Yes
Security Only
4530730
https://support.microsoft.com/help/4530730
10482
4530702
4525243
10484
Yes
Monthly Rollup
4530702
https://support.microsoft.com/help/4530702
10484
4530695
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530695
4525234
9312
Yes
Monthly Rollup
4530719
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530719
9312
Yes
Security Only
4530695
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530695
4525234
10287
Yes
Monthly Rollup
4530719
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530719
10287
Yes
Security Only
4530695
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530695
4525234
9311
Yes
Monthly Rollup
4530719
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530719
9311
Yes
Security Only
4530695
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530695
4525234
9318
Yes
Monthly Rollup
4530719
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530719
9318
Yes
Security Only
4530695
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530695
4525234
9344
Yes
Monthly Rollup
4530719
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530719
9344
Yes
Security Only
4530734
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530734
4525235
10050
Yes
Monthly Rollup
4530692
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530692
10050
Yes
Security Only
4530734
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530734
4525235
10051
Yes
Monthly Rollup
4530692
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530692
10051
Yes
Security Only
4530734
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530734
4525235
10049
Yes
Monthly Rollup
4530692
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530692
10049
Yes
Security Only
4530691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530691
4525246
10378
Yes
Monthly Rollup
4530691
https://support.microsoft.com/help/4530691
10378
4530698
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530698
10378
Yes
Security Only
4530698
https://support.microsoft.com/help/4530698
10378
4530691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530691
4525246
10379
Yes
Monthly Rollup
4530691
https://support.microsoft.com/help/4530691
10379
4530698
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530698
10379
Yes
Security Only
4530698
https://support.microsoft.com/help/4530698
10379
4530702
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530702
4525243
10483
Yes
Monthly Rollup
4530702
https://support.microsoft.com/help/4530702
10483
4530730
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530730
10483
Yes
Security Only
4530730
https://support.microsoft.com/help/4530730
10483
4530702
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530702
4525243
10543
Yes
Monthly Rollup
4530702
https://support.microsoft.com/help/4530702
10543
4530730
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530730
10543
Yes
Security Only
4530730
https://support.microsoft.com/help/4530730
10543
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11712
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11712
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11713
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11713
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11714
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11714
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11715
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11715
1.0
2019-12-10T08:00:00Z
<p>Information published.</p>
1.1
2020-01-29T08:00:00Z
<p>Added Exploitation ratings for this CVE. This is an informational change only.</p>
Remote Desktop Protocol Information Disclosure Vulnerability
<p>An information disclosure vulnerability exists when the Windows Remote Desktop Protocol (RDP) fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system.</p>
<p>To exploit this vulnerability, an attacker would have to connect remotely to an affected system and run a specially crafted application.</p>
<p><strong>Why is there no update for this vulnerability?</strong></p>
<p>Microsoft will not provide an update for this vulnerability because Windows XP is out of support. Microsoft strongly recommends upgrading to a supported version of Windows software.</p>
End of Life Software
CVE-2019-1489
3700
Information Disclosure
3700
Important
3700
Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A;Older Software Release:N/A
Discovered by a member of <a href="https://talosintelligence.com/vulnerability_reports/">Cisco Talos</a>
1.0
2019-12-10T08:00:00Z
<p>Information published.</p>
Microsoft SQL Server Reporting Services XSS Vulnerability
<p>A cross-site scripting (XSS) vulnerability exists when Microsoft SQL Server Reporting Services (SSRS) does not properly sanitize a specially-crafted web request to an affected SSRS server. An attacker who successfully exploited the vulnerability could run scripts in the context of the targeted user. The attacks could allow the attacker to read content that the attacker is not authorized to read, execute malicious code, and use the victim's identity to take actions on the site on behalf of the user, such as change permissions and delete content.</p>
<p>To exploit the vulnerability, an attacker would need to convince an authenticated user to click a specially-crafted link to an affected SSRS server.</p>
<p>The update addresses the vulnerability by correcting SSRS URL sanitization.</p>
<p><strong>There are GDR and/or CU (Cumulative Update) updates offered for my version of SQL Server. How do I know which update to use?</strong></p>
<ul>
<li>First, determine your SQL Server version number. For more information on determining your SQL Server version number, see Microsoft Knowledge Base Article <a href="https://support.microsoft.com/en-us/help/321185">321185 - How to determine the version, edition, and update level of SQL Server and its components.</a></li>
<li>Second, in the table below, locate your version number or the version range that your version number falls within. The corresponding update is the one you need to install.</li>
</ul>
<p><strong>Note</strong> If your SQL Server version number is not represented in the table below, your SQL Server version is no longer supported. Please upgrade to the latest Service Pack or SQL Server product in order to apply this and future security updates.</p>
<table>
<thead>
<tr>
<th>Update number</th>
<th>Title</th>
<th>Apply if current product version is…</th>
<th>This security update also includes servicing releases up through…</th>
</tr>
</thead>
<tbody>
<tr>
<td>4532097</td>
<td>Security update for SQL Server 2016 Service Pack 2 (GDR): Feb 11, 2020</td>
<td>13.0.5026.0 - 13.0.5101.9</td>
<td>KB4505220 - Previous SQL16 SP2 GDR</td>
</tr>
<tr>
<td>4535706</td>
<td>Security update for SQL Server 2016 Service Pack 2 CU11: Feb 11, 2020</td>
<td>13.0.5149.0 - 13.0.5598.27</td>
<td>KB4527378 – SQL16 SP2 CU11</td>
</tr>
</tbody>
</table>
<p><strong>What are the GDR and CU update designations and how do they differ?</strong></p>
<p>The General Distribution Release (GDR) and Cumulative Update (CU) designations correspond to the two different servicing options in place for SQL Server baseline releases. A baseline can be either an RTM release or a Service Pack release.</p>
<ul>
<li>GDR updates – cumulatively only contain security updates for the given baseline.</li>
<li>CU updates – cumulatively contain all functional fixes and security updates for the given baseline.</li>
</ul>
<p>For any given baseline, either the GDR or CU updates could be options (see below).</p>
<ul>
<li>If SQL Server installation is at a baseline version, you can choose either the GDR or CU update.</li>
<li>If SQL Server installation has intentionally only installed past GDR updates, then choose to install the GDR update package.</li>
<li>If SQL Server installation has intentionally installed previous CU updates, then chose to install the CU security update package.</li>
<li>NOTE: You are allowed to make a change from GDR updates to CU updates ONE TIME. Once a SQL Server CU update is applied to a SQL Server installation, there is NO way to go back to the GDR update path.</li>
</ul>
<p><strong>Can the security updates be applied to SQL Server instances on Windows Azure (IaaS)?</strong></p>
<p>Yes. SQL Server instances on Windows Azure (IaaS) can be offered the security updates through Microsoft Update, or customers can download the security updates from Microsoft Download Center and apply them manually.</p>
SQL Server
CVE-2019-1332
11554
11555
11717
11719
11718
Spoofing
11554
Spoofing
11555
Spoofing
11717
Spoofing
11719
Spoofing
11718
Important
11554
Important
11555
Important
11717
Important
11719
Important
11718
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely
4535706
https://download.microsoft.com/download/9/f/a/9fa97512-ff9b-466a-918e-d95214fbfceb/SQLServer2016-KB4535706-x64.exe
4527378
11554
Maybe
Security Update
4535706
https://support.microsoft.com/help/4535706
11554
4532097
https://download.microsoft.com/download/6/d/8/6d8acd3e-e624-4256-8265-07c39b25e9ad/SQLServer2016-KB4532097-x64.exe
4505220
11555
Maybe
Security Update
4532097
https://support.microsoft.com/help/4532097
11555
Release Notes
https://www.microsoft.com/en-us/download/details.aspx?id=55252
11717
Maybe
Security Update
Release Notes
https://aka.ms/pbireportserver
11719
Maybe
Security Update
Release Notes
https://www.microsoft.com/en-us/download/details.aspx?id=100122
11718
Maybe
Security Update
Matei "Mal" Badanoiu
1.0
2019-12-10T08:00:00Z
<p>Information published.</p>
2.0
2020-02-11T08:00:00Z
<p>CVE information revised to announce the availability of Microsoft SQL Server 2016 for x64-based Systems Service Pack 2 (CU) and Microsoft SQL Server 2016 for x64-based Systems Service Pack 2 (GDR). Customers running affected software should install the appropriate update for their product to be protected from the vulnerability discussed in this CVE.</p>
Git for Visual Studio Remote Code Execution Vulnerability
<p>A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input. An attacker who successfully exploited this vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.</p>
<p>To exploit the vulnerability, an attacker would first need to convince the user to clone a malicious repo.</p>
<p>The security update addresses the vulnerability by correcting how Git for Visual Studio validates command-line input.</p>
<p><strong>I want to install the latest supported service baseline for Visual Studio. Do I need to install the previous versions first?</strong></p>
<p>No. For both Visual Studio 2019 and Visual Studio 2017, the latest supported servicing baseline is cumulative. For example, if you need to install Visual Studio 2019 version 16.4 you do NOT first have to install any previous versions. See <a href="https://docs.microsoft.com/en-us/visualstudio/releases/2019/release-notes">Visual Studio 2019 version 16.4 Release Notes</a> for more information.</p>
Visual Studio
CVE-2019-1349
11600
11657
11658
11720
Remote Code Execution
11600
Remote Code Execution
11657
Remote Code Execution
11658
Remote Code Execution
11720
Critical
11600
Critical
11657
Critical
11658
Critical
11720
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely
Release Notes
https://aka.ms/vs/15/release/latest
11600
Maybe
Security Update
Release Notes
https://my.visualstudio.com/Downloads?q=Visual Studio 2017 version 15.0
11657
Maybe
Security Update
Release Notes
https://my.visualstudio.com/Downloads?q=Visual Studio 2019 version 16.0
11658
Maybe
Security Update
Release Notes
https://aka.ms/vs/16/release/latest
11720
Maybe
Security Update
Christopher Ertl (<a href="https://twitter.com/CTurtE">@CTurtE</a>) and Nicolas Joly (<a href="https://twitter.com/n_joly">@n_joly</a>) of Microsoft Corporation
1.0
2019-12-10T08:00:00Z
<p>Information published.</p>
1.1
2020-01-29T08:00:00Z
<p>Updated exploitability assessment for Older Software Release. This is an informational change only.</p>
Git for Visual Studio Remote Code Execution Vulnerability
<p>A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input. An attacker who successfully exploited this vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.</p>
<p>To exploit the vulnerability, an attacker would first need to convince the user to clone a malicious repo.</p>
<p>The security update addresses the vulnerability by correcting how Git for Visual Studio validates command-line input.</p>
<p><strong>I want to install the latest supported service baseline for Visual Studio. Do I need to install the previous versions first?</strong></p>
<p>No. For both Visual Studio 2019 and Visual Studio 2017, the latest supported servicing baseline is cumulative. For example, if you need to install Visual Studio 2019 version 16.4 you do NOT first have to install any previous versions. See <a href="https://docs.microsoft.com/en-us/visualstudio/releases/2019/release-notes">Visual Studio 2019 version 16.4 Release Notes</a> for more information.</p>
Visual Studio
CVE-2019-1350
11720
11600
11657
11658
Remote Code Execution
11720
Remote Code Execution
11600
Remote Code Execution
11657
Remote Code Execution
11658
Critical
11720
Critical
11600
Critical
11657
Critical
11658
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely
Release Notes
https://aka.ms/vs/16/release/latest
11720
Maybe
Security Update
Release Notes
https://aka.ms/vs/15/release/latest
11600
Maybe
Security Update
Release Notes
https://my.visualstudio.com/Downloads?q=Visual Studio 2017 version 15.0
11657
Maybe
Security Update
Release Notes
https://my.visualstudio.com/Downloads?q=Visual Studio 2019 version 16.0
11658
Maybe
Security Update
Christopher Ertl (<a href="https://twitter.com/CTurtE">@CTurtE</a>) and Nicolas Joly (<a href="https://twitter.com/n_joly">@n_joly</a>) of Microsoft Corporation
1.0
2019-12-10T08:00:00Z
<p>Information published.</p>
Git for Visual Studio Tampering Vulnerability
<p>A tampering vulnerability exists when Git for Visual Studio improperly handles virtual drive paths. An attacker who successfully exploited this vulnerability could write arbitrary files and directories to certain locations on a vulnerable system. However, an attacker would have limited control over the destination of the files and directories.</p>
<p>To exploit the vulnerability, an attacker must clone a file using a specially crafted path on a vulnerable system.</p>
<p>The security update fixes the vulnerability by ensuring Git for Visual Studio properly handles folder paths.</p>
<p><strong>I want to install the latest supported service baseline for Visual Studio. Do I need to install the previous versions first?</strong></p>
<p>No. For both Visual Studio 2019 and Visual Studio 2017, the latest supported servicing baseline is cumulative. For example, if you need to install Visual Studio 2019 version 16.4 you do NOT first have to install any previous versions. See <a href="https://docs.microsoft.com/en-us/visualstudio/releases/2019/release-notes">Visual Studio 2019 version 16.4 Release Notes</a> for more information.</p>
Visual Studio
CVE-2019-1351
11600
11657
11658
11720
Tampering
11600
Tampering
11657
Tampering
11658
Tampering
11720
Moderate
11600
Moderate
11657
Moderate
11658
Moderate
11720
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely
Release Notes
https://aka.ms/vs/15/release/latest
11600
Maybe
Security Update
Release Notes
https://my.visualstudio.com/Downloads?q=Visual Studio 2017 version 15.0
11657
Maybe
Security Update
Release Notes
https://my.visualstudio.com/Downloads?q=Visual Studio 2019 version 16.0
11658
Maybe
Security Update
Release Notes
https://aka.ms/vs/16/release/latest
11720
Maybe
Security Update
Christopher Ertl (<a href="https://twitter.com/CTurtE">@CTurtE</a>) and Nicolas Joly (<a href="https://twitter.com/n_joly">@n_joly</a>) of Microsoft Corporation
1.0
2019-12-10T08:00:00Z
<p>Information published.</p>
1.1
2019-12-11T08:00:00Z
<p>In the Security Updates table, corrected product name.</p>
1.2
2020-01-29T08:00:00Z
<p>Updated exploitability assessment for Older Software Release. This is an informational change only.</p>
Git for Visual Studio Remote Code Execution Vulnerability
<p>A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input. An attacker who successfully exploited this vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.</p>
<p>To exploit the vulnerability, an attacker would first need to convince the user to clone a malicious repo.</p>
<p>The security update addresses the vulnerability by correcting how Git for Visual Studio validates command-line input.</p>
<p><strong>I want to install the latest supported service baseline for Visual Studio. Do I need to install the previous versions first?</strong></p>
<p>No. For both Visual Studio 2019 and Visual Studio 2017, the latest supported servicing baseline is cumulative. For example, if you need to install Visual Studio 2019 version 16.4 you do NOT first have to install any previous versions. See <a href="https://docs.microsoft.com/en-us/visualstudio/releases/2019/release-notes">Visual Studio 2019 version 16.4 Release Notes</a> for more information.</p>
Visual Studio
CVE-2019-1352
11720
11600
11657
11658
Remote Code Execution
11720
Remote Code Execution
11600
Remote Code Execution
11657
Remote Code Execution
11658
Critical
11720
Critical
11600
Critical
11657
Critical
11658
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely
Release Notes
https://aka.ms/vs/16/release/latest
11720
Maybe
Security Update
Release Notes
https://aka.ms/vs/15/release/latest
11600
Maybe
Security Update
Release Notes
https://my.visualstudio.com/Downloads?q=Visual Studio 2017 version 15.0
11657
Maybe
Security Update
Release Notes
https://my.visualstudio.com/Downloads?q=Visual Studio 2019 version 16.0
11658
Maybe
Security Update
Christopher Ertl (<a href="https://twitter.com/CTurtE">@CTurtE</a>) and Nicolas Joly (<a href="https://twitter.com/n_joly">@n_joly</a>) of Microsoft Corporation
1.0
2019-12-10T08:00:00Z
<p>Information published.</p>
1.1
2020-01-29T08:00:00Z
<p>Updated exploitability assessment for Older Software Release. This is an informational change only.</p>
Git for Visual Studio Remote Code Execution Vulnerability
<p>A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input. An attacker who successfully exploited this vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.</p>
<p>To exploit the vulnerability, an attacker would first need to convince the user to clone a malicious repo.</p>
<p>The security update addresses the vulnerability by correcting how Git for Visual Studio validates command-line input.</p>
<p><strong>I want to install the latest supported service baseline for Visual Studio. Do I need to install the previous versions first?</strong></p>
<p>No. For both Visual Studio 2019 and Visual Studio 2017, the latest supported servicing baseline is cumulative. For example, if you need to install Visual Studio 2019 version 16.4 you do NOT first have to install any previous versions. See <a href="https://docs.microsoft.com/en-us/visualstudio/releases/2019/release-notes">Visual Studio 2019 version 16.4 Release Notes</a> for more information.</p>
Visual Studio
CVE-2019-1354
11720
11600
11657
11658
Remote Code Execution
11720
Remote Code Execution
11600
Remote Code Execution
11657
Remote Code Execution
11658
Critical
11720
Critical
11600
Critical
11657
Critical
11658
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely
Release Notes
https://aka.ms/vs/16/release/latest
11720
Maybe
Security Update
Release Notes
https://aka.ms/vs/15/release/latest
11600
Maybe
Security Update
Release Notes
https://my.visualstudio.com/Downloads?q=Visual Studio 2017 version 15.0
11657
Maybe
Security Update
Release Notes
https://my.visualstudio.com/Downloads?q=Visual Studio 2019 version 16.0
11658
Maybe
Security Update
Christopher Ertl (<a href="https://twitter.com/CTurtE">@CTurtE</a>) and Nicolas Joly (<a href="https://twitter.com/n_joly">@n_joly</a>) of Microsoft Corporation
1.0
2019-12-10T08:00:00Z
<p>Information published.</p>
1.1
2020-01-29T08:00:00Z
<p>Updated exploitability assessment for Older Software Release. This is an informational change only.</p>
Git for Visual Studio Remote Code Execution Vulnerability
<p>A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input. An attacker who successfully exploited this vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.</p>
<p>To exploit the vulnerability, an attacker would first need to convince the user to clone a malicious repo.</p>
<p>The security update addresses the vulnerability by correcting how Git for Visual Studio validates command-line input.</p>
<p><strong>I want to install the latest supported service baseline for Visual Studio. Do I need to install the previous versions first?</strong></p>
<p>No. For both Visual Studio 2019 and Visual Studio 2017, the latest supported servicing baseline is cumulative. For example, if you need to install Visual Studio 2019 version 16.4 you do NOT first have to install any previous versions. See <a href="https://docs.microsoft.com/en-us/visualstudio/releases/2019/release-notes">Visual Studio 2019 version 16.4 Release Notes</a> for more information.</p>
Visual Studio
CVE-2019-1387
11720
11600
11657
11658
Remote Code Execution
11720
Remote Code Execution
11600
Remote Code Execution
11657
Remote Code Execution
11658
Critical
11720
Critical
11600
Critical
11657
Critical
11658
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely
Release Notes
https://aka.ms/vs/16/release/latest
11720
Maybe
Security Update
Release Notes
https://aka.ms/vs/15/release/latest
11600
Maybe
Security Update
Release Notes
https://my.visualstudio.com/Downloads?q=Visual Studio 2017 version 15.0
11657
Maybe
Security Update
Release Notes
https://my.visualstudio.com/Downloads?q=Visual Studio 2019 version 16.0
11658
Maybe
Security Update
Christopher Ertl (<a href="https://twitter.com/CTurtE">@CTurtE</a>) and Nicolas Joly (<a href="https://twitter.com/n_joly">@n_joly</a>) of Microsoft Corporation
1.0
2019-12-10T08:00:00Z
<p>Information published.</p>
1.1
2020-01-29T08:00:00Z
<p>Updated exploitability assessment for Older Software Release. This is an informational change only.</p>
Microsoft Access Information Disclosure Vulnerability
<p>An information disclosure vulnerability exists in Microsoft Access software when the software fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system.</p>
<p>To exploit the vulnerability, an attacker would have to log on to an affected system and run a specially crafted application.</p>
<p>The security update addresses the vulnerability by correcting how Microsoft Access handles objects in memory.</p>
<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>
<p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is uninitialized memory.</p>
<p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p>
<p>No, the Preview Pane is not an attack vector.</p>
Microsoft Office
CVE-2019-1400
11573
11574
11577
11578
10753
10754
10521
10522
10603
10601
10602
Information Disclosure
11573
Information Disclosure
11574
Information Disclosure
11577
Information Disclosure
11578
Information Disclosure
10753
Information Disclosure
10754
Information Disclosure
10521
Information Disclosure
10522
Information Disclosure
10603
Information Disclosure
10601
Information Disclosure
10602
Important
11573
Important
11574
Important
11577
Important
11578
Important
10753
Important
10754
Important
10521
Important
10522
Important
10603
Important
10601
Important
10602
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely
Click to Run
11573
No
Security Update
Click to Run
11574
No
Security Update
Click to Run
11577
No
Security Update
Click to Run
11578
No
Security Update
4484180
https://www.microsoft.com/download/details.aspx?familyid=35d9bcc2-03ce-457a-82f6-9ac9fc49403a
4484113
10753
Maybe
Security Update
4484180
https://www.microsoft.com/download/details.aspx?familyid=5b225cbf-a266-4728-ad22-3b8fd63d0712
4484113
10754
Maybe
Security Update
4484193
https://www.microsoft.com/download/details.aspx?familyid=0f57d24b-c376-45b5-b51a-e1624532d331
4484127
10521
Maybe
Security Update
4484193
https://www.microsoft.com/download/details.aspx?familyid=b38e934c-adbf-4c91-b777-fa759fb3cd5a
4484127
10522
Maybe
Security Update
4484186
4484119
10603
Maybe
Security Update
4484186
https://www.microsoft.com/download/details.aspx?familyid=6dbdd757-e525-49a2-be69-d1156b36d41f
4484119
10601
Maybe
Security Update
4484186
https://www.microsoft.com/download/details.aspx?familyid=24f28b1e-dd5d-44ea-a583-9884c2527555
4484119
10602
Maybe
Security Update
kdot
1.0
2019-12-10T08:00:00Z
<p>Information published.</p>
Win32k Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system.</p>
<p>The update addresses this vulnerability by correcting how Win32k handles objects in memory.</p>
Windows Kernel
CVE-2019-1458
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
9312
10287
9311
9318
9344
10050
10051
10049
10378
10379
10483
10543
Elevation of Privilege
10729
Elevation of Privilege
10735
Elevation of Privilege
10852
Elevation of Privilege
10853
Elevation of Privilege
10816
Elevation of Privilege
10855
Elevation of Privilege
10047
Elevation of Privilege
10048
Elevation of Privilege
10481
Elevation of Privilege
10482
Elevation of Privilege
10484
Elevation of Privilege
9312
Elevation of Privilege
10287
Elevation of Privilege
9311
Elevation of Privilege
9318
Elevation of Privilege
9344
Elevation of Privilege
10050
Elevation of Privilege
10051
Elevation of Privilege
10049
Elevation of Privilege
10378
Elevation of Privilege
10379
Elevation of Privilege
10483
Elevation of Privilege
10543
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9311
Important
9318
Important
9344
Important
10050
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Publicly Disclosed:No;Exploited:Yes;Latest Software Release:N/A;Older Software Release:Exploitation Detected;DOS:N/A
7.8
7.2
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
10729
7.8
7.2
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
10735
7.8
7.2
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
10852
7.8
7.2
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
10853
7.8
7.2
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
10816
7.8
7.2
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
10855
7.8
7.2
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
10047
7.8
7.2
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
10048
7.8
7.2
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
10481
7.8
7.2
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
10482
7.8
7.2
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
10484
7.8
7.2
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
9312
7.8
7.2
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
10287
7.8
7.2
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
9311
7.8
7.2
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
9318
7.8
7.2
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
9344
7.8
7.2
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
10050
7.8
7.2
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
10051
7.8
7.2
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
10049
7.8
7.2
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
10378
7.8
7.2
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
10379
7.8
7.2
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
10483
7.8
7.2
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
10543
4530681
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530681
4525232
10729
Yes
Security Update
4530681
https://support.microsoft.com/help/4530681
10729
4530681
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530681
4525232
10735
Yes
Security Update
4530681
https://support.microsoft.com/help/4530681
10735
4530689
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530689
4525236
10852
Yes
Security Update
4530689
https://support.microsoft.com/help/4530689
10852
4530689
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530689
4525236
10853
Yes
Security Update
4530689
https://support.microsoft.com/help/4530689
10853
4530689
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530689
4525236
10816
Yes
Security Update
4530689
https://support.microsoft.com/help/4530689
10816
4530689
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530689
4525236
10855
Yes
Security Update
4530689
https://support.microsoft.com/help/4530689
10855
4530734
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530734
4525235
10047
Yes
Monthly Rollup
4530692
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530692
10047
Yes
Security Only
4530734
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530734
4525235
10048
Yes
Monthly Rollup
4530692
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530692
10048
Yes
Security Only
4530702
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530702
4525243
10481
Yes
Monthly Rollup
4530702
https://support.microsoft.com/help/4530702
10481
4530730
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530730
10481
Yes
Security Only
4530730
https://support.microsoft.com/help/4530730
10481
4530702
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530702
4525243
10482
Yes
Monthly Rollup
4530702
https://support.microsoft.com/help/4530702
10482
4530730
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530730
10482
Yes
Security Only
4530730
https://support.microsoft.com/help/4530730
10482
4530702
4525243
10484
Yes
Monthly Rollup
4530702
https://support.microsoft.com/help/4530702
10484
4530695
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530695
4525234
9312
Yes
Monthly Rollup
4530719
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530719
9312
Yes
Security Only
4530695
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530695
4525234
10287
Yes
Monthly Rollup
4530719
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530719
10287
Yes
Security Only
4530695
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530695
4525234
9311
Yes
Monthly Rollup
4530719
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530719
9311
Yes
Security Only
4530695
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530695
4525234
9318
Yes
Monthly Rollup
4530719
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530719
9318
Yes
Security Only
4530695
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530695
4525234
9344
Yes
Monthly Rollup
4530719
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530719
9344
Yes
Security Only
4530734
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530734
4525235
10050
Yes
Monthly Rollup
4530692
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530692
10050
Yes
Security Only
4530734
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530734
4525235
10051
Yes
Monthly Rollup
4530692
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530692
10051
Yes
Security Only
4530734
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530734
4525235
10049
Yes
Monthly Rollup
4530692
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530692
10049
Yes
Security Only
4530691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530691
4525246
10378
Yes
Monthly Rollup
4530691
https://support.microsoft.com/help/4530691
10378
4530698
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530698
10378
Yes
Security Only
4530698
https://support.microsoft.com/help/4530698
10378
4530691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530691
4525246
10379
Yes
Monthly Rollup
4530691
https://support.microsoft.com/help/4530691
10379
4530698
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530698
10379
Yes
Security Only
4530698
https://support.microsoft.com/help/4530698
10379
4530702
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530702
4525243
10483
Yes
Monthly Rollup
4530702
https://support.microsoft.com/help/4530702
10483
4530730
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530730
10483
Yes
Security Only
4530730
https://support.microsoft.com/help/4530730
10483
4530702
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530702
4525243
10543
Yes
Monthly Rollup
4530702
https://support.microsoft.com/help/4530702
10543
4530730
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530730
10543
Yes
Security Only
4530730
https://support.microsoft.com/help/4530730
10543
Anton Ivanov and Alexey Kulaev of <a href="https://www.kaspersky.com/">Kaspersky Lab</a>
1.0
2019-12-10T08:00:00Z
<p>Information published.</p>
Microsoft Word Remote Code Execution Vulnerability
<p>A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the security context of the current user. For example, the file could then take actions on behalf of the logged-on user with the same permissions as the current user.</p>
<p>To exploit the vulnerability, a user must open a specially crafted file with an affected version of Microsoft Word software. In an email attack scenario, an attacker could exploit the vulnerability by sending the specially crafted file to the user and convincing the user to open the file. In a web-based attack scenario, an attacker could host a website (or leverage a compromised website that accepts or hosts user-provided content) that contains a specially crafted file that is designed to exploit the vulnerability. However, an attacker would have no way to force the user to visit the website. Instead, an attacker would have to convince the user to click a link, typically by way of an enticement in an email or Instant Messenger message, and then convince the user to open the specially crafted file.</p>
<p>The security update addresses the vulnerability by correcting how Microsoft Word handles files in memory.</p>
<p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p>
<p>No, the Preview Pane is not an attack vector.</p>
<p><strong>I have Microsoft Word 2010 installed. Why am I not being offered the 4475598 update?</strong></p>
<p>The 4475598 update only applies to systems running specific configurations of Microsoft Office 2010. Some configurations will not be offered the update.</p>
Microsoft Office
CVE-2019-1461
11573
11574
11577
11578
10746
10747
10521
10522
10513
10514
10606
10604
10605
Remote Code Execution
11573
Remote Code Execution
11574
Remote Code Execution
11577
Remote Code Execution
11578
Remote Code Execution
10746
Remote Code Execution
10747
Remote Code Execution
10521
Remote Code Execution
10522
Remote Code Execution
10513
Remote Code Execution
10514
Remote Code Execution
10606
Remote Code Execution
10604
Remote Code Execution
10605
Important
11573
Important
11574
Important
11577
Important
11578
Important
10746
Important
10747
Important
10521
Important
10522
Important
10513
Important
10514
Important
10606
Important
10604
Important
10605
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:Temporary
Click to Run
11573
No
Security Update
Click to Run
11574
No
Security Update
Click to Run
11577
No
Security Update
Click to Run
11578
No
Security Update
4484169
https://www.microsoft.com/download/details.aspx?familyid=18ef3196-2f73-4c30-8136-c158aa4aab27
4475540
10746
Maybe
Security Update
4484169
https://support.microsoft.com/help/4484169
10746
4484169
https://www.microsoft.com/download/details.aspx?familyid=14cca21f-aa91-4285-ba25-58d8d0542b3a
4475540
10747
Maybe
Security Update
4484169
https://support.microsoft.com/help/4484169
10747
4475598
https://www.microsoft.com/download/details.aspx?familyid=06023c95-2f98-4b76-b0ad-238514a87ace
4475531
10521
Maybe
Security Update
4475598
https://www.microsoft.com/download/details.aspx?familyid=bb151755-2500-4cf3-ade9-3d1a6eb9f242
4475531
10522
Maybe
Security Update
4475601
https://www.microsoft.com/download/details.aspx?familyid=0a0e2a78-3699-4536-815f-0da1969f0466
4475533
10513
Maybe
Security Update
4475601
https://www.microsoft.com/download/details.aspx?familyid=fcf458ad-2d3e-4209-87b7-5392d88138aa
4475533
10514
Maybe
Security Update
4484094
https://www.microsoft.com/downloads/details.aspx?familyid=7313aa58-5218-4680-8520-a6161d607f81
4475547
10606
Maybe
Security Update
4484094
https://support.microsoft.com/help/4484094
10606
4484094
https://www.microsoft.com/download/details.aspx?familyid=7313aa58-5218-4680-8520-a6161d607f81
4475547
10604
Maybe
Security Update
4484094
https://support.microsoft.com/help/4484094
10604
4484094
https://www.microsoft.com/download/details.aspx?familyid=eb3f1504-1ffa-4c70-8236-15471a86d418
4475547
10605
Maybe
Security Update
4484094
https://support.microsoft.com/help/4484094
10605
Jaanus Kääp of <a href="https://www.clarifiedsecurity.com/">Clarified Security</a>
1.0
2019-12-10T08:00:00Z
<p>Information published.</p>
1.1
2019-12-11T08:00:00Z
<p>In the Security Updates table, corrected the impact entries to Remote Code Execution. This is an informational change only. Customers who have successfully installed the update do not need to take any further action.</p>
Microsoft PowerPoint Remote Code Execution Vulnerability
<p>A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an attacker could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.</p>
<p>Exploitation of the vulnerability requires that a user open a specially crafted file with an affected version of Microsoft Office PowerPoint software. In an email attack scenario, an attacker could exploit the vulnerability by sending the specially crafted file to the user and convincing the user to open the file. In a web-based attack scenario, an attacker could host a website (or leverage a compromised website that accepts or hosts user-provided content) that contains a specially crafted file designed to exploit the vulnerability. An attacker would have no way to force users to visit the website. Instead, an attacker would have to convince users to click a link, typically by way of an enticement in an email or instant message, and then convince them to open the specially crafted file.</p>
<p>Note that the Preview Pane is not an attack vector for this vulnerability. The security update addresses the vulnerability by correcting how Microsoft PowerPoint handles objects in memory.</p>
<p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p>
<p>No, the Preview Pane is not an attack vector.</p>
Microsoft Office
CVE-2019-1462
11573
11574
11575
11577
11578
10692
10693
10694
10741
10742
10734
10498
10499
Remote Code Execution
11573
Remote Code Execution
11574
Remote Code Execution
11575
Remote Code Execution
11577
Remote Code Execution
11578
Remote Code Execution
10692
Remote Code Execution
10693
Remote Code Execution
10694
Remote Code Execution
10741
Remote Code Execution
10742
Remote Code Execution
10734
Remote Code Execution
10498
Remote Code Execution
10499
Important
11573
Important
11574
Important
11575
Important
11577
Important
11578
Important
10692
Important
10693
Important
10694
Important
10741
Important
10742
Important
10734
Important
10498
Important
10499
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely
Click to Run
11573
No
Security Update
Click to Run
11574
No
Security Update
Release Notes
https://go.microsoft.com/fwlink/p/?linkid=831049
11575
No
Security Update
Click to Run
11577
No
Security Update
Click to Run
11578
No
Security Update
4461590
https://www.microsoft.com/download/details.aspx?familyid=b673b11d-9b85-4929-8854-e5ebeb1552ad
4461481
10692
Maybe
Security Update
4461590
https://support.microsoft.com/help/4461590
10692
4461590
https://www.microsoft.com/download/details.aspx?familyid=dea37844-9e49-4a28-9fbe-515400f986e2
4461481
10693
Maybe
Security Update
4461590
https://support.microsoft.com/help/4461590
10693
4461590
4461481
10694
Maybe
Security Update
4461590
https://support.microsoft.com/help/4461590
10694
4484166
https://www.microsoft.com/download/details.aspx?familyid=f711cb46-a286-4524-9fd1-c926de1515b5
4461532
10741
Maybe
Security Update
4484166
https://support.microsoft.com/help/4484166
10741
4484166
https://www.microsoft.com/download/details.aspx?familyid=bd6214f2-f446-4f49-9a30-a3ede67cfa6d
4461532
10742
Maybe
Security Update
4484166
https://support.microsoft.com/help/4484166
10742
Release Notes
https://go.microsoft.com/fwlink/p/?linkid=831049
10734
No
Security Update
4461613
https://www.microsoft.com/download/details.aspx?familyid=6ed7c5ab-c19d-43cf-9dce-01ee3f05f4b7
4461521
10498
Maybe
Security Update
4461613
https://www.microsoft.com/download/details.aspx?familyid=51b9a530-1b25-4db6-9f86-a1483ab9548f
4461521
10499
Maybe
Security Update
Jaanus Kp, Clarified Security working with <a href="https://www.zerodayinitiative.com/">Trend Micro's Zero Day Initiative</a>
1.0
2019-12-10T08:00:00Z
<p>Information published.</p>
Microsoft Access Information Disclosure Vulnerability
<p>An information disclosure vulnerability exists in Microsoft Access software when the software fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system.</p>
<p>To exploit the vulnerability, an attacker would have to log on to an affected system and run a specially crafted application.</p>
<p>The security update addresses the vulnerability by correcting how Microsoft Access handles objects in memory.</p>
<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>
<p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is uninitialized memory.</p>
<p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p>
<p>No, the Preview Pane is not an attack vector.</p>
Microsoft Office
CVE-2019-1463
11573
11574
11577
11578
10753
10754
10521
10522
10603
10601
10602
Information Disclosure
11573
Information Disclosure
11574
Information Disclosure
11577
Information Disclosure
11578
Information Disclosure
10753
Information Disclosure
10754
Information Disclosure
10521
Information Disclosure
10522
Information Disclosure
10603
Information Disclosure
10601
Information Disclosure
10602
Important
11573
Important
11574
Important
11577
Important
11578
Important
10753
Important
10754
Important
10521
Important
10522
Important
10603
Important
10601
Important
10602
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely
Click to Run
11573
No
Security Update
Click to Run
11574
No
Security Update
Click to Run
11577
No
Security Update
Click to Run
11578
No
Security Update
4484180
https://www.microsoft.com/download/details.aspx?familyid=35d9bcc2-03ce-457a-82f6-9ac9fc49403a
4484113
10753
Maybe
Security Update
4484180
https://www.microsoft.com/download/details.aspx?familyid=5b225cbf-a266-4728-ad22-3b8fd63d0712
4484113
10754
Maybe
Security Update
4484193
https://www.microsoft.com/download/details.aspx?familyid=0f57d24b-c376-45b5-b51a-e1624532d331
4484127
10521
Maybe
Security Update
4484193
https://www.microsoft.com/download/details.aspx?familyid=b38e934c-adbf-4c91-b777-fa759fb3cd5a
4484127
10522
Maybe
Security Update
4484186
4484119
10603
Maybe
Security Update
4484186
https://www.microsoft.com/download/details.aspx?familyid=6dbdd757-e525-49a2-be69-d1156b36d41f
4484119
10601
Maybe
Security Update
4484186
https://www.microsoft.com/download/details.aspx?familyid=24f28b1e-dd5d-44ea-a583-9884c2527555
4484119
10602
Maybe
Security Update
Ofir Shlomo and Tal Dery of <a href="https://www.mimecast.com/blog/">Mimecast Research Labs</a>
1.0
2019-12-10T08:00:00Z
<p>Information published.</p>
Microsoft Excel Information Disclosure Vulnerability
<p>An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory. An attacker who exploited the vulnerability could use the information to compromise the user’s computer or data.</p>
<p>To exploit the vulnerability, an attacker could craft a special document file and then convince the user to open it. An attacker must know the memory address location where the object was created.</p>
<p>The update addresses the vulnerability by changing the way certain Excel functions handle objects in memory.</p>
<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>
<p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is uninitialized memory.</p>
<p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p>
<p>No, the Preview Pane is not an attack vector.</p>
Microsoft Office
CVE-2019-1464
11573
11574
11575
11577
11578
10739
10740
10753
10754
10734
10489
10490
10656
10654
10655
10521
10522
10603
10601
10602
Information Disclosure
11573
Information Disclosure
11574
Information Disclosure
11575
Information Disclosure
11577
Information Disclosure
11578
Information Disclosure
10739
Information Disclosure
10740
Information Disclosure
10753
Information Disclosure
10754
Information Disclosure
10734
Information Disclosure
10489
Information Disclosure
10490
Information Disclosure
10656
Information Disclosure
10654
Information Disclosure
10655
Information Disclosure
10521
Information Disclosure
10522
Information Disclosure
10603
Information Disclosure
10601
Information Disclosure
10602
Important
11573
Important
11574
Important
11575
Important
11577
Important
11578
Important
10739
Important
10740
Important
10753
Important
10754
Important
10734
Important
10489
Important
10490
Important
10656
Important
10654
Important
10655
Important
10521
Important
10522
Important
10603
Important
10601
Important
10602
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely
Click to Run
11573
No
Security Update
Click to Run
11574
No
Security Update
Release Notes
https://go.microsoft.com/fwlink/p/?linkid=831049
11575
No
Security Update
Click to Run
11577
No
Security Update
Click to Run
11578
No
Security Update
4484179
https://www.microsoft.com/download/details.aspx?familyid=ccf578d3-df48-436b-897e-3fdcb6536cf7
4484144
10739
Maybe
Security Update
4484179
https://support.microsoft.com/help/4484179
10739
4484179
https://www.microsoft.com/download/details.aspx?familyid=79028376-a48d-4ac1-bccc-e59146bd9a81
4484144
10740
Maybe
Security Update
4484179
https://support.microsoft.com/help/4484179
10740
4484182
https://www.microsoft.com/download/details.aspx?familyid=9663658b-71b4-4917-acd6-431217b31f66
4484148
10753
Maybe
Security Update
4484182
https://www.microsoft.com/download/details.aspx?familyid=854f97ce-9ae4-42bb-af15-51202a93b134
4484148
10754
Maybe
Security Update
Release Notes
https://go.microsoft.com/fwlink/p/?linkid=831049
10734
No
Security Update
4484196
https://www.microsoft.com/download/details.aspx?familyid=18e9cf9b-a953-44a0-8cb8-a944921e2d9e
4484164
10489
Maybe
Security Update
4484196
https://www.microsoft.com/download/details.aspx?familyid=241919b7-f07a-496c-9a71-58a676444ca1
4484164
10490
Maybe
Security Update
4484190
4484158
10656
Maybe
Security Update
4484190
https://support.microsoft.com/help/4484190
10656
4484190
https://www.microsoft.com/download/details.aspx?familyid=f95e130b-f472-44a9-ae1d-48903f929b74
4484158
10654
Maybe
Security Update
4484190
https://support.microsoft.com/help/4484190
10654
4484190
https://www.microsoft.com/download/details.aspx?familyid=9985914e-3977-42e8-82a8-6981b12a8590
4484158
10655
Maybe
Security Update
4484190
https://support.microsoft.com/help/4484190
10655
4484192
https://www.microsoft.com/download/details.aspx?familyid=192b3784-b0e0-490c-82e8-4eb0a8a3e99d
4484160
10521
Maybe
Security Update
4484192
https://www.microsoft.com/download/details.aspx?familyid=3b564c22-9483-456d-ad3d-34b3b880b49c
4484160
10522
Maybe
Security Update
4484184
4484152
10603
Maybe
Security Update
4484184
https://www.microsoft.com/download/details.aspx?familyid=8ab5990d-5faa-49fc-a833-16405ed06645
4484152
10601
Maybe
Security Update
4484184
https://www.microsoft.com/download/details.aspx?familyid=dd1ce104-1e10-4e1a-9d07-518e61125db9
4484152
10602
Maybe
Security Update
Zhangjie and willJ from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd.
1.0
2019-12-10T08:00:00Z
<p>Information published.</p>
Windows GDI Information Disclosure Vulnerability
<p>An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.</p>
<p>There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document, or by convincing a user to visit an untrusted webpage.</p>
<p>The security update addresses the vulnerability by correcting how the Windows GDI component handles objects in memory.</p>
<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>
<p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is uninitialized memory.</p>
Microsoft Graphics Component
CVE-2019-1465
11714
11713
11715
11712
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
9312
10287
9311
9318
9344
10050
10051
10049
10378
10379
10483
10543
Information Disclosure
11714
Information Disclosure
11713
Information Disclosure
11715
Information Disclosure
11712
Information Disclosure
11497
Information Disclosure
11498
Information Disclosure
11499
Information Disclosure
11563
Information Disclosure
11568
Information Disclosure
11569
Information Disclosure
11570
Information Disclosure
11571
Information Disclosure
11572
Information Disclosure
11453
Information Disclosure
11454
Information Disclosure
11583
Information Disclosure
11644
Information Disclosure
11645
Information Disclosure
11646
Information Disclosure
11647
Information Disclosure
10729
Information Disclosure
10735
Information Disclosure
10852
Information Disclosure
10853
Information Disclosure
10816
Information Disclosure
10855
Information Disclosure
10047
Information Disclosure
10048
Information Disclosure
10481
Information Disclosure
10482
Information Disclosure
10484
Information Disclosure
9312
Information Disclosure
10287
Information Disclosure
9311
Information Disclosure
9318
Information Disclosure
9344
Information Disclosure
10050
Information Disclosure
10051
Information Disclosure
10049
Information Disclosure
10378
Information Disclosure
10379
Information Disclosure
10483
Information Disclosure
10543
Important
11714
Important
11713
Important
11715
Important
11712
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9311
Important
9318
Important
9344
Important
10050
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11714
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11713
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11715
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11712
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11497
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11498
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11499
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11563
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11568
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11569
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11570
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11571
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11572
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11453
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11454
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11583
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11644
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11645
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11646
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11647
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10729
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10735
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10852
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10853
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10816
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10855
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10047
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10048
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10481
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10482
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10484
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9312
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10287
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9311
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9318
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9344
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10050
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10051
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10049
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10378
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10379
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10483
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10543
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11714
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11714
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11713
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11713
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11715
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11715
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11712
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11712
4530717
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530717
4525237
11497
Yes
Security Update
4530717
https://support.microsoft.com/help/4530717
11497
4530717
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530717
4525237
11498
Yes
Security Update
4530717
https://support.microsoft.com/help/4530717
11498
4530717
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530717
4525237
11499
Yes
Security Update
4530717
https://support.microsoft.com/help/4530717
11499
4530717
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530717
4525237
11563
Yes
Security Update
4530717
https://support.microsoft.com/help/4530717
11563
4530715
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530715
4523205
11568
Yes
Security Update
4530715
https://support.microsoft.com/help/4530715
11568
4530715
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530715
4523205
11569
Yes
Security Update
4530715
https://support.microsoft.com/help/4530715
11569
4530715
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530715
4523205
11570
Yes
Security Update
4530715
https://support.microsoft.com/help/4530715
11570
4530715
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530715
4523205
11571
Yes
Security Update
4530715
https://support.microsoft.com/help/4530715
11571
4530715
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530715
4523205
11572
Yes
Security Update
4530715
https://support.microsoft.com/help/4530715
11572
4530714
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530714
4525241
11453
Yes
Security Update
4530714
https://support.microsoft.com/help/4530714
11453
4530714
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530714
4525241
11454
Yes
Security Update
4530714
https://support.microsoft.com/help/4530714
11454
4530714
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530714
4525241
11583
Yes
Security Update
4530714
https://support.microsoft.com/help/4530714
11583
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11644
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11644
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11645
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11645
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11646
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11646
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11647
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11647
4530681
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530681
4525232
10729
Yes
Security Update
4530681
https://support.microsoft.com/help/4530681
10729
4530681
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530681
4525232
10735
Yes
Security Update
4530681
https://support.microsoft.com/help/4530681
10735
4530689
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530689
4525236
10852
Yes
Security Update
4530689
https://support.microsoft.com/help/4530689
10852
4530689
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530689
4525236
10853
Yes
Security Update
4530689
https://support.microsoft.com/help/4530689
10853
4530689
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530689
4525236
10816
Yes
Security Update
4530689
https://support.microsoft.com/help/4530689
10816
4530689
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530689
4525236
10855
Yes
Security Update
4530689
https://support.microsoft.com/help/4530689
10855
4530734
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530734
4525235
10047
Yes
Monthly Rollup
4530692
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530692
10047
Yes
Security Only
4530734
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530734
4525235
10048
Yes
Monthly Rollup
4530692
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530692
10048
Yes
Security Only
4530702
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530702
4525243
10481
Yes
Monthly Rollup
4530702
https://support.microsoft.com/help/4530702
10481
4530730
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530730
10481
Yes
Security Only
4530730
https://support.microsoft.com/help/4530730
10481
4530702
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530702
4525243
10482
Yes
Monthly Rollup
4530702
https://support.microsoft.com/help/4530702
10482
4530730
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530730
10482
Yes
Security Only
4530730
https://support.microsoft.com/help/4530730
10482
4530702
4525243
10484
Yes
Monthly Rollup
4530702
https://support.microsoft.com/help/4530702
10484
4530695
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530695
4525234
9312
Yes
Monthly Rollup
4530719
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530719
9312
Yes
Security Only
4530695
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530695
4525234
10287
Yes
Monthly Rollup
4530719
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530719
10287
Yes
Security Only
4530695
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530695
4525234
9311
Yes
Monthly Rollup
4530719
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530719
9311
Yes
Security Only
4530695
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530695
4525234
9318
Yes
Monthly Rollup
4530719
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530719
9318
Yes
Security Only
4530695
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530695
4525234
9344
Yes
Monthly Rollup
4530719
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530719
9344
Yes
Security Only
4530734
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530734
4525235
10050
Yes
Monthly Rollup
4530692
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530692
10050
Yes
Security Only
4530734
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530734
4525235
10051
Yes
Monthly Rollup
4530692
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530692
10051
Yes
Security Only
4530734
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530734
4525235
10049
Yes
Monthly Rollup
4530692
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530692
10049
Yes
Security Only
4530691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530691
4525246
10378
Yes
Monthly Rollup
4530691
https://support.microsoft.com/help/4530691
10378
4530698
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530698
10378
Yes
Security Only
4530698
https://support.microsoft.com/help/4530698
10378
4530691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530691
4525246
10379
Yes
Monthly Rollup
4530691
https://support.microsoft.com/help/4530691
10379
4530698
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530698
10379
Yes
Security Only
4530698
https://support.microsoft.com/help/4530698
10379
4530702
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530702
4525243
10483
Yes
Monthly Rollup
4530702
https://support.microsoft.com/help/4530702
10483
4530730
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530730
10483
Yes
Security Only
4530730
https://support.microsoft.com/help/4530730
10483
4530702
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530702
4525243
10543
Yes
Monthly Rollup
4530702
https://support.microsoft.com/help/4530702
10543
4530730
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530730
10543
Yes
Security Only
4530730
https://support.microsoft.com/help/4530730
10543
Hossein Lotfi of <a href="https://www.zerodayinitiative.com/">Trend Micro's Zero Day Initiative</a>
yangkang <a href="https://twitter.com/dnpushme">@dnpushme</a> of qihoo 360 core security
Zhangjie and willJ from cdsrc of Qihoo 360
1.1
2019-12-11T08:00:00Z
<p>Updated acknowledgment. This is an informational change only.</p>
1.0
2019-12-10T08:00:00Z
<p>Information published.</p>
1.2
2019-12-23T08:00:00Z
<p>Added acknowledgements. This is an informational change only.</p>
Windows GDI Information Disclosure Vulnerability
<p>An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.</p>
<p>There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document, or by convincing a user to visit an untrusted webpage.</p>
<p>The security update addresses the vulnerability by correcting how the Windows GDI component handles objects in memory.</p>
<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>
<p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is uninitialized memory.</p>
Microsoft Graphics Component
CVE-2019-1466
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
9312
10287
9311
9318
9344
10050
10051
10049
10378
10379
10483
10543
11712
11713
11715
11714
Information Disclosure
11497
Information Disclosure
11498
Information Disclosure
11499
Information Disclosure
11563
Information Disclosure
11568
Information Disclosure
11569
Information Disclosure
11570
Information Disclosure
11571
Information Disclosure
11572
Information Disclosure
11453
Information Disclosure
11454
Information Disclosure
11583
Information Disclosure
11644
Information Disclosure
11645
Information Disclosure
11646
Information Disclosure
11647
Information Disclosure
10729
Information Disclosure
10735
Information Disclosure
10852
Information Disclosure
10853
Information Disclosure
10816
Information Disclosure
10855
Information Disclosure
10047
Information Disclosure
10048
Information Disclosure
10481
Information Disclosure
10482
Information Disclosure
10484
Information Disclosure
9312
Information Disclosure
10287
Information Disclosure
9311
Information Disclosure
9318
Information Disclosure
9344
Information Disclosure
10050
Information Disclosure
10051
Information Disclosure
10049
Information Disclosure
10378
Information Disclosure
10379
Information Disclosure
10483
Information Disclosure
10543
Information Disclosure
11712
Information Disclosure
11713
Information Disclosure
11715
Information Disclosure
11714
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9311
Important
9318
Important
9344
Important
10050
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Important
11712
Important
11713
Important
11715
Important
11714
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11497
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11498
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11499
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11563
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11568
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11569
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11570
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11571
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11572
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11453
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11454
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11583
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11644
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11645
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11646
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11647
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10729
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10735
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10852
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10853
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10816
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10855
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10047
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10048
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10481
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10482
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10484
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9312
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10287
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9311
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9318
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9344
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10050
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10051
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10049
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10378
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10379
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10483
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10543
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11712
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11713
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11715
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11714
4530717
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530717
4525237
11497
Yes
Security Update
4530717
https://support.microsoft.com/help/4530717
11497
4530717
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530717
4525237
11498
Yes
Security Update
4530717
https://support.microsoft.com/help/4530717
11498
4530717
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530717
4525237
11499
Yes
Security Update
4530717
https://support.microsoft.com/help/4530717
11499
4530717
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530717
4525237
11563
Yes
Security Update
4530717
https://support.microsoft.com/help/4530717
11563
4530715
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530715
4523205
11568
Yes
Security Update
4530715
https://support.microsoft.com/help/4530715
11568
4530715
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530715
4523205
11569
Yes
Security Update
4530715
https://support.microsoft.com/help/4530715
11569
4530715
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530715
4523205
11570
Yes
Security Update
4530715
https://support.microsoft.com/help/4530715
11570
4530715
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530715
4523205
11571
Yes
Security Update
4530715
https://support.microsoft.com/help/4530715
11571
4530715
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530715
4523205
11572
Yes
Security Update
4530715
https://support.microsoft.com/help/4530715
11572
4530714
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530714
4525241
11453
Yes
Security Update
4530714
https://support.microsoft.com/help/4530714
11453
4530714
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530714
4525241
11454
Yes
Security Update
4530714
https://support.microsoft.com/help/4530714
11454
4530714
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530714
4525241
11583
Yes
Security Update
4530714
https://support.microsoft.com/help/4530714
11583
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11644
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11644
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11645
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11645
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11646
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11646
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11647
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11647
4530681
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530681
4525232
10729
Yes
Security Update
4530681
https://support.microsoft.com/help/4530681
10729
4530681
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530681
4525232
10735
Yes
Security Update
4530681
https://support.microsoft.com/help/4530681
10735
4530689
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530689
4525236
10852
Yes
Security Update
4530689
https://support.microsoft.com/help/4530689
10852
4530689
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530689
4525236
10853
Yes
Security Update
4530689
https://support.microsoft.com/help/4530689
10853
4530689
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530689
4525236
10816
Yes
Security Update
4530689
https://support.microsoft.com/help/4530689
10816
4530689
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530689
4525236
10855
Yes
Security Update
4530689
https://support.microsoft.com/help/4530689
10855
4530734
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530734
4525235
10047
Yes
Monthly Rollup
4530692
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530692
10047
Yes
Security Only
4530734
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530734
4525235
10048
Yes
Monthly Rollup
4530692
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530692
10048
Yes
Security Only
4530702
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530702
4525243
10481
Yes
Monthly Rollup
4530702
https://support.microsoft.com/help/4530702
10481
4530730
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530730
10481
Yes
Security Only
4530730
https://support.microsoft.com/help/4530730
10481
4530702
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530702
4525243
10482
Yes
Monthly Rollup
4530702
https://support.microsoft.com/help/4530702
10482
4530730
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530730
10482
Yes
Security Only
4530730
https://support.microsoft.com/help/4530730
10482
4530702
4525243
10484
Yes
Monthly Rollup
4530702
https://support.microsoft.com/help/4530702
10484
4530695
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530695
4525234
9312
Yes
Monthly Rollup
4530719
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530719
9312
Yes
Security Only
4530695
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530695
4525234
10287
Yes
Monthly Rollup
4530719
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530719
10287
Yes
Security Only
4530695
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530695
4525234
9311
Yes
Monthly Rollup
4530719
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530719
9311
Yes
Security Only
4530695
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530695
4525234
9318
Yes
Monthly Rollup
4530719
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530719
9318
Yes
Security Only
4530695
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530695
4525234
9344
Yes
Monthly Rollup
4530719
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530719
9344
Yes
Security Only
4530734
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530734
4525235
10050
Yes
Monthly Rollup
4530692
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530692
10050
Yes
Security Only
4530734
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530734
4525235
10051
Yes
Monthly Rollup
4530692
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530692
10051
Yes
Security Only
4530734
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530734
4525235
10049
Yes
Monthly Rollup
4530692
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530692
10049
Yes
Security Only
4530691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530691
4525246
10378
Yes
Monthly Rollup
4530691
https://support.microsoft.com/help/4530691
10378
4530698
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530698
10378
Yes
Security Only
4530698
https://support.microsoft.com/help/4530698
10378
4530691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530691
4525246
10379
Yes
Monthly Rollup
4530691
https://support.microsoft.com/help/4530691
10379
4530698
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530698
10379
Yes
Security Only
4530698
https://support.microsoft.com/help/4530698
10379
4530702
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530702
4525243
10483
Yes
Monthly Rollup
4530702
https://support.microsoft.com/help/4530702
10483
4530730
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530730
10483
Yes
Security Only
4530730
https://support.microsoft.com/help/4530730
10483
4530702
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530702
4525243
10543
Yes
Monthly Rollup
4530702
https://support.microsoft.com/help/4530702
10543
4530730
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530730
10543
Yes
Security Only
4530730
https://support.microsoft.com/help/4530730
10543
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11712
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11712
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11713
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11713
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11715
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11715
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11714
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11714
Hossein Lotfi of <a href="https://www.zerodayinitiative.com/">Trend Micro's Zero Day Initiative</a>
1.1
2019-12-11T08:00:00Z
<p>Updated acknowledgment. This is an informational change only.</p>
1.0
2019-12-10T08:00:00Z
<p>Information published.</p>
Windows GDI Information Disclosure Vulnerability
<p>An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.</p>
<p>There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document, or by convincing a user to visit an untrusted webpage.</p>
<p>The security update addresses the vulnerability by correcting how the Windows GDI component handles objects in memory.</p>
<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>
<p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is uninitialized memory.</p>
Microsoft Graphics Component
CVE-2019-1467
11715
11714
11713
11712
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
9312
10287
9311
9318
9344
10050
10051
10049
10378
10379
10483
10543
Information Disclosure
11715
Information Disclosure
11714
Information Disclosure
11713
Information Disclosure
11712
Information Disclosure
11497
Information Disclosure
11498
Information Disclosure
11499
Information Disclosure
11563
Information Disclosure
11568
Information Disclosure
11569
Information Disclosure
11570
Information Disclosure
11571
Information Disclosure
11572
Information Disclosure
11453
Information Disclosure
11454
Information Disclosure
11583
Information Disclosure
11644
Information Disclosure
11645
Information Disclosure
11646
Information Disclosure
11647
Information Disclosure
10729
Information Disclosure
10735
Information Disclosure
10852
Information Disclosure
10853
Information Disclosure
10816
Information Disclosure
10855
Information Disclosure
10047
Information Disclosure
10048
Information Disclosure
10481
Information Disclosure
10482
Information Disclosure
10484
Information Disclosure
9312
Information Disclosure
10287
Information Disclosure
9311
Information Disclosure
9318
Information Disclosure
9344
Information Disclosure
10050
Information Disclosure
10051
Information Disclosure
10049
Information Disclosure
10378
Information Disclosure
10379
Information Disclosure
10483
Information Disclosure
10543
Important
11715
Important
11714
Important
11713
Important
11712
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9311
Important
9318
Important
9344
Important
10050
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11715
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11714
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11713
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11712
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11497
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11498
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11499
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11563
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11568
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11569
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11570
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11571
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11572
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11453
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11454
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11583
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11644
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11645
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11646
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11647
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10729
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10735
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10852
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10853
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10816
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10855
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10047
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10048
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10481
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10482
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10484
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9312
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10287
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9311
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9318
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9344
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10050
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10051
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10049
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10378
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10379
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10483
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10543
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11715
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11715
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11714
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11714
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11713
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11713
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11712
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11712
4530717
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530717
4525237
11497
Yes
Security Update
4530717
https://support.microsoft.com/help/4530717
11497
4530717
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530717
4525237
11498
Yes
Security Update
4530717
https://support.microsoft.com/help/4530717
11498
4530717
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530717
4525237
11499
Yes
Security Update
4530717
https://support.microsoft.com/help/4530717
11499
4530717
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530717
4525237
11563
Yes
Security Update
4530717
https://support.microsoft.com/help/4530717
11563
4530715
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530715
4523205
11568
Yes
Security Update
4530715
https://support.microsoft.com/help/4530715
11568
4530715
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530715
4523205
11569
Yes
Security Update
4530715
https://support.microsoft.com/help/4530715
11569
4530715
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530715
4523205
11570
Yes
Security Update
4530715
https://support.microsoft.com/help/4530715
11570
4530715
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530715
4523205
11571
Yes
Security Update
4530715
https://support.microsoft.com/help/4530715
11571
4530715
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530715
4523205
11572
Yes
Security Update
4530715
https://support.microsoft.com/help/4530715
11572
4530714
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530714
4525241
11453
Yes
Security Update
4530714
https://support.microsoft.com/help/4530714
11453
4530714
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530714
4525241
11454
Yes
Security Update
4530714
https://support.microsoft.com/help/4530714
11454
4530714
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530714
4525241
11583
Yes
Security Update
4530714
https://support.microsoft.com/help/4530714
11583
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11644
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11644
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11645
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11645
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11646
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11646
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11647
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11647
4530681
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530681
4525232
10729
Yes
Security Update
4530681
https://support.microsoft.com/help/4530681
10729
4530681
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530681
4525232
10735
Yes
Security Update
4530681
https://support.microsoft.com/help/4530681
10735
4530689
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530689
4525236
10852
Yes
Security Update
4530689
https://support.microsoft.com/help/4530689
10852
4530689
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530689
4525236
10853
Yes
Security Update
4530689
https://support.microsoft.com/help/4530689
10853
4530689
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530689
4525236
10816
Yes
Security Update
4530689
https://support.microsoft.com/help/4530689
10816
4530689
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530689
4525236
10855
Yes
Security Update
4530689
https://support.microsoft.com/help/4530689
10855
4530734
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530734
4525235
10047
Yes
Monthly Rollup
4530692
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530692
10047
Yes
Security Only
4530734
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530734
4525235
10048
Yes
Monthly Rollup
4530692
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530692
10048
Yes
Security Only
4530702
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530702
4525243
10481
Yes
Monthly Rollup
4530702
https://support.microsoft.com/help/4530702
10481
4530730
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530730
10481
Yes
Security Only
4530730
https://support.microsoft.com/help/4530730
10481
4530702
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530702
4525243
10482
Yes
Monthly Rollup
4530702
https://support.microsoft.com/help/4530702
10482
4530730
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530730
10482
Yes
Security Only
4530730
https://support.microsoft.com/help/4530730
10482
4530702
4525243
10484
Yes
Monthly Rollup
4530702
https://support.microsoft.com/help/4530702
10484
4530695
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530695
4525234
9312
Yes
Monthly Rollup
4530719
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530719
9312
Yes
Security Only
4530695
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530695
4525234
10287
Yes
Monthly Rollup
4530719
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530719
10287
Yes
Security Only
4530695
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530695
4525234
9311
Yes
Monthly Rollup
4530719
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530719
9311
Yes
Security Only
4530695
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530695
4525234
9318
Yes
Monthly Rollup
4530719
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530719
9318
Yes
Security Only
4530695
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530695
4525234
9344
Yes
Monthly Rollup
4530719
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530719
9344
Yes
Security Only
4530734
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530734
4525235
10050
Yes
Monthly Rollup
4530692
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530692
10050
Yes
Security Only
4530734
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530734
4525235
10051
Yes
Monthly Rollup
4530692
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530692
10051
Yes
Security Only
4530734
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530734
4525235
10049
Yes
Monthly Rollup
4530692
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530692
10049
Yes
Security Only
4530691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530691
4525246
10378
Yes
Monthly Rollup
4530691
https://support.microsoft.com/help/4530691
10378
4530698
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530698
10378
Yes
Security Only
4530698
https://support.microsoft.com/help/4530698
10378
4530691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530691
4525246
10379
Yes
Monthly Rollup
4530691
https://support.microsoft.com/help/4530691
10379
4530698
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530698
10379
Yes
Security Only
4530698
https://support.microsoft.com/help/4530698
10379
4530702
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530702
4525243
10483
Yes
Monthly Rollup
4530702
https://support.microsoft.com/help/4530702
10483
4530730
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530730
10483
Yes
Security Only
4530730
https://support.microsoft.com/help/4530730
10483
4530702
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530702
4525243
10543
Yes
Monthly Rollup
4530702
https://support.microsoft.com/help/4530702
10543
4530730
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530730
10543
Yes
Security Only
4530730
https://support.microsoft.com/help/4530730
10543
Lee Jin Young <a href="http://codemize.co.kr"> of Codemize Security Research Lab</a>
1.0
2019-12-10T08:00:00Z
<p>Information published.</p>
Win32k Graphics Remote Code Execution Vulnerability
<p>A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.</p>
<p>There are multiple ways an attacker could exploit this vulnerability.</p>
<ul>
<li><p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit this vulnerability and then convince a user to view the website. An attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically by getting them to click a link in an email message or in an Instant Messenger message that takes users to the attacker's website, or by opening an attachment sent through email.</p>
</li>
<li><p>In a file sharing attack scenario, an attacker could provide a specially crafted document file that is designed to exploit this vulnerability, and then convince a user to open the document file.</p>
</li>
</ul>
<p>The security update addresses the vulnerability by correcting how the Windows font library handles embedded fonts.</p>
Microsoft Graphics Component
CVE-2019-1468
11713
11715
11712
11714
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
9312
10287
9311
9318
9344
10050
10051
10049
10378
10379
10483
10543
Remote Code Execution
11713
Remote Code Execution
11715
Remote Code Execution
11712
Remote Code Execution
11714
Remote Code Execution
11497
Remote Code Execution
11498
Remote Code Execution
11499
Remote Code Execution
11563
Remote Code Execution
11568
Remote Code Execution
11569
Remote Code Execution
11570
Remote Code Execution
11571
Remote Code Execution
11572
Remote Code Execution
11453
Remote Code Execution
11454
Remote Code Execution
11583
Remote Code Execution
11644
Remote Code Execution
11645
Remote Code Execution
11646
Remote Code Execution
11647
Remote Code Execution
10729
Remote Code Execution
10735
Remote Code Execution
10852
Remote Code Execution
10853
Remote Code Execution
10816
Remote Code Execution
10855
Remote Code Execution
10047
Remote Code Execution
10048
Remote Code Execution
10481
Remote Code Execution
10482
Remote Code Execution
10484
Remote Code Execution
9312
Remote Code Execution
10287
Remote Code Execution
9311
Remote Code Execution
9318
Remote Code Execution
9344
Remote Code Execution
10050
Remote Code Execution
10051
Remote Code Execution
10049
Remote Code Execution
10378
Remote Code Execution
10379
Remote Code Execution
10483
Remote Code Execution
10543
Critical
11713
Critical
11715
Critical
11712
Critical
11714
Critical
11497
Critical
11498
Critical
11499
Critical
11563
Critical
11568
Critical
11569
Critical
11570
Critical
11571
Critical
11572
Critical
11453
Critical
11454
Critical
11583
Critical
11644
Critical
11645
Critical
11646
Critical
11647
Critical
10729
Critical
10735
Critical
10852
Critical
10853
Critical
10816
Critical
10855
Critical
10047
Critical
10048
Critical
10481
Critical
10482
Critical
10484
Critical
9312
Critical
10287
Critical
9311
Critical
9318
Critical
9344
Critical
10050
Critical
10051
Critical
10049
Critical
10378
Critical
10379
Critical
10483
Critical
10543
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely
8.4
7.6
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11713
8.4
7.6
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11715
8.4
7.6
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11712
8.4
7.6
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11714
8.4
7.6
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11497
8.4
7.6
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11498
8.4
7.6
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11499
8.4
7.6
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11563
8.4
7.6
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
8.4
7.6
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
8.4
7.6
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
8.4
7.6
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
8.4
7.6
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
8.4
7.6
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11453
8.4
7.6
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11454
8.4
7.6
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11583
8.4
7.6
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11644
8.4
7.6
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11645
8.4
7.6
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11646
8.4
7.6
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11647
8.4
7.6
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10729
8.4
7.6
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10735
8.4
7.6
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10852
8.4
7.6
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10853
8.4
7.6
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10816
8.4
7.6
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10855
8.4
7.6
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10047
8.4
7.6
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10048
8.4
7.6
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10481
8.4
7.6
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10482
8.4
7.6
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10484
8.4
7.6
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9312
8.4
7.6
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10287
8.4
7.6
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9311
8.4
7.6
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9318
8.4
7.6
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9344
8.4
7.6
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10050
8.4
7.6
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10051
8.4
7.6
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10049
8.4
7.6
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10378
8.4
7.6
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10379
8.4
7.6
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10483
8.4
7.6
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10543
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11713
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11713
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11715
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11715
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11712
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11712
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11714
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11714
4530717
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530717
4525237
11497
Yes
Security Update
4530717
https://support.microsoft.com/help/4530717
11497
4530717
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530717
4525237
11498
Yes
Security Update
4530717
https://support.microsoft.com/help/4530717
11498
4530717
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530717
4525237
11499
Yes
Security Update
4530717
https://support.microsoft.com/help/4530717
11499
4530717
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530717
4525237
11563
Yes
Security Update
4530717
https://support.microsoft.com/help/4530717
11563
4530715
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530715
4523205
11568
Yes
Security Update
4530715
https://support.microsoft.com/help/4530715
11568
4530715
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530715
4523205
11569
Yes
Security Update
4530715
https://support.microsoft.com/help/4530715
11569
4530715
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530715
4523205
11570
Yes
Security Update
4530715
https://support.microsoft.com/help/4530715
11570
4530715
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530715
4523205
11571
Yes
Security Update
4530715
https://support.microsoft.com/help/4530715
11571
4530715
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530715
4523205
11572
Yes
Security Update
4530715
https://support.microsoft.com/help/4530715
11572
4530714
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530714
4525241
11453
Yes
Security Update
4530714
https://support.microsoft.com/help/4530714
11453
4530714
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530714
4525241
11454
Yes
Security Update
4530714
https://support.microsoft.com/help/4530714
11454
4530714
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530714
4525241
11583
Yes
Security Update
4530714
https://support.microsoft.com/help/4530714
11583
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11644
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11644
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11645
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11645
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11646
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11646
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11647
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11647
4530681
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530681
4525232
10729
Yes
Security Update
4530681
https://support.microsoft.com/help/4530681
10729
4530681
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530681
4525232
10735
Yes
Security Update
4530681
https://support.microsoft.com/help/4530681
10735
4530689
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530689
4525236
10852
Yes
Security Update
4530689
https://support.microsoft.com/help/4530689
10852
4530689
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530689
4525236
10853
Yes
Security Update
4530689
https://support.microsoft.com/help/4530689
10853
4530689
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530689
4525236
10816
Yes
Security Update
4530689
https://support.microsoft.com/help/4530689
10816
4530689
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530689
4525236
10855
Yes
Security Update
4530689
https://support.microsoft.com/help/4530689
10855
4530734
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530734
4525235
10047
Yes
Monthly Rollup
4530692
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530692
10047
Yes
Security Only
4530734
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530734
4525235
10048
Yes
Monthly Rollup
4530692
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530692
10048
Yes
Security Only
4530702
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530702
4525243
10481
Yes
Monthly Rollup
4530702
https://support.microsoft.com/help/4530702
10481
4530730
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530730
10481
Yes
Security Only
4530730
https://support.microsoft.com/help/4530730
10481
4530702
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530702
4525243
10482
Yes
Monthly Rollup
4530702
https://support.microsoft.com/help/4530702
10482
4530730
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530730
10482
Yes
Security Only
4530730
https://support.microsoft.com/help/4530730
10482
4530702
4525243
10484
Yes
Monthly Rollup
4530702
https://support.microsoft.com/help/4530702
10484
4530695
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530695
4525234
9312
Yes
Monthly Rollup
4530719
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530719
9312
Yes
Security Only
4530695
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530695
4525234
10287
Yes
Monthly Rollup
4530719
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530719
10287
Yes
Security Only
4530695
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530695
4525234
9311
Yes
Monthly Rollup
4530719
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530719
9311
Yes
Security Only
4530695
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530695
4525234
9318
Yes
Monthly Rollup
4530719
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530719
9318
Yes
Security Only
4530695
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530695
4525234
9344
Yes
Monthly Rollup
4530719
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530719
9344
Yes
Security Only
4530734
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530734
4525235
10050
Yes
Monthly Rollup
4530692
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530692
10050
Yes
Security Only
4530734
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530734
4525235
10051
Yes
Monthly Rollup
4530692
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530692
10051
Yes
Security Only
4530734
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530734
4525235
10049
Yes
Monthly Rollup
4530692
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530692
10049
Yes
Security Only
4530691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530691
4525246
10378
Yes
Monthly Rollup
4530691
https://support.microsoft.com/help/4530691
10378
4530698
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530698
10378
Yes
Security Only
4530698
https://support.microsoft.com/help/4530698
10378
4530691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530691
4525246
10379
Yes
Monthly Rollup
4530691
https://support.microsoft.com/help/4530691
10379
4530698
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530698
10379
Yes
Security Only
4530698
https://support.microsoft.com/help/4530698
10379
4530702
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530702
4525243
10483
Yes
Monthly Rollup
4530702
https://support.microsoft.com/help/4530702
10483
4530730
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530730
10483
Yes
Security Only
4530730
https://support.microsoft.com/help/4530730
10483
4530702
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530702
4525243
10543
Yes
Monthly Rollup
4530702
https://support.microsoft.com/help/4530702
10543
4530730
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530730
10543
Yes
Security Only
4530730
https://support.microsoft.com/help/4530730
10543
xina1i <a href="https://github.com/xinali"> of Antiy Labs</a>
riusksk of VulWar Corp working with <a href="https://www.zerodayinitiative.com/">Trend Micro's Zero Day Initiative</a>
1.0
2019-12-10T08:00:00Z
<p>Information published.</p>
Win32k Information Disclosure Vulnerability
<p>An information disclosure vulnerability exists when the win32k component improperly provides kernel information. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.</p>
<p>To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application.</p>
<p>The security update addresses the vulnerability by correcting how win32k handles objects in memory.</p>
<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>
<p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is uninitialized memory and kernel memory - unintentional read access to memory contents in kernel space from a user mode process.</p>
Windows Kernel
CVE-2019-1469
11712
11713
11715
11714
11766
11767
11768
11769
Information Disclosure
11712
Information Disclosure
11713
Information Disclosure
11715
Information Disclosure
11714
Information Disclosure
11766
Information Disclosure
11767
Information Disclosure
11768
Information Disclosure
11769
Important
11712
Important
11713
Important
11715
Important
11714
Important
11766
Important
11767
Important
11768
Important
11769
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11712
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11713
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11715
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11714
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11712
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11712
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11713
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11713
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11715
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11715
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11714
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11714
4565503
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4565503
4557957
11766
Yes
Security Update
4565503
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4565503
4557957
11767
Yes
Security Update
4565503
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4565503
4557957
11768
Yes
Security Update
4565503
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4565503
4557957
11769
Yes
Security Update
Gil Dabah
Guopengfei from Codesafe Team of Legendsec at Qi'anxin Group
Shiyan Peng (Shanghai Jiao Tong University) , Donghui Yu (Shanghai Jiao Tong University)
1.0
2019-12-10T08:00:00Z
<p>Information published.</p>
2.0
2020-07-14T07:00:00Z
<p>Added all versions of Windows 10 Version 2004 to the Security Updates table because it is affected by this vulnerability. Microsoft recommends that customers running Windows 10 Version 2004 install the latest security updates to be fully protected from this vulnerability.</p>
2.1
2020-07-23T07:00:00Z
<p>Updated an acknowledgement.</p>
Windows Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context. An attacker could then install programs; view, change or delete data.</p>
<p>To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system.</p>
<p>The security update addresses the vulnerability by correcting how Windows AppX Deployment Service handles hard links.</p>
Microsoft Windows
CVE-2019-1476
11714
11712
11713
11715
11497
11498
11499
11563
11568
11569
11570
11571
11572
11454
11583
11644
11645
11646
11647
10852
10853
10816
10855
Elevation of Privilege
11714
Elevation of Privilege
11712
Elevation of Privilege
11713
Elevation of Privilege
11715
Elevation of Privilege
11497
Elevation of Privilege
11498
Elevation of Privilege
11499
Elevation of Privilege
11563
Elevation of Privilege
11568
Elevation of Privilege
11569
Elevation of Privilege
11570
Elevation of Privilege
11571
Elevation of Privilege
11572
Elevation of Privilege
11454
Elevation of Privilege
11583
Elevation of Privilege
11644
Elevation of Privilege
11645
Elevation of Privilege
11646
Elevation of Privilege
11647
Elevation of Privilege
10852
Elevation of Privilege
10853
Elevation of Privilege
10816
Elevation of Privilege
10855
Important
11714
Important
11712
Important
11713
Important
11715
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Important
10852
Important
10853
Important
10816
Important
10855
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11714
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11712
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11713
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11715
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11497
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11498
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11499
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11563
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11454
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11583
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11644
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11645
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11646
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11647
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10852
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10853
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10816
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10855
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11714
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11714
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11712
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11712
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11713
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11713
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11715
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11715
4530717
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530717
4525237
11497
Yes
Security Update
4530717
https://support.microsoft.com/help/4530717
11497
4530717
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530717
4525237
11498
Yes
Security Update
4530717
https://support.microsoft.com/help/4530717
11498
4530717
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530717
4525237
11499
Yes
Security Update
4530717
https://support.microsoft.com/help/4530717
11499
4530717
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530717
4525237
11563
Yes
Security Update
4530717
https://support.microsoft.com/help/4530717
11563
4530715
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530715
4523205
11568
Yes
Security Update
4530715
https://support.microsoft.com/help/4530715
11568
4530715
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530715
4523205
11569
Yes
Security Update
4530715
https://support.microsoft.com/help/4530715
11569
4530715
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530715
4523205
11570
Yes
Security Update
4530715
https://support.microsoft.com/help/4530715
11570
4530715
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530715
4523205
11571
Yes
Security Update
4530715
https://support.microsoft.com/help/4530715
11571
4530715
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530715
4523205
11572
Yes
Security Update
4530715
https://support.microsoft.com/help/4530715
11572
4530714
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530714
4525241
11454
Yes
Security Update
4530714
https://support.microsoft.com/help/4530714
11454
4530714
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530714
4525241
11583
Yes
Security Update
4530714
https://support.microsoft.com/help/4530714
11583
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11644
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11644
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11645
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11645
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11646
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11646
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
11647
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
11647
4530689
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530689
4525236
10852
Yes
Security Update
4530689
https://support.microsoft.com/help/4530689
10852
4530689
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530689
4525236
10853
Yes
Security Update
4530689
https://support.microsoft.com/help/4530689
10853
4530689
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530689
4525236
10816
Yes
Security Update
4530689
https://support.microsoft.com/help/4530689
10816
4530689
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530689
4525236
10855
Yes
Security Update
4530689
https://support.microsoft.com/help/4530689
10855
Gábor Selján (<a href="https://twitter.com/GaborSeljan">@GaborSeljan</a>)
1.0
2019-12-10T08:00:00Z
<p>Information published.</p>
Windows Printer Service Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists when the Windows Printer Service improperly validates file paths while loading printer drivers. An authenticated attacker who successfully exploited this vulnerability could run arbitrary code with elevated system privileges.</p>
<p>To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system.</p>
<p>The update addresses this vulnerability by correcting how the Windows Printer Service validates file paths.</p>
Microsoft Windows
CVE-2019-1477
11568
11569
11570
11571
11572
Elevation of Privilege
11568
Elevation of Privilege
11569
Elevation of Privilege
11570
Elevation of Privilege
11571
Elevation of Privilege
11572
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A;Older Software Release:Exploitation Less Likely
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
4530715
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530715
4523205
11568
Yes
Security Update
4530715
https://support.microsoft.com/help/4530715
11568
4530715
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530715
4523205
11569
Yes
Security Update
4530715
https://support.microsoft.com/help/4530715
11569
4530715
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530715
4523205
11570
Yes
Security Update
4530715
https://support.microsoft.com/help/4530715
11570
4530715
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530715
4523205
11571
Yes
Security Update
4530715
https://support.microsoft.com/help/4530715
11571
4530715
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530715
4523205
11572
Yes
Security Update
4530715
https://support.microsoft.com/help/4530715
11572
Yongil Lee of <a href="https://www.diffense.com">Diffense</a>
1.0
2019-12-10T08:00:00Z
<p>Information published.</p>
Windows COM Server Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists when Windows improperly handles COM object creation. An attacker who successfully exploited the vulnerability could run arbitrary code with elevated privileges.</p>
<p>To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system.</p>
<p>The update addresses the vulnerability by correcting how the Windows COM Server creates COM objects.</p>
Microsoft Windows
CVE-2019-1478
10047
10048
9312
10287
9311
9318
9344
10050
10051
10049
Elevation of Privilege
10047
Elevation of Privilege
10048
Elevation of Privilege
9312
Elevation of Privilege
10287
Elevation of Privilege
9311
Elevation of Privilege
9318
Elevation of Privilege
9344
Elevation of Privilege
10050
Elevation of Privilege
10051
Elevation of Privilege
10049
Important
10047
Important
10048
Important
9312
Important
10287
Important
9311
Important
9318
Important
9344
Important
10050
Important
10051
Important
10049
Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A;Older Software Release:Exploitation Less Likely
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10047
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10048
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9312
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10287
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9311
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9318
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9344
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10050
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10051
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10049
4530734
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530734
4525235
10047
Yes
Monthly Rollup
4530692
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530692
10047
Yes
Security Only
4530734
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530734
4525235
10048
Yes
Monthly Rollup
4530692
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530692
10048
Yes
Security Only
4530695
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530695
4525234
9312
Yes
Monthly Rollup
4530719
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530719
9312
Yes
Security Only
4530695
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530695
4525234
10287
Yes
Monthly Rollup
4530719
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530719
10287
Yes
Security Only
4530695
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530695
4525234
9311
Yes
Monthly Rollup
4530719
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530719
9311
Yes
Security Only
4530695
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530695
4525234
9318
Yes
Monthly Rollup
4530719
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530719
9318
Yes
Security Only
4530695
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530695
4525234
9344
Yes
Monthly Rollup
4530719
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530719
9344
Yes
Security Only
4530734
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530734
4525235
10050
Yes
Monthly Rollup
4530692
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530692
10050
Yes
Security Only
4530734
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530734
4525235
10051
Yes
Monthly Rollup
4530692
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530692
10051
Yes
Security Only
4530734
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530734
4525235
10049
Yes
Monthly Rollup
4530692
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530692
10049
Yes
Security Only
Yongil Lee of <a href="https://www.diffense.com">Diffense</a>
1.0
2019-12-10T08:00:00Z
<p>Information published.</p>
VBScript Remote Code Execution Vulnerability
<p>A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Internet Explorer and then convince a user to view the website. An attacker could also embed an ActiveX control marked "safe for initialization" in an application or Microsoft Office document that hosts the IE rendering engine. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p>
<p>The security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.</p>
Microsoft Scripting Engine
CVE-2019-1485
10555-10378
10336-9312
10336-9318
10486-11497
10486-11498
10486-11563
10486-11568
10486-11569
10486-11570
10486-11571
10486-11453
10486-11454
10486-11583
10486-11644
10486-11645
10486-11646
10486-10729
10486-10735
10486-10852
10486-10853
10486-10816
10486-10047
10486-10048
10486-10481
10486-10482
10486-10484
10486-10051
10486-10378
10486-10483
10486-11712
10486-11714
10486-11713
Remote Code Execution
10555-10378
Remote Code Execution
10336-9312
Remote Code Execution
10336-9318
Remote Code Execution
10486-11497
Remote Code Execution
10486-11498
Remote Code Execution
10486-11563
Remote Code Execution
10486-11568
Remote Code Execution
10486-11569
Remote Code Execution
10486-11570
Remote Code Execution
10486-11571
Remote Code Execution
10486-11453
Remote Code Execution
10486-11454
Remote Code Execution
10486-11583
Remote Code Execution
10486-11644
Remote Code Execution
10486-11645
Remote Code Execution
10486-11646
Remote Code Execution
10486-10729
Remote Code Execution
10486-10735
Remote Code Execution
10486-10852
Remote Code Execution
10486-10853
Remote Code Execution
10486-10816
Remote Code Execution
10486-10047
Remote Code Execution
10486-10048
Remote Code Execution
10486-10481
Remote Code Execution
10486-10482
Remote Code Execution
10486-10484
Remote Code Execution
10486-10051
Remote Code Execution
10486-10378
Remote Code Execution
10486-10483
Remote Code Execution
10486-11712
Remote Code Execution
10486-11714
Remote Code Execution
10486-11713
Low
10555-10378
Low
10336-9312
Low
10336-9318
Important
10486-11497
Important
10486-11498
Important
10486-11563
Important
10486-11568
Important
10486-11569
Important
10486-11570
Low
10486-11571
Important
10486-11453
Important
10486-11454
Important
10486-11583
Important
10486-11644
Important
10486-11645
Important
10486-11646
Important
10486-10729
Important
10486-10735
Important
10486-10852
Important
10486-10853
Low
10486-10816
Important
10486-10047
Important
10486-10048
Important
10486-10481
Important
10486-10482
Important
10486-10484
Low
10486-10051
Low
10486-10378
Low
10486-10483
Important
10486-11712
Important
10486-11714
Important
10486-11713
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10555-10378
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10336-9312
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10336-9318
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11497
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11498
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11563
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11568
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11569
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11570
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11571
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11453
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11454
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11583
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11644
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11645
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11646
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10729
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10735
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10852
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10853
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10816
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10047
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10048
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10481
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10482
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10484
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10051
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10378
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10483
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11712
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11714
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11713
4530691
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530691
4525246
10555-10378
Yes
Monthly Rollup
4530691
https://support.microsoft.com/help/4530691
10555-10378
4530677
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530677
4525106
10555-10378
Yes
IE Cumulative
4530695
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530695
4525234
10336-9312
Yes
Monthly Rollup
4530677
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530677
4525106
10336-9312
Yes
IE Cumulative
4530695
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530695
4525234
10336-9318
Yes
Monthly Rollup
4530677
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530677
4525106
10336-9318
Yes
IE Cumulative
4530717
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530717
4525237
10486-11497
Yes
Security Update
4530717
https://support.microsoft.com/help/4530717
10486-11497
4530717
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530717
4525237
10486-11498
Yes
Security Update
4530717
https://support.microsoft.com/help/4530717
10486-11498
4530717
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530717
4525237
10486-11563
Yes
Security Update
4530717
https://support.microsoft.com/help/4530717
10486-11563
4530715
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530715
4523205
10486-11568
Yes
Security Update
4530715
https://support.microsoft.com/help/4530715
10486-11568
4530715
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530715
4523205
10486-11569
Yes
Security Update
4530715
https://support.microsoft.com/help/4530715
10486-11569
4530715
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530715
4523205
10486-11570
Yes
Security Update
4530715
https://support.microsoft.com/help/4530715
10486-11570
4530715
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530715
4523205
10486-11571
Yes
Security Update
4530715
https://support.microsoft.com/help/4530715
10486-11571
4530714
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530714
4525241
10486-11453
Yes
Security Update
4530714
https://support.microsoft.com/help/4530714
10486-11453
4530714
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530714
4525241
10486-11454
Yes
Security Update
4530714
https://support.microsoft.com/help/4530714
10486-11454
4530714
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530714
4525241
10486-11583
Yes
Security Update
4530714
https://support.microsoft.com/help/4530714
10486-11583
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
10486-11644
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
10486-11644
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
10486-11645
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
10486-11645
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
10486-11646
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
10486-11646
4530681
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530681
4525232
10486-10729
Yes
Security Update
4530681
https://support.microsoft.com/help/4530681
10486-10729
4530681
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530681
4525232
10486-10735
Yes
Security Update
4530681
https://support.microsoft.com/help/4530681
10486-10735
4530689
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530689
4525236
10486-10852
Yes
Security Update
4530689
https://support.microsoft.com/help/4530689
10486-10852
4530689
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530689
4525236
10486-10853
Yes
Security Update
4530689
https://support.microsoft.com/help/4530689
10486-10853
4530689
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530689
4525236
10486-10816
Yes
Security Update
4530689
https://support.microsoft.com/help/4530689
10486-10816
4530734
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530734
4525235
10486-10047
Yes
Monthly Rollup
4530677
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530677
4525106
10486-10047
Yes
IE Cumulative
4530734
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530734
4525235
10486-10048
Yes
Monthly Rollup
4530677
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530677
4525106
10486-10048
Yes
IE Cumulative
4530702
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530702
4525243
10486-10481
Yes
Monthly Rollup
4530702
https://support.microsoft.com/help/4530702
10486-10481
4530677
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530677
4525106
10486-10481
Yes
IE Cumulative
4530702
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530702
4525243
10486-10482
Yes
Monthly Rollup
4530702
https://support.microsoft.com/help/4530702
10486-10482
4530677
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530677
4525106
10486-10482
Yes
IE Cumulative
4530702
4525243
10486-10484
Yes
Monthly Rollup
4530702
https://support.microsoft.com/help/4530702
10486-10484
4530734
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530734
4525235
10486-10051
Yes
Monthly Rollup
4530677
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530677
4525106
10486-10051
Yes
IE Cumulative
4530677
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530677
4525106
10486-10378
Yes
IE Cumulative
4530702
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530702
4525243
10486-10483
Yes
Monthly Rollup
4530702
https://support.microsoft.com/help/4530702
10486-10483
4530677
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530677
4525106
10486-10483
Yes
IE Cumulative
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
10486-11712
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
10486-11712
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
10486-11714
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
10486-11714
4530684
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4530684
4524570
10486-11713
Yes
Security Update
4530684
https://support.microsoft.com/help/4530684
10486-11713
Yuki Chen of <a href="http://www.360.com/">Qihoo 360 Vulcan Team</a>
1.0
2019-12-10T08:00:00Z
<p>Information published.</p>
Microsoft Guidance for cleaning up orphaned keys generated on vulnerable TPMs and used for Windows Hello for Business
<p>Microsoft is aware of an issue in Windows Hello for Business (WHfB) with public keys that persist after a device is removed from Active Directory, if the AD exists. After a user sets up Windows Hello for Business (WHfB), the WHfB public key is written to the on-premises Active Directory. The WHfB keys are tied to a user and a device that has been added to Azure AD, and if the device is removed, the corresponding WHfB key is considered orphaned. However, these orphaned keys are not deleted even when the device it was created on is no longer present. Any authentication to Azure AD using such an orphaned WHfB key will be rejected. However, some of these orphaned keys could lead to the following security issue in Active Directory 2016 or 2019, in either hybrid or on-premises environments.</p>
<p>An authenticated attacker could obtain orphaned keys created on TPMs that were affected by <a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15361">CVE-2017-15361</a> (ROCA), discussed in <a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV170012">Microsoft Security Advisory ADV170012</a> to compute their WHfB private key from the orphaned public keys. The attacker could then impersonate the user by using the stolen private key to authenticate as the user within the domain using Public Key Cryptography for Initial Authentication (PKINIT).</p>
<p>This attack is possible even if firmware and software updates have been applied to TPMs that were affected by <a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15361">CVE-2017-15361</a> because the corresponding public keys might still exist in Active Directory.</p>
<p>This advisory provides guidance for cleaning up any orphaned public keys that were generated with an unpatched TPM (before firmware updates discussed in <a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV170012">ADV170012</a> were applied). Follow this guidance to identify and remove orphaned WHfB keys.</p>
<p>This particular issue with orphaned public keys can be present when WHfB is set up in the following configurations:</p>
<ul>
<li>WHfB is deployed on Active Directory 2016 or 2019, either in hybrid mode or on-premises only.</li>
<li>Currently have or have had in the past, WHfB keys generated on TPMs that were affected by CVE-2017-15361.</li>
</ul>
<p><strong>Important</strong>: Azure Active Directory (Azure AD) and Active Directory Federation Services (AD FS) are not affected by this issue. However, we strongly recommend that you follow the <strong>Recommended Actions</strong> section of ADV170012, and apply any firmware updates supplied by your TPM OEM, to avoid any exposure to Azure AD and AD FS. See Step #4 of the <strong>Recommended Actions</strong> for a list of OEMs and links to information for their updates.</p>
<p><strong>1. What systems are at risk?</strong></p>
<p>Individual machines or servers are not affected by this WHfB issue. Affected environments are defined in the <strong>Mitigations</strong> section of this advisory.</p>
<p><strong>2. Has this issue been publicly disclosed?</strong></p>
<p>Yes, this issue has been disclosed.</p>
<p><strong>3. Have there been any active attacks detected?</strong></p>
<p>No. When this security advisory was issued, Microsoft had not received any information to indicate that this issue had been publicly used to attack customers.</p>
<p><strong>4. How do I know if my TPMs are affected by CVE-2017-15361? How do I fix them?</strong></p>
<p>Please refer to <a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV170012">Microsoft Security Advisory ADV170012</a> for more details on CVE-2017-15361. You must follow the guidance in ADV170012 and update your TPMs before applying the mitigations for identifying and removing the orphaned public keys.</p>
<p><strong>5. I have updated all of my TPMs that were affected by CVE-2017-15361 with firmware provided by the OEM. Are my systems still affected?</strong></p>
<p>Yes. Orphaned WHFB keys previously generated from those TPMs could still be stored in Active Directory.</p>
<p><strong>6. My TPMs are not affected by CVE-2017-15361, but I do not enforce a policy to use TPMs for WHfB. Am I still affected?</strong></p>
<p>In the absence of a hardware-required policy, WHFB will prefer using the TPM for storing the private key. If you do not have any TPMs that are affected by CVE-2017-15361, then you are not impacted. However, we recommend removing any orphaned keys in your directory by following the steps discussed in the <strong>Mitigations</strong> section of this advisory.</p>
<p><strong>7. I am running pre-2016 versions of Active Directory. Do I also need to remove these orphaned keys?</strong></p>
<p>While you are not affected by this WHFB issue, we strongly recommend removing these orphaned keys as a security hygiene measure.</p>
<p><strong>8. I regularly audit and clean up stale devices in my environment. How did I end up with orphaned keys?</strong></p>
<p>When a user provisions a WHFB credential, the public key is stored in the msDS-KeyCredentialLink attribute of the user object in Azure AD and on-premises Active Directory. If the device that was used to create the key is removed from Azure AD and Active Directory, the WHFB public key created for the user on that device is not automatically removed from the user object and it becomes an orphaned key.</p>
<p><strong>9. I have deployed WHFB certificate trust in my environment and use certificates for authentication. Am I affected? Do I need to remove orphaned keys?</strong></p>
<p>Yes. You are still affected by this issue if you have deployed certificate trust and have 2016 or 2019 DCs in your environment. These DC versions still support key-based authentication even if you have deployed end user certificates for authentication.</p>
Windows Hello
ADV190026
9237
9237
9237
Publicly Disclosed:No;Exploited:No
<p>Follow these steps to mitigate the issue with orphaned WHfB keys in your environment:</p>
<ol>
<li>Ensure your TPMs affected by CVE-2017-15361 are patched. See <a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV170012">Microsoft Security Advisory ADV170012</a> for details.</li>
<li>Install the WHfBTools Windows PowerShell module. See <a href="https://www.powershellgallery.com/packages/WHfBTools">WHfBTools</a>.</li>
</ol>
<p>Use the WHfBTools PowerShell scripts to identify and remove keys, which <strong>will</strong> differ depending on whether your environment is a hybrid environment or an on-premises only environment. See <a href="https://support.microsoft.com/help/4533501">Using WHfBTools PowerShell module for cleaning up orphaned Windows Hello for Business Keys for instructions</a> for complete instructions.</p>
<ol start="3">
<li>Query your environment for orphaned WHfB keys and for keys affected by CVE-2017-15361 (ROCA).</li>
<li>You can then do one of the following, using the appropriate PowerShell script:</li>
</ol>
<ul>
<li>Delete orphaned WHfB keys.</li>
<li>Delete keys affected by CVE-2017-15361. <strong>Important</strong> Be aware that if you delete ROCA vulnerable WHfB keys that are not orphaned yet, it will cause disruption to your users. You should ensure that these keys are orphaned before removing them from the directory.</li>
<li>Delete both orphaned keys and keys affected by CVE-2017-15361.</li>
</ul>
<p>The scripts you will use to identify and remove keys differ depending on whether your environment is a hybrid environment or an on-premises only environment. See <a href="https://support.microsoft.com/help/4533501">Using WHfBTools PowerShell module for cleaning up orphaned Windows Hello for Business Keys for instructions</a>.</p>
<p><strong>Hybrid environment:</strong></p>
<p>A hybrid environment consists of Active Directory 2016 or 2019, with synchronization to Azure AD with or without AD FS.</p>
<p><strong>Note</strong></p>
<ul>
<li>If you haven’t updated your TPM first, simply deleting these keys from the directory is not sufficient to mitigate the issue. Setting up WHfB again will re-create keys that are affected by CVE-2017-15361.</li>
<li>Deleting keys in Azure AD will automatically remove them in Active Directory as part of the synchronization process between Active Directory and Azure AD. If you are in a hybrid environment deleting the keys from only Active Directory is not sufficient as they will be re-written from Azure AD as a part of the synchronization process.</li>
</ul>
<p><strong>On-premises only environment:</strong></p>
<p>An on-premises only environment consists of Active Directory 2016 or 2019, both with AD FS.</p>
<p><strong>Note</strong></p>
<p>If you haven’t updated your TPM first, deleting these keys from the directory is not sufficient to mitigate the issue. Setting up WHfB again will re-create keys that are affected by CVE-2017-15361.</p>
<a href="https://www.dsinternals.com">Michael Grafnetter @MGrafnetter</a>
1.0
2019-12-03T08:00:00Z
<p>Information published.</p>
Visual Studio Live Share Spoofing Vulnerability
<p>A spoofing vulnerability exists in Visual Studio Live Share when a guest connected to a Live Share session is redirected to an arbitrary URL specified by the session host. An attacker who successfully exploited this vulnerability could cause a connected guest's computer to open a browser and navigate to a URL without consent from the guest.</p>
<p>To exploit the vulnerability, an attacker would need to host a Live Share session and convince a targeted user to connect to the session.</p>
<p>The update addresses the vulnerability by prompting the Live Share guest for consent prior to browsing to the host-specified URL.</p>
<p><strong>I want to install the latest supported service baseline for Visual Studio. Do I need to install the previous versions first?</strong></p>
<p>No. For both Visual Studio 2019 and Visual Studio 2017, the latest supported servicing baseline is cumulative. For example, if you need to install Visual Studio 2019 version 16.4 you do NOT first have to install any previous versions. See <a href="https://docs.microsoft.com/en-us/visualstudio/releases/2019/release-notes">Visual Studio 2019 version 16.4 Release Notes</a> for more information.</p>
Visual Studio
CVE-2019-1486
11720
11721
11658
11734
Spoofing
11720
Spoofing
11721
Spoofing
11658
Spoofing
11734
Important
11720
Important
11721
Important
11658
Important
11734
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely
Release Notes
https://aka.ms/vs/16/release/latest
11720
Maybe
Security Update
Release Notes
https://marketplace.visualstudio.com/items?itemName=MS-vsliveshare.vsls-vs
11721
Maybe
Security Update
Release Notes
https://my.visualstudio.com/Downloads?q=Visual Studio 2019 version 16.0
11658
Maybe
Security Update
Release Notes
https://marketplace.visualstudio.com/items?itemName=MS-vsliveshare.vsliveshare
11734
Maybe
Security Update
Francesco Giordano (<a href="https://twitter.com/0xakuma">@0xakuma</a>) of <a href="https://www.telsy.com">Telsy</a> and Valerio Preti (<a href="https://twitter.com/leovalcante">@leovalcante</a>) of <a href="https://hacktivesecurity.com">Hacktive Security</a>
1.0
2019-12-10T08:00:00Z
<p>Information published.</p>
2.0
2020-01-22T08:00:00Z
<p>In the Security Updates table, added Microsoft Visual Studio Code Live Share extension because it is also affected by CVE-2019-1486. Corrected the Article and Download links for Microsoft Visual Studio Live Share extension.</p>
Skype for Business Server Spoofing Vulnerability
<p>A spoofing vulnerability exists when a Skype for Business Server does not properly sanitize a specially crafted request. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected server. The attacker who successfully exploited this vulnerability could then perform cross-site scripting attacks on affected systems and run scripts in the security context of the current user.</p>
<p>For the vulnerability to be exploited, a user must click a specially crafted URL that takes the user to a targeted Skype for Business site.</p>
<p>In an email attack scenario, an attacker could exploit the vulnerability by sending an email message containing the specially crafted URL to the user of the targeted Skype for Business site and convincing the user to click the specially crafted URL.</p>
<p>The security update addresses the vulnerability by helping to ensure that Skype for Business Server properly sanitizes web requests.</p>
Skype for Business
CVE-2019-1490
11722
Spoofing
11722
Important
11722
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely
4534761
https://www.microsoft.com/en-us/download/details.aspx?id=58347
11722
Maybe
Security Update
<a href="https://plus.google.com/109511353019526855573">Suresh C</a>
1.0
2019-12-10T08:00:00Z
<p>Information published.</p>
1.1
2020-01-29T08:00:00Z
<p>Added Exploitation ratings for this CVE. This is an informational change only.</p>
Microsoft SharePoint Server Information Disclosure Vulnerability
<p>An information disclosure vulnerability exists in SharePoint Server. An attacker who exploited this vulnerability could read arbitrary files on the server.</p>
<p>To exploit the vulnerability, an attacker would need to send a specially crafted request to a susceptible SharePoint Server instance.</p>
<p>The update addresses the vulnerability by changing how affected APIs process requests.</p>
<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>
<p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is unauthorized file system access - reading from the file system.</p>
<p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p>
<p>No, the Preview Pane is not an attack vector.</p>
Microsoft Office SharePoint
CVE-2019-1491
10950
11585
10505
10612
Information Disclosure
10950
Information Disclosure
11585
Information Disclosure
10505
Information Disclosure
10612
Important
10950
Important
11585
Important
10505
Important
10612
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely
4484143
https://www.microsoft.com/download/details.aspx?familyid=e67a00b1-7fd8-4f3b-abef-89cdcde23e9f
4484111
10950
Maybe
Security Update
4484142
https://www.microsoft.com/download/details.aspx?familyid=fe4f85af-6da2-4c91-8be4-51d245dc70a8
4484110
11585
Maybe
Security Update
4484165
https://www.microsoft.com/download/details.aspx?familyid=f96cfc07-5a2a-41cf-ae9c-ec049c18e11b
4484131
10505
Maybe
Security Update
4484157
https://www.microsoft.com/download/details.aspx?familyid=8c214a20-166f-4d37-9de0-633f8d2441fc
4484122
10612
Maybe
Security Update
Saif ElSherei of MSRC Vulnerabilities and Mitigations Team
1.0
2019-12-17T08:00:00Z
<p>Information published. This CVE has been added to this month's Security Updates. This is an informational change only. Customers who have successfully installed the applicable updates do not need to take any further action.</p>