July 2019 Security Updates
Security Update
secure@microsoft.com
The Microsoft Security Response Center (MSRC) identifies, monitors, resolves, and responds to security incidents and Microsoft software security vulnerabilities. For more information, see http://www.microsoft.com/security/msrc.
2019-Jul
2019-Jul
Final
1.0
61
2026-08-12T23:49:14
July 2019 Security Updates
2019-07-09T07:00:00
2026-08-12T23:49:14
<p>The July security release consists of security updates for the following software:</p>
<ul>
<li>Microsoft Windows</li>
<li>Internet Explorer</li>
<li>Microsoft Edge</li>
<li>Microsoft Office and Microsoft Office Services and Web Apps</li>
<li>Azure DevOps</li>
<li>Open Source Software</li>
<li>.NET Framework</li>
<li>Azure</li>
<li>SQL Server</li>
<li>ASP.NET</li>
<li>Visual Studio</li>
<li>Microsoft Exchange Server</li>
<li>PowerShell Core</li>
</ul>
<p>Please note the following information regarding the security updates:</p>
<ul>
<li>A list of the latest servicing stack updates for each operating system can be found in <a href="https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/ADV990001">ADV990001</a>. This list will be updated whenever a new servicing stack update is released. It is important to install the latest servicing stack update.</li>
<li>Windows 10 updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows 10, in addition to non-security updates. The updates are available via the <a href="http://catalog.update.microsoft.com/v7/site/Home.aspx">Microsoft Update Catalog</a>.</li>
<li>Updates for Windows RT 8.1 and Microsoft Office RT software are only available via <a href="http://go.microsoft.com/fwlink/?LinkId=21130">Windows Update</a>.</li>
<li>For information on lifecycle and support dates for Windows 10 operating systems, please see <a href="https://support.microsoft.com/en-us/help/13853/windows-lifecycle-fact-sheet">Windows Lifecycle Facts Sheet</a>.</li>
<li>In addition to security changes for the vulnerabilities, updates include defense-in-depth updates to help improve security-related features.</li>
<li>Starting in May 2019, Internet Explorer 11 is available on Windows Server 2012. This configuration is only present in only the IE Cumulative package.</li>
</ul>
<p><strong>The following CVEs have FAQs with additional information and may include * further steps to take after installing the updates. Please note that this is not a complete list of CVEs for this release.</strong></p>
<ul>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0962">CVE-2019-0962</a> *</li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1006">CVE-2019-1006</a> *</li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1068">CVE-2019-1068</a> *</li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1071">CVE-2019-1071</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1073">CVE-2019-1073</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1079">CVE-2019-1079</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1084">CVE-2019-1084</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1091">CVE-2019-1091</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1093">CVE-2019-1093</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1094">CVE-2019-1094</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1095">CVE-2019-1095</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1096">CVE-2019-1096</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1097">CVE-2019-1097</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1098">CVE-2019-1098</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1099">CVE-2019-1099</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1100">CVE-2019-1100</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1101">CVE-2019-1101</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1108">CVE-2019-1108</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1109">CVE-2019-1109</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1110">CVE-2019-1110</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1111">CVE-2019-1111</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1112">CVE-2019-1112</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1116">CVE-2019-1116</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1134">CVE-2019-1134</a></li>
</ul>
<p><strong>Known Issues</strong></p>
<table>
<thead>
<tr>
<th>KB Article</th>
<th>Applies To</th>
</tr>
</thead>
<tbody>
<tr>
<td><a href="https://support.microsoft.com/help/4493730">4493730</a></td>
<td>Servicing stack update for Windows Server 2008 SP2</td>
</tr>
<tr>
<td><a href="https://support.microsoft.com/help/4507434">4507434</a></td>
<td>Internet Explorer 11</td>
</tr>
<tr>
<td><a href="https://support.microsoft.com/help/4507435">4507435</a></td>
<td>Windows 10, version 1803</td>
</tr>
<tr>
<td><a href="https://support.microsoft.com/help/4507448">4507448</a></td>
<td>Windows 8.1, Windows Server 2012 R2 (Monthly Rollup)</td>
</tr>
<tr>
<td><a href="https://support.microsoft.com/help/4507449">4507449</a></td>
<td>Windows 7 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Monthly Rollup)</td>
</tr>
<tr>
<td><a href="https://support.microsoft.com/help/4507450">4507450</a></td>
<td>Windows 10, version 1703</td>
</tr>
<tr>
<td><a href="https://support.microsoft.com/help/4507453">4507453</a></td>
<td>Windows 10, version 1903, Windows Server version 1903</td>
</tr>
<tr>
<td><a href="https://support.microsoft.com/help/4507455">4507455</a></td>
<td>Windows 10, version 1709</td>
</tr>
<tr>
<td><a href="https://support.microsoft.com/help/4507457">4507457</a></td>
<td>Windows 8.1, Windows Server 2012 R2 (Security-only update)</td>
</tr>
<tr>
<td><a href="https://support.microsoft.com/help/4507458">4507458</a></td>
<td>Windows 10</td>
</tr>
<tr>
<td><a href="https://support.microsoft.com/help/4507460">4507460</a></td>
<td>Windows 10 1607 and Windows Server 2016</td>
</tr>
<tr>
<td><a href="https://support.microsoft.com/help/4507462">4507462</a></td>
<td>Windows Server 2012 (Monthly Rollup)</td>
</tr>
<tr>
<td><a href="https://support.microsoft.com/help/4507464">4507464</a></td>
<td>Windows Server 2012 (Security-only update)</td>
</tr>
<tr>
<td><a href="https://support.microsoft.com/help/4507469">4507469</a></td>
<td>Windows 10, version 1809, Windows Server 2019</td>
</tr>
<tr>
<td><a href="https://support.microsoft.com/help/4509408">4509408</a></td>
<td>Microsoft Exchange Server 2019</td>
</tr>
<tr>
<td><a href="https://support.microsoft.com/help/4509409">4509409</a></td>
<td>Microsoft Exchange Server 2013 and 2016</td>
</tr>
<tr>
<td><a href="https://support.microsoft.com/help/4509410">4509410</a></td>
<td>Microsoft Exchange Server 2010</td>
</tr>
</tbody>
</table>
The information provided in the Microsoft Knowledge Base is provided "as is" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.
Windows 10 Version 1703 for 32-bit Systems
Windows 10 Version 1703 for x64-based Systems
Windows 10 Version 1803 for 32-bit Systems
Windows 10 Version 1803 for x64-based Systems
Windows Server, version 1803 (Server Core Installation)
Windows 10 Version 1803 for ARM64-based Systems
Windows 10 Version 1809 for 32-bit Systems
Windows 10 Version 1809 for x64-based Systems
Windows 10 Version 1809 for ARM64-based Systems
Windows Server 2019
Windows Server 2019 (Server Core installation)
Windows 10 Version 1709 for 32-bit Systems
Windows 10 Version 1709 for x64-based Systems
Windows 10 Version 1709 for ARM64-based Systems
Windows 10 Version 1903 for 32-bit Systems
Windows 10 Version 1903 for x64-based Systems
Windows 10 Version 1903 for ARM64-based Systems
Windows Server, version 1903 (Server Core installation)
Windows Server 2022
Windows Server 2022 (Server Core installation)
Windows 11 for x64-based Systems
Windows 11 for ARM64-based Systems
Windows 10 for 32-bit Systems
Windows 10 for x64-based Systems
Windows 10 Version 1607 for 32-bit Systems
Windows 10 Version 1607 for x64-based Systems
Windows Server 2016
Windows Server 2016 (Server Core installation)
Windows 8.1 for 32-bit systems
Windows 8.1 for x64-based systems
Windows RT 8.1
Windows Server 2012
Windows Server 2012 (Server Core installation)
Windows Server 2012 R2
Windows Server 2012 R2 (Server Core installation)
Windows 7 for 32-bit Systems Service Pack 1
Windows 7 for x64-based Systems Service Pack 1
Windows Server 2008 for 32-bit Systems Service Pack 2
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)
Windows Server 2008 for Itanium-Based Systems Service Pack 2
Windows Server 2008 for x64-based Systems Service Pack 2
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)
Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)
Internet Explorer 9 on Windows Server 2008 for 32-bit Systems Service Pack 2
Internet Explorer 9 on Windows Server 2008 for x64-based Systems Service Pack 2
Internet Explorer 11 on Windows 10 Version 1703 for 32-bit Systems
Internet Explorer 11 on Windows 10 Version 1703 for x64-based Systems
Internet Explorer 11 on Windows 10 Version 1803 for 32-bit Systems
Internet Explorer 11 on Windows 10 Version 1803 for x64-based Systems
Internet Explorer 11 on Windows 10 Version 1803 for ARM64-based Systems
Internet Explorer 11 on Windows 10 Version 1809 for 32-bit Systems
Internet Explorer 11 on Windows 10 Version 1809 for x64-based Systems
Internet Explorer 11 on Windows 10 Version 1809 for ARM64-based Systems
Internet Explorer 11 on Windows Server 2019
Internet Explorer 11 on Windows 10 Version 1709 for 32-bit Systems
Internet Explorer 11 on Windows 10 Version 1709 for x64-based Systems
Internet Explorer 11 on Windows 10 Version 1709 for ARM64-based Systems
Internet Explorer 11 on Windows 10 Version 1903 for 32-bit Systems
Internet Explorer 11 on Windows 10 Version 1903 for x64-based Systems
Internet Explorer 11 on Windows 10 Version 1903 for ARM64-based Systems
Internet Explorer 11 on Windows 10 for 32-bit Systems
Internet Explorer 11 on Windows 10 for x64-based Systems
Internet Explorer 11 on Windows 10 Version 1607 for 32-bit Systems
Internet Explorer 11 on Windows 10 Version 1607 for x64-based Systems
Internet Explorer 11 on Windows Server 2016
Internet Explorer 11 on Windows 7 for 32-bit Systems Service Pack 1
Internet Explorer 11 on Windows 7 for x64-based Systems Service Pack 1
Internet Explorer 11 on Windows 8.1 for 32-bit systems
Internet Explorer 11 on Windows 8.1 for x64-based systems
Internet Explorer 11 on Windows RT 8.1
Internet Explorer 11 on Windows Server 2008 R2 for x64-based Systems Service Pack 1
Internet Explorer 11 on Windows Server 2012
Internet Explorer 11 on Windows Server 2012 R2
Internet Explorer 10 on Windows Server 2012
ChakraCore
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1703 for 32-bit Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1703 for x64-based Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for 32-bit Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for x64-based Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for ARM64-based Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for 32-bit Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for x64-based Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for ARM64-based Systems
Microsoft Edge (EdgeHTML-based) on Windows Server 2019
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1709 for 32-bit Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1709 for x64-based Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1709 for ARM64-based Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1903 for 32-bit Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1903 for x64-based Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1903 for ARM64-based Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 for 32-bit Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 for x64-based Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for 32-bit Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for x64-based Systems
Microsoft Edge (EdgeHTML-based) on Windows Server 2016
Team Foundation Server 2017 Update 3.1
Team Foundation Server 2018 Update 1.2
Team Foundation Server 2018 Update 3.2
Team Foundation Server 2015 Update 4.2
Team Foundation Server 2012 Update 4
Team Foundation Server 2013 Update 5
Azure DevOps Server 2019.0.1
Team Foundation Server 2010 SP1 (x86)
Team Foundation Server 2010 SP1 (x64)
Azure IoT Edge
Microsoft Visual Studio 2017
Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
Microsoft Visual Studio 2019 version 16.0
Microsoft Visual Studio 2019 version 16.1
Microsoft .NET Framework 4.6/4.6.1/4.6.2 on Windows 10 for 32-bit Systems
Microsoft .NET Framework 4.6/4.6.1/4.6.2 on Windows 10 for x64-based Systems
Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows 7 for 32-bit Systems Service Pack 1
Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows 7 for x64-based Systems Service Pack 1
Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows 8.1 for 32-bit systems
Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows 8.1 for x64-based systems
Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows RT 8.1
Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2008 R2 for x64-based Systems Service Pack 1
Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)
Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012
Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012 (Server Core installation)
Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012 R2
Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012 R2 (Server Core installation)
Microsoft .NET Framework 4.6 on Windows Server 2008 for 32-bit Systems Service Pack 2
Microsoft .NET Framework 4.6 on Windows Server 2008 for x64-based Systems Service Pack 2
Microsoft .NET Framework 2.0 Service Pack 2 on Windows Server 2008 for 32-bit Systems Service Pack 2
Microsoft .NET Framework 2.0 Service Pack 2 on Windows Server 2008 for Itanium-Based Systems Service Pack 2
Microsoft .NET Framework 2.0 Service Pack 2 on Windows Server 2008 for x64-based Systems Service Pack 2
Microsoft .NET Framework 3.0 Service Pack 2 on Windows Server 2008 for 32-bit Systems Service Pack 2
Microsoft .NET Framework 3.0 Service Pack 2 on Windows Server 2008 for Itanium-Based Systems Service Pack 2
Microsoft .NET Framework 3.0 Service Pack 2 on Windows Server 2008 for x64-based Systems Service Pack 2
Microsoft .NET Framework 3.5 on Windows 10 Version 1703 for 32-bit Systems
Microsoft .NET Framework 3.5 on Windows 10 Version 1703 for x64-based Systems
Microsoft .NET Framework 3.5 on Windows 10 Version 1803 for 32-bit Systems
Microsoft .NET Framework 3.5 on Windows 10 Version 1803 for x64-based Systems
Microsoft .NET Framework 3.5 on Windows Server, version 1803 (Server Core Installation)
Microsoft .NET Framework 3.5 on Windows 10 Version 1709 for 32-bit Systems
Microsoft .NET Framework 3.5 on Windows 10 Version 1709 for x64-based Systems
Microsoft .NET Framework 3.5 on Windows 10 for 32-bit Systems
Microsoft .NET Framework 3.5 on Windows 10 for x64-based Systems
Microsoft .NET Framework 3.5 on Windows 10 Version 1607 for 32-bit Systems
Microsoft .NET Framework 3.5 on Windows 10 Version 1607 for x64-based Systems
Microsoft .NET Framework 3.5 on Windows Server 2016
Microsoft .NET Framework 3.5 on Windows Server 2016 (Server Core installation)
Microsoft .NET Framework 3.5 on Windows 8.1 for 32-bit systems
Microsoft .NET Framework 3.5 on Windows 8.1 for x64-based systems
Microsoft .NET Framework 3.5 on Windows Server 2012
Microsoft .NET Framework 3.5 on Windows Server 2012 (Server Core installation)
Microsoft .NET Framework 3.5 on Windows Server 2012 R2
Microsoft .NET Framework 3.5 on Windows Server 2012 R2 (Server Core installation)
Microsoft .NET Framework 3.5.1 on Windows 7 for 32-bit Systems Service Pack 1
Microsoft .NET Framework 3.5.1 on Windows 7 for x64-based Systems Service Pack 1
Microsoft .NET Framework 3.5.1 on Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1
Microsoft .NET Framework 3.5.1 on Windows Server 2008 R2 for x64-based Systems Service Pack 1
Microsoft .NET Framework 3.5.1 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)
Microsoft .NET Framework 4.5.2 on Windows 7 for 32-bit Systems Service Pack 1
Microsoft .NET Framework 4.5.2 on Windows 7 for x64-based Systems Service Pack 1
Microsoft .NET Framework 4.5.2 on Windows 8.1 for 32-bit systems
Microsoft .NET Framework 4.5.2 on Windows 8.1 for x64-based systems
Microsoft .NET Framework 4.5.2 on Windows RT 8.1
Microsoft .NET Framework 4.5.2 on Windows Server 2008 for 32-bit Systems Service Pack 2
Microsoft .NET Framework 4.5.2 on Windows Server 2008 for x64-based Systems Service Pack 2
Microsoft .NET Framework 4.5.2 on Windows Server 2008 R2 for x64-based Systems Service Pack 1
Microsoft .NET Framework 4.5.2 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)
Microsoft .NET Framework 4.5.2 on Windows Server 2012
Microsoft .NET Framework 4.5.2 on Windows Server 2012 (Server Core installation)
Microsoft .NET Framework 4.5.2 on Windows Server 2012 R2
Microsoft .NET Framework 4.5.2 on Windows Server 2012 R2 (Server Core installation)
Microsoft .NET Framework 4.8 on Windows 10 Version 1703 for 32-bit Systems
Microsoft .NET Framework 4.8 on Windows 10 Version 1703 for x64-based Systems
Microsoft .NET Framework 4.8 on Windows 10 Version 1803 for 32-bit Systems
Microsoft .NET Framework 4.8 on Windows 10 Version 1803 for x64-based Systems
Microsoft .NET Framework 4.8 on Windows Server, version 1803 (Server Core Installation)
Microsoft .NET Framework 4.8 on Windows 10 Version 1709 for 32-bit Systems
Microsoft .NET Framework 4.8 on Windows 10 Version 1709 for x64-based Systems
Microsoft .NET Framework 4.8 on Windows 10 Version 1607 for 32-bit Systems
Microsoft .NET Framework 4.8 on Windows 10 Version 1607 for x64-based Systems
Microsoft .NET Framework 4.8 on Windows Server 2016
Microsoft .NET Framework 4.8 on Windows Server 2016 (Server Core installation)
Microsoft .NET Framework 4.8 on Windows 7 for 32-bit Systems Service Pack 1
Microsoft .NET Framework 4.8 on Windows 7 for x64-based Systems Service Pack 1
Microsoft .NET Framework 4.8 on Windows 8.1 for 32-bit systems
Microsoft .NET Framework 4.8 on Windows 8.1 for x64-based systems
Microsoft .NET Framework 4.8 on Windows RT 8.1
Microsoft .NET Framework 4.8 on Windows Server 2008 R2 for x64-based Systems Service Pack 1
Microsoft .NET Framework 4.8 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)
Microsoft .NET Framework 4.8 on Windows Server 2012
Microsoft .NET Framework 4.8 on Windows Server 2012 (Server Core installation)
Microsoft .NET Framework 4.8 on Windows Server 2012 R2
Microsoft .NET Framework 4.8 on Windows Server 2012 R2 (Server Core installation)
Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809 for 32-bit Systems
Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1809 for x64-based Systems
Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809 for x64-based Systems
Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1809 for 32-bit Systems
Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2019
Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server 2019
Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1903 for 32-bit Systems
Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server 2019 (Server Core installation)
Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2019 (Server Core installation)
Microsoft .NET Framework 3.5 AND 4.8 on Windows Server, version 1903 (Server Core installation)
Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1903 for x64-based Systems
Microsoft.IdentityModel 7.0.0
ASP.NET Core 2.1
ASP.NET Core 2.2
Microsoft Visual Studio 2010 Service Pack 1
Microsoft Visual Studio 2012 Update 5
Microsoft Visual Studio 2013 Update 5
Microsoft Visual Studio 2015 Update 3
PowerShell Core 6.1
PowerShell Core 6.2
Microsoft Azure Kubernetes Service
Azure Automation
Microsoft Office 2019 for 32-bit editions
Microsoft Office 2019 for 64-bit editions
Office 365 ProPlus for 32-bit Systems
Office 365 ProPlus for 64-bit Systems
Microsoft Office 2016 (32-bit edition)
Microsoft Office 2016 (64-bit edition)
Microsoft Office 2013 RT Service Pack 1
Microsoft Office 2013 Service Pack 1 (32-bit editions)
Microsoft Office 2013 Service Pack 1 (64-bit editions)
Microsoft Office 2019 for Mac
Microsoft Excel 2016 (32-bit edition)
Microsoft Excel 2016 (64-bit edition)
Microsoft Office 2016 for Mac
Microsoft Excel 2010 Service Pack 2 (32-bit editions)
Microsoft Excel 2010 Service Pack 2 (64-bit editions)
Microsoft Excel 2013 RT Service Pack 1
Microsoft Excel 2013 Service Pack 1 (32-bit editions)
Microsoft Excel 2013 Service Pack 1 (64-bit editions)
Microsoft Office 2010 Service Pack 2 (32-bit editions)
Microsoft Office 2010 Service Pack 2 (64-bit editions)
Microsoft SharePoint Enterprise Server 2016
Microsoft SharePoint Enterprise Server 2013 Service Pack 1
Microsoft SharePoint Server 2019
Microsoft SharePoint Foundation 2010 Service Pack 2
Microsoft SharePoint Foundation 2013 Service Pack 1
Microsoft Outlook 2016 (32-bit edition)
Microsoft Outlook 2016 (64-bit edition)
Microsoft Outlook 2013 Service Pack 1 (32-bit editions)
Microsoft Outlook 2013 Service Pack 1 (64-bit editions)
Microsoft Outlook 2010 Service Pack 2 (32-bit editions)
Microsoft Outlook 2010 Service Pack 2 (64-bit editions)
Skype for Business 2016 (32-bit)
Skype for Business 2016 (64-bit)
Skype for Business 2016 Basic (32-bit)
Skype for Business 2016 Basic (64-bit)
Microsoft Lync 2013 Service Pack 1 (32-bit)
Microsoft Lync 2013 Service Pack 1 (64-bit)
Microsoft Lync Basic 2013 Service Pack 1 (32-bit)
Microsoft Lync Basic 2013 Service Pack 1 (64-bit)
Outlook for iOS
Microsoft SQL Server 2016 for x64-based Systems Service Pack 1 (GDR)
Microsoft SQL Server 2016 for x64-based Systems Service Pack 1 (CU)
Microsoft SQL Server 2017 for x64-based Systems (GDR)
Microsoft SQL Server 2017 for x64-based Systems (CU)
Microsoft SQL Server 2016 for x64-based Systems Service Pack 2 (CU)
Microsoft SQL Server 2016 for x64-based Systems Service Pack 2 (GDR)
Microsoft SQL Server 2014 Service Pack 2 for 32-bit Systems (GDR)
Microsoft SQL Server 2014 Service Pack 2 for 32-bit Systems (CU)
Microsoft SQL Server 2014 Service Pack 2 for x64-based Systems (CU)
Microsoft SQL Server 2014 Service Pack 2 for x64-based Systems (GDR)
Microsoft SQL Server 2014 Service Pack 3 for x64-based Systems (CU)
Microsoft SQL Server 2014 Service Pack 3 for x64-based Systems (GDR)
Microsoft SQL Server 2014 Service Pack 3 for 32-bit Systems (CU 4)
Microsoft SQL Server 2014 Service Pack 3 for 32-bit Systems (GDR)
Microsoft Outlook for Android
Mail and Calendar
Microsoft Remote Desktop for Android
Microsoft Remote Desktop for IoS
Microsoft Exchange Server 2016 Cumulative Update 12
Microsoft Exchange Server 2019 Cumulative Update 1
Microsoft Exchange Server 2010 Service Pack 3
Microsoft Exchange Server 2016 Cumulative Update 13
Microsoft Exchange Server 2013 Cumulative Update 23
Microsoft Exchange Server 2019 Cumulative Update 2
Microsoft Exchange Server 2016
Microsoft Exchange Server 2019
Microsoft Exchange Server 2013
Windows 7 for 32-bit Systems Service Pack 1
Windows 7 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)
Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems Service Pack 1
Microsoft Visual Studio 2010 Service Pack 1
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)
Microsoft Visual Studio 2012 Update 5
Internet Explorer 9 on Windows Server 2008 for 32-bit Systems Service Pack 2
Internet Explorer 9 on Windows Server 2008 for x64-based Systems Service Pack 2
Windows Server 2012
Windows Server 2012 (Server Core installation)
Microsoft Exchange Server 2013
Microsoft Exchange Server 2010 Service Pack 3
Windows 8.1 for 32-bit systems
Windows 8.1 for x64-based systems
Windows Server 2012 R2
Windows RT 8.1
Internet Explorer 11 on Windows 7 for 32-bit Systems Service Pack 1
Internet Explorer 11 on Windows 7 for x64-based Systems Service Pack 1
Internet Explorer 11 on Windows Server 2008 R2 for x64-based Systems Service Pack 1
Internet Explorer 11 on Windows Server 2012
Internet Explorer 11 on Windows 8.1 for 32-bit systems
Internet Explorer 11 on Windows 8.1 for x64-based systems
Internet Explorer 11 on Windows Server 2012 R2
Internet Explorer 11 on Windows RT 8.1
Internet Explorer 11 on Windows 10 for 32-bit Systems
Internet Explorer 11 on Windows 10 for x64-based Systems
Internet Explorer 11 on Windows Server 2016
Internet Explorer 11 on Windows 10 Version 1607 for 32-bit Systems
Internet Explorer 11 on Windows 10 Version 1607 for x64-based Systems
Internet Explorer 11 on Windows 10 Version 1703 for 32-bit Systems
Internet Explorer 11 on Windows 10 Version 1703 for x64-based Systems
Internet Explorer 11 on Windows 10 Version 1709 for 32-bit Systems
Internet Explorer 11 on Windows 10 Version 1709 for x64-based Systems
Internet Explorer 11 on Windows 10 Version 1803 for 32-bit Systems
Internet Explorer 11 on Windows 10 Version 1803 for x64-based Systems
Internet Explorer 11 on Windows 10 Version 1803 for ARM64-based Systems
Internet Explorer 11 on Windows 10 Version 1809 for 32-bit Systems
Internet Explorer 11 on Windows 10 Version 1809 for x64-based Systems
Internet Explorer 11 on Windows 10 Version 1809 for ARM64-based Systems
Internet Explorer 11 on Windows Server 2019
Internet Explorer 11 on Windows 10 Version 1709 for ARM64-based Systems
Internet Explorer 11 on Windows 10 Version 1903 for 32-bit Systems
Internet Explorer 11 on Windows 10 Version 1903 for x64-based Systems
Internet Explorer 11 on Windows 10 Version 1903 for ARM64-based Systems
Microsoft Excel 2010 Service Pack 2 (32-bit editions)
Microsoft Excel 2010 Service Pack 2 (64-bit editions)
Microsoft SharePoint Foundation 2010 Service Pack 2
Microsoft Office 2010 Service Pack 2 (32-bit editions)
Microsoft Office 2010 Service Pack 2 (64-bit editions)
Microsoft Outlook 2010 Service Pack 2 (32-bit editions)
Microsoft Outlook 2010 Service Pack 2 (64-bit editions)
Windows Server 2012 R2 (Server Core installation)
Internet Explorer 10 on Windows Server 2012
Microsoft Visual Studio 2013 Update 5
Microsoft Visual Studio 2015 Update 3
Microsoft Office 2013 Service Pack 1 (32-bit editions)
Microsoft Office 2013 Service Pack 1 (64-bit editions)
Microsoft Office 2013 RT Service Pack 1
Microsoft SharePoint Foundation 2013 Service Pack 1
Microsoft Lync 2013 Service Pack 1 (32-bit)
Microsoft Lync Basic 2013 Service Pack 1 (32-bit)
Microsoft Lync 2013 Service Pack 1 (64-bit)
Microsoft Lync Basic 2013 Service Pack 1 (64-bit)
Microsoft .NET Framework 4.5.2 on Windows 7 for 32-bit Systems Service Pack 1
Microsoft .NET Framework 4.5.2 on Windows 7 for x64-based Systems Service Pack 1
Microsoft .NET Framework 4.5.2 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)
Microsoft .NET Framework 4.5.2 on Windows Server 2008 R2 for x64-based Systems Service Pack 1
Microsoft .NET Framework 4.5.2 on Windows Server 2012
Microsoft .NET Framework 4.5.2 on Windows Server 2012 (Server Core installation)
Microsoft .NET Framework 4.5.2 on Windows 8.1 for 32-bit systems
Microsoft .NET Framework 4.5.2 on Windows 8.1 for x64-based systems
Microsoft .NET Framework 4.5.2 on Windows Server 2012 R2
Microsoft .NET Framework 4.5.2 on Windows RT 8.1
Microsoft .NET Framework 4.5.2 on Windows Server 2012 R2 (Server Core installation)
Microsoft .NET Framework 4.5.2 on Windows Server 2008 for 32-bit Systems Service Pack 2
Microsoft .NET Framework 4.5.2 on Windows Server 2008 for x64-based Systems Service Pack 2
Microsoft Excel 2013 Service Pack 1 (32-bit editions)
Microsoft Excel 2013 Service Pack 1 (64-bit editions)
Microsoft Excel 2013 RT Service Pack 1
Microsoft Outlook for Android
Microsoft Edge (EdgeHTML-based) on Windows 10 for 32-bit Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 for x64-based Systems
Microsoft Edge (EdgeHTML-based) on Windows Server 2016
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for 32-bit Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for x64-based Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1703 for 32-bit Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1703 for x64-based Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1709 for 32-bit Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1709 for x64-based Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for 32-bit Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for x64-based Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for ARM64-based Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for 32-bit Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for x64-based Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for ARM64-based Systems
Microsoft Edge (EdgeHTML-based) on Windows Server 2019
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1709 for ARM64-based Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1903 for 32-bit Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1903 for x64-based Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1903 for ARM64-based Systems
Microsoft .NET Framework 4.6 on Windows Server 2008 for 32-bit Systems Service Pack 2
Microsoft .NET Framework 4.6 on Windows Server 2008 for x64-based Systems Service Pack 2
Windows 10 for 32-bit Systems
Microsoft Office 2016 for Mac
Windows 10 for x64-based Systems
Microsoft Excel 2016 (32-bit edition)
Microsoft Excel 2016 (64-bit edition)
Microsoft Office 2016 (32-bit edition)
Microsoft Office 2016 (64-bit edition)
Microsoft Outlook 2016 (32-bit edition)
Microsoft Outlook 2016 (64-bit edition)
Skype for Business 2016 (32-bit)
Skype for Business 2016 (64-bit)
Skype for Business 2016 Basic (32-bit)
Skype for Business 2016 Basic (64-bit)
Microsoft Outlook 2013 Service Pack 1 (32-bit editions)
Microsoft Outlook 2013 Service Pack 1 (64-bit editions)
Windows Server 2016
Windows 10 Version 1607 for 32-bit Systems
Windows 10 Version 1607 for x64-based Systems
Windows Server 2016 (Server Core installation)
Team Foundation Server 2012 Update 4
Team Foundation Server 2013 Update 5
Microsoft SQL Server 2014 Service Pack 2 for 32-bit Systems (GDR)
Microsoft SQL Server 2014 Service Pack 2 for 32-bit Systems (CU)
Microsoft SQL Server 2014 Service Pack 2 for x64-based Systems (CU)
Microsoft SQL Server 2014 Service Pack 2 for x64-based Systems (GDR)
Microsoft SharePoint Enterprise Server 2016
Windows 10 Version 1703 for 32-bit Systems
Windows 10 Version 1703 for x64-based Systems
Microsoft SharePoint Enterprise Server 2013 Service Pack 1
Microsoft SQL Server 2016 for x64-based Systems Service Pack 1 (GDR)
Microsoft SQL Server 2016 for x64-based Systems Service Pack 1 (CU)
ChakraCore
Windows 10 Version 1709 for 32-bit Systems
Windows 10 Version 1709 for x64-based Systems
Microsoft SQL Server 2017 for x64-based Systems (GDR)
Microsoft SQL Server 2017 for x64-based Systems (CU)
Windows 10 Version 1803 for 32-bit Systems
Windows 10 Version 1803 for x64-based Systems
Windows Server, version 1803 (Server Core Installation)
Microsoft Visual Studio 2017
Microsoft .NET Framework 4.6/4.6.1/4.6.2 on Windows 10 for 32-bit Systems
Microsoft .NET Framework 4.6/4.6.1/4.6.2 on Windows 10 for x64-based Systems
Microsoft Exchange Server 2016
Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows 7 for 32-bit Systems Service Pack 1
Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows 7 for x64-based Systems Service Pack 1
Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)
Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2008 R2 for x64-based Systems Service Pack 1
Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012
Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012 (Server Core installation)
Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows 8.1 for 32-bit systems
Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows 8.1 for x64-based systems
Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012 R2
Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows RT 8.1
Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012 R2 (Server Core installation)
PowerShell Core 6.1
Microsoft SQL Server 2016 for x64-based Systems Service Pack 2 (CU)
Microsoft SQL Server 2016 for x64-based Systems Service Pack 2 (GDR)
Windows 10 Version 1803 for ARM64-based Systems
ASP.NET Core 2.1
Windows 10 Version 1809 for 32-bit Systems
Windows 10 Version 1809 for x64-based Systems
Windows 10 Version 1809 for ARM64-based Systems
Windows Server 2019
Windows Server 2019 (Server Core installation)
Microsoft Office 2019 for 32-bit editions
Microsoft Office 2019 for 64-bit editions
Microsoft Office 2019 for Mac
Office 365 ProPlus for 32-bit Systems
Office 365 ProPlus for 64-bit Systems
Azure IoT Edge
Windows 10 Version 1709 for ARM64-based Systems
Microsoft SharePoint Server 2019
Microsoft Exchange Server 2019
Team Foundation Server 2017 Update 3.1
Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
ASP.NET Core 2.2
Team Foundation Server 2018 Update 1.2
Team Foundation Server 2018 Update 3.2
PowerShell Core 6.2
Microsoft Exchange Server 2016 Cumulative Update 12
Microsoft Exchange Server 2019 Cumulative Update 1
Windows 10 Version 1903 for 32-bit Systems
Windows 10 Version 1903 for x64-based Systems
Windows 10 Version 1903 for ARM64-based Systems
Windows Server, version 1903 (Server Core installation)
Microsoft .NET Framework 4.8 on Windows 7 for 32-bit Systems Service Pack 1
Microsoft .NET Framework 4.8 on Windows 7 for x64-based Systems Service Pack 1
Microsoft .NET Framework 4.8 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)
Microsoft .NET Framework 4.8 on Windows Server 2008 R2 for x64-based Systems Service Pack 1
Microsoft .NET Framework 4.8 on Windows Server 2012
Microsoft .NET Framework 4.8 on Windows Server 2012 (Server Core installation)
Microsoft .NET Framework 4.8 on Windows 8.1 for 32-bit systems
Microsoft .NET Framework 4.8 on Windows 8.1 for x64-based systems
Microsoft .NET Framework 4.8 on Windows Server 2012 R2
Microsoft .NET Framework 4.8 on Windows RT 8.1
Microsoft .NET Framework 4.8 on Windows Server 2012 R2 (Server Core installation)
Microsoft .NET Framework 4.8 on Windows Server 2016
Microsoft .NET Framework 4.8 on Windows 10 Version 1607 for 32-bit Systems
Microsoft .NET Framework 4.8 on Windows 10 Version 1607 for x64-based Systems
Microsoft .NET Framework 4.8 on Windows Server 2016 (Server Core installation)
Microsoft .NET Framework 4.8 on Windows 10 Version 1703 for 32-bit Systems
Microsoft .NET Framework 4.8 on Windows 10 Version 1703 for x64-based Systems
Microsoft .NET Framework 4.8 on Windows 10 Version 1709 for 32-bit Systems
Microsoft .NET Framework 4.8 on Windows 10 Version 1709 for x64-based Systems
Microsoft .NET Framework 4.8 on Windows 10 Version 1803 for 32-bit Systems
Microsoft .NET Framework 4.8 on Windows 10 Version 1803 for x64-based Systems
Microsoft .NET Framework 4.8 on Windows Server, version 1803 (Server Core Installation)
Team Foundation Server 2015 Update 4.2
Azure Automation
Microsoft Visual Studio 2019 version 16.0
Microsoft SQL Server 2014 Service Pack 3 for x64-based Systems (GDR)
Microsoft SQL Server 2014 Service Pack 3 for x64-based Systems (CU)
Microsoft Azure Kubernetes Service
Microsoft SQL Server 2014 Service Pack 3 for 32-bit Systems (GDR)
Microsoft SQL Server 2014 Service Pack 3 for 32-bit Systems (CU 4)
Azure DevOps Server 2019.0.1
Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809 for 32-bit Systems
Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809 for x64-based Systems
Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2019
Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2019 (Server Core installation)
Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1903 for 32-bit Systems
Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1903 for x64-based Systems
Microsoft .NET Framework 3.5 AND 4.8 on Windows Server, version 1903 (Server Core installation)
Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1809 for 32-bit Systems
Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1809 for x64-based Systems
Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server 2019
Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server 2019 (Server Core installation)
Microsoft Visual Studio 2019 version 16.1
Microsoft Exchange Server 2019 Cumulative Update 2
Microsoft Exchange Server 2016 Cumulative Update 13
Microsoft Exchange Server 2013 Cumulative Update 23
Mail and Calendar
Outlook for iOS
Microsoft.IdentityModel 7.0.0
Team Foundation Server 2010 SP1 (x86)
Team Foundation Server 2010 SP1 (x64)
Microsoft Remote Desktop for Android
Microsoft Remote Desktop for IoS
Windows Server 2022
Windows Server 2022 (Server Core installation)
Windows 11 for x64-based Systems
Windows 11 for ARM64-based Systems
azl3 fltk 1.3.8-1 on Azure Linux 3.0
azl3 fltk 1.3.8-1 on Azure Linux 3.0
cm1 moby-buildx 0.4.1+azure-3 on CBL Mariner 1.0
cbl2 unzip 6.0-19 on CBL Mariner 2.0
azl3 unzip 6.0-20 on Azure Linux 3.0
azl3 unzip 6.0-20 on Azure Linux 3.0
azl3 syslinux 6.04-11 on Azure Linux 3.0
cbl2 libdwarf 0.9.0 on CBL Mariner 2.0
azl3 libdwarf 0.9.0-1 on Azure Linux 3.0
azl3 libdwarf 0.9.0-1 on Azure Linux 3.0
cm1 patch 2.7.6-7 on CBL Mariner 1.0
cbl2 patch 2.7.6-7 on CBL Mariner 2.0
azl3 patch 2.7.6-9 on Azure Linux 3.0
azl3 patch 2.7.6-9 on Azure Linux 3.0
cm1 gdb 8.3-3 on CBL Mariner 1.0
cbl2 pango 1.45.5-1 on CBL Mariner 2.0
azl3 hyperv-daemons 6.6.35.1-1 on Azure Linux 3.0
azl3 hyperv-daemons 6.6.35.1-1 on Azure Linux 3.0
cm1 binutils 2.32-4 on CBL Mariner 1.0
cm1 unzip 6.0-18 on CBL Mariner 1.0
cbl2 exiv2 0.27.5-1 on CBL Mariner 2.0
cbl2 mcpp 2.7.2-28 on CBL Mariner 2.0
azl3 mcpp 2.7.2-28 on Azure Linux 3.0
azl3 mcpp 2.7.2-28 on Azure Linux 3.0
cbl2 qemu 6.2.0-24 on CBL Mariner 2.0
cbl2 qemu 6.2.0-24 on CBL-Mariner 2.0
azl3 qemu 8.2.0-16 on Azure Linux 3.0
azl3 tensorflow 2.16.1-9 on Azure Linux 3.0
azl3 unzip 6.0-22 on Azure Linux 3.0
cbl2 qemu 6.2.0-24 on CBL Mariner 2.0
cbl2 tensorflow 2.11.1-2 on CBL Mariner 2.0
cbl2 tensorflow 2.11.1-2 on CBL-Mariner 2.0
azl3 python-tensorboard 2.16.2-6 on Azure Linux 3.0
cbl2 python-tensorboard 2.11.0-3 on CBL Mariner 2.0
cbl2 python-tensorboard 2.11.0-3 on CBL-Mariner 2.0
azl3 hyperv-daemons 6.6.92.2-1 on Azure Linux 3.0
cbl2 libdwarf 0.9.0-3 on CBL Mariner 2.0
Microsoft .NET Framework 3.5 on Windows Server 2012
Microsoft .NET Framework 3.5 on Windows Server 2012 (Server Core installation)
Microsoft .NET Framework 3.5 on Windows 8.1 for 32-bit systems
Microsoft .NET Framework 3.5 on Windows 8.1 for x64-based systems
Microsoft .NET Framework 3.5 on Windows Server 2012 R2
Microsoft .NET Framework 3.5 on Windows Server 2012 R2 (Server Core installation)
Microsoft .NET Framework 3.5 on Windows 10 for 32-bit Systems
Microsoft .NET Framework 3.5 on Windows 10 for x64-based Systems
Microsoft .NET Framework 3.5 on Windows Server 2016
Microsoft .NET Framework 3.5 on Windows 10 Version 1607 for 32-bit Systems
Microsoft .NET Framework 3.5 on Windows 10 Version 1607 for x64-based Systems
Microsoft .NET Framework 3.5 on Windows Server 2016 (Server Core installation)
Microsoft .NET Framework 3.5 on Windows 10 Version 1703 for 32-bit Systems
Microsoft .NET Framework 3.5 on Windows 10 Version 1703 for x64-based Systems
Microsoft .NET Framework 3.5 on Windows 10 Version 1709 for 32-bit Systems
Microsoft .NET Framework 3.5 on Windows 10 Version 1709 for x64-based Systems
Microsoft .NET Framework 3.5 on Windows 10 Version 1803 for 32-bit Systems
Microsoft .NET Framework 3.5 on Windows 10 Version 1803 for x64-based Systems
Microsoft .NET Framework 3.5 on Windows Server, version 1803 (Server Core Installation)
Microsoft .NET Framework 3.0 Service Pack 2 on Windows Server 2008 for Itanium-Based Systems Service Pack 2
Microsoft .NET Framework 3.0 Service Pack 2 on Windows Server 2008 for 32-bit Systems Service Pack 2
Microsoft .NET Framework 3.0 Service Pack 2 on Windows Server 2008 for x64-based Systems Service Pack 2
Microsoft .NET Framework 2.0 Service Pack 2 on Windows Server 2008 for Itanium-Based Systems Service Pack 2
Microsoft .NET Framework 2.0 Service Pack 2 on Windows Server 2008 for 32-bit Systems Service Pack 2
Microsoft .NET Framework 2.0 Service Pack 2 on Windows Server 2008 for x64-based Systems Service Pack 2
Windows Server 2008 for Itanium-Based Systems Service Pack 2
Windows Server 2008 for 32-bit Systems Service Pack 2
Windows Server 2008 for x64-based Systems Service Pack 2
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)
Microsoft .NET Framework 3.5.1 on Windows 7 for 32-bit Systems Service Pack 1
Microsoft .NET Framework 3.5.1 on Windows 7 for x64-based Systems Service Pack 1
Microsoft .NET Framework 3.5.1 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)
Microsoft .NET Framework 3.5.1 on Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1
Microsoft .NET Framework 3.5.1 on Windows Server 2008 R2 for x64-based Systems Service Pack 1
In the Linux kernel before 5.1.7 a device can be tracked by an attacker using the IP ID values the kernel produces for connection-less protocols (e.g. UDP and ICMP). When such traffic is sent to multiple destination IP addresses it is possible to obtain hash collisions (of indices to the counter array) and thereby obtain the hashing key (via enumeration). An attack may be conducted by hosting a crafted web page that uses WebRTC or gQUIC to force UDP traffic to attacker-controlled IP addresses.
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
mitre
Yes
CVE-2019-10638
Inadequate Encryption Strength
16989-17084
19797-17084
16989-16817
16989-17084
19797-17084
16989-16817
Moderate
16989-17084
Moderate
19797-17084
Moderate
16989-16817
6.5
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
16989-17084
6.5
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
19797-17084
6.5
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
16989-16817
CBL-Mariner Releases
16989-17084
19797-17084
16989-16817
No
Security Update
6.6.35.1-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
16989-17084
19797-17084
16989-16817
CBL-Mariner Releases
1.1
2026-02-18T01:09:50
<p>Information published.</p>
1.0
2024-08-15T00:00:00
<p>Information published.</p>
Info-ZIP UnZip 6.0 mishandles the overlapping of files inside a ZIP container leading to denial of service (resource consumption) aka a "better zip bomb" issue.
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
mitre
Yes
CVE-2019-13232
Uncontrolled Resource Consumption
17008-16820
16845-16823
16846-16817
16846-17084
18861-17084
17008-16820
16845-16823
16846-16817
16846-17084
18861-17084
Low
17008-16820
Low
16845-16823
Low
16846-16817
Low
16846-17084
Low
18861-17084
3.3
3.3
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
17008-16820
3.3
3.3
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
16845-16823
3.3
3.3
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
16846-16817
3.3
3.3
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
16846-17084
3.3
3.3
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
18861-17084
CBL-Mariner Releases
17008-16820
No
Security Update
6.0-18
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
17008-16820
CBL-Mariner Releases
CBL-Mariner Releases
16845-16823
No
Security Update
6.0-19
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
16845-16823
CBL-Mariner Releases
CBL-Mariner Releases
16846-16817
16846-17084
18861-17084
No
Security Update
6.0-20
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
16846-16817
16846-17084
18861-17084
CBL-Mariner Releases
1.0
2020-08-18T00:00:00
<p>Information published.</p>
1.1
2021-12-16T00:00:00
<p>Added unzip to CBL-Mariner 2.0</p>
1.2
2024-06-30T07:00:00
<p>Information published.</p>
1.3
2026-02-20T22:53:42
<p>Information published.</p>
GNU patch through 2.7.6 is vulnerable to OS shell command injection that can be exploited by opening a crafted patch file that contains an ed style diff payload with shell metacharacters. The ed editor does not need to be present on the vulnerable system. This is different from CVE-2018-1000156.
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
mitre
Yes
CVE-2019-13638
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
16925-16820
16926-16823
16927-16817
16927-17084
16925-16820
16926-16823
16927-16817
16927-17084
Important
16925-16820
Important
16926-16823
Important
16927-16817
Important
16927-17084
7.8
7.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
16925-16820
7.8
7.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
16926-16823
7.8
7.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
16927-16817
7.8
7.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
16927-17084
CBL-Mariner Releases
16925-16820
16926-16823
No
Security Update
2.7.6-7
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
16925-16820
16926-16823
CBL-Mariner Releases
CBL-Mariner Releases
16927-16817
16927-17084
No
Security Update
2.7.6-9
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
16927-16817
16927-17084
CBL-Mariner Releases
1.0
2020-09-25T00:00:00
<p>Information published.</p>
1.1
2021-12-16T00:00:00
<p>Added patch to CBL-Mariner 2.0</p>
1.2
2024-06-30T07:00:00
<p>Information published.</p>
2.0
2026-08-12T21:26:42
<p>Information published.</p>
An issue was discovered in GNU libiberty as distributed in GNU Binutils 2.32. simple_object_elf_match in simple-object-elf.c does not check for a zero shstrndx value leading to an integer overflow and resultant heap-based buffer overflow.
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
mitre
Yes
CVE-2019-14250
Out-of-bounds Write
17006-16820
17006-16820
Moderate
17006-16820
5.5
5.5
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
17006-16820
CBL-Mariner Releases
17006-16820
No
Security Update
2.32-4
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
17006-16820
CBL-Mariner Releases
1.0
2020-08-18T00:00:00
<p>Information published.</p>
MCPP 2.7.2 has a heap-based buffer overflow in the do_msg() function in support.c.
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
mitre
Yes
CVE-2019-14274
Out-of-bounds Write
17010-16823
17011-16817
17011-17084
17010-16823
17011-16817
17011-17084
Moderate
17010-16823
Moderate
17011-16817
Moderate
17011-17084
5.5
5.5
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
17010-16823
5.5
5.5
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
17011-16817
5.5
5.5
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
17011-17084
CBL-Mariner Releases
17010-16823
17011-16817
17011-17084
No
Security Update
2.7.2-28
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
17010-16823
17011-16817
17011-17084
CBL-Mariner Releases
2.0
2026-08-12T21:08:51
<p>Information published.</p>
1.0
2021-12-16T00:00:00
<p>Information published.</p>
1.1
2024-06-30T07:00:00
<p>Information published.</p>
libpng before 1.6.32 does not properly check the length of chunks against the user limit.
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
mitre
Yes
CVE-2017-12652
Improper Input Validation
16826-17084
16848-17084
16826-16817
16826-17084
16848-17084
16826-16817
Critical
16826-17084
Critical
16848-17084
Critical
16826-16817
9.8
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
16826-17084
9.8
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
16848-17084
9.8
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
16826-16817
CBL-Mariner Releases
16826-17084
16826-16817
No
Security Update
1.3.8-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
16826-17084
16826-16817
CBL-Mariner Releases
1.1
2026-02-18T14:47:50
<p>Information published.</p>
1.0
2025-03-14T00:00:00
<p>Information published.</p>
dwarf_elf_load_headers.c in libdwarf before 2019-07-05 allows attackers to cause a denial of service
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
mitre
Yes
CVE-2019-14249
19917-17086
16879-16823
16880-16817
16880-17084
19917-17086
16879-16823
16880-16817
16880-17084
Moderate
19917-17086
Moderate
16879-16823
Moderate
16880-16817
Moderate
16880-17084
6.5
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
19917-17086
6.5
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
16879-16823
6.5
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
16880-16817
6.5
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
16880-17084
CBL-Mariner Releases
16879-16823
No
Security Update
0.9.0
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
16879-16823
CBL-Mariner Releases
CBL-Mariner Releases
16880-16817
16880-17084
No
Security Update
0.9.0-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
16880-16817
16880-17084
CBL-Mariner Releases
1.0
2025-09-03T20:23:20
<p>Information published.</p>
1.1
2026-02-18T02:29:41
<p>Information published.</p>
GNU gdb All versions is affected by: Buffer Overflow - Out of bound memory access. The impact is: Deny of Service, Memory Disclosure, and Possible Code Execution. The component is: The main gdb module. The attack vector is: Open an ELF for debugging. The fixed version is: Not fixed yet.
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
dwf
Yes
CVE-2019-1010180
Out-of-bounds Read
16987-16820
16987-16820
Important
16987-16820
7.8
7.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
16987-16820
CBL-Mariner Releases
16987-16820
No
Security Update
8.3-3
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
16987-16820
CBL-Mariner Releases
1.0
2020-09-25T00:00:00
<p>Information published.</p>
An issue was discovered in Das U-Boot through 2019.07. There is a read of out-of-bounds data at nfs_read_reply.
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
mitre
Yes
CVE-2019-14197
Out-of-bounds Read
17093-17086
17093-21692
19662-17086
17459-17084
17093-17086
17093-21692
19662-17086
17459-17084
Critical
17093-17086
Critical
17093-21692
19662-17086
Critical
17459-17084
9.1
9.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
17093-17086
9.1
9.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
17093-21692
9.1
9.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
19662-17086
9.1
9.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
17459-17084
1.0
2025-09-03T22:13:52
<p>Information published.</p>
3.0
2026-08-12T21:57:05
<p>Information published.</p>
2.0
2026-02-18T03:06:19
<p>Information published.</p>
An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with an unvalidated length at nfs_readlink_reply, in the "if" block after calculating the new path length.
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
mitre
Yes
CVE-2019-14193
Out-of-bounds Write
17459-17084
17093-21692
19662-17086
17093-17086
17459-17084
17093-21692
19662-17086
17093-17086
Critical
17459-17084
Critical
17093-21692
19662-17086
Critical
17093-17086
9.8
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
17459-17084
9.8
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
17093-21692
9.8
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
19662-17086
9.8
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
17093-17086
2.0
2026-02-18T03:08:39
<p>Information published.</p>
3.0
2026-08-12T22:05:13
<p>Information published.</p>
1.0
2025-09-03T22:33:58
<p>Information published.</p>
An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: nfs_mount_reply.
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
mitre
Yes
CVE-2019-14203
Out-of-bounds Write
17459-17084
17093-21692
19662-17086
17093-17086
17459-17084
17093-21692
19662-17086
17093-17086
Critical
17459-17084
Critical
17093-21692
19662-17086
Critical
17093-17086
9.8
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
17459-17084
9.8
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
17093-21692
9.8
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
19662-17086
9.8
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
17093-17086
3.0
2026-08-12T22:08:18
<p>Information published.</p>
1.0
2025-09-03T22:42:12
<p>Information published.</p>
2.0
2026-02-18T03:09:26
<p>Information published.</p>
An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: nfs_readlink_reply.
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
mitre
Yes
CVE-2019-14202
Out-of-bounds Write
17459-17084
17093-17086
19662-17086
17093-21692
17459-17084
17093-17086
19662-17086
17093-21692
Critical
17459-17084
Critical
17093-17086
19662-17086
Critical
17093-21692
9.8
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
17459-17084
9.8
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
17093-17086
9.8
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
19662-17086
9.8
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
17093-21692
1.0
2025-09-04T02:25:42
<p>Information published.</p>
2.0
2026-02-18T02:37:30
<p>Information published.</p>
3.0
2026-08-12T23:16:01
<p>Information published.</p>
An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_lookup_reply.
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
mitre
Yes
CVE-2019-14196
Out-of-bounds Write
17459-17084
17093-17086
19662-17086
17093-21692
17459-17084
17093-17086
19662-17086
17093-21692
Critical
17459-17084
Critical
17093-17086
19662-17086
Critical
17093-21692
9.8
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
17459-17084
9.8
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
17093-17086
9.8
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
19662-17086
9.8
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
17093-21692
1.0
2025-09-04T02:36:43
<p>Information published.</p>
2.0
2026-02-18T02:39:03
<p>Information published.</p>
3.0
2026-08-12T23:18:02
<p>Information published.</p>
An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: nfs_lookup_reply.
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
mitre
Yes
CVE-2019-14201
Out-of-bounds Write
19662-17086
17093-17086
17093-21692
17459-17084
19662-17086
17093-17086
17093-21692
17459-17084
19662-17086
Critical
17093-17086
Critical
17093-21692
Critical
17459-17084
9.8
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
19662-17086
9.8
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
17093-17086
9.8
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
17093-21692
9.8
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
17459-17084
2.0
2026-02-18T02:55:01
<p>Information published.</p>
1.0
2025-09-04T04:35:28
<p>Information published.</p>
3.0
2026-08-12T23:37:57
<p>Information published.</p>
An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_read_reply when calling store_block in the NFSv2 case.
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
mitre
Yes
CVE-2019-14194
Out-of-bounds Write
19662-17086
17459-17084
17093-17086
17093-21692
19662-17086
17459-17084
17093-17086
17093-21692
19662-17086
Critical
17459-17084
Critical
17093-17086
Critical
17093-21692
9.8
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
19662-17086
9.8
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
17459-17084
9.8
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
17093-17086
9.8
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
17093-21692
1.0
2025-09-04T04:41:53
<p>Information published.</p>
2.0
2026-02-18T02:55:39
<p>Information published.</p>
3.0
2026-08-12T23:38:52
<p>Information published.</p>
In libnasm.a in Netwide Assembler (NASM) 2.14.xx, asm/pragma.c allows a NULL pointer dereference in process_pragma, search_pragma_list, and nasm_set_limit when "%pragma limit" is mishandled.
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
mitre
Yes
CVE-2019-14248
NULL Pointer Dereference
17667-17084
19668-17086
19668-21692
17667-17084
19668-17086
19668-21692
Moderate
17667-17084
Moderate
19668-17086
Moderate
19668-21692
1.0
2025-09-03T19:39:13
<p>Information published.</p>
1.1
2026-02-18T14:58:36
<p>Information published.</p>
2.0
2026-08-12T21:58:15
<p>Information published.</p>
There is an out-of-bounds read in Exiv2::MrwImage::readMetadata in mrwimage.cpp in Exiv2 through 0.27.2.
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
mitre
Yes
CVE-2019-13504
Out-of-bounds Read
17009-16823
17009-16823
Moderate
17009-16823
6.5
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
17009-16823
CBL-Mariner Releases
17009-16823
No
Security Update
0.27.5-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
17009-16823
CBL-Mariner Releases
1.0
2022-01-19T00:00:00
<p>Information published.</p>
In Docker CE and EE before 18.09.8 (as well as Docker EE before 17.06.2-ee-23 and 18.x before 18.03.1-ee-10) Docker Engine in debug mode may sometimes add secrets to the debug log. This applies to a scenario where docker stack deploy is run to redeploy a stack that includes (non external) secrets. It potentially applies to other API users of the stack API if they resend the secret.
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
mitre
Yes
CVE-2019-13509
Insertion of Sensitive Information into Log File
16833-16820
16833-16820
Important
16833-16820
7.5
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
16833-16820
CBL-Mariner Releases
16833-16820
No
Security Update
-
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
16833-16820
CBL-Mariner Releases
1.0
2021-07-16T00:00:00
<p>Information published.</p>
In GNU patch through 2.7.6 the following of symlinks is mishandled in certain cases other than input files. This affects inp.c and util.c.
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
mitre
Yes
CVE-2019-13636
Improper Link Resolution Before File Access ('Link Following')
16925-16820
16926-16823
16927-16817
16927-17084
16925-16820
16926-16823
16927-16817
16927-17084
Moderate
16925-16820
Moderate
16926-16823
Moderate
16927-16817
Moderate
16927-17084
5.9
5.9
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
16925-16820
5.9
5.9
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
16926-16823
5.9
5.9
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
16927-16817
5.9
5.9
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
16927-17084
CBL-Mariner Releases
16925-16820
16926-16823
No
Security Update
2.7.6-7
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
16925-16820
16926-16823
CBL-Mariner Releases
CBL-Mariner Releases
16927-16817
16927-17084
No
Security Update
2.7.6-9
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
16927-16817
16927-17084
CBL-Mariner Releases
1.0
2020-08-18T00:00:00
<p>Information published.</p>
1.1
2021-12-16T00:00:00
<p>Added patch to CBL-Mariner 2.0</p>
1.2
2024-06-30T07:00:00
<p>Information published.</p>
apply_relocations in readelf.c in GNU Binutils 2.32 contains an integer overflow that allows attackers to trigger a write access violation (in byte_put_little_endian function in elfcomm.c) via an ELF file as demonstrated by readelf.
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
mitre
Yes
CVE-2019-14444
Integer Overflow or Wraparound
17006-16820
17006-16820
Moderate
17006-16820
5.5
5.5
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
17006-16820
CBL-Mariner Releases
17006-16820
No
Security Update
2.32-4
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
17006-16820
CBL-Mariner Releases
1.0
2020-08-18T00:00:00
<p>Information published.</p>
Gnome Pango 1.42 and later is affected by: Buffer Overflow. The impact is: The heap based buffer overflow can be used to get code execution. The component is: function name: pango_log2vis_get_embedding_levels, assignment of nchars and the loop condition. The attack vector is: Bug can be used when application pass invalid utf-8 strings to functions like pango_itemize.
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
dwf
Yes
CVE-2019-1010238
Out-of-bounds Write
16988-16823
16988-16823
Critical
16988-16823
9.8
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
16988-16823
CBL-Mariner Releases
16988-16823
No
Security Update
1.45.5-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
16988-16823
CBL-Mariner Releases
1.0
2022-04-07T00:00:00
<p>Information published.</p>
An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with unvalidated length at nfs_readlink_reply in the "else" block after calculating the new path length.
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
mitre
Yes
CVE-2019-14195
Out-of-bounds Write
17459-17084
17093-17086
17093-21692
19662-17086
17459-17084
17093-17086
17093-21692
19662-17086
Critical
17459-17084
Critical
17093-17086
Critical
17093-21692
19662-17086
9.8
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
17459-17084
9.8
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
17093-17086
9.8
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
17093-21692
9.8
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
19662-17086
1.0
2025-09-04T02:20:01
<p>Information published.</p>
2.0
2026-02-18T02:36:37
<p>Information published.</p>
3.0
2026-08-12T23:15:08
<p>Information published.</p>
An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: nfs_umountall_reply.
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
mitre
Yes
CVE-2019-14204
Out-of-bounds Write
17459-17084
17093-17086
19662-17086
17093-21692
17459-17084
17093-17086
19662-17086
17093-21692
Critical
17459-17084
Critical
17093-17086
19662-17086
Critical
17093-21692
9.8
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
17459-17084
9.8
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
17093-17086
9.8
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
19662-17086
9.8
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
17093-21692
1.0
2025-09-04T02:52:16
<p>Information published.</p>
2.0
2026-02-18T02:41:45
<p>Information published.</p>
3.0
2026-08-12T23:21:01
<p>Information published.</p>
An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy when parsing a UDP packet due to a net_process_received_packet integer underflow during an *udp_packet_handler call.
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
mitre
Yes
CVE-2019-14199
Integer Underflow (Wrap or Wraparound)
19662-17086
17093-21692
17459-17084
17093-17086
19662-17086
17093-21692
17459-17084
17093-17086
19662-17086
Critical
17093-21692
Critical
17459-17084
Critical
17093-17086
9.8
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
19662-17086
9.8
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
17093-21692
9.8
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
17459-17084
9.8
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
17093-17086
2.0
2026-02-18T02:54:24
<p>Information published.</p>
3.0
2026-08-12T23:37:07
<p>Information published.</p>
1.0
2025-09-04T04:30:22
<p>Information published.</p>
An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy when parsing a UDP packet due to a net_process_received_packet integer underflow during an nc_input_packet call.
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
mitre
Yes
CVE-2019-14192
Integer Underflow (Wrap or Wraparound)
19662-17086
17459-17084
17093-17086
17093-21692
19662-17086
17459-17084
17093-17086
17093-21692
19662-17086
Critical
17459-17084
Critical
17093-17086
Critical
17093-21692
9.8
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
19662-17086
9.8
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
17459-17084
9.8
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
17093-17086
9.8
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
17093-21692
1.0
2025-09-04T05:15:40
<p>Information published.</p>
2.0
2026-02-18T02:58:59
<p>Information published.</p>
3.0
2026-08-12T23:44:48
<p>Information published.</p>
An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_read_reply when calling store_block in the NFSv3 case.
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
mitre
Yes
CVE-2019-14198
Out-of-bounds Write
19662-17086
17459-17084
17093-21692
17093-17086
19662-17086
17459-17084
17093-21692
17093-17086
19662-17086
Critical
17459-17084
Critical
17093-21692
Critical
17093-17086
9.8
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
19662-17086
9.8
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
17459-17084
9.8
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
17093-21692
9.8
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
17093-17086
1.0
2025-09-04T05:33:49
<p>Information published.</p>
2.0
2026-02-18T03:00:46
<p>Information published.</p>
3.0
2026-08-12T23:48:13
<p>Information published.</p>
An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: rpc_lookup_reply.
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
mitre
Yes
CVE-2019-14200
Out-of-bounds Write
19662-17086
17459-17084
17093-17086
17093-21692
19662-17086
17459-17084
17093-17086
17093-21692
19662-17086
Critical
17459-17084
Critical
17093-17086
Critical
17093-21692
9.8
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
19662-17086
9.8
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
17459-17084
9.8
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
17093-17086
9.8
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
17093-21692
1.0
2025-09-04T05:40:11
<p>Information published.</p>
2.0
2026-02-18T03:01:19
<p>Information published.</p>
3.0
2026-08-12T23:49:14
<p>Information published.</p>
In Pallets Werkzeug before 0.15.5, SharedDataMiddleware mishandles drive names (such as C:) in Windows pathnames.
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
mitre
Yes
CVE-2019-14322
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
19693-17084
19712-21692
19712-17086
19693-17084
19712-21692
19712-17086
Important
19693-17084
Important
19712-21692
Important
19712-17086
7.5
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
19693-17084
7.5
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
19712-21692
7.5
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
19712-17086
1.0
2025-09-03T21:00:58
<p>Information published.</p>
2.0
2026-08-12T21:53:15
<p>Information published.</p>
1.1
2026-02-18T14:29:15
<p>Information published.</p>
SymCrypt Denial of Service Vulnerability
<p>A denial of service vulnerability exists when SymCrypt improperly handles a specially crafted digital signature.</p>
<p>An attacker could exploit the vulnerability by creating a specially crafted connection or message.</p>
<p>The security update addresses the vulnerability by correcting the way SymCrypt handles digital signatures.</p>
Microsoft Windows
Microsoft
CVE-2019-0865
10951
10952
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
Denial of Service
10951
Denial of Service
10952
Denial of Service
11497
Denial of Service
11498
Denial of Service
11499
Denial of Service
11563
Denial of Service
11568
Denial of Service
11569
Denial of Service
11570
Denial of Service
11571
Denial of Service
11572
Denial of Service
11453
Denial of Service
11454
Denial of Service
11583
Denial of Service
11644
Denial of Service
11645
Denial of Service
11646
Denial of Service
11647
Important
10951
Important
10952
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Publicly Disclosed:Yes;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.5
6.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
10951
7.5
6.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
10952
7.5
6.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
11497
7.5
6.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
11498
7.5
6.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
11499
7.5
6.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
11563
7.5
6.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
11568
7.5
6.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
11569
7.5
6.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
11570
7.5
6.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
11571
7.5
6.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
11572
7.5
6.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
11453
7.5
6.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
11454
7.5
6.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
11583
7.5
6.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
11644
7.5
6.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
11645
7.5
6.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
11646
7.5
6.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
11647
4507450
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507450
4503279
10951
10952
Yes
Security Update
4507450
https://support.microsoft.com/help/4507450
10951
10952
4507435
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507435
4503286
11497
11498
11499
11563
Yes
Security Update
4507435
https://support.microsoft.com/help/4507435
11497
11498
11499
11563
4507469
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507469
4503327
11568
11569
11570
11571
11572
Yes
Security Update
4507469
https://support.microsoft.com/help/4507469
11568
11569
11570
11571
11572
4507455
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507455
4503284
11453
11454
11583
Yes
Security Update
4507455
https://support.microsoft.com/help/4507455
11453
11454
11583
4507453
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507453
4503293
11644
11645
11646
11647
Yes
Security Update
4507453
https://support.microsoft.com/help/4507453
11644
11645
11646
11647
Tavis Ormandy of <a href ="https://www.google.com/">Google Project Zero</a>
1.0
2019-07-09T07:00:00
<p>Information published.</p>
Remote Desktop Services Remote Code Execution Vulnerability
<p>A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an authenticated attacker abuses clipboard redirection. An attacker who successfully exploited this vulnerability could execute arbitrary code on the victim system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>To exploit this vulnerability, an attacker must already have compromised a system running Remote Desktop Services, and then wait for a victim system to connect to Remote Desktop Services.</p>
<p>The update addresses the vulnerability by correcting how Remote Desktop Services handles clipboard redirection.</p>
Microsoft Windows
Microsoft
CVE-2019-0887
10951
10952
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
11923
11924
11926
11927
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
9312
10287
9311
9318
9344
10050
10051
10049
10378
10379
10483
10543
Remote Code Execution
10951
Remote Code Execution
10952
Remote Code Execution
11497
Remote Code Execution
11498
Remote Code Execution
11499
Remote Code Execution
11563
Remote Code Execution
11568
Remote Code Execution
11569
Remote Code Execution
11570
Remote Code Execution
11571
Remote Code Execution
11572
Remote Code Execution
11453
Remote Code Execution
11454
Remote Code Execution
11583
Remote Code Execution
11644
Remote Code Execution
11645
Remote Code Execution
11646
Remote Code Execution
11647
Remote Code Execution
11923
Remote Code Execution
11924
Remote Code Execution
11926
Remote Code Execution
11927
Remote Code Execution
10729
Remote Code Execution
10735
Remote Code Execution
10852
Remote Code Execution
10853
Remote Code Execution
10816
Remote Code Execution
10855
Remote Code Execution
10047
Remote Code Execution
10048
Remote Code Execution
10481
Remote Code Execution
10482
Remote Code Execution
10484
Remote Code Execution
9312
Remote Code Execution
10287
Remote Code Execution
9311
Remote Code Execution
9318
Remote Code Execution
9344
Remote Code Execution
10050
Remote Code Execution
10051
Remote Code Execution
10049
Remote Code Execution
10378
Remote Code Execution
10379
Remote Code Execution
10483
Remote Code Execution
10543
Important
10951
Important
10952
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Important
11923
Important
11924
Important
11926
Important
11927
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9311
Important
9318
Important
9344
Important
10050
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A
8.0
7.0
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10951
8.0
7.0
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10952
8.0
7.0
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11497
8.0
7.0
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11498
8.0
7.0
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11499
8.0
7.0
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11563
8.0
7.0
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11568
8.0
7.0
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11569
8.0
7.0
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11570
8.0
7.0
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11571
8.0
7.0
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11572
8.0
7.0
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11453
8.0
7.0
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11454
8.0
7.0
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11583
8.0
7.0
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11644
8.0
7.0
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11645
8.0
7.0
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11646
8.0
7.0
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11647
8.0
7.0
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11923
8.0
7.0
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11924
8.0
7.0
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11926
8.0
7.0
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
11927
8.0
7.0
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10729
8.0
7.0
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10735
8.0
7.0
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10852
8.0
7.0
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10853
8.0
7.0
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10816
8.0
7.0
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10855
8.0
7.0
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10047
8.0
7.0
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10048
8.0
7.0
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10481
8.0
7.0
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10482
8.0
7.0
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10484
8.0
7.0
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
9312
8.0
7.0
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10287
8.0
7.0
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
9311
8.0
7.0
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
9318
8.0
7.0
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
9344
8.0
7.0
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10050
8.0
7.0
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10051
8.0
7.0
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10049
8.0
7.0
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10378
8.0
7.0
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10379
8.0
7.0
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10483
8.0
7.0
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
10543
4507450
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507450
4503279
10951
10952
Yes
Security Update
4507450
https://support.microsoft.com/help/4507450
10951
10952
4507435
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507435
4503286
11497
11498
11499
11563
Yes
Security Update
4507435
https://support.microsoft.com/help/4507435
11497
11498
11499
11563
4507469
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507469
4503327
11568
11569
11570
11571
11572
Yes
Security Update
4507469
https://support.microsoft.com/help/4507469
11568
11569
11570
11571
11572
4507455
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507455
4503284
11453
11454
11583
Yes
Security Update
4507455
https://support.microsoft.com/help/4507455
11453
11454
11583
4507453
4503293
11644
11645
11646
11647
Yes
Other
4507453
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507453
4503293
11644
11645
11646
11647
Yes
Security Update
4507453
https://support.microsoft.com/help/4507453
11644
11645
11646
11647
5008223
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5008223
5007205
11923
11924
Yes
Security Update
10.0.20348.400
5008223
https://support.microsoft.com/help/5008223
11923
11924
5008215
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5008215
11926
11927
Yes
Security Update
10.0.22000.371
4507458
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507458
4503291
10729
10735
Yes
Security Update
4507458
https://support.microsoft.com/help/4507458
10729
10735
4507460
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507460
4503267
10852
10853
10816
10855
Yes
Security Update
4507460
https://support.microsoft.com/help/4507460
10852
10853
10816
10855
4507449
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507449
4503292
10047
10048
10050
10051
10049
Yes
Monthly Rollup
4507449
https://support.microsoft.com/help/4507449
10047
10048
10050
10051
10049
4507456
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507456
10047
10048
10050
10051
10049
Yes
Security Only
4507449
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507449
4503292
10047
10048
10050
10051
10049
Yes
Other
4507449
https://support.microsoft.com/help/4507449
10047
10048
10050
10051
10049
4507448
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507448
4503276
10481
10482
10484
10483
10543
Yes
Monthly Rollup
4507448
https://support.microsoft.com/help/4507448
10481
10482
10484
10483
10543
4507457
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507457
10481
10482
10483
10543
Yes
Security Only
4507457
https://support.microsoft.com/help/4507457
10481
10482
10483
10543
4507448
4503276
10481
10482
10484
10483
10543
Yes
Monthly Rollup
4507448
https://support.microsoft.com/help/4507448
10481
10482
10484
10483
10543
4507452
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507452
4503273
9312
10287
9311
9318
9344
Yes
Monthly Rollup
4507461
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507461
9312
10287
9311
9318
9344
Yes
Security Only
4507462
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507462
4503285
10378
10379
Yes
Monthly Rollup
4507462
https://support.microsoft.com/help/4507462
10378
10379
4507464
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507464
10378
10379
Yes
Security Only
4507464
https://support.microsoft.com/help/4507464
10378
10379
Eyal Itkin of Check Point Research
<a href="https://twitter.com/vv474172261">VictorV(Tangtianwen)</a> with Kunlun Lab
1.0
2019-07-09T07:00:00
<p>Information published.</p>
2.0
2021-12-14T08:00:00
<p>The following revisions have been made: 1) In the Security Updates table, added Windows 11 for x64-based Systems, Windows 11 for ARM64-based Systems, Windows Server 2022, and Windows Server 2022 (Server Core installation) as these versions of Windows are affected by this vulnerability. Customers running Windows 11 or Windows Server 2022 should install the December 2021 security updates to be protected from this vulnerability. 2) Added an acknowledgement.</p>
Windows Hyper-V Denial of Service Vulnerability
<p>A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate input from a privileged user on a guest operating system. To exploit the vulnerability, an attacker who already has a privileged account on a guest operating system, running as a virtual machine, could run a specially crafted application that causes a host machine to crash.</p>
<p>To exploit the vulnerability, an attacker who already has a privileged account on a guest operating system, running as a virtual machine, could run a specially crafted application.</p>
<p>The security update addresses the vulnerability by resolving a number of conditions where Hyper-V would fail to prevent a guest operating system from sending malicious requests.</p>
Microsoft Windows
Microsoft
CVE-2019-0966
10952
11498
11499
11569
11571
11572
11454
11645
11647
10853
10816
10855
Denial of Service
10952
Denial of Service
11498
Denial of Service
11499
Denial of Service
11569
Denial of Service
11571
Denial of Service
11572
Denial of Service
11454
Denial of Service
11645
Denial of Service
11647
Denial of Service
10853
Denial of Service
10816
Denial of Service
10855
Important
10952
Important
11498
Important
11499
Important
11569
Important
11571
Important
11572
Important
11454
Important
11645
Important
11647
Important
10853
Important
10816
Important
10855
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
6.8
6.1
CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10952
6.8
6.1
CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
11498
6.8
6.1
CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
11499
6.8
6.1
CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
11569
6.8
6.1
CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
11571
6.8
6.1
CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
11572
6.8
6.1
CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
11454
6.8
6.1
CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
11645
6.8
6.1
CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
11647
6.8
6.1
CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10853
6.8
6.1
CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10816
6.8
6.1
CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10855
4507450
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507450
4503279
10952
Yes
Security Update
4507450
https://support.microsoft.com/help/4507450
10952
4507435
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507435
4503286
11498
11499
Yes
Security Update
4507435
https://support.microsoft.com/help/4507435
11498
11499
4507469
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507469
4503327
11569
11571
11572
Yes
Security Update
4507469
https://support.microsoft.com/help/4507469
11569
11571
11572
4507455
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507455
4503284
11454
Yes
Security Update
4507455
https://support.microsoft.com/help/4507455
11454
4507453
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507453
4503293
11645
11647
Yes
Security Update
4507453
https://support.microsoft.com/help/4507453
11645
11647
4507460
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507460
4503267
10853
10816
10855
Yes
Security Update
4507460
https://support.microsoft.com/help/4507460
10853
10816
10855
Cfir Cohen of Google Cloud security
1.0
2019-07-09T07:00:00
<p>Information published.</p>
ADFS Security Feature Bypass Vulnerability
<p>A security feature bypass vulnerability exists when Active Directory Federation Services (ADFS) improperly updates its list of banned IP addresses.</p>
<p>To exploit this vulnerability, an attacker would have to convince a victim ADFS administrator to update the list of banned IP addresses.</p>
<p>This security update corrects how ADFS updates its list of banned IP addresses.</p>
Microsoft Windows
Microsoft
CVE-2019-0975
11499
11571
11572
10816
10855
11647
Security Feature Bypass
11499
Security Feature Bypass
11571
Security Feature Bypass
11572
Security Feature Bypass
10816
Security Feature Bypass
10855
Security Feature Bypass
11647
Important
11499
Important
11571
Important
11572
Important
10816
Important
10855
Important
11647
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C
11499
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C
11571
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C
11572
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C
10816
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C
10855
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C
11647
4507435
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507435
4503286
11499
Yes
Security Update
4507435
https://support.microsoft.com/help/4507435
11499
4507469
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507469
4503327
11571
11572
Yes
Security Update
4507469
https://support.microsoft.com/help/4507469
11571
11572
4507460
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507460
4503267
10816
10855
Yes
Security Update
4507460
https://support.microsoft.com/help/4507460
10816
10855
4507453
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507453
4503293
11647
Yes
Security Update
4507453
https://support.microsoft.com/help/4507453
11647
<a href="https://mikecrowley.us/">Mike Crowley</a>, Baseline Technologies
1.0
2019-07-09T07:00:00
<p>Information published.</p>
Scripting Engine Memory Corruption Vulnerability
<p>A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Internet Explorer and then convince a user to view the website. An attacker could also embed an ActiveX control marked "safe for initialization" in an application or Microsoft Office document that hosts the IE rendering engine. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p>
<p>The security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.</p>
Microsoft Scripting Engine
Microsoft
CVE-2019-1056
10486-10951
10486-10952
10486-11497
10486-11498
10486-11563
10486-11568
10486-11569
10486-11570
10486-11571
10486-11453
10486-11454
10486-11583
10486-11644
10486-11645
10486-11646
10486-10729
10486-10735
10486-10852
10486-10853
10486-10816
10486-10047
10486-10048
10486-10481
10486-10482
10486-10484
10486-10051
10486-10378
10486-10483
Remote Code Execution
10486-10951
Remote Code Execution
10486-10952
Remote Code Execution
10486-11497
Remote Code Execution
10486-11498
Remote Code Execution
10486-11563
Remote Code Execution
10486-11568
Remote Code Execution
10486-11569
Remote Code Execution
10486-11570
Remote Code Execution
10486-11571
Remote Code Execution
10486-11453
Remote Code Execution
10486-11454
Remote Code Execution
10486-11583
Remote Code Execution
10486-11644
Remote Code Execution
10486-11645
Remote Code Execution
10486-11646
Remote Code Execution
10486-10729
Remote Code Execution
10486-10735
Remote Code Execution
10486-10852
Remote Code Execution
10486-10853
Remote Code Execution
10486-10816
Remote Code Execution
10486-10047
Remote Code Execution
10486-10048
Remote Code Execution
10486-10481
Remote Code Execution
10486-10482
Remote Code Execution
10486-10484
Remote Code Execution
10486-10051
Remote Code Execution
10486-10378
Remote Code Execution
10486-10483
Critical
10486-10951
Critical
10486-10952
Critical
10486-11497
Critical
10486-11498
Critical
10486-11563
Critical
10486-11568
Critical
10486-11569
Critical
10486-11570
Moderate
10486-11571
Critical
10486-11453
Critical
10486-11454
Critical
10486-11583
Critical
10486-11644
Critical
10486-11645
Critical
10486-11646
Critical
10486-10729
Critical
10486-10735
Critical
10486-10852
Critical
10486-10853
Moderate
10486-10816
Critical
10486-10047
Critical
10486-10048
Critical
10486-10481
Critical
10486-10482
Critical
10486-10484
Moderate
10486-10051
Moderate
10486-10378
Moderate
10486-10483
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:N/A;DOS:N/A
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10951
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10952
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11497
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11498
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11563
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11568
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11569
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11570
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11571
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11453
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11454
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11583
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11644
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11645
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11646
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10729
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10735
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10852
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10853
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10816
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10047
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10048
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10481
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10482
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10484
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10051
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10378
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10483
4507450
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507450
4503279
10486-10951
10486-10952
Yes
Security Update
4507450
https://support.microsoft.com/help/4507450
10486-10951
10486-10952
4507435
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507435
4503286
10486-11497
10486-11498
10486-11563
Yes
Security Update
4507435
https://support.microsoft.com/help/4507435
10486-11497
10486-11498
10486-11563
4507469
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507469
4503327
10486-11568
10486-11569
10486-11570
10486-11571
Yes
Security Update
4507469
https://support.microsoft.com/help/4507469
10486-11568
10486-11569
10486-11570
10486-11571
4507455
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507455
4503284
10486-11453
10486-11454
10486-11583
Yes
Security Update
4507455
https://support.microsoft.com/help/4507455
10486-11453
10486-11454
10486-11583
4507453
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507453
4503293
10486-11644
10486-11645
10486-11646
Yes
Security Update
4507453
https://support.microsoft.com/help/4507453
10486-11644
10486-11645
10486-11646
4507458
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507458
4503291
10486-10729
10486-10735
Yes
Security Update
4507458
https://support.microsoft.com/help/4507458
10486-10729
10486-10735
4507460
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507460
4503267
10486-10852
10486-10853
10486-10816
Yes
Security Update
4507460
https://support.microsoft.com/help/4507460
10486-10852
10486-10853
10486-10816
4507449
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507449
4503292
10486-10047
10486-10048
10486-10051
Yes
Monthly Rollup
4507449
https://support.microsoft.com/help/4507449
10486-10047
10486-10048
10486-10051
4507434
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507434
4503259
10486-10047
10486-10048
10486-10481
10486-10482
10486-10051
10486-10378
10486-10483
Yes
IE Cumulative
4507434
https://support.microsoft.com/help/4507434
10486-10047
10486-10048
10486-10481
10486-10482
10486-10051
10486-10378
10486-10483
4507448
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507448
4503276
10486-10481
10486-10482
10486-10484
10486-10483
Yes
Monthly Rollup
4507448
https://support.microsoft.com/help/4507448
10486-10481
10486-10482
10486-10484
10486-10483
4507448
4503276
10486-10481
10486-10482
10486-10484
10486-10483
Yes
Monthly Rollup
4507448
https://support.microsoft.com/help/4507448
10486-10481
10486-10482
10486-10484
10486-10483
Yuki Chen of <a href="http://www.360.com/">Qihoo 360 Vulcan Team</a>
1.0
2019-07-09T07:00:00
<p>Information published.</p>
Scripting Engine Memory Corruption Vulnerability
<p>A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Internet Explorer and then convince a user to view the website. An attacker could also embed an ActiveX control marked "safe for initialization" in an application or Microsoft Office document that hosts the IE rendering engine. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p>
<p>The security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.</p>
Microsoft Scripting Engine
Microsoft
CVE-2019-1059
10555-10378
10336-9312
10336-9318
10486-10951
10486-10952
10486-11497
10486-11498
10486-11563
10486-11568
10486-11569
10486-11570
10486-11571
10486-11453
10486-11454
10486-11583
10486-11644
10486-11645
10486-11646
10486-10729
10486-10735
10486-10852
10486-10853
10486-10816
10486-10047
10486-10048
10486-10481
10486-10482
10486-10484
10486-10051
10486-10378
10486-10483
Remote Code Execution
10555-10378
Remote Code Execution
10336-9312
Remote Code Execution
10336-9318
Remote Code Execution
10486-10951
Remote Code Execution
10486-10952
Remote Code Execution
10486-11497
Remote Code Execution
10486-11498
Remote Code Execution
10486-11563
Remote Code Execution
10486-11568
Remote Code Execution
10486-11569
Remote Code Execution
10486-11570
Remote Code Execution
10486-11571
Remote Code Execution
10486-11453
Remote Code Execution
10486-11454
Remote Code Execution
10486-11583
Remote Code Execution
10486-11644
Remote Code Execution
10486-11645
Remote Code Execution
10486-11646
Remote Code Execution
10486-10729
Remote Code Execution
10486-10735
Remote Code Execution
10486-10852
Remote Code Execution
10486-10853
Remote Code Execution
10486-10816
Remote Code Execution
10486-10047
Remote Code Execution
10486-10048
Remote Code Execution
10486-10481
Remote Code Execution
10486-10482
Remote Code Execution
10486-10484
Remote Code Execution
10486-10051
Remote Code Execution
10486-10378
Remote Code Execution
10486-10483
Moderate
10555-10378
Moderate
10336-9312
Moderate
10336-9318
Critical
10486-10951
Critical
10486-10952
Critical
10486-11497
Critical
10486-11498
Critical
10486-11563
Critical
10486-11568
Critical
10486-11569
Critical
10486-11570
Moderate
10486-11571
Critical
10486-11453
Critical
10486-11454
Critical
10486-11583
Critical
10486-11644
Critical
10486-11645
Critical
10486-11646
Critical
10486-10729
Critical
10486-10735
Critical
10486-10852
Critical
10486-10853
Moderate
10486-10816
Critical
10486-10047
Critical
10486-10048
Critical
10486-10481
Critical
10486-10482
Critical
10486-10484
Moderate
10486-10051
Moderate
10486-10378
Moderate
10486-10483
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10555-10378
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10336-9312
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10336-9318
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10951
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10952
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11497
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11498
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11563
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11568
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11569
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11570
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11571
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11453
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11454
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11583
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11644
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11645
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11646
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10729
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10735
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10852
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10853
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10816
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10047
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10048
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10481
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10482
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10484
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10051
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10378
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10483
4507462
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507462
4503285
10555-10378
Yes
Monthly Rollup
4507462
https://support.microsoft.com/help/4507462
10555-10378
4507434
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507434
4503259
10555-10378
10336-9312
10336-9318
10486-10047
10486-10048
10486-10481
10486-10482
10486-10051
10486-10378
10486-10483
Yes
IE Cumulative
4507434
https://support.microsoft.com/help/4507434
10555-10378
10336-9312
10336-9318
10486-10047
10486-10048
10486-10481
10486-10482
10486-10051
10486-10378
10486-10483
4507452
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507452
4503273
10336-9312
10336-9318
Yes
Monthly Rollup
4507450
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507450
4503279
10486-10951
10486-10952
Yes
Security Update
4507450
https://support.microsoft.com/help/4507450
10486-10951
10486-10952
4507435
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507435
4503286
10486-11497
10486-11498
10486-11563
Yes
Security Update
4507435
https://support.microsoft.com/help/4507435
10486-11497
10486-11498
10486-11563
4507469
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507469
4503327
10486-11568
10486-11569
10486-11570
10486-11571
Yes
Security Update
4507469
https://support.microsoft.com/help/4507469
10486-11568
10486-11569
10486-11570
10486-11571
4507455
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507455
4503284
10486-11453
10486-11454
10486-11583
Yes
Security Update
4507455
https://support.microsoft.com/help/4507455
10486-11453
10486-11454
10486-11583
4507453
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507453
4503293
10486-11644
10486-11645
10486-11646
Yes
Security Update
4507453
https://support.microsoft.com/help/4507453
10486-11644
10486-11645
10486-11646
4507458
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507458
4503291
10486-10729
10486-10735
Yes
Security Update
4507458
https://support.microsoft.com/help/4507458
10486-10729
10486-10735
4507460
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507460
4503267
10486-10852
10486-10853
10486-10816
Yes
Security Update
4507460
https://support.microsoft.com/help/4507460
10486-10852
10486-10853
10486-10816
4507449
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507449
4503292
10486-10047
10486-10048
10486-10051
Yes
Monthly Rollup
4507449
https://support.microsoft.com/help/4507449
10486-10047
10486-10048
10486-10051
4507448
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507448
4503276
10486-10481
10486-10482
10486-10484
10486-10483
Yes
Monthly Rollup
4507448
https://support.microsoft.com/help/4507448
10486-10481
10486-10482
10486-10484
10486-10483
4507448
4503276
10486-10481
10486-10482
10486-10484
10486-10483
Yes
Monthly Rollup
4507448
https://support.microsoft.com/help/4507448
10486-10481
10486-10482
10486-10484
10486-10483
Yuki Chen of <a href="http://www.360.com/">Qihoo 360 Vulcan Team</a>
1.0
2019-07-09T07:00:00
<p>Information published.</p>
Chakra Scripting Engine Memory Corruption Vulnerability
<p>A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based). The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft Edge (HTML-based) and then convince a user to view the website. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p>
<p>The security update addresses the vulnerability by modifying how the Chakra scripting engine handles objects in memory.</p>
Microsoft Scripting Engine
Microsoft
CVE-2019-1062
11447
10724-10951
10724-10952
10724-11497
10724-11498
10724-11563
10724-11568
10724-11569
10724-11570
10724-11571
10724-11453
10724-11454
10724-11583
10724-11644
10724-11645
10724-11646
10724-10729
10724-10735
10724-10852
10724-10853
10724-10816
Remote Code Execution
11447
Remote Code Execution
10724-10951
Remote Code Execution
10724-10952
Remote Code Execution
10724-11497
Remote Code Execution
10724-11498
Remote Code Execution
10724-11563
Remote Code Execution
10724-11568
Remote Code Execution
10724-11569
Remote Code Execution
10724-11570
Remote Code Execution
10724-11571
Remote Code Execution
10724-11453
Remote Code Execution
10724-11454
Remote Code Execution
10724-11583
Remote Code Execution
10724-11644
Remote Code Execution
10724-11645
Remote Code Execution
10724-11646
Remote Code Execution
10724-10729
Remote Code Execution
10724-10735
Remote Code Execution
10724-10852
Remote Code Execution
10724-10853
Remote Code Execution
10724-10816
Critical
11447
Critical
10724-10951
Critical
10724-10952
Critical
10724-11497
Critical
10724-11498
Critical
10724-11563
Critical
10724-11568
Critical
10724-11569
Critical
10724-11570
Moderate
10724-11571
Critical
10724-11453
Critical
10724-11454
Critical
10724-11583
Critical
10724-11644
Critical
10724-11645
Critical
10724-11646
Critical
10724-10729
Critical
10724-10735
Critical
10724-10852
Critical
10724-10853
Moderate
10724-10816
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A;DOS:N/A
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10951
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10952
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11497
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11498
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11563
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11568
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11569
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11570
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11571
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11453
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11454
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11583
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11644
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11645
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11646
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10729
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10735
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10852
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10853
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10816
Release Notes
https://github.com/Microsoft/ChakraCore/releases/tag/v1.11.11
11447
Maybe
Security Update
4507450
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507450
4503279
10724-10951
10724-10952
Yes
Security Update
4507450
https://support.microsoft.com/help/4507450
10724-10951
10724-10952
4507435
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507435
4503286
10724-11497
10724-11498
10724-11563
Yes
Security Update
4507435
https://support.microsoft.com/help/4507435
10724-11497
10724-11498
10724-11563
4507469
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507469
4503327
10724-11568
10724-11569
10724-11570
10724-11571
Yes
Security Update
4507469
https://support.microsoft.com/help/4507469
10724-11568
10724-11569
10724-11570
10724-11571
4507455
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507455
4503284
10724-11453
10724-11454
10724-11583
Yes
Security Update
4507455
https://support.microsoft.com/help/4507455
10724-11453
10724-11454
10724-11583
4507453
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507453
4503293
10724-11644
10724-11645
10724-11646
Yes
Security Update
4507453
https://support.microsoft.com/help/4507453
10724-11644
10724-11645
10724-11646
4507458
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507458
4503291
10724-10729
10724-10735
Yes
Security Update
4507458
https://support.microsoft.com/help/4507458
10724-10729
10724-10735
4507460
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507460
4503267
10724-10852
10724-10853
10724-10816
Yes
Security Update
4507460
https://support.microsoft.com/help/4507460
10724-10852
10724-10853
10724-10816
<a href="https://twitter.com/S0rryMybad">Qixun Zhao</a> of <a href="http://www.360.com/">Qihoo 360 Vulcan Team</a>
1.0
2019-07-09T07:00:00
<p>Information published.</p>
Internet Explorer Memory Corruption Vulnerability
<p>A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, the attacker could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>An attacker could host a specially crafted website designed to exploit the vulnerability through Internet Explorer and then convince a user to view the website. The attacker could also take advantage of compromised websites, or websites that accept or host user-provided content or advertisements, by adding specially crafted content that could exploit the vulnerability. However, in all cases an attacker would have no way to force a user to view the attacker-controlled content. Instead, an attacker would have to convince a user to take action, typically by an enticement in an email or instant message, or by getting the user to open an attachment sent through email.</p>
<p>The security update addresses the vulnerability by modifying how Internet Explorer handles objects in memory.</p>
Internet Explorer
Microsoft
CVE-2019-1063
10555-10378
10336-9312
10336-9318
10486-10951
10486-10952
10486-11497
10486-11498
10486-11563
10486-11568
10486-11569
10486-11570
10486-11571
10486-11453
10486-11454
10486-11583
10486-10729
10486-10735
10486-10852
10486-10853
10486-10816
10486-10047
10486-10048
10486-10481
10486-10482
10486-10484
10486-10051
10486-10483
10486-11644
10486-11645
10486-11646
10486-10378
Remote Code Execution
10555-10378
Remote Code Execution
10336-9312
Remote Code Execution
10336-9318
Remote Code Execution
10486-10951
Remote Code Execution
10486-10952
Remote Code Execution
10486-11497
Remote Code Execution
10486-11498
Remote Code Execution
10486-11563
Remote Code Execution
10486-11568
Remote Code Execution
10486-11569
Remote Code Execution
10486-11570
Remote Code Execution
10486-11571
Remote Code Execution
10486-11453
Remote Code Execution
10486-11454
Remote Code Execution
10486-11583
Remote Code Execution
10486-10729
Remote Code Execution
10486-10735
Remote Code Execution
10486-10852
Remote Code Execution
10486-10853
Remote Code Execution
10486-10816
Remote Code Execution
10486-10047
Remote Code Execution
10486-10048
Remote Code Execution
10486-10481
Remote Code Execution
10486-10482
Remote Code Execution
10486-10484
Remote Code Execution
10486-10051
Remote Code Execution
10486-10483
Remote Code Execution
10486-11644
Remote Code Execution
10486-11645
Remote Code Execution
10486-11646
Remote Code Execution
10486-10378
Moderate
10555-10378
Moderate
10336-9312
Moderate
10336-9318
Critical
10486-10951
Critical
10486-10952
Critical
10486-11497
Critical
10486-11498
Critical
10486-11563
Critical
10486-11568
Critical
10486-11569
Critical
10486-11570
Moderate
10486-11571
Critical
10486-11453
Critical
10486-11454
Critical
10486-11583
Critical
10486-10729
Critical
10486-10735
Critical
10486-10852
Critical
10486-10853
Moderate
10486-10816
Critical
10486-10047
Critical
10486-10048
Critical
10486-10481
Critical
10486-10482
Critical
10486-10484
Moderate
10486-10051
Moderate
10486-10483
Critical
10486-11644
Critical
10486-11645
Critical
10486-11646
Moderate
10486-10378
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10555-10378
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10336-9312
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10336-9318
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10951
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10952
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11497
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11498
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11563
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11568
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11569
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11570
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11571
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11453
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11454
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11583
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10729
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10735
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10852
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10853
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10816
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10047
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10048
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10481
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10482
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10484
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10051
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10483
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11644
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11645
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11646
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10378
4507462
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507462
4503285
10555-10378
Yes
Monthly Rollup
4507462
https://support.microsoft.com/help/4507462
10555-10378
4507434
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507434
4503259
10555-10378
10336-9312
10336-9318
10486-10047
10486-10048
10486-10481
10486-10482
10486-10051
10486-10483
10486-10378
Yes
IE Cumulative
4507434
https://support.microsoft.com/help/4507434
10555-10378
10336-9312
10336-9318
10486-10047
10486-10048
10486-10481
10486-10482
10486-10051
10486-10483
10486-10378
4507452
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507452
4503273
10336-9312
10336-9318
Yes
Monthly Rollup
4507450
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507450
4503279
10486-10951
10486-10952
Yes
Security Update
4507450
https://support.microsoft.com/help/4507450
10486-10951
10486-10952
4507435
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507435
4503286
10486-11497
10486-11498
10486-11563
Yes
Security Update
4507435
https://support.microsoft.com/help/4507435
10486-11497
10486-11498
10486-11563
4507469
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507469
4503327
10486-11568
10486-11569
10486-11570
10486-11571
Yes
Security Update
4507469
https://support.microsoft.com/help/4507469
10486-11568
10486-11569
10486-11570
10486-11571
4507455
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507455
4503284
10486-11453
10486-11454
10486-11583
Yes
Security Update
4507455
https://support.microsoft.com/help/4507455
10486-11453
10486-11454
10486-11583
4507458
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507458
4503291
10486-10729
10486-10735
Yes
Security Update
4507458
https://support.microsoft.com/help/4507458
10486-10729
10486-10735
4507460
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507460
4503267
10486-10852
10486-10853
10486-10816
Yes
Security Update
4507460
https://support.microsoft.com/help/4507460
10486-10852
10486-10853
10486-10816
4507449
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507449
4503292
10486-10047
10486-10048
10486-10051
Yes
Monthly Rollup
4507449
https://support.microsoft.com/help/4507449
10486-10047
10486-10048
10486-10051
4507448
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507448
4503276
10486-10481
10486-10482
10486-10484
10486-10483
Yes
Monthly Rollup
4507448
https://support.microsoft.com/help/4507448
10486-10481
10486-10482
10486-10484
10486-10483
4507448
4503276
10486-10481
10486-10482
10486-10484
10486-10483
Yes
Monthly Rollup
4507448
https://support.microsoft.com/help/4507448
10486-10481
10486-10482
10486-10484
10486-10483
4507453
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507453
4503293
10486-11644
10486-11645
10486-11646
Yes
Security Update
4507453
https://support.microsoft.com/help/4507453
10486-11644
10486-11645
10486-11646
Anonymous working with iDefense Labs
1.0
2019-07-09T07:00:00
<p>Information published.</p>
Windows Kernel Information Disclosure Vulnerability
<p>An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system.</p>
<p>An authenticated attacker could exploit this vulnerability by running a specially crafted application.</p>
<p>The update addresses the vulnerability by correcting how the Windows kernel handles objects in memory.</p>
<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>
<p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is Kernel memory read - unintentional read access to memory contents in kernel space from a user mode process.</p>
Windows Kernel
Microsoft
CVE-2019-1071
10951
10952
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
9312
10287
9311
9318
9344
10050
10051
10049
10378
10379
10483
10543
Information Disclosure
10951
Information Disclosure
10952
Information Disclosure
11497
Information Disclosure
11498
Information Disclosure
11499
Information Disclosure
11563
Information Disclosure
11568
Information Disclosure
11569
Information Disclosure
11570
Information Disclosure
11571
Information Disclosure
11572
Information Disclosure
11453
Information Disclosure
11454
Information Disclosure
11583
Information Disclosure
11644
Information Disclosure
11645
Information Disclosure
11646
Information Disclosure
11647
Information Disclosure
10729
Information Disclosure
10735
Information Disclosure
10852
Information Disclosure
10853
Information Disclosure
10816
Information Disclosure
10855
Information Disclosure
10047
Information Disclosure
10048
Information Disclosure
10481
Information Disclosure
10482
Information Disclosure
10484
Information Disclosure
9312
Information Disclosure
10287
Information Disclosure
9311
Information Disclosure
9318
Information Disclosure
9344
Information Disclosure
10050
Information Disclosure
10051
Information Disclosure
10049
Information Disclosure
10378
Information Disclosure
10379
Information Disclosure
10483
Information Disclosure
10543
Important
10951
Important
10952
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9311
Important
9318
Important
9344
Important
10050
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10951
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10952
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11497
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11498
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11499
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11568
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11569
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11570
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11571
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11572
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11453
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11454
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11583
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10729
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10735
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10852
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10853
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10816
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10855
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10047
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10048
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10481
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10482
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10484
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9312
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10287
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9311
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9318
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9344
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10050
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10051
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10049
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10378
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10379
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10483
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10543
4507450
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507450
4503279
10951
10952
Yes
Security Update
4507450
https://support.microsoft.com/help/4507450
10951
10952
4507435
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507435
4503286
11497
11498
11499
11563
Yes
Security Update
4507435
https://support.microsoft.com/help/4507435
11497
11498
11499
11563
4507469
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507469
4503327
11568
11569
11570
11571
11572
Yes
Security Update
4507469
https://support.microsoft.com/help/4507469
11568
11569
11570
11571
11572
4507455
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507455
4503284
11453
11454
11583
Yes
Security Update
4507455
https://support.microsoft.com/help/4507455
11453
11454
11583
4507453
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507453
4503293
11644
11645
11646
11647
Yes
Security Update
4507453
https://support.microsoft.com/help/4507453
11644
11645
11646
11647
4507458
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507458
4503291
10729
10735
Yes
Security Update
4507458
https://support.microsoft.com/help/4507458
10729
10735
4507460
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507460
4503267
10852
10853
10816
10855
Yes
Security Update
4507460
https://support.microsoft.com/help/4507460
10852
10853
10816
10855
4507449
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507449
4503292
10047
10048
10050
10051
10049
Yes
Monthly Rollup
4507449
https://support.microsoft.com/help/4507449
10047
10048
10050
10051
10049
4507456
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507456
10047
10048
10050
10051
10049
Yes
Security Only
4507448
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507448
4503276
10481
10482
10484
10483
10543
Yes
Monthly Rollup
4507448
https://support.microsoft.com/help/4507448
10481
10482
10484
10483
10543
4507457
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507457
10481
10482
10483
10543
Yes
Security Only
4507457
https://support.microsoft.com/help/4507457
10481
10482
10483
10543
4507448
4503276
10481
10482
10484
10483
10543
Yes
Monthly Rollup
4507448
https://support.microsoft.com/help/4507448
10481
10482
10484
10483
10543
4507452
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507452
4503273
9312
10287
9311
9318
9344
Yes
Monthly Rollup
4507461
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507461
9312
10287
9311
9318
9344
Yes
Security Only
4507462
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507462
4503285
10378
10379
Yes
Monthly Rollup
4507462
https://support.microsoft.com/help/4507462
10378
10379
4507464
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507464
10378
10379
Yes
Security Only
4507464
https://support.microsoft.com/help/4507464
10378
10379
Gil Dabah
1.0
2019-07-09T07:00:00
<p>Information published.</p>
Azure DevOps Server and Team Foundation Server Remote Code Execution Vulnerability
<p>A remote code execution vulnerability exists when Azure DevOps Server and Team Foundation Server (TFS) improperly handle user input. An attacker who successfully exploited the vulnerability could execute code on the target server in the context of the DevOps or TFS service account.</p>
<p>To exploit the vulnerability, an attacker could submit a specially crafted file to an affected server. If anonymous access is allowed to projects on an affected server, the attacker would not require authentication.</p>
<p>The update corrects the way that DevOps Server and TFS process certain file types.</p>
Azure DevOps
Microsoft
CVE-2019-1072
11594
11614
11616
11651
10927
10928
11675
11690
11691
Remote Code Execution
11594
Remote Code Execution
11614
Remote Code Execution
11616
Remote Code Execution
11651
Remote Code Execution
10927
Remote Code Execution
10928
Remote Code Execution
11675
Remote Code Execution
11690
Remote Code Execution
11691
Critical
11594
Critical
11614
Critical
11616
Critical
11651
Critical
10927
Critical
10928
Critical
11675
Critical
11690
Critical
11691
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
Release Notes
https://aka.ms/tfs2017.3.1patch
11594
11614
11616
11651
10927
10928
11675
11690
11691
Maybe
Security Update
Release Notes
https://aka.ms/tfs2018.1.2patch
11594
11614
11616
11651
10927
10928
11675
11690
11691
Maybe
Security Update
Release Notes
https://aka.ms/tfs2018.3.2patch
11594
11614
11616
11651
10927
10928
11675
11690
11691
Maybe
Security Update
Release Notes
https://aka.ms/tfs2015.4.2patch
11594
11614
11616
11651
10927
10928
11675
11690
11691
Maybe
Security Update
Release Notes
https://aka.ms/tfs2012.4patch
11594
11614
11616
11651
10927
10928
11675
11690
11691
Maybe
Security Update
Release Notes
https://aka.ms/tfs2013.5patch
11594
11614
11616
11651
10927
10928
11675
11690
11691
Maybe
Security Update
Release Notes
https://aka.ms/azdev2019.0.1patch
11594
11614
11616
11651
10927
10928
11675
11690
11691
Maybe
Security Update
Release Notes
https://aka.ms/tfs2010sp1patchx86
11594
11614
11616
11651
10927
10928
11675
11690
11691
Maybe
Security Update
Release Notes
https://aka.ms/tfs2010sp1patchx64
11594
11614
11616
11651
10927
10928
11675
11690
11691
Maybe
Security Update
1.0
2019-07-09T07:00:00
<p>Information published.</p>
2.0
2019-07-09T07:00:00
<p>Added Team Foundation Server 2010 SP1 (x86) and Team Foundation Server 2010 SP1 (x64) to the Security Updates table as there are unique security updates for each architecture. Corrected Security Update download links for Team Foundation Server 2012 Update 4, Team Foundation Server 2013 Update 5, and Azure DevOps Server 2019.0.1.</p>
Windows Kernel Information Disclosure Vulnerability
<p>An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system.</p>
<p>To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application. The vulnerability would not allow an attacker to execute code or to elevate user rights directly, but it could be used to obtain information that could be used to try to further compromise the affected system.</p>
<p>The update addresses the vulnerability by correcting how the Windows kernel handles objects in memory.</p>
<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>
<p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is Kernel memory read - unintentional read access to memory contents in kernel space from a user mode process.</p>
Windows Kernel
Microsoft
CVE-2019-1073
10951
10952
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
9312
10287
9311
9318
9344
10050
10051
10049
10378
10379
10483
10543
Information Disclosure
10951
Information Disclosure
10952
Information Disclosure
11497
Information Disclosure
11498
Information Disclosure
11499
Information Disclosure
11563
Information Disclosure
11568
Information Disclosure
11569
Information Disclosure
11570
Information Disclosure
11571
Information Disclosure
11572
Information Disclosure
11453
Information Disclosure
11454
Information Disclosure
11583
Information Disclosure
11644
Information Disclosure
11645
Information Disclosure
11646
Information Disclosure
11647
Information Disclosure
10729
Information Disclosure
10735
Information Disclosure
10852
Information Disclosure
10853
Information Disclosure
10816
Information Disclosure
10855
Information Disclosure
10047
Information Disclosure
10048
Information Disclosure
10481
Information Disclosure
10482
Information Disclosure
10484
Information Disclosure
9312
Information Disclosure
10287
Information Disclosure
9311
Information Disclosure
9318
Information Disclosure
9344
Information Disclosure
10050
Information Disclosure
10051
Information Disclosure
10049
Information Disclosure
10378
Information Disclosure
10379
Information Disclosure
10483
Information Disclosure
10543
Important
10951
Important
10952
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9311
Important
9318
Important
9344
Important
10050
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10951
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10952
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11497
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11498
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11499
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11563
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11568
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11569
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11570
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11571
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11572
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11453
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11454
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11583
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11644
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11645
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11646
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11647
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10729
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10735
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10852
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10853
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10816
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10855
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10047
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10048
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10481
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10482
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10484
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9312
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10287
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9311
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9318
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9344
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10050
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10051
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10049
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10378
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10379
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10483
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10543
4507450
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507450
4503279
10951
10952
Yes
Security Update
4507450
https://support.microsoft.com/help/4507450
10951
10952
4507435
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507435
4503286
11497
11498
11499
11563
Yes
Security Update
4507435
https://support.microsoft.com/help/4507435
11497
11498
11499
11563
4507469
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507469
4503327
11568
11569
11570
11571
11572
Yes
Security Update
4507469
https://support.microsoft.com/help/4507469
11568
11569
11570
11571
11572
4507455
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507455
4503284
11453
11454
11583
Yes
Security Update
4507455
https://support.microsoft.com/help/4507455
11453
11454
11583
4507453
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507453
4503293
11644
11645
11646
11647
Yes
Security Update
4507453
https://support.microsoft.com/help/4507453
11644
11645
11646
11647
4507458
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507458
4503291
10729
10735
Yes
Security Update
4507458
https://support.microsoft.com/help/4507458
10729
10735
4507460
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507460
4503267
10852
10853
10816
10855
Yes
Security Update
4507460
https://support.microsoft.com/help/4507460
10852
10853
10816
10855
4507449
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507449
4503292
10047
10048
10050
10051
10049
Yes
Monthly Rollup
4507449
https://support.microsoft.com/help/4507449
10047
10048
10050
10051
10049
4507456
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507456
10047
10048
10050
10051
10049
Yes
Security Only
4507448
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507448
4503276
10481
10482
10484
10483
10543
Yes
Monthly Rollup
4507448
https://support.microsoft.com/help/4507448
10481
10482
10484
10483
10543
4507457
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507457
10481
10482
10483
10543
Yes
Security Only
4507457
https://support.microsoft.com/help/4507457
10481
10482
10483
10543
4507448
4503276
10481
10482
10484
10483
10543
Yes
Monthly Rollup
4507448
https://support.microsoft.com/help/4507448
10481
10482
10484
10483
10543
4507452
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507452
4503273
9312
10287
9311
9318
9344
Yes
Monthly Rollup
4507461
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507461
9312
10287
9311
9318
9344
Yes
Security Only
4507462
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507462
4503285
10378
10379
Yes
Monthly Rollup
4507462
https://support.microsoft.com/help/4507462
10378
10379
4507464
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507464
10378
10379
Yes
Security Only
4507464
https://support.microsoft.com/help/4507464
10378
10379
WenQunWang and Zhiyi Zhang from Codesafe Team of Legendsec at Qi'anxin Group
1.0
2019-07-09T07:00:00
<p>Information published.</p>
Docker Elevation of Privilege Vulnerability
<p><strong>Summary</strong></p>
<p>CVE-2018-15664 describes a vulnerability in the Docker runtime (and the underlying community project, Moby) wherein a malicious/compromised container can acquire full read/write access to the host operating system where that container is running. The vulnerability depends on the way that the Docker runtime handles symbolic links and is most directly exploitable through the Docker copy API (‘docker cp’ in the Docker CLI).</p>
<p><strong>What is the risk for Azure Kubernetes Service (AKS) and Azure IoT Edge customers?</strong></p>
<p>The risk for AKS and Azure IoT Edge customers is minimal as the following need to be true:</p>
<ul>
<li>A container on the host must be compromised.</li>
<li>The attacker must have access to the host machine, as the docker API is not exposed by default from outside of the host.</li>
</ul>
<p><strong>How do I get the update for Microsoft Azure Kubernetes Service (AKS)?</strong></p>
<p>There are two ways to get the update for AKS:</p>
<ul>
<li><p>Any new cluster created after the July 22, 2019 release discussed in <a href="https://github.com/Azure/AKS/releases/tag/2019-07-22">https://github.com/Azure/AKS/releases/tag/2019-07-22</a> will have AKS-Engine version v0.38.3 and will be protected from this vulnerability.</p>
</li>
<li><p>Any clusters that were created before July 22, 2019 must be upgraded to include AKS-Engine v0.30.3. See <a href="https://docs.microsoft.com/en-us/azure/aks/upgrade-cluster">Upgrade an Azure Kubernetes Service (AKS) cluster</a> for instructions on updgrading a cluster.</p>
</li>
</ul>
Open Source Software
Microsoft
CVE-2018-15664
11669
11582
Elevation of Privilege
11669
Elevation of Privilege
11582
Important
11669
Important
11582
Publicly Disclosed:Yes;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
Release Notes
11669
11582
Maybe
Security Update
1.0
2019-07-09T07:00:00
<p>Information published.</p>
2.0
2019-09-10T07:00:00
<p>Microsoft has released an update to provide protection for Azure Kubernetes Service. Please see the Security Updates table and the FAQs for more information.</p>
Team Foundation Server Cross-site Scripting Vulnerability
<p>A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input. An authenticated attacker could exploit the vulnerability by sending a specially crafted payload to the Team Foundation Server, which will get executed in the context of the user every time a user visits the compromised page.</p>
<p>The attacker who successfully exploited the vulnerability could then perform cross-site scripting attacks on affected systems and run script in the security context of the current user. The attacks could allow the attacker to read content that the attacker is not authorized to read, execute malicious code, and use the victim's identity to take actions on the site on behalf of the user, such as change permissions and delete content.</p>
<p>The security update addresses the vulnerability by ensuring that Team Foundation Server sanitizes user inputs.</p>
Azure DevOps
Microsoft
CVE-2019-1076
11616
11675
Spoofing
11616
Spoofing
11675
Important
11616
Important
11675
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
Release Notes
https://aka.ms/tfs2018.3.2patch
11616
11675
Maybe
Security Update
Release Notes
https://aka.ms/azdev2019.0.1patch
11616
11675
Maybe
Security Update
John Mogensen of Microsoft Corporation
1.0
2019-07-09T07:00:00
<p>Information published.</p>
1.1
2019-07-09T07:00:00
<p>Corrected the Security Update download link for Azure DevOps Server 2019.0.1.</p>
Chakra Scripting Engine Memory Corruption Vulnerability
<p>A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based). The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft Edge (HTML-based) and then convince a user to view the website. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p>
<p>The security update addresses the vulnerability by modifying how the Chakra scripting engine handles objects in memory.</p>
Microsoft Scripting Engine
Microsoft
CVE-2019-1092
11447
10724-10951
10724-10952
10724-11497
10724-11498
10724-11563
10724-11568
10724-11569
10724-11570
10724-11571
10724-11453
10724-11454
10724-11583
10724-11644
10724-11645
10724-11646
10724-10729
10724-10735
10724-10852
10724-10853
10724-10816
Remote Code Execution
11447
Remote Code Execution
10724-10951
Remote Code Execution
10724-10952
Remote Code Execution
10724-11497
Remote Code Execution
10724-11498
Remote Code Execution
10724-11563
Remote Code Execution
10724-11568
Remote Code Execution
10724-11569
Remote Code Execution
10724-11570
Remote Code Execution
10724-11571
Remote Code Execution
10724-11453
Remote Code Execution
10724-11454
Remote Code Execution
10724-11583
Remote Code Execution
10724-11644
Remote Code Execution
10724-11645
Remote Code Execution
10724-11646
Remote Code Execution
10724-10729
Remote Code Execution
10724-10735
Remote Code Execution
10724-10852
Remote Code Execution
10724-10853
Remote Code Execution
10724-10816
Critical
11447
Critical
10724-10951
Critical
10724-10952
Critical
10724-11497
Critical
10724-11498
Critical
10724-11563
Critical
10724-11568
Critical
10724-11569
Critical
10724-11570
Moderate
10724-11571
Critical
10724-11453
Critical
10724-11454
Critical
10724-11583
Critical
10724-11644
Critical
10724-11645
Critical
10724-11646
Critical
10724-10729
Critical
10724-10735
Critical
10724-10852
Critical
10724-10853
Moderate
10724-10816
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A;DOS:N/A
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
11447
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10951
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10952
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11497
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11498
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11563
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11568
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11569
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11570
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11571
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11453
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11454
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11583
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11644
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11645
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11646
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10729
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10735
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10852
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10853
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10816
Release Notes
https://github.com/Microsoft/ChakraCore/releases/tag/v1.11.11
11447
Maybe
Security Update
4507450
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507450
4503279
10724-10951
10724-10952
Yes
Security Update
4507450
https://support.microsoft.com/help/4507450
10724-10951
10724-10952
4507435
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507435
4503286
10724-11497
10724-11498
10724-11563
Yes
Security Update
4507435
https://support.microsoft.com/help/4507435
10724-11497
10724-11498
10724-11563
4507469
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507469
4503327
10724-11568
10724-11569
10724-11570
10724-11571
Yes
Security Update
4507469
https://support.microsoft.com/help/4507469
10724-11568
10724-11569
10724-11570
10724-11571
4507455
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507455
4503284
10724-11453
10724-11454
10724-11583
Yes
Security Update
4507455
https://support.microsoft.com/help/4507455
10724-11453
10724-11454
10724-11583
4507453
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507453
4503293
10724-11644
10724-11645
10724-11646
Yes
Security Update
4507453
https://support.microsoft.com/help/4507453
10724-11644
10724-11645
10724-11646
4507458
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507458
4503291
10724-10729
10724-10735
Yes
Security Update
4507458
https://support.microsoft.com/help/4507458
10724-10729
10724-10735
4507460
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507460
4503267
10724-10852
10724-10853
10724-10816
Yes
Security Update
4507460
https://support.microsoft.com/help/4507460
10724-10852
10724-10853
10724-10816
<a href="https://twitter.com/S0rryMybad">Qixun Zhao</a> of <a href="http://www.360.com/">Qihoo 360 Vulcan Team</a>
<a href="https://thdusdl1219.github.io/"> Soyeon Park from SSLab at Georgia Tech</a>
1.0
2019-07-09T07:00:00
<p>Information published.</p>
DirectWrite Information Disclosure Vulnerability
<p>An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.</p>
<p>There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document, or by convincing a user to visit an untrusted webpage.</p>
<p>The security update addresses the vulnerability by correcting how DirectWrite handles objects in memory.</p>
<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>
<p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is memory layout - the vulnerability allows an attacker to collect information that facilitates predicting addressing of the memory.</p>
Microsoft Graphics Component
Microsoft
CVE-2019-1093
10951
10952
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
9312
10287
9311
9318
9344
10050
10051
10049
10378
10379
10483
10543
Information Disclosure
10951
Information Disclosure
10952
Information Disclosure
11497
Information Disclosure
11498
Information Disclosure
11499
Information Disclosure
11563
Information Disclosure
11568
Information Disclosure
11569
Information Disclosure
11570
Information Disclosure
11571
Information Disclosure
11572
Information Disclosure
11453
Information Disclosure
11454
Information Disclosure
11583
Information Disclosure
11644
Information Disclosure
11645
Information Disclosure
11646
Information Disclosure
11647
Information Disclosure
10729
Information Disclosure
10735
Information Disclosure
10852
Information Disclosure
10853
Information Disclosure
10816
Information Disclosure
10855
Information Disclosure
10047
Information Disclosure
10048
Information Disclosure
10481
Information Disclosure
10482
Information Disclosure
10484
Information Disclosure
9312
Information Disclosure
10287
Information Disclosure
9311
Information Disclosure
9318
Information Disclosure
9344
Information Disclosure
10050
Information Disclosure
10051
Information Disclosure
10049
Information Disclosure
10378
Information Disclosure
10379
Information Disclosure
10483
Information Disclosure
10543
Important
10951
Important
10952
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9311
Important
9318
Important
9344
Important
10050
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10951
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10952
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11497
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11498
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11499
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11563
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11568
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11569
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11570
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11571
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11572
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11453
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11454
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11583
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11644
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11645
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11646
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11647
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10729
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10735
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10852
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10853
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10816
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10855
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10047
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10048
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10481
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10482
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10484
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9312
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10287
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9311
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9318
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9344
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10050
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10051
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10049
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10378
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10379
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10483
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10543
4507450
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507450
4503279
10951
10952
Yes
Security Update
4507450
https://support.microsoft.com/help/4507450
10951
10952
4507435
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507435
4503286
11497
11498
11499
11563
Yes
Security Update
4507435
https://support.microsoft.com/help/4507435
11497
11498
11499
11563
4507469
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507469
4503327
11568
11569
11570
11571
11572
Yes
Security Update
4507469
https://support.microsoft.com/help/4507469
11568
11569
11570
11571
11572
4507455
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507455
4503284
11453
11454
11583
Yes
Security Update
4507455
https://support.microsoft.com/help/4507455
11453
11454
11583
4507453
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507453
4503293
11644
11645
11646
11647
Yes
Security Update
4507453
https://support.microsoft.com/help/4507453
11644
11645
11646
11647
4507458
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507458
4503291
10729
10735
Yes
Security Update
4507458
https://support.microsoft.com/help/4507458
10729
10735
4507460
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507460
4503267
10852
10853
10816
10855
Yes
Security Update
4507460
https://support.microsoft.com/help/4507460
10852
10853
10816
10855
4507449
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507449
4503292
10047
10048
10050
10051
10049
Yes
Monthly Rollup
4507449
https://support.microsoft.com/help/4507449
10047
10048
10050
10051
10049
4507456
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507456
10047
10048
10050
10051
10049
Yes
Security Only
4507448
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507448
4503276
10481
10482
10484
10483
10543
Yes
Monthly Rollup
4507448
https://support.microsoft.com/help/4507448
10481
10482
10484
10483
10543
4507457
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507457
10481
10482
10483
10543
Yes
Security Only
4507457
https://support.microsoft.com/help/4507457
10481
10482
10483
10543
4507448
4503276
10481
10482
10484
10483
10543
Yes
Monthly Rollup
4507448
https://support.microsoft.com/help/4507448
10481
10482
10484
10483
10543
4507452
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507452
4503273
9312
10287
9311
9318
9344
Yes
Monthly Rollup
4507461
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507461
9312
10287
9311
9318
9344
Yes
Security Only
4507462
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507462
4503285
10378
10379
Yes
Monthly Rollup
4507462
https://support.microsoft.com/help/4507462
10378
10379
4507464
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507464
10378
10379
Yes
Security Only
4507464
https://support.microsoft.com/help/4507464
10378
10379
kdot working with <a href="https://www.zerodayinitiative.com/">Trend Micro's Zero Day Initiative</a>
1.0
2019-07-09T07:00:00
<p>Information published.</p>
Windows GDI Information Disclosure Vulnerability
<p>An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.</p>
<p>There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document, or by convincing a user to visit an untrusted webpage.</p>
<p>The security update addresses the vulnerability by correcting how the Windows GDI component handles objects in memory.</p>
<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>
<p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is memory layout - the vulnerability allows an attacker to collect information that facilitates predicting addressing of the memory.</p>
Microsoft Graphics Component
Microsoft
CVE-2019-1094
10951
10952
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
9312
10287
9311
9318
9344
10050
10051
10049
10378
10379
10483
10543
Information Disclosure
10951
Information Disclosure
10952
Information Disclosure
11497
Information Disclosure
11498
Information Disclosure
11499
Information Disclosure
11563
Information Disclosure
11568
Information Disclosure
11569
Information Disclosure
11570
Information Disclosure
11571
Information Disclosure
11572
Information Disclosure
11453
Information Disclosure
11454
Information Disclosure
11583
Information Disclosure
11644
Information Disclosure
11645
Information Disclosure
11646
Information Disclosure
11647
Information Disclosure
10729
Information Disclosure
10735
Information Disclosure
10852
Information Disclosure
10853
Information Disclosure
10816
Information Disclosure
10855
Information Disclosure
10047
Information Disclosure
10048
Information Disclosure
10481
Information Disclosure
10482
Information Disclosure
10484
Information Disclosure
9312
Information Disclosure
10287
Information Disclosure
9311
Information Disclosure
9318
Information Disclosure
9344
Information Disclosure
10050
Information Disclosure
10051
Information Disclosure
10049
Information Disclosure
10378
Information Disclosure
10379
Information Disclosure
10483
Information Disclosure
10543
Important
10951
Important
10952
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9311
Important
9318
Important
9344
Important
10050
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10951
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10952
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11497
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11498
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11499
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11563
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11568
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11569
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11570
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11571
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11572
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11453
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11454
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11583
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11644
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11645
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11646
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11647
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10729
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10735
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10852
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10853
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10816
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10855
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10047
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10048
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10481
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10482
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10484
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9312
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10287
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9311
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9318
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9344
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10050
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10051
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10049
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10378
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10379
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10483
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10543
4507450
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507450
4503279
10951
10952
Yes
Security Update
4507450
https://support.microsoft.com/help/4507450
10951
10952
4507435
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507435
4503286
11497
11498
11499
11563
Yes
Security Update
4507435
https://support.microsoft.com/help/4507435
11497
11498
11499
11563
4507469
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507469
4503327
11568
11569
11570
11571
11572
Yes
Security Update
4507469
https://support.microsoft.com/help/4507469
11568
11569
11570
11571
11572
4507455
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507455
4503284
11453
11454
11583
Yes
Security Update
4507455
https://support.microsoft.com/help/4507455
11453
11454
11583
4507453
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507453
4503293
11644
11645
11646
11647
Yes
Security Update
4507453
https://support.microsoft.com/help/4507453
11644
11645
11646
11647
4507458
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507458
4503291
10729
10735
Yes
Security Update
4507458
https://support.microsoft.com/help/4507458
10729
10735
4507460
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507460
4503267
10852
10853
10816
10855
Yes
Security Update
4507460
https://support.microsoft.com/help/4507460
10852
10853
10816
10855
4507449
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507449
4503292
10047
10048
10050
10051
10049
Yes
Monthly Rollup
4507449
https://support.microsoft.com/help/4507449
10047
10048
10050
10051
10049
4507456
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507456
10047
10048
10050
10051
10049
Yes
Security Only
4507448
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507448
4503276
10481
10482
10484
10483
10543
Yes
Monthly Rollup
4507448
https://support.microsoft.com/help/4507448
10481
10482
10484
10483
10543
4507457
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507457
10481
10482
10483
10543
Yes
Security Only
4507457
https://support.microsoft.com/help/4507457
10481
10482
10483
10543
4507448
4503276
10481
10482
10484
10483
10543
Yes
Monthly Rollup
4507448
https://support.microsoft.com/help/4507448
10481
10482
10484
10483
10543
4507452
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507452
4503273
9312
10287
9311
9318
9344
Yes
Monthly Rollup
4507461
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507461
9312
10287
9311
9318
9344
Yes
Security Only
4507462
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507462
4503285
10378
10379
Yes
Monthly Rollup
4507462
https://support.microsoft.com/help/4507462
10378
10379
4507464
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507464
10378
10379
Yes
Security Only
4507464
https://support.microsoft.com/help/4507464
10378
10379
willJ working with <a href="https://www.zerodayinitiative.com/">Trend Micro's Zero Day Initiative</a>
1.0
2019-07-09T07:00:00
<p>Information published.</p>
Windows GDI Information Disclosure Vulnerability
<p>An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.</p>
<p>There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document, or by convincing a user to visit an untrusted webpage.</p>
<p>The security update addresses the vulnerability by correcting how the Windows GDI component handles objects in memory.</p>
<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>
<p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is memory layout - the vulnerability allows an attacker to collect information that facilitates predicting addressing of the memory.</p>
Microsoft Graphics Component
Microsoft
CVE-2019-1095
10951
10952
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
9312
10287
9311
9318
9344
10050
10051
10049
10378
10379
10483
10543
Information Disclosure
10951
Information Disclosure
10952
Information Disclosure
11497
Information Disclosure
11498
Information Disclosure
11499
Information Disclosure
11563
Information Disclosure
11568
Information Disclosure
11569
Information Disclosure
11570
Information Disclosure
11571
Information Disclosure
11572
Information Disclosure
11453
Information Disclosure
11454
Information Disclosure
11583
Information Disclosure
11644
Information Disclosure
11645
Information Disclosure
11646
Information Disclosure
11647
Information Disclosure
10729
Information Disclosure
10735
Information Disclosure
10852
Information Disclosure
10853
Information Disclosure
10816
Information Disclosure
10855
Information Disclosure
10047
Information Disclosure
10048
Information Disclosure
10481
Information Disclosure
10482
Information Disclosure
10484
Information Disclosure
9312
Information Disclosure
10287
Information Disclosure
9311
Information Disclosure
9318
Information Disclosure
9344
Information Disclosure
10050
Information Disclosure
10051
Information Disclosure
10049
Information Disclosure
10378
Information Disclosure
10379
Information Disclosure
10483
Information Disclosure
10543
Important
10951
Important
10952
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9311
Important
9318
Important
9344
Important
10050
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10951
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10952
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11497
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11498
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11499
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11563
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11568
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11569
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11570
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11571
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11572
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11453
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11454
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11583
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11644
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11645
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11646
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11647
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10729
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10735
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10852
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10853
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10816
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10855
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10047
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10048
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10481
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10482
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10484
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9312
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10287
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9311
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9318
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9344
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10050
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10051
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10049
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10378
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10379
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10483
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10543
4507450
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507450
4503279
10951
10952
Yes
Security Update
4507450
https://support.microsoft.com/help/4507450
10951
10952
4507435
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507435
4503286
11497
11498
11499
11563
Yes
Security Update
4507435
https://support.microsoft.com/help/4507435
11497
11498
11499
11563
4507469
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507469
4503327
11568
11569
11570
11571
11572
Yes
Security Update
4507469
https://support.microsoft.com/help/4507469
11568
11569
11570
11571
11572
4507455
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507455
4503284
11453
11454
11583
Yes
Security Update
4507455
https://support.microsoft.com/help/4507455
11453
11454
11583
4507453
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507453
4503293
11644
11645
11646
11647
Yes
Security Update
4507453
https://support.microsoft.com/help/4507453
11644
11645
11646
11647
4507458
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507458
4503291
10729
10735
Yes
Security Update
4507458
https://support.microsoft.com/help/4507458
10729
10735
4507460
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507460
4503267
10852
10853
10816
10855
Yes
Security Update
4507460
https://support.microsoft.com/help/4507460
10852
10853
10816
10855
4507449
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507449
4503292
10047
10048
10050
10051
10049
Yes
Monthly Rollup
4507449
https://support.microsoft.com/help/4507449
10047
10048
10050
10051
10049
4507456
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507456
10047
10048
10050
10051
10049
Yes
Security Only
4507448
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507448
4503276
10481
10482
10484
10483
10543
Yes
Monthly Rollup
4507448
https://support.microsoft.com/help/4507448
10481
10482
10484
10483
10543
4507457
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507457
10481
10482
10483
10543
Yes
Security Only
4507457
https://support.microsoft.com/help/4507457
10481
10482
10483
10543
4507448
4503276
10481
10482
10484
10483
10543
Yes
Monthly Rollup
4507448
https://support.microsoft.com/help/4507448
10481
10482
10484
10483
10543
4507452
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507452
4503273
9312
10287
9311
9318
9344
Yes
Monthly Rollup
4507461
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507461
9312
10287
9311
9318
9344
Yes
Security Only
4507462
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507462
4503285
10378
10379
Yes
Monthly Rollup
4507462
https://support.microsoft.com/help/4507462
10378
10379
4507464
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507464
10378
10379
Yes
Security Only
4507464
https://support.microsoft.com/help/4507464
10378
10379
kdot working with <a href="https://www.zerodayinitiative.com/">Trend Micro's Zero Day Initiative</a>
1.0
2019-07-09T07:00:00
<p>Information published.</p>
Win32k Information Disclosure Vulnerability
<p>An information disclosure vulnerability exists when the win32k component improperly provides kernel information. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.</p>
<p>To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application.</p>
<p>The security update addresses the vulnerability by correcting how win32k handles objects in memory.</p>
<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>
<p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is memory layout - the vulnerability allows an attacker to collect information that facilitates predicting addressing of the memory.</p>
Microsoft Graphics Component
Microsoft
CVE-2019-1096
10951
10952
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
9312
10287
9311
9318
9344
10050
10051
10049
10378
10379
10483
10543
Information Disclosure
10951
Information Disclosure
10952
Information Disclosure
11497
Information Disclosure
11498
Information Disclosure
11499
Information Disclosure
11563
Information Disclosure
11568
Information Disclosure
11569
Information Disclosure
11570
Information Disclosure
11571
Information Disclosure
11572
Information Disclosure
11453
Information Disclosure
11454
Information Disclosure
11583
Information Disclosure
11644
Information Disclosure
11645
Information Disclosure
11646
Information Disclosure
11647
Information Disclosure
10729
Information Disclosure
10735
Information Disclosure
10852
Information Disclosure
10853
Information Disclosure
10816
Information Disclosure
10855
Information Disclosure
10047
Information Disclosure
10048
Information Disclosure
10481
Information Disclosure
10482
Information Disclosure
10484
Information Disclosure
9312
Information Disclosure
10287
Information Disclosure
9311
Information Disclosure
9318
Information Disclosure
9344
Information Disclosure
10050
Information Disclosure
10051
Information Disclosure
10049
Information Disclosure
10378
Information Disclosure
10379
Information Disclosure
10483
Information Disclosure
10543
Important
10951
Important
10952
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9311
Important
9318
Important
9344
Important
10050
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10951
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10952
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11497
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11498
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11499
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11563
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11568
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11569
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11570
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11571
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11572
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11453
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11454
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11583
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11644
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11645
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11646
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11647
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10729
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10735
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10852
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10853
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10816
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10855
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10047
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10048
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10481
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10482
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10484
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9312
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10287
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9311
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9318
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9344
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10050
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10051
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10049
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10378
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10379
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10483
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10543
4507450
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507450
4503279
10951
10952
Yes
Security Update
4507450
https://support.microsoft.com/help/4507450
10951
10952
4507435
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507435
4503286
11497
11498
11499
11563
Yes
Security Update
4507435
https://support.microsoft.com/help/4507435
11497
11498
11499
11563
4507469
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507469
4503327
11568
11569
11570
11571
11572
Yes
Security Update
4507469
https://support.microsoft.com/help/4507469
11568
11569
11570
11571
11572
4507455
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507455
4503284
11453
11454
11583
Yes
Security Update
4507455
https://support.microsoft.com/help/4507455
11453
11454
11583
4507453
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507453
4503293
11644
11645
11646
11647
Yes
Security Update
4507453
https://support.microsoft.com/help/4507453
11644
11645
11646
11647
4507458
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507458
4503291
10729
10735
Yes
Security Update
4507458
https://support.microsoft.com/help/4507458
10729
10735
4507460
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507460
4503267
10852
10853
10816
10855
Yes
Security Update
4507460
https://support.microsoft.com/help/4507460
10852
10853
10816
10855
4507449
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507449
4503292
10047
10048
10050
10051
10049
Yes
Monthly Rollup
4507449
https://support.microsoft.com/help/4507449
10047
10048
10050
10051
10049
4507456
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507456
10047
10048
10050
10051
10049
Yes
Security Only
4507448
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507448
4503276
10481
10482
10484
10483
10543
Yes
Monthly Rollup
4507448
https://support.microsoft.com/help/4507448
10481
10482
10484
10483
10543
4507457
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507457
10481
10482
10483
10543
Yes
Security Only
4507457
https://support.microsoft.com/help/4507457
10481
10482
10483
10543
4507448
4503276
10481
10482
10484
10483
10543
Yes
Monthly Rollup
4507448
https://support.microsoft.com/help/4507448
10481
10482
10484
10483
10543
4507452
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507452
4503273
9312
10287
9311
9318
9344
Yes
Monthly Rollup
4507461
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507461
9312
10287
9311
9318
9344
Yes
Security Only
4507462
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507462
4503285
10378
10379
Yes
Monthly Rollup
4507462
https://support.microsoft.com/help/4507462
10378
10379
4507464
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507464
10378
10379
Yes
Security Only
4507464
https://support.microsoft.com/help/4507464
10378
10379
Netanel Ben-Simon and Yoav Alon from Check Point Research
1.0
2019-07-09T07:00:00
<p>Information published.</p>
DirectWrite Information Disclosure Vulnerability
<p>An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.</p>
<p>There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document, or by convincing a user to visit an untrusted webpage.</p>
<p>The security update addresses the vulnerability by correcting how DirectWrite handles objects in memory.</p>
<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>
<p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is memory layout - the vulnerability allows an attacker to collect information that facilitates predicting addressing of the memory.</p>
Microsoft Graphics Component
Microsoft
CVE-2019-1097
10951
10952
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
9312
10287
9311
9318
9344
10050
10051
10049
10378
10379
10483
10543
Information Disclosure
10951
Information Disclosure
10952
Information Disclosure
11497
Information Disclosure
11498
Information Disclosure
11499
Information Disclosure
11563
Information Disclosure
11568
Information Disclosure
11569
Information Disclosure
11570
Information Disclosure
11571
Information Disclosure
11572
Information Disclosure
11453
Information Disclosure
11454
Information Disclosure
11583
Information Disclosure
11644
Information Disclosure
11645
Information Disclosure
11646
Information Disclosure
11647
Information Disclosure
10729
Information Disclosure
10735
Information Disclosure
10852
Information Disclosure
10853
Information Disclosure
10816
Information Disclosure
10855
Information Disclosure
10047
Information Disclosure
10048
Information Disclosure
10481
Information Disclosure
10482
Information Disclosure
10484
Information Disclosure
9312
Information Disclosure
10287
Information Disclosure
9311
Information Disclosure
9318
Information Disclosure
9344
Information Disclosure
10050
Information Disclosure
10051
Information Disclosure
10049
Information Disclosure
10378
Information Disclosure
10379
Information Disclosure
10483
Information Disclosure
10543
Important
10951
Important
10952
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9311
Important
9318
Important
9344
Important
10050
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10951
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10952
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11497
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11498
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11499
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11563
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11568
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11569
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11570
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11571
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11572
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11453
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11454
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11583
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11644
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11645
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11646
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11647
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10729
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10735
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10852
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10853
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10816
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10855
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10047
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10048
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10481
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10482
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10484
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9312
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10287
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9311
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9318
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9344
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10050
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10051
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10049
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10378
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10379
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10483
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10543
4507450
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507450
4503279
10951
10952
Yes
Security Update
4507450
https://support.microsoft.com/help/4507450
10951
10952
4507435
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507435
4503286
11497
11498
11499
11563
Yes
Security Update
4507435
https://support.microsoft.com/help/4507435
11497
11498
11499
11563
4507469
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507469
4503327
11568
11569
11570
11571
11572
Yes
Security Update
4507469
https://support.microsoft.com/help/4507469
11568
11569
11570
11571
11572
4507455
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507455
4503284
11453
11454
11583
Yes
Security Update
4507455
https://support.microsoft.com/help/4507455
11453
11454
11583
4507453
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507453
4503293
11644
11645
11646
11647
Yes
Security Update
4507453
https://support.microsoft.com/help/4507453
11644
11645
11646
11647
4507458
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507458
4503291
10729
10735
Yes
Security Update
4507458
https://support.microsoft.com/help/4507458
10729
10735
4507460
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507460
4503267
10852
10853
10816
10855
Yes
Security Update
4507460
https://support.microsoft.com/help/4507460
10852
10853
10816
10855
4507449
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507449
4503292
10047
10048
10050
10051
10049
Yes
Monthly Rollup
4507449
https://support.microsoft.com/help/4507449
10047
10048
10050
10051
10049
4507456
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507456
10047
10048
10050
10051
10049
Yes
Security Only
4507448
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507448
4503276
10481
10482
10484
10483
10543
Yes
Monthly Rollup
4507448
https://support.microsoft.com/help/4507448
10481
10482
10484
10483
10543
4507457
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507457
10481
10482
10483
10543
Yes
Security Only
4507457
https://support.microsoft.com/help/4507457
10481
10482
10483
10543
4507448
4503276
10481
10482
10484
10483
10543
Yes
Monthly Rollup
4507448
https://support.microsoft.com/help/4507448
10481
10482
10484
10483
10543
4507452
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507452
4503273
9312
10287
9311
9318
9344
Yes
Monthly Rollup
4507461
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507461
9312
10287
9311
9318
9344
Yes
Security Only
4507462
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507462
4503285
10378
10379
Yes
Monthly Rollup
4507462
https://support.microsoft.com/help/4507462
10378
10379
4507464
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507464
10378
10379
Yes
Security Only
4507464
https://support.microsoft.com/help/4507464
10378
10379
kdot working with <a href="https://www.zerodayinitiative.com/">Trend Micro's Zero Day Initiative</a>
1.0
2019-07-09T07:00:00
<p>Information published.</p>
Windows GDI Information Disclosure Vulnerability
<p>An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.</p>
<p>There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document, or by convincing a user to visit an untrusted webpage.</p>
<p>The security update addresses the vulnerability by correcting how the Windows GDI component handles objects in memory.</p>
<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>
<p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is memory layout - the vulnerability allows an attacker to collect information that facilitates predicting addressing of the memory.</p>
Microsoft Graphics Component
Microsoft
CVE-2019-1098
10047
10048
10287
9311
9318
9344
10050
10051
10049
Information Disclosure
10047
Information Disclosure
10048
Information Disclosure
10287
Information Disclosure
9311
Information Disclosure
9318
Information Disclosure
9344
Information Disclosure
10050
Information Disclosure
10051
Information Disclosure
10049
Important
10047
Important
10048
Important
10287
Important
9311
Important
9318
Important
9344
Important
10050
Important
10051
Important
10049
Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A;Older Software Release:Exploitation Less Likely;DOS:N/A
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10047
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10048
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10287
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9311
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9318
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9344
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10050
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10051
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10049
4507449
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507449
4503292
10047
10048
10050
10051
10049
Yes
Monthly Rollup
4507449
https://support.microsoft.com/help/4507449
10047
10048
10050
10051
10049
4507456
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507456
10047
10048
10050
10051
10049
Yes
Security Only
4507452
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507452
4503273
10287
9311
9318
9344
Yes
Monthly Rollup
4507461
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507461
10287
9311
9318
9344
Yes
Security Only
kdot working with <a href="https://www.zerodayinitiative.com/">Trend Micro's Zero Day Initiative</a>
1.0
2019-07-09T07:00:00
<p>Information published.</p>
Windows GDI Information Disclosure Vulnerability
<p>An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.</p>
<p>There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document, or by convincing a user to visit an untrusted webpage.</p>
<p>The security update addresses the vulnerability by correcting how the Windows GDI component handles objects in memory.</p>
<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>
<p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is memory layout - the vulnerability allows an attacker to collect information that facilitates predicting addressing of the memory.</p>
Windows Shell
Microsoft
CVE-2019-1099
10047
10048
9312
10287
9311
9318
9344
10050
10051
10049
Information Disclosure
10047
Information Disclosure
10048
Information Disclosure
9312
Information Disclosure
10287
Information Disclosure
9311
Information Disclosure
9318
Information Disclosure
9344
Information Disclosure
10050
Information Disclosure
10051
Information Disclosure
10049
Important
10047
Important
10048
Important
9312
Important
10287
Important
9311
Important
9318
Important
9344
Important
10050
Important
10051
Important
10049
Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A;Older Software Release:Exploitation Less Likely;DOS:N/A
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10047
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10048
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9312
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10287
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9311
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9318
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9344
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10050
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10051
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10049
4507449
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507449
4503292
10047
10048
10050
10051
10049
Yes
Monthly Rollup
4507449
https://support.microsoft.com/help/4507449
10047
10048
10050
10051
10049
4507456
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507456
10047
10048
10050
10051
10049
Yes
Security Only
4507452
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507452
4503273
9312
10287
9311
9318
9344
Yes
Monthly Rollup
4507461
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507461
9312
10287
9311
9318
9344
Yes
Security Only
kdot working with <a href="https://www.zerodayinitiative.com/">Trend Micro's Zero Day Initiative</a>
1.0
2019-07-09T07:00:00
<p>Information published.</p>
Windows GDI Information Disclosure Vulnerability
<p>An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.</p>
<p>There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document, or by convincing a user to visit an untrusted webpage.</p>
<p>The security update addresses the vulnerability by correcting how the Windows GDI component handles objects in memory.</p>
<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>
<p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is memory layout - the vulnerability allows an attacker to collect information that facilitates predicting addressing of the memory.</p>
Microsoft Graphics Component
Microsoft
CVE-2019-1100
10047
10048
9312
10287
9311
9318
9344
10050
10051
10049
Information Disclosure
10047
Information Disclosure
10048
Information Disclosure
9312
Information Disclosure
10287
Information Disclosure
9311
Information Disclosure
9318
Information Disclosure
9344
Information Disclosure
10050
Information Disclosure
10051
Information Disclosure
10049
Important
10047
Important
10048
Important
9312
Important
10287
Important
9311
Important
9318
Important
9344
Important
10050
Important
10051
Important
10049
Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A;Older Software Release:Exploitation Less Likely;DOS:N/A
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10047
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10048
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9312
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10287
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9311
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9318
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9344
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10050
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10051
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10049
4507449
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507449
4503292
10047
10048
10050
10051
10049
Yes
Monthly Rollup
4507449
https://support.microsoft.com/help/4507449
10047
10048
10050
10051
10049
4507456
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507456
10047
10048
10050
10051
10049
Yes
Security Only
4507452
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507452
4503273
9312
10287
9311
9318
9344
Yes
Monthly Rollup
4507461
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507461
9312
10287
9311
9318
9344
Yes
Security Only
kdot working with <a href="https://www.zerodayinitiative.com/">Trend Micro's Zero Day Initiative</a>
1.0
2019-07-09T07:00:00
<p>Information published.</p>
Windows GDI Information Disclosure Vulnerability
<p>An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.</p>
<p>There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document, or by convincing a user to visit an untrusted webpage.</p>
<p>The security update addresses the vulnerability by correcting how the Windows GDI component handles objects in memory.</p>
<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>
<p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is memory layout - the vulnerability allows an attacker to collect information that facilitates predicting addressing of the memory.</p>
Microsoft Graphics Component
Microsoft
CVE-2019-1101
10047
10048
9312
10287
9311
9318
9344
10050
10051
10049
Information Disclosure
10047
Information Disclosure
10048
Information Disclosure
9312
Information Disclosure
10287
Information Disclosure
9311
Information Disclosure
9318
Information Disclosure
9344
Information Disclosure
10050
Information Disclosure
10051
Information Disclosure
10049
Important
10047
Important
10048
Important
9312
Important
10287
Important
9311
Important
9318
Important
9344
Important
10050
Important
10051
Important
10049
Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A;Older Software Release:Exploitation Less Likely;DOS:N/A
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10047
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10048
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9312
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10287
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9311
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9318
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9344
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10050
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10051
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10049
4507449
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507449
4503292
10047
10048
10050
10051
10049
Yes
Monthly Rollup
4507449
https://support.microsoft.com/help/4507449
10047
10048
10050
10051
10049
4507456
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507456
10047
10048
10050
10051
10049
Yes
Security Only
4507452
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507452
4503273
9312
10287
9311
9318
9344
Yes
Monthly Rollup
4507461
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507461
9312
10287
9311
9318
9344
Yes
Security Only
Anonymous working with <a href="https://www.zerodayinitiative.com/">Trend Micro's Zero Day Initiative</a>
1.0
2019-07-09T07:00:00
<p>Information published.</p>
GDI+ Remote Code Execution Vulnerability
<p>A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.</p>
<p>There are multiple ways an attacker could exploit the vulnerability:</p>
<ul>
<li>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability and then convince users to view the website. An attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically by getting them to open an email attachment or click a link in an email or instant message.</li>
<li>In a file-sharing attack scenario, an attacker could provide a specially crafted document file that is designed to exploit the vulnerability, and then convince users to open the document file.</li>
</ul>
<p>The security update addresses the vulnerability by correcting the way that the Windows GDI handles objects in the memory.</p>
Microsoft Graphics Component
Microsoft
CVE-2019-1102
10951
10952
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
9312
10287
9311
9318
9344
10050
10051
10049
10378
10379
10483
10543
Remote Code Execution
10951
Remote Code Execution
10952
Remote Code Execution
11497
Remote Code Execution
11498
Remote Code Execution
11499
Remote Code Execution
11563
Remote Code Execution
11568
Remote Code Execution
11569
Remote Code Execution
11570
Remote Code Execution
11571
Remote Code Execution
11572
Remote Code Execution
11453
Remote Code Execution
11454
Remote Code Execution
11583
Remote Code Execution
11644
Remote Code Execution
11645
Remote Code Execution
11646
Remote Code Execution
11647
Remote Code Execution
10729
Remote Code Execution
10735
Remote Code Execution
10852
Remote Code Execution
10853
Remote Code Execution
10816
Remote Code Execution
10855
Remote Code Execution
10047
Remote Code Execution
10048
Remote Code Execution
10481
Remote Code Execution
10482
Remote Code Execution
9312
Remote Code Execution
10287
Remote Code Execution
9311
Remote Code Execution
9318
Remote Code Execution
9344
Remote Code Execution
10050
Remote Code Execution
10051
Remote Code Execution
10049
Remote Code Execution
10378
Remote Code Execution
10379
Remote Code Execution
10483
Remote Code Execution
10543
Critical
10951
Critical
10952
Critical
11497
Critical
11498
Critical
11499
Critical
11563
Critical
11568
Critical
11569
Critical
11570
Critical
11571
Critical
11572
Critical
11453
Critical
11454
Critical
11583
Critical
11644
Critical
11645
Critical
11646
Critical
11647
Critical
10729
Critical
10735
Critical
10852
Critical
10853
Critical
10816
Critical
10855
Critical
10047
Critical
10048
Critical
10481
Critical
10482
Critical
9312
Critical
10287
Critical
9311
Critical
9318
Critical
9344
Critical
10050
Critical
10051
Critical
10049
Critical
10378
Critical
10379
Critical
10483
Critical
10543
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
8.4
7.6
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10951
8.4
7.6
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10952
8.4
7.6
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11497
8.4
7.6
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11498
8.4
7.6
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11499
8.4
7.6
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11563
8.4
7.6
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
8.4
7.6
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
8.4
7.6
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
8.4
7.6
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
8.4
7.6
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
8.4
7.6
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11453
8.4
7.6
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11454
8.4
7.6
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11583
8.4
7.6
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11644
8.4
7.6
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11645
8.4
7.6
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11646
8.4
7.6
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11647
8.4
7.6
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10729
8.4
7.6
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10735
8.4
7.6
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10852
8.4
7.6
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10853
8.4
7.6
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10816
8.4
7.6
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10855
8.4
7.6
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10047
8.4
7.6
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10048
8.4
7.6
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10481
8.4
7.6
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10482
8.4
7.6
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9312
8.4
7.6
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10287
8.4
7.6
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9311
8.4
7.6
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9318
8.4
7.6
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9344
8.4
7.6
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10050
8.4
7.6
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10051
8.4
7.6
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10049
8.4
7.6
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10378
8.4
7.6
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10379
8.4
7.6
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10483
8.4
7.6
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10543
4507450
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507450
4503279
10951
10952
Yes
Security Update
4507450
https://support.microsoft.com/help/4507450
10951
10952
4507435
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507435
4503286
11497
11498
11499
11563
Yes
Security Update
4507435
https://support.microsoft.com/help/4507435
11497
11498
11499
11563
4507469
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507469
4503327
11568
11569
11570
11571
11572
Yes
Security Update
4507469
https://support.microsoft.com/help/4507469
11568
11569
11570
11571
11572
4507455
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507455
4503284
11453
11454
11583
Yes
Security Update
4507455
https://support.microsoft.com/help/4507455
11453
11454
11583
4507453
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507453
4503293
11644
11645
11646
11647
Yes
Security Update
4507453
https://support.microsoft.com/help/4507453
11644
11645
11646
11647
4507458
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507458
4503291
10729
10735
Yes
Security Update
4507458
https://support.microsoft.com/help/4507458
10729
10735
4507460
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507460
4503267
10852
10853
10816
10855
Yes
Security Update
4507460
https://support.microsoft.com/help/4507460
10852
10853
10816
10855
4507449
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507449
4503292
10047
10048
10050
10051
10049
Yes
Monthly Rollup
4507449
https://support.microsoft.com/help/4507449
10047
10048
10050
10051
10049
4507456
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507456
10047
10048
10050
10051
10049
Yes
Security Only
4507448
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507448
4503276
10481
10482
10483
10543
Yes
Monthly Rollup
4507448
https://support.microsoft.com/help/4507448
10481
10482
10483
10543
4507457
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507457
10481
10482
10483
10543
Yes
Security Only
4507457
https://support.microsoft.com/help/4507457
10481
10482
10483
10543
4507452
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507452
4503273
9312
10287
9311
9318
9344
Yes
Monthly Rollup
4507461
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507461
9312
10287
9311
9318
9344
Yes
Security Only
4507462
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507462
4503285
10378
10379
Yes
Monthly Rollup
4507462
https://support.microsoft.com/help/4507462
10378
10379
4507464
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507464
10378
10379
Yes
Security Only
4507464
https://support.microsoft.com/help/4507464
10378
10379
Anonymous working with <a href="https://www.zerodayinitiative.com/">Trend Micro's Zero Day Initiative</a>
sf
1.0
2019-07-09T07:00:00
<p>Information published.</p>
Chakra Scripting Engine Memory Corruption Vulnerability
<p>A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based). The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft Edge (HTML-based) and then convince a user to view the website. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p>
<p>The security update addresses the vulnerability by modifying how the Chakra scripting engine handles objects in memory.</p>
Microsoft Scripting Engine
Microsoft
CVE-2019-1103
11447
10724-10951
10724-10952
10724-11497
10724-11498
10724-11563
10724-11568
10724-11569
10724-11570
10724-11571
10724-11453
10724-11454
10724-11583
10724-11644
10724-11645
10724-11646
10724-10729
10724-10735
10724-10852
10724-10853
10724-10816
Remote Code Execution
11447
Remote Code Execution
10724-10951
Remote Code Execution
10724-10952
Remote Code Execution
10724-11497
Remote Code Execution
10724-11498
Remote Code Execution
10724-11563
Remote Code Execution
10724-11568
Remote Code Execution
10724-11569
Remote Code Execution
10724-11570
Remote Code Execution
10724-11571
Remote Code Execution
10724-11453
Remote Code Execution
10724-11454
Remote Code Execution
10724-11583
Remote Code Execution
10724-11644
Remote Code Execution
10724-11645
Remote Code Execution
10724-11646
Remote Code Execution
10724-10729
Remote Code Execution
10724-10735
Remote Code Execution
10724-10852
Remote Code Execution
10724-10853
Remote Code Execution
10724-10816
Critical
11447
Critical
10724-10951
Critical
10724-10952
Critical
10724-11497
Critical
10724-11498
Critical
10724-11563
Critical
10724-11568
Critical
10724-11569
Critical
10724-11570
Moderate
10724-11571
Critical
10724-11453
Critical
10724-11454
Critical
10724-11583
Critical
10724-11644
Critical
10724-11645
Critical
10724-11646
Critical
10724-10729
Critical
10724-10735
Critical
10724-10852
Critical
10724-10853
Moderate
10724-10816
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A;DOS:N/A
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10951
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10952
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11497
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11498
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11563
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11568
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11569
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11570
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11571
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11453
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11454
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11583
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11644
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11645
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11646
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10729
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10735
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10852
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10853
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10816
Release Notes
https://github.com/Microsoft/ChakraCore/releases/tag/v1.11.11
11447
Maybe
Security Update
4507450
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507450
4503279
10724-10951
10724-10952
Yes
Security Update
4507450
https://support.microsoft.com/help/4507450
10724-10951
10724-10952
4507435
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507435
4503286
10724-11497
10724-11498
10724-11563
Yes
Security Update
4507435
https://support.microsoft.com/help/4507435
10724-11497
10724-11498
10724-11563
4507469
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507469
4503327
10724-11568
10724-11569
10724-11570
10724-11571
Yes
Security Update
4507469
https://support.microsoft.com/help/4507469
10724-11568
10724-11569
10724-11570
10724-11571
4507455
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507455
4503284
10724-11453
10724-11454
10724-11583
Yes
Security Update
4507455
https://support.microsoft.com/help/4507455
10724-11453
10724-11454
10724-11583
4507453
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507453
4503293
10724-11644
10724-11645
10724-11646
Yes
Security Update
4507453
https://support.microsoft.com/help/4507453
10724-11644
10724-11645
10724-11646
4507458
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507458
4503291
10724-10729
10724-10735
Yes
Security Update
4507458
https://support.microsoft.com/help/4507458
10724-10729
10724-10735
4507460
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507460
4503267
10724-10852
10724-10853
10724-10816
Yes
Security Update
4507460
https://support.microsoft.com/help/4507460
10724-10852
10724-10853
10724-10816
<a href="https://twitter.com/S0rryMybad">Qixun Zhao</a> of <a href="http://www.360.com/">Qihoo 360 Vulcan Team</a>
1.0
2019-07-09T07:00:00
<p>Information published.</p>
Microsoft Browser Memory Corruption Vulnerability
<p>A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory. The vulnerability could corrupt memory in a way that could allow an attacker to execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, the attacker could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>An attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft browsers, and then convince a user to view the website. The attacker could also take advantage of compromised websites, or websites that accept or host user-provided content or advertisements, by adding specially crafted content that could exploit the vulnerability. In all cases, however, an attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically via an enticement in email or instant message, or by getting them to open an email attachment.</p>
<p>The security update addresses the vulnerability by modifying how Microsoft browsers handle objects in memory.</p>
Microsoft Browsers
Microsoft
CVE-2019-1104
10555-10378
10336-9312
10336-9318
10486-10951
10486-10952
10486-11497
10486-11498
10486-11563
10486-11568
10486-11569
10486-11570
10486-11571
10486-11453
10486-11454
10486-11583
10486-11644
10486-11645
10486-11646
10486-10729
10486-10735
10486-10852
10486-10853
10486-10816
10486-10047
10486-10048
10486-10481
10486-10482
10486-10484
10486-10051
10486-10378
10486-10483
10724-10951
10724-10952
10724-11497
10724-11498
10724-11563
10724-11568
10724-11569
10724-11570
10724-11571
10724-11453
10724-11454
10724-11583
10724-11644
10724-11645
10724-11646
10724-10729
10724-10735
10724-10852
10724-10853
10724-10816
Remote Code Execution
10555-10378
Remote Code Execution
10336-9312
Remote Code Execution
10336-9318
Remote Code Execution
10486-10951
Remote Code Execution
10486-10952
Remote Code Execution
10486-11497
Remote Code Execution
10486-11498
Remote Code Execution
10486-11563
Remote Code Execution
10486-11568
Remote Code Execution
10486-11569
Remote Code Execution
10486-11570
Remote Code Execution
10486-11571
Remote Code Execution
10486-11453
Remote Code Execution
10486-11454
Remote Code Execution
10486-11583
Remote Code Execution
10486-11644
Remote Code Execution
10486-11645
Remote Code Execution
10486-11646
Remote Code Execution
10486-10729
Remote Code Execution
10486-10735
Remote Code Execution
10486-10852
Remote Code Execution
10486-10853
Remote Code Execution
10486-10816
Remote Code Execution
10486-10047
Remote Code Execution
10486-10048
Remote Code Execution
10486-10481
Remote Code Execution
10486-10482
Remote Code Execution
10486-10484
Remote Code Execution
10486-10051
Remote Code Execution
10486-10378
Remote Code Execution
10486-10483
Remote Code Execution
10724-10951
Remote Code Execution
10724-10952
Remote Code Execution
10724-11497
Remote Code Execution
10724-11498
Remote Code Execution
10724-11563
Remote Code Execution
10724-11568
Remote Code Execution
10724-11569
Remote Code Execution
10724-11570
Remote Code Execution
10724-11571
Remote Code Execution
10724-11453
Remote Code Execution
10724-11454
Remote Code Execution
10724-11583
Remote Code Execution
10724-11644
Remote Code Execution
10724-11645
Remote Code Execution
10724-11646
Remote Code Execution
10724-10729
Remote Code Execution
10724-10735
Remote Code Execution
10724-10852
Remote Code Execution
10724-10853
Remote Code Execution
10724-10816
Moderate
10555-10378
Moderate
10336-9312
Moderate
10336-9318
Critical
10486-10951
Critical
10486-10952
Critical
10486-11497
Critical
10486-11498
Critical
10486-11563
Critical
10486-11568
Critical
10486-11569
Critical
10486-11570
Moderate
10486-11571
Critical
10486-11453
Critical
10486-11454
Critical
10486-11583
Critical
10486-11644
Critical
10486-11645
Critical
10486-11646
Critical
10486-10729
Critical
10486-10735
Critical
10486-10852
Critical
10486-10853
Moderate
10486-10816
Critical
10486-10047
Critical
10486-10048
Critical
10486-10481
Critical
10486-10482
Critical
10486-10484
Moderate
10486-10051
Moderate
10486-10378
Moderate
10486-10483
Critical
10724-10951
Critical
10724-10952
Critical
10724-11497
Critical
10724-11498
Critical
10724-11563
Critical
10724-11568
Critical
10724-11569
Critical
10724-11570
Moderate
10724-11571
Critical
10724-11453
Critical
10724-11454
Critical
10724-11583
Critical
10724-11644
Critical
10724-11645
Critical
10724-11646
Critical
10724-10729
Critical
10724-10735
Critical
10724-10852
Critical
10724-10853
Moderate
10724-10816
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10555-10378
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10336-9312
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10336-9318
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10951
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10952
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11497
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11498
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11563
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11568
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11569
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11570
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11571
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11453
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11454
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11583
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11644
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11645
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11646
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10729
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10735
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10852
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10853
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10816
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10047
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10048
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10481
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10482
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10484
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10051
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10378
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10483
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10951
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10952
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11497
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11498
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11563
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11568
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11569
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11570
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11571
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11453
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11454
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11583
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11644
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11645
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11646
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10729
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10735
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10852
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10853
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10816
4507462
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507462
4503285
10555-10378
Yes
Monthly Rollup
4507462
https://support.microsoft.com/help/4507462
10555-10378
4507434
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507434
4503259
10555-10378
10336-9312
10336-9318
10486-10047
10486-10048
10486-10481
10486-10482
10486-10051
10486-10378
10486-10483
Yes
IE Cumulative
4507434
https://support.microsoft.com/help/4507434
10555-10378
10336-9312
10336-9318
10486-10047
10486-10048
10486-10481
10486-10482
10486-10051
10486-10378
10486-10483
4507452
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507452
4503273
10336-9312
10336-9318
Yes
Monthly Rollup
4507450
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507450
4503279
10486-10951
10486-10952
10724-10951
10724-10952
Yes
Security Update
4507450
https://support.microsoft.com/help/4507450
10486-10951
10486-10952
10724-10951
10724-10952
4507435
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507435
4503286
10486-11497
10486-11498
10486-11563
10724-11497
10724-11498
10724-11563
Yes
Security Update
4507435
https://support.microsoft.com/help/4507435
10486-11497
10486-11498
10486-11563
10724-11497
10724-11498
10724-11563
4507469
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507469
4503327
10486-11568
10486-11569
10486-11570
10486-11571
10724-11568
10724-11569
10724-11570
10724-11571
Yes
Security Update
4507469
https://support.microsoft.com/help/4507469
10486-11568
10486-11569
10486-11570
10486-11571
10724-11568
10724-11569
10724-11570
10724-11571
4507455
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507455
4503284
10486-11453
10486-11454
10486-11583
10724-11453
10724-11454
10724-11583
Yes
Security Update
4507455
https://support.microsoft.com/help/4507455
10486-11453
10486-11454
10486-11583
10724-11453
10724-11454
10724-11583
4507453
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507453
4503293
10486-11644
10486-11645
10486-11646
10724-11644
10724-11645
10724-11646
Yes
Security Update
4507453
https://support.microsoft.com/help/4507453
10486-11644
10486-11645
10486-11646
10724-11644
10724-11645
10724-11646
4507458
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507458
4503291
10486-10729
10486-10735
10724-10729
10724-10735
Yes
Security Update
4507458
https://support.microsoft.com/help/4507458
10486-10729
10486-10735
10724-10729
10724-10735
4507460
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507460
4503267
10486-10852
10486-10853
10486-10816
10724-10852
10724-10853
10724-10816
Yes
Security Update
4507460
https://support.microsoft.com/help/4507460
10486-10852
10486-10853
10486-10816
10724-10852
10724-10853
10724-10816
4507449
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507449
4503292
10486-10047
10486-10048
10486-10051
Yes
Monthly Rollup
4507449
https://support.microsoft.com/help/4507449
10486-10047
10486-10048
10486-10051
4507448
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507448
4503276
10486-10481
10486-10482
10486-10484
10486-10483
Yes
Monthly Rollup
4507448
https://support.microsoft.com/help/4507448
10486-10481
10486-10482
10486-10484
10486-10483
4507448
4503276
10486-10481
10486-10482
10486-10484
10486-10483
Yes
Monthly Rollup
4507448
https://support.microsoft.com/help/4507448
10486-10481
10486-10482
10486-10484
10486-10483
Zhong Zhaochen of <a href="http://andsecurity.cn/">andsecurity.cn</a>
1.0
2019-07-09T07:00:00
<p>Information published.</p>
Chakra Scripting Engine Memory Corruption Vulnerability
<p>A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based). The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft Edge (HTML-based) and then convince a user to view the website. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p>
<p>The security update addresses the vulnerability by modifying how the Chakra scripting engine handles objects in memory.</p>
Microsoft Scripting Engine
Microsoft
CVE-2019-1106
11447
10724-10951
10724-10952
10724-11497
10724-11498
10724-11563
10724-11568
10724-11569
10724-11570
10724-11571
10724-11453
10724-11454
10724-11583
10724-11644
10724-11645
10724-11646
10724-10852
10724-10853
10724-10816
Remote Code Execution
11447
Remote Code Execution
10724-10951
Remote Code Execution
10724-10952
Remote Code Execution
10724-11497
Remote Code Execution
10724-11498
Remote Code Execution
10724-11563
Remote Code Execution
10724-11568
Remote Code Execution
10724-11569
Remote Code Execution
10724-11570
Remote Code Execution
10724-11571
Remote Code Execution
10724-11453
Remote Code Execution
10724-11454
Remote Code Execution
10724-11583
Remote Code Execution
10724-11644
Remote Code Execution
10724-11645
Remote Code Execution
10724-11646
Remote Code Execution
10724-10852
Remote Code Execution
10724-10853
Remote Code Execution
10724-10816
Critical
11447
Critical
10724-10951
Critical
10724-10952
Critical
10724-11497
Critical
10724-11498
Critical
10724-11563
Critical
10724-11568
Critical
10724-11569
Critical
10724-11570
Moderate
10724-11571
Critical
10724-11453
Critical
10724-11454
Critical
10724-11583
Critical
10724-11644
Critical
10724-11645
Critical
10724-11646
Critical
10724-10852
Critical
10724-10853
Moderate
10724-10816
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A;DOS:N/A
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10951
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10952
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11497
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11498
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11563
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11568
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11569
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11570
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11571
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11453
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11454
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11583
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11644
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11645
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11646
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10852
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10853
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10816
Release Notes
https://github.com/Microsoft/ChakraCore/releases/tag/v1.11.11
11447
Maybe
Security Update
4507450
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507450
4503279
10724-10951
10724-10952
Yes
Security Update
4507450
https://support.microsoft.com/help/4507450
10724-10951
10724-10952
4507435
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507435
4503286
10724-11497
10724-11498
10724-11563
Yes
Security Update
4507435
https://support.microsoft.com/help/4507435
10724-11497
10724-11498
10724-11563
4507469
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507469
4503327
10724-11568
10724-11569
10724-11570
10724-11571
Yes
Security Update
4507469
https://support.microsoft.com/help/4507469
10724-11568
10724-11569
10724-11570
10724-11571
4507455
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507455
4503284
10724-11453
10724-11454
10724-11583
Yes
Security Update
4507455
https://support.microsoft.com/help/4507455
10724-11453
10724-11454
10724-11583
4507453
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507453
4503293
10724-11644
10724-11645
10724-11646
Yes
Security Update
4507453
https://support.microsoft.com/help/4507453
10724-11644
10724-11645
10724-11646
4507460
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507460
4503267
10724-10852
10724-10853
10724-10816
Yes
Security Update
4507460
https://support.microsoft.com/help/4507460
10724-10852
10724-10853
10724-10816
<a href="https://twitter.com/S0rryMybad">Qixun Zhao</a> of <a href="http://www.360.com/">Qihoo 360 Vulcan Team</a>
1.0
2019-07-09T07:00:00
<p>Information published.</p>
Chakra Scripting Engine Memory Corruption Vulnerability
<p>A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based). The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft Edge (HTML-based) and then convince a user to view the website. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p>
<p>The security update addresses the vulnerability by modifying how the Chakra scripting engine handles objects in memory.</p>
Microsoft Scripting Engine
Microsoft
CVE-2019-1107
11447
10724-10951
10724-10952
10724-11497
10724-11498
10724-11563
10724-11568
10724-11569
10724-11570
10724-11571
10724-11453
10724-11454
10724-11583
10724-11644
10724-11645
10724-11646
10724-10729
10724-10735
10724-10852
10724-10853
10724-10816
Remote Code Execution
11447
Remote Code Execution
10724-10951
Remote Code Execution
10724-10952
Remote Code Execution
10724-11497
Remote Code Execution
10724-11498
Remote Code Execution
10724-11563
Remote Code Execution
10724-11568
Remote Code Execution
10724-11569
Remote Code Execution
10724-11570
Remote Code Execution
10724-11571
Remote Code Execution
10724-11453
Remote Code Execution
10724-11454
Remote Code Execution
10724-11583
Remote Code Execution
10724-11644
Remote Code Execution
10724-11645
Remote Code Execution
10724-11646
Remote Code Execution
10724-10729
Remote Code Execution
10724-10735
Remote Code Execution
10724-10852
Remote Code Execution
10724-10853
Remote Code Execution
10724-10816
Critical
11447
Critical
10724-10951
Critical
10724-10952
Critical
10724-11497
Critical
10724-11498
Critical
10724-11563
Critical
10724-11568
Critical
10724-11569
Critical
10724-11570
Moderate
10724-11571
Critical
10724-11453
Critical
10724-11454
Critical
10724-11583
Critical
10724-11644
Critical
10724-11645
Critical
10724-11646
Critical
10724-10729
Critical
10724-10735
Critical
10724-10852
Critical
10724-10853
Moderate
10724-10816
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A;DOS:N/A
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10951
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10952
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11497
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11498
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11563
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11568
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11569
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11570
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11571
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11453
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11454
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11583
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11644
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11645
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11646
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10729
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10735
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10852
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10853
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10816
Release Notes
https://github.com/Microsoft/ChakraCore/releases/tag/v1.11.11
11447
Maybe
Security Update
4507450
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507450
4503279
10724-10951
10724-10952
Yes
Security Update
4507450
https://support.microsoft.com/help/4507450
10724-10951
10724-10952
4507435
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507435
4503286
10724-11497
10724-11498
10724-11563
Yes
Security Update
4507435
https://support.microsoft.com/help/4507435
10724-11497
10724-11498
10724-11563
4507469
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507469
4503327
10724-11568
10724-11569
10724-11570
10724-11571
Yes
Security Update
4507469
https://support.microsoft.com/help/4507469
10724-11568
10724-11569
10724-11570
10724-11571
4507455
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507455
4503284
10724-11453
10724-11454
10724-11583
Yes
Security Update
4507455
https://support.microsoft.com/help/4507455
10724-11453
10724-11454
10724-11583
4507453
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507453
4503293
10724-11644
10724-11645
10724-11646
Yes
Security Update
4507453
https://support.microsoft.com/help/4507453
10724-11644
10724-11645
10724-11646
4507458
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507458
4503291
10724-10729
10724-10735
Yes
Security Update
4507458
https://support.microsoft.com/help/4507458
10724-10729
10724-10735
4507460
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507460
4503267
10724-10852
10724-10853
10724-10816
Yes
Security Update
4507460
https://support.microsoft.com/help/4507460
10724-10852
10724-10853
10724-10816
<a href="https://twitter.com/S0rryMybad">Qixun Zhao</a> of <a href="http://www.360.com/">Qihoo 360 Vulcan Team</a>
1.0
2019-07-09T07:00:00
<p>Information published.</p>
Microsoft Office Spoofing Vulnerability
<p>A spoofing vulnerability exists when Microsoft Office Javascript does not check the validity of the web page making a request to Office documents.</p>
<p>An attacker who successfully exploited this vulnerability could read or write information in Office documents.</p>
<p>The security update addresses the vulnerability by correcting the way that Microsoft Office Javascript verifies trusted web pages.</p>
<p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p>
<p>Maybe. If a user has installed an Office Add-in, and then opens an email that uses the add-in in the Preview Pane, ads embedded in the add-in can cause the Preview Pane to become an attack vector.</p>
Microsoft Office
Microsoft
CVE-2019-1109
11573
11574
11577
11578
10753
10754
10603
10601
10602
Spoofing
11573
Spoofing
11574
Spoofing
11577
Spoofing
11578
Spoofing
10753
Spoofing
10754
Spoofing
10603
Spoofing
10601
Spoofing
10602
Important
11573
Important
11574
Important
11577
Important
11578
Important
10753
Important
10754
Important
10603
Important
10601
Important
10602
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
Click to Run
11573
11574
11577
11578
No
Security Update
https://aka.ms/OfficeSecurityReleases
Click to Run
11573
11574
11577
11578
No
Security Update
4464534
https://www.microsoft.com/downloads/details.aspx?familyid=837c02b8-fab2-4118-8016-5c99fd98d8e9
10753
10754
Maybe
Security Update
4464534
https://www.microsoft.com/downloads/details.aspx?familyid=c1ae50e7-ef22-432b-a243-87d56b8b7696
10753
10754
Maybe
Security Update
4018375
3039782
10603
10601
10602
Maybe
Security Update
4018375
https://www.microsoft.com/downloads/details.aspx?familyid=595be1f4-fc04-4ecb-b580-7ff574c5d1e9
3039782
10603
10601
10602
Maybe
Security Update
4018375
https://www.microsoft.com/downloads/details.aspx?familyid=61b4a256-6ed6-4472-9d8e-bbf23ef130d2
3039782
10603
10601
10602
Maybe
Security Update
1.0
2019-07-09T07:00:00
<p>Information published.</p>
Microsoft Excel Remote Code Execution Vulnerability
<p>A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an attacker could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.</p>
<p>Exploitation of the vulnerability requires that a user open a specially crafted file with an affected version of Microsoft Excel. In an email attack scenario, an attacker could exploit the vulnerability by sending the specially crafted file to the user and convincing the user to open the file. In a web-based attack scenario, an attacker could host a website (or leverage a compromised website that accepts or hosts user-provided content) containing a specially crafted file designed to exploit the vulnerability. An attacker would have no way to force users to visit the website. Instead, an attacker would have to convince users to click a link, typically by way of an enticement in an email or instant message, and then convince them to open the specially crafted file.</p>
<p>The security update addresses the vulnerability by correcting how Microsoft Excel handles objects in memory.</p>
<p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p>
<p>No, the Preview Pane is not an attack vector.</p>
<p><strong>Are the updates for the Microsoft Office for Mac currently available?</strong></p>
<p>The security update for Microsoft Office 2016 for Mac and Microsoft Office 2019 for Mac are not immediately available. The updates will be released as soon as possible, and when they are available, customers will be notified via a revision to this CVE information.</p>
Microsoft Office
Microsoft
CVE-2019-1110
11573
11574
11575
11577
11578
10739
10740
10734
10489
10490
10656
10654
10655
Remote Code Execution
11573
Remote Code Execution
11574
Remote Code Execution
11575
Remote Code Execution
11577
Remote Code Execution
11578
Remote Code Execution
10739
Remote Code Execution
10740
Remote Code Execution
10734
Remote Code Execution
10489
Remote Code Execution
10490
Remote Code Execution
10656
Remote Code Execution
10654
Remote Code Execution
10655
Important
11573
Important
11574
Important
11575
Important
11577
Important
11578
Important
10739
Important
10740
Important
10734
Important
10489
Important
10490
Important
10656
Important
10654
Important
10655
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
Click to Run
11573
11574
11577
11578
No
Security Update
https://aka.ms/OfficeSecurityReleases
Click to Run
11573
11574
11577
11578
No
Security Update
4475513
https://www.microsoft.com/download/details.aspx?familyid=585f0638-8421-443e-875a-db5b8ee2a1f9
4462236
10739
10740
Maybe
Security Update
4475513
https://www.microsoft.com/download/details.aspx?familyid=b5107be5-cf08-4e32-be3c-9a8fb511a7ea
4462236
10739
10740
Maybe
Security Update
4464572
https://www.microsoft.com/download/details.aspx?familyid=5b247447-4314-4018-9bcd-9fdba4256ba9
4462230
10489
10490
Maybe
Security Update
4464572
https://www.microsoft.com/download/details.aspx?familyid=364ad496-3e27-46d9-99df-724be700b14c
4462230
10489
10490
Maybe
Security Update
4464565
4462209
10656
10654
10655
Maybe
Security Update
4464565
https://www.microsoft.com/download/details.aspx?familyid=2e4b0b2b-ecc5-4923-99e8-8f512c4993f1
4462209
10656
10654
10655
Maybe
Security Update
4464565
https://www.microsoft.com/download/details.aspx?familyid=74c4ad5e-f71c-4da2-8a5b-c157a67962bf
4462209
10656
10654
10655
Maybe
Security Update
yingxinlei and liujialing working with <a href="https://www.zerodayinitiative.com/">Trend Micro's Zero Day Initiative</a>
1.0
2019-07-09T07:00:00
<p>Information published.</p>
Microsoft Excel Remote Code Execution Vulnerability
<p>A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an attacker could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.</p>
<p>Exploitation of the vulnerability requires that a user open a specially crafted file with an affected version of Microsoft Excel. In an email attack scenario, an attacker could exploit the vulnerability by sending the specially crafted file to the user and convincing the user to open the file. In a web-based attack scenario, an attacker could host a website (or leverage a compromised website that accepts or hosts user-provided content) containing a specially crafted file designed to exploit the vulnerability. An attacker would have no way to force users to visit the website. Instead, an attacker would have to convince users to click a link, typically by way of an enticement in an email or instant message, and then convince them to open the specially crafted file.</p>
<p>The security update addresses the vulnerability by correcting how Microsoft Excel handles objects in memory.</p>
<p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p>
<p>No, the Preview Pane is not an attack vector.</p>
<p><strong>Are the updates for the Microsoft Office for Mac currently available?</strong></p>
<p>The security update for Microsoft Office 2016 for Mac and Microsoft Office 2019 for Mac are not immediately available. The updates will be released as soon as possible, and when they are available, customers will be notified via a revision to this CVE information.</p>
Microsoft Office
Microsoft
CVE-2019-1111
11573
11574
11575
11577
11578
10739
10740
10753
10754
10734
10489
10490
10656
10654
10655
10521
10522
10603
10601
10602
Remote Code Execution
11573
Remote Code Execution
11574
Remote Code Execution
11575
Remote Code Execution
11577
Remote Code Execution
11578
Remote Code Execution
10739
Remote Code Execution
10740
Remote Code Execution
10753
Remote Code Execution
10754
Remote Code Execution
10734
Remote Code Execution
10489
Remote Code Execution
10490
Remote Code Execution
10656
Remote Code Execution
10654
Remote Code Execution
10655
Remote Code Execution
10521
Remote Code Execution
10522
Remote Code Execution
10603
Remote Code Execution
10601
Remote Code Execution
10602
Important
11573
Important
11574
Important
11575
Important
11577
Important
11578
Important
10739
Important
10740
Important
10753
Important
10754
Important
10734
Important
10489
Important
10490
Important
10656
Important
10654
Important
10655
Important
10521
Important
10522
Important
10603
Important
10601
Important
10602
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
Click to Run
11573
11574
11577
11578
No
Security Update
https://aka.ms/OfficeSecurityReleases
Click to Run
11573
11574
11577
11578
No
Security Update
4475513
https://www.microsoft.com/download/details.aspx?familyid=585f0638-8421-443e-875a-db5b8ee2a1f9
4462236
10739
10740
Maybe
Security Update
4475513
https://www.microsoft.com/download/details.aspx?familyid=b5107be5-cf08-4e32-be3c-9a8fb511a7ea
4462236
10739
10740
Maybe
Security Update
4461539
https://www.microsoft.com/downloads/details.aspx?familyid=dc5f3667-0f17-4803-9779-67934b2f5d1d
4022232
10753
10754
Maybe
Security Update
4461539
https://www.microsoft.com/downloads/details.aspx?familyid=dcf00b41-54ce-42b3-83bd-eeeacae19fb4
4022232
10753
10754
Maybe
Security Update
4464572
https://www.microsoft.com/download/details.aspx?familyid=5b247447-4314-4018-9bcd-9fdba4256ba9
4462230
10489
10490
Maybe
Security Update
4464572
https://www.microsoft.com/download/details.aspx?familyid=364ad496-3e27-46d9-99df-724be700b14c
4462230
10489
10490
Maybe
Security Update
4464565
4462209
10656
10654
10655
Maybe
Security Update
4464565
https://www.microsoft.com/download/details.aspx?familyid=2e4b0b2b-ecc5-4923-99e8-8f512c4993f1
4462209
10656
10654
10655
Maybe
Security Update
4464565
https://www.microsoft.com/download/details.aspx?familyid=74c4ad5e-f71c-4da2-8a5b-c157a67962bf
4462209
10656
10654
10655
Maybe
Security Update
4462224
https://www.microsoft.com/downloads/details.aspx?familyid=c089ae53-2803-4ffc-98c4-7ab9028eb218
4462177
10521
10522
Maybe
Security Update
4462224
https://www.microsoft.com/downloads/details.aspx?familyid=9f507ec4-67f4-4b59-be59-4c01763f0b61
4462177
10521
10522
Maybe
Security Update
4464543
4022237
10603
10601
10602
Maybe
Security Update
4464543
https://www.microsoft.com/downloads/details.aspx?familyid=b23e0388-12c9-417a-98df-65b124eb102f
4022237
10603
10601
10602
Maybe
Security Update
4464543
https://www.microsoft.com/downloads/details.aspx?familyid=8d09f47d-821d-41c6-9257-eba6e860ad3b
4022237
10603
10601
10602
Maybe
Security Update
yingxinlei working with <a href="https://www.zerodayinitiative.com/">Trend Micro's Zero Day Initiative</a>
1.0
2019-07-09T07:00:00
<p>Information published.</p>
Microsoft Excel Information Disclosure Vulnerability
<p>An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory. An attacker who exploited the vulnerability could use the information to compromise the user’s computer or data.</p>
<p>To exploit the vulnerability, an attacker could craft a special document file and then convince the user to open it. An attacker must know the memory address location where the object was created.</p>
<p>The update addresses the vulnerability by changing the way certain Excel functions handle objects in memory.</p>
<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>
<p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is unauthorized file system access - reading from the file system.</p>
<p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p>
<p>No, the Preview Pane is not an attack vector.</p>
Microsoft Office
Microsoft
CVE-2019-1112
11573
11574
11577
11578
Information Disclosure
11573
Information Disclosure
11574
Information Disclosure
11577
Information Disclosure
11578
Important
11573
Important
11574
Important
11577
Important
11578
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A
Click to Run
11573
11574
11577
11578
No
Security Update
https://aka.ms/OfficeSecurityReleases
Click to Run
11573
11574
11577
11578
No
Security Update
Jaanus Kp, Clarified Security working with <a href="https://www.zerodayinitiative.com/">Trend Micro's Zero Day Initiative</a>
1.0
2019-07-09T07:00:00
<p>Information published.</p>
.NET Framework Remote Code Execution Vulnerability
<p>A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.</p>
<p>An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an attacker could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.</p>
<p>Exploitation of the vulnerability requires that a user open a specially crafted file with an affected version of .NET Framework. In an email attack scenario, an attacker could exploit the vulnerability by sending the specially crafted file to the user and convincing the user to open the file.</p>
<p>The security update addresses the vulnerability by correcting how .NET Framework checks the source markup of a file.</p>
<p><strong>There are two updates for .NET Framework 3.5 installed on Windows 10 version 1809 and Windows Server 2019. How do I know which update I need to install?</strong></p>
<p>The security updates for Windows 10 version 1809 and Windows Server 2019 include both .NET Framework 3.5 and 4.7.2 or 4.8. Customers running these versions of Windows 10 need to determine if they are also running .NET Framework 4.7.2 or .NET Framework 4.8. Install the security update that includes that second version of .NET Framework.</p>
.NET Framework
Microsoft
CVE-2019-1113
11505
11600
11658
11678
11518-10729
11518-10735
11529-10047
11529-10048
11529-10481
11529-10482
11529-10484
11529-10051
11529-10049
11529-10378
11529-10379
11529-10483
11529-10543
10728-9312
10728-9318
9292-9312
9292-9311
9292-9318
9195-9312
9195-9311
9195-9318
2472-10951
2472-10952
2472-11497
2472-11498
2472-11499
2472-11453
2472-11454
2472-10729
2472-10735
2472-10852
2472-10853
2472-10816
2472-10855
2472-10481
2472-10482
2472-10378
2472-10379
2472-10483
2472-10543
9495-10047
9495-10048
9495-10050
9495-10051
9495-10049
10636-10047
10636-10048
10636-10481
10636-10482
10636-10484
10636-9312
10636-9318
10636-10051
10636-10049
10636-10378
10636-10379
10636-10483
10636-10543
11650-10951
11650-10952
11650-11497
11650-11498
11650-11499
11650-11453
11650-11454
11650-10852
11650-10853
11650-10816
11650-10855
11650-10047
11650-10048
11650-10481
11650-10482
11650-10484
11650-10051
11650-10049
11650-10378
11650-10379
11650-10483
11650-10543
11676-11568
11677-11569
11676-11569
11677-11568
11676-11571
11677-11571
11676-11644
11677-11572
11676-11572
11676-11647
11676-11645
Remote Code Execution
11505
Remote Code Execution
11600
Remote Code Execution
11658
Remote Code Execution
11678
Remote Code Execution
11518-10729
Remote Code Execution
11518-10735
Remote Code Execution
11529-10047
Remote Code Execution
11529-10048
Remote Code Execution
11529-10481
Remote Code Execution
11529-10482
Remote Code Execution
11529-10484
Remote Code Execution
11529-10051
Remote Code Execution
11529-10049
Remote Code Execution
11529-10378
Remote Code Execution
11529-10379
Remote Code Execution
11529-10483
Remote Code Execution
11529-10543
Remote Code Execution
10728-9312
Remote Code Execution
10728-9318
Remote Code Execution
9292-9312
Remote Code Execution
9292-9311
Remote Code Execution
9292-9318
Remote Code Execution
9195-9312
Remote Code Execution
9195-9311
Remote Code Execution
9195-9318
Remote Code Execution
2472-10951
Remote Code Execution
2472-10952
Remote Code Execution
2472-11497
Remote Code Execution
2472-11498
Remote Code Execution
2472-11499
Remote Code Execution
2472-11453
Remote Code Execution
2472-11454
Remote Code Execution
2472-10729
Remote Code Execution
2472-10735
Remote Code Execution
2472-10852
Remote Code Execution
2472-10853
Remote Code Execution
2472-10816
Remote Code Execution
2472-10855
Remote Code Execution
2472-10481
Remote Code Execution
2472-10482
Remote Code Execution
2472-10378
Remote Code Execution
2472-10379
Remote Code Execution
2472-10483
Remote Code Execution
2472-10543
Remote Code Execution
9495-10047
Remote Code Execution
9495-10048
Remote Code Execution
9495-10050
Remote Code Execution
9495-10051
Remote Code Execution
9495-10049
Remote Code Execution
10636-10047
Remote Code Execution
10636-10048
Remote Code Execution
10636-10481
Remote Code Execution
10636-10482
Remote Code Execution
10636-10484
Remote Code Execution
10636-9312
Remote Code Execution
10636-9318
Remote Code Execution
10636-10051
Remote Code Execution
10636-10049
Remote Code Execution
10636-10378
Remote Code Execution
10636-10379
Remote Code Execution
10636-10483
Remote Code Execution
10636-10543
Remote Code Execution
11650-10951
Remote Code Execution
11650-10952
Remote Code Execution
11650-11497
Remote Code Execution
11650-11498
Remote Code Execution
11650-11499
Remote Code Execution
11650-11453
Remote Code Execution
11650-11454
Remote Code Execution
11650-10852
Remote Code Execution
11650-10853
Remote Code Execution
11650-10816
Remote Code Execution
11650-10855
Remote Code Execution
11650-10047
Remote Code Execution
11650-10048
Remote Code Execution
11650-10481
Remote Code Execution
11650-10482
Remote Code Execution
11650-10484
Remote Code Execution
11650-10051
Remote Code Execution
11650-10049
Remote Code Execution
11650-10378
Remote Code Execution
11650-10379
Remote Code Execution
11650-10483
Remote Code Execution
11650-10543
Remote Code Execution
11676-11568
Remote Code Execution
11677-11569
Remote Code Execution
11676-11569
Remote Code Execution
11677-11568
Remote Code Execution
11676-11571
Remote Code Execution
11677-11571
Remote Code Execution
11676-11644
Remote Code Execution
11677-11572
Remote Code Execution
11676-11572
Remote Code Execution
11676-11647
Remote Code Execution
11676-11645
Critical
11505
Critical
11600
Critical
11658
Critical
11678
Critical
11518-10729
Critical
11518-10735
Critical
11529-10047
Critical
11529-10048
Critical
11529-10481
Critical
11529-10482
Critical
11529-10484
Critical
11529-10051
Critical
11529-10049
Critical
11529-10378
Critical
11529-10379
Critical
11529-10483
Critical
11529-10543
Critical
10728-9312
Critical
10728-9318
Critical
9292-9312
Critical
9292-9311
Critical
9292-9318
Critical
9195-9312
Critical
9195-9311
Critical
9195-9318
Critical
2472-10951
Critical
2472-10952
Critical
2472-11497
Critical
2472-11498
Critical
2472-11499
Critical
2472-11453
Critical
2472-11454
Critical
2472-10729
Critical
2472-10735
Critical
2472-10852
Critical
2472-10853
Critical
2472-10816
Critical
2472-10855
Critical
2472-10481
Critical
2472-10482
Critical
2472-10378
Critical
2472-10379
Critical
2472-10483
Critical
2472-10543
Critical
9495-10047
Critical
9495-10048
Critical
9495-10050
Critical
9495-10051
Critical
9495-10049
Critical
10636-10047
Critical
10636-10048
Critical
10636-10481
Critical
10636-10482
Critical
10636-10484
Critical
10636-9312
Critical
10636-9318
Critical
10636-10051
Critical
10636-10049
Critical
10636-10378
Critical
10636-10379
Critical
10636-10483
Critical
10636-10543
Critical
11650-10951
Critical
11650-10952
Critical
11650-11497
Critical
11650-11498
Critical
11650-11499
Critical
11650-11453
Critical
11650-11454
Critical
11650-10852
Critical
11650-10853
Critical
11650-10816
Critical
11650-10855
Critical
11650-10047
Critical
11650-10048
Critical
11650-10481
Critical
11650-10482
Critical
11650-10484
Critical
11650-10051
Critical
11650-10049
Critical
11650-10378
Critical
11650-10379
Critical
11650-10483
Critical
11650-10543
Critical
11676-11568
Critical
11677-11569
Critical
11676-11569
Critical
11677-11568
Critical
11676-11571
Critical
11677-11571
Critical
11676-11644
Critical
11677-11572
Critical
11676-11572
Critical
11676-11647
Critical
11676-11645
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A
Release Notes
https://my.visualstudio.com/Downloads?q=Visual Studio 2017 version 15.0
11505
11600
11658
11678
Maybe
Security Update
Release Notes
http://aka.ms/vs/15/release/latest
11505
11600
11658
11678
Maybe
Security Update
Release Notes
https://my.visualstudio.com/Downloads?q=Visual Studio 2019 version 16.0
11505
11600
11658
11678
Maybe
Security Update
Release Notes
https://aka.ms/vs/16/release/latest
11505
11600
11658
11678
Maybe
Security Update
4507458
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507458
4503291
11518-10729
11518-10735
2472-10729
2472-10735
Yes
Security Update
4507458
https://support.microsoft.com/help/4507458
11518-10729
11518-10735
2472-10729
2472-10735
4507420
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4506997
11529-10047
11529-10048
11529-10051
11529-10049
9495-10047
9495-10048
9495-10050
9495-10051
9495-10049
10636-10047
10636-10048
10636-10051
10636-10049
11650-10047
11650-10048
11650-10051
11650-10049
Maybe
Monthly Rollup
4507411
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4506963
11529-10047
11529-10048
11529-10051
11529-10049
9495-10047
9495-10048
9495-10050
9495-10051
9495-10049
10636-10047
10636-10048
10636-10051
10636-10049
11650-10047
11650-10048
11650-10051
11650-10049
Maybe
Security Only
4507422
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4506999
4499408; 4503867
11529-10481
11529-10482
11529-10484
11529-10483
11529-10543
2472-10481
2472-10482
2472-10483
2472-10543
10636-10481
10636-10482
10636-10484
10636-10483
10636-10543
11650-10481
11650-10482
11650-10484
11650-10483
11650-10543
Maybe
Monthly Rollup
4507413
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4506962
11529-10481
11529-10482
11529-10483
11529-10543
2472-10481
2472-10482
2472-10483
2472-10543
10636-10481
10636-10482
10636-10483
10636-10543
11650-10481
11650-10482
11650-10483
11650-10543
Maybe
Security Only
4507422
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4506996
4499408; 4503867
11529-10481
11529-10482
11529-10484
11529-10483
11529-10543
2472-10481
2472-10482
2472-10483
2472-10543
10636-10481
10636-10482
10636-10484
10636-10483
10636-10543
11650-10481
11650-10482
11650-10484
11650-10483
11650-10543
Maybe
Monthly Rollup
4507422
4499408; 4503867
11529-10481
11529-10482
11529-10484
11529-10483
11529-10543
2472-10481
2472-10482
2472-10483
2472-10543
10636-10481
10636-10482
10636-10484
10636-10483
10636-10543
11650-10481
11650-10482
11650-10484
11650-10483
11650-10543
Maybe
Monthly Rollup
4507421
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4506995
4499407; 4503866
11529-10378
11529-10379
2472-10378
2472-10379
10636-10378
10636-10379
11650-10378
11650-10379
Maybe
Monthly Rollup
4507412
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4506961
11529-10378
11529-10379
2472-10378
2472-10379
10636-10378
10636-10379
11650-10378
11650-10379
Maybe
Security Only
4507423
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4506997
4489489; 4499409
10728-9312
10728-9318
9292-9312
9292-9311
9292-9318
9195-9312
9195-9311
9195-9318
10636-9312
10636-9318
Maybe
Monthly Rollup
4507414
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4506963
10728-9312
10728-9318
9292-9312
9292-9311
9292-9318
9195-9312
9195-9311
9195-9318
10636-9312
10636-9318
Maybe
Security Only
4507423
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507003
4499409; 4503868
10728-9312
10728-9318
9292-9312
9292-9311
9292-9318
9195-9312
9195-9311
9195-9318
10636-9312
10636-9318
Maybe
Monthly Rollup
4507414
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4506975
10728-9312
10728-9318
9292-9312
9292-9311
9292-9318
9195-9312
9195-9311
9195-9318
10636-9312
10636-9318
Maybe
Security Only
4507450
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507450
4503279
2472-10951
2472-10952
Yes
Security Update
4507450
https://support.microsoft.com/help/4507450
2472-10951
2472-10952
4507435
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507435
4503286
2472-11497
2472-11498
2472-11499
Yes
Security Update
4507435
https://support.microsoft.com/help/4507435
2472-11497
2472-11498
2472-11499
4507455
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507455
4503284
2472-11453
2472-11454
Yes
Security Update
4507455
https://support.microsoft.com/help/4507455
2472-11453
2472-11454
4507460
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507460
4503267
2472-10852
2472-10853
2472-10816
2472-10855
Yes
Security Update
4507460
https://support.microsoft.com/help/4507460
2472-10852
2472-10853
2472-10816
2472-10855
4507422
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507005
4499408; 4503867
11529-10481
11529-10482
11529-10484
11529-10483
11529-10543
2472-10481
2472-10482
2472-10483
2472-10543
10636-10481
10636-10482
10636-10484
10636-10483
10636-10543
11650-10481
11650-10482
11650-10484
11650-10483
11650-10543
Maybe
Monthly Rollup
4507413
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4506977
11529-10481
11529-10482
11529-10483
11529-10543
2472-10481
2472-10482
2472-10483
2472-10543
10636-10481
10636-10482
10636-10483
10636-10543
11650-10481
11650-10482
11650-10483
11650-10543
Maybe
Security Only
4507421
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507002
4499407; 4503866
11529-10378
11529-10379
2472-10378
2472-10379
10636-10378
10636-10379
11650-10378
11650-10379
Maybe
Monthly Rollup
4507412
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4506974
11529-10378
11529-10379
2472-10378
2472-10379
10636-10378
10636-10379
11650-10378
11650-10379
Maybe
Security Only
4507420
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507004
4499406; 4503865
11529-10047
11529-10048
11529-10051
11529-10049
9495-10047
9495-10048
9495-10050
9495-10051
9495-10049
10636-10047
10636-10048
10636-10051
10636-10049
11650-10047
11650-10048
11650-10051
11650-10049
Maybe
Monthly Rollup
4507411
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4506976
11529-10047
11529-10048
11529-10051
11529-10049
9495-10047
9495-10048
9495-10050
9495-10051
9495-10049
10636-10047
10636-10048
10636-10051
10636-10049
11650-10047
11650-10048
11650-10051
11650-10049
Maybe
Security Only
4507420
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507001
4503865
11529-10047
11529-10048
11529-10051
11529-10049
9495-10047
9495-10048
9495-10050
9495-10051
9495-10049
10636-10047
10636-10048
10636-10051
10636-10049
11650-10047
11650-10048
11650-10051
11650-10049
Maybe
Monthly Rollup
4507411
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4506966
11529-10047
11529-10048
11529-10051
11529-10049
9495-10047
9495-10048
9495-10050
9495-10051
9495-10049
10636-10047
10636-10048
10636-10051
10636-10049
11650-10047
11650-10048
11650-10051
11650-10049
Maybe
Security Only
4507413
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4506964
11529-10481
11529-10482
11529-10483
11529-10543
2472-10481
2472-10482
2472-10483
2472-10543
10636-10481
10636-10482
10636-10483
10636-10543
11650-10481
11650-10482
11650-10483
11650-10543
Maybe
Security Only
4507423
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507001
4489489; 4499409
10728-9312
10728-9318
9292-9312
9292-9311
9292-9318
9195-9312
9195-9311
9195-9318
10636-9312
10636-9318
Maybe
Monthly Rollup
4507414
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4506966
10728-9312
10728-9318
9292-9312
9292-9311
9292-9318
9195-9312
9195-9311
9195-9318
10636-9312
10636-9318
Maybe
Security Only
4507421
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507000
4499407; 4503866
11529-10378
11529-10379
2472-10378
2472-10379
10636-10378
10636-10379
11650-10378
11650-10379
Maybe
Monthly Rollup
4507412
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4506965
11529-10378
11529-10379
2472-10378
2472-10379
10636-10378
10636-10379
11650-10378
11650-10379
Maybe
Security Only
4506987
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4506987
4495611; 4502561
11650-10951
Maybe
Security Update
4506986
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4506986
4495610; 4502560
11650-10952
11650-11454
11650-10852
11650-10853
11650-10816
11650-10855
Maybe
Security Update
4506989
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4506989
4495616; 4502563
11650-11497
11650-11498
11650-11499
Maybe
Security Update
4506988
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4506988
4495613; 4502562
11650-11453
Maybe
Security Update
4507420
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4506994
4499406; 4503865
11529-10047
11529-10048
11529-10051
11529-10049
9495-10047
9495-10048
9495-10050
9495-10051
9495-10049
10636-10047
10636-10048
10636-10051
10636-10049
11650-10047
11650-10048
11650-10051
11650-10049
Maybe
Monthly Rollup
4507411
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4506956
11529-10047
11529-10048
11529-10051
11529-10049
9495-10047
9495-10048
9495-10050
9495-10051
9495-10049
10636-10047
10636-10048
10636-10051
10636-10049
11650-10047
11650-10048
11650-10051
11650-10049
Maybe
Security Only
4507422
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4506993
4499408; 4503867
11529-10481
11529-10482
11529-10484
11529-10483
11529-10543
2472-10481
2472-10482
2472-10483
2472-10543
10636-10481
10636-10482
10636-10484
10636-10483
10636-10543
11650-10481
11650-10482
11650-10484
11650-10483
11650-10543
Maybe
Monthly Rollup
4507413
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4506955
11529-10481
11529-10482
11529-10483
11529-10543
2472-10481
2472-10482
2472-10483
2472-10543
10636-10481
10636-10482
10636-10483
10636-10543
11650-10481
11650-10482
11650-10483
11650-10543
Maybe
Security Only
4507421
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4506992
4499407; 4503866
11529-10378
11529-10379
2472-10378
2472-10379
10636-10378
10636-10379
11650-10378
11650-10379
Maybe
Monthly Rollup
4507412
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4506954
11529-10378
11529-10379
2472-10378
2472-10379
10636-10378
10636-10379
11650-10378
11650-10379
Maybe
Security Only
4507419
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4506990
4486553; 4499405; 4503864
11676-11568
11677-11569
11676-11569
11677-11568
11676-11571
11677-11571
11677-11572
11676-11572
Maybe
Security Update
4507419
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4506998
4486553; 4499405; 4503864
11676-11568
11677-11569
11676-11569
11677-11568
11676-11571
11677-11571
11677-11572
11676-11572
Maybe
Security Update
4506991
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4506991
4495620; 4502584
11676-11644
11676-11647
11676-11645
Maybe
Security Update
Saif El-Sherei of Microsoft Corporation
1.0
2019-07-09T07:00:00
<p>Information published.</p>
Windows GDI Information Disclosure Vulnerability
<p>An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.</p>
<p>There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document, or by convincing a user to visit an untrusted webpage.</p>
<p>The security update addresses the vulnerability by correcting how the Windows GDI component handles objects in memory.</p>
<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>
<p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is memory layout - the vulnerability allows an attacker to collect information that facilitates predicting addressing of the memory.</p>
Microsoft Graphics Component
Microsoft
CVE-2019-1116
10047
10048
9312
10287
9311
9318
9344
10050
10051
10049
Information Disclosure
10047
Information Disclosure
10048
Information Disclosure
9312
Information Disclosure
10287
Information Disclosure
9311
Information Disclosure
9318
Information Disclosure
9344
Information Disclosure
10050
Information Disclosure
10051
Information Disclosure
10049
Important
10047
Important
10048
Important
9312
Important
10287
Important
9311
Important
9318
Important
9344
Important
10050
Important
10051
Important
10049
Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A;Older Software Release:Exploitation Less Likely;DOS:N/A
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10047
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10048
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9312
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10287
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9311
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9318
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9344
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10050
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10051
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10049
4507449
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507449
4503292
10047
10048
10050
10051
10049
Yes
Monthly Rollup
4507449
https://support.microsoft.com/help/4507449
10047
10048
10050
10051
10049
4507456
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507456
10047
10048
10050
10051
10049
Yes
Security Only
4507452
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507452
4503273
9312
10287
9311
9318
9344
Yes
Monthly Rollup
4507461
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507461
9312
10287
9311
9318
9344
Yes
Security Only
kdot working with <a href="https://www.zerodayinitiative.com/">Trend Micro's Zero Day Initiative</a>
1.0
2019-07-09T07:00:00
<p>Information published.</p>
DirectWrite Remote Code Execution Vulnerability
<p>A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document, or by convincing a user to visit an untrusted webpage.</p>
<p>The security update addresses the vulnerability by correcting how DirectWrite handles objects in memory.</p>
Microsoft Graphics Component
Microsoft
CVE-2019-1117
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
Remote Code Execution
11497
Remote Code Execution
11498
Remote Code Execution
11499
Remote Code Execution
11563
Remote Code Execution
11568
Remote Code Execution
11569
Remote Code Execution
11570
Remote Code Execution
11571
Remote Code Execution
11572
Remote Code Execution
11453
Remote Code Execution
11454
Remote Code Execution
11583
Remote Code Execution
11644
Remote Code Execution
11645
Remote Code Execution
11646
Remote Code Execution
11647
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11497
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11498
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11499
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11563
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11453
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11454
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11583
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11644
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11645
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11646
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11647
4507435
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507435
4503286
11497
11498
11499
11563
Yes
Security Update
4507435
https://support.microsoft.com/help/4507435
11497
11498
11499
11563
4507469
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507469
4503327
11568
11569
11570
11571
11572
Yes
Security Update
4507469
https://support.microsoft.com/help/4507469
11568
11569
11570
11571
11572
4507455
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507455
4503284
11453
11454
11583
Yes
Security Update
4507455
https://support.microsoft.com/help/4507455
11453
11454
11583
4507453
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507453
4503293
11644
11645
11646
11647
Yes
Security Update
4507453
https://support.microsoft.com/help/4507453
11644
11645
11646
11647
Mateusz Jurczyk of <a href="https://www.google.com">Google Project Zero</a>
1.0
2019-07-09T07:00:00
<p>Information published.</p>
DirectWrite Remote Code Execution Vulnerability
<p>A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document, or by convincing a user to visit an untrusted webpage.</p>
<p>The security update addresses the vulnerability by correcting how DirectWrite handles objects in memory.</p>
Microsoft Graphics Component
Microsoft
CVE-2019-1118
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
Remote Code Execution
11497
Remote Code Execution
11498
Remote Code Execution
11499
Remote Code Execution
11563
Remote Code Execution
11568
Remote Code Execution
11569
Remote Code Execution
11570
Remote Code Execution
11571
Remote Code Execution
11572
Remote Code Execution
11453
Remote Code Execution
11454
Remote Code Execution
11583
Remote Code Execution
11644
Remote Code Execution
11645
Remote Code Execution
11646
Remote Code Execution
11647
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11497
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11498
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11499
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11563
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11453
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11454
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11583
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11644
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11645
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11646
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11647
4507435
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507435
4503286
11497
11498
11499
11563
Yes
Security Update
4507435
https://support.microsoft.com/help/4507435
11497
11498
11499
11563
4507469
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507469
4503327
11568
11569
11570
11571
11572
Yes
Security Update
4507469
https://support.microsoft.com/help/4507469
11568
11569
11570
11571
11572
4507455
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507455
4503284
11453
11454
11583
Yes
Security Update
4507455
https://support.microsoft.com/help/4507455
11453
11454
11583
4507453
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507453
4503293
11644
11645
11646
11647
Yes
Security Update
4507453
https://support.microsoft.com/help/4507453
11644
11645
11646
11647
Mateusz Jurczyk of <a href="https://www.google.com">Google Project Zero</a>
1.0
2019-07-09T07:00:00
<p>Information published.</p>
DirectWrite Remote Code Execution Vulnerability
<p>A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document, or by convincing a user to visit an untrusted webpage.</p>
<p>The security update addresses the vulnerability by correcting how DirectWrite handles objects in memory.</p>
Microsoft Graphics Component
Microsoft
CVE-2019-1119
11497
11498
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
Remote Code Execution
11497
Remote Code Execution
11498
Remote Code Execution
11563
Remote Code Execution
11568
Remote Code Execution
11569
Remote Code Execution
11570
Remote Code Execution
11571
Remote Code Execution
11572
Remote Code Execution
11453
Remote Code Execution
11454
Remote Code Execution
11583
Remote Code Execution
11644
Remote Code Execution
11645
Remote Code Execution
11646
Important
11497
Important
11498
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11497
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11498
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11563
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11453
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11454
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11583
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11644
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11645
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11646
4507435
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507435
4503286
11497
11498
11563
Yes
Security Update
4507435
https://support.microsoft.com/help/4507435
11497
11498
11563
4507469
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507469
4503327
11568
11569
11570
11571
11572
Yes
Security Update
4507469
https://support.microsoft.com/help/4507469
11568
11569
11570
11571
11572
4507455
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507455
4503284
11453
11454
11583
Yes
Security Update
4507455
https://support.microsoft.com/help/4507455
11453
11454
11583
4507453
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507453
4503293
11644
11645
11646
Yes
Security Update
4507453
https://support.microsoft.com/help/4507453
11644
11645
11646
Mateusz Jurczyk of <a href="https://www.google.com">Google Project Zero</a>
1.0
2019-07-09T07:00:00
<p>Information published.</p>
DirectWrite Remote Code Execution Vulnerability
<p>A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document, or by convincing a user to visit an untrusted webpage.</p>
<p>The security update addresses the vulnerability by correcting how DirectWrite handles objects in memory.</p>
Microsoft Graphics Component
Microsoft
CVE-2019-1120
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
Remote Code Execution
11497
Remote Code Execution
11498
Remote Code Execution
11499
Remote Code Execution
11563
Remote Code Execution
11568
Remote Code Execution
11569
Remote Code Execution
11570
Remote Code Execution
11571
Remote Code Execution
11572
Remote Code Execution
11453
Remote Code Execution
11454
Remote Code Execution
11583
Remote Code Execution
11644
Remote Code Execution
11645
Remote Code Execution
11646
Remote Code Execution
11647
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11497
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11498
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11499
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11563
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11453
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11454
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11583
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11644
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11645
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11646
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11647
4507435
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507435
4503286
11497
11498
11499
11563
Yes
Security Update
4507435
https://support.microsoft.com/help/4507435
11497
11498
11499
11563
4507469
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507469
4503327
11568
11569
11570
11571
11572
Yes
Security Update
4507469
https://support.microsoft.com/help/4507469
11568
11569
11570
11571
11572
4507455
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507455
4503284
11453
11454
11583
Yes
Security Update
4507455
https://support.microsoft.com/help/4507455
11453
11454
11583
4507453
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507453
4503293
11644
11645
11646
11647
Yes
Security Update
4507453
https://support.microsoft.com/help/4507453
11644
11645
11646
11647
Mateusz Jurczyk of <a href="https://www.google.com">Google Project Zero</a>
1.0
2019-07-09T07:00:00
<p>Information published.</p>
DirectWrite Remote Code Execution Vulnerability
<p>A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document, or by convincing a user to visit an untrusted webpage.</p>
<p>The security update addresses the vulnerability by correcting how DirectWrite handles objects in memory.</p>
Microsoft Graphics Component
Microsoft
CVE-2019-1121
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
Remote Code Execution
11497
Remote Code Execution
11498
Remote Code Execution
11499
Remote Code Execution
11563
Remote Code Execution
11568
Remote Code Execution
11569
Remote Code Execution
11570
Remote Code Execution
11571
Remote Code Execution
11572
Remote Code Execution
11453
Remote Code Execution
11454
Remote Code Execution
11583
Remote Code Execution
11644
Remote Code Execution
11645
Remote Code Execution
11646
Remote Code Execution
11647
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11497
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11498
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11499
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11563
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11453
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11454
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11583
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11644
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11645
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11646
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11647
4507435
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507435
4503286
11497
11498
11499
11563
Yes
Security Update
4507435
https://support.microsoft.com/help/4507435
11497
11498
11499
11563
4507469
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507469
4503327
11568
11569
11570
11571
11572
Yes
Security Update
4507469
https://support.microsoft.com/help/4507469
11568
11569
11570
11571
11572
4507455
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507455
4503284
11453
11454
11583
Yes
Security Update
4507455
https://support.microsoft.com/help/4507455
11453
11454
11583
4507453
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507453
4503293
11644
11645
11646
11647
Yes
Security Update
4507453
https://support.microsoft.com/help/4507453
11644
11645
11646
11647
Mateusz Jurczyk of <a href="https://www.google.com">Google Project Zero</a>
1.0
2019-07-09T07:00:00
<p>Information published.</p>
DirectWrite Remote Code Execution Vulnerability
<p>A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document, or by convincing a user to visit an untrusted webpage.</p>
<p>The security update addresses the vulnerability by correcting how DirectWrite handles objects in memory.</p>
Microsoft Graphics Component
Microsoft
CVE-2019-1122
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
Remote Code Execution
11497
Remote Code Execution
11498
Remote Code Execution
11499
Remote Code Execution
11563
Remote Code Execution
11568
Remote Code Execution
11569
Remote Code Execution
11570
Remote Code Execution
11571
Remote Code Execution
11572
Remote Code Execution
11453
Remote Code Execution
11454
Remote Code Execution
11583
Remote Code Execution
11644
Remote Code Execution
11645
Remote Code Execution
11646
Remote Code Execution
11647
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11497
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11498
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11499
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11563
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11453
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11454
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11583
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11644
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11645
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11646
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11647
4507435
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507435
4503286
11497
11498
11499
11563
Yes
Security Update
4507435
https://support.microsoft.com/help/4507435
11497
11498
11499
11563
4507469
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507469
4503327
11568
11569
11570
11571
11572
Yes
Security Update
4507469
https://support.microsoft.com/help/4507469
11568
11569
11570
11571
11572
4507455
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507455
4503284
11453
11454
11583
Yes
Security Update
4507455
https://support.microsoft.com/help/4507455
11453
11454
11583
4507453
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507453
4503293
11644
11645
11646
11647
Yes
Security Update
4507453
https://support.microsoft.com/help/4507453
11644
11645
11646
11647
Mateusz Jurczyk of <a href="https://www.google.com">Google Project Zero</a>
1.0
2019-07-09T07:00:00
<p>Information published.</p>
DirectWrite Remote Code Execution Vulnerability
<p>A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document, or by convincing a user to visit an untrusted webpage.</p>
<p>The security update addresses the vulnerability by correcting how DirectWrite handles objects in memory.</p>
Microsoft Graphics Component
Microsoft
CVE-2019-1123
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
Remote Code Execution
11497
Remote Code Execution
11498
Remote Code Execution
11499
Remote Code Execution
11563
Remote Code Execution
11568
Remote Code Execution
11569
Remote Code Execution
11570
Remote Code Execution
11571
Remote Code Execution
11572
Remote Code Execution
11453
Remote Code Execution
11454
Remote Code Execution
11583
Remote Code Execution
11644
Remote Code Execution
11645
Remote Code Execution
11646
Remote Code Execution
11647
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11497
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11498
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11499
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11563
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11453
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11454
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11583
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11644
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11645
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11646
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11647
4507435
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507435
4503286
11497
11498
11499
11563
Yes
Security Update
4507435
https://support.microsoft.com/help/4507435
11497
11498
11499
11563
4507469
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507469
4503327
11568
11569
11570
11571
11572
Yes
Security Update
4507469
https://support.microsoft.com/help/4507469
11568
11569
11570
11571
11572
4507455
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507455
4503284
11453
11454
11583
Yes
Security Update
4507455
https://support.microsoft.com/help/4507455
11453
11454
11583
4507453
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507453
4503293
11644
11645
11646
11647
Yes
Security Update
4507453
https://support.microsoft.com/help/4507453
11644
11645
11646
11647
Mateusz Jurczyk of <a href="https://www.google.com">Google Project Zero</a>
1.0
2019-07-09T07:00:00
<p>Information published.</p>
DirectWrite Remote Code Execution Vulnerability
<p>A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document, or by convincing a user to visit an untrusted webpage.</p>
<p>The security update addresses the vulnerability by correcting how DirectWrite handles objects in memory.</p>
Microsoft Graphics Component
Microsoft
CVE-2019-1124
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
Remote Code Execution
11497
Remote Code Execution
11498
Remote Code Execution
11499
Remote Code Execution
11563
Remote Code Execution
11568
Remote Code Execution
11569
Remote Code Execution
11570
Remote Code Execution
11571
Remote Code Execution
11572
Remote Code Execution
11453
Remote Code Execution
11454
Remote Code Execution
11583
Remote Code Execution
11644
Remote Code Execution
11645
Remote Code Execution
11646
Remote Code Execution
11647
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11497
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11498
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11499
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11563
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11453
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11454
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11583
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11644
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11645
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11646
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11647
4507435
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507435
4503286
11497
11498
11499
11563
Yes
Security Update
4507435
https://support.microsoft.com/help/4507435
11497
11498
11499
11563
4507469
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507469
4503327
11568
11569
11570
11571
11572
Yes
Security Update
4507469
https://support.microsoft.com/help/4507469
11568
11569
11570
11571
11572
4507455
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507455
4503284
11453
11454
11583
Yes
Security Update
4507455
https://support.microsoft.com/help/4507455
11453
11454
11583
4507453
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507453
4503293
11644
11645
11646
11647
Yes
Security Update
4507453
https://support.microsoft.com/help/4507453
11644
11645
11646
11647
Mateusz Jurczyk of <a href="https://www.google.com">Google Project Zero</a>
1.0
2019-07-09T07:00:00
<p>Information published.</p>
ADFS Security Feature Bypass Vulnerability
<p>A security feature bypass vulnerability exists in Active Directory Federation Services (ADFS) which could allow an attacker to bypass the extranet lockout policy.</p>
<p>To exploit this vulnerability, an attacker could run a specially crafted application, which would allow an attacker to launch a password brute-force attack or cause account lockouts in Active Directory.</p>
<p>This security update corrects how ADFS handles external authentication requests.</p>
Microsoft Windows
Microsoft
CVE-2019-1126
11499
11571
11572
11647
10816
10855
10483
10543
Security Feature Bypass
11499
Security Feature Bypass
11571
Security Feature Bypass
11572
Security Feature Bypass
11647
Security Feature Bypass
10816
Security Feature Bypass
10855
Security Feature Bypass
10483
Security Feature Bypass
10543
Important
11499
Important
11571
Important
11572
Important
11647
Important
10816
Important
10855
Important
10483
Important
10543
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
5.3
4.8
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
11499
5.3
4.8
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
11571
5.3
4.8
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
11572
5.3
4.8
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
11647
5.3
4.8
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10816
5.3
4.8
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10855
5.3
4.8
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10483
5.3
4.8
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10543
4507435
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507435
4503286
11499
Yes
Security Update
4507435
https://support.microsoft.com/help/4507435
11499
4507469
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507469
4503327
11571
11572
Yes
Security Update
4507469
https://support.microsoft.com/help/4507469
11571
11572
4507453
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507453
4503293
11647
Yes
Security Update
4507453
https://support.microsoft.com/help/4507453
11647
4507460
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507460
4503267
10816
10855
Yes
Security Update
4507460
https://support.microsoft.com/help/4507460
10816
10855
4507448
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507448
4503276
10483
10543
Yes
Monthly Rollup
4507448
https://support.microsoft.com/help/4507448
10483
10543
4507457
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507457
10483
10543
Yes
Security Only
4507457
https://support.microsoft.com/help/4507457
10483
10543
Eyal Karni, Marina Simakov and Yaron Zinar from <a href="https://www.preempt.com/">Preempt</a>
1.0
2019-07-09T07:00:00
<p>Information published.</p>
DirectWrite Remote Code Execution Vulnerability
<p>A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document, or by convincing a user to visit an untrusted webpage.</p>
<p>The security update addresses the vulnerability by correcting how DirectWrite handles objects in memory.</p>
Microsoft Graphics Component
Microsoft
CVE-2019-1127
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
Remote Code Execution
11497
Remote Code Execution
11498
Remote Code Execution
11499
Remote Code Execution
11563
Remote Code Execution
11568
Remote Code Execution
11569
Remote Code Execution
11570
Remote Code Execution
11571
Remote Code Execution
11572
Remote Code Execution
11453
Remote Code Execution
11454
Remote Code Execution
11583
Remote Code Execution
11644
Remote Code Execution
11645
Remote Code Execution
11646
Remote Code Execution
11647
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11497
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11498
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11499
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11563
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11453
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11454
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11583
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11644
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11645
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11646
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11647
4507435
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507435
4503286
11497
11498
11499
11563
Yes
Security Update
4507435
https://support.microsoft.com/help/4507435
11497
11498
11499
11563
4507469
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507469
4503327
11568
11569
11570
11571
11572
Yes
Security Update
4507469
https://support.microsoft.com/help/4507469
11568
11569
11570
11571
11572
4507455
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507455
4503284
11453
11454
11583
Yes
Security Update
4507455
https://support.microsoft.com/help/4507455
11453
11454
11583
4507453
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507453
4503293
11644
11645
11646
11647
Yes
Security Update
4507453
https://support.microsoft.com/help/4507453
11644
11645
11646
11647
Mateusz Jurczyk of <a href="https://www.google.com">Google Project Zero</a>
1.0
2019-07-09T07:00:00
<p>Information published.</p>
DirectWrite Remote Code Execution Vulnerability
<p>A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document, or by convincing a user to visit an untrusted webpage.</p>
<p>The security update addresses the vulnerability by correcting how DirectWrite handles objects in memory.</p>
Microsoft Graphics Component
Microsoft
CVE-2019-1128
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
Remote Code Execution
11497
Remote Code Execution
11498
Remote Code Execution
11499
Remote Code Execution
11563
Remote Code Execution
11568
Remote Code Execution
11569
Remote Code Execution
11570
Remote Code Execution
11571
Remote Code Execution
11572
Remote Code Execution
11453
Remote Code Execution
11454
Remote Code Execution
11583
Remote Code Execution
11644
Remote Code Execution
11645
Remote Code Execution
11646
Remote Code Execution
11647
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11497
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11498
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11499
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11563
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11453
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11454
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11583
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11644
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11645
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11646
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11647
4507435
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507435
4503286
11497
11498
11499
11563
Yes
Security Update
4507435
https://support.microsoft.com/help/4507435
11497
11498
11499
11563
4507469
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507469
4503327
11568
11569
11570
11571
11572
Yes
Security Update
4507469
https://support.microsoft.com/help/4507469
11568
11569
11570
11571
11572
4507455
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507455
4503284
11453
11454
11583
Yes
Security Update
4507455
https://support.microsoft.com/help/4507455
11453
11454
11583
4507453
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507453
4503293
11644
11645
11646
11647
Yes
Security Update
4507453
https://support.microsoft.com/help/4507453
11644
11645
11646
11647
Mateusz Jurczyk of <a href="https://www.google.com">Google Project Zero</a>
1.0
2019-07-09T07:00:00
<p>Information published.</p>
Microsoft Office SharePoint XSS Vulnerability
<p>A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint server.</p>
<p>The attacker who successfully exploited the vulnerability could then perform cross-site scripting attacks on affected systems and run script in the security context of the current user. The attacks could allow the attacker to read content that the attacker is not authorized to read, use the victim's identity to take actions on the SharePoint site on behalf of the user, such as change permissions and delete content, and inject malicious content in the browser of the user.</p>
<p>The security update addresses the vulnerability by helping to ensure that SharePoint Server properly sanitizes web requests.</p>
<p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p>
<p>No, the Preview Pane is not an attack vector.</p>
Microsoft Office SharePoint
Microsoft
CVE-2019-1134
10950
11099
11585
Spoofing
10950
Spoofing
11099
Spoofing
11585
Important
10950
Important
11099
Important
11585
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
4475520
https://www.microsoft.com/downloads/details.aspx?familyid=e11d0034-16b1-4d30-9618-315d549d048f
4464594
10950
Maybe
Security Update
4475522
https://www.microsoft.com/downloads/details.aspx?familyid=e19207d9-3e44-4f3e-addf-e02d2b459f28
4464597
11099
Maybe
Security Update
4475529
https://www.microsoft.com/downloads/details.aspx?familyid=8a2923d5-6963-41d3-94dd-24a987ae5df7
4475512
11585
Maybe
Security Update
Huynh Phuoc Hung, <a href="https://twitter.com/hph0var">@hph0var</a>
1.0
2019-07-09T07:00:00
<p>Information published.</p>
Windows DHCP Server Remote Code Execution Vulnerability
<p>A memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends specially crafted packets to a DHCP failover server. An attacker who successfully exploited the vulnerability could either run arbitrary code on the DHCP failover server or cause the DHCP service to become nonresponsive.</p>
<p>To exploit the vulnerability, an attacker could send a specially crafted packet to a DHCP server. However, the DHCP server must be set to failover mode for the attack to succeed.</p>
<p>The security update addresses the vulnerability by correcting how DHCP failover servers handle network packets.</p>
Microsoft Windows
Microsoft
CVE-2019-0785
11499
11571
11572
10816
10855
10378
10379
10483
10543
11647
Remote Code Execution
11499
Remote Code Execution
11571
Remote Code Execution
11572
Remote Code Execution
10816
Remote Code Execution
10855
Remote Code Execution
10378
Remote Code Execution
10379
Remote Code Execution
10483
Remote Code Execution
10543
Remote Code Execution
11647
Critical
11499
Critical
11571
Critical
11572
Critical
10816
Critical
10855
Critical
10378
Critical
10379
Critical
10483
Critical
10543
Critical
11647
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
9.8
8.8
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11499
9.8
8.8
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
9.8
8.8
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
9.8
8.8
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10816
9.8
8.8
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10855
9.8
8.8
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10378
9.8
8.8
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10379
9.8
8.8
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10483
9.8
8.8
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10543
9.8
8.8
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11647
4507435
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507435
4503286
11499
Yes
Security Update
4507435
https://support.microsoft.com/help/4507435
11499
4507469
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507469
4503327
11571
11572
Yes
Security Update
4507469
https://support.microsoft.com/help/4507469
11571
11572
4507460
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507460
4503267
10816
10855
Yes
Security Update
4507460
https://support.microsoft.com/help/4507460
10816
10855
4507462
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507462
4503285
10378
10379
Yes
Monthly Rollup
4507462
https://support.microsoft.com/help/4507462
10378
10379
4507464
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507464
10378
10379
Yes
Security Only
4507464
https://support.microsoft.com/help/4507464
10378
10379
4507448
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507448
4503276
10483
10543
Yes
Monthly Rollup
4507448
https://support.microsoft.com/help/4507448
10483
10543
4507457
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507457
10483
10543
Yes
Security Only
4507457
https://support.microsoft.com/help/4507457
10483
10543
4507453
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507453
4503293
11647
Yes
Security Update
4507453
https://support.microsoft.com/help/4507453
11647
Microsoft Windows Enterprise Security Team
1.0
2019-07-09T07:00:00
<p>Information published.</p>
Windows DNS Server Denial of Service Vulnerability
<p>A denial of service vulnerability exists in Windows DNS Server when it fails to properly handle DNS queries. An attacker who successfully exploited this vulnerability could cause the DNS Server service to become nonresponsive.</p>
<p>To exploit the vulnerability, an unauthenticated attacker could send malicious DNS queries to an affected server, resulting in a denial of service. However, the DNS server must be configured to use DNS Analytical Logging for the attack to succeed.</p>
<p>The update addresses the vulnerability by correcting how Windows DNS Server processes DNS queries.</p>
Microsoft Windows DNS
Microsoft
CVE-2019-0811
11499
11571
11572
10816
10855
10483
10543
11647
Denial of Service
11499
Denial of Service
11571
Denial of Service
11572
Denial of Service
10816
Denial of Service
10855
Denial of Service
10483
Denial of Service
10543
Denial of Service
11647
Important
11499
Important
11571
Important
11572
Important
10816
Important
10855
Important
10483
Important
10543
Important
11647
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.5
6.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
11499
7.5
6.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
11571
7.5
6.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
11572
7.5
6.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
10816
7.5
6.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
10855
7.5
6.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
10483
7.5
6.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
10543
7.5
6.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
11647
4507435
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507435
4503286
11499
Yes
Security Update
4507435
https://support.microsoft.com/help/4507435
11499
4507469
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507469
4503327
11571
11572
Yes
Security Update
4507469
https://support.microsoft.com/help/4507469
11571
11572
4507460
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507460
4503267
10816
10855
Yes
Security Update
4507460
https://support.microsoft.com/help/4507460
10816
10855
4507448
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507448
4503276
10483
10543
Yes
Monthly Rollup
4507448
https://support.microsoft.com/help/4507448
10483
10543
4507457
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507457
10483
10543
Yes
Security Only
4507457
https://support.microsoft.com/help/4507457
10483
10543
4507453
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507453
4503293
11647
Yes
Security Update
4507453
https://support.microsoft.com/help/4507453
11647
1.0
2019-07-09T07:00:00
<p>Information published.</p>
Microsoft splwow64 Elevation of Privilege Vulnerability
<p>A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls. An attacker who successfully exploited the vulnerability could elevate privileges on an affected system from low-integrity to medium-integrity.</p>
<p>This vulnerability by itself does not allow arbitrary code execution; however, it could allow arbitrary code to be run if the attacker uses it in combination with another vulnerability (such as a remote code execution vulnerability or another elevation of privilege vulnerability) that is capable of leveraging the elevated privileges when code execution is attempted.</p>
<p>The security update addresses the vulnerability by ensuring splwow64.exe properly handles these calls..</p>
Microsoft Windows
Microsoft
CVE-2019-0880
10951
10952
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
10729
10735
10852
10853
10816
10855
10481
10482
10484
10378
10379
10483
10543
Elevation of Privilege
10951
Elevation of Privilege
10952
Elevation of Privilege
11497
Elevation of Privilege
11498
Elevation of Privilege
11499
Elevation of Privilege
11563
Elevation of Privilege
11568
Elevation of Privilege
11569
Elevation of Privilege
11570
Elevation of Privilege
11571
Elevation of Privilege
11572
Elevation of Privilege
11453
Elevation of Privilege
11454
Elevation of Privilege
11583
Elevation of Privilege
11644
Elevation of Privilege
11645
Elevation of Privilege
11646
Elevation of Privilege
11647
Elevation of Privilege
10729
Elevation of Privilege
10735
Elevation of Privilege
10852
Elevation of Privilege
10853
Elevation of Privilege
10816
Elevation of Privilege
10855
Elevation of Privilege
10481
Elevation of Privilege
10482
Elevation of Privilege
10484
Elevation of Privilege
10378
Elevation of Privilege
10379
Elevation of Privilege
10483
Elevation of Privilege
10543
Important
10951
Important
10952
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10481
Important
10482
Important
10484
Important
10378
Important
10379
Important
10483
Important
10543
Publicly Disclosed:No;Exploited:Yes;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation Detected;DOS:N/A
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10951
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10952
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11497
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11498
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11499
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11563
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11453
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11454
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11583
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11644
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11645
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11646
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11647
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10729
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10735
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10852
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10853
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10816
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10855
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10481
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10482
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10484
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10378
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10379
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10483
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10543
4507450
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507450
4503279
10951
10952
Yes
Security Update
4507450
https://support.microsoft.com/help/4507450
10951
10952
4507435
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507435
4503286
11497
11498
11499
11563
Yes
Security Update
4507435
https://support.microsoft.com/help/4507435
11497
11498
11499
11563
4507469
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507469
4503327
11568
11569
11570
11571
11572
Yes
Security Update
4507469
https://support.microsoft.com/help/4507469
11568
11569
11570
11571
11572
4507455
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507455
4503284
11453
11454
11583
Yes
Security Update
4507455
https://support.microsoft.com/help/4507455
11453
11454
11583
4507453
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507453
4503293
11644
11645
11646
11647
Yes
Security Update
4507453
https://support.microsoft.com/help/4507453
11644
11645
11646
11647
4507458
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507458
4503291
10729
10735
Yes
Security Update
4507458
https://support.microsoft.com/help/4507458
10729
10735
4507460
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507460
4503267
10852
10853
10816
10855
Yes
Security Update
4507460
https://support.microsoft.com/help/4507460
10852
10853
10816
10855
4507448
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507448
4503276
10481
10482
10484
10483
10543
Yes
Monthly Rollup
4507448
https://support.microsoft.com/help/4507448
10481
10482
10484
10483
10543
4507457
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507457
10481
10482
10483
10543
Yes
Security Only
4507457
https://support.microsoft.com/help/4507457
10481
10482
10483
10543
4507448
4503276
10481
10482
10484
10483
10543
Yes
Monthly Rollup
4507448
https://support.microsoft.com/help/4507448
10481
10482
10484
10483
10543
4507462
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507462
4503285
10378
10379
Yes
Monthly Rollup
4507462
https://support.microsoft.com/help/4507462
10378
10379
4507464
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507464
10378
10379
Yes
Security Only
4507464
https://support.microsoft.com/help/4507464
10378
10379
<a href="https://resecurity.com/">Gene Yoo</a> of Resecurity, Inc.
1.0
2019-07-09T07:00:00
<p>Information published.</p>
Azure Automation Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists in Azure Automation “RunAs account” runbooks for users with contributor role. This vulnerability could potentially allow members of an organization to access Key Vault secrets through a runbook, even if these members would personally not have access to that Key Vault.</p>
<p>To exploit this vulnerability, an attacker must be a member of an organization who can run runbooks, with only global admins/co-admins who can create the “run as” account.</p>
<p>Microsoft is addressing the vulnerability by providing the following scripts for existing RunAsAutomation accounts that modify existing roles by excluding access to KeyVault within Azure Automation account.</p>
<ul>
<li><a href="https://www.powershellgallery.com/packages/Check-AutomationRunAsAccountRoleAssignments">https://www.powershellgallery.com/packages/Check-AutomationRunAsAccountRoleAssignments</a></li>
<li><a href="https://www.powershellgallery.com/packages/Update-AutomationRunAsAccountRoleAssignments">https://www.powershellgallery.com/packages/Update-AutomationRunAsAccountRoleAssignments</a></li>
<li><a href="https://www.powershellgallery.com/packages/Extend-AutomationRunAsAccountRoleAssignmentToKeyVault">https://www.powershellgallery.com/packages/Extend-AutomationRunAsAccountRoleAssignmentToKeyVault</a></li>
</ul>
<p><strong>1. What is Azure Automation?</strong></p>
<p>Azure Automation is an Azure service which executes PowerShell and Python runbooks on behalf of a user. As part of the Azure Automation service, a “RunAs account” may be created. The “RunAs account” is a Service Principal – an Azure Active Directory app which can execute actions on a user’s behalf. Azure Automation can use RunAs accounts inside of Azure Automation runbooks to access Azure resources in a programmatic way.</p>
<p><strong>2. What do I need to do to protect my service against this vulnerability?</strong></p>
<p>Microsoft is providing scripts that help users to:</p>
<ul>
<li>Restrict Automation RunAs accounts from accessing Key Vaults.</li>
<li>Selectively grant Automation RunAs accounts permissions for specific Key Vaults.
These scripts can be further customized by users to their individual needs.</li>
</ul>
<p><strong>3. Where can I find these scripts?</strong></p>
<ul>
<li><a href="https://www.powershellgallery.com/packages/Update-AutomationRunAsAccountRoleAssignments">https://www.powershellgallery.com/packages/Update-AutomationRunAsAccountRoleAssignments</a></li>
<li><a href="https://www.powershellgallery.com/packages/Extend-AutomationRunAsAccountRoleAssignmentToKeyVault">https://www.powershellgallery.com/packages/Extend-AutomationRunAsAccountRoleAssignmentToKeyVault</a></li>
</ul>
<p>For more information about limiting Run As account permissions, see <a href="https://docs.microsoft.com/en-us/azure/automation/manage-runas-account">Manage Azure Automation Run As accounts</a>.</p>
<p><strong>4. How do I know if I need to run the script for RunAs accounts?</strong></p>
<p>Microsoft has provided a script to help users determine if they are affected:</p>
<ul>
<li>Check permissions on RunAs accounts: <a href="https://www.powershellgallery.com/packages/Check-AutomationRunAsAccountRoleAssignments">https://www.powershellgallery.com/packages/Check-AutomationRunAsAccountRoleAssignments</a></li>
</ul>
Azure
Microsoft
CVE-2019-0962
11656
Elevation of Privilege
11656
Important
11656
Publicly Disclosed:Yes;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
More information
11656
Maybe
None
Karl Fosaaen<a href="https://blog.netspi.com/"> of NetSPI </a>
1.0
2019-07-09T07:00:00
<p>Information published.</p>
DirectX Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system.</p>
<p>The update addresses the vulnerability by correcting how DirectX handles objects in memory.</p>
Microsoft Graphics Component
Microsoft
CVE-2019-0999
10951
10952
11497
11498
11499
11563
11453
11454
11583
10729
10735
10852
10853
10816
10855
Elevation of Privilege
10951
Elevation of Privilege
10952
Elevation of Privilege
11497
Elevation of Privilege
11498
Elevation of Privilege
11499
Elevation of Privilege
11563
Elevation of Privilege
11453
Elevation of Privilege
11454
Elevation of Privilege
11583
Elevation of Privilege
10729
Elevation of Privilege
10735
Elevation of Privilege
10852
Elevation of Privilege
10853
Elevation of Privilege
10816
Elevation of Privilege
10855
Important
10951
Important
10952
Important
11497
Important
11498
Important
11499
Important
11563
Important
11453
Important
11454
Important
11583
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A;Older Software Release:Exploitation More Likely;DOS:N/A
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10951
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10952
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11497
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11498
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11499
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11563
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11453
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11454
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11583
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10729
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10735
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10852
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10853
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10816
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10855
4507450
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507450
4503279
10951
10952
Yes
Security Update
4507450
https://support.microsoft.com/help/4507450
10951
10952
4507435
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507435
4503286
11497
11498
11499
11563
Yes
Security Update
4507435
https://support.microsoft.com/help/4507435
11497
11498
11499
11563
4507455
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507455
4503284
11453
11454
11583
Yes
Security Update
4507455
https://support.microsoft.com/help/4507455
11453
11454
11583
4507458
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507458
4503291
10729
10735
Yes
Security Update
4507458
https://support.microsoft.com/help/4507458
10729
10735
4507460
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507460
4503267
10852
10853
10816
10855
Yes
Security Update
4507460
https://support.microsoft.com/help/4507460
10852
10853
10816
10855
Zhang WangJunJie (<a href="https://twitter.com/syjzwjj">@syjzwjj</a>) of Tencent Keenlab
1.0
2019-07-09T07:00:00
<p>Information published.</p>
Scripting Engine Memory Corruption Vulnerability
<p>A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>In a web-based attack scenario, an attacker could host a specially crafted website designed to exploit the vulnerability through a Microsoft browser and then convince a user to view the website. An attacker could also embed an ActiveX control marked "safe for initialization" in an application or Microsoft Office document that hosts the browser rendering engine. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p>
<p>The security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.</p>
Microsoft Scripting Engine
Microsoft
CVE-2019-1001
11447
10724-10951
10724-10952
10724-11497
10724-11498
10724-11563
10724-11568
10724-11569
10724-11570
10724-11571
10724-11453
10724-11454
10724-11583
10724-10729
10724-10735
10724-10852
10724-10853
10724-10816
10724-11644
10724-11645
10724-11646
10486-10951
10486-10952
10486-11497
10486-11498
10486-11563
10486-11568
10486-11569
10486-11570
10486-11571
10486-11453
10486-11454
10486-11583
10486-10729
10486-10735
10486-10852
10486-10853
10486-10816
10486-10047
10486-10048
10486-10481
10486-10482
10486-10484
10486-10051
10486-10483
10486-11644
10486-11645
10486-11646
10486-10378
Remote Code Execution
11447
Remote Code Execution
10724-10951
Remote Code Execution
10724-10952
Remote Code Execution
10724-11497
Remote Code Execution
10724-11498
Remote Code Execution
10724-11563
Remote Code Execution
10724-11568
Remote Code Execution
10724-11569
Remote Code Execution
10724-11570
Remote Code Execution
10724-11571
Remote Code Execution
10724-11453
Remote Code Execution
10724-11454
Remote Code Execution
10724-11583
Remote Code Execution
10724-10729
Remote Code Execution
10724-10735
Remote Code Execution
10724-10852
Remote Code Execution
10724-10853
Remote Code Execution
10724-10816
Remote Code Execution
10724-11644
Remote Code Execution
10724-11645
Remote Code Execution
10724-11646
Remote Code Execution
10486-10951
Remote Code Execution
10486-10952
Remote Code Execution
10486-11497
Remote Code Execution
10486-11498
Remote Code Execution
10486-11563
Remote Code Execution
10486-11568
Remote Code Execution
10486-11569
Remote Code Execution
10486-11570
Remote Code Execution
10486-11571
Remote Code Execution
10486-11453
Remote Code Execution
10486-11454
Remote Code Execution
10486-11583
Remote Code Execution
10486-10729
Remote Code Execution
10486-10735
Remote Code Execution
10486-10852
Remote Code Execution
10486-10853
Remote Code Execution
10486-10816
Remote Code Execution
10486-10047
Remote Code Execution
10486-10048
Remote Code Execution
10486-10481
Remote Code Execution
10486-10482
Remote Code Execution
10486-10484
Remote Code Execution
10486-10051
Remote Code Execution
10486-10483
Remote Code Execution
10486-11644
Remote Code Execution
10486-11645
Remote Code Execution
10486-11646
Remote Code Execution
10486-10378
Critical
11447
Critical
10724-10951
Critical
10724-10952
Critical
10724-11497
Critical
10724-11498
Critical
10724-11563
Critical
10724-11568
Critical
10724-11569
Critical
10724-11570
Moderate
10724-11571
Critical
10724-11453
Critical
10724-11454
Critical
10724-11583
Critical
10724-10729
Critical
10724-10735
Critical
10724-10852
Critical
10724-10853
Moderate
10724-10816
Critical
10724-11644
Critical
10724-11645
Critical
10724-11646
Critical
10486-10951
Critical
10486-10952
Critical
10486-11497
Critical
10486-11498
Critical
10486-11563
Critical
10486-11568
Critical
10486-11569
Critical
10486-11570
Moderate
10486-11571
Critical
10486-11453
Critical
10486-11454
Critical
10486-11583
Critical
10486-10729
Critical
10486-10735
Critical
10486-10852
Critical
10486-10853
Moderate
10486-10816
Critical
10486-10047
Critical
10486-10048
Critical
10486-10481
Critical
10486-10482
Critical
10486-10484
Moderate
10486-10051
Moderate
10486-10483
Critical
10486-11644
Critical
10486-11645
Critical
10486-11646
Moderate
10486-10378
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10951
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10952
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11497
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11498
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11563
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11568
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11569
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11570
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11571
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11453
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11454
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11583
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10729
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10735
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10852
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10853
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10816
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11644
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11645
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11646
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10951
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10952
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11497
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11498
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11563
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11568
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11569
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11570
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11571
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11453
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11454
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11583
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10729
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10735
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10852
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10853
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10816
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10047
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10048
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10481
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10482
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10484
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10051
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10483
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11644
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11645
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11646
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10378
Release Notes
https://github.com/Microsoft/ChakraCore/releases/tag/v1.11.11
11447
Maybe
Security Update
4507450
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507450
4503279
10724-10951
10724-10952
10486-10951
10486-10952
Yes
Security Update
4507450
https://support.microsoft.com/help/4507450
10724-10951
10724-10952
10486-10951
10486-10952
4507435
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507435
4503286
10724-11497
10724-11498
10724-11563
10486-11497
10486-11498
10486-11563
Yes
Security Update
4507435
https://support.microsoft.com/help/4507435
10724-11497
10724-11498
10724-11563
10486-11497
10486-11498
10486-11563
4507469
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507469
4503327
10724-11568
10724-11569
10724-11570
10724-11571
10486-11568
10486-11569
10486-11570
10486-11571
Yes
Security Update
4507469
https://support.microsoft.com/help/4507469
10724-11568
10724-11569
10724-11570
10724-11571
10486-11568
10486-11569
10486-11570
10486-11571
4507455
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507455
4503284
10724-11453
10724-11454
10724-11583
10486-11453
10486-11454
10486-11583
Yes
Security Update
4507455
https://support.microsoft.com/help/4507455
10724-11453
10724-11454
10724-11583
10486-11453
10486-11454
10486-11583
4507458
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507458
4503291
10724-10729
10724-10735
10486-10729
10486-10735
Yes
Security Update
4507458
https://support.microsoft.com/help/4507458
10724-10729
10724-10735
10486-10729
10486-10735
4507460
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507460
4503267
10724-10852
10724-10853
10724-10816
10486-10852
10486-10853
10486-10816
Yes
Security Update
4507460
https://support.microsoft.com/help/4507460
10724-10852
10724-10853
10724-10816
10486-10852
10486-10853
10486-10816
4507453
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507453
4503293
10724-11644
10724-11645
10724-11646
10486-11644
10486-11645
10486-11646
Yes
Security Update
4507453
https://support.microsoft.com/help/4507453
10724-11644
10724-11645
10724-11646
10486-11644
10486-11645
10486-11646
4507449
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507449
4503292
10486-10047
10486-10048
10486-10051
Yes
Monthly Rollup
4507449
https://support.microsoft.com/help/4507449
10486-10047
10486-10048
10486-10051
4507434
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507434
4503259
10486-10047
10486-10048
10486-10481
10486-10482
10486-10051
10486-10483
10486-10378
Yes
IE Cumulative
4507434
https://support.microsoft.com/help/4507434
10486-10047
10486-10048
10486-10481
10486-10482
10486-10051
10486-10483
10486-10378
4507448
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507448
4503276
10486-10481
10486-10482
10486-10484
10486-10483
Yes
Monthly Rollup
4507448
https://support.microsoft.com/help/4507448
10486-10481
10486-10482
10486-10484
10486-10483
4507448
4503276
10486-10481
10486-10482
10486-10484
10486-10483
Yes
Monthly Rollup
4507448
https://support.microsoft.com/help/4507448
10486-10481
10486-10482
10486-10484
10486-10483
Yuki Chen of <a href="http://www.360.com/">Qihoo 360 Vulcan Team</a>
1.0
2019-07-09T07:00:00
<p>Information published.</p>
Scripting Engine Memory Corruption Vulnerability
<p>A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Internet Explorer and then convince a user to view the website. An attacker could also embed an ActiveX control marked "safe for initialization" in an application or Microsoft Office document that hosts the IE rendering engine. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p>
<p>The security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.</p>
Microsoft Scripting Engine
Microsoft
CVE-2019-1004
10555-10378
10336-9318
10486-11497
10486-11498
10486-11571
10486-11583
10486-10729
10486-10048
10486-10483
10336-9312
10486-10951
10486-10952
10486-11569
10486-11570
10486-11563
10486-11568
10486-11454
10486-11453
10486-11645
10486-11644
10486-11646
10486-10735
10486-10852
10486-10047
10486-10853
10486-10816
10486-10482
10486-10481
10486-10484
10486-10051
10486-10378
Remote Code Execution
10555-10378
Remote Code Execution
10336-9318
Remote Code Execution
10486-11497
Remote Code Execution
10486-11498
Remote Code Execution
10486-11571
Remote Code Execution
10486-11583
Remote Code Execution
10486-10729
Remote Code Execution
10486-10048
Remote Code Execution
10486-10483
Remote Code Execution
10336-9312
Remote Code Execution
10486-10951
Remote Code Execution
10486-10952
Remote Code Execution
10486-11569
Remote Code Execution
10486-11570
Remote Code Execution
10486-11563
Remote Code Execution
10486-11568
Remote Code Execution
10486-11454
Remote Code Execution
10486-11453
Remote Code Execution
10486-11645
Remote Code Execution
10486-11644
Remote Code Execution
10486-11646
Remote Code Execution
10486-10735
Remote Code Execution
10486-10852
Remote Code Execution
10486-10047
Remote Code Execution
10486-10853
Remote Code Execution
10486-10816
Remote Code Execution
10486-10482
Remote Code Execution
10486-10481
Remote Code Execution
10486-10484
Remote Code Execution
10486-10051
Remote Code Execution
10486-10378
Moderate
10555-10378
Moderate
10336-9318
Critical
10486-11497
Critical
10486-11498
Moderate
10486-11571
Critical
10486-11583
Critical
10486-10729
Critical
10486-10048
Moderate
10486-10483
Moderate
10336-9312
Critical
10486-10951
Critical
10486-10952
Critical
10486-11569
Critical
10486-11570
Critical
10486-11563
Critical
10486-11568
Critical
10486-11454
Critical
10486-11453
Critical
10486-11645
Critical
10486-11644
Critical
10486-11646
Critical
10486-10735
Critical
10486-10852
Critical
10486-10047
Critical
10486-10853
Moderate
10486-10816
Critical
10486-10482
Critical
10486-10481
Critical
10486-10484
Moderate
10486-10051
Moderate
10486-10378
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10555-10378
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10336-9318
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11497
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11498
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11571
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11583
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10729
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10048
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10483
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10336-9312
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10951
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10952
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11569
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11570
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11563
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11568
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11454
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11453
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11645
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11644
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11646
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10735
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10852
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10047
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10853
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10816
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10482
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10481
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10484
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10051
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10378
4507462
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507462
4503285
10555-10378
Yes
Monthly Rollup
4507462
https://support.microsoft.com/help/4507462
10555-10378
4507434
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507434
4503259
10555-10378
10336-9318
10486-10048
10486-10483
10336-9312
10486-10047
10486-10482
10486-10481
10486-10051
10486-10378
Yes
IE Cumulative
4507434
https://support.microsoft.com/help/4507434
10555-10378
10336-9318
10486-10048
10486-10483
10336-9312
10486-10047
10486-10482
10486-10481
10486-10051
10486-10378
4507452
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507452
4503273
10336-9318
10336-9312
Yes
Monthly Rollup
4507435
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507435
4503286
10486-11497
10486-11498
10486-11563
Yes
Security Update
4507435
https://support.microsoft.com/help/4507435
10486-11497
10486-11498
10486-11563
4507469
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507469
4503327
10486-11571
10486-11569
10486-11570
10486-11568
Yes
Security Update
4507469
https://support.microsoft.com/help/4507469
10486-11571
10486-11569
10486-11570
10486-11568
4507455
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507455
4503284
10486-11583
10486-11454
10486-11453
Yes
Security Update
4507455
https://support.microsoft.com/help/4507455
10486-11583
10486-11454
10486-11453
4507458
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507458
4503291
10486-10729
10486-10735
Yes
Security Update
4507458
https://support.microsoft.com/help/4507458
10486-10729
10486-10735
4507449
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507449
4503292
10486-10048
10486-10047
10486-10051
Yes
Monthly Rollup
4507449
https://support.microsoft.com/help/4507449
10486-10048
10486-10047
10486-10051
4507448
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507448
4503276
10486-10483
10486-10482
10486-10481
10486-10484
Yes
Monthly Rollup
4507448
https://support.microsoft.com/help/4507448
10486-10483
10486-10482
10486-10481
10486-10484
4507450
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507450
4503279
10486-10951
10486-10952
Yes
Security Update
4507450
https://support.microsoft.com/help/4507450
10486-10951
10486-10952
4507453
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507453
4503293
10486-11645
10486-11644
10486-11646
Yes
Security Update
4507453
https://support.microsoft.com/help/4507453
10486-11645
10486-11644
10486-11646
4507460
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507460
4503267
10486-10852
10486-10853
10486-10816
Yes
Security Update
4507460
https://support.microsoft.com/help/4507460
10486-10852
10486-10853
10486-10816
4507448
4503276
10486-10483
10486-10482
10486-10481
10486-10484
Yes
Monthly Rollup
4507448
https://support.microsoft.com/help/4507448
10486-10483
10486-10482
10486-10481
10486-10484
Yuki Chen of <a href="http://www.360.com/">Qihoo 360 Vulcan Team</a>
1.0
2019-07-09T07:00:00
<p>Information published.</p>
WCF/WIF SAML Token Authentication Bypass Vulnerability
<p>An authentication bypass vulnerability exists in Windows Communication Foundation (WCF) and Windows Identity Foundation (WIF), allowing signing of SAML tokens with arbitrary symmetric keys. This vulnerability allows an attacker to impersonate another user, which can lead to elevation of privileges. The vulnerability exists in WCF, WIF 3.5 and above in .NET Framework, WIF 1.0 component in Windows, WIF Nuget package, and WIF implementation in SharePoint.</p>
<p>An unauthenticated attacker can exploit this by signing a SAML token with any arbitrary symmetric key.</p>
<p>This security update addresses the issue by ensuring all versions of WCF and WIF validate the key used to sign SAML tokens correctly.</p>
<p><strong>What do I need to do to update SharePoint?</strong></p>
<p>Customers running affected versions of Microsoft SharePoint need to download and install both the applicable SharePoint update and the NuGet package for Microsoft.IdentityModel.dll to patch the vulnerability. See the Security Updates table for links to download the updates.</p>
<p><strong>There are two updates for .NET Framework 3.5 installed on Windows 10 version 1809 and Windows Server 2019. How do I know which update I need to install?</strong></p>
<p>The security updates for Windows 10 version 1809 and Windows Server 2019 include both .NET Framework 3.5 and 4.7.2 or 4.8. Customers running these versions of Windows 10 need to determine if they are also running .NET Framework 4.7.2 or .NET Framework 4.8. Install the security update that includes that second version of .NET Framework.</p>
.NET Framework
Microsoft
CVE-2019-1006
11647
10729
11563
9318
10378
10049
10483
9311
10379
10543
11644
11645
11583
11646
11497
11569
10735
11499
11570
11498
10952
11568
11572
10951
11571
10047
11453
10852
9312
11454
10481
10816
10853
10048
10484
10287
9344
10050
10482
10855
10950
11099
11585
10505
10612
10051
11687
11518-10729
11518-10735
11529-10047
11529-10048
11529-10481
11529-10482
11529-10484
11529-10051
11529-10049
11529-10378
11529-10379
11529-10483
11529-10543
10728-9312
10728-9318
9292-9312
9292-9311
9292-9318
9195-9312
9195-9311
9195-9318
2472-10951
2472-10952
2472-11497
2472-11498
2472-11499
2472-11453
2472-11454
2472-10729
2472-10735
2472-10852
2472-10853
2472-10816
2472-10855
2472-10481
2472-10482
2472-10378
2472-10379
2472-10483
2472-10543
9495-10047
9495-10048
9495-10050
9495-10051
9495-10049
10636-10047
10636-10048
10636-10481
10636-10482
10636-10484
10636-9312
10636-9318
10636-10051
10636-10049
10636-10378
10636-10379
10636-10483
10636-10543
11650-10951
11650-10952
11650-11497
11650-11498
11650-11499
11650-11453
11650-11454
11650-10852
11650-10853
11650-10816
11650-10855
11650-10047
11650-10048
11650-10481
11650-10482
11650-10484
11650-10051
11650-10049
11650-10378
11650-10379
11650-10483
11650-10543
11676-11568
11676-11569
11677-11568
11677-11569
11677-11571
11677-11572
11676-11572
11676-11571
11676-11644
11676-11647
11676-11645
Elevation of Privilege
11647
Elevation of Privilege
10729
Elevation of Privilege
11563
Elevation of Privilege
9318
Elevation of Privilege
10378
Elevation of Privilege
10049
Elevation of Privilege
10483
Elevation of Privilege
9311
Elevation of Privilege
10379
Elevation of Privilege
10543
Elevation of Privilege
11644
Elevation of Privilege
11645
Elevation of Privilege
11583
Elevation of Privilege
11646
Elevation of Privilege
11497
Elevation of Privilege
11569
Elevation of Privilege
10735
Elevation of Privilege
11499
Elevation of Privilege
11570
Elevation of Privilege
11498
Elevation of Privilege
10952
Elevation of Privilege
11568
Elevation of Privilege
11572
Elevation of Privilege
10951
Elevation of Privilege
11571
Elevation of Privilege
10047
Elevation of Privilege
11453
Elevation of Privilege
10852
Elevation of Privilege
9312
Elevation of Privilege
11454
Elevation of Privilege
10481
Elevation of Privilege
10816
Elevation of Privilege
10853
Elevation of Privilege
10048
Elevation of Privilege
10484
Elevation of Privilege
10287
Elevation of Privilege
9344
Elevation of Privilege
10050
Elevation of Privilege
10482
Elevation of Privilege
10855
Elevation of Privilege
10950
Elevation of Privilege
11099
Elevation of Privilege
11585
Elevation of Privilege
10505
Elevation of Privilege
10612
Elevation of Privilege
10051
Elevation of Privilege
11687
Elevation of Privilege
11518-10729
Elevation of Privilege
11518-10735
Elevation of Privilege
11529-10047
Elevation of Privilege
11529-10048
Elevation of Privilege
11529-10481
Elevation of Privilege
11529-10482
Elevation of Privilege
11529-10484
Elevation of Privilege
11529-10051
Elevation of Privilege
11529-10049
Elevation of Privilege
11529-10378
Elevation of Privilege
11529-10379
Elevation of Privilege
11529-10483
Elevation of Privilege
11529-10543
Elevation of Privilege
10728-9312
Elevation of Privilege
10728-9318
Elevation of Privilege
9292-9312
Elevation of Privilege
9292-9311
Elevation of Privilege
9292-9318
Elevation of Privilege
9195-9312
Elevation of Privilege
9195-9311
Elevation of Privilege
9195-9318
Elevation of Privilege
2472-10951
Elevation of Privilege
2472-10952
Elevation of Privilege
2472-11497
Elevation of Privilege
2472-11498
Elevation of Privilege
2472-11499
Elevation of Privilege
2472-11453
Elevation of Privilege
2472-11454
Elevation of Privilege
2472-10729
Elevation of Privilege
2472-10735
Elevation of Privilege
2472-10852
Elevation of Privilege
2472-10853
Elevation of Privilege
2472-10816
Elevation of Privilege
2472-10855
Elevation of Privilege
2472-10481
Elevation of Privilege
2472-10482
Elevation of Privilege
2472-10378
Elevation of Privilege
2472-10379
Elevation of Privilege
2472-10483
Elevation of Privilege
2472-10543
Elevation of Privilege
9495-10047
Elevation of Privilege
9495-10048
Elevation of Privilege
9495-10050
Elevation of Privilege
9495-10051
Elevation of Privilege
9495-10049
Elevation of Privilege
10636-10047
Elevation of Privilege
10636-10048
Elevation of Privilege
10636-10481
Elevation of Privilege
10636-10482
Elevation of Privilege
10636-10484
Elevation of Privilege
10636-9312
Elevation of Privilege
10636-9318
Elevation of Privilege
10636-10051
Elevation of Privilege
10636-10049
Elevation of Privilege
10636-10378
Elevation of Privilege
10636-10379
Elevation of Privilege
10636-10483
Elevation of Privilege
10636-10543
Elevation of Privilege
11650-10951
Elevation of Privilege
11650-10952
Elevation of Privilege
11650-11497
Elevation of Privilege
11650-11498
Elevation of Privilege
11650-11499
Elevation of Privilege
11650-11453
Elevation of Privilege
11650-11454
Elevation of Privilege
11650-10852
Elevation of Privilege
11650-10853
Elevation of Privilege
11650-10816
Elevation of Privilege
11650-10855
Elevation of Privilege
11650-10047
Elevation of Privilege
11650-10048
Elevation of Privilege
11650-10481
Elevation of Privilege
11650-10482
Elevation of Privilege
11650-10484
Elevation of Privilege
11650-10051
Elevation of Privilege
11650-10049
Elevation of Privilege
11650-10378
Elevation of Privilege
11650-10379
Elevation of Privilege
11650-10483
Elevation of Privilege
11650-10543
Elevation of Privilege
11676-11568
Elevation of Privilege
11676-11569
Elevation of Privilege
11677-11568
Elevation of Privilege
11677-11569
Elevation of Privilege
11677-11571
Elevation of Privilege
11677-11572
Elevation of Privilege
11676-11572
Elevation of Privilege
11676-11571
Elevation of Privilege
11676-11644
Elevation of Privilege
11676-11647
Elevation of Privilege
11676-11645
Important
11647
Important
10729
Important
11563
Important
9318
Important
10378
Important
10049
Important
10483
Important
9311
Important
10379
Important
10543
Important
11644
Important
11645
Important
11583
Important
11646
Important
11497
Important
11569
Important
10735
Important
11499
Important
11570
Important
11498
Important
10952
Important
11568
Important
11572
Important
10951
Important
11571
Important
10047
Important
11453
Important
10852
Important
9312
Important
11454
Important
10481
Important
10816
Important
10853
Important
10048
Important
10484
Important
10287
Important
9344
Important
10050
Important
10482
Important
10855
Important
10950
Important
11099
Important
11585
Important
10505
Important
10612
Important
10051
Important
11687
Important
11518-10729
Important
11518-10735
Important
11529-10047
Important
11529-10048
Important
11529-10481
Important
11529-10482
Important
11529-10484
Important
11529-10051
Important
11529-10049
Important
11529-10378
Important
11529-10379
Important
11529-10483
Important
11529-10543
Important
10728-9312
Important
10728-9318
Important
9292-9312
Important
9292-9311
Important
9292-9318
Important
9195-9312
Important
9195-9311
Important
9195-9318
Important
2472-10951
Important
2472-10952
Important
2472-11497
Important
2472-11498
Important
2472-11499
Important
2472-11453
Important
2472-11454
Important
2472-10729
Important
2472-10735
Important
2472-10852
Important
2472-10853
Important
2472-10816
Important
2472-10855
Important
2472-10481
Important
2472-10482
Important
2472-10378
Important
2472-10379
Important
2472-10483
Important
2472-10543
Important
9495-10047
Important
9495-10048
Important
9495-10050
Important
9495-10051
Important
9495-10049
Important
10636-10047
Important
10636-10048
Important
10636-10481
Important
10636-10482
Important
10636-10484
Important
10636-9312
Important
10636-9318
Important
10636-10051
Important
10636-10049
Important
10636-10378
Important
10636-10379
Important
10636-10483
Important
10636-10543
Important
11650-10951
Important
11650-10952
Important
11650-11497
Important
11650-11498
Important
11650-11499
Important
11650-11453
Important
11650-11454
Important
11650-10852
Important
11650-10853
Important
11650-10816
Important
11650-10855
Important
11650-10047
Important
11650-10048
Important
11650-10481
Important
11650-10482
Important
11650-10484
Important
11650-10051
Important
11650-10049
Important
11650-10378
Important
11650-10379
Important
11650-10483
Important
11650-10543
Important
11676-11568
Important
11676-11569
Important
11677-11568
Important
11677-11569
Important
11677-11571
Important
11677-11572
Important
11676-11572
Important
11676-11571
Important
11676-11644
Important
11676-11647
Important
11676-11645
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
4507453
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507453
4503293
11647
11644
11645
11646
Yes
Security Update
4507453
https://support.microsoft.com/help/4507453
11647
11644
11645
11646
4507458
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507458
4503291
10729
10735
11518-10729
11518-10735
2472-10729
2472-10735
Yes
Security Update
4507458
https://support.microsoft.com/help/4507458
10729
10735
11518-10729
11518-10735
2472-10729
2472-10735
4507435
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507435
4503286
11563
11497
11499
11498
2472-11497
2472-11498
2472-11499
Yes
Security Update
4507435
https://support.microsoft.com/help/4507435
11563
11497
11499
11498
2472-11497
2472-11498
2472-11499
4507452
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507452
4503273
9318
9311
9312
10287
9344
Yes
Monthly Rollup
4507461
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507461
9318
9311
9312
10287
9344
Yes
Security Only
4507462
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507462
4503285
10378
10379
Yes
Monthly Rollup
4507462
https://support.microsoft.com/help/4507462
10378
10379
4507464
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507464
10378
10379
Yes
Security Only
4507464
https://support.microsoft.com/help/4507464
10378
10379
4507449
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507449
4503292
10049
10047
10048
10050
10051
Yes
Monthly Rollup
4507449
https://support.microsoft.com/help/4507449
10049
10047
10048
10050
10051
4507456
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507456
10049
10047
10048
10050
10051
Yes
Security Only
4507448
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507448
4503276
10483
10543
10481
10484
10482
Yes
Monthly Rollup
4507448
https://support.microsoft.com/help/4507448
10483
10543
10481
10484
10482
4507457
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507457
10483
10543
10481
10482
Yes
Security Only
4507457
https://support.microsoft.com/help/4507457
10483
10543
10481
10482
4507455
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507455
4503284
11583
11453
11454
2472-11453
2472-11454
Yes
Security Update
4507455
https://support.microsoft.com/help/4507455
11583
11453
11454
2472-11453
2472-11454
4507469
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507469
4503327
11569
11570
11568
11572
11571
Yes
Security Update
4507469
https://support.microsoft.com/help/4507469
11569
11570
11568
11572
11571
4507450
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507450
4503279
10952
10951
2472-10951
2472-10952
Yes
Security Update
4507450
https://support.microsoft.com/help/4507450
10952
10951
2472-10951
2472-10952
4507460
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507460
4503267
10852
10816
10853
10855
2472-10852
2472-10853
2472-10816
2472-10855
Yes
Security Update
4507460
https://support.microsoft.com/help/4507460
10852
10816
10853
10855
2472-10852
2472-10853
2472-10816
2472-10855
4507448
4503276
10483
10543
10481
10484
10482
Yes
Monthly Rollup
4507448
https://support.microsoft.com/help/4507448
10483
10543
10481
10484
10482
4475520
https://www.microsoft.com/downloads/details.aspx?familyid=e11d0034-16b1-4d30-9618-315d549d048f
4464594
10950
Maybe
Security Update
4475522
https://www.microsoft.com/downloads/details.aspx?familyid=e19207d9-3e44-4f3e-addf-e02d2b459f28
4464597
11099
Maybe
Security Update
4475529
https://www.microsoft.com/downloads/details.aspx?familyid=8a2923d5-6963-41d3-94dd-24a987ae5df7
4475512
11585
Maybe
Security Update
4475510
https://www.microsoft.com/downloads/details.aspx?familyid=3820347c-8d04-4e04-9a59-c9c55aaf1e45
4464573
10505
Maybe
Security Update
4475527
https://www.microsoft.com/downloads/details.aspx?familyid=8cbd174c-7d10-427b-9dac-d83591e96db0
4464602
10612
Maybe
Security Update
Release Notes
https://www.nuget.org/packages/Microsoft.IdentityModel/
11687
Maybe
Security Update
4507420
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4506997
11529-10047
11529-10048
11529-10051
11529-10049
9495-10047
9495-10048
9495-10050
9495-10051
9495-10049
10636-10047
10636-10048
10636-10051
10636-10049
11650-10047
11650-10048
11650-10051
11650-10049
Maybe
Monthly Rollup
4507411
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4506963
11529-10047
11529-10048
11529-10051
11529-10049
9495-10047
9495-10048
9495-10050
9495-10051
9495-10049
10636-10047
10636-10048
10636-10051
10636-10049
11650-10047
11650-10048
11650-10051
11650-10049
Maybe
Security Only
4507422
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4506999
4499408; 4503867
11529-10481
11529-10482
11529-10484
11529-10483
11529-10543
2472-10481
2472-10482
2472-10483
2472-10543
10636-10481
10636-10482
10636-10484
10636-10483
10636-10543
11650-10481
11650-10482
11650-10484
11650-10483
11650-10543
Maybe
Monthly Rollup
4507413
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4506962
11529-10481
11529-10482
11529-10483
11529-10543
2472-10481
2472-10482
2472-10483
2472-10543
10636-10481
10636-10482
10636-10483
10636-10543
11650-10481
11650-10482
11650-10483
11650-10543
Maybe
Security Only
4507422
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4506996
4499408; 4503867
11529-10481
11529-10482
11529-10484
11529-10483
11529-10543
2472-10481
2472-10482
2472-10483
2472-10543
10636-10481
10636-10482
10636-10484
10636-10483
10636-10543
11650-10481
11650-10482
11650-10484
11650-10483
11650-10543
Maybe
Monthly Rollup
4507422
4499408; 4503867
11529-10481
11529-10482
11529-10484
11529-10483
11529-10543
2472-10481
2472-10482
2472-10483
2472-10543
10636-10481
10636-10482
10636-10484
10636-10483
10636-10543
11650-10481
11650-10482
11650-10484
11650-10483
11650-10543
Maybe
Monthly Rollup
4507421
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4506995
4499407; 4503866
11529-10378
11529-10379
2472-10378
2472-10379
10636-10378
10636-10379
11650-10378
11650-10379
Maybe
Monthly Rollup
4507412
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4506961
11529-10378
11529-10379
2472-10378
2472-10379
10636-10378
10636-10379
11650-10378
11650-10379
Maybe
Security Only
4507423
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4506997
4489489; 4499409
10728-9312
10728-9318
9292-9312
9292-9311
9292-9318
9195-9312
9195-9311
9195-9318
10636-9312
10636-9318
Maybe
Monthly Rollup
4507414
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4506963
10728-9312
10728-9318
9292-9312
9292-9311
9292-9318
9195-9312
9195-9311
9195-9318
10636-9312
10636-9318
Maybe
Security Only
4507423
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507003
4499409; 4503868
10728-9312
10728-9318
9292-9312
9292-9311
9292-9318
9195-9312
9195-9311
9195-9318
10636-9312
10636-9318
Maybe
Monthly Rollup
4507414
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4506975
10728-9312
10728-9318
9292-9312
9292-9311
9292-9318
9195-9312
9195-9311
9195-9318
10636-9312
10636-9318
Maybe
Security Only
4507422
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507005
4499408; 4503867
11529-10481
11529-10482
11529-10484
11529-10483
11529-10543
2472-10481
2472-10482
2472-10483
2472-10543
10636-10481
10636-10482
10636-10484
10636-10483
10636-10543
11650-10481
11650-10482
11650-10484
11650-10483
11650-10543
Maybe
Monthly Rollup
4507413
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4506977
11529-10481
11529-10482
11529-10483
11529-10543
2472-10481
2472-10482
2472-10483
2472-10543
10636-10481
10636-10482
10636-10483
10636-10543
11650-10481
11650-10482
11650-10483
11650-10543
Maybe
Security Only
4507421
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507002
4499407; 4503866
11529-10378
11529-10379
2472-10378
2472-10379
10636-10378
10636-10379
11650-10378
11650-10379
Maybe
Monthly Rollup
4507412
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4506974
11529-10378
11529-10379
2472-10378
2472-10379
10636-10378
10636-10379
11650-10378
11650-10379
Maybe
Security Only
4507420
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507004
4499406; 4503865
11529-10047
11529-10048
11529-10051
11529-10049
9495-10047
9495-10048
9495-10050
9495-10051
9495-10049
10636-10047
10636-10048
10636-10051
10636-10049
11650-10047
11650-10048
11650-10051
11650-10049
Maybe
Monthly Rollup
4507411
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4506976
11529-10047
11529-10048
11529-10051
11529-10049
9495-10047
9495-10048
9495-10050
9495-10051
9495-10049
10636-10047
10636-10048
10636-10051
10636-10049
11650-10047
11650-10048
11650-10051
11650-10049
Maybe
Security Only
4507420
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507001
4503865
11529-10047
11529-10048
11529-10051
11529-10049
9495-10047
9495-10048
9495-10050
9495-10051
9495-10049
10636-10047
10636-10048
10636-10051
10636-10049
11650-10047
11650-10048
11650-10051
11650-10049
Maybe
Monthly Rollup
4507411
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4506966
11529-10047
11529-10048
11529-10051
11529-10049
9495-10047
9495-10048
9495-10050
9495-10051
9495-10049
10636-10047
10636-10048
10636-10051
10636-10049
11650-10047
11650-10048
11650-10051
11650-10049
Maybe
Security Only
4507413
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4506964
11529-10481
11529-10482
11529-10483
11529-10543
2472-10481
2472-10482
2472-10483
2472-10543
10636-10481
10636-10482
10636-10483
10636-10543
11650-10481
11650-10482
11650-10483
11650-10543
Maybe
Security Only
4507423
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507001
4489489; 4499409
10728-9312
10728-9318
9292-9312
9292-9311
9292-9318
9195-9312
9195-9311
9195-9318
10636-9312
10636-9318
Maybe
Monthly Rollup
4507414
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4506966
10728-9312
10728-9318
9292-9312
9292-9311
9292-9318
9195-9312
9195-9311
9195-9318
10636-9312
10636-9318
Maybe
Security Only
4507421
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507000
4499407; 4503866
11529-10378
11529-10379
2472-10378
2472-10379
10636-10378
10636-10379
11650-10378
11650-10379
Maybe
Monthly Rollup
4507412
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4506965
11529-10378
11529-10379
2472-10378
2472-10379
10636-10378
10636-10379
11650-10378
11650-10379
Maybe
Security Only
4506987
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4506987
4495611; 4502561
11650-10951
Maybe
Security Update
4506986
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4506986
4495610; 4502560
11650-10952
11650-11454
11650-10852
11650-10853
11650-10816
11650-10855
Maybe
Security Update
4506989
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4506989
4495616; 4502563
11650-11497
11650-11498
11650-11499
Maybe
Security Update
4506988
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4506988
4495613; 4502562
11650-11453
Maybe
Security Update
4507420
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4506994
4499406; 4503865
11529-10047
11529-10048
11529-10051
11529-10049
9495-10047
9495-10048
9495-10050
9495-10051
9495-10049
10636-10047
10636-10048
10636-10051
10636-10049
11650-10047
11650-10048
11650-10051
11650-10049
Maybe
Monthly Rollup
4507411
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4506956
11529-10047
11529-10048
11529-10051
11529-10049
9495-10047
9495-10048
9495-10050
9495-10051
9495-10049
10636-10047
10636-10048
10636-10051
10636-10049
11650-10047
11650-10048
11650-10051
11650-10049
Maybe
Security Only
4507422
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4506993
4499408; 4503867
11529-10481
11529-10482
11529-10484
11529-10483
11529-10543
2472-10481
2472-10482
2472-10483
2472-10543
10636-10481
10636-10482
10636-10484
10636-10483
10636-10543
11650-10481
11650-10482
11650-10484
11650-10483
11650-10543
Maybe
Monthly Rollup
4507413
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4506955
11529-10481
11529-10482
11529-10483
11529-10543
2472-10481
2472-10482
2472-10483
2472-10543
10636-10481
10636-10482
10636-10483
10636-10543
11650-10481
11650-10482
11650-10483
11650-10543
Maybe
Security Only
4507421
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4506992
4499407; 4503866
11529-10378
11529-10379
2472-10378
2472-10379
10636-10378
10636-10379
11650-10378
11650-10379
Maybe
Monthly Rollup
4507412
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4506954
11529-10378
11529-10379
2472-10378
2472-10379
10636-10378
10636-10379
11650-10378
11650-10379
Maybe
Security Only
4507419
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4506990
4486553; 4499405; 4503864
11676-11568
11676-11569
11677-11568
11677-11569
11677-11571
11677-11572
11676-11572
11676-11571
Maybe
Security Update
4507419
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4506998
4486553; 4499405; 4503864
11676-11568
11676-11569
11677-11568
11677-11569
11677-11571
11677-11572
11676-11572
11676-11571
Maybe
Security Update
4506991
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4506991
4495620; 4502584
11676-11644
11676-11647
11676-11645
Maybe
Security Update
Oleksandr Mirosh (@olekmirosh) and Alvaro Munoz (@pwntester) from Micro Focus Fortify
1.0
2019-07-09T07:00:00
<p>Information published.</p>
Windows Error Reporting Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists in the way Windows Error Reporting (WER) handles files. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with administrator privileges.</p>
<p>To exploit the vulnerability, an attacker must first gain unprivileged execution on a victim system.</p>
<p>The security update addresses the vulnerability by correcting the way WER handles files.</p>
Microsoft Windows
Microsoft
CVE-2019-1037
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
Elevation of Privilege
11497
Elevation of Privilege
11498
Elevation of Privilege
11499
Elevation of Privilege
11563
Elevation of Privilege
11568
Elevation of Privilege
11569
Elevation of Privilege
11570
Elevation of Privilege
11571
Elevation of Privilege
11572
Elevation of Privilege
11453
Elevation of Privilege
11454
Elevation of Privilege
11583
Elevation of Privilege
11644
Elevation of Privilege
11645
Elevation of Privilege
11646
Elevation of Privilege
11647
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11497
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11498
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11499
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11563
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11453
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11454
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11583
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11644
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11645
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11646
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11647
4507435
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507435
4503286
11497
11498
11499
11563
11647
Yes
Security Update
4507435
https://support.microsoft.com/help/4507435
11497
11498
11499
11563
11647
4507469
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507469
4503327
11568
11569
11570
11571
11572
Yes
Security Update
4507469
https://support.microsoft.com/help/4507469
11568
11569
11570
11571
11572
4507455
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507455
4503284
11453
11454
11583
Yes
Security Update
4507455
https://support.microsoft.com/help/4507455
11453
11454
11583
4507453
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507453
4503293
11644
11645
11646
Yes
Security Update
4507453
https://support.microsoft.com/help/4507453
11644
11645
11646
Gal De Leon of Palo Alto Networks
1.0
2019-07-09T07:00:00
<p>Information published.</p>
Windows Kernel Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application to take control of an affected system.</p>
<p>The update addresses the vulnerability by correcting how the Windows kernel handles objects in memory.</p>
Microsoft Windows
Microsoft
CVE-2019-1067
10951
10952
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
10729
10735
10852
10853
10816
10855
Elevation of Privilege
10951
Elevation of Privilege
10952
Elevation of Privilege
11497
Elevation of Privilege
11498
Elevation of Privilege
11499
Elevation of Privilege
11563
Elevation of Privilege
11568
Elevation of Privilege
11569
Elevation of Privilege
11570
Elevation of Privilege
11571
Elevation of Privilege
11572
Elevation of Privilege
11453
Elevation of Privilege
11454
Elevation of Privilege
11583
Elevation of Privilege
11644
Elevation of Privilege
11645
Elevation of Privilege
11646
Elevation of Privilege
11647
Elevation of Privilege
10729
Elevation of Privilege
10735
Elevation of Privilege
10852
Elevation of Privilege
10853
Elevation of Privilege
10816
Elevation of Privilege
10855
Important
10951
Important
10952
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10951
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10952
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11497
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11498
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11499
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11563
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11453
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11454
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11583
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11644
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11645
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11646
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11647
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10729
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10735
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10852
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10853
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10816
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10855
4507450
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507450
4503279
10951
10952
Yes
Security Update
4507450
https://support.microsoft.com/help/4507450
10951
10952
4507435
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507435
4503286
11497
11498
11499
11563
Yes
Security Update
4507435
https://support.microsoft.com/help/4507435
11497
11498
11499
11563
4507469
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507469
4503327
11568
11569
11570
11571
11572
Yes
Security Update
4507469
https://support.microsoft.com/help/4507469
11568
11569
11570
11571
11572
4507455
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507455
4503284
11453
11454
11583
Yes
Security Update
4507455
https://support.microsoft.com/help/4507455
11453
11454
11583
4507453
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507453
4503293
11644
11645
11646
11647
Yes
Security Update
4507453
https://support.microsoft.com/help/4507453
11644
11645
11646
11647
4507458
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507458
4503291
10729
10735
Yes
Security Update
4507458
https://support.microsoft.com/help/4507458
10729
10735
4507460
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507460
4503267
10852
10853
10816
10855
Yes
Security Update
4507460
https://support.microsoft.com/help/4507460
10852
10853
10816
10855
Steven Hunter and Thomas Imbert of MSRC Vulnerabilities & Mitigations
1.0
2019-07-09T07:00:00
<p>Information published.</p>
Microsoft SQL Server Remote Code Execution Vulnerability
<p>A remote code execution vulnerability exists in Microsoft SQL Server when it incorrectly handles processing of internal functions. An attacker who successfully exploited this vulnerability could execute code in the context of the SQL Server Database Engine service account.</p>
<p>To exploit the vulnerability, an authenticated attacker would need to submit a specially crafted query to an affected SQL server.</p>
<p>The security update addresses the vulnerability by modifying how the Microsoft SQL Server Database Engine handles the processing of functions.</p>
<p><strong>There are GDR and/or CU (Cumulative Update) updates offered for my version of SQL Server. How do I know which update to use?</strong></p>
<ul>
<li>First, determine your SQL Server version number. For more information on determining your SQL Server version number, see Microsoft Knowledge Base Article <a href="https://support.microsoft.com/en-us/help/321185">321185 - How to determine the version, edition, and update level of SQL Server and its components.</a></li>
<li>Second, in the table below, locate your version number or the version range that your version number falls within. The corresponding update is the one you need to install.</li>
</ul>
<p><strong>Note</strong> If your SQL Server version number is not represented in the table below, your SQL Server version is no longer supported. Please upgrade to the latest Service Pack or SQL Server product in order to apply this and future security updates.</p>
<table>
<thead>
<tr>
<th>Update number</th>
<th>Title</th>
<th>Apply if current product version is…</th>
<th>This security update also includes servicing releases up through…</th>
</tr>
</thead>
<tbody>
<tr>
<td>4505217</td>
<td>Description of the security update for the Remote Code Execution vulnerability in SQL Server 2014 SP2 (GDR): June 11, 2019</td>
<td>12.0.5000.0 - 12.0.5214.6</td>
<td>KB4057120</td>
</tr>
<tr>
<td>4505419</td>
<td>Description of the security update for the Remote Code Execution vulnerability in SQL Server 2014 SP2 (CU): June 11, 2019</td>
<td>12.0.5511.0 - 12.0.5632.1</td>
<td>KB4491540 – SQL14 SP2 CU17</td>
</tr>
<tr>
<td>4505218</td>
<td>Description of the security update for the Remote Code Execution vulnerability in SQL Server 2014 SP3 (GDR): June 11, 2019</td>
<td>12.0.6024.0</td>
<td>SP3</td>
</tr>
<tr>
<td>4505422</td>
<td>Description of the security update for the Remote Code Execution vulnerability in SQL Server 2014 SP3 (CU): June 11, 2019</td>
<td>12.0.6205.1 - 12.0.6259.0</td>
<td>KB4491539 – SQL14 SP3 CU3</td>
</tr>
<tr>
<td>4505219</td>
<td>Description of the security update for the Remote Code Execution vulnerability in SQL Server 2016 SP1(GDR): June 11, 2019</td>
<td>13.0.4001.0 - 13.0.4224.16</td>
<td>KB4458842</td>
</tr>
<tr>
<td>4505221</td>
<td>Description of the security update for the Remote Code Execution vulnerability in SQL Server 2016 SP1 (CU): June 11, 2019</td>
<td>13.0.4411.0 - 13.0.4574.0</td>
<td>KB4495257 – SQL16 SP1 CU15</td>
</tr>
<tr>
<td>4505220</td>
<td>Description of the security update for the Remote Code Execution vulnerability in SQL Server 2016 SP2 (GDR): June 11, 2019</td>
<td>13.0.5026.0 - 13.0.5081.1</td>
<td>KB4293802</td>
</tr>
<tr>
<td>4505222</td>
<td>Description of the security update for the Remote Code Execution vulnerability in SQL Server 2016 SP2 (CU): June 11, 2019</td>
<td>13.0.5149.0 - 13.0.5337.0</td>
<td>KB4495256 – SQL SP2 CU7</td>
</tr>
<tr>
<td>4505224</td>
<td>Description of the security update for the Remote Code Execution vulnerability in SQL Server 2017 (GDR): June 11, 2019</td>
<td>14.0.1000.169 - 14.0.2014.14</td>
<td>KB4494351</td>
</tr>
<tr>
<td>4505225</td>
<td>Description of the security update for the Remote Code Execution vulnerability in SQL Server 2017 (CU): June 11, 2019</td>
<td>14.0.3006.16 - 14.0.3162.1</td>
<td>KB4498951 – SQL17 RTM CU15</td>
</tr>
</tbody>
</table>
<p><strong>What are the GDR and CU update designations and how do they differ?</strong></p>
<p>The General Distribution Release (GDR) and Cumulative Update (CU) designations correspond to the two different servicing options in place for SQL Server baseline releases. A baseline can be either an RTM release or a Service Pack release.</p>
<ul>
<li>GDR updates – cumulatively only contain security updates for the given baseline.</li>
<li>CU updates – cumulatively contain all functional fixes and security updates for the given baseline.</li>
</ul>
<p>For any given baseline, either the GDR or CU updates could be options (see below).</p>
<ul>
<li>If SQL Server installation is at a baseline version, you can choose either the GDR or CU update.</li>
<li>If SQL Server installation has intentionally only installed past GDR updates, then choose to install the GDR update package.</li>
<li>If SQL Server installation has intentionally installed previous CU updates, then chose to install the CU security update package.</li>
<li>NOTE: You are allowed to make a change from GDR updates to CU updates ONE TIME. Once a SQL Server CU update is applied to a SQL Server installation, there is NO way to go back to the GDR update path.</li>
</ul>
<p><strong>Does this security update apply to SQL Server 2017 on Linux or on Linux Docker Containers?</strong></p>
<p>Yes. For information on obtaining and installing the CU or GDR updates on Linux Operating Systems or Docker Containers, please see:</p>
<ol>
<li><a href="https://docs.microsoft.com/en-us/sql/linux/sql-server-linux-change-repo?view=sql-server-2017">Configure repositories for installing and upgrading SQL Server on Linux </a></li>
<li><a href="https://docs.microsoft.com/en-us/sql/linux/sql-server-linux-release-notes?view=sql-server-2017#cuinstall">Release notes for SQL Server 2017 on Linux</a></li>
<li><a href="https://hub.docker.com/r/microsoft/mssql-server-linux/">Official images for Microsoft SQL Server on Linux for Docker Engine</a></li>
</ol>
<p><strong>Will these security updates be offered to SQL Server clusters?</strong></p>
<p>Yes. The updates will also be offered to SQL Server 2016 SP1/SP2 and SQL Server 2017 RTM instances that are clustered. Updates for SQL Server clusters will require user interaction.
If the SQL Server 2016 SP1/SP2 or SQL Server 2017 RTM cluster has a passive node, to reduce downtime, Microsoft recommends that you scan and apply the update to the inactive node first, then scan and apply it to the active node. When all components have been updated on all nodes, the update will no longer be offered.</p>
<p><strong>Can the security updates be applied to SQL Server instances on Windows Azure (IaaS)?</strong></p>
<p>Yes. SQL Server instances on Windows Azure (IaaS) can be offered the security updates through Microsoft Update, or customers can download the security updates from Microsoft Download Center and apply them manually.</p>
SQL Server
Microsoft
CVE-2019-1068
11439
11445
11478
11479
11554
11555
10940
10941
10942
10943
11668
11667
11672
11671
Remote Code Execution
11439
Remote Code Execution
11445
Remote Code Execution
11478
Remote Code Execution
11479
Remote Code Execution
11554
Remote Code Execution
11555
Remote Code Execution
10940
Remote Code Execution
10941
Remote Code Execution
10942
Remote Code Execution
10943
Remote Code Execution
11668
Remote Code Execution
11667
Remote Code Execution
11672
Remote Code Execution
11671
Important
11439
Important
11445
Important
11478
Important
11479
Important
11554
Important
11555
Important
10940
Important
10941
Important
10942
Important
10943
Important
11668
Important
11667
Important
11672
Important
11671
Publicly Disclosed:Yes;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
4505219
https://www.microsoft.com/downloads/details.aspx?familyid=e1142d99-3062-4597-bfb4-32a54d3fb2c9
4293808
11439
Maybe
Security Update
4505221
https://www.microsoft.com/downloads/details.aspx?familyid=46ef84af-3af3-4190-849d-d01c4dfe1a85
11445
Maybe
Security Update
4505224
https://www.microsoft.com/downloads/details.aspx?familyid=e000ffcd-7e78-4de2-be07-14e5bc10eec2
4494351
11478
Maybe
Security Update
4505225
https://www.microsoft.com/downloads/details.aspx?familyid=e40888f3-4fe2-4707-808c-594649f1bb0b
11479
Maybe
Security Update
4505222
https://www.microsoft.com/downloads/details.aspx?familyid=b422ffe3-1821-4289-9fbc-2693451e3484
11554
Maybe
Security Update
4505220
https://www.microsoft.com/downloads/details.aspx?familyid=a1d3acf4-6b55-4b71-96ac-c50f84013be9
4293802
11555
Maybe
Security Update
4505217
https://www.microsoft.com/downloads/details.aspx?familyid=305d3d35-32a1-4e72-af65-b5cfe347fb79
4057120
10940
10943
Maybe
Security Update
4505419
https://www.microsoft.com/downloads/details.aspx?familyid=292990af-7f14-4fe4-987d-4a2cce81cc65
10941
10942
Maybe
Security Update
4505422
https://www.microsoft.com/downloads/details.aspx?familyid=4c7faf35-1f68-4e45-acfa-45f15dc170d5
11668
11672
Maybe
Security Update
4505218
https://www.microsoft.com/downloads/details.aspx?familyid=ca494ec9-b37f-4ce2-932c-eb3730e2482c
11667
11671
Maybe
Security Update
1.0
2019-07-09T07:00:00
<p>Information published.</p>
1.1
2019-07-17T07:00:00
<p>Updated the Products with the (CU+GDR) suffix to (CU) for clarity. This is an informational change only.</p>
1.2
2019-12-03T08:00:00
<p>Fixed a typo in the FAQ.</p>
Microsoft Windows Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists in Microsoft Windows where certain folders, with local service privilege, are vulnerable to symbolic link attack.</p>
<p>An attacker who successfully exploited this vulnerability could potentially access unauthorized information.</p>
<p>The update addresses this vulnerability by not allowing symbolic links in these scenarios.</p>
Microsoft Windows
Microsoft
CVE-2019-1074
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
Elevation of Privilege
11497
Elevation of Privilege
11498
Elevation of Privilege
11499
Elevation of Privilege
11563
Elevation of Privilege
11568
Elevation of Privilege
11569
Elevation of Privilege
11570
Elevation of Privilege
11571
Elevation of Privilege
11572
Elevation of Privilege
11453
Elevation of Privilege
11454
Elevation of Privilege
11583
Elevation of Privilege
11644
Elevation of Privilege
11645
Elevation of Privilege
11646
Elevation of Privilege
11647
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A
5.3
5.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L
11497
5.3
5.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L
11498
5.3
5.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L
11499
5.3
5.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L
11563
5.3
5.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L
11568
5.3
5.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L
11569
5.3
5.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L
11570
5.3
5.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L
11571
5.3
5.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L
11572
5.3
5.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L
11453
5.3
5.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L
11454
5.3
5.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L
11583
5.3
5.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L
11644
5.3
5.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L
11645
5.3
5.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L
11646
5.3
5.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L
11647
4507435
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507435
4503286
11497
11498
11499
11563
Yes
Security Update
4507435
https://support.microsoft.com/help/4507435
11497
11498
11499
11563
4507469
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507469
4503327
11568
11569
11570
11571
11572
Yes
Security Update
4507469
https://support.microsoft.com/help/4507469
11568
11569
11570
11571
11572
4507455
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507455
4503284
11453
11454
11583
Yes
Security Update
4507455
https://support.microsoft.com/help/4507455
11453
11454
11583
4507453
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507453
4503293
11644
11645
11646
11647
Yes
Security Update
4507453
https://support.microsoft.com/help/4507453
11644
11645
11646
11647
Wayne Low of Fortinet’s <a href=https://fortiguard.com/>FortiGuard Labs</a>
k0shl of Qihoo 360 Vulcan team
1.0
2019-07-09T07:00:00
<p>Information published.</p>
ASP.NET Core Spoofing Vulnerability
<p>A spoofing vulnerability exists in ASP.NET Core that could lead to an open redirect. An attacker who successfully exploited the vulnerability could redirect a targeted user to a malicious website.</p>
<p>To exploit the vulnerability, an attacker could send a link that has a specially crafted URL, and convince the user to click the link.</p>
<p>The update addresses the vulnerability by correcting how ASP.NET Core parses URLs.</p>
ASP.NET
Microsoft
CVE-2019-1075
11564
11610
Spoofing
11564
Spoofing
11610
Moderate
11564
Moderate
11610
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
Release Notes
https://dotnet.microsoft.com/download/dotnet-core/2.1
11564
11610
Maybe
Security Update
Release Notes
https://dotnet.microsoft.com/download/dotnet-core/2.2
11564
11610
Maybe
Security Update
Ifrah Iman (<a href="https://twitter.com/IfrahIman_">@IfrahIman_</a>)
1.0
2019-07-09T07:00:00
<p>Information published.</p>
Visual Studio Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists when the Visual Studio updater service improperly handles file permissions. An attacker who successfully exploited this vulnerability overwrite arbitrary files with XML content in the security context of the local system.</p>
<p>To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability.</p>
<p>The update addresses the vulnerability by correcting how the Visual Studio updater handles permissions.</p>
Visual Studio
Microsoft
CVE-2019-1077
11600
11658
11678
Elevation of Privilege
11600
Elevation of Privilege
11658
Elevation of Privilege
11678
Important
11600
Important
11658
Important
11678
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
Release Notes
http://aka.ms/vs/15/release/latest
11600
11658
11678
Maybe
Security Update
Release Notes
https://my.visualstudio.com/Downloads?q=Visual Studio 2019 version 16.0
11600
11658
11678
Maybe
Security Update
Release Notes
https://aka.ms/vs/16/release/latest
11600
11658
11678
Maybe
Security Update
Ryan Wincey (<a href="https://twitter.com/rwincey">@rwincey</a>) of <a href="https://www.securifera.com/">Securifera</a>
1.0
2019-07-09T07:00:00
<p>Information published.</p>
Visual Studio Information Disclosure Vulnerability
<p>An information disclosure vulnerability exists when Visual Studio improperly parses XML input in certain settings files. An attacker who successfully exploited this vulnerability could read arbitrary files via an XML external entity (XXE) declaration.</p>
<p>To exploit the vulnerability, an attacker could create specially crafted XML data and convince an authenticated user to open the file.</p>
<p>The update addresses the vulnerability by modifying the way that Visual Studio parses XML input.</p>
<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>
<p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is unauthorized file system access - reading from the file system.</p>
Visual Studio
Microsoft
CVE-2019-1079
10098
10326
10566
10577
Information Disclosure
10098
Information Disclosure
10326
Information Disclosure
10566
Information Disclosure
10577
Important
10098
Important
10326
Important
10566
Important
10577
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
4506161
https://aka.ms/vs/10/release/4506161
10098
Maybe
Security Update
4506162
https://aka.ms/vs/11/release/4506162
10326
Maybe
Security Update
4506163
https://aka.ms/vs/12/release/4506163
10566
Maybe
Security Update
4506164
https://aka.ms/vs/14/release/4506164
10577
Maybe
Security Update
Sooraj K S (<a href="https://twitter.com/soorajks">@soorajks</a>) of McAfee
1.0
2019-07-09T07:00:00
<p>Information published.</p>
Microsoft Windows Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists in Microsoft Windows where a certain DLL, with Local Service privilege, is vulnerable to race planting a customized DLL.</p>
<p>An attacker who successfully exploited this vulnerability could potentially elevate privilege to SYSTEM.</p>
<p>The update addresses this vulnerability by requiring SYSTEM privileges for a certain DLL.</p>
Microsoft Windows
Microsoft
CVE-2019-1082
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
10050
10051
10049
10378
10379
10483
10543
Elevation of Privilege
10729
Elevation of Privilege
10735
Elevation of Privilege
10852
Elevation of Privilege
10853
Elevation of Privilege
10816
Elevation of Privilege
10855
Elevation of Privilege
10047
Elevation of Privilege
10048
Elevation of Privilege
10481
Elevation of Privilege
10482
Elevation of Privilege
10484
Elevation of Privilege
10050
Elevation of Privilege
10051
Elevation of Privilege
10049
Elevation of Privilege
10378
Elevation of Privilege
10379
Elevation of Privilege
10483
Elevation of Privilege
10543
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
10050
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A;Older Software Release:Exploitation Less Likely;DOS:N/A
7.7
7.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:L
10729
7.7
7.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:L
10735
7.7
7.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:L
10852
7.7
7.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:L
10853
7.7
7.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:L
10816
7.7
7.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:L
10855
7.7
7.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:L
10047
7.7
7.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:L
10048
7.7
7.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:L
10481
7.7
7.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:L
10482
7.7
7.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:L
10484
7.7
7.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:L
10050
7.7
7.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:L
10051
7.7
7.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:L
10049
7.7
7.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:L
10378
7.7
7.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:L
10379
7.7
7.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:L
10483
7.7
7.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:L
10543
4507458
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507458
4503291
10729
10735
Yes
Security Update
4507458
https://support.microsoft.com/help/4507458
10729
10735
4507460
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507460
4503267
10852
10853
10816
10855
Yes
Security Update
4507460
https://support.microsoft.com/help/4507460
10852
10853
10816
10855
4507449
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507449
4503292
10047
10048
10050
10051
10049
Yes
Monthly Rollup
4507449
https://support.microsoft.com/help/4507449
10047
10048
10050
10051
10049
4507456
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507456
10047
10048
10050
10051
10049
Yes
Security Only
4507448
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507448
4503276
10481
10482
10484
10483
10543
Yes
Monthly Rollup
4507448
https://support.microsoft.com/help/4507448
10481
10482
10484
10483
10543
4507457
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507457
10481
10482
10483
10543
Yes
Security Only
4507457
https://support.microsoft.com/help/4507457
10481
10482
10483
10543
4507448
4503276
10481
10482
10484
10483
10543
Yes
Monthly Rollup
4507448
https://support.microsoft.com/help/4507448
10481
10482
10484
10483
10543
4507462
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507462
4503285
10378
10379
Yes
Monthly Rollup
4507462
https://support.microsoft.com/help/4507462
10378
10379
4507464
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507464
10378
10379
Yes
Security Only
4507464
https://support.microsoft.com/help/4507464
10378
10379
Jakub Pałaczyński
Michal Bazyli
1.0
2019-07-09T07:00:00
<p>Information published.</p>
.NET Denial of Service Vulnerability
<p>A denial of service vulnerability exists when Microsoft Common Object Runtime Library improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET web application.</p>
<p>A remote unauthenticated attacker could exploit this vulnerability by issuing specially crafted requests to the .NET application.</p>
<p>The update addresses the vulnerability by correcting how the .NET web application handles web requests.</p>
<p><strong>There are two updates for .NET Framework 3.5 installed on Windows 10 version 1809 and Windows Server 2019. How do I know which update I need to install?</strong></p>
<p>The security updates for Windows 10 version 1809 and Windows Server 2019 include both .NET Framework 3.5 and 4.7.2 or 4.8. Customers running these versions of Windows 10 need to determine if they are also running .NET Framework 4.7.2 or .NET Framework 4.8. Install the security update that includes that second version of .NET Framework.</p>
.NET Framework
Microsoft
CVE-2019-1083
11677-11569
11677-11568
11676-11568
11676-11569
11676-11572
11677-11572
11676-11571
11676-11644
11676-11647
11677-11571
11676-11645
11518-10729
11518-10735
11529-10047
11529-10048
11529-10481
11529-10482
11529-10484
11529-10051
11529-10049
11529-10378
11529-10379
11529-10483
11529-10543
10728-9312
10728-9318
9292-9312
9292-9311
9292-9318
9195-9312
9195-9311
9195-9318
2472-10951
2472-10952
2472-11497
2472-11498
2472-11499
2472-11453
2472-11454
2472-10729
2472-10735
2472-10852
2472-10853
2472-10816
2472-10855
2472-10481
2472-10482
2472-10378
2472-10379
2472-10483
2472-10543
9495-10047
9495-10048
9495-10050
9495-10051
9495-10049
10636-10047
10636-10048
10636-10481
10636-10482
10636-10484
10636-9312
10636-9318
10636-10051
10636-10049
10636-10378
10636-10379
10636-10483
10636-10543
11650-10951
11650-10952
11650-11497
11650-11498
11650-11499
11650-11453
11650-11454
11650-10852
11650-10853
11650-10816
11650-10855
11650-10047
11650-10048
11650-10481
11650-10482
11650-10484
11650-10051
11650-10049
11650-10378
11650-10379
11650-10483
11650-10543
Denial of Service
11677-11569
Denial of Service
11677-11568
Denial of Service
11676-11568
Denial of Service
11676-11569
Denial of Service
11676-11572
Denial of Service
11677-11572
Denial of Service
11676-11571
Denial of Service
11676-11644
Denial of Service
11676-11647
Denial of Service
11677-11571
Denial of Service
11676-11645
Denial of Service
11518-10729
Denial of Service
11518-10735
Denial of Service
11529-10047
Denial of Service
11529-10048
Denial of Service
11529-10481
Denial of Service
11529-10482
Denial of Service
11529-10484
Denial of Service
11529-10051
Denial of Service
11529-10049
Denial of Service
11529-10378
Denial of Service
11529-10379
Denial of Service
11529-10483
Denial of Service
11529-10543
Denial of Service
10728-9312
Denial of Service
10728-9318
Denial of Service
9292-9312
Denial of Service
9292-9311
Denial of Service
9292-9318
Denial of Service
9195-9312
Denial of Service
9195-9311
Denial of Service
9195-9318
Denial of Service
2472-10951
Denial of Service
2472-10952
Denial of Service
2472-11497
Denial of Service
2472-11498
Denial of Service
2472-11499
Denial of Service
2472-11453
Denial of Service
2472-11454
Denial of Service
2472-10729
Denial of Service
2472-10735
Denial of Service
2472-10852
Denial of Service
2472-10853
Denial of Service
2472-10816
Denial of Service
2472-10855
Denial of Service
2472-10481
Denial of Service
2472-10482
Denial of Service
2472-10378
Denial of Service
2472-10379
Denial of Service
2472-10483
Denial of Service
2472-10543
Denial of Service
9495-10047
Denial of Service
9495-10048
Denial of Service
9495-10050
Denial of Service
9495-10051
Denial of Service
9495-10049
Denial of Service
10636-10047
Denial of Service
10636-10048
Denial of Service
10636-10481
Denial of Service
10636-10482
Denial of Service
10636-10484
Denial of Service
10636-9312
Denial of Service
10636-9318
Denial of Service
10636-10051
Denial of Service
10636-10049
Denial of Service
10636-10378
Denial of Service
10636-10379
Denial of Service
10636-10483
Denial of Service
10636-10543
Denial of Service
11650-10951
Denial of Service
11650-10952
Denial of Service
11650-11497
Denial of Service
11650-11498
Denial of Service
11650-11499
Denial of Service
11650-11453
Denial of Service
11650-11454
Denial of Service
11650-10852
Denial of Service
11650-10853
Denial of Service
11650-10816
Denial of Service
11650-10855
Denial of Service
11650-10047
Denial of Service
11650-10048
Denial of Service
11650-10481
Denial of Service
11650-10482
Denial of Service
11650-10484
Denial of Service
11650-10051
Denial of Service
11650-10049
Denial of Service
11650-10378
Denial of Service
11650-10379
Denial of Service
11650-10483
Denial of Service
11650-10543
Important
11677-11569
Important
11677-11568
Important
11676-11568
Important
11676-11569
Important
11676-11572
Important
11677-11572
Important
11676-11571
Important
11676-11644
Important
11676-11647
Important
11677-11571
Important
11676-11645
Important
11518-10729
Important
11518-10735
Important
11529-10047
Important
11529-10048
Important
11529-10481
Important
11529-10482
Important
11529-10484
Important
11529-10051
Important
11529-10049
Important
11529-10378
Important
11529-10379
Important
11529-10483
Important
11529-10543
Important
10728-9312
Important
10728-9318
Important
9292-9312
Important
9292-9311
Important
9292-9318
Important
9195-9312
Important
9195-9311
Important
9195-9318
Important
2472-10951
Important
2472-10952
Important
2472-11497
Important
2472-11498
Important
2472-11499
Important
2472-11453
Important
2472-11454
Important
2472-10729
Important
2472-10735
Important
2472-10852
Important
2472-10853
Important
2472-10816
Important
2472-10855
Important
2472-10481
Important
2472-10482
Important
2472-10378
Important
2472-10379
Important
2472-10483
Important
2472-10543
Important
9495-10047
Important
9495-10048
Important
9495-10050
Important
9495-10051
Important
9495-10049
Important
10636-10047
Important
10636-10048
Important
10636-10481
Important
10636-10482
Important
10636-10484
Important
10636-9312
Important
10636-9318
Important
10636-10051
Important
10636-10049
Important
10636-10378
Important
10636-10379
Important
10636-10483
Important
10636-10543
Important
11650-10951
Important
11650-10952
Important
11650-11497
Important
11650-11498
Important
11650-11499
Important
11650-11453
Important
11650-11454
Important
11650-10852
Important
11650-10853
Important
11650-10816
Important
11650-10855
Important
11650-10047
Important
11650-10048
Important
11650-10481
Important
11650-10482
Important
11650-10484
Important
11650-10051
Important
11650-10049
Important
11650-10378
Important
11650-10379
Important
11650-10483
Important
11650-10543
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
4507419
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4506998
4486553; 4499405; 4503864
11677-11569
11677-11568
11676-11568
11676-11569
11676-11572
11677-11572
11676-11571
11677-11571
Maybe
Security Update
4507419
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4506990
4486553; 4499405; 4503864
11677-11569
11677-11568
11676-11568
11676-11569
11676-11572
11677-11572
11676-11571
11677-11571
Maybe
Security Update
4506991
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4506991
4495620; 4502584
11676-11644
11676-11647
11676-11645
Maybe
Security Update
4507458
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507458
4503291
11518-10729
11518-10735
2472-10729
2472-10735
Yes
Security Update
4507458
https://support.microsoft.com/help/4507458
11518-10729
11518-10735
2472-10729
2472-10735
4507420
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4506997
11529-10047
11529-10048
11529-10051
11529-10049
9495-10047
9495-10048
9495-10050
9495-10051
9495-10049
10636-10047
10636-10048
10636-10051
10636-10049
11650-10047
11650-10048
11650-10051
11650-10049
Maybe
Monthly Rollup
4507411
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4506963
11529-10047
11529-10048
11529-10051
11529-10049
9495-10047
9495-10048
9495-10050
9495-10051
9495-10049
10636-10047
10636-10048
10636-10051
10636-10049
11650-10047
11650-10048
11650-10051
11650-10049
Maybe
Security Only
4507422
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4506999
4499408; 4503867
11529-10481
11529-10482
11529-10484
11529-10483
11529-10543
2472-10481
2472-10482
2472-10483
2472-10543
10636-10481
10636-10482
10636-10484
10636-10483
10636-10543
11650-10481
11650-10482
11650-10484
11650-10483
11650-10543
Maybe
Monthly Rollup
4507413
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4506962
11529-10481
11529-10482
11529-10483
11529-10543
2472-10481
2472-10482
2472-10483
2472-10543
10636-10481
10636-10482
10636-10483
10636-10543
11650-10481
11650-10482
11650-10483
11650-10543
Maybe
Security Only
4507422
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4506996
4499408; 4503867
11529-10481
11529-10482
11529-10484
11529-10483
11529-10543
2472-10481
2472-10482
2472-10483
2472-10543
10636-10481
10636-10482
10636-10484
10636-10483
10636-10543
11650-10481
11650-10482
11650-10484
11650-10483
11650-10543
Maybe
Monthly Rollup
4507422
4499408; 4503867
11529-10481
11529-10482
11529-10484
11529-10483
11529-10543
2472-10481
2472-10482
2472-10483
2472-10543
10636-10481
10636-10482
10636-10484
10636-10483
10636-10543
11650-10481
11650-10482
11650-10484
11650-10483
11650-10543
Maybe
Monthly Rollup
4507421
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4506995
4499407; 4503866
11529-10378
11529-10379
2472-10378
2472-10379
10636-10378
10636-10379
11650-10378
11650-10379
Maybe
Monthly Rollup
4507412
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4506961
11529-10378
11529-10379
2472-10378
2472-10379
10636-10378
10636-10379
11650-10378
11650-10379
Maybe
Security Only
4507423
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4506997
4489489; 4499409
10728-9312
10728-9318
9292-9312
9292-9311
9292-9318
9195-9312
9195-9311
9195-9318
10636-9312
10636-9318
Maybe
Monthly Rollup
4507414
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4506963
10728-9312
10728-9318
9292-9312
9292-9311
9292-9318
9195-9312
9195-9311
9195-9318
10636-9312
10636-9318
Maybe
Security Only
4507423
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507003
4499409; 4503868
10728-9312
10728-9318
9292-9312
9292-9311
9292-9318
9195-9312
9195-9311
9195-9318
10636-9312
10636-9318
Maybe
Monthly Rollup
4507414
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4506975
10728-9312
10728-9318
9292-9312
9292-9311
9292-9318
9195-9312
9195-9311
9195-9318
10636-9312
10636-9318
Maybe
Security Only
4507450
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507450
4503279
2472-10951
2472-10952
Yes
Security Update
4507450
https://support.microsoft.com/help/4507450
2472-10951
2472-10952
4507435
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507435
4503286
2472-11497
2472-11498
2472-11499
Yes
Security Update
4507435
https://support.microsoft.com/help/4507435
2472-11497
2472-11498
2472-11499
4507455
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507455
4503284
2472-11453
2472-11454
Yes
Security Update
4507455
https://support.microsoft.com/help/4507455
2472-11453
2472-11454
4507460
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507460
4503267
2472-10852
2472-10853
2472-10816
2472-10855
Yes
Security Update
4507460
https://support.microsoft.com/help/4507460
2472-10852
2472-10853
2472-10816
2472-10855
4507422
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507005
4499408; 4503867
11529-10481
11529-10482
11529-10484
11529-10483
11529-10543
2472-10481
2472-10482
2472-10483
2472-10543
10636-10481
10636-10482
10636-10484
10636-10483
10636-10543
11650-10481
11650-10482
11650-10484
11650-10483
11650-10543
Maybe
Monthly Rollup
4507413
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4506977
11529-10481
11529-10482
11529-10483
11529-10543
2472-10481
2472-10482
2472-10483
2472-10543
10636-10481
10636-10482
10636-10483
10636-10543
11650-10481
11650-10482
11650-10483
11650-10543
Maybe
Security Only
4507421
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507002
4499407; 4503866
11529-10378
11529-10379
2472-10378
2472-10379
10636-10378
10636-10379
11650-10378
11650-10379
Maybe
Monthly Rollup
4507412
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4506974
11529-10378
11529-10379
2472-10378
2472-10379
10636-10378
10636-10379
11650-10378
11650-10379
Maybe
Security Only
4507420
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507004
4499406; 4503865
11529-10047
11529-10048
11529-10051
11529-10049
9495-10047
9495-10048
9495-10050
9495-10051
9495-10049
10636-10047
10636-10048
10636-10051
10636-10049
11650-10047
11650-10048
11650-10051
11650-10049
Maybe
Monthly Rollup
4507411
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4506976
11529-10047
11529-10048
11529-10051
11529-10049
9495-10047
9495-10048
9495-10050
9495-10051
9495-10049
10636-10047
10636-10048
10636-10051
10636-10049
11650-10047
11650-10048
11650-10051
11650-10049
Maybe
Security Only
4507420
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507001
4503865
11529-10047
11529-10048
11529-10051
11529-10049
9495-10047
9495-10048
9495-10050
9495-10051
9495-10049
10636-10047
10636-10048
10636-10051
10636-10049
11650-10047
11650-10048
11650-10051
11650-10049
Maybe
Monthly Rollup
4507411
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4506966
11529-10047
11529-10048
11529-10051
11529-10049
9495-10047
9495-10048
9495-10050
9495-10051
9495-10049
10636-10047
10636-10048
10636-10051
10636-10049
11650-10047
11650-10048
11650-10051
11650-10049
Maybe
Security Only
4507413
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4506964
11529-10481
11529-10482
11529-10483
11529-10543
2472-10481
2472-10482
2472-10483
2472-10543
10636-10481
10636-10482
10636-10483
10636-10543
11650-10481
11650-10482
11650-10483
11650-10543
Maybe
Security Only
4507423
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507001
4489489; 4499409
10728-9312
10728-9318
9292-9312
9292-9311
9292-9318
9195-9312
9195-9311
9195-9318
10636-9312
10636-9318
Maybe
Monthly Rollup
4507414
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4506966
10728-9312
10728-9318
9292-9312
9292-9311
9292-9318
9195-9312
9195-9311
9195-9318
10636-9312
10636-9318
Maybe
Security Only
4507421
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507000
4499407; 4503866
11529-10378
11529-10379
2472-10378
2472-10379
10636-10378
10636-10379
11650-10378
11650-10379
Maybe
Monthly Rollup
4507412
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4506965
11529-10378
11529-10379
2472-10378
2472-10379
10636-10378
10636-10379
11650-10378
11650-10379
Maybe
Security Only
4506987
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4506987
4495611; 4502561
11650-10951
Maybe
Security Update
4506986
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4506986
4495610; 4502560
11650-10952
11650-11454
11650-10852
11650-10853
11650-10816
11650-10855
Maybe
Security Update
4506989
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4506989
4495616; 4502563
11650-11497
11650-11498
11650-11499
Maybe
Security Update
4506988
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4506988
4495613; 4502562
11650-11453
Maybe
Security Update
4507420
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4506994
4499406; 4503865
11529-10047
11529-10048
11529-10051
11529-10049
9495-10047
9495-10048
9495-10050
9495-10051
9495-10049
10636-10047
10636-10048
10636-10051
10636-10049
11650-10047
11650-10048
11650-10051
11650-10049
Maybe
Monthly Rollup
4507411
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4506956
11529-10047
11529-10048
11529-10051
11529-10049
9495-10047
9495-10048
9495-10050
9495-10051
9495-10049
10636-10047
10636-10048
10636-10051
10636-10049
11650-10047
11650-10048
11650-10051
11650-10049
Maybe
Security Only
4507422
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4506993
4499408; 4503867
11529-10481
11529-10482
11529-10484
11529-10483
11529-10543
2472-10481
2472-10482
2472-10483
2472-10543
10636-10481
10636-10482
10636-10484
10636-10483
10636-10543
11650-10481
11650-10482
11650-10484
11650-10483
11650-10543
Maybe
Monthly Rollup
4507413
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4506955
11529-10481
11529-10482
11529-10483
11529-10543
2472-10481
2472-10482
2472-10483
2472-10543
10636-10481
10636-10482
10636-10483
10636-10543
11650-10481
11650-10482
11650-10483
11650-10543
Maybe
Security Only
4507421
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4506992
4499407; 4503866
11529-10378
11529-10379
2472-10378
2472-10379
10636-10378
10636-10379
11650-10378
11650-10379
Maybe
Monthly Rollup
4507412
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4506954
11529-10378
11529-10379
2472-10378
2472-10379
10636-10378
10636-10379
11650-10378
11650-10379
Maybe
Security Only
Oleksandr Mirosh (<a href="https://twitter.com/olekmirosh">@olekmirosh</a>) and Alvaro Munoz (<a href="https://twitter.com/pwntester">@pwntester</a>) from Micro Focus Fortify
1.0
2019-07-09T07:00:00
<p>Information published.</p>
Microsoft Exchange Information Disclosure Vulnerability
<p>An information disclosure vulnerability exists when Exchange allows creation of entities with Display Names having non-printable characters.</p>
<p>An authenticated attacker could exploit this vulnerability by creating entities with invalid display names, which, when added to conversations, remain invisible.</p>
<p>This security update addresses the issue by validating display names upon creation in Microsoft Exchange, and by rendering invalid display names correctly in Microsoft Outlook clients.</p>
<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>
<p>This vulnerability discloses email conversations and chats to unintended recipients. Entities created by exploiting this vulnerability can also be given access to documents via Sharepoint.</p>
<p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p>
<p>No, the Preview Pane is not an attack vector.</p>
<p><strong>Are the updates for the Microsoft Office for Mac and Outlook for iOS currently available?</strong></p>
<p>The security update for Microsoft Office 2016 for Mac, Microsoft Office 2019 for Mac, and Outlook for iOS are not immediately available. The updates will be released as soon as possible, and when they are available, customers will be notified via a revision to this CVE information.</p>
Microsoft Office
Microsoft
CVE-2019-1084
11573
11574
11575
11577
11578
10753
10754
10765
10766
10734
10810
10811
10603
10601
10602
10527
10528
10685
10770
10771
10772
10773
10628
10630
10629
10631
11620
11621
10476
11681
11682
11680
11683
11685
Information Disclosure
11573
Information Disclosure
11574
Information Disclosure
11575
Information Disclosure
11577
Information Disclosure
11578
Information Disclosure
10753
Information Disclosure
10754
Information Disclosure
10765
Information Disclosure
10766
Information Disclosure
10734
Information Disclosure
10810
Information Disclosure
10811
Information Disclosure
10603
Information Disclosure
10601
Information Disclosure
10602
Information Disclosure
10527
Information Disclosure
10528
Information Disclosure
10685
Information Disclosure
10770
Information Disclosure
10771
Information Disclosure
10772
Information Disclosure
10773
Information Disclosure
10628
Information Disclosure
10630
Information Disclosure
10629
Information Disclosure
10631
Information Disclosure
11620
Information Disclosure
11621
Information Disclosure
10476
Information Disclosure
11681
Information Disclosure
11682
Information Disclosure
11680
Information Disclosure
11683
Information Disclosure
11685
Important
11573
Important
11574
Important
11575
Important
11577
Important
11578
Important
10753
Important
10754
Important
10765
Important
10766
Important
10734
Important
10810
Important
10811
Important
10603
Important
10601
Important
10602
Important
10527
Important
10528
Important
10685
Important
10770
Important
10771
Important
10772
Important
10773
Important
10628
Important
10630
Important
10629
Important
10631
Important
11620
Important
11621
Important
10476
Important
11681
Important
11682
Important
11680
Important
11683
Important
11685
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
Click to Run
11573
11574
11577
11578
No
Security Update
https://aka.ms/OfficeSecurityReleases
Click to Run
11573
11574
11577
11578
No
Security Update
4475514
https://www.microsoft.com/downloads/details.aspx?familyid=43f0ad26-a66a-4e6d-8c92-728d90f7a111
4011622
10753
10754
Maybe
Security Update
4475514
https://www.microsoft.com/downloads/details.aspx?familyid=476583a7-e075-4074-8d63-65976276764f
4011622
10753
10754
Maybe
Security Update
4475517
https://www.microsoft.com/downloads/details.aspx?familyid=42e7b349-54e6-4974-aec5-4cb4e7f26044
4461601
10765
10766
Maybe
Security Update
4475517
https://www.microsoft.com/downloads/details.aspx?familyid=67764178-6415-46ff-b249-ed3afdcf9192
4461601
10765
10766
Maybe
Security Update
4464592
https://www.microsoft.com/downloads/details.aspx?familyid=5ca4127a-607c-4af9-ab04-ff07459c8480
4461595
10810
10811
Maybe
Security Update
4464592
https://www.microsoft.com/downloads/details.aspx?familyid=62fd3952-1cb8-44a3-bfc9-f35545771793
4461595
10810
10811
Maybe
Security Update
4464558
4464504
10603
10601
10602
Maybe
Security Update
4464558
https://www.microsoft.com/downloads/details.aspx?familyid=031bbf12-b6fd-44aa-8c29-0070e2420174
4464504
10603
10601
10602
Maybe
Security Update
4464558
https://www.microsoft.com/downloads/details.aspx?familyid=ecb9b15a-c471-4708-aa94-fa56672e76cd
4464504
10603
10601
10602
Maybe
Security Update
4475509
https://www.microsoft.com/downloads/details.aspx?familyid=89ec0d48-7e63-4ace-aa03-26156702efa2
4461623
10527
10528
Maybe
Security Update
4475509
https://www.microsoft.com/downloads/details.aspx?familyid=e7350da3-41b5-491b-9f80-f06f63bbe69a
4461623
10527
10528
Maybe
Security Update
Release Notes
https://play.google.com/store/apps/details?id=com.microsoft.office.outlook
10685
11683
Maybe
Security Update
4475545
https://www.microsoft.com/downloads/details.aspx?familyid=b1426119-a5ff-4772-b275-7077dbe81c2b
4461473
10770
10771
10772
10773
Maybe
Security Update
4475545
https://www.microsoft.com/downloads/details.aspx?familyid=48eeae7f-547e-46d5-945f-a56576f9d1c3
4461473
10770
10771
10772
10773
Maybe
Security Update
4475519
https://www.microsoft.com/downloads/details.aspx?familyid=99654d65-bfd3-4ae7-b294-86d443b8ecbb
4461487
10628
10630
10629
10631
Maybe
Security Update
4475519
https://www.microsoft.com/downloads/details.aspx?familyid=9e5aeb00-8fca-4c57-9434-d1f78ac725ae
4461487
10628
10630
10629
10631
Maybe
Security Update
4509409
https://www.microsoft.com/downloads/details.aspx?familyid=d44bad0f-f22f-4d18-815c-849d2ced2a95
4503027
11620
11681
11682
Maybe
Security Update
4509409
https://support.microsoft.com/help/4509409
11620
11681
11682
4509408
https://www.microsoft.com/downloads/details.aspx?familyid=c15e2b68-cf18-43f3-ba31-83b8c01aeb5f
4503027
11621
11680
Maybe
Security Update
4509408
https://support.microsoft.com/help/4509408
11621
11680
4509410
https://www.microsoft.com/downloads/details.aspx?familyid=fe350505-fe6d-44c7-8dbe-3f848db6a1c1
4503028
10476
Maybe
Security Update
4509410
https://support.microsoft.com/help/4509410
10476
4509409
https://www.microsoft.com/downloads/details.aspx?familyid=dc21508f-0f68-42ab-a0a0-c830743a3c2f
11620
11681
11682
Maybe
Security Update
4509409
https://support.microsoft.com/help/4509409
11620
11681
11682
4509409
https://www.microsoft.com/downloads/details.aspx?familyid=ff7bfd64-fd88-4e95-bc8c-8eedffbf633c
11620
11681
11682
Maybe
Security Update
4509409
https://support.microsoft.com/help/4509409
11620
11681
11682
4509408
https://www.microsoft.com/downloads/details.aspx?familyid=5e43a654-6e1a-4929-8fbd-6fe145fb09ad
4503027
11621
11680
Maybe
Security Update
4509408
https://support.microsoft.com/help/4509408
11621
11680
Release Notes
https://www.microsoft.com/en-us/p/mail-and-calendar/9wzdncrfhvqm?activetab=pivot:overviewtab
10685
11683
Maybe
Security Update
<a href="https://www.linkedin.com/in/jonathan-birch-ab27681/">Jonathan Birch</a> of Microsoft Corporation
1.0
2019-07-09T07:00:00
<p>Information published.</p>
Windows WLAN Service Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists in the way that the wlansvc.dll handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.</p>
<p>To exploit the vulnerability, a locally authenticated attacker could run a specially crafted application.</p>
<p>The security update addresses the vulnerability by ensuring the wlansvc.dll properly handles objects in memory.</p>
Windows Media
Microsoft
CVE-2019-1085
10951
10952
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
9312
10287
9311
9318
9344
10050
10051
10049
10378
10379
10483
10543
Elevation of Privilege
10951
Elevation of Privilege
10952
Elevation of Privilege
11497
Elevation of Privilege
11498
Elevation of Privilege
11499
Elevation of Privilege
11563
Elevation of Privilege
11568
Elevation of Privilege
11569
Elevation of Privilege
11570
Elevation of Privilege
11571
Elevation of Privilege
11572
Elevation of Privilege
11453
Elevation of Privilege
11454
Elevation of Privilege
11583
Elevation of Privilege
11644
Elevation of Privilege
11645
Elevation of Privilege
11646
Elevation of Privilege
11647
Elevation of Privilege
10729
Elevation of Privilege
10735
Elevation of Privilege
10852
Elevation of Privilege
10853
Elevation of Privilege
10816
Elevation of Privilege
10855
Elevation of Privilege
10047
Elevation of Privilege
10048
Elevation of Privilege
10481
Elevation of Privilege
10482
Elevation of Privilege
10484
Elevation of Privilege
9312
Elevation of Privilege
10287
Elevation of Privilege
9311
Elevation of Privilege
9318
Elevation of Privilege
9344
Elevation of Privilege
10050
Elevation of Privilege
10051
Elevation of Privilege
10049
Elevation of Privilege
10378
Elevation of Privilege
10379
Elevation of Privilege
10483
Elevation of Privilege
10543
Important
10951
Important
10952
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9311
Important
9318
Important
9344
Important
10050
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10951
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10952
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11497
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11498
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11499
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11563
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11453
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11454
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11583
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11644
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11645
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11646
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11647
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10729
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10735
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10852
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10853
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10816
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10855
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10047
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10048
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10481
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10482
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10484
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9312
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10287
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9311
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9318
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9344
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10050
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10051
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10049
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10378
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10379
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10483
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10543
4507450
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507450
4503279
10951
10952
Yes
Security Update
4507450
https://support.microsoft.com/help/4507450
10951
10952
4507435
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507435
4503286
11497
11498
11499
11563
Yes
Security Update
4507435
https://support.microsoft.com/help/4507435
11497
11498
11499
11563
4507469
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507469
4503327
11568
11569
11570
11571
11572
Yes
Security Update
4507469
https://support.microsoft.com/help/4507469
11568
11569
11570
11571
11572
4507455
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507455
4503284
11453
11454
11583
Yes
Security Update
4507455
https://support.microsoft.com/help/4507455
11453
11454
11583
4507453
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507453
4503293
11644
11645
11646
11647
Yes
Security Update
4507453
https://support.microsoft.com/help/4507453
11644
11645
11646
11647
4507458
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507458
4503291
10729
10735
Yes
Security Update
4507458
https://support.microsoft.com/help/4507458
10729
10735
4507460
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507460
4503267
10852
10853
10816
10855
Yes
Security Update
4507460
https://support.microsoft.com/help/4507460
10852
10853
10816
10855
4507449
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507449
4503292
10047
10048
10050
10051
10049
Yes
Monthly Rollup
4507449
https://support.microsoft.com/help/4507449
10047
10048
10050
10051
10049
4507456
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507456
10047
10048
10050
10051
10049
Yes
Security Only
4507448
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507448
4503276
10481
10482
10484
10483
10543
Yes
Monthly Rollup
4507448
https://support.microsoft.com/help/4507448
10481
10482
10484
10483
10543
4507457
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507457
10481
10482
10483
10543
Yes
Security Only
4507457
https://support.microsoft.com/help/4507457
10481
10482
10483
10543
4507448
4503276
10481
10482
10484
10483
10543
Yes
Monthly Rollup
4507448
https://support.microsoft.com/help/4507448
10481
10482
10484
10483
10543
4507452
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507452
4503273
9312
10287
9311
9318
9344
Yes
Monthly Rollup
4507461
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507461
9312
10287
9311
9318
9344
Yes
Security Only
4507462
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507462
4503285
10378
10379
Yes
Monthly Rollup
4507462
https://support.microsoft.com/help/4507462
10378
10379
4507464
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507464
10378
10379
Yes
Security Only
4507464
https://support.microsoft.com/help/4507464
10378
10379
zhong_sf of <a href="http://www.360.com/">Qihoo 360 Vulcan Team</a>
1.0
2019-07-09T07:00:00
<p>Information published.</p>
Windows Audio Service Elevation of Privilege Vulnerability
<p>An elevation of privilege exists in Windows Audio Service. An attacker who successfully exploited the vulnerability could run arbitrary code with elevated privileges.</p>
<p>To exploit the vulnerability, an attacker could run a specially crafted application that could exploit the vulnerability. This vulnerability by itself does not allow arbitrary code to be run. However, this vulnerability could be used in conjunction with one or more vulnerabilities (e.g. a remote code execution vulnerability and another elevation of privilege) that could take advantage of the elevated privileges when running.</p>
<p>The update addresses the vulnerability by correcting how the Windows Audio Service handles processes these requests.</p>
Windows Media
Microsoft
CVE-2019-1086
10951
10952
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
10729
10735
10852
10853
10816
10855
10481
10482
10484
10483
10543
Elevation of Privilege
10951
Elevation of Privilege
10952
Elevation of Privilege
11497
Elevation of Privilege
11498
Elevation of Privilege
11499
Elevation of Privilege
11563
Elevation of Privilege
11568
Elevation of Privilege
11569
Elevation of Privilege
11570
Elevation of Privilege
11571
Elevation of Privilege
11572
Elevation of Privilege
11453
Elevation of Privilege
11454
Elevation of Privilege
11583
Elevation of Privilege
11644
Elevation of Privilege
11645
Elevation of Privilege
11646
Elevation of Privilege
11647
Elevation of Privilege
10729
Elevation of Privilege
10735
Elevation of Privilege
10852
Elevation of Privilege
10853
Elevation of Privilege
10816
Elevation of Privilege
10855
Elevation of Privilege
10481
Elevation of Privilege
10482
Elevation of Privilege
10484
Elevation of Privilege
10483
Elevation of Privilege
10543
Important
10951
Important
10952
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10481
Important
10482
Important
10484
Important
10483
Important
10543
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10951
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10952
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11497
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11498
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11499
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11563
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11453
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11454
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11583
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11644
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11645
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11646
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11647
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10729
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10735
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10852
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10853
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10816
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10855
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10481
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10482
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10484
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10483
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10543
4507450
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507450
4503279
10951
10952
Yes
Security Update
4507450
https://support.microsoft.com/help/4507450
10951
10952
4507435
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507435
4503286
11497
11498
11499
11563
Yes
Security Update
4507435
https://support.microsoft.com/help/4507435
11497
11498
11499
11563
4507469
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507469
4503327
11568
11569
11570
11571
11572
Yes
Security Update
4507469
https://support.microsoft.com/help/4507469
11568
11569
11570
11571
11572
4507455
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507455
4503284
11453
11454
11583
Yes
Security Update
4507455
https://support.microsoft.com/help/4507455
11453
11454
11583
4507453
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507453
4503293
11644
11645
11646
11647
Yes
Security Update
4507453
https://support.microsoft.com/help/4507453
11644
11645
11646
11647
4507458
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507458
4503291
10729
10735
Yes
Security Update
4507458
https://support.microsoft.com/help/4507458
10729
10735
4507460
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507460
4503267
10852
10853
10816
10855
Yes
Security Update
4507460
https://support.microsoft.com/help/4507460
10852
10853
10816
10855
4507448
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507448
4503276
10481
10482
10484
10483
10543
Yes
Monthly Rollup
4507448
https://support.microsoft.com/help/4507448
10481
10482
10484
10483
10543
4507457
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507457
10481
10482
10483
10543
Yes
Security Only
4507457
https://support.microsoft.com/help/4507457
10481
10482
10483
10543
4507448
4503276
10481
10482
10484
10483
10543
Yes
Monthly Rollup
4507448
https://support.microsoft.com/help/4507448
10481
10482
10484
10483
10543
zhong_sf of <a href="http://www.360.com/">Qihoo 360 Vulcan Team</a>
1.0
2019-07-09T07:00:00
<p>Information published.</p>
Windows Audio Service Elevation of Privilege Vulnerability
<p>An elevation of privilege exists in Windows Audio Service. An attacker who successfully exploited the vulnerability could run arbitrary code with elevated privileges.</p>
<p>To exploit the vulnerability, an attacker could run a specially crafted application that could exploit the vulnerability. This vulnerability by itself does not allow arbitrary code to be run. However, this vulnerability could be used in conjunction with one or more vulnerabilities (e.g. a remote code execution vulnerability and another elevation of privilege) that could take advantage of the elevated privileges when running.</p>
<p>The update addresses the vulnerability by correcting how the Windows Audio Service handles processes these requests.</p>
Windows Media
Microsoft
CVE-2019-1087
10951
10952
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
10729
10735
10852
10853
10816
10855
10481
10482
10484
10483
10543
Elevation of Privilege
10951
Elevation of Privilege
10952
Elevation of Privilege
11497
Elevation of Privilege
11498
Elevation of Privilege
11499
Elevation of Privilege
11563
Elevation of Privilege
11568
Elevation of Privilege
11569
Elevation of Privilege
11570
Elevation of Privilege
11571
Elevation of Privilege
11572
Elevation of Privilege
11453
Elevation of Privilege
11454
Elevation of Privilege
11583
Elevation of Privilege
11644
Elevation of Privilege
11645
Elevation of Privilege
11646
Elevation of Privilege
11647
Elevation of Privilege
10729
Elevation of Privilege
10735
Elevation of Privilege
10852
Elevation of Privilege
10853
Elevation of Privilege
10816
Elevation of Privilege
10855
Elevation of Privilege
10481
Elevation of Privilege
10482
Elevation of Privilege
10484
Elevation of Privilege
10483
Elevation of Privilege
10543
Important
10951
Important
10952
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10481
Important
10482
Important
10484
Important
10483
Important
10543
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10951
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10952
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11497
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11498
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11499
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11563
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11453
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11454
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11583
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11644
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11645
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11646
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11647
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10729
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10735
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10852
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10853
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10816
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10855
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10481
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10482
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10484
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10483
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10543
4507450
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507450
4503279
10951
10952
Yes
Security Update
4507450
https://support.microsoft.com/help/4507450
10951
10952
4507435
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507435
4503286
11497
11498
11499
11563
Yes
Security Update
4507435
https://support.microsoft.com/help/4507435
11497
11498
11499
11563
4507469
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507469
4503327
11568
11569
11570
11571
11572
Yes
Security Update
4507469
https://support.microsoft.com/help/4507469
11568
11569
11570
11571
11572
4507455
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507455
4503284
11453
11454
11583
Yes
Security Update
4507455
https://support.microsoft.com/help/4507455
11453
11454
11583
4507453
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507453
4503293
11644
11645
11646
11647
Yes
Security Update
4507453
https://support.microsoft.com/help/4507453
11644
11645
11646
11647
4507458
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507458
4503291
10729
10735
Yes
Security Update
4507458
https://support.microsoft.com/help/4507458
10729
10735
4507460
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507460
4503267
10852
10853
10816
10855
Yes
Security Update
4507460
https://support.microsoft.com/help/4507460
10852
10853
10816
10855
4507448
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507448
4503276
10481
10482
10484
10483
10543
Yes
Monthly Rollup
4507448
https://support.microsoft.com/help/4507448
10481
10482
10484
10483
10543
4507457
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507457
10481
10482
10483
10543
Yes
Security Only
4507457
https://support.microsoft.com/help/4507457
10481
10482
10483
10543
4507448
4503276
10481
10482
10484
10483
10543
Yes
Monthly Rollup
4507448
https://support.microsoft.com/help/4507448
10481
10482
10484
10483
10543
zhong_sf of <a href="http://www.360.com/">Qihoo 360 Vulcan Team</a>
1.0
2019-07-09T07:00:00
<p>Information published.</p>
Windows Audio Service Elevation of Privilege Vulnerability
<p>An elevation of privilege exists in Windows Audio Service. An attacker who successfully exploited the vulnerability could run arbitrary code with elevated privileges.</p>
<p>To exploit the vulnerability, an attacker could run a specially crafted application that could exploit the vulnerability. This vulnerability by itself does not allow arbitrary code to be run. However, this vulnerability could be used in conjunction with one or more vulnerabilities (e.g. a remote code execution vulnerability and another elevation of privilege) that could take advantage of the elevated privileges when running.</p>
<p>The update addresses the vulnerability by correcting how the Windows Audio Service handles processes these requests.</p>
Windows Media
Microsoft
CVE-2019-1088
10951
10952
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
9312
10287
9311
9318
9344
10050
10051
10049
10378
10379
10483
10543
Elevation of Privilege
10951
Elevation of Privilege
10952
Elevation of Privilege
11497
Elevation of Privilege
11498
Elevation of Privilege
11499
Elevation of Privilege
11563
Elevation of Privilege
11568
Elevation of Privilege
11569
Elevation of Privilege
11570
Elevation of Privilege
11571
Elevation of Privilege
11572
Elevation of Privilege
11453
Elevation of Privilege
11454
Elevation of Privilege
11583
Elevation of Privilege
11644
Elevation of Privilege
11645
Elevation of Privilege
11646
Elevation of Privilege
11647
Elevation of Privilege
10729
Elevation of Privilege
10735
Elevation of Privilege
10852
Elevation of Privilege
10853
Elevation of Privilege
10816
Elevation of Privilege
10855
Elevation of Privilege
10047
Elevation of Privilege
10048
Elevation of Privilege
10481
Elevation of Privilege
10482
Elevation of Privilege
10484
Elevation of Privilege
9312
Elevation of Privilege
10287
Elevation of Privilege
9311
Elevation of Privilege
9318
Elevation of Privilege
9344
Elevation of Privilege
10050
Elevation of Privilege
10051
Elevation of Privilege
10049
Elevation of Privilege
10378
Elevation of Privilege
10379
Elevation of Privilege
10483
Elevation of Privilege
10543
Important
10951
Important
10952
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9311
Important
9318
Important
9344
Important
10050
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10951
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10952
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11497
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11498
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11499
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11563
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11453
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11454
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11583
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11644
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11645
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11646
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11647
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10729
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10735
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10852
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10853
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10816
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10855
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10047
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10048
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10481
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10482
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10484
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9312
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10287
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9311
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9318
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9344
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10050
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10051
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10049
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10378
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10379
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10483
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10543
4507450
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507450
4503279
10951
10952
Yes
Security Update
4507450
https://support.microsoft.com/help/4507450
10951
10952
4507435
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507435
4503286
11497
11498
11499
11563
Yes
Security Update
4507435
https://support.microsoft.com/help/4507435
11497
11498
11499
11563
4507469
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507469
4503327
11568
11569
11570
11571
11572
Yes
Security Update
4507469
https://support.microsoft.com/help/4507469
11568
11569
11570
11571
11572
4507455
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507455
4503284
11453
11454
11583
Yes
Security Update
4507455
https://support.microsoft.com/help/4507455
11453
11454
11583
4507453
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507453
4503293
11644
11645
11646
11647
Yes
Security Update
4507453
https://support.microsoft.com/help/4507453
11644
11645
11646
11647
4507458
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507458
4503291
10729
10735
Yes
Security Update
4507458
https://support.microsoft.com/help/4507458
10729
10735
4507460
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507460
4503267
10852
10853
10816
10855
Yes
Security Update
4507460
https://support.microsoft.com/help/4507460
10852
10853
10816
10855
4507449
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507449
4503292
10047
10048
10050
10051
10049
Yes
Monthly Rollup
4507449
https://support.microsoft.com/help/4507449
10047
10048
10050
10051
10049
4507456
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507456
10047
10048
10050
10051
10049
Yes
Security Only
4507448
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507448
4503276
10481
10482
10484
10483
10543
Yes
Monthly Rollup
4507448
https://support.microsoft.com/help/4507448
10481
10482
10484
10483
10543
4507457
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507457
10481
10482
10483
10543
Yes
Security Only
4507457
https://support.microsoft.com/help/4507457
10481
10482
10483
10543
4507448
4503276
10481
10482
10484
10483
10543
Yes
Monthly Rollup
4507448
https://support.microsoft.com/help/4507448
10481
10482
10484
10483
10543
4507452
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507452
4503273
9312
10287
9311
9318
9344
Yes
Monthly Rollup
4507461
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507461
9312
10287
9311
9318
9344
Yes
Security Only
4507462
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507462
4503285
10378
10379
Yes
Monthly Rollup
4507462
https://support.microsoft.com/help/4507462
10378
10379
4507464
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507464
10378
10379
Yes
Security Only
4507464
https://support.microsoft.com/help/4507464
10378
10379
zhong_sf of <a href="http://www.360.com/">Qihoo 360 Vulcan Team</a>
1.0
2019-07-09T07:00:00
<p>Information published.</p>
Windows RPCSS Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists in rpcss.dll when the RPC service Activation Kernel improperly handles an RPC request.</p>
<p>To exploit this vulnerability, a low level authenticated attacker could run a specially crafted application.</p>
<p>The security update addresses this vulnerability by correcting how rpcss.dll handles these requests.</p>
Windows Kernel
Microsoft
CVE-2019-1089
10951
10952
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
10379
10483
10543
11583
11644
11645
11646
11647
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
9312
10287
9311
9318
9344
10050
10051
10049
10378
Elevation of Privilege
10951
Elevation of Privilege
10952
Elevation of Privilege
11497
Elevation of Privilege
11498
Elevation of Privilege
11499
Elevation of Privilege
11563
Elevation of Privilege
11568
Elevation of Privilege
11569
Elevation of Privilege
11570
Elevation of Privilege
11571
Elevation of Privilege
11572
Elevation of Privilege
11453
Elevation of Privilege
11454
Elevation of Privilege
10379
Elevation of Privilege
10483
Elevation of Privilege
10543
Elevation of Privilege
11583
Elevation of Privilege
11644
Elevation of Privilege
11645
Elevation of Privilege
11646
Elevation of Privilege
11647
Elevation of Privilege
10729
Elevation of Privilege
10735
Elevation of Privilege
10852
Elevation of Privilege
10853
Elevation of Privilege
10816
Elevation of Privilege
10855
Elevation of Privilege
10047
Elevation of Privilege
10048
Elevation of Privilege
10481
Elevation of Privilege
10482
Elevation of Privilege
10484
Elevation of Privilege
9312
Elevation of Privilege
10287
Elevation of Privilege
9311
Elevation of Privilege
9318
Elevation of Privilege
9344
Elevation of Privilege
10050
Elevation of Privilege
10051
Elevation of Privilege
10049
Elevation of Privilege
10378
Important
10951
Important
10952
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
10379
Important
10483
Important
10543
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9311
Important
9318
Important
9344
Important
10050
Important
10051
Important
10049
Important
10378
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10951
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10952
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11497
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11498
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11499
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11563
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11453
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11454
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10379
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10483
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10543
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11583
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11644
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11645
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11646
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11647
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10729
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10735
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10852
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10853
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10816
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10855
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10047
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10048
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10481
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10482
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10484
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9312
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10287
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9311
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9318
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9344
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10050
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10051
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10049
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10378
4507450
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507450
4503279
10951
10952
Yes
Security Update
4507450
https://support.microsoft.com/help/4507450
10951
10952
4507435
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507435
4503286
11497
11498
11499
11563
Yes
Security Update
4507435
https://support.microsoft.com/help/4507435
11497
11498
11499
11563
4507469
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507469
4503327
11568
11569
11570
11571
11572
Yes
Security Update
4507469
https://support.microsoft.com/help/4507469
11568
11569
11570
11571
11572
4507455
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507455
4503284
11453
11454
11583
Yes
Security Update
4507455
https://support.microsoft.com/help/4507455
11453
11454
11583
4507462
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507462
4503285
10379
10378
Yes
Monthly Rollup
4507462
https://support.microsoft.com/help/4507462
10379
10378
4507464
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507464
10379
10378
Yes
Security Only
4507464
https://support.microsoft.com/help/4507464
10379
10378
4507448
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507448
4503276
10483
10543
10481
10482
10484
Yes
Monthly Rollup
4507448
https://support.microsoft.com/help/4507448
10483
10543
10481
10482
10484
4507457
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507457
10483
10543
10481
10482
Yes
Security Only
4507457
https://support.microsoft.com/help/4507457
10483
10543
10481
10482
4507453
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507453
4503293
11644
11645
11646
11647
Yes
Security Update
4507453
https://support.microsoft.com/help/4507453
11644
11645
11646
11647
4507458
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507458
4503291
10729
10735
Yes
Security Update
4507458
https://support.microsoft.com/help/4507458
10729
10735
4507460
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507460
4503267
10852
10853
10816
10855
Yes
Security Update
4507460
https://support.microsoft.com/help/4507460
10852
10853
10816
10855
4507449
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507449
4503292
10047
10048
10050
10051
10049
Yes
Monthly Rollup
4507449
https://support.microsoft.com/help/4507449
10047
10048
10050
10051
10049
4507456
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507456
10047
10048
10050
10051
10049
Yes
Security Only
4507448
4503276
10483
10543
10481
10482
10484
Yes
Monthly Rollup
4507448
https://support.microsoft.com/help/4507448
10483
10543
10481
10482
10484
4507452
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507452
4503273
9312
10287
9311
9318
9344
Yes
Monthly Rollup
4507461
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507461
9312
10287
9311
9318
9344
Yes
Security Only
James Forshaw of <a href="https://www.google.com">Google Project Zero</a>
1.0
2019-07-09T07:00:00
<p>Information published.</p>
Windows dnsrslvr.dll Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists in the way that the dnsrslvr.dll handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.</p>
<p>To exploit the vulnerability, a locally authenticated attacker could run a specially crafted application.</p>
<p>The security update addresses the vulnerability by ensuring the dnsrslvr.dll properly handles objects in memory.</p>
Microsoft Windows DNS
Microsoft
CVE-2019-1090
11497
11498
11499
11563
11568
11569
11570
11571
11572
11644
11645
11646
11647
Elevation of Privilege
11497
Elevation of Privilege
11498
Elevation of Privilege
11499
Elevation of Privilege
11563
Elevation of Privilege
11568
Elevation of Privilege
11569
Elevation of Privilege
11570
Elevation of Privilege
11571
Elevation of Privilege
11572
Elevation of Privilege
11644
Elevation of Privilege
11645
Elevation of Privilege
11646
Elevation of Privilege
11647
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11644
Important
11645
Important
11646
Important
11647
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11497
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11498
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11499
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11563
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11644
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11645
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11646
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11647
4507435
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507435
4503286
11497
11498
11499
11563
Yes
Security Update
4507435
https://support.microsoft.com/help/4507435
11497
11498
11499
11563
4507469
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507469
4503327
11568
11569
11570
11571
11572
Yes
Security Update
4507469
https://support.microsoft.com/help/4507469
11568
11569
11570
11571
11572
4507453
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507453
4503293
11644
11645
11646
11647
Yes
Security Update
4507453
https://support.microsoft.com/help/4507453
11644
11645
11646
11647
zhong_sf of <a href="http://www.360.com/">Qihoo 360 Vulcan Team</a>
1.0
2019-07-09T07:00:00
<p>Information published.</p>
Microsoft unistore.dll Information Disclosure Vulnerability
<p>An information disclosure vulnerability exists when Unistore.dll fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could potentially disclose memory contents of an elevated process.</p>
<p>To exploit this vulnerability, an authenticated attacker could run a specially crafted application in user mode.</p>
<p>The update addresses the vulnerability by correcting how the Unistore.dll handles objects in memory.</p>
<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>
<p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is the server object address.</p>
Microsoft Windows
Microsoft
CVE-2019-1091
10951
10952
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
10729
10735
10852
10853
10816
10855
Information Disclosure
10951
Information Disclosure
10952
Information Disclosure
11497
Information Disclosure
11498
Information Disclosure
11499
Information Disclosure
11563
Information Disclosure
11568
Information Disclosure
11569
Information Disclosure
11570
Information Disclosure
11571
Information Disclosure
11572
Information Disclosure
11453
Information Disclosure
11454
Information Disclosure
11583
Information Disclosure
11644
Information Disclosure
11645
Information Disclosure
11646
Information Disclosure
11647
Information Disclosure
10729
Information Disclosure
10735
Information Disclosure
10852
Information Disclosure
10853
Information Disclosure
10816
Information Disclosure
10855
Important
10951
Important
10952
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10951
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10952
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11497
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11498
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11499
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11563
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11568
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11569
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11570
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11571
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11572
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11453
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11454
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11583
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11644
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11645
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11646
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11647
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10729
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10735
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10852
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10853
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10816
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10855
4507450
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507450
4503279
10951
10952
Yes
Security Update
4507450
https://support.microsoft.com/help/4507450
10951
10952
4507435
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507435
4503286
11497
11498
11499
11563
Yes
Security Update
4507435
https://support.microsoft.com/help/4507435
11497
11498
11499
11563
4507469
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507469
4503327
11568
11569
11570
11571
11572
Yes
Security Update
4507469
https://support.microsoft.com/help/4507469
11568
11569
11570
11571
11572
4507455
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507455
4503284
11453
11454
11583
Yes
Security Update
4507455
https://support.microsoft.com/help/4507455
11453
11454
11583
4507453
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507453
4503293
11644
11645
11646
11647
Yes
Security Update
4507453
https://support.microsoft.com/help/4507453
11644
11645
11646
11647
4507458
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507458
4503291
10729
10735
Yes
Security Update
4507458
https://support.microsoft.com/help/4507458
10729
10735
4507460
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507460
4503267
10852
10853
10816
10855
Yes
Security Update
4507460
https://support.microsoft.com/help/4507460
10852
10853
10816
10855
zhong_sf of <a href="http://www.360.com/">Qihoo 360 Vulcan Team</a>
1.0
2019-07-09T07:00:00
<p>Information published.</p>
Remote Desktop Protocol Client Information Disclosure Vulnerability
<p>An information disclosure vulnerability exists when the Windows RDP client improperly discloses the contents of its memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system.</p>
<p>To exploit this vulnerability, an attacker would have to connect remotely to an affected system and run a specially crafted application.</p>
<p>The security update addresses the vulnerability by correcting how the Windows RDP client initializes memory.</p>
<p><strong>How do I get the update for Microsoft Remote Desktop for IOS?</strong></p>
<ol>
<li>Tap the Settings Icon</li>
<li>Tap the iTunes & App Store</li>
<li>Turn on AUTOMATIC DOWNLOADS for Apps</li>
</ol>
<p><strong>Alternatively</strong></p>
<ol>
<li>Tap the App Store Icon</li>
<li>Scroll down to find Microsoft Remote Desktop</li>
<li>Tap the Update button</li>
</ol>
<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>
<p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is uninitialized memory.</p>
<p><strong>How do I get the update for Microsoft Remote Desktop for Android?</strong></p>
<ol>
<li>Tap the <strong>Google Play</strong> icon on your home screen.</li>
<li>Swipe in from the left edge of the screen.</li>
<li>Tap <strong>My apps & games</strong>.</li>
<li>Tap the Update box next to the <strong>Remote Desktop app</strong>.</li>
</ol>
Windows RDP
Microsoft
CVE-2019-1108
10951
10952
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
9312
10287
9311
9318
9344
10050
10051
10049
10378
10379
10483
10543
11693
11694
Information Disclosure
10951
Information Disclosure
10952
Information Disclosure
11497
Information Disclosure
11498
Information Disclosure
11499
Information Disclosure
11563
Information Disclosure
11568
Information Disclosure
11569
Information Disclosure
11570
Information Disclosure
11571
Information Disclosure
11572
Information Disclosure
11453
Information Disclosure
11454
Information Disclosure
11583
Information Disclosure
11644
Information Disclosure
11645
Information Disclosure
11646
Information Disclosure
11647
Information Disclosure
10729
Information Disclosure
10735
Information Disclosure
10852
Information Disclosure
10853
Information Disclosure
10816
Information Disclosure
10855
Information Disclosure
10047
Information Disclosure
10048
Information Disclosure
10481
Information Disclosure
10482
Information Disclosure
10484
Information Disclosure
9312
Information Disclosure
10287
Information Disclosure
9311
Information Disclosure
9318
Information Disclosure
9344
Information Disclosure
10050
Information Disclosure
10051
Information Disclosure
10049
Information Disclosure
10378
Information Disclosure
10379
Information Disclosure
10483
Information Disclosure
10543
Information Disclosure
11693
Information Disclosure
11694
Important
10951
Important
10952
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9311
Important
9318
Important
9344
Important
10050
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Important
11693
Important
11694
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10951
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10952
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11497
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11498
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11499
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11563
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11568
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11569
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11570
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11571
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11572
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11453
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11454
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11583
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11644
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11645
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11646
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11647
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10729
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10735
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10852
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10853
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10816
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10855
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10047
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10048
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10481
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10482
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10484
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9312
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10287
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9311
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9318
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9344
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10050
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10051
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10049
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10378
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10379
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10483
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10543
4507450
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507450
4503279
10951
10952
Yes
Security Update
4507450
https://support.microsoft.com/help/4507450
10951
10952
4507435
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507435
4503286
11497
11498
11499
11563
Yes
Security Update
4507435
https://support.microsoft.com/help/4507435
11497
11498
11499
11563
4507469
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507469
4503327
11568
11569
11570
11571
11572
Yes
Security Update
4507469
https://support.microsoft.com/help/4507469
11568
11569
11570
11571
11572
4507455
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507455
4503284
11453
11454
11583
Yes
Security Update
4507455
https://support.microsoft.com/help/4507455
11453
11454
11583
4507453
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507453
4503293
11644
11645
11646
11647
Yes
Security Update
4507453
https://support.microsoft.com/help/4507453
11644
11645
11646
11647
4507458
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507458
4503291
10729
10735
Yes
Security Update
4507458
https://support.microsoft.com/help/4507458
10729
10735
4507460
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507460
4503267
10852
10853
10816
10855
Yes
Security Update
4507460
https://support.microsoft.com/help/4507460
10852
10853
10816
10855
4507449
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507449
4503292
10047
10048
10050
10051
10049
Yes
Monthly Rollup
4507449
https://support.microsoft.com/help/4507449
10047
10048
10050
10051
10049
4507456
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507456
10047
10048
10050
10051
10049
Yes
Security Only
4507448
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507448
4503276
10481
10482
10484
10483
10543
Yes
Monthly Rollup
4507448
https://support.microsoft.com/help/4507448
10481
10482
10484
10483
10543
4507457
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507457
10481
10482
10483
10543
Yes
Security Only
4507457
https://support.microsoft.com/help/4507457
10481
10482
10483
10543
4507448
4503276
10481
10482
10484
10483
10543
Yes
Monthly Rollup
4507448
https://support.microsoft.com/help/4507448
10481
10482
10484
10483
10543
4507452
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507452
4503273
9312
10287
9311
9318
9344
Yes
Monthly Rollup
4507461
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507461
9312
10287
9311
9318
9344
Yes
Security Only
4507462
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507462
4503285
10378
10379
Yes
Monthly Rollup
4507462
https://support.microsoft.com/help/4507462
10378
10379
4507464
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507464
10378
10379
Yes
Security Only
4507464
https://support.microsoft.com/help/4507464
10378
10379
Release Notes
https://play.google.com/store/apps/details?id=com.microsoft.rdc.android
11693
11694
Maybe
Security Update
Release Notes
https://apps.apple.com/us/app/microsoft-remote-desktop/id714464092
11693
11694
Maybe
Security Update
RDP_HACKER
3.0
2019-11-19T08:00:00
<p>The following updates have been made: 1. Added Microsoft Remote Desktop for Mac OS to the Security Updates table because it is affected by this vulnerability. Microsoft recommends that customers running Microsoft Remote Desktop for Mac OS install the latest security update to be fully protected from this vulnerability. 2. Added Microsoft Remote Desktop for iOS to the Security Updates table because it is affected by this vulnerability. Microsoft recommends that customers running Microsoft Remote Desktop for iOS install the latest security update to be fully protected from this vulnerability. Added an FAQ to explain how to get the update for iOS.</p>
1.0
2019-07-09T07:00:00
<p>Information published.</p>
2.0
2019-08-17T07:00:00
<p>Added Microsoft Remote Desktop for Android to the Security Updates table because it is affected by this vulnerability. Microsoft recommends that customers running Microsoft Remote Desktop for Android install the latest security update to be fully protected from this vulnerability. Added an FAQ to explain how to get the update for Android.</p>
Windows Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context. An attacker could then install programs; view, change or delete data.</p>
<p>To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system.</p>
<p>The security update addresses the vulnerability by correcting how Windows AppX Deployment Service handles hard links.</p>
Microsoft Windows
Microsoft
CVE-2019-1129
10951
10952
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
Elevation of Privilege
10951
Elevation of Privilege
10952
Elevation of Privilege
11497
Elevation of Privilege
11498
Elevation of Privilege
11499
Elevation of Privilege
11563
Elevation of Privilege
11568
Elevation of Privilege
11569
Elevation of Privilege
11570
Elevation of Privilege
11571
Elevation of Privilege
11572
Elevation of Privilege
11453
Elevation of Privilege
11454
Elevation of Privilege
11583
Elevation of Privilege
11644
Elevation of Privilege
11645
Elevation of Privilege
11646
Elevation of Privilege
11647
Important
10951
Important
10952
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Publicly Disclosed:Yes;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10951
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10952
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11497
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11498
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11499
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11563
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11453
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11454
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11583
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11644
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11645
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11646
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11647
4507450
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507450
4503279
10951
10952
Yes
Security Update
4507450
https://support.microsoft.com/help/4507450
10951
10952
4507435
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507435
4503286
11497
11498
11499
11563
Yes
Security Update
4507435
https://support.microsoft.com/help/4507435
11497
11498
11499
11563
4507469
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507469
4503327
11568
11569
11570
11571
11572
Yes
Security Update
4507469
https://support.microsoft.com/help/4507469
11568
11569
11570
11571
11572
4507455
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507455
4503284
11453
11454
11583
Yes
Security Update
4507455
https://support.microsoft.com/help/4507455
11453
11454
11583
4507453
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507453
4503293
11644
11645
11646
11647
Yes
Security Update
4507453
https://support.microsoft.com/help/4507453
11644
11645
11646
11647
1.0
2019-07-09T07:00:00
<p>Information published.</p>
Windows Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context. An attacker could then install programs; view, change or delete data.</p>
<p>To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system.</p>
<p>The security update addresses the vulnerability by correcting how Windows AppX Deployment Service handles hard links.</p>
Microsoft Windows
Microsoft
CVE-2019-1130
10951
10952
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11644
11645
11646
11647
10729
10735
10852
10853
10816
10855
10482
10484
10378
10379
10483
10543
Elevation of Privilege
10951
Elevation of Privilege
10952
Elevation of Privilege
11497
Elevation of Privilege
11498
Elevation of Privilege
11499
Elevation of Privilege
11563
Elevation of Privilege
11568
Elevation of Privilege
11569
Elevation of Privilege
11570
Elevation of Privilege
11571
Elevation of Privilege
11572
Elevation of Privilege
11453
Elevation of Privilege
11454
Elevation of Privilege
11583
Elevation of Privilege
11644
Elevation of Privilege
11645
Elevation of Privilege
11646
Elevation of Privilege
11647
Elevation of Privilege
10729
Elevation of Privilege
10735
Elevation of Privilege
10852
Elevation of Privilege
10853
Elevation of Privilege
10816
Elevation of Privilege
10855
Elevation of Privilege
10482
Elevation of Privilege
10484
Elevation of Privilege
10378
Elevation of Privilege
10379
Elevation of Privilege
10483
Elevation of Privilege
10543
Important
10951
Important
10952
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11644
Important
11645
Important
11646
Important
11647
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10482
Important
10484
Important
10378
Important
10379
Important
10483
Important
10543
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10951
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10952
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11497
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11498
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11499
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11563
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11453
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11454
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11583
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11644
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11645
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11646
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11647
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10729
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10735
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10852
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10853
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10816
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10855
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10482
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10484
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10378
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10379
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10483
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10543
4507450
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507450
4503279
10951
10952
Yes
Security Update
4507450
https://support.microsoft.com/help/4507450
10951
10952
4507435
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507435
4503286
11497
11498
11499
11563
Yes
Security Update
4507435
https://support.microsoft.com/help/4507435
11497
11498
11499
11563
4507469
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507469
4503327
11568
11569
11570
11571
11572
Yes
Security Update
4507469
https://support.microsoft.com/help/4507469
11568
11569
11570
11571
11572
4507455
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507455
4503284
11453
11454
11583
Yes
Security Update
4507455
https://support.microsoft.com/help/4507455
11453
11454
11583
4507453
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507453
4503293
11644
11645
11646
11647
Yes
Security Update
4507453
https://support.microsoft.com/help/4507453
11644
11645
11646
11647
4507458
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507458
4503291
10729
10735
Yes
Security Update
4507458
https://support.microsoft.com/help/4507458
10729
10735
4507460
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507460
4503267
10852
10853
10816
10855
Yes
Security Update
4507460
https://support.microsoft.com/help/4507460
10852
10853
10816
10855
4507448
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507448
4503276
10482
10484
10483
10543
Yes
Monthly Rollup
4507448
https://support.microsoft.com/help/4507448
10482
10484
10483
10543
4507457
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507457
10482
10483
10543
Yes
Security Only
4507457
https://support.microsoft.com/help/4507457
10482
10483
10543
4507448
4503276
10482
10484
10483
10543
Yes
Monthly Rollup
4507448
https://support.microsoft.com/help/4507448
10482
10484
10483
10543
4507462
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507462
4503285
10378
10379
Yes
Monthly Rollup
4507462
https://support.microsoft.com/help/4507462
10378
10379
4507464
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507464
10378
10379
Yes
Security Only
4507464
https://support.microsoft.com/help/4507464
10378
10379
Polar Bear
1.0
2019-07-09T07:00:00
<p>Information published.</p>
Win32k Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system.</p>
<p>The update addresses this vulnerability by correcting how Win32k handles objects in memory.</p>
Windows Kernel
Microsoft
CVE-2019-1132
10047
10048
9312
10287
9311
9318
9344
10050
10051
10049
Elevation of Privilege
10047
Elevation of Privilege
10048
Elevation of Privilege
9312
Elevation of Privilege
10287
Elevation of Privilege
9311
Elevation of Privilege
9318
Elevation of Privilege
9344
Elevation of Privilege
10050
Elevation of Privilege
10051
Elevation of Privilege
10049
Important
10047
Important
10048
Important
9312
Important
10287
Important
9311
Important
9318
Important
9344
Important
10050
Important
10051
Important
10049
Publicly Disclosed:No;Exploited:Yes;Latest Software Release:N/A;Older Software Release:Exploitation Detected;DOS:N/A
7.8
7.2
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
10047
7.8
7.2
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
10048
7.8
7.2
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
9312
7.8
7.2
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
10287
7.8
7.2
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
9311
7.8
7.2
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
9318
7.8
7.2
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
9344
7.8
7.2
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
10050
7.8
7.2
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
10051
7.8
7.2
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
10049
4507449
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507449
4503292
10047
10048
10050
10051
10049
Yes
Monthly Rollup
4507449
https://support.microsoft.com/help/4507449
10047
10048
10050
10051
10049
4507456
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507456
10047
10048
10050
10051
10049
Yes
Security Only
4507452
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507452
4503273
9312
10287
9311
9318
9344
Yes
Monthly Rollup
4507461
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507461
9312
10287
9311
9318
9344
Yes
Security Only
<a href="https://twitter.com/cherepanov74">Anton Cherepanov</a>, Senior Malware Researcher of <a href="https://www.eset.com">ESET</a>
1.0
2019-07-09T07:00:00
<p>Information published.</p>
Microsoft Exchange Server Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists in Microsoft Exchange Server. An attacker who successfully exploited this vulnerability could gain the same rights as any other user of the Exchange server. This could allow the attacker to perform activities such as accessing the mailboxes of other users.</p>
<p>Exploitation of this vulnerability requires Exchange Web Services (EWS) to be enabled and in use in an affected environment. To exploit the vulnerability, an attacker would need to execute a man-in-the-middle attack to forward an authentication request to a Microsoft Exchange Server, thereby allowing impersonation of another Exchange user.</p>
<p>To address this vulnerability, Microsoft has changed the way EWS handles NTLM tokens.</p>
Microsoft Exchange Server
Microsoft
CVE-2019-1136
11620
10476
11681
11682
Elevation of Privilege
11620
Elevation of Privilege
10476
Elevation of Privilege
11681
Elevation of Privilege
11682
Important
11620
Important
10476
Important
11681
Important
11682
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
4509409
https://www.microsoft.com/downloads/details.aspx?familyid=d44bad0f-f22f-4d18-815c-849d2ced2a95
4503027
11620
11681
11682
Maybe
Security Update
4509409
https://support.microsoft.com/help/4509409
11620
11681
11682
4509410
https://www.microsoft.com/downloads/details.aspx?familyid=fe350505-fe6d-44c7-8dbe-3f848db6a1c1
4503028
10476
Maybe
Security Update
4509410
https://support.microsoft.com/help/4509410
10476
4509409
https://www.microsoft.com/downloads/details.aspx?familyid=dc21508f-0f68-42ab-a0a0-c830743a3c2f
11620
11681
11682
Maybe
Security Update
4509409
https://support.microsoft.com/help/4509409
11620
11681
11682
4509409
https://www.microsoft.com/downloads/details.aspx?familyid=ff7bfd64-fd88-4e95-bc8c-8eedffbf633c
11620
11681
11682
Maybe
Security Update
4509409
https://support.microsoft.com/help/4509409
11620
11681
11682
Pham Van Khanh of Viettel Cyber Security
1.0
2019-07-09T07:00:00
<p>Information published.</p>
Microsoft Exchange Server Spoofing Vulnerability
<p>A cross-site-scripting (XSS) vulnerability exists when Microsoft Exchange Server does not properly sanitize a specially crafted web request to an affected Exchange server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected server.</p>
<p>The attacker who successfully exploited the vulnerability could then perform cross-site scripting attacks on affected systems and run script in the security context of the current user. The attacks could allow the attacker to read content that the attacker is not authorized to read, use the victim's identity to take actions on the Exchange server on behalf of the user, such as change permissions and delete content, and inject malicious content in the browser of the user.</p>
<p>The security update addresses the vulnerability by helping to ensure that Exchange Server properly sanitizes web requests.</p>
Microsoft Exchange Server
Microsoft
CVE-2019-1137
11620
11621
11680
11681
11682
Spoofing
11620
Spoofing
11621
Spoofing
11680
Spoofing
11681
Spoofing
11682
Important
11620
Important
11621
Important
11680
Important
11681
Important
11682
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
4509409
https://www.microsoft.com/downloads/details.aspx?familyid=d44bad0f-f22f-4d18-815c-849d2ced2a95
4503027
11620
11681
11682
Maybe
Security Update
4509409
https://support.microsoft.com/help/4509409
11620
11681
11682
4509408
https://www.microsoft.com/downloads/details.aspx?familyid=c15e2b68-cf18-43f3-ba31-83b8c01aeb5f
4503027
11621
11680
Maybe
Security Update
4509408
https://support.microsoft.com/help/4509408
11621
11680
4509408
https://www.microsoft.com/downloads/details.aspx?familyid=5e43a654-6e1a-4929-8fbd-6fe145fb09ad
4503027
11621
11680
Maybe
Security Update
4509408
https://support.microsoft.com/help/4509408
11621
11680
4509409
https://www.microsoft.com/downloads/details.aspx?familyid=dc21508f-0f68-42ab-a0a0-c830743a3c2f
11620
11681
11682
Maybe
Security Update
4509409
https://support.microsoft.com/help/4509409
11620
11681
11682
4509409
https://www.microsoft.com/downloads/details.aspx?familyid=ff7bfd64-fd88-4e95-bc8c-8eedffbf633c
11620
11681
11682
Maybe
Security Update
4509409
https://support.microsoft.com/help/4509409
11620
11681
11682
<a href="https://plus.google.com/109511353019526855573">Suresh C</a>
1.0
2019-07-09T07:00:00
<p>Information published.</p>
Outlook on the web Cross-Site Scripting Vulnerability
<p>A cross-site scripting vulnerability has been discovered that affects Outlook on the web (formerly known as Outlook Web App) on-premise deployments. To exploit this vulnerability, an attacker must send a victim an email containing custom HTML content. The victim must then drag and drop an image that was included in the email into a new browser tab. Alternatively, a victim could paste the URL of the image into a new browser tab. The vulnerability requires that the image be sent in SVG format.</p>
<p>Microsoft is addressing this vulnerability by recommending that administrators for Outlook on the web block SVG images. See the Mitigations section for instructions.</p>
Microsoft Exchange Server
Microsoft
ADV190021
11526
11591
10476
10431
Spoofing
11526
Spoofing
11591
Spoofing
10476
Spoofing
10431
Important
11526
Important
11591
Important
10476
Important
10431
Publicly Disclosed:No;Exploited:No;DOS:N/A
<p>Because the vulnerability can only be exploited by sending images in SVG format, we recommend that administrators for Outlook on the web block SVG images. This can be accomplished via the Set-OwaMailboxPolicy command, as documented at the following link:</p>
<p><a href="https://docs.microsoft.com/en-us/powershell/module/exchange/client-access/set-owamailboxpolicy?view=exchange-ps">https://docs.microsoft.com/en-us/powershell/module/exchange/client-access/set-owamailboxpolicy?view=exchange-ps</a></p>
<p>For example, to update BlockedFileTypes and BlockedMimeTypes properties, run the following PowerShell commands on the affected Exchange server:</p>
<ul>
<li>$policy = get-owamailboxpolicy <POLICYNAME></li>
<li>$policy.BlockedFileTypes.Add(".svg")</li>
<li>$policy.BlockedMimeTypes.Add("image/svg+xml")</li>
<li>Set-OwaMailboxPolicy $policy.Identity -BlockedFileTypes $policy.BlockedFileTypes -BlockedMimeTypes $policy.BlockedMimeTypes</li>
</ul>
<p>If there are multiple policies, all policies should be updated.</p>
<a href=”https://twitter.com/Qab”> Abdulrahman Al-Qabandi</a>
1.0
2019-07-09T07:00:00
<p>Information published.</p>
Windows Defender Application Control Security Feature Bypass Vulnerability
<p>A security feature bypass vulnerability exists in Windows Defender Application Control (WDAC) which could allow an attacker to bypass WDAC enforcement. An attacker who successfully exploited this vulnerability could circumvent PowerShell Core Constrained Language Mode on the machine.</p>
<p>To exploit the vulnerability, an attacker would first have administrator access to the local machine where PowerShell is running in Constrained Language mode. By doing that an attacker could access resources in an unintended way.</p>
<p>The update addresses the vulnerability by correcting how PowerShell functions in Constrained Language Mode.</p>
Microsoft PowerShell
Microsoft
CVE-2019-1167
11551
11617
Security Feature Bypass
11551
Security Feature Bypass
11617
Important
11551
Important
11617
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A
Release Notes
https://github.com/PowerShell/PowerShell#get-powershell
11551
11617
Maybe
Security Update
1.1
2019-07-16T07:00:00
<p>Corrected vulnerability description. This is an informational change only.</p>
1.0
2019-07-16T07:00:00
<p>Information published.</p>