March 2019 Security Updates
Security Update
secure@microsoft.com
The Microsoft Security Response Center (MSRC) identifies, monitors, resolves, and responds to security incidents and Microsoft software security vulnerabilities. For more information, see http://www.microsoft.com/security/msrc.
2019-Mar
2019-Mar
Final
1.0
323
2026-09-17T01:52:44
March 2019 Security Updates
2019-03-12T07:00:00Z
2026-09-17T01:52:44
<p>The March security release consists of security updates for the following software:</p>
<ul>
<li>Adobe Flash Player</li>
<li>Internet Explorer</li>
<li>Microsoft Edge</li>
<li>Microsoft Windows</li>
<li>Microsoft Office and Microsoft Office SharePoint</li>
<li>ChakraCore</li>
<li>Team Foundation Server</li>
<li>Skype for Business</li>
<li>Visual Studio</li>
<li>NuGet</li>
</ul>
<p>Please note the following information regarding the security updates:</p>
<ul>
<li>A list of the latest servicing stack updates for each operating system can be found in <a href="https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/ADV990001">ADV990001</a>. This list will be updated whenever a new servicing stack update is released. It is important to install the latest servicing stack update.</li>
<li>Windows 10 updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows 10, in addition to non-security updates. The updates are available via the <a href="http://catalog.update.microsoft.com/v7/site/Home.aspx">Microsoft Update Catalog</a>.</li>
<li>Updates for Windows RT 8.1 and Microsoft Office RT software are only available via <a href="http://go.microsoft.com/fwlink/?LinkId=21130">Windows Update</a>.</li>
<li>For information on lifecycle and support dates for Windows 10 operating systems, please see <a href="https://support.microsoft.com/en-us/help/13853/windows-lifecycle-fact-sheet">Windows Lifecycle Facts Sheet</a>.</li>
<li>In addition to security changes for the vulnerabilities, updates include defense-in-depth updates to help improve security-related features.</li>
</ul>
<p><strong>The following CVEs have FAQs with additional information and may include * further steps to take after installing the updates.</strong></p>
<ul>
<li><a href="https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/ADV190008">ADV190008</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/ADV190010">ADV190010</a> *</li>
<li><a href="https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/ADV990001">ADV990001</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2019-0614">CVE-2019-0614</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2019-0702">CVE-2019-0702</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2019-0703">CVE-2019-0703</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2019-0704">CVE-2019-0704</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2019-0755">CVE-2019-0755</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2019-0759">CVE-2019-0759</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2019-0767">CVE-2019-0767</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2019-0774">CVE-2019-0774</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2019-0775">CVE-2019-0775</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2019-0776">CVE-2019-0776</a></li>
<li><a href="https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2019-0782">CVE-2019-0782</a></li>
</ul>
<p><strong>Known Issues</strong></p>
<table>
<thead>
<tr>
<th>KB Article</th>
<th>Applies To</th>
</tr>
</thead>
<tbody>
<tr>
<td><a href="https://support.microsoft.com/en-us/help/4489872">4489872</a></td>
<td>Windows 10</td>
</tr>
<tr>
<td><a href="https://support.microsoft.com/en-us/help/4489873">4489873</a></td>
<td>Internet Explorer</td>
</tr>
<tr>
<td><a href="https://support.microsoft.com/en-us/help/4489878">4489878</a></td>
<td>Windows 7 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Monthly Rollup)</td>
</tr>
<tr>
<td><a href="https://support.microsoft.com/en-us/help/4489881">4489881</a></td>
<td>Windows 8.1, Windows Server 2012 R2 (Monthly Rollup)</td>
</tr>
<tr>
<td><a href="https://support.microsoft.com/en-us/help/4489882">4489882</a></td>
<td>Windows 10 version 1607, Windows Server 2016</td>
</tr>
<tr>
<td><a href="https://support.microsoft.com/en-us/help/4489883">4489883</a></td>
<td>Windows 8.1, Windows Server 2012 R2 (Security-only update)</td>
</tr>
<tr>
<td><a href="https://support.microsoft.com/en-us/help/4489884">4489884</a></td>
<td>Windows Server 2012 (Security-only update)</td>
</tr>
<tr>
<td><a href="https://support.microsoft.com/en-us/help/4489885">4489885</a></td>
<td>Windows 7 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Security-only update)</td>
</tr>
<tr>
<td><a href="https://support.microsoft.com/en-us/help/4489891">4489891</a></td>
<td>Windows Server 2012 (Monthly Rollup)</td>
</tr>
<tr>
<td><a href="https://support.microsoft.com/en-us/help/4489899">4489899</a></td>
<td>Windows 10 version 1809, Windows Server 2019</td>
</tr>
</tbody>
</table>
The information provided in the Microsoft Knowledge Base is provided "as is" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.
ChakraCore
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1703 for 32-bit Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1703 for x64-based Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for 32-bit Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for x64-based Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for ARM64-based Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for 32-bit Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for x64-based Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for ARM64-based Systems
Microsoft Edge (EdgeHTML-based) on Windows Server 2019
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1709 for 32-bit Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1709 for x64-based Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1709 for ARM64-based Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 for 32-bit Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 for x64-based Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for 32-bit Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for x64-based Systems
Microsoft Edge (EdgeHTML-based) on Windows Server 2016
Internet Explorer 11 on Windows 10 Version 1703 for 32-bit Systems
Internet Explorer 11 on Windows 10 Version 1703 for x64-based Systems
Internet Explorer 11 on Windows 10 Version 1803 for 32-bit Systems
Internet Explorer 11 on Windows 10 Version 1803 for x64-based Systems
Internet Explorer 11 on Windows 10 Version 1803 for ARM64-based Systems
Internet Explorer 11 on Windows 10 Version 1809 for 32-bit Systems
Internet Explorer 11 on Windows 10 Version 1809 for x64-based Systems
Internet Explorer 11 on Windows 10 Version 1809 for ARM64-based Systems
Internet Explorer 11 on Windows Server 2019
Internet Explorer 11 on Windows 10 Version 1709 for 32-bit Systems
Internet Explorer 11 on Windows 10 Version 1709 for x64-based Systems
Internet Explorer 11 on Windows 10 Version 1709 for ARM64-based Systems
Internet Explorer 11 on Windows 10 for 32-bit Systems
Internet Explorer 11 on Windows 10 for x64-based Systems
Internet Explorer 11 on Windows 10 Version 1607 for 32-bit Systems
Internet Explorer 11 on Windows 10 Version 1607 for x64-based Systems
Internet Explorer 11 on Windows Server 2016
Internet Explorer 11 on Windows 7 for 32-bit Systems Service Pack 1
Internet Explorer 11 on Windows 7 for x64-based Systems Service Pack 1
Internet Explorer 11 on Windows 8.1 for 32-bit systems
Internet Explorer 11 on Windows 8.1 for x64-based systems
Internet Explorer 11 on Windows RT 8.1
Internet Explorer 11 on Windows Server 2008 R2 for x64-based Systems Service Pack 1
Internet Explorer 11 on Windows Server 2012 R2
Internet Explorer 10 on Windows Server 2012
Internet Explorer 9 on Windows Server 2008 for 32-bit Systems Service Pack 2
Internet Explorer 9 on Windows Server 2008 for x64-based Systems Service Pack 2
Windows 7 for 32-bit Systems Service Pack 1
Windows 7 for x64-based Systems Service Pack 1
Windows Server 2008 for 32-bit Systems Service Pack 2
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)
Windows Server 2008 for Itanium-Based Systems Service Pack 2
Windows Server 2008 for x64-based Systems Service Pack 2
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)
Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)
Microsoft Office 2010 Service Pack 2 (32-bit editions)
Microsoft Office 2010 Service Pack 2 (64-bit editions)
Microsoft SharePoint Enterprise Server 2016
Microsoft SharePoint Foundation 2013 Service Pack 1
Skype for Business Server 2015 March 2019 Update
Microsoft Lync Server 2013 July 2018 Update
Windows 10 Version 1703 for 32-bit Systems
Windows 10 Version 1703 for x64-based Systems
Windows 10 Version 1803 for 32-bit Systems
Windows 10 Version 1803 for x64-based Systems
Windows Server, version 1803 (Server Core Installation)
Windows 10 Version 1803 for ARM64-based Systems
Windows 10 Version 1809 for 32-bit Systems
Windows 10 Version 1809 for x64-based Systems
Windows 10 Version 1809 for ARM64-based Systems
Windows Server 2019
Windows Server 2019 (Server Core installation)
Windows 10 Version 1709 for 32-bit Systems
Windows 10 Version 1709 for x64-based Systems
Windows 10 Version 1709 for ARM64-based Systems
Windows Server, version 1709 (Server Core Installation)
Windows 10 for 32-bit Systems
Windows 10 for x64-based Systems
Windows 10 Version 1607 for 32-bit Systems
Windows 10 Version 1607 for x64-based Systems
Windows Server 2016
Windows Server 2016 (Server Core installation)
Windows 8.1 for 32-bit systems
Windows 8.1 for x64-based systems
Windows RT 8.1
Windows Server 2012
Windows Server 2012 (Server Core installation)
Windows Server 2012 R2
Windows Server 2012 R2 (Server Core installation)
None Available
Windows 10 Version 1903 for ARM64-based Systems
Windows Server, version 1903 (Server Core installation)
Windows 10 Version 1903 for 32-bit Systems
Windows 10 Version 1903 for x64-based Systems
Nuget 4.8.2
Nuget 4.7.2
Mono Framework Version 5.20.0
Mono Framework Version 5.18.0.223
Nuget 4.5.2
Nuget 4.4.2
Nuget 4.6.3
Nuget 4.3.1
Nuget 4.9.4
Visual Studio 2017 for Mac
.NET Core SDK 1.1 on .NET Core 1.0
.NET Core SDK 1.1 on .NET Core 1.1
.NET Core SDK 2.1.500 on .NET Core 2.1
.NET Core SDK 2.2.100 on .NET Core 2.2
Team Foundation Server 2017 Update 3.1
Team Foundation Server 2018 Update 1.2
Team Foundation Server 2018 Update 3.2
Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
UbuntuServer:18.04-LTS
Adobe Flash Player on Windows 10 Version 1703 for 32-bit Systems
Adobe Flash Player on Windows 10 Version 1703 for x64-based Systems
Adobe Flash Player on Windows 10 Version 1803 for 32-bit Systems
Adobe Flash Player on Windows 10 Version 1803 for x64-based Systems
Adobe Flash Player on Windows 10 Version 1803 for ARM64-based Systems
Adobe Flash Player on Windows 10 Version 1809 for 32-bit Systems
Adobe Flash Player on Windows 10 Version 1809 for x64-based Systems
Adobe Flash Player on Windows 10 Version 1809 for ARM64-based Systems
Adobe Flash Player on Windows Server 2019
Adobe Flash Player on Windows 10 Version 1709 for 32-bit Systems
Adobe Flash Player on Windows 10 Version 1709 for x64-based Systems
Adobe Flash Player on Windows 10 Version 1709 for ARM64-based Systems
Adobe Flash Player on Windows 10 for 32-bit Systems
Adobe Flash Player on Windows 10 for x64-based Systems
Adobe Flash Player on Windows 10 Version 1607 for 32-bit Systems
Adobe Flash Player on Windows 10 Version 1607 for x64-based Systems
Adobe Flash Player on Windows Server 2016
Adobe Flash Player on Windows 8.1 for 32-bit systems
Adobe Flash Player on Windows 8.1 for x64-based systems
Adobe Flash Player on Windows RT 8.1
Adobe Flash Player on Windows Server 2012
Adobe Flash Player on Windows Server 2012 R2
Azure Linux Guest Agent
Windows 7 for 32-bit Systems Service Pack 1
Windows 7 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)
Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems Service Pack 1
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)
Internet Explorer 9 on Windows Server 2008 for 32-bit Systems Service Pack 2
Internet Explorer 9 on Windows Server 2008 for x64-based Systems Service Pack 2
Windows Server 2012
Windows Server 2012 (Server Core installation)
Adobe Flash Player on Windows Server 2012
Adobe Flash Player on Windows 8.1 for 32-bit systems
Adobe Flash Player on Windows 8.1 for x64-based systems
Adobe Flash Player on Windows Server 2012 R2
Adobe Flash Player on Windows RT 8.1
Adobe Flash Player on Windows 10 for 32-bit Systems
Adobe Flash Player on Windows 10 for x64-based Systems
Adobe Flash Player on Windows Server 2016
Adobe Flash Player on Windows 10 Version 1607 for 32-bit Systems
Adobe Flash Player on Windows 10 Version 1607 for x64-based Systems
Adobe Flash Player on Windows 10 Version 1703 for 32-bit Systems
Adobe Flash Player on Windows 10 Version 1703 for x64-based Systems
Adobe Flash Player on Windows 10 Version 1709 for 32-bit Systems
Adobe Flash Player on Windows 10 Version 1709 for x64-based Systems
Adobe Flash Player on Windows 10 Version 1803 for 32-bit Systems
Adobe Flash Player on Windows 10 Version 1803 for x64-based Systems
Adobe Flash Player on Windows 10 Version 1803 for ARM64-based Systems
Adobe Flash Player on Windows 10 Version 1809 for 32-bit Systems
Adobe Flash Player on Windows 10 Version 1809 for x64-based Systems
Adobe Flash Player on Windows 10 Version 1809 for ARM64-based Systems
Adobe Flash Player on Windows Server 2019
Adobe Flash Player on Windows 10 Version 1709 for ARM64-based Systems
Windows 8.1 for 32-bit systems
Windows 8.1 for x64-based systems
Windows Server 2012 R2
Windows RT 8.1
Internet Explorer 11 on Windows 7 for 32-bit Systems Service Pack 1
Internet Explorer 11 on Windows 7 for x64-based Systems Service Pack 1
Internet Explorer 11 on Windows Server 2008 R2 for x64-based Systems Service Pack 1
Internet Explorer 11 on Windows 8.1 for 32-bit systems
Internet Explorer 11 on Windows 8.1 for x64-based systems
Internet Explorer 11 on Windows Server 2012 R2
Internet Explorer 11 on Windows RT 8.1
Internet Explorer 11 on Windows 10 for 32-bit Systems
Internet Explorer 11 on Windows 10 for x64-based Systems
Internet Explorer 11 on Windows Server 2016
Internet Explorer 11 on Windows 10 Version 1607 for 32-bit Systems
Internet Explorer 11 on Windows 10 Version 1607 for x64-based Systems
Internet Explorer 11 on Windows 10 Version 1703 for 32-bit Systems
Internet Explorer 11 on Windows 10 Version 1703 for x64-based Systems
Internet Explorer 11 on Windows 10 Version 1709 for 32-bit Systems
Internet Explorer 11 on Windows 10 Version 1709 for x64-based Systems
Internet Explorer 11 on Windows 10 Version 1803 for 32-bit Systems
Internet Explorer 11 on Windows 10 Version 1803 for x64-based Systems
Internet Explorer 11 on Windows 10 Version 1803 for ARM64-based Systems
Internet Explorer 11 on Windows 10 Version 1809 for 32-bit Systems
Internet Explorer 11 on Windows 10 Version 1809 for x64-based Systems
Internet Explorer 11 on Windows 10 Version 1809 for ARM64-based Systems
Internet Explorer 11 on Windows Server 2019
Internet Explorer 11 on Windows 10 Version 1709 for ARM64-based Systems
Microsoft Office 2010 Service Pack 2 (32-bit editions)
Microsoft Office 2010 Service Pack 2 (64-bit editions)
Windows Server 2012 R2 (Server Core installation)
Internet Explorer 10 on Windows Server 2012
Microsoft SharePoint Foundation 2013 Service Pack 1
Microsoft Edge (EdgeHTML-based) on Windows 10 for 32-bit Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 for x64-based Systems
Microsoft Edge (EdgeHTML-based) on Windows Server 2016
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for 32-bit Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for x64-based Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1703 for 32-bit Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1703 for x64-based Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1709 for 32-bit Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1709 for x64-based Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for 32-bit Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for x64-based Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for ARM64-based Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for 32-bit Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for x64-based Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for ARM64-based Systems
Microsoft Edge (EdgeHTML-based) on Windows Server 2019
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1709 for ARM64-based Systems
Windows 10 for 32-bit Systems
Windows 10 for x64-based Systems
Windows Server 2016
Windows 10 Version 1607 for 32-bit Systems
Windows 10 Version 1607 for x64-based Systems
Windows Server 2016 (Server Core installation)
Microsoft SharePoint Enterprise Server 2016
Windows 10 Version 1703 for 32-bit Systems
Windows 10 Version 1703 for x64-based Systems
Visual Studio 2017 for Mac
ChakraCore
Windows 10 Version 1709 for 32-bit Systems
Windows 10 Version 1709 for x64-based Systems
Windows Server, version 1709 (Server Core Installation)
Windows 10 Version 1803 for 32-bit Systems
Windows 10 Version 1803 for x64-based Systems
Windows Server, version 1803 (Server Core Installation)
Windows 10 Version 1803 for ARM64-based Systems
Windows 10 Version 1809 for 32-bit Systems
Windows 10 Version 1809 for x64-based Systems
Windows 10 Version 1809 for ARM64-based Systems
Windows Server 2019
Windows Server 2019 (Server Core installation)
Windows 10 Version 1709 for ARM64-based Systems
Team Foundation Server 2017 Update 3.1
Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
Team Foundation Server 2018 Update 1.2
Team Foundation Server 2018 Update 3.2
.NET Core SDK 1.1 on .NET Core 1.0
.NET Core SDK 1.1 on .NET Core 1.1
.NET Core SDK 2.1.500 on .NET Core 2.1
.NET Core SDK 2.2.100 on .NET Core 2.2
UbuntuServer:18.04-LTS
Skype for Business Server 2015 March 2019 Update
Microsoft Lync Server 2013 July 2018 Update
Nuget 4.3.1
Nuget 4.4.2
Nuget 4.5.2
Nuget 4.6.3
Nuget 4.7.2
Nuget 4.8.2
Nuget 4.9.4
Mono Framework Version 5.18.0.223
Mono Framework Version 5.20.0
Azure Linux Guest Agent
Windows 10 Version 1903 for 32-bit Systems
Windows 10 Version 1903 for x64-based Systems
Windows 10 Version 1903 for ARM64-based Systems
Windows Server, version 1903 (Server Core installation)
cbl2 bolt 0.9.2-2 on CBL Mariner 2.0
cm1 libsndfile 1.0.31-1 on CBL Mariner 1.0
cm1 nodejs 14.17.2-1 on CBL Mariner 1.0
cm1 systemd 239-34 on CBL Mariner 1.0
cbl2 openwsman 2.6.8-13 on CBL Mariner 2.0
azl3 openwsman 2.6.8-13 on Azure Linux 3.0
azl3 openwsman 2.6.8-13 on Azure Linux 3.0
azl3 python-tensorboard 2.16.2-1 on Azure Linux 3.0
azl3 python-tensorboard 2.16.2-1 on Azure Linux 3.0
azl3 golang 1.23.9-1 on Azure Linux 3.0
azl3 python-tensorboard 2.11.0-3 on Azure Linux 3.0
azl3 golang 1.24.3-1 on Azure Linux 3.0
azl3 golang 1.23.8-1 on Azure Linux 3.0
cbl2 cloud-hypervisor 32.0-7 on CBL Mariner 2.0
cbl2 rust 1.72.0-15 on CBL Mariner 2.0
azl3 rust 1.75.0-27 on Azure Linux 3.0
cbl2 qemu 6.2.0-27 on CBL Mariner 2.0
azl3 rust 1.90.0-6 on Azure Linux 3.0
cbl2 edk2 20230301gitf80f052277c8-47 on CBL Mariner 2.0
cbl2 hvloader 1.0.1-18 on CBL Mariner 2.0
cbl2 openssl 1.1.1k-39 on CBL Mariner 2.0
azl3 rust 1.75.0-28 on Azure Linux 3.0
azl3 rust 1.90.0-7 on Azure Linux 3.0
azl3 which 2.21-8 on Azure Linux 3.0
azl3 golang 1.27.0-1 on Azure Linux 3.0
azl3 golang 1.27.1-1 on Azure Linux 3.0
None Available
Windows Server 2008 for Itanium-Based Systems Service Pack 2
Windows Server 2008 for 32-bit Systems Service Pack 2
Windows Server 2008 for x64-based Systems Service Pack 2
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)
ChaCha20-Poly1305 with long nonces
Mariner
openssl
Yes
CVE-2019-1543
21183-17086
21185-17086
21184-17086
21110-17084
21123-17084
21183-17086
21185-17086
21184-17086
21110-17084
21123-17084
Important
21183-17086
Important
21185-17086
Important
21184-17086
Important
21110-17084
Important
21123-17084
1.0
2026-04-29T01:09:06
<p>Information published.</p>
2.0
2026-04-29T15:01:59
<p>Information published.</p>
3.0
2026-04-30T01:54:24
<p>Information published.</p>
Openwsman versions up to and including 2.6.9 are vulnerable to arbitrary file disclosure because the working directory of openwsmand daemon was set to root directory. A remote unauthenticated attacker can exploit this vulnerability by sending a specially crafted HTTP request to openwsman server.
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
redhat
Yes
CVE-2019-3816
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
17063-16823
17064-16817
17064-17084
17063-16823
17064-16817
17064-17084
Important
17063-16823
Important
17064-16817
Important
17064-17084
7.5
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
17063-16823
7.5
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
17064-16817
7.5
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
17064-17084
CBL-Mariner Releases
17063-16823
17064-16817
17064-17084
No
Security Update
2.6.8-13
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
17063-16823
17064-16817
17064-17084
CBL-Mariner Releases
8.6
2024-09-26T00:00:00
<p>Information published.</p>
8.9
2024-09-29T00:00:00
<p>Information published.</p>
9.0
2024-09-30T00:00:00
<p>Information published.</p>
9.7
2024-10-07T00:00:00
<p>Information published.</p>
10.5
2024-10-15T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
10.7
2024-10-17T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
10.9
2024-10-19T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
11.0
2024-10-20T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
11.1
2024-10-21T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
11.3
2024-10-23T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
11.4
2024-10-24T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
11.5
2024-10-25T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
11.6
2024-10-26T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
11.8
2024-10-28T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
12.0
2024-10-30T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
12.1
2024-10-31T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
12.4
2024-11-04T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
12.5
2024-11-05T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
12.8
2024-11-08T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
12.9
2024-11-09T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
13.0
2024-11-10T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
13.2
2024-11-12T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
13.3
2024-11-13T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
13.5
2024-11-15T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
13.6
2024-11-16T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
13.9
2024-11-19T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
14.3
2024-11-24T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
14.4
2024-11-25T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
14.5
2024-11-26T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
14.7
2024-11-28T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
15.0
2024-12-01T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
15.5
2024-12-07T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
15.7
2024-12-09T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
15.8
2024-12-10T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
15.9
2024-12-11T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
16.0
2024-12-12T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
16.2
2024-12-14T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
16.4
2024-12-16T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
16.5
2024-12-17T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
16.6
2024-12-18T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
16.7
2024-12-19T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
16.9
2024-12-21T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
17.1
2024-12-23T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
17.2
2024-12-24T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
17.3
2024-12-25T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
17.4
2024-12-26T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
17.7
2024-12-29T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
17.9
2024-12-31T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
18.3
2025-01-04T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
18.4
2025-01-05T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
18.9
2025-01-10T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
19.1
2025-01-12T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
19.2
2025-01-13T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
19.4
2025-01-16T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
19.5
2025-01-17T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
19.6
2025-01-18T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
20.0
2025-01-22T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
20.1
2025-01-23T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
20.2
2025-01-24T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
20.4
2025-01-27T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
20.6
2025-01-29T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
20.7
2025-01-30T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
21.0
2025-02-03T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
21.1
2025-02-04T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
21.2
2025-02-05T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
21.3
2025-02-07T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
21.4
2025-02-08T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
21.7
2025-02-11T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
21.8
2025-02-12T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
22.3
2025-02-17T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
22.4
2025-02-18T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
22.5
2025-02-19T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
23.0
2025-02-24T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
23.2
2025-02-26T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
23.3
2025-02-27T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
23.6
2025-03-02T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
23.7
2025-03-03T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
24.0
2025-03-06T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
24.1
2025-03-08T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
24.3
2025-03-10T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
25.0
2025-03-18T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
25.1
2025-03-19T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
25.3
2025-03-21T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
25.5
2025-03-23T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
25.6
2025-03-24T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
26.0
2025-03-28T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
26.1
2025-03-29T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
26.2
2025-03-30T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
26.4
2025-04-01T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
26.6
2025-04-04T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
26.7
2025-04-05T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
26.8
2025-04-06T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
26.9
2025-04-07T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
27.1
2025-04-09T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
27.4
2025-04-13T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
27.5
2025-04-14T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
27.6
2025-04-15T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
27.7
2025-04-16T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
28.1
2025-04-20T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
28.3
2025-04-22T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
28.8
2025-04-28T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
28.9
2025-04-29T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
29.0
2025-04-30T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
29.1
2025-05-01T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
29.3
2025-05-03T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
29.5
2025-05-05T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
29.7
2025-05-07T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
29.8
2025-05-08T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
30.1
2025-05-11T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
30.7
2025-05-17T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
31.0
2025-05-20T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
31.4
2025-05-24T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
31.6
2025-05-26T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
31.7
2025-05-27T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
1.0
2024-04-02T00:00:00
<p>Information published.</p>
1.1
2024-07-02T00:00:00
<p>Information published.</p>
1.2
2024-07-03T00:00:00
<p>Information published.</p>
1.3
2024-07-04T00:00:00
<p>Information published.</p>
1.4
2024-07-05T00:00:00
<p>Information published.</p>
1.5
2024-07-06T00:00:00
<p>Information published.</p>
1.6
2024-06-30T07:00:00
<p>Information published.</p>
1.7
2024-07-08T00:00:00
<p>Information published.</p>
1.8
2024-07-09T00:00:00
<p>Information published.</p>
1.9
2024-07-10T00:00:00
<p>Information published.</p>
2.0
2024-07-12T00:00:00
<p>Information published.</p>
2.1
2024-07-13T00:00:00
<p>Information published.</p>
2.2
2024-07-14T00:00:00
<p>Information published.</p>
2.3
2024-07-15T00:00:00
<p>Information published.</p>
2.4
2024-07-16T00:00:00
<p>Information published.</p>
2.5
2024-07-17T00:00:00
<p>Information published.</p>
2.6
2024-07-19T00:00:00
<p>Information published.</p>
2.7
2024-07-20T00:00:00
<p>Information published.</p>
2.8
2024-07-21T00:00:00
<p>Information published.</p>
2.9
2024-07-22T00:00:00
<p>Information published.</p>
3.0
2024-07-23T00:00:00
<p>Information published.</p>
3.1
2024-07-24T00:00:00
<p>Information published.</p>
3.2
2024-07-25T00:00:00
<p>Information published.</p>
3.3
2024-07-26T00:00:00
<p>Information published.</p>
3.4
2024-07-27T00:00:00
<p>Information published.</p>
3.5
2024-07-28T00:00:00
<p>Information published.</p>
3.6
2024-07-29T00:00:00
<p>Information published.</p>
3.7
2024-08-02T00:00:00
<p>Information published.</p>
3.8
2024-08-03T00:00:00
<p>Information published.</p>
3.9
2024-08-04T00:00:00
<p>Information published.</p>
4.0
2024-08-05T00:00:00
<p>Information published.</p>
4.1
2024-08-06T00:00:00
<p>Information published.</p>
4.2
2024-08-07T00:00:00
<p>Information published.</p>
4.3
2024-08-08T00:00:00
<p>Information published.</p>
4.4
2024-08-09T00:00:00
<p>Information published.</p>
4.5
2024-08-10T00:00:00
<p>Information published.</p>
4.6
2024-08-11T00:00:00
<p>Information published.</p>
4.7
2024-08-12T00:00:00
<p>Information published.</p>
4.8
2024-08-16T00:00:00
<p>Information published.</p>
4.9
2024-08-17T00:00:00
<p>Information published.</p>
5.0
2024-08-18T00:00:00
<p>Information published.</p>
5.1
2024-08-19T00:00:00
<p>Information published.</p>
5.2
2024-08-20T00:00:00
<p>Information published.</p>
5.3
2024-08-21T00:00:00
<p>Information published.</p>
5.4
2024-08-22T00:00:00
<p>Information published.</p>
5.5
2024-08-23T00:00:00
<p>Information published.</p>
5.6
2024-08-24T00:00:00
<p>Information published.</p>
5.7
2024-08-25T00:00:00
<p>Information published.</p>
5.8
2024-08-26T00:00:00
<p>Information published.</p>
5.9
2024-08-27T00:00:00
<p>Information published.</p>
6.0
2024-08-28T00:00:00
<p>Information published.</p>
6.1
2024-08-29T00:00:00
<p>Information published.</p>
6.2
2024-08-30T00:00:00
<p>Information published.</p>
6.3
2024-08-31T00:00:00
<p>Information published.</p>
6.4
2024-09-01T00:00:00
<p>Information published.</p>
6.5
2024-09-02T00:00:00
<p>Information published.</p>
6.6
2024-09-03T00:00:00
<p>Information published.</p>
6.7
2024-09-05T00:00:00
<p>Information published.</p>
6.8
2024-09-06T00:00:00
<p>Information published.</p>
6.9
2024-09-07T00:00:00
<p>Information published.</p>
7.0
2024-09-08T00:00:00
<p>Information published.</p>
7.1
2024-09-11T00:00:00
<p>Information published.</p>
7.2
2024-09-12T00:00:00
<p>Information published.</p>
7.3
2024-09-13T00:00:00
<p>Information published.</p>
7.4
2024-09-14T00:00:00
<p>Information published.</p>
7.5
2024-09-15T00:00:00
<p>Information published.</p>
7.6
2024-09-16T00:00:00
<p>Information published.</p>
7.7
2024-09-17T00:00:00
<p>Information published.</p>
7.8
2024-09-18T00:00:00
<p>Information published.</p>
7.9
2024-09-19T00:00:00
<p>Information published.</p>
8.0
2024-09-20T00:00:00
<p>Information published.</p>
8.1
2024-09-21T00:00:00
<p>Information published.</p>
8.2
2024-09-22T00:00:00
<p>Information published.</p>
8.3
2024-09-23T00:00:00
<p>Information published.</p>
8.4
2024-09-24T00:00:00
<p>Information published.</p>
8.5
2024-09-25T00:00:00
<p>Information published.</p>
8.7
2024-09-27T00:00:00
<p>Information published.</p>
8.8
2024-09-28T00:00:00
<p>Information published.</p>
9.1
2024-10-01T00:00:00
<p>Information published.</p>
9.2
2024-10-02T00:00:00
<p>Information published.</p>
9.3
2024-10-03T00:00:00
<p>Information published.</p>
9.4
2024-10-04T00:00:00
<p>Information published.</p>
9.5
2024-10-05T00:00:00
<p>Information published.</p>
9.6
2024-10-06T00:00:00
<p>Information published.</p>
9.8
2024-10-08T00:00:00
<p>Information published.</p>
9.9
2024-10-09T00:00:00
<p>Information published.</p>
10.0
2024-10-10T00:00:00
<p>Information published.</p>
10.1
2024-10-11T00:00:00
<p>Information published.</p>
10.2
2024-10-12T00:00:00
<p>Information published.</p>
10.3
2024-10-13T00:00:00
<p>Information published.</p>
10.4
2024-10-14T00:00:00
<p>Information published.</p>
10.6
2024-10-16T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
10.8
2024-10-18T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
11.2
2024-10-22T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
11.7
2024-10-27T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
11.9
2024-10-29T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
12.2
2024-11-01T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
12.3
2024-11-02T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
12.6
2024-11-06T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
12.7
2024-11-07T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
13.1
2024-11-11T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
13.4
2024-11-14T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
13.7
2024-11-17T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
13.8
2024-11-18T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
14.0
2024-11-20T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
14.1
2024-11-21T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
14.2
2024-11-23T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
14.6
2024-11-27T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
14.8
2024-11-29T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
14.9
2024-11-30T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
15.1
2024-12-02T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
15.2
2024-12-03T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
15.3
2024-12-04T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
15.4
2024-12-05T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
15.6
2024-12-08T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
16.1
2024-12-13T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
16.3
2024-12-15T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
16.8
2024-12-20T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
17.0
2024-12-22T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
17.5
2024-12-27T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
17.6
2024-12-28T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
17.8
2024-12-30T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
18.0
2025-01-01T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
18.1
2025-01-02T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
18.2
2025-01-03T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
18.5
2025-01-06T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
18.6
2025-01-07T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
18.7
2025-01-08T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
18.8
2025-01-09T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
19.0
2025-01-11T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
19.3
2025-01-15T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
19.7
2025-01-19T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
19.8
2025-01-20T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
19.9
2025-01-21T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
20.3
2025-01-25T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
20.5
2025-01-28T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
20.8
2025-02-01T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
20.9
2025-02-02T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
21.5
2025-02-09T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
21.6
2025-02-10T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
21.9
2025-02-13T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
22.0
2025-02-14T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
22.1
2025-02-15T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
22.2
2025-02-16T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
22.6
2025-02-20T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
22.7
2025-02-21T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
22.8
2025-02-22T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
22.9
2025-02-23T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
23.1
2025-02-25T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
23.4
2025-02-28T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
23.5
2025-03-01T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
23.8
2025-03-04T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
23.9
2025-03-05T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
24.2
2025-03-09T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
24.4
2025-03-11T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
24.5
2025-03-12T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
24.6
2025-03-14T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
24.7
2025-03-15T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
24.8
2025-03-16T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
24.9
2025-03-17T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
25.2
2025-03-20T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
25.4
2025-03-22T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
25.7
2025-03-25T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
25.8
2025-03-26T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
25.9
2025-03-27T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
26.3
2025-03-31T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
26.5
2025-04-03T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
27.0
2025-04-08T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
27.2
2025-04-11T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
27.3
2025-04-12T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
27.8
2025-04-17T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
27.9
2025-04-18T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
28.0
2025-04-19T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
28.2
2025-04-21T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
28.4
2025-04-23T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
28.5
2025-04-24T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
28.6
2025-04-25T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
28.7
2025-04-26T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
29.2
2025-05-02T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
29.4
2025-05-04T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
29.6
2025-05-06T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
29.9
2025-05-09T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
30.0
2025-05-10T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
30.2
2025-05-12T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
30.3
2025-05-13T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
30.4
2025-05-14T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
30.5
2025-05-15T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
30.6
2025-05-16T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
30.8
2025-05-18T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
30.9
2025-05-19T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
31.1
2025-05-21T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
31.2
2025-05-22T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
31.3
2025-05-23T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
31.5
2025-05-25T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
It was discovered the fix for CVE-2018-19758 (libsndfile) was not complete and still allows a read beyond the limits of a buffer in wav_write_header() function in wav.c. A local attacker may use this flaw to make the application crash.
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
redhat
Yes
CVE-2019-3832
Out-of-bounds Read
16897-16820
16897-16820
Moderate
16897-16820
5.0
5.0
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H
16897-16820
CBL-Mariner Releases
16897-16820
No
Security Update
1.0.31-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
16897-16820
CBL-Mariner Releases
1.0
2021-01-28T00:00:00
<p>Information published.</p>
Openwsman versions up to and including 2.6.9 are vulnerable to infinite loop in process_connection() when parsing specially crafted HTTP requests. A remote unauthenticated attacker can exploit this vulnerability by sending malicious HTTP request to cause denial of service to openwsman server.
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
redhat
Yes
CVE-2019-3833
Loop with Unreachable Exit Condition ('Infinite Loop')
17063-16823
17064-16817
17064-17084
17063-16823
17064-16817
17064-17084
Important
17063-16823
Important
17064-16817
Important
17064-17084
7.5
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
17063-16823
7.5
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
17064-16817
7.5
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
17064-17084
CBL-Mariner Releases
17063-16823
17064-16817
17064-17084
No
Security Update
2.6.8-13
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
17063-16823
17064-16817
17064-17084
CBL-Mariner Releases
8.6
2024-09-26T00:00:00
<p>Information published.</p>
8.8
2024-09-28T00:00:00
<p>Information published.</p>
8.9
2024-09-29T00:00:00
<p>Information published.</p>
9.1
2024-10-01T00:00:00
<p>Information published.</p>
9.2
2024-10-02T00:00:00
<p>Information published.</p>
9.5
2024-10-05T00:00:00
<p>Information published.</p>
9.8
2024-10-09T00:00:00
<p>Information published.</p>
10.4
2024-10-15T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
10.6
2024-10-17T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
10.9
2024-10-20T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
11.0
2024-10-21T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
11.1
2024-10-22T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
11.2
2024-10-23T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
11.3
2024-10-24T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
11.5
2024-10-26T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
11.7
2024-10-28T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
11.8
2024-10-29T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
11.9
2024-10-30T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
12.3
2024-11-04T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
12.4
2024-11-05T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
12.5
2024-11-06T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
12.7
2024-11-08T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
12.8
2024-11-09T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
12.9
2024-11-10T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
13.1
2024-11-12T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
13.2
2024-11-13T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
13.3
2024-11-14T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
13.4
2024-11-15T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
14.2
2024-11-24T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
14.5
2024-11-27T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
14.9
2024-12-01T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
15.1
2024-12-03T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
15.2
2024-12-04T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
15.4
2024-12-07T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
15.6
2024-12-09T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
15.9
2024-12-12T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
16.2
2024-12-15T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
16.3
2024-12-16T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
16.4
2024-12-17T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
16.5
2024-12-18T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
16.8
2024-12-21T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
17.1
2024-12-24T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
17.3
2024-12-26T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
17.8
2024-12-31T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
18.0
2025-01-02T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
18.1
2025-01-03T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
18.2
2025-01-04T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
18.3
2025-01-05T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
18.5
2025-01-07T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
18.7
2025-01-09T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
18.8
2025-01-10T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
19.1
2025-01-13T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
19.2
2025-01-15T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
19.4
2025-01-17T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
19.7
2025-01-20T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
20.0
2025-01-23T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
20.1
2025-01-24T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
20.2
2025-01-25T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
20.3
2025-01-27T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
20.6
2025-01-30T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
20.7
2025-02-01T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
20.8
2025-02-02T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
20.9
2025-02-03T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
21.1
2025-02-05T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
21.3
2025-02-08T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
21.7
2025-02-12T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
22.2
2025-02-17T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
22.3
2025-02-18T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
22.4
2025-02-19T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
22.6
2025-02-21T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
22.9
2025-02-24T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
23.1
2025-02-26T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
23.2
2025-02-27T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
23.6
2025-03-03T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
24.1
2025-03-09T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
24.9
2025-03-18T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
25.2
2025-03-21T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
25.3
2025-03-22T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
25.4
2025-03-23T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
25.5
2025-03-24T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
25.7
2025-03-26T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
25.9
2025-03-28T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
26.0
2025-03-29T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
26.1
2025-03-30T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
26.2
2025-03-31T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
26.3
2025-04-01T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
27.2
2025-04-12T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
27.5
2025-04-15T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
28.0
2025-04-20T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
28.1
2025-04-21T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
28.3
2025-04-23T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
28.4
2025-04-24T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
28.6
2025-04-26T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
28.9
2025-04-30T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
29.0
2025-05-01T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
29.2
2025-05-03T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
29.3
2025-05-04T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
29.4
2025-05-05T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
29.6
2025-05-07T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
29.7
2025-05-08T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
29.8
2025-05-09T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
30.0
2025-05-11T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
30.4
2025-05-15T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
30.7
2025-05-18T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
30.9
2025-05-20T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
31.3
2025-05-24T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
31.4
2025-05-25T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
31.6
2025-05-27T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
1.0
2024-04-02T00:00:00
<p>Information published.</p>
1.6
2024-06-30T07:00:00
<p>Information published.</p>
1.7
2024-07-08T00:00:00
<p>Information published.</p>
1.8
2024-07-09T00:00:00
<p>Information published.</p>
1.9
2024-07-10T00:00:00
<p>Information published.</p>
2.0
2024-07-12T00:00:00
<p>Information published.</p>
2.1
2024-07-13T00:00:00
<p>Information published.</p>
2.2
2024-07-14T00:00:00
<p>Information published.</p>
2.3
2024-07-15T00:00:00
<p>Information published.</p>
2.4
2024-07-16T00:00:00
<p>Information published.</p>
2.5
2024-07-17T00:00:00
<p>Information published.</p>
2.6
2024-07-19T00:00:00
<p>Information published.</p>
2.7
2024-07-20T00:00:00
<p>Information published.</p>
2.8
2024-07-21T00:00:00
<p>Information published.</p>
2.9
2024-07-22T00:00:00
<p>Information published.</p>
3.0
2024-07-23T00:00:00
<p>Information published.</p>
3.1
2024-07-24T00:00:00
<p>Information published.</p>
3.2
2024-07-25T00:00:00
<p>Information published.</p>
3.3
2024-07-26T00:00:00
<p>Information published.</p>
3.4
2024-07-27T00:00:00
<p>Information published.</p>
3.5
2024-07-28T00:00:00
<p>Information published.</p>
3.6
2024-07-29T00:00:00
<p>Information published.</p>
3.7
2024-08-02T00:00:00
<p>Information published.</p>
3.8
2024-08-03T00:00:00
<p>Information published.</p>
3.9
2024-08-04T00:00:00
<p>Information published.</p>
4.0
2024-08-05T00:00:00
<p>Information published.</p>
4.1
2024-08-06T00:00:00
<p>Information published.</p>
4.2
2024-08-07T00:00:00
<p>Information published.</p>
4.3
2024-08-08T00:00:00
<p>Information published.</p>
4.4
2024-08-09T00:00:00
<p>Information published.</p>
4.5
2024-08-10T00:00:00
<p>Information published.</p>
4.6
2024-08-11T00:00:00
<p>Information published.</p>
4.7
2024-08-12T00:00:00
<p>Information published.</p>
4.8
2024-08-16T00:00:00
<p>Information published.</p>
4.9
2024-08-17T00:00:00
<p>Information published.</p>
5.0
2024-08-18T00:00:00
<p>Information published.</p>
5.1
2024-08-19T00:00:00
<p>Information published.</p>
5.2
2024-08-20T00:00:00
<p>Information published.</p>
5.3
2024-08-21T00:00:00
<p>Information published.</p>
5.4
2024-08-22T00:00:00
<p>Information published.</p>
5.5
2024-08-23T00:00:00
<p>Information published.</p>
5.6
2024-08-24T00:00:00
<p>Information published.</p>
5.7
2024-08-25T00:00:00
<p>Information published.</p>
5.8
2024-08-26T00:00:00
<p>Information published.</p>
5.9
2024-08-27T00:00:00
<p>Information published.</p>
6.0
2024-08-28T00:00:00
<p>Information published.</p>
6.1
2024-08-29T00:00:00
<p>Information published.</p>
6.2
2024-08-30T00:00:00
<p>Information published.</p>
6.3
2024-08-31T00:00:00
<p>Information published.</p>
6.4
2024-09-01T00:00:00
<p>Information published.</p>
6.5
2024-09-02T00:00:00
<p>Information published.</p>
6.6
2024-09-03T00:00:00
<p>Information published.</p>
6.7
2024-09-05T00:00:00
<p>Information published.</p>
6.8
2024-09-06T00:00:00
<p>Information published.</p>
6.9
2024-09-07T00:00:00
<p>Information published.</p>
7.0
2024-09-08T00:00:00
<p>Information published.</p>
7.1
2024-09-11T00:00:00
<p>Information published.</p>
7.2
2024-09-12T00:00:00
<p>Information published.</p>
7.3
2024-09-13T00:00:00
<p>Information published.</p>
7.4
2024-09-14T00:00:00
<p>Information published.</p>
7.5
2024-09-15T00:00:00
<p>Information published.</p>
7.6
2024-09-16T00:00:00
<p>Information published.</p>
7.7
2024-09-17T00:00:00
<p>Information published.</p>
7.8
2024-09-18T00:00:00
<p>Information published.</p>
7.9
2024-09-19T00:00:00
<p>Information published.</p>
8.0
2024-09-20T00:00:00
<p>Information published.</p>
8.1
2024-09-21T00:00:00
<p>Information published.</p>
8.2
2024-09-22T00:00:00
<p>Information published.</p>
8.3
2024-09-23T00:00:00
<p>Information published.</p>
8.4
2024-09-24T00:00:00
<p>Information published.</p>
8.5
2024-09-25T00:00:00
<p>Information published.</p>
8.7
2024-09-27T00:00:00
<p>Information published.</p>
9.0
2024-09-30T00:00:00
<p>Information published.</p>
9.3
2024-10-03T00:00:00
<p>Information published.</p>
9.4
2024-10-04T00:00:00
<p>Information published.</p>
9.6
2024-10-06T00:00:00
<p>Information published.</p>
9.7
2024-10-07T00:00:00
<p>Information published.</p>
9.9
2024-10-10T00:00:00
<p>Information published.</p>
10.0
2024-10-11T00:00:00
<p>Information published.</p>
10.1
2024-10-12T00:00:00
<p>Information published.</p>
10.2
2024-10-13T00:00:00
<p>Information published.</p>
10.3
2024-10-14T00:00:00
<p>Information published.</p>
10.5
2024-10-16T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
10.7
2024-10-18T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
10.8
2024-10-19T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
11.4
2024-10-25T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
11.6
2024-10-27T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
12.0
2024-10-31T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
12.1
2024-11-01T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
12.2
2024-11-02T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
12.6
2024-11-07T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
13.0
2024-11-11T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
13.5
2024-11-16T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
13.6
2024-11-17T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
13.7
2024-11-18T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
13.8
2024-11-19T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
13.9
2024-11-20T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
14.0
2024-11-21T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
14.1
2024-11-23T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
14.3
2024-11-25T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
14.4
2024-11-26T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
14.6
2024-11-28T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
14.7
2024-11-29T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
14.8
2024-11-30T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
15.0
2024-12-02T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
15.3
2024-12-05T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
15.5
2024-12-08T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
15.7
2024-12-10T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
15.8
2024-12-11T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
16.0
2024-12-13T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
16.1
2024-12-14T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
16.6
2024-12-19T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
16.7
2024-12-20T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
16.9
2024-12-22T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
17.0
2024-12-23T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
17.2
2024-12-25T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
17.4
2024-12-27T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
17.5
2024-12-28T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
17.6
2024-12-29T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
17.7
2024-12-30T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
17.9
2025-01-01T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
18.4
2025-01-06T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
18.6
2025-01-08T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
18.9
2025-01-11T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
19.0
2025-01-12T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
19.3
2025-01-16T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
19.5
2025-01-18T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
19.6
2025-01-19T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
19.8
2025-01-21T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
19.9
2025-01-22T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
20.4
2025-01-28T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
20.5
2025-01-29T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
21.0
2025-02-04T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
21.2
2025-02-07T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
21.4
2025-02-09T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
21.5
2025-02-10T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
21.6
2025-02-11T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
21.8
2025-02-13T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
21.9
2025-02-14T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
22.0
2025-02-15T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
22.1
2025-02-16T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
22.5
2025-02-20T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
22.7
2025-02-22T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
22.8
2025-02-23T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
23.0
2025-02-25T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
23.3
2025-02-28T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
23.4
2025-03-01T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
23.5
2025-03-02T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
23.7
2025-03-04T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
23.8
2025-03-05T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
23.9
2025-03-06T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
24.0
2025-03-08T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
24.2
2025-03-10T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
24.3
2025-03-11T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
24.4
2025-03-12T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
24.5
2025-03-14T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
24.6
2025-03-15T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
24.7
2025-03-16T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
24.8
2025-03-17T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
25.0
2025-03-19T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
25.1
2025-03-20T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
25.6
2025-03-25T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
25.8
2025-03-27T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
26.4
2025-04-03T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
26.5
2025-04-04T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
26.6
2025-04-05T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
26.7
2025-04-06T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
26.8
2025-04-07T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
26.9
2025-04-08T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
27.0
2025-04-09T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
27.1
2025-04-11T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
27.3
2025-04-13T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
27.4
2025-04-14T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
27.6
2025-04-16T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
27.7
2025-04-17T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
27.8
2025-04-18T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
27.9
2025-04-19T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
28.2
2025-04-22T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
28.5
2025-04-25T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
28.7
2025-04-28T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
28.8
2025-04-29T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
29.1
2025-05-02T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
29.5
2025-05-06T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
29.9
2025-05-10T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
30.1
2025-05-12T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
30.2
2025-05-13T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
30.3
2025-05-14T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
30.5
2025-05-16T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
30.6
2025-05-17T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
30.8
2025-05-19T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
31.0
2025-05-21T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
31.1
2025-05-22T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
31.2
2025-05-23T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
31.5
2025-05-26T00:00:00
<p>Added openwsman to CBL-Mariner 2.0</p>
In Node.js including 6.x before 6.17.0 8.x before 8.15.1 10.x before 10.15.2 and 11.x before 11.10.1 an attacker can cause a Denial of Service (DoS) by establishing an HTTP or HTTPS connection in keep-alive mode and by sending headers very slowly. This keeps the connection and associated resources alive for a long period of time. Potential attacks are mitigated by the use of a load balancer or other proxy layer. This vulnerability is an extension of CVE-2018-12121 addressed in November and impacts all active Node.js release lines including 6.x before 6.17.0 8.x before 8.15.1 10.x before 10.15.2 and 11.x before 11.10.1.
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
nodejs
Yes
CVE-2019-5737
Allocation of Resources Without Limits or Throttling
16918-16820
16918-16820
Important
16918-16820
7.5
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
16918-16820
CBL-Mariner Releases
16918-16820
No
Security Update
14.17.2-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
16918-16820
CBL-Mariner Releases
1.0
2021-06-06T00:00:00
<p>Information published.</p>
An issue was discovered in sd-bus in systemd 239. bus_process_object() in libsystemd/sd-bus/bus-objects.c allocates a variable-length stack buffer for temporarily storing the object path of incoming D-Bus messages. An unprivileged local user can exploit this by sending a specially crafted message to PID1 causing the stack pointer to jump over the stack guard pages into an unmapped memory region and trigger a denial of service (systemd PID1 crash and kernel panic).
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
mitre
Yes
CVE-2019-6454
Out-of-bounds Write
17047-16820
17047-16820
Moderate
17047-16820
5.5
5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
17047-16820
CBL-Mariner Releases
17047-16820
No
Security Update
-
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
17047-16820
CBL-Mariner Releases
1.0
2020-08-18T00:00:00
<p>Information published.</p>
Controller/Async/FilesystemManager.php in the filemanager in Bolt allows remote attacke
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
mitre
Yes
CVE-2019-9185
16842-16823
16842-16823
Important
16842-16823
8.8
8.8
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
16842-16823
CBL-Mariner Releases
16842-16823
No
Security Update
0.9.2-2
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
16842-16823
CBL-Mariner Releases
1.0
2025-10-01T23:11:03
<p>Information published.</p>
Go through 1.12 on Windows misuses certain LoadLibrary functionality, leading to DLL injection.
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
mitre
Yes
CVE-2019-9634
Uncontrolled Search Path Element
21778-17084
21778-17084
Important
21778-17084
7.8
7.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
21778-17084
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
21778-17084
Security Update
21778-17084
1.0
2025-09-03T21:02:02
<p>Information published.</p>
3.0
2026-09-07T01:45:26
<p>Information published.</p>
4.0
2026-09-09T14:56:24
<p>Information published.</p>
5.0
2026-09-17T01:52:44
<p>Information published.</p>
1.1
2026-02-18T01:40:34
<p>Information published.</p>
2.0
2026-09-03T01:10:47
<p>Information published.</p>
An issue was discovered in net/http in Go 1.11.5. CRLF injection is possible if the attacker controls a url parameter as demonstrated by the second argument to http.NewRequest with \r\n followed by an HTTP header or a Redis command.
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
mitre
Yes
CVE-2019-9741
Improper Neutralization of CRLF Sequences ('CRLF Injection')
19696-17084
17080-16817
17080-17084
19696-17084
17080-16817
17080-17084
Moderate
19696-17084
Moderate
17080-16817
Moderate
17080-17084
6.1
6.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
19696-17084
6.1
6.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
17080-16817
6.1
6.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
17080-17084
CBL-Mariner Releases
19696-17084
17080-16817
17080-17084
No
Security Update
2.16.2-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
19696-17084
17080-16817
17080-17084
CBL-Mariner Releases
1.1
2026-02-18T15:18:46
<p>Information published.</p>
2.0
2026-08-12T21:06:21
<p>Information published.</p>
1.0
2024-06-30T07:00:00
<p>Information published.</p>
rbash in Bash before 4.4-beta2 did not prevent the shell user from modifying BASH_CMDS, thus allowing the user to execute any command with the permissions of the shell.
Mariner
mitre
Yes
CVE-2019-9924
Missing Authorization
21662-17084
21662-17084
Important
21662-17084
7.8
7.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
21662-17084
1.0
2026-08-07T01:06:10
<p>Information published.</p>
Scripting Engine Memory Corruption Vulnerability
<p>A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>In a web-based attack scenario, an attacker could host a specially crafted website designed to exploit the vulnerability through a Microsoft browser and then convince a user to view the website. An attacker could also embed an ActiveX control marked "safe for initialization" in an application or Microsoft Office document that hosts the browser rendering engine. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p>
<p>The security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.</p>
Microsoft Scripting Engine
CVE-2019-0609
11447
10724-10951
10724-10952
10724-11497
10724-11498
10724-11563
10724-11568
10724-11569
10724-11570
10724-11571
10724-11453
10724-11454
10724-11583
10724-10729
10724-10735
10724-10852
10724-10853
10724-10816
10486-10951
10486-10952
10486-11497
10486-11498
10486-11563
10486-11568
10486-11569
10486-11570
10486-11571
10486-11453
10486-11454
10486-11583
10486-10729
10486-10735
10486-10852
10486-10853
10486-10816
10486-10047
10486-10048
10486-10481
10486-10482
10486-10484
10486-10051
10486-10483
Remote Code Execution
11447
Remote Code Execution
10724-10951
Remote Code Execution
10724-10952
Remote Code Execution
10724-11497
Remote Code Execution
10724-11498
Remote Code Execution
10724-11563
Remote Code Execution
10724-11568
Remote Code Execution
10724-11569
Remote Code Execution
10724-11570
Remote Code Execution
10724-11571
Remote Code Execution
10724-11453
Remote Code Execution
10724-11454
Remote Code Execution
10724-11583
Remote Code Execution
10724-10729
Remote Code Execution
10724-10735
Remote Code Execution
10724-10852
Remote Code Execution
10724-10853
Remote Code Execution
10724-10816
Remote Code Execution
10486-10951
Remote Code Execution
10486-10952
Remote Code Execution
10486-11497
Remote Code Execution
10486-11498
Remote Code Execution
10486-11563
Remote Code Execution
10486-11568
Remote Code Execution
10486-11569
Remote Code Execution
10486-11570
Remote Code Execution
10486-11571
Remote Code Execution
10486-11453
Remote Code Execution
10486-11454
Remote Code Execution
10486-11583
Remote Code Execution
10486-10729
Remote Code Execution
10486-10735
Remote Code Execution
10486-10852
Remote Code Execution
10486-10853
Remote Code Execution
10486-10816
Remote Code Execution
10486-10047
Remote Code Execution
10486-10048
Remote Code Execution
10486-10481
Remote Code Execution
10486-10482
Remote Code Execution
10486-10484
Remote Code Execution
10486-10051
Remote Code Execution
10486-10483
Critical
11447
Critical
10724-10951
Critical
10724-10952
Critical
10724-11497
Critical
10724-11498
Critical
10724-11563
Critical
10724-11568
Critical
10724-11569
Critical
10724-11570
Moderate
10724-11571
Critical
10724-11453
Critical
10724-11454
Critical
10724-11583
Critical
10724-10729
Critical
10724-10735
Critical
10724-10852
Critical
10724-10853
Moderate
10724-10816
Critical
10486-10951
Critical
10486-10952
Critical
10486-11497
Critical
10486-11498
Critical
10486-11563
Critical
10486-11568
Critical
10486-11569
Critical
10486-11570
Moderate
10486-11571
Critical
10486-11453
Critical
10486-11454
Critical
10486-11583
Critical
10486-10729
Critical
10486-10735
Critical
10486-10852
Critical
10486-10853
Moderate
10486-10816
Critical
10486-10047
Critical
10486-10048
Critical
10486-10481
Critical
10486-10482
Critical
10486-10484
Moderate
10486-10051
Moderate
10486-10483
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A;DOS:N/A
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10951
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10952
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11497
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11498
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11563
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11568
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11569
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11570
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11571
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11453
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11454
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11583
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10729
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10735
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10852
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10853
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10816
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10951
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10952
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11497
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11498
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11563
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11568
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11569
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11570
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11571
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11453
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11454
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11583
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10729
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10735
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10852
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10853
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10816
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10047
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10048
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10481
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10482
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10484
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10051
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10483
Release Notes
https://github.com/Microsoft/ChakraCore/releases/tag/v1.11.7
11447
Maybe
Security Update
4489871
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489871
4487020
10724-10951
10724-10952
10486-10951
10486-10952
Yes
Security Update
4489868
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489868
4487017
10724-11497
10724-11498
10724-11563
10486-11497
10486-11498
10486-11563
Yes
Security Update
4489899
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489899
4487044
10724-11568
10724-11569
10724-11570
10724-11571
10486-11568
10486-11569
10486-11570
10486-11571
Yes
Security Update
4489899
https://support.microsoft.com/help/4489899
10724-11568
10724-11569
10724-11570
10724-11571
10486-11568
10486-11569
10486-11570
10486-11571
4489886
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489886
4486996
10724-11453
10724-11454
10724-11583
10486-11453
10486-11454
10486-11583
Yes
Security Update
4489872
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489872
4487018
10724-10729
10724-10735
10486-10729
10486-10735
Yes
Security Update
4489872
https://support.microsoft.com/help/4489872
10724-10729
10724-10735
10486-10729
10486-10735
4489882
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489882
4487026
10724-10852
10724-10853
10724-10816
10486-10852
10486-10853
10486-10816
Yes
Security Update
4489882
https://support.microsoft.com/help/4489882
10724-10852
10724-10853
10724-10816
10486-10852
10486-10853
10486-10816
4489878
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489878
4486563
10486-10047
10486-10048
10486-10051
Yes
Monthly Rollup
4489878
https://support.microsoft.com/help/4489878
10486-10047
10486-10048
10486-10051
4489873
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489873
4486474
10486-10047
10486-10048
10486-10481
10486-10482
10486-10051
10486-10483
Yes
IE Cumulative
4489873
https://support.microsoft.com/help/4489873
10486-10047
10486-10048
10486-10481
10486-10482
10486-10051
10486-10483
4489881
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489881
4487000
10486-10481
10486-10482
10486-10484
10486-10483
Yes
Monthly Rollup
4489881
https://support.microsoft.com/help/4489881
10486-10481
10486-10482
10486-10484
10486-10483
Soyeon Park and Wen Xu from SSLab at Georgia Tech
1.0
2019-03-12T07:00:00Z
<p>Information published.</p>
Chakra Scripting Engine Memory Corruption Vulnerability
<p>A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based). The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft Edge (HTML-based) and then convince a user to view the website. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p>
<p>The security update addresses the vulnerability by modifying how the Chakra scripting engine handles objects in memory.</p>
Microsoft Scripting Engine
CVE-2019-0611
11447
10724-10951
10724-10952
10724-11497
10724-11498
10724-11563
10724-11568
10724-11569
10724-11570
10724-11571
10724-11453
10724-11454
10724-11583
Information Disclosure
11447
Information Disclosure
10724-10951
Information Disclosure
10724-10952
Information Disclosure
10724-11497
Information Disclosure
10724-11498
Information Disclosure
10724-11563
Information Disclosure
10724-11568
Information Disclosure
10724-11569
Information Disclosure
10724-11570
Information Disclosure
10724-11571
Information Disclosure
10724-11453
Information Disclosure
10724-11454
Information Disclosure
10724-11583
Important
11447
Important
10724-10951
Important
10724-10952
Important
10724-11497
Important
10724-11498
Important
10724-11563
Important
10724-11568
Important
10724-11569
Important
10724-11570
Low
10724-11571
Important
10724-11453
Important
10724-11454
Important
10724-11583
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:N/A;DOS:N/A
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10724-10951
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10724-10952
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10724-11497
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10724-11498
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10724-11563
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10724-11568
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10724-11569
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10724-11570
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10724-11571
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10724-11453
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10724-11454
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10724-11583
Release Notes
https://github.com/Microsoft/ChakraCore/releases/tag/v1.11.7
11447
Maybe
Security Update
4489871
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489871
4487020
10724-10951
10724-10952
Yes
Security Update
4489868
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489868
4487017
10724-11497
10724-11498
10724-11563
Yes
Security Update
4489899
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489899
4487044
10724-11568
10724-11569
10724-11570
10724-11571
Yes
Security Update
4489899
https://support.microsoft.com/help/4489899
10724-11568
10724-11569
10724-11570
10724-11571
4489886
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489886
4486996
10724-11453
10724-11454
10724-11583
Yes
Security Update
Yuki Chen of <a href="http://www.360.com/">Qihoo 360 Vulcan Team</a>
1.0
2019-03-12T07:00:00Z
<p>Information published.</p>
Microsoft Edge Security Feature Bypass Vulnerability
<p>A security feature bypass vulnerability exists when Click2Play protection in Microsoft Edge improperly handles flash objects.</p>
<p>By itself, this bypass vulnerability does not allow arbitrary code execution. However, an attacker could use the bypass vulnerability in conjunction with another vulnerability, such as a remote code execution vulnerability, to run arbitrary code on a target system.</p>
<p>To exploit the CFG bypass vulnerability, a user must be logged on and running an affected version of Microsoft Edge. The user would then need to browse to a malicious website.</p>
<p>The security update addresses the bypass vulnerability by helping to ensure that Click2Play protection Microsoft Edge properly handles flash objects.</p>
Microsoft Edge
CVE-2019-0612
10724-10951
10724-10952
10724-11497
10724-11498
10724-11563
10724-11568
10724-11569
10724-11570
10724-11571
10724-11453
10724-11454
10724-11583
Security Feature Bypass
10724-10951
Security Feature Bypass
10724-10952
Security Feature Bypass
10724-11497
Security Feature Bypass
10724-11498
Security Feature Bypass
10724-11563
Security Feature Bypass
10724-11568
Security Feature Bypass
10724-11569
Security Feature Bypass
10724-11570
Security Feature Bypass
10724-11571
Security Feature Bypass
10724-11453
Security Feature Bypass
10724-11454
Security Feature Bypass
10724-11583
Important
10724-10951
Important
10724-10952
Important
10724-11497
Important
10724-11498
Important
10724-11563
Important
10724-11568
Important
10724-11569
Important
10724-11570
Low
10724-11571
Important
10724-11453
Important
10724-11454
Important
10724-11583
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A;DOS:N/A
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C
10724-10951
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C
10724-10952
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C
10724-11497
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C
10724-11498
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C
10724-11563
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C
10724-11568
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C
10724-11569
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C
10724-11570
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C
10724-11571
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C
10724-11453
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C
10724-11454
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C
10724-11583
4489871
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489871
4487020
10724-10951
10724-10952
Yes
Security Update
4489868
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489868
4487017
10724-11497
10724-11498
10724-11563
Yes
Security Update
4489899
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489899
4487044
10724-11568
10724-11569
10724-11570
10724-11571
Yes
Security Update
4489899
https://support.microsoft.com/help/4489899
10724-11568
10724-11569
10724-11570
10724-11571
4489886
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489886
4486996
10724-11453
10724-11454
10724-11583
Yes
Security Update
Ivan Fratric of <a href="https://www.google.com/">Google Project Zero</a>
1.0
2019-03-12T07:00:00Z
<p>Information published.</p>
Scripting Engine Memory Corruption Vulnerability
<p>A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user.</p>
<p>If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>The security update addresses the vulnerability by modifying how the ChakraCore scripting engine handles objects in memory.</p>
Microsoft Scripting Engine
CVE-2019-0639
11447
10724-11497
10724-11498
10724-11563
10724-11568
10724-11569
10724-11570
10724-11571
Remote Code Execution
11447
Remote Code Execution
10724-11497
Remote Code Execution
10724-11498
Remote Code Execution
10724-11563
Remote Code Execution
10724-11568
Remote Code Execution
10724-11569
Remote Code Execution
10724-11570
Remote Code Execution
10724-11571
Critical
11447
Critical
10724-11497
Critical
10724-11498
Critical
10724-11563
Critical
10724-11568
Critical
10724-11569
Critical
10724-11570
Moderate
10724-11571
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A;DOS:N/A
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
11447
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11497
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11498
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11563
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11568
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11569
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11570
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11571
Release Notes
https://github.com/Microsoft/ChakraCore/releases/tag/v1.11.7
11447
Maybe
Security Update
4489868
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489868
4487017
10724-11497
10724-11498
10724-11563
Yes
Security Update
4489899
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489899
4487044
10724-11568
10724-11569
10724-11570
10724-11571
Yes
Security Update
4489899
https://support.microsoft.com/help/4489899
10724-11568
10724-11569
10724-11570
10724-11571
MoonLiang of <a href="https://xlab.tencent.com/">Tencent Security Xuanwu Lab</a>
Yuki Chen of <a href="http://www.360.com/">Qihoo 360 Vulcan Team</a>
Yuki Chen of <a href="http://www.360.com/">Qihoo 360 Vulcan Team</a>
1.0
2019-03-12T07:00:00Z
<p>Information published.</p>
1.1
2019-03-20T07:00:00Z
<p>Acknowledgement added.</p>
Microsoft Edge Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists when Microsoft Edge does not properly enforce cross-domain policies, which could allow an attacker to access information from one domain and inject it into another domain.</p>
<p>In a web-based attack scenario, an attacker could host a website that is used to attempt to exploit the vulnerability. In addition, compromised websites and websites that accept or host user-provided content could contain specially crafted content that could exploit the vulnerability. However, in all cases an attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action. For example, an attacker could trick users into clicking a link that takes them to the attacker's site. An attacker who successfully exploited this vulnerability could elevate privileges in affected versions of Microsoft Edge.</p>
<p>The security update addresses the vulnerability by helping to ensure that cross-domain policies are properly enforced in Microsoft Edge.</p>
Microsoft Edge
CVE-2019-0678
10724-10951
10724-10952
10724-11497
10724-11498
10724-11563
10724-11568
10724-11569
10724-11570
10724-11571
10724-11453
10724-11454
10724-11583
10724-10852
10724-10853
10724-10816
Remote Code Execution
10724-10951
Remote Code Execution
10724-10952
Remote Code Execution
10724-11497
Remote Code Execution
10724-11498
Remote Code Execution
10724-11563
Remote Code Execution
10724-11568
Remote Code Execution
10724-11569
Remote Code Execution
10724-11570
Remote Code Execution
10724-11571
Remote Code Execution
10724-11453
Remote Code Execution
10724-11454
Remote Code Execution
10724-11583
Remote Code Execution
10724-10852
Remote Code Execution
10724-10853
Remote Code Execution
10724-10816
Important
10724-10951
Important
10724-10952
Important
10724-11497
Important
10724-11498
Important
10724-11563
Important
10724-11568
Important
10724-11569
Important
10724-11570
Low
10724-11571
Important
10724-11453
Important
10724-11454
Important
10724-11583
Important
10724-10852
Important
10724-10853
Low
10724-10816
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:N/A;DOS:N/A
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10951
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10952
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11497
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11498
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11563
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11568
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11569
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11570
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11571
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11453
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11454
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11583
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10852
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10853
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10816
4489871
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489871
4487020
10724-10951
10724-10952
Yes
Security Update
4489868
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489868
4487017
10724-11497
10724-11498
10724-11563
Yes
Security Update
4489899
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489899
4487044
10724-11568
10724-11569
10724-11570
10724-11571
Yes
Security Update
4489899
https://support.microsoft.com/help/4489899
10724-11568
10724-11569
10724-11570
10724-11571
4489886
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489886
4486996
10724-11453
10724-11454
10724-11583
Yes
Security Update
4489882
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489882
4487026
10724-10852
10724-10853
10724-10816
Yes
Security Update
4489882
https://support.microsoft.com/help/4489882
10724-10852
10724-10853
10724-10816
Nikhil Mittal of <a href="https://payatu.com/">Payatu Labs</a>
1.0
2019-03-12T07:00:00Z
<p>Information published.</p>
Scripting Engine Information Disclosure Vulnerability
<p>An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Microsoft Edge. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.</p>
<p>In a web-based attack scenario, an attacker could host a website in an attempt to exploit the vulnerability. In addition, compromised websites and websites that accept or host user-provided content could contain specially crafted content that could exploit the vulnerability. However, in all cases an attacker would have no way to force a user to view the attacker-controlled content. Instead, an attacker would have to convince a user to take action. For example, an attacker could trick a user into clicking a link that takes the user to the attacker's site.</p>
<p>The security update addresses the vulnerability by changing how the scripting engine handles objects in memory.</p>
<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>
<p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is uninitialized memory.</p>
Microsoft Scripting Engine
CVE-2019-0746
11447
10724-10951
10724-10952
10724-11497
10724-11498
10724-11563
10724-11568
10724-11569
10724-11570
10724-11571
10724-11453
10724-11454
10724-11583
10724-10729
10724-10735
10724-10852
10724-10853
10724-10816
10555-10378
10336-9312
10336-9318
10486-10951
10486-10952
10486-11497
10486-11498
10486-11563
10486-11568
10486-11569
10486-11570
10486-11571
10486-11453
10486-11454
10486-11583
10486-10729
10486-10735
10486-10852
10486-10853
10486-10816
10486-10047
10486-10048
10486-10481
10486-10482
10486-10484
10486-10051
10486-10483
Information Disclosure
11447
Information Disclosure
10724-10951
Information Disclosure
10724-10952
Information Disclosure
10724-11497
Information Disclosure
10724-11498
Information Disclosure
10724-11563
Information Disclosure
10724-11568
Information Disclosure
10724-11569
Information Disclosure
10724-11570
Information Disclosure
10724-11571
Information Disclosure
10724-11453
Information Disclosure
10724-11454
Information Disclosure
10724-11583
Information Disclosure
10724-10729
Information Disclosure
10724-10735
Information Disclosure
10724-10852
Information Disclosure
10724-10853
Information Disclosure
10724-10816
Information Disclosure
10555-10378
Information Disclosure
10336-9312
Information Disclosure
10336-9318
Information Disclosure
10486-10951
Information Disclosure
10486-10952
Information Disclosure
10486-11497
Information Disclosure
10486-11498
Information Disclosure
10486-11563
Information Disclosure
10486-11568
Information Disclosure
10486-11569
Information Disclosure
10486-11570
Information Disclosure
10486-11571
Information Disclosure
10486-11453
Information Disclosure
10486-11454
Information Disclosure
10486-11583
Information Disclosure
10486-10729
Information Disclosure
10486-10735
Information Disclosure
10486-10852
Information Disclosure
10486-10853
Information Disclosure
10486-10816
Information Disclosure
10486-10047
Information Disclosure
10486-10048
Information Disclosure
10486-10481
Information Disclosure
10486-10482
Information Disclosure
10486-10484
Information Disclosure
10486-10051
Information Disclosure
10486-10483
Important
11447
Important
10724-10951
Important
10724-10952
Important
10724-11497
Important
10724-11498
Important
10724-11563
Important
10724-11568
Important
10724-11569
Important
10724-11570
Low
10724-11571
Important
10724-11453
Important
10724-11454
Important
10724-11583
Important
10724-10729
Important
10724-10735
Important
10724-10852
Important
10724-10853
Low
10724-10816
Low
10555-10378
Low
10336-9312
Low
10336-9318
Important
10486-10951
Important
10486-10952
Important
10486-11497
Important
10486-11498
Important
10486-11563
Important
10486-11568
Important
10486-11569
Important
10486-11570
Low
10486-11571
Important
10486-11453
Important
10486-11454
Important
10486-11583
Important
10486-10729
Important
10486-10735
Important
10486-10852
Important
10486-10853
Low
10486-10816
Important
10486-10047
Important
10486-10048
Important
10486-10481
Important
10486-10482
Important
10486-10484
Low
10486-10051
Low
10486-10483
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10951
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10952
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11497
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11498
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11563
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11568
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11569
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11570
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11571
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11453
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11454
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11583
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10729
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10735
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10852
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10853
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10816
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10555-10378
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10336-9312
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10336-9318
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10951
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10952
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11497
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11498
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11563
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11568
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11569
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11570
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11571
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11453
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11454
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11583
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10729
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10735
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10852
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10853
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10816
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10047
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10048
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10481
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10482
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10484
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10051
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10483
Release Notes
https://github.com/Microsoft/ChakraCore/releases/tag/v1.11.7
11447
Maybe
Security Update
4489871
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489871
4487020
10724-10951
10724-10952
10486-10951
10486-10952
Yes
Security Update
4489868
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489868
4487017
10724-11497
10724-11498
10724-11563
10486-11497
10486-11498
10486-11563
Yes
Security Update
4489899
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489899
4487044
10724-11568
10724-11569
10724-11570
10724-11571
10486-11568
10486-11569
10486-11570
10486-11571
Yes
Security Update
4489899
https://support.microsoft.com/help/4489899
10724-11568
10724-11569
10724-11570
10724-11571
10486-11568
10486-11569
10486-11570
10486-11571
4489886
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489886
4486996
10724-11453
10724-11454
10724-11583
10486-11453
10486-11454
10486-11583
Yes
Security Update
4489872
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489872
4487018
10724-10729
10724-10735
10486-10729
10486-10735
Yes
Security Update
4489872
https://support.microsoft.com/help/4489872
10724-10729
10724-10735
10486-10729
10486-10735
4489882
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489882
4487026
10724-10852
10724-10853
10724-10816
10486-10852
10486-10853
10486-10816
Yes
Security Update
4489882
https://support.microsoft.com/help/4489882
10724-10852
10724-10853
10724-10816
10486-10852
10486-10853
10486-10816
4489891
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489891
4487025
10555-10378
Yes
Monthly Rollup
4489891
https://support.microsoft.com/help/4489891
10555-10378
4489873
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489873
4486474
10555-10378
10336-9312
10336-9318
10486-10047
10486-10048
10486-10481
10486-10482
10486-10051
10486-10483
Yes
IE Cumulative
4489873
https://support.microsoft.com/help/4489873
10555-10378
10336-9312
10336-9318
10486-10047
10486-10048
10486-10481
10486-10482
10486-10051
10486-10483
4489880
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489880
4487023
10336-9312
10336-9318
Yes
Monthly Rollup
4489878
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489878
4486563
10486-10047
10486-10048
10486-10051
Yes
Monthly Rollup
4489878
https://support.microsoft.com/help/4489878
10486-10047
10486-10048
10486-10051
4489881
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489881
4487000
10486-10481
10486-10482
10486-10484
10486-10483
Yes
Monthly Rollup
4489881
https://support.microsoft.com/help/4489881
10486-10481
10486-10482
10486-10484
10486-10483
<a href="https://twitter.com/bo13oy">bo13oy</a> of <a href="https://www.360.com">Qihoo 360 Vulcan Team</a>​
working with <a href="https://www.zerodayinitiative.com/">Trend Micro's Zero Day Initiative</a>
1.0
2019-03-12T07:00:00Z
<p>Information published.</p>
1.1
2019-03-20T07:00:00Z
<p>Corrected the CVE title and description to address the vulnerability as Information Disclosure. In the Affected Products table, corrected the Impact to Information Disclosure. This is an informational change only.</p>
Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability
<p>A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system.</p>
<p>An attacker could exploit this vulnerability by enticing a victim to open a specially crafted file.</p>
<p>The update addresses the vulnerability by correcting the way the Microsoft Office Access Connectivity Engine handles objects in memory.</p>
Microsoft Office
CVE-2019-0748
10521
10522
Remote Code Execution
10521
Remote Code Execution
10522
Important
10521
Important
10522
Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A;Older Software Release:Exploitation Less Likely;DOS:N/A
4462226
https://www.microsoft.com/downloads/details.aspx?familyid=1645c629-520e-45a6-96af-22172b2a83d6
4018313
10521
10522
Maybe
Security Update
Bar Lahav and Gal De Leon of <a href="https://www.paloaltonetworks.com/">Palo Alto Networks</a>
1.0
2019-03-12T07:00:00Z
<p>Information published.</p>
Windows Denial of Service Vulnerability
<p>A denial of service vulnerability exists when Windows improperly handles objects in memory. An attacker who successfully exploited the vulnerability could cause a target system to stop responding.</p>
<p>To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application. The vulnerability would not allow an attacker to execute code or to elevate user rights directly, but it could be used to cause a target system to stop responding.</p>
<p>The update addresses the vulnerability by correcting how Windows handles objects in memory.</p>
Microsoft Windows
CVE-2019-0754
10951
10952
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11466
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
9312
10287
9311
9318
9344
10050
10051
10049
10378
10379
10483
10543
Denial of Service
10951
Denial of Service
10952
Denial of Service
11497
Denial of Service
11498
Denial of Service
11499
Denial of Service
11563
Denial of Service
11568
Denial of Service
11569
Denial of Service
11570
Denial of Service
11571
Denial of Service
11572
Denial of Service
11453
Denial of Service
11454
Denial of Service
11583
Denial of Service
11466
Denial of Service
10729
Denial of Service
10735
Denial of Service
10852
Denial of Service
10853
Denial of Service
10816
Denial of Service
10855
Denial of Service
10047
Denial of Service
10048
Denial of Service
10481
Denial of Service
10482
Denial of Service
10484
Denial of Service
9312
Denial of Service
10287
Denial of Service
9311
Denial of Service
9318
Denial of Service
9344
Denial of Service
10050
Denial of Service
10051
Denial of Service
10049
Denial of Service
10378
Denial of Service
10379
Denial of Service
10483
Denial of Service
10543
Important
10951
Important
10952
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11466
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9311
Important
9318
Important
9344
Important
10050
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Publicly Disclosed:Yes;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
10951
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
10952
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
11497
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
11498
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
11499
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
11563
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
11568
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
11569
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
11570
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
11571
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
11572
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
11453
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
11454
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
11583
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
11466
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
10729
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
10735
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
10852
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
10853
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
10816
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
10855
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
10047
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
10048
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
10481
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
10482
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
10484
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
9312
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
10287
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
9311
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
9318
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
9344
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
10050
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
10051
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
10049
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
10378
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
10379
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
10483
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
10543
4489871
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489871
4487020
10951
10952
Yes
Security Update
4489868
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489868
4487017
11497
11498
11499
11563
Yes
Security Update
4489899
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489899
4487044
11568
11569
11570
11571
11572
Yes
Security Update
4489899
https://support.microsoft.com/help/4489899
11568
11569
11570
11571
11572
4489886
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489886
4486996
11453
11454
11583
11466
Yes
Security Update
4489872
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489872
4487018
10729
10735
Yes
Security Update
4489872
https://support.microsoft.com/help/4489872
10729
10735
4489882
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489882
4487026
10852
10853
10816
10855
Yes
Security Update
4489882
https://support.microsoft.com/help/4489882
10852
10853
10816
10855
4489878
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489878
4486563
10047
10048
10050
10051
10049
Yes
Monthly Rollup
4489878
https://support.microsoft.com/help/4489878
10047
10048
10050
10051
10049
4489885
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489885
10047
10048
10050
10051
10049
Yes
Security Only
4489885
https://support.microsoft.com/help/4489885
10047
10048
10050
10051
10049
4489881
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489881
4487000
10481
10482
10484
10483
10543
Yes
Monthly Rollup
4489881
https://support.microsoft.com/help/4489881
10481
10482
10484
10483
10543
4489883
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489883
10481
10482
10483
10543
Security Only
4489883
https://support.microsoft.com/help/4489883
10481
10482
10483
10543
4489880
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489880
4487023
9312
10287
9311
9318
9344
Yes
Monthly Rollup
4489876
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489876
4487019
9312
10287
9311
9318
9344
Yes
Security Only
4489891
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489891
4487025
10378
10379
Yes
Monthly Rollup
4489891
https://support.microsoft.com/help/4489891
10378
10379
4489884
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489884
10378
10379
Yes
Security Only
4489884
https://support.microsoft.com/help/4489884
10378
10379
1.0
2019-03-12T07:00:00Z
<p>Information published.</p>
Windows Kernel Information Disclosure Vulnerability
<p>An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system.</p>
<p>To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application. The vulnerability would not allow an attacker to execute code or to elevate user rights directly, but it could be used to obtain information that could be used to try to further compromise the affected system.</p>
<p>The update addresses the vulnerability by correcting how the Windows kernel handles objects in memory.</p>
<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>
<p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is Kernel memory read - unintentional read access to memory contents in kernel space from a user mode process.</p>
Windows Kernel
CVE-2019-0755
10951
10952
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11466
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
9312
10287
9311
9318
9344
10050
10051
10049
10378
10379
10483
10543
Information Disclosure
10951
Information Disclosure
10952
Information Disclosure
11497
Information Disclosure
11498
Information Disclosure
11499
Information Disclosure
11563
Information Disclosure
11568
Information Disclosure
11569
Information Disclosure
11570
Information Disclosure
11571
Information Disclosure
11572
Information Disclosure
11453
Information Disclosure
11454
Information Disclosure
11583
Information Disclosure
11466
Information Disclosure
10729
Information Disclosure
10735
Information Disclosure
10852
Information Disclosure
10853
Information Disclosure
10816
Information Disclosure
10855
Information Disclosure
10047
Information Disclosure
10048
Information Disclosure
10481
Information Disclosure
10482
Information Disclosure
10484
Information Disclosure
9312
Information Disclosure
10287
Information Disclosure
9311
Information Disclosure
9318
Information Disclosure
9344
Information Disclosure
10050
Information Disclosure
10051
Information Disclosure
10049
Information Disclosure
10378
Information Disclosure
10379
Information Disclosure
10483
Information Disclosure
10543
Important
10951
Important
10952
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11466
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9311
Important
9318
Important
9344
Important
10050
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10951
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10952
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11497
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11498
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11499
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11563
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11568
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11569
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11570
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11571
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11572
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11453
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11454
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11583
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11466
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10729
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10735
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10852
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10853
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10816
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10855
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10047
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10048
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10481
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10482
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10484
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9312
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10287
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9311
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9318
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9344
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10050
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10051
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10049
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10378
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10379
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10483
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10543
4489871
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489871
4487020
10951
10952
Yes
Security Update
4489868
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489868
4487017
11497
11498
11499
11563
Yes
Security Update
4489899
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489899
4487044
11568
11569
11570
11571
11572
Yes
Security Update
4489899
https://support.microsoft.com/help/4489899
11568
11569
11570
11571
11572
4489886
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489886
4486996
11453
11454
11583
11466
Yes
Security Update
4489872
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489872
4487018
10729
10735
Yes
Security Update
4489872
https://support.microsoft.com/help/4489872
10729
10735
4489882
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489882
4487026
10852
10853
10816
10855
Yes
Security Update
4489882
https://support.microsoft.com/help/4489882
10852
10853
10816
10855
4489878
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489878
4486563
10047
10048
10050
10051
10049
Yes
Monthly Rollup
4489878
https://support.microsoft.com/help/4489878
10047
10048
10050
10051
10049
4489885
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489885
10047
10048
10050
10051
10049
Yes
Security Only
4489885
https://support.microsoft.com/help/4489885
10047
10048
10050
10051
10049
4489881
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489881
4487000
10481
10482
10484
10483
10543
Yes
Monthly Rollup
4489881
https://support.microsoft.com/help/4489881
10481
10482
10484
10483
10543
4489883
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489883
10481
10482
10483
10543
Security Only
4489883
https://support.microsoft.com/help/4489883
10481
10482
10483
10543
4489880
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489880
4487023
9312
10287
9311
9318
9344
Yes
Monthly Rollup
4489876
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489876
4487019
9312
10287
9311
9318
9344
Yes
Security Only
4489891
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489891
4487025
10378
10379
Yes
Monthly Rollup
4489891
https://support.microsoft.com/help/4489891
10378
10379
4489884
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489884
10378
10379
Yes
Security Only
4489884
https://support.microsoft.com/help/4489884
10378
10379
Piotr Krysiuk of <a href="https://www.symantec.com/">Symantec</a>
1.0
2019-03-12T07:00:00Z
<p>Information published.</p>
MS XML Remote Code Execution Vulnerability
<p>A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input. An attacker who successfully exploited the vulnerability could run malicious code remotely to take control of the user’s system.</p>
<p>To exploit the vulnerability, an attacker could host a specially crafted website designed to invoke MSXML through a web browser. However, an attacker would have no way to force a user to visit such a website. Instead, an attacker would typically have to convince a user to either click a link in an email message or instant message that would then take the user to the website. When Internet Explorer parses the XML content, an attacker could run malicious code remotely to take control of the user’s system.</p>
<p>The update addresses the vulnerability by correcting how the MSXML parser processes user input.</p>
Microsoft XML
CVE-2019-0756
10951
10952
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11466
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
9312
10287
9311
9318
9344
10050
10051
10049
10378
10379
10483
10543
Remote Code Execution
10951
Remote Code Execution
10952
Remote Code Execution
11497
Remote Code Execution
11498
Remote Code Execution
11499
Remote Code Execution
11563
Remote Code Execution
11568
Remote Code Execution
11569
Remote Code Execution
11570
Remote Code Execution
11571
Remote Code Execution
11572
Remote Code Execution
11453
Remote Code Execution
11454
Remote Code Execution
11583
Remote Code Execution
11466
Remote Code Execution
10729
Remote Code Execution
10735
Remote Code Execution
10852
Remote Code Execution
10853
Remote Code Execution
10816
Remote Code Execution
10855
Remote Code Execution
10047
Remote Code Execution
10048
Remote Code Execution
10481
Remote Code Execution
10482
Remote Code Execution
10484
Remote Code Execution
9312
Remote Code Execution
10287
Remote Code Execution
9311
Remote Code Execution
9318
Remote Code Execution
9344
Remote Code Execution
10050
Remote Code Execution
10051
Remote Code Execution
10049
Remote Code Execution
10378
Remote Code Execution
10379
Remote Code Execution
10483
Remote Code Execution
10543
Critical
10951
Critical
10952
Critical
11497
Critical
11498
Critical
11499
Critical
11563
Critical
11568
Critical
11569
Critical
11570
Critical
11571
Critical
11572
Critical
11453
Critical
11454
Critical
11583
Critical
11466
Critical
10729
Critical
10735
Critical
10852
Critical
10853
Critical
10816
Critical
10855
Critical
10047
Critical
10048
Critical
10481
Critical
10482
Critical
10484
Critical
9312
Critical
10287
Critical
9311
Critical
9318
Critical
9344
Critical
10050
Critical
10051
Critical
10049
Critical
10378
Critical
10379
Critical
10483
Critical
10543
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10951
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10952
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11497
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11498
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11499
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11563
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11453
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11454
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11583
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11466
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10729
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10735
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10852
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10853
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10816
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10855
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10047
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10048
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10481
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10482
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10484
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9312
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10287
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9311
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9318
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9344
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10050
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10051
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10049
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10378
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10379
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10483
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10543
4489871
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489871
4487020
10951
10952
Yes
Security Update
4489868
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489868
4487017
11497
11498
11499
11563
Yes
Security Update
4489899
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489899
4487044
11568
11569
11570
11571
11572
Yes
Security Update
4489899
https://support.microsoft.com/help/4489899
11568
11569
11570
11571
11572
4489886
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489886
4486996
11453
11454
11583
11466
Yes
Security Update
4489872
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489872
4487018
10729
10735
Yes
Security Update
4489872
https://support.microsoft.com/help/4489872
10729
10735
4489882
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489882
4487026
10852
10853
10816
10855
Yes
Security Update
4489882
https://support.microsoft.com/help/4489882
10852
10853
10816
10855
4489878
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489878
4486563
10047
10048
10050
10051
10049
Yes
Monthly Rollup
4489878
https://support.microsoft.com/help/4489878
10047
10048
10050
10051
10049
4489885
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489885
10047
10048
10050
10051
10049
Yes
Security Only
4489885
https://support.microsoft.com/help/4489885
10047
10048
10050
10051
10049
4489881
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489881
4487000
10481
10482
10484
10483
10543
Yes
Monthly Rollup
4489881
https://support.microsoft.com/help/4489881
10481
10482
10484
10483
10543
4489883
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489883
10481
10482
10483
10543
Security Only
4489883
https://support.microsoft.com/help/4489883
10481
10482
10483
10543
4489880
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489880
4487023
9312
10287
9311
9318
9344
Yes
Monthly Rollup
4489876
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489876
4487019
9312
10287
9311
9318
9344
Yes
Security Only
4489891
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489891
4487025
10378
10379
Yes
Monthly Rollup
4489891
https://support.microsoft.com/help/4489891
10378
10379
4489884
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489884
10378
10379
Yes
Security Only
4489884
https://support.microsoft.com/help/4489884
10378
10379
Yuki Chen of <a href="http://www.360.com/">Qihoo 360 Vulcan Team</a>
1.0
2019-03-12T07:00:00Z
<p>Information published.</p>
NuGet Package Manager Tampering Vulnerability
<p>A tampering vulnerability exists in the NuGet Package Manager for Linux and Mac that could allow an authenticated attacker to modify a NuGet package's folder structure. An attacker who successfully exploited this vulnerability could potentially modify files and folders that are unpackaged on a system.</p>
<p>To exploit this vulnerability, an attacker would need to log on to the affected system and tamper with the folder contents of a package prior to building or installation of an application.</p>
<p>The security update addresses the vulnerability by correcting permissions on folders inside the NuGet packages folder structure.</p>
<p><strong>Is there any additional information I need to apply the updates?</strong></p>
<p>Yes. To apply the updates, follow step A1 or A2, and then step B.</p>
<p>A1. Delete all NuGet package extraction folders, including all global packages folder(s) and solution packages folger(s).</p>
<p>A2. Apply the workaround described in the Workaround section on the existing folders and any files in the package extraction folders.</p>
<p>B. Install and use the updates.</p>
NuGet
CVE-2019-0757
11639
11638
11642
11641
11636
11635
11637
11634
11640
10959
11624-11463
11624-11464
11625-11565
11626-11608
Tampering
11639
Tampering
11638
Tampering
11642
Tampering
11641
Tampering
11636
Tampering
11635
Tampering
11637
Tampering
11634
Tampering
11640
Tampering
10959
Tampering
11624-11463
Tampering
11624-11464
Tampering
11625-11565
Tampering
11626-11608
Important
11639
Important
11638
Important
11642
Important
11641
Important
11636
Important
11635
Important
11637
Important
11634
Important
11640
Important
10959
Important
11624-11463
Important
11624-11464
Important
11625-11565
Important
11626-11608
Publicly Disclosed:Yes;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
Release Notes
https://dist.nuget.org/win-x86-commandline/v4.8.2/nuget.exe
11639
11638
11642
11641
11636
11635
11637
11634
11640
10959
11624-11463
11624-11464
11625-11565
11626-11608
Maybe
Security Update
<p>This issue can be worked around if you change the directory permissions of all NuGet package extraction locations on your computer. These locations generally will include a global package folder (defaults to ~/.nuget/packages, but overridable by nuget.config settings). If any of your projects use packages.config for NuGet, each of the containing solutions will also have a solution packages folder.</p>
<p>To change directory permissions so only the current user can access the default location of the global packages folder:</p>
<pre><code>chmod -R go-wx ~/.nuget/packages
</code></pre>
1.0
2019-03-12T07:00:00Z
<p>Information published.</p>
1.1
2019-03-13T07:00:00Z
<p>The following revisions have been made in the Security Updates table: 1. Added .NET Core SDK 2.2 installed on .NET Core 2.2 as it is affected by CVE-2019-0757. 2. Specified the .NET Core version for .NET Core SDK 2.1. 3. Corrected the product name for Visual Studio for Mac to specify Visual Studio 2017 for Mac. These are informational changes only.</p>
Windows Print Spooler Information Disclosure Vulnerability
<p>An information disclosure vulnerability exists when the Windows Print Spooler does not properly handle objects in memory. An attacker who successfully exploited this vulnerability could use the information to further exploit the victim system.</p>
<p>To exploit this vulnerability, an attacker would have to first gain execution on the victim system.</p>
<p>The update addresses the vulnerability by correcting how the Windows Print Spooler handles objects in memory.</p>
<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>
<p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is uninitialized memory.</p>
Windows Print Spooler Components
CVE-2019-0759
10951
10952
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11466
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
9312
10287
9311
9318
9344
10050
10051
10049
10378
10379
10483
10543
Information Disclosure
10951
Information Disclosure
10952
Information Disclosure
11497
Information Disclosure
11498
Information Disclosure
11499
Information Disclosure
11563
Information Disclosure
11568
Information Disclosure
11569
Information Disclosure
11570
Information Disclosure
11571
Information Disclosure
11572
Information Disclosure
11453
Information Disclosure
11454
Information Disclosure
11583
Information Disclosure
11466
Information Disclosure
10729
Information Disclosure
10735
Information Disclosure
10852
Information Disclosure
10853
Information Disclosure
10816
Information Disclosure
10855
Information Disclosure
10047
Information Disclosure
10048
Information Disclosure
10481
Information Disclosure
10482
Information Disclosure
10484
Information Disclosure
9312
Information Disclosure
10287
Information Disclosure
9311
Information Disclosure
9318
Information Disclosure
9344
Information Disclosure
10050
Information Disclosure
10051
Information Disclosure
10049
Information Disclosure
10378
Information Disclosure
10379
Information Disclosure
10483
Information Disclosure
10543
Important
10951
Important
10952
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11466
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9311
Important
9318
Important
9344
Important
10050
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10951
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10952
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11497
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11498
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11499
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11563
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11568
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11569
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11570
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11571
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11572
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11453
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11454
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11583
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11466
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10729
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10735
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10852
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10853
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10816
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10855
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10047
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10048
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10481
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10482
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10484
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9312
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10287
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9311
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9318
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9344
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10050
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10051
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10049
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10378
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10379
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10483
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10543
4489871
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489871
4487020
10951
10952
Yes
Security Update
4489868
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489868
4487017
11497
11498
11499
11563
Yes
Security Update
4489899
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489899
4487044
11568
11569
11570
11571
11572
Yes
Security Update
4489899
https://support.microsoft.com/help/4489899
11568
11569
11570
11571
11572
4489886
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489886
4486996
11453
11454
11583
11466
Yes
Security Update
4489872
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489872
4487018
10729
10735
Yes
Security Update
4489872
https://support.microsoft.com/help/4489872
10729
10735
4489882
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489882
4487026
10852
10853
10816
10855
Yes
Security Update
4489882
https://support.microsoft.com/help/4489882
10852
10853
10816
10855
4489878
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489878
4486563
10047
10048
10050
10051
10049
Yes
Monthly Rollup
4489878
https://support.microsoft.com/help/4489878
10047
10048
10050
10051
10049
4489885
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489885
10047
10048
10050
10051
10049
Yes
Security Only
4489885
https://support.microsoft.com/help/4489885
10047
10048
10050
10051
10049
4489881
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489881
4487000
10481
10482
10484
10483
10543
Yes
Monthly Rollup
4489881
https://support.microsoft.com/help/4489881
10481
10482
10484
10483
10543
4489883
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489883
10481
10482
10483
10543
Security Only
4489883
https://support.microsoft.com/help/4489883
10481
10482
10483
10543
4489880
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489880
4487023
9312
10287
9311
9318
9344
Yes
Monthly Rollup
4489876
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489876
4487019
9312
10287
9311
9318
9344
Yes
Security Only
4489891
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489891
4487025
10378
10379
Yes
Monthly Rollup
4489891
https://support.microsoft.com/help/4489891
10378
10379
4489884
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489884
10378
10379
Yes
Security Only
4489884
https://support.microsoft.com/help/4489884
10378
10379
<a href="https://twitter.com/klotxl404">Ke Liu</a> of <a href="https://xlab.tencent.com/en/">Tencent Security Xuanwu Lab</a>
1.0
2019-03-12T07:00:00Z
<p>Information published.</p>
Internet Explorer Security Feature Bypass Vulnerability
<p>A security feature bypass vulnerability exists when Internet Explorer fails to validate the correct Security Zone of requests for specific URLs. This could allow an attacker to cause a user to access a URL in a less restricted Internet Security Zone than intended.</p>
<p>To exploit this vulnerability, an attacker could email or otherwise provide a specially crafted URL to a victim and convince them to click on it.</p>
<p>The security update addresses the vulnerability by correcting security feature behavior to properly map affected URLs to the correct Security Zone.</p>
Internet Explorer
CVE-2019-0761
10555-10378
10486-11563
10486-11568
10486-11498
10486-11497
10486-11453
10486-11454
10486-10735
10486-10729
10486-10816
10486-10853
10486-10047
10486-10482
10486-10483
10486-10484
10486-10051
10486-10951
10486-10952
10486-11570
10486-11569
10486-11571
10486-11583
10486-10852
10486-10481
10486-10048
Security Feature Bypass
10555-10378
Security Feature Bypass
10486-11563
Security Feature Bypass
10486-11568
Security Feature Bypass
10486-11498
Security Feature Bypass
10486-11497
Security Feature Bypass
10486-11453
Security Feature Bypass
10486-11454
Security Feature Bypass
10486-10735
Security Feature Bypass
10486-10729
Security Feature Bypass
10486-10816
Security Feature Bypass
10486-10853
Security Feature Bypass
10486-10047
Security Feature Bypass
10486-10482
Security Feature Bypass
10486-10483
Security Feature Bypass
10486-10484
Security Feature Bypass
10486-10051
Security Feature Bypass
10486-10951
Security Feature Bypass
10486-10952
Security Feature Bypass
10486-11570
Security Feature Bypass
10486-11569
Security Feature Bypass
10486-11571
Security Feature Bypass
10486-11583
Security Feature Bypass
10486-10852
Security Feature Bypass
10486-10481
Security Feature Bypass
10486-10048
Low
10555-10378
Important
10486-11563
Important
10486-11568
Important
10486-11498
Important
10486-11497
Important
10486-11453
Important
10486-11454
Important
10486-10735
Important
10486-10729
Low
10486-10816
Important
10486-10853
Important
10486-10047
Important
10486-10482
Low
10486-10483
Important
10486-10484
Low
10486-10051
Important
10486-10951
Important
10486-10952
Important
10486-11570
Important
10486-11569
Low
10486-11571
Important
10486-11583
Important
10486-10852
Important
10486-10481
Important
10486-10048
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
4489891
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489891
4487025
10555-10378
Yes
Monthly Rollup
4489891
https://support.microsoft.com/help/4489891
10555-10378
4489873
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489873
4486474
10555-10378
10486-10047
10486-10482
10486-10483
10486-10051
10486-10481
10486-10048
Yes
IE Cumulative
4489873
https://support.microsoft.com/help/4489873
10555-10378
10486-10047
10486-10482
10486-10483
10486-10051
10486-10481
10486-10048
4489868
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489868
4487017
10486-11563
10486-11498
10486-11497
Yes
Security Update
4489899
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489899
4487044
10486-11568
10486-11570
10486-11569
10486-11571
Yes
Security Update
4489899
https://support.microsoft.com/help/4489899
10486-11568
10486-11570
10486-11569
10486-11571
4489886
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489886
4486996
10486-11453
10486-11454
10486-11583
Yes
Security Update
4489872
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489872
4487018
10486-10735
10486-10729
Yes
Security Update
4489872
https://support.microsoft.com/help/4489872
10486-10735
10486-10729
4489882
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489882
4487026
10486-10816
10486-10853
10486-10852
Yes
Security Update
4489882
https://support.microsoft.com/help/4489882
10486-10816
10486-10853
10486-10852
4489878
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489878
4486563
10486-10047
10486-10051
10486-10048
Yes
Monthly Rollup
4489878
https://support.microsoft.com/help/4489878
10486-10047
10486-10051
10486-10048
4489881
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489881
4487000
10486-10482
10486-10483
10486-10484
10486-10481
Yes
Monthly Rollup
4489881
https://support.microsoft.com/help/4489881
10486-10482
10486-10483
10486-10484
10486-10481
4489871
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489871
4487020
10486-10951
10486-10952
Yes
Security Update
1.0
2019-03-12T07:00:00Z
<p>Information published.</p>
Microsoft Browsers Security Feature Bypass Vulnerability
<p>A security feature bypass vulnerability exists when Microsoft browsers improperly handle requests of different origins. The vulnerability allows Microsoft browsers to bypass Same-Site cookie restrictions, and to allow requests that should otherwise be ignored. An attacker who successfully exploited the vulnerability could force the browser to send data that would otherwise be restricted.</p>
<p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft browsers and then convince a user to view the website. The attacker could also take advantage of compromised websites, and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p>
<p>The security update addresses the vulnerability by modifying how affected Microsoft browsers handle cross-domain requests.</p>
Microsoft Browsers
CVE-2019-0762
10724-11497
10724-11498
10724-11453
10724-11454
10724-11568
10724-11569
10724-11570
10724-11571
10724-11563
10724-11583
10486-11497
10486-11498
10486-11453
10486-11454
10486-10047
10486-10048
10486-10481
10486-10482
10486-10484
10486-10051
10486-10483
10486-11568
10486-11569
10486-11570
10486-11571
10486-11563
10486-11583
Security Feature Bypass
10724-11497
Security Feature Bypass
10724-11498
Security Feature Bypass
10724-11453
Security Feature Bypass
10724-11454
Security Feature Bypass
10724-11568
Security Feature Bypass
10724-11569
Security Feature Bypass
10724-11570
Security Feature Bypass
10724-11571
Security Feature Bypass
10724-11563
Security Feature Bypass
10724-11583
Security Feature Bypass
10486-11497
Security Feature Bypass
10486-11498
Security Feature Bypass
10486-11453
Security Feature Bypass
10486-11454
Security Feature Bypass
10486-10047
Security Feature Bypass
10486-10048
Security Feature Bypass
10486-10481
Security Feature Bypass
10486-10482
Security Feature Bypass
10486-10484
Security Feature Bypass
10486-10051
Security Feature Bypass
10486-10483
Security Feature Bypass
10486-11568
Security Feature Bypass
10486-11569
Security Feature Bypass
10486-11570
Security Feature Bypass
10486-11571
Security Feature Bypass
10486-11563
Security Feature Bypass
10486-11583
Important
10724-11497
Important
10724-11498
Important
10724-11453
Important
10724-11454
Important
10724-11568
Important
10724-11569
Important
10724-11570
Low
10724-11571
Important
10724-11563
Important
10724-11583
Important
10486-11497
Important
10486-11498
Important
10486-11453
Important
10486-11454
Important
10486-10047
Important
10486-10048
Important
10486-10481
Important
10486-10482
Important
10486-10484
Low
10486-10051
Low
10486-10483
Important
10486-11568
Important
10486-11569
Important
10486-11570
Low
10486-11571
Important
10486-11563
Important
10486-11583
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:N/A;DOS:N/A
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C
10724-11497
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C
10724-11498
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C
10724-11453
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C
10724-11454
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C
10724-11568
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C
10724-11569
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C
10724-11570
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C
10724-11571
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C
10724-11563
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C
10724-11583
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10486-11497
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10486-11498
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10486-11453
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10486-11454
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10486-10047
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10486-10048
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10486-10481
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10486-10482
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10486-10484
2.4
2.2
CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10486-10051
2.4
2.2
CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10486-10483
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10486-11568
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10486-11569
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10486-11570
2.4
2.2
CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10486-11571
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10486-11563
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10486-11583
4489868
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489868
4487017
10724-11497
10724-11498
10724-11563
10486-11497
10486-11498
10486-11563
Yes
Security Update
4489886
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489886
4486996
10724-11453
10724-11454
10724-11583
10486-11453
10486-11454
10486-11583
Yes
Security Update
4489899
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489899
4487044
10724-11568
10724-11569
10724-11570
10724-11571
10486-11568
10486-11569
10486-11570
10486-11571
Yes
Security Update
4489899
https://support.microsoft.com/help/4489899
10724-11568
10724-11569
10724-11570
10724-11571
10486-11568
10486-11569
10486-11570
10486-11571
4489878
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489878
4486563
10486-10047
10486-10048
10486-10051
Yes
Monthly Rollup
4489878
https://support.microsoft.com/help/4489878
10486-10047
10486-10048
10486-10051
4489873
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489873
4486474
10486-10047
10486-10048
10486-10481
10486-10482
10486-10051
10486-10483
Yes
IE Cumulative
4489873
https://support.microsoft.com/help/4489873
10486-10047
10486-10048
10486-10481
10486-10482
10486-10051
10486-10483
4489881
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489881
4487000
10486-10481
10486-10482
10486-10484
10486-10483
Yes
Monthly Rollup
4489881
https://support.microsoft.com/help/4489881
10486-10481
10486-10482
10486-10484
10486-10483
<a href="https://twitter.com/1lastBr3ath">Prakash</a> of <a href="https://threatnix.io/">Threat Nix</a>
1.0
2019-03-12T07:00:00Z
<p>Information published.</p>
Internet Explorer Memory Corruption Vulnerability
<p>A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, the attacker could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>An attacker could host a specially crafted website designed to exploit the vulnerability through Internet Explorer and then convince a user to view the website. The attacker could also take advantage of compromised websites, or websites that accept or host user-provided content or advertisements, by adding specially crafted content that could exploit the vulnerability. However, in all cases an attacker would have no way to force a user to view the attacker-controlled content. Instead, an attacker would have to convince a user to take action, typically by an enticement in an email or instant message, or by getting the user to open an attachment sent through email.</p>
<p>The security update addresses the vulnerability by modifying how Internet Explorer handles objects in memory.</p>
Internet Explorer
CVE-2019-0763
10555-10378
10486-10951
10486-10952
10486-11497
10486-11498
10486-11453
10486-11454
10486-10729
10486-10735
10486-10852
10486-10853
10486-10816
10486-10047
10486-10048
10486-10481
10486-10482
10486-10484
10486-10051
10486-10483
10486-11568
10486-11569
10486-11570
10486-11571
10486-11563
10486-11583
Remote Code Execution
10555-10378
Remote Code Execution
10486-10951
Remote Code Execution
10486-10952
Remote Code Execution
10486-11497
Remote Code Execution
10486-11498
Remote Code Execution
10486-11453
Remote Code Execution
10486-11454
Remote Code Execution
10486-10729
Remote Code Execution
10486-10735
Remote Code Execution
10486-10852
Remote Code Execution
10486-10853
Remote Code Execution
10486-10816
Remote Code Execution
10486-10047
Remote Code Execution
10486-10048
Remote Code Execution
10486-10481
Remote Code Execution
10486-10482
Remote Code Execution
10486-10484
Remote Code Execution
10486-10051
Remote Code Execution
10486-10483
Remote Code Execution
10486-11568
Remote Code Execution
10486-11569
Remote Code Execution
10486-11570
Remote Code Execution
10486-11571
Remote Code Execution
10486-11563
Remote Code Execution
10486-11583
Moderate
10555-10378
Critical
10486-10951
Critical
10486-10952
Critical
10486-11497
Critical
10486-11498
Critical
10486-11453
Critical
10486-11454
Critical
10486-10729
Critical
10486-10735
Critical
10486-10852
Critical
10486-10853
Moderate
10486-10816
Critical
10486-10047
Critical
10486-10048
Critical
10486-10481
Critical
10486-10482
Critical
10486-10484
Moderate
10486-10051
Moderate
10486-10483
Critical
10486-11568
Critical
10486-11569
Critical
10486-11570
Moderate
10486-11571
Critical
10486-11563
Critical
10486-11583
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10555-10378
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10951
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10952
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11497
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11498
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11453
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11454
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10729
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10735
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10852
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10853
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10816
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10047
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10048
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10481
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10482
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10484
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10051
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10483
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11568
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11569
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11570
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11571
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11563
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11583
4489891
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489891
4487025
10555-10378
Yes
Monthly Rollup
4489891
https://support.microsoft.com/help/4489891
10555-10378
4489873
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489873
4486474
10555-10378
10486-10047
10486-10048
10486-10481
10486-10482
10486-10051
10486-10483
Yes
IE Cumulative
4489873
https://support.microsoft.com/help/4489873
10555-10378
10486-10047
10486-10048
10486-10481
10486-10482
10486-10051
10486-10483
4489871
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489871
4487020
10486-10951
10486-10952
Yes
Security Update
4489868
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489868
4487017
10486-11497
10486-11498
10486-11563
Yes
Security Update
4489886
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489886
4486996
10486-11453
10486-11454
10486-11583
Yes
Security Update
4489872
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489872
4487018
10486-10729
10486-10735
Yes
Security Update
4489872
https://support.microsoft.com/help/4489872
10486-10729
10486-10735
4489882
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489882
4487026
10486-10852
10486-10853
10486-10816
Yes
Security Update
4489882
https://support.microsoft.com/help/4489882
10486-10852
10486-10853
10486-10816
4489878
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489878
4486563
10486-10047
10486-10048
10486-10051
Yes
Monthly Rollup
4489878
https://support.microsoft.com/help/4489878
10486-10047
10486-10048
10486-10051
4489881
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489881
4487000
10486-10481
10486-10482
10486-10484
10486-10483
Yes
Monthly Rollup
4489881
https://support.microsoft.com/help/4489881
10486-10481
10486-10482
10486-10484
10486-10483
4489899
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489899
4487044
10486-11568
10486-11569
10486-11570
10486-11571
Yes
Security Update
4489899
https://support.microsoft.com/help/4489899
10486-11568
10486-11569
10486-11570
10486-11571
<a href=https://twitter.com/zeifan>Nafiez</a>
1.0
2019-03-12T07:00:00Z
<p>Information published.</p>
Comctl32 Remote Code Execution Vulnerability
<p>A remote code execution vulnerability exists in the way that comctl32.dll handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, the attacker could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>An attacker could host a specially crafted website designed to exploit the vulnerability through Internet Explorer and then convince a user to view the website. The attacker could also take advantage of compromised websites, or websites that accept or host user-provided content or advertisements, by adding specially crafted content that could exploit the vulnerability. However, in all cases an attacker would have no way to force a user to view the attacker-controlled content. Instead, an attacker would have to convince a user to take action, typically by an enticement in an email or instant message, or by getting the user to open an attachment sent through email.</p>
<p>The security update addresses the vulnerability by modifying how comctl32.dll handles objects in memory.</p>
Microsoft Windows
CVE-2019-0765
10951
10952
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11466
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
9312
10287
9311
9318
9344
10050
10051
10049
10378
10379
10483
10543
Remote Code Execution
10951
Remote Code Execution
10952
Remote Code Execution
11497
Remote Code Execution
11498
Remote Code Execution
11499
Remote Code Execution
11563
Remote Code Execution
11568
Remote Code Execution
11569
Remote Code Execution
11570
Remote Code Execution
11571
Remote Code Execution
11572
Remote Code Execution
11453
Remote Code Execution
11454
Remote Code Execution
11583
Remote Code Execution
11466
Remote Code Execution
10729
Remote Code Execution
10735
Remote Code Execution
10852
Remote Code Execution
10853
Remote Code Execution
10816
Remote Code Execution
10855
Remote Code Execution
10047
Remote Code Execution
10048
Remote Code Execution
10481
Remote Code Execution
10482
Remote Code Execution
10484
Remote Code Execution
9312
Remote Code Execution
10287
Remote Code Execution
9311
Remote Code Execution
9318
Remote Code Execution
9344
Remote Code Execution
10050
Remote Code Execution
10051
Remote Code Execution
10049
Remote Code Execution
10378
Remote Code Execution
10379
Remote Code Execution
10483
Remote Code Execution
10543
Important
10951
Important
10952
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11466
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9311
Important
9318
Important
9344
Important
10050
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10951
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10952
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11497
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11498
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11499
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11563
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11453
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11454
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11583
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11466
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10729
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10735
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10852
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10853
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10816
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10855
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10047
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10048
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10481
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10482
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10484
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9312
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10287
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9311
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9318
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9344
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10050
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10051
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10049
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10378
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10379
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10483
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10543
4489871
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489871
4487020
10951
10952
Yes
Security Update
4489868
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489868
4487017
11497
11498
11499
11563
Yes
Security Update
4489899
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489899
4487044
11568
11569
11570
11571
11572
Yes
Security Update
4489899
https://support.microsoft.com/help/4489899
11568
11569
11570
11571
11572
4489886
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489886
4486996
11453
11454
11583
11466
Yes
Security Update
4489872
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489872
4487018
10729
10735
Yes
Security Update
4489872
https://support.microsoft.com/help/4489872
10729
10735
4489882
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489882
4487026
10852
10853
10816
10855
Yes
Security Update
4489882
https://support.microsoft.com/help/4489882
10852
10853
10816
10855
4489878
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489878
4486563
10047
10048
10050
10051
10049
Yes
Monthly Rollup
4489878
https://support.microsoft.com/help/4489878
10047
10048
10050
10051
10049
4489885
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489885
10047
10048
10050
10051
10049
Yes
Security Only
4489885
https://support.microsoft.com/help/4489885
10047
10048
10050
10051
10049
4489881
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489881
4487000
10481
10482
10484
10483
10543
Yes
Monthly Rollup
4489881
https://support.microsoft.com/help/4489881
10481
10482
10484
10483
10543
4489883
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489883
10481
10482
10483
10543
Security Only
4489883
https://support.microsoft.com/help/4489883
10481
10482
10483
10543
4489880
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489880
4487023
9312
10287
9311
9318
9344
Yes
Monthly Rollup
4489876
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489876
4487019
9312
10287
9311
9318
9344
Yes
Security Only
4489891
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489891
4487025
10378
10379
Yes
Monthly Rollup
4489891
https://support.microsoft.com/help/4489891
10378
10379
4489884
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489884
10378
10379
Yes
Security Only
4489884
https://support.microsoft.com/help/4489884
10378
10379
<a href="https://twitter.com/j00sean">@j00sean</a> based on the previous work of <a href="https://twitter.com/magicmac2000">@magicmac2000</a>
1.0
2019-03-12T07:00:00Z
<p>Information published.</p>
Microsoft Windows Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists in Windows AppX Deployment Server that allows file creation in arbitrary locations.</p>
<p>To exploit the vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system.</p>
<p>The update addresses the vulnerability by not permitting Windows AppX Deployment Server to create files in arbitrary locations.</p>
Microsoft Windows
CVE-2019-0766
10951
10952
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11466
10852
10853
10816
10855
Elevation of Privilege
10951
Elevation of Privilege
10952
Elevation of Privilege
11497
Elevation of Privilege
11498
Elevation of Privilege
11499
Elevation of Privilege
11563
Elevation of Privilege
11568
Elevation of Privilege
11569
Elevation of Privilege
11570
Elevation of Privilege
11571
Elevation of Privilege
11572
Elevation of Privilege
11453
Elevation of Privilege
11454
Elevation of Privilege
11583
Elevation of Privilege
11466
Elevation of Privilege
10852
Elevation of Privilege
10853
Elevation of Privilege
10816
Elevation of Privilege
10855
Important
10951
Important
10952
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11466
Important
10852
Important
10853
Important
10816
Important
10855
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
6.7
6.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
10951
6.7
6.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
10952
6.7
6.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
11497
6.7
6.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
11498
6.7
6.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
11499
6.7
6.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
11563
6.7
6.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
11568
6.7
6.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
11569
6.7
6.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
11570
6.7
6.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
11571
6.7
6.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
11572
6.7
6.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
11453
6.7
6.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
11454
6.7
6.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
11583
6.7
6.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
11466
6.7
6.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
10852
6.7
6.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
10853
6.7
6.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
10816
6.7
6.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
10855
4489871
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489871
4487020
10951
10952
Yes
Security Update
4489868
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489868
4487017
11497
11498
11499
11563
Yes
Security Update
4489899
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489899
4487044
11568
11569
11570
11571
11572
Yes
Security Update
4489899
https://support.microsoft.com/help/4489899
11568
11569
11570
11571
11572
4489886
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489886
4486996
11453
11454
11583
11466
Yes
Security Update
4489882
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489882
4487026
10852
10853
10816
10855
Yes
Security Update
4489882
https://support.microsoft.com/help/4489882
10852
10853
10816
10855
Wayne Low of Fortinet’s <a href=https://fortiguard.com/>FortiGuard Labs</a>
1.0
2019-03-12T07:00:00Z
<p>Information published.</p>
Windows Kernel Information Disclosure Vulnerability
<p>An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory.</p>
<p>To exploit this vulnerability, an authenticated attacker could run a specially crafted application. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system.</p>
<p>The update addresses the vulnerability by correcting how the Windows kernel initializes objects in memory.</p>
<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>
<p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is uninitialized memory and kernel memory - unintentional read access to memory contents in kernel space from a user mode process.</p>
Windows Kernel
CVE-2019-0767
10951
10952
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11466
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
9312
10287
9311
9318
9344
10050
10051
10049
10378
10379
10483
10543
Information Disclosure
10951
Information Disclosure
10952
Information Disclosure
11497
Information Disclosure
11498
Information Disclosure
11499
Information Disclosure
11563
Information Disclosure
11568
Information Disclosure
11569
Information Disclosure
11570
Information Disclosure
11571
Information Disclosure
11572
Information Disclosure
11453
Information Disclosure
11454
Information Disclosure
11583
Information Disclosure
11466
Information Disclosure
10729
Information Disclosure
10735
Information Disclosure
10852
Information Disclosure
10853
Information Disclosure
10816
Information Disclosure
10855
Information Disclosure
10047
Information Disclosure
10048
Information Disclosure
10481
Information Disclosure
10482
Information Disclosure
10484
Information Disclosure
9312
Information Disclosure
10287
Information Disclosure
9311
Information Disclosure
9318
Information Disclosure
9344
Information Disclosure
10050
Information Disclosure
10051
Information Disclosure
10049
Information Disclosure
10378
Information Disclosure
10379
Information Disclosure
10483
Information Disclosure
10543
Important
10951
Important
10952
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11466
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9311
Important
9318
Important
9344
Important
10050
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10951
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10952
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11497
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11498
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11499
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11563
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11568
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11569
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11570
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11571
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11572
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11453
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11454
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11583
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11466
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10729
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10735
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10852
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10853
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10816
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10855
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10047
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10048
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10481
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10482
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10484
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9312
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10287
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9311
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9318
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9344
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10050
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10051
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10049
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10378
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10379
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10483
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10543
4489871
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489871
4487020
10951
10952
Yes
Security Update
4489868
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489868
4487017
11497
11498
11499
11563
Yes
Security Update
4489899
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489899
4487044
11568
11569
11570
11571
11572
Yes
Security Update
4489899
https://support.microsoft.com/help/4489899
11568
11569
11570
11571
11572
4489886
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489886
4486996
11453
11454
11583
11466
Yes
Security Update
4489872
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489872
4487018
10729
10735
Yes
Security Update
4489872
https://support.microsoft.com/help/4489872
10729
10735
4489882
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489882
4487026
10852
10853
10816
10855
Yes
Security Update
4489882
https://support.microsoft.com/help/4489882
10852
10853
10816
10855
4489878
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489878
4486563
10047
10048
10050
10051
10049
Yes
Monthly Rollup
4489878
https://support.microsoft.com/help/4489878
10047
10048
10050
10051
10049
4489885
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489885
10047
10048
10050
10051
10049
Yes
Security Only
4489885
https://support.microsoft.com/help/4489885
10047
10048
10050
10051
10049
4489881
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489881
4487000
10481
10482
10484
10483
10543
Yes
Monthly Rollup
4489881
https://support.microsoft.com/help/4489881
10481
10482
10484
10483
10543
4489883
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489883
10481
10482
10483
10543
Security Only
4489883
https://support.microsoft.com/help/4489883
10481
10482
10483
10543
4489880
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489880
4487023
9312
10287
9311
9318
9344
Yes
Monthly Rollup
4489876
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489876
4487019
9312
10287
9311
9318
9344
Yes
Security Only
4489891
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489891
4487025
10378
10379
Yes
Monthly Rollup
4489891
https://support.microsoft.com/help/4489891
10378
10379
4489884
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489884
10378
10379
Yes
Security Only
4489884
https://support.microsoft.com/help/4489884
10378
10379
<a href="https://twitter.com/YHZX_2013">ZiMi</a> and <a href="https://twitter.com/Bl1nnnk">JunGu</a> of Alibaba Orion Security Lab
1.0
2019-03-12T07:00:00Z
<p>Information published.</p>
Internet Explorer Security Feature Bypass Vulnerability
<p>A security feature bypass vulnerability exists when Internet Explorer VBScript execution policy does not properly restrict VBScript under specific conditions, and to allow requests that should otherwise be ignored. An attacker who successfully exploited the vulnerability could force the browser to send data that would otherwise be restricted.</p>
<p>In a web-based attack scenario, an attacker could host a website in an attempt to exploit this vulnerability. In addition, compromised websites and websites that accept or host user-provided content could contain specially crafted content that could exploit the vulnerability.</p>
<p>The update addresses the vulnerability by fixing how the Internet Explorer VBScript execution policy validates embedded VBScript content.</p>
Internet Explorer
CVE-2019-0768
10486-11497
10486-11498
10486-11563
10486-11568
10486-11569
10486-11570
10486-11571
10486-11453
10486-11454
10486-11583
Security Feature Bypass
10486-11497
Security Feature Bypass
10486-11498
Security Feature Bypass
10486-11563
Security Feature Bypass
10486-11568
Security Feature Bypass
10486-11569
Security Feature Bypass
10486-11570
Security Feature Bypass
10486-11571
Security Feature Bypass
10486-11453
Security Feature Bypass
10486-11454
Security Feature Bypass
10486-11583
Important
10486-11497
Important
10486-11498
Important
10486-11563
Important
10486-11568
Important
10486-11569
Important
10486-11570
Low
10486-11571
Important
10486-11453
Important
10486-11454
Important
10486-11583
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10486-11497
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10486-11498
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10486-11563
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10486-11568
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10486-11569
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10486-11570
2.4
2.2
CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10486-11571
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10486-11453
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10486-11454
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10486-11583
4489868
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489868
4487017
10486-11497
10486-11498
10486-11563
Yes
Security Update
4489899
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489899
4487044
10486-11568
10486-11569
10486-11570
10486-11571
Yes
Security Update
4489899
https://support.microsoft.com/help/4489899
10486-11568
10486-11569
10486-11570
10486-11571
4489886
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489886
4486996
10486-11453
10486-11454
10486-11583
Yes
Security Update
James Forshaw of <a href="http://www.google.com/">Google Project Zero</a>
1.0
2019-03-12T07:00:00Z
<p>Information published.</p>
Scripting Engine Memory Corruption Vulnerability
<p>A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge (HTML-based). The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft Edge (HTML-based) and then convince a user to view the website. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p>
<p>The security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.</p>
Microsoft Scripting Engine
CVE-2019-0769
11447
10724-10951
10724-10952
10724-11497
10724-11498
10724-11563
10724-11568
10724-11569
10724-11570
10724-11571
10724-11453
10724-11454
10724-11583
10724-10729
10724-10735
10724-10852
10724-10853
10724-10816
Remote Code Execution
11447
Remote Code Execution
10724-10951
Remote Code Execution
10724-10952
Remote Code Execution
10724-11497
Remote Code Execution
10724-11498
Remote Code Execution
10724-11563
Remote Code Execution
10724-11568
Remote Code Execution
10724-11569
Remote Code Execution
10724-11570
Remote Code Execution
10724-11571
Remote Code Execution
10724-11453
Remote Code Execution
10724-11454
Remote Code Execution
10724-11583
Remote Code Execution
10724-10729
Remote Code Execution
10724-10735
Remote Code Execution
10724-10852
Remote Code Execution
10724-10853
Remote Code Execution
10724-10816
Critical
11447
Critical
10724-10951
Critical
10724-10952
Critical
10724-11497
Critical
10724-11498
Critical
10724-11563
Critical
10724-11568
Critical
10724-11569
Critical
10724-11570
Moderate
10724-11571
Critical
10724-11453
Critical
10724-11454
Critical
10724-11583
Critical
10724-10729
Critical
10724-10735
Critical
10724-10852
Critical
10724-10853
Moderate
10724-10816
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A;DOS:N/A
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10951
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10952
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11497
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11498
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11563
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11568
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11569
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11570
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11571
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11453
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11454
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11583
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10729
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10735
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10852
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10853
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10816
Release Notes
https://github.com/Microsoft/ChakraCore/releases/tag/v1.11.7
11447
Maybe
Security Update
4489871
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489871
4487020
10724-10951
10724-10952
Yes
Security Update
4489868
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489868
4487017
10724-11497
10724-11498
10724-11563
Yes
Security Update
4489899
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489899
4487044
10724-11568
10724-11569
10724-11570
10724-11571
Yes
Security Update
4489899
https://support.microsoft.com/help/4489899
10724-11568
10724-11569
10724-11570
10724-11571
4489886
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489886
4486996
10724-11453
10724-11454
10724-11583
Yes
Security Update
4489872
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489872
4487018
10724-10729
10724-10735
Yes
Security Update
4489872
https://support.microsoft.com/help/4489872
10724-10729
10724-10735
4489882
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489882
4487026
10724-10852
10724-10853
10724-10816
Yes
Security Update
4489882
https://support.microsoft.com/help/4489882
10724-10852
10724-10853
10724-10816
<a href="https://twitter.com/S0rryMybad">Qixun Zhao</a> of <a href="http://www.360.com/">Qihoo 360 Vulcan Team</a>​
1.0
2019-03-12T07:00:00Z
<p>Information published.</p>
Scripting Engine Memory Corruption Vulnerability
<p>A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge (HTML-based). The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft Edge (HTML-based) and then convince a user to view the website. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p>
<p>The security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.</p>
Microsoft Scripting Engine
CVE-2019-0770
10724-10951
10724-10952
10724-11497
10724-11498
10724-11563
10724-11453
10724-11454
10724-11583
10724-10729
10724-10735
10724-10852
10724-10853
10724-10816
Remote Code Execution
10724-10951
Remote Code Execution
10724-10952
Remote Code Execution
10724-11497
Remote Code Execution
10724-11498
Remote Code Execution
10724-11563
Remote Code Execution
10724-11453
Remote Code Execution
10724-11454
Remote Code Execution
10724-11583
Remote Code Execution
10724-10729
Remote Code Execution
10724-10735
Remote Code Execution
10724-10852
Remote Code Execution
10724-10853
Remote Code Execution
10724-10816
Critical
10724-10951
Critical
10724-10952
Critical
10724-11497
Critical
10724-11498
Critical
10724-11563
Critical
10724-11453
Critical
10724-11454
Critical
10724-11583
Critical
10724-10729
Critical
10724-10735
Critical
10724-10852
Critical
10724-10853
Moderate
10724-10816
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A;DOS:N/A
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10951
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10952
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11497
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11498
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11563
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11453
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11454
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11583
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10729
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10735
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10852
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10853
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10816
4489871
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489871
4487020
10724-10951
10724-10952
Yes
Security Update
4489868
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489868
4487017
10724-11497
10724-11498
10724-11563
Yes
Security Update
4489886
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489886
4486996
10724-11453
10724-11454
10724-11583
Yes
Security Update
4489872
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489872
4487018
10724-10729
10724-10735
Yes
Security Update
4489872
https://support.microsoft.com/help/4489872
10724-10729
10724-10735
4489882
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489882
4487026
10724-10852
10724-10853
10724-10816
Yes
Security Update
4489882
https://support.microsoft.com/help/4489882
10724-10852
10724-10853
10724-10816
<a href="https://twitter.com/S0rryMybad">Qixun Zhao</a> of <a href="http://www.360.com/">Qihoo 360 Vulcan Team</a>​
1.0
2019-03-12T07:00:00Z
<p>Information published.</p>
Scripting Engine Memory Corruption Vulnerability
<p>A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge (HTML-based). The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft Edge (HTML-based) and then convince a user to view the website. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p>
<p>The security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.</p>
Microsoft Scripting Engine
CVE-2019-0771
11447
10724-10951
10724-10952
10724-11497
10724-11498
10724-11563
10724-11568
10724-11569
10724-11570
10724-11571
10724-11453
10724-11454
10724-11583
10724-10729
10724-10735
10724-10852
10724-10853
10724-10816
Remote Code Execution
11447
Remote Code Execution
10724-10951
Remote Code Execution
10724-10952
Remote Code Execution
10724-11497
Remote Code Execution
10724-11498
Remote Code Execution
10724-11563
Remote Code Execution
10724-11568
Remote Code Execution
10724-11569
Remote Code Execution
10724-11570
Remote Code Execution
10724-11571
Remote Code Execution
10724-11453
Remote Code Execution
10724-11454
Remote Code Execution
10724-11583
Remote Code Execution
10724-10729
Remote Code Execution
10724-10735
Remote Code Execution
10724-10852
Remote Code Execution
10724-10853
Remote Code Execution
10724-10816
Critical
11447
Critical
10724-10951
Critical
10724-10952
Critical
10724-11497
Critical
10724-11498
Critical
10724-11563
Critical
10724-11568
Critical
10724-11569
Critical
10724-11570
Moderate
10724-11571
Critical
10724-11453
Critical
10724-11454
Critical
10724-11583
Critical
10724-10729
Critical
10724-10735
Critical
10724-10852
Critical
10724-10853
Moderate
10724-10816
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A;DOS:N/A
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
11447
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10951
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10952
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11497
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11498
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11563
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11568
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11569
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11570
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11571
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11453
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11454
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11583
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10729
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10735
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10852
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10853
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10816
Release Notes
https://github.com/Microsoft/ChakraCore/releases/tag/v1.11.7
11447
Maybe
Security Update
4489871
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489871
4487020
10724-10951
10724-10952
Yes
Security Update
4489868
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489868
4487017
10724-11497
10724-11498
10724-11563
Yes
Security Update
4489899
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489899
4487044
10724-11568
10724-11569
10724-11570
10724-11571
Yes
Security Update
4489899
https://support.microsoft.com/help/4489899
10724-11568
10724-11569
10724-11570
10724-11571
4489886
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489886
4486996
10724-11453
10724-11454
10724-11583
Yes
Security Update
4489872
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489872
4487018
10724-10729
10724-10735
Yes
Security Update
4489872
https://support.microsoft.com/help/4489872
10724-10729
10724-10735
4489882
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489882
4487026
10724-10852
10724-10853
10724-10816
Yes
Security Update
4489882
https://support.microsoft.com/help/4489882
10724-10852
10724-10853
10724-10816
<a href="https://twitter.com/S0rryMybad">Qixun Zhao</a> of <a href="http://www.360.com/">Qihoo 360 Vulcan Team</a>​
Yuki Chen of <a href="http://www.360.com/">Qihoo 360 Vulcan Team</a>
1.0
2019-03-12T07:00:00Z
<p>Information published.</p>
1.1
2019-04-01T07:00:00Z
<p>Added an acknowledgement.</p>
Windows VBScript Engine Remote Code Execution Vulnerability
<p>A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Internet Explorer and then convince a user to view the website. An attacker could also embed an ActiveX control marked "safe for initialization" in an application or Microsoft Office document that hosts the IE rendering engine. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p>
<p>The security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.</p>
Microsoft Scripting Engine
CVE-2019-0772
10951
10952
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11466
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
9312
10287
9311
9318
9344
10050
10051
10049
10378
10379
10483
10543
Remote Code Execution
10951
Remote Code Execution
10952
Remote Code Execution
11497
Remote Code Execution
11498
Remote Code Execution
11499
Remote Code Execution
11563
Remote Code Execution
11568
Remote Code Execution
11569
Remote Code Execution
11570
Remote Code Execution
11571
Remote Code Execution
11572
Remote Code Execution
11453
Remote Code Execution
11454
Remote Code Execution
11583
Remote Code Execution
11466
Remote Code Execution
10729
Remote Code Execution
10735
Remote Code Execution
10852
Remote Code Execution
10853
Remote Code Execution
10816
Remote Code Execution
10855
Remote Code Execution
10047
Remote Code Execution
10048
Remote Code Execution
10481
Remote Code Execution
10482
Remote Code Execution
10484
Remote Code Execution
9312
Remote Code Execution
10287
Remote Code Execution
9311
Remote Code Execution
9318
Remote Code Execution
9344
Remote Code Execution
10050
Remote Code Execution
10051
Remote Code Execution
10049
Remote Code Execution
10378
Remote Code Execution
10379
Remote Code Execution
10483
Remote Code Execution
10543
Important
10951
Important
10952
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11466
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9311
Important
9318
Important
9344
Important
10050
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O
10951
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O
10952
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O
11497
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O
11498
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O
11499
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O
11563
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O
11568
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O
11569
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O
11570
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O
11571
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O
11572
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O
11453
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O
11454
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O
11583
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O
11466
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O
10729
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O
10735
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O
10852
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O
10853
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O
10816
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O
10855
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O
10047
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O
10048
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O
10481
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O
10482
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O
10484
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O
9312
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O
10287
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O
9311
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O
9318
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O
9344
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O
10050
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O
10051
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O
10049
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O
10378
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O
10379
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O
10483
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O
10543
4489871
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489871
4487020
10951
10952
Yes
Security Update
4489868
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489868
4487017
11497
11498
11499
11563
Yes
Security Update
4489899
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489899
4487044
11568
11569
11570
11571
11572
Yes
Security Update
4489899
https://support.microsoft.com/help/4489899
11568
11569
11570
11571
11572
4489886
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489886
4486996
11453
11454
11583
11466
Yes
Security Update
4489872
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489872
4487018
10729
10735
Yes
Security Update
4489872
https://support.microsoft.com/help/4489872
10729
10735
4489882
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489882
4487026
10852
10853
10816
10855
Yes
Security Update
4489882
https://support.microsoft.com/help/4489882
10852
10853
10816
10855
4489878
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489878
4486563
10047
10048
10050
10051
10049
Yes
Monthly Rollup
4489878
https://support.microsoft.com/help/4489878
10047
10048
10050
10051
10049
4489885
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489885
10047
10048
10050
10051
10049
Yes
Security Only
4489885
https://support.microsoft.com/help/4489885
10047
10048
10050
10051
10049
4489881
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489881
4487000
10481
10482
10484
10483
10543
Yes
Monthly Rollup
4489881
https://support.microsoft.com/help/4489881
10481
10482
10484
10483
10543
4489883
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489883
10481
10482
10483
10543
Security Only
4489883
https://support.microsoft.com/help/4489883
10481
10482
10483
10543
4489880
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489880
4487023
9312
10287
9311
9318
9344
Yes
Monthly Rollup
4489876
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489876
4487019
9312
10287
9311
9318
9344
Yes
Security Only
4489891
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489891
4487025
10378
10379
Yes
Monthly Rollup
4489891
https://support.microsoft.com/help/4489891
10378
10379
4489884
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489884
10378
10379
Yes
Security Only
4489884
https://support.microsoft.com/help/4489884
10378
10379
Yuki Chen of <a href="http://www.360.com/">Qihoo 360 Vulcan Team</a>
1.0
2019-03-12T07:00:00Z
<p>Information published.</p>
Scripting Engine Memory Corruption Vulnerability
<p>A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge (HTML-based). The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft Edge (HTML-based) and then convince a user to view the website. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p>
<p>The security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.</p>
Microsoft Scripting Engine
CVE-2019-0773
11447
10724-10951
10724-10952
10724-11497
10724-11498
10724-11563
10724-11568
10724-11569
10724-11570
10724-11571
10724-11453
10724-11454
10724-11583
10724-10729
10724-10735
10724-10852
10724-10853
10724-10816
Remote Code Execution
11447
Remote Code Execution
10724-10951
Remote Code Execution
10724-10952
Remote Code Execution
10724-11497
Remote Code Execution
10724-11498
Remote Code Execution
10724-11563
Remote Code Execution
10724-11568
Remote Code Execution
10724-11569
Remote Code Execution
10724-11570
Remote Code Execution
10724-11571
Remote Code Execution
10724-11453
Remote Code Execution
10724-11454
Remote Code Execution
10724-11583
Remote Code Execution
10724-10729
Remote Code Execution
10724-10735
Remote Code Execution
10724-10852
Remote Code Execution
10724-10853
Remote Code Execution
10724-10816
Critical
11447
Critical
10724-10951
Critical
10724-10952
Critical
10724-11497
Critical
10724-11498
Critical
10724-11563
Critical
10724-11568
Critical
10724-11569
Critical
10724-11570
Moderate
10724-11571
Critical
10724-11453
Critical
10724-11454
Critical
10724-11583
Critical
10724-10729
Critical
10724-10735
Critical
10724-10852
Critical
10724-10853
Moderate
10724-10816
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A;DOS:N/A
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
11447
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10951
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10952
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11497
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11498
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11563
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11568
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11569
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11570
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11571
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11453
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11454
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11583
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10729
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10735
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10852
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10853
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10816
Release Notes
https://github.com/Microsoft/ChakraCore/releases/tag/v1.11.7
11447
Maybe
Security Update
4489871
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489871
4487020
10724-10951
10724-10952
Yes
Security Update
4489868
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489868
4487017
10724-11497
10724-11498
10724-11563
Yes
Security Update
4489899
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489899
4487044
10724-11568
10724-11569
10724-11570
10724-11571
Yes
Security Update
4489899
https://support.microsoft.com/help/4489899
10724-11568
10724-11569
10724-11570
10724-11571
4489886
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489886
4486996
10724-11453
10724-11454
10724-11583
Yes
Security Update
4489872
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489872
4487018
10724-10729
10724-10735
Yes
Security Update
4489872
https://support.microsoft.com/help/4489872
10724-10729
10724-10735
4489882
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489882
4487026
10724-10852
10724-10853
10724-10816
Yes
Security Update
4489882
https://support.microsoft.com/help/4489882
10724-10852
10724-10853
10724-10816
Yuki Chen of <a href="http://www.360.com/">Qihoo 360 Vulcan Team</a>
<a href="https://twitter.com/S0rryMybad">Qixun Zhao</a> of <a href="http://www.360.com/">Qihoo 360 Vulcan Team</a>​
1.0
2019-03-12T07:00:00Z
<p>Information published.</p>
1.1
2019-04-01T07:00:00Z
<p>Added an acknowledgement.</p>
Windows GDI Information Disclosure Vulnerability
<p>An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.</p>
<p>There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document, or by convincing a user to visit an untrusted webpage.</p>
<p>The security update addresses the vulnerability by correcting how the Windows GDI component handles objects in memory.</p>
<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>
<p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is uninitialized memory.</p>
Microsoft Graphics Component
CVE-2019-0774
10951
10952
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11466
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
9312
10287
9311
9318
9344
10050
10051
10049
10378
10379
10483
10543
Information Disclosure
10951
Information Disclosure
10952
Information Disclosure
11497
Information Disclosure
11498
Information Disclosure
11499
Information Disclosure
11563
Information Disclosure
11568
Information Disclosure
11569
Information Disclosure
11570
Information Disclosure
11571
Information Disclosure
11572
Information Disclosure
11453
Information Disclosure
11454
Information Disclosure
11583
Information Disclosure
11466
Information Disclosure
10729
Information Disclosure
10735
Information Disclosure
10852
Information Disclosure
10853
Information Disclosure
10816
Information Disclosure
10855
Information Disclosure
10047
Information Disclosure
10048
Information Disclosure
10481
Information Disclosure
10482
Information Disclosure
10484
Information Disclosure
9312
Information Disclosure
10287
Information Disclosure
9311
Information Disclosure
9318
Information Disclosure
9344
Information Disclosure
10050
Information Disclosure
10051
Information Disclosure
10049
Information Disclosure
10378
Information Disclosure
10379
Information Disclosure
10483
Information Disclosure
10543
Important
10951
Important
10952
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11466
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9311
Important
9318
Important
9344
Important
10050
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10951
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10952
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11497
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11498
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11499
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11563
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11568
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11569
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11570
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11571
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11572
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11453
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11454
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11583
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11466
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10729
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10735
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10852
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10853
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10816
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10855
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10047
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10048
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10481
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10482
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10484
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9312
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10287
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9311
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9318
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9344
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10050
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10051
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10049
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10378
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10379
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10483
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10543
4489871
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489871
4487020
10951
10952
Yes
Security Update
4489868
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489868
4487017
11497
11498
11499
11563
Yes
Security Update
4489899
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489899
4487044
11568
11569
11570
11571
11572
Yes
Security Update
4489899
https://support.microsoft.com/help/4489899
11568
11569
11570
11571
11572
4489886
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489886
4486996
11453
11454
11583
11466
Yes
Security Update
4489872
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489872
4487018
10729
10735
Yes
Security Update
4489872
https://support.microsoft.com/help/4489872
10729
10735
4489882
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489882
4487026
10852
10853
10816
10855
Yes
Security Update
4489882
https://support.microsoft.com/help/4489882
10852
10853
10816
10855
4489878
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489878
4486563
10047
10048
10050
10051
10049
Yes
Monthly Rollup
4489878
https://support.microsoft.com/help/4489878
10047
10048
10050
10051
10049
4489885
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489885
10047
10048
10050
10051
10049
Yes
Security Only
4489885
https://support.microsoft.com/help/4489885
10047
10048
10050
10051
10049
4489881
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489881
4487000
10481
10482
10484
10483
10543
Yes
Monthly Rollup
4489881
https://support.microsoft.com/help/4489881
10481
10482
10484
10483
10543
4489883
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489883
10481
10482
10483
10543
Security Only
4489883
https://support.microsoft.com/help/4489883
10481
10482
10483
10543
4489880
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489880
4487023
9312
10287
9311
9318
9344
Yes
Monthly Rollup
4489876
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489876
4487019
9312
10287
9311
9318
9344
Yes
Security Only
4489891
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489891
4487025
10378
10379
Yes
Monthly Rollup
4489891
https://support.microsoft.com/help/4489891
10378
10379
4489884
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489884
10378
10379
Yes
Security Only
4489884
https://support.microsoft.com/help/4489884
10378
10379
riusksk of VulWar Corp working with <a href="https://www.zerodayinitiative.com/">Trend Micro's Zero Day Initiative</a>
Hossein Lotfi of <a href="https://www.zerodayinitiative.com/">Trend Micro's Zero Day Initiative</a>
1.0
2019-03-12T07:00:00Z
<p>Information published.</p>
Windows Kernel Information Disclosure Vulnerability
<p>An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system.</p>
<p>To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application. The vulnerability would not allow an attacker to execute code or to elevate user rights directly, but it could be used to obtain information that could be used to try to further compromise the affected system.</p>
<p>The update addresses the vulnerability by correcting how the Windows kernel handles objects in memory.</p>
<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>
<p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is Kernel memory read - unintentional read access to memory contents in kernel space from a user mode process.</p>
Windows Kernel
CVE-2019-0775
10951
10952
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11466
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
9312
10287
9311
9318
9344
10050
10051
10049
10378
10379
10483
10543
Information Disclosure
10951
Information Disclosure
10952
Information Disclosure
11497
Information Disclosure
11498
Information Disclosure
11499
Information Disclosure
11563
Information Disclosure
11568
Information Disclosure
11569
Information Disclosure
11570
Information Disclosure
11571
Information Disclosure
11572
Information Disclosure
11453
Information Disclosure
11454
Information Disclosure
11583
Information Disclosure
11466
Information Disclosure
10729
Information Disclosure
10735
Information Disclosure
10852
Information Disclosure
10853
Information Disclosure
10816
Information Disclosure
10855
Information Disclosure
10047
Information Disclosure
10048
Information Disclosure
10481
Information Disclosure
10482
Information Disclosure
10484
Information Disclosure
9312
Information Disclosure
10287
Information Disclosure
9311
Information Disclosure
9318
Information Disclosure
9344
Information Disclosure
10050
Information Disclosure
10051
Information Disclosure
10049
Information Disclosure
10378
Information Disclosure
10379
Information Disclosure
10483
Information Disclosure
10543
Important
10951
Important
10952
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11466
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9311
Important
9318
Important
9344
Important
10050
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10951
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10952
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11497
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11498
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11499
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11563
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11568
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11569
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11570
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11571
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11572
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11453
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11454
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11583
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11466
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10729
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10735
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10852
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10853
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10816
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10855
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10047
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10048
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10481
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10482
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10484
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9312
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10287
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9311
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9318
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9344
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10050
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10051
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10049
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10378
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10379
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10483
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10543
4489871
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489871
4487020
10951
10952
Yes
Security Update
4489868
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489868
4487017
11497
11498
11499
11563
Yes
Security Update
4489899
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489899
4487044
11568
11569
11570
11571
11572
Yes
Security Update
4489899
https://support.microsoft.com/help/4489899
11568
11569
11570
11571
11572
4489886
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489886
4486996
11453
11454
11583
11466
Yes
Security Update
4489872
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489872
4487018
10729
10735
Yes
Security Update
4489872
https://support.microsoft.com/help/4489872
10729
10735
4489882
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489882
4487026
10852
10853
10816
10855
Yes
Security Update
4489882
https://support.microsoft.com/help/4489882
10852
10853
10816
10855
4489878
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489878
4486563
10047
10048
10050
10051
10049
Yes
Monthly Rollup
4489878
https://support.microsoft.com/help/4489878
10047
10048
10050
10051
10049
4489885
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489885
10047
10048
10050
10051
10049
Yes
Security Only
4489885
https://support.microsoft.com/help/4489885
10047
10048
10050
10051
10049
4489881
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489881
4487000
10481
10482
10484
10483
10543
Yes
Monthly Rollup
4489881
https://support.microsoft.com/help/4489881
10481
10482
10484
10483
10543
4489883
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489883
10481
10482
10483
10543
Security Only
4489883
https://support.microsoft.com/help/4489883
10481
10482
10483
10543
4489880
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489880
4487023
9312
10287
9311
9318
9344
Yes
Monthly Rollup
4489876
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489876
4487019
9312
10287
9311
9318
9344
Yes
Security Only
4489891
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489891
4487025
10378
10379
Yes
Monthly Rollup
4489891
https://support.microsoft.com/help/4489891
10378
10379
4489884
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489884
10378
10379
Yes
Security Only
4489884
https://support.microsoft.com/help/4489884
10378
10379
<a href="https://twitter.com/YHZX_2013">ZiMi</a> and <a href="https://twitter.com/Bl1nnnk">JunGu</a> of Alibaba Orion Security Lab
1.0
2019-03-12T07:00:00Z
<p>Information published.</p>
Win32k Information Disclosure Vulnerability
<p>An information disclosure vulnerability exists when the win32k component improperly provides kernel information. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.</p>
<p>To exploit the vulnerability, an attacker would have to either log on locally to an affected system, or convince a locally authenticated user to execute a specially crafted application.</p>
<p>The security update addresses the vulnerability by correcting how win32k handles objects in memory.</p>
<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>
<p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is Kernel memory read - unintentional read access to memory contents in kernel space from a user mode process.</p>
Windows Kernel-Mode Drivers
CVE-2019-0776
10951
10952
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11466
10729
10735
10852
10853
10816
10855
Information Disclosure
10951
Information Disclosure
10952
Information Disclosure
11497
Information Disclosure
11498
Information Disclosure
11499
Information Disclosure
11563
Information Disclosure
11568
Information Disclosure
11569
Information Disclosure
11570
Information Disclosure
11571
Information Disclosure
11572
Information Disclosure
11453
Information Disclosure
11454
Information Disclosure
11583
Information Disclosure
11466
Information Disclosure
10729
Information Disclosure
10735
Information Disclosure
10852
Information Disclosure
10853
Information Disclosure
10816
Information Disclosure
10855
Important
10951
Important
10952
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11466
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10951
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10952
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11497
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11498
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11499
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11563
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11568
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11569
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11570
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11571
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11572
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11453
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11454
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11583
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11466
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10729
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10735
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10852
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10853
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10816
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10855
4489871
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489871
4487020
10951
10952
Yes
Security Update
4489868
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489868
4487017
11497
11498
11499
11563
Yes
Security Update
4489899
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489899
4487044
11568
11569
11570
11571
11572
Yes
Security Update
4489899
https://support.microsoft.com/help/4489899
11568
11569
11570
11571
11572
4489886
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489886
4486996
11453
11454
11583
11466
Yes
Security Update
4489872
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489872
4487018
10729
10735
Yes
Security Update
4489872
https://support.microsoft.com/help/4489872
10729
10735
4489882
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489882
4487026
10852
10853
10816
10855
Yes
Security Update
4489882
https://support.microsoft.com/help/4489882
10852
10853
10816
10855
<a href="https://twitter.com/Bl1nnnk">JunGu</a> and <a href="https://twitter.com/YHZX_2013">ZiMi</a> of Alibaba Orion Security Lab
1.0
2019-03-12T07:00:00Z
<p>Information published.</p>
Team Foundation Server Cross-site Scripting Vulnerability
<p>A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input. An authenticated attacker could exploit the vulnerability by sending a specially crafted payload to the Team Foundation Server, which will get executed in the context of the user every time a user visits the compromised page.</p>
<p>The attacker who successfully exploited the vulnerability could then perform cross-site scripting attacks on affected systems and run script in the security context of the current user. The attacks could allow the attacker to read content that the attacker is not authorized to read, execute malicious code, and use the victim's identity to take actions on the site on behalf of the user, such as change permissions and delete content.</p>
<p>The security update addresses the vulnerability by ensuring that Team Foundation Server sanitizes user inputs.</p>
Team Foundation Server
CVE-2019-0777
11594
11614
11616
Spoofing
11594
Spoofing
11614
Spoofing
11616
Low
11594
Low
11614
Low
11616
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
Release Notes
https://download.visualstudio.microsoft.com/download/pr/a7c60af1-49c8-4d3e-b06d-d84a216efc65/7f46525eb563701e898f6ff678cb63e6/tfs2017.3.1patch3.exe
11594
11614
11616
Security Update
<a href="https://exfiltrated.com">Wesley Wineberg</a>
1.0
2019-03-12T07:00:00Z
<p>Information published.</p>
Microsoft Office SharePoint XSS Vulnerability
<p>A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint server.</p>
<p>The attacker who successfully exploited the vulnerability could then perform cross-site scripting attacks on affected systems and run script in the security context of the current user. The attacks could allow the attacker to read content that the attacker is not authorized to read, use the victim's identity to take actions on the SharePoint site on behalf of the user, such as change permissions and delete content, and inject malicious content in the browser of the user.</p>
<p>The security update addresses the vulnerability by helping to ensure that SharePoint Server properly sanitizes web requests.</p>
Microsoft Office SharePoint
CVE-2019-0778
10950
10612
Tampering
10950
Tampering
10612
Important
10950
Important
10612
Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A;Older Software Release:Exploitation Less Likely;DOS:N/A
4462211
https://www.microsoft.com/downloads/details.aspx?familyid=d7a12d15-0230-487d-a2cf-ceb50a424559
4462155
10950
Maybe
Security Update
4462208
https://www.microsoft.com/downloads/details.aspx?familyid=96e2650f-ce6e-40e7-a5ac-0f2eac2a01e8
4462143
10612
Maybe
Security Update
1.0
2019-03-12T07:00:00Z
<p>Information published.</p>
Microsoft Edge Memory Corruption Vulnerability
<p>A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory. The vulnerability could corrupt memory in such a way that enables an attacker to execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>An attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft Edge, and then convince a user to view the website. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements by adding specially crafted content that could exploit the vulnerability. In all cases, however, an attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically by way of enticement in an email or Instant Messenger message, or by getting them to open an attachment sent through email.</p>
<p>The security update addresses the vulnerability by modifying how Microsoft Edge handles objects in memory.</p>
<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>
<p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is uninitialized memory.</p>
Microsoft Edge
CVE-2019-0779
10724-10951
10724-10952
10724-11453
10724-11454
10724-11583
10724-10852
10724-10853
10724-10816
Information Disclosure
10724-10951
Information Disclosure
10724-10952
Information Disclosure
10724-11453
Information Disclosure
10724-11454
Information Disclosure
10724-11583
Information Disclosure
10724-10852
Information Disclosure
10724-10853
Information Disclosure
10724-10816
Important
10724-10951
Important
10724-10952
Important
10724-11453
Important
10724-11454
Important
10724-11583
Important
10724-10852
Important
10724-10853
Low
10724-10816
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A;DOS:N/A
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10951
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10952
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11453
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11454
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11583
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10852
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10853
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10816
4489871
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489871
4487020
10724-10951
10724-10952
Yes
Security Update
4489886
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489886
4486996
10724-11453
10724-11454
10724-11583
Yes
Security Update
4489882
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489882
4487026
10724-10852
10724-10853
10724-10816
Yes
Security Update
4489882
https://support.microsoft.com/help/4489882
10724-10852
10724-10853
10724-10816
Zhong Zhaochen of <a href="https://www.tophant.com/">tophant.com</a>
1.0
2019-03-12T07:00:00Z
<p>Information published.</p>
Microsoft Browser Memory Corruption Vulnerability
<p>A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory. The vulnerability could corrupt memory in a way that could allow an attacker to execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, the attacker could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>An attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft browsers, and then convince a user to view the website. The attacker could also take advantage of compromised websites, or websites that accept or host user-provided content or advertisements, by adding specially crafted content that could exploit the vulnerability. In all cases, however, an attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically via an enticement in email or instant message, or by getting them to open an email attachment.</p>
<p>The security update addresses the vulnerability by modifying how Microsoft browsers handle objects in memory.</p>
Microsoft Browsers
CVE-2019-0780
10724-10951
10724-10952
10724-11497
10724-11498
10724-11563
10724-11568
10724-11569
10724-11570
10724-11571
10724-11453
10724-11454
10724-11583
10724-10729
10724-10735
10724-10852
10724-10853
10724-10816
10555-10378
10486-10951
10486-10952
10486-11497
10486-11498
10486-11563
10486-11568
10486-11569
10486-11570
10486-11571
10486-11453
10486-11454
10486-11583
10486-10729
10486-10735
10486-10852
10486-10853
10486-10816
10486-10047
10486-10048
10486-10481
10486-10482
10486-10484
10486-10051
10486-10483
Remote Code Execution
10724-10951
Remote Code Execution
10724-10952
Remote Code Execution
10724-11497
Remote Code Execution
10724-11498
Remote Code Execution
10724-11563
Remote Code Execution
10724-11568
Remote Code Execution
10724-11569
Remote Code Execution
10724-11570
Remote Code Execution
10724-11571
Remote Code Execution
10724-11453
Remote Code Execution
10724-11454
Remote Code Execution
10724-11583
Remote Code Execution
10724-10729
Remote Code Execution
10724-10735
Remote Code Execution
10724-10852
Remote Code Execution
10724-10853
Remote Code Execution
10724-10816
Remote Code Execution
10555-10378
Remote Code Execution
10486-10951
Remote Code Execution
10486-10952
Remote Code Execution
10486-11497
Remote Code Execution
10486-11498
Remote Code Execution
10486-11563
Remote Code Execution
10486-11568
Remote Code Execution
10486-11569
Remote Code Execution
10486-11570
Remote Code Execution
10486-11571
Remote Code Execution
10486-11453
Remote Code Execution
10486-11454
Remote Code Execution
10486-11583
Remote Code Execution
10486-10729
Remote Code Execution
10486-10735
Remote Code Execution
10486-10852
Remote Code Execution
10486-10853
Remote Code Execution
10486-10816
Remote Code Execution
10486-10047
Remote Code Execution
10486-10048
Remote Code Execution
10486-10481
Remote Code Execution
10486-10482
Remote Code Execution
10486-10484
Remote Code Execution
10486-10051
Remote Code Execution
10486-10483
Important
10724-10951
Important
10724-10952
Important
10724-11497
Important
10724-11498
Important
10724-11563
Important
10724-11568
Important
10724-11569
Important
10724-11570
Low
10724-11571
Important
10724-11453
Important
10724-11454
Important
10724-11583
Important
10724-10729
Important
10724-10735
Important
10724-10852
Important
10724-10853
Low
10724-10816
Low
10555-10378
Important
10486-10951
Important
10486-10952
Important
10486-11497
Important
10486-11498
Important
10486-11563
Important
10486-11568
Important
10486-11569
Important
10486-11570
Low
10486-11571
Important
10486-11453
Important
10486-11454
Important
10486-11583
Important
10486-10729
Important
10486-10735
Important
10486-10852
Important
10486-10853
Low
10486-10816
Important
10486-10047
Important
10486-10048
Important
10486-10481
Important
10486-10482
Important
10486-10484
Low
10486-10051
Low
10486-10483
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A;DOS:N/A
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10951
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10952
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11497
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11498
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11563
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11568
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11569
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11570
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11571
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11453
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11454
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11583
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10729
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10735
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10852
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10853
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10816
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10555-10378
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10951
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10952
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11497
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11498
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11563
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11568
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11569
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11570
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11571
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11453
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11454
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11583
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10729
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10735
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10852
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10853
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10816
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10047
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10048
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10481
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10482
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10484
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10051
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10483
4489871
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489871
4487020
10724-10951
10724-10952
10486-10951
10486-10952
Yes
Security Update
4489868
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489868
4487017
10724-11497
10724-11498
10724-11563
10486-11497
10486-11498
10486-11563
Yes
Security Update
4489899
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489899
4487044
10724-11568
10724-11569
10724-11570
10724-11571
10486-11568
10486-11569
10486-11570
10486-11571
Yes
Security Update
4489899
https://support.microsoft.com/help/4489899
10724-11568
10724-11569
10724-11570
10724-11571
10486-11568
10486-11569
10486-11570
10486-11571
4489886
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489886
4486996
10724-11453
10724-11454
10724-11583
10486-11453
10486-11454
10486-11583
Yes
Security Update
4489872
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489872
4487018
10724-10729
10724-10735
10486-10729
10486-10735
Yes
Security Update
4489872
https://support.microsoft.com/help/4489872
10724-10729
10724-10735
10486-10729
10486-10735
4489882
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489882
4487026
10724-10852
10724-10853
10724-10816
10486-10852
10486-10853
10486-10816
Yes
Security Update
4489882
https://support.microsoft.com/help/4489882
10724-10852
10724-10853
10724-10816
10486-10852
10486-10853
10486-10816
4489891
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489891
4487025
10555-10378
Yes
Monthly Rollup
4489891
https://support.microsoft.com/help/4489891
10555-10378
4489873
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489873
4486474
10555-10378
10486-10047
10486-10048
10486-10481
10486-10482
10486-10051
10486-10483
Yes
IE Cumulative
4489873
https://support.microsoft.com/help/4489873
10555-10378
10486-10047
10486-10048
10486-10481
10486-10482
10486-10051
10486-10483
4489878
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489878
4486563
10486-10047
10486-10048
10486-10051
Yes
Monthly Rollup
4489878
https://support.microsoft.com/help/4489878
10486-10047
10486-10048
10486-10051
4489881
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489881
4487000
10486-10481
10486-10482
10486-10484
10486-10483
Yes
Monthly Rollup
4489881
https://support.microsoft.com/help/4489881
10486-10481
10486-10482
10486-10484
10486-10483
1.0
2019-03-12T07:00:00Z
<p>Information published.</p>
Windows Kernel Information Disclosure Vulnerability
<p>An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system.</p>
<p>To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application.</p>
<p>The security update addresses the vulnerability by correcting how the Windows kernel initializes memory.</p>
<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>
<p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is uninitialized memory and kernel memory - unintentional read access to memory contents in kernel space from a user mode process.</p>
Windows Kernel
CVE-2019-0782
10951
10952
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11466
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
9312
10287
9311
9318
9344
10050
10051
10049
10378
10379
10483
10543
Information Disclosure
10951
Information Disclosure
10952
Information Disclosure
11497
Information Disclosure
11498
Information Disclosure
11499
Information Disclosure
11563
Information Disclosure
11568
Information Disclosure
11569
Information Disclosure
11570
Information Disclosure
11571
Information Disclosure
11572
Information Disclosure
11453
Information Disclosure
11454
Information Disclosure
11583
Information Disclosure
11466
Information Disclosure
10729
Information Disclosure
10735
Information Disclosure
10852
Information Disclosure
10853
Information Disclosure
10816
Information Disclosure
10855
Information Disclosure
10047
Information Disclosure
10048
Information Disclosure
10481
Information Disclosure
10482
Information Disclosure
10484
Information Disclosure
9312
Information Disclosure
10287
Information Disclosure
9311
Information Disclosure
9318
Information Disclosure
9344
Information Disclosure
10050
Information Disclosure
10051
Information Disclosure
10049
Information Disclosure
10378
Information Disclosure
10379
Information Disclosure
10483
Information Disclosure
10543
Important
10951
Important
10952
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11466
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9311
Important
9318
Important
9344
Important
10050
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10951
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10952
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11497
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11498
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11499
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11563
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11568
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11569
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11570
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11571
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11572
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11453
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11454
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11583
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11466
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10729
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10735
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10852
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10853
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10816
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10855
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10047
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10048
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10481
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10482
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10484
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9312
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10287
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9311
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9318
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9344
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10050
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10051
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10049
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10378
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10379
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10483
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10543
4489871
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489871
4487020
10951
10952
Yes
Security Update
4489868
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489868
4487017
11497
11498
11499
11563
Yes
Security Update
4489899
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489899
4487044
11568
11569
11570
11571
11572
Yes
Security Update
4489899
https://support.microsoft.com/help/4489899
11568
11569
11570
11571
11572
4489886
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489886
4486996
11453
11454
11583
11466
Yes
Security Update
4489872
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489872
4487018
10729
10735
Yes
Security Update
4489872
https://support.microsoft.com/help/4489872
10729
10735
4489882
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489882
4487026
10852
10853
10816
10855
Yes
Security Update
4489882
https://support.microsoft.com/help/4489882
10852
10853
10816
10855
4489878
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489878
4486563
10047
10048
10050
10051
10049
Yes
Monthly Rollup
4489878
https://support.microsoft.com/help/4489878
10047
10048
10050
10051
10049
4489885
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489885
10047
10048
10050
10051
10049
Yes
Security Only
4489885
https://support.microsoft.com/help/4489885
10047
10048
10050
10051
10049
4489881
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489881
4487000
10481
10482
10484
10483
10543
Yes
Monthly Rollup
4489881
https://support.microsoft.com/help/4489881
10481
10482
10484
10483
10543
4489883
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489883
10481
10482
10483
10543
Security Only
4489883
https://support.microsoft.com/help/4489883
10481
10482
10483
10543
4489880
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489880
4487023
9312
10287
9311
9318
9344
Yes
Monthly Rollup
4489876
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489876
4487019
9312
10287
9311
9318
9344
Yes
Security Only
4489891
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489891
4487025
10378
10379
Yes
Monthly Rollup
4489891
https://support.microsoft.com/help/4489891
10378
10379
4489884
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489884
10378
10379
Yes
Security Only
4489884
https://support.microsoft.com/help/4489884
10378
10379
<a href="https://twitter.com/YHZX_2013">ZiMi</a> and <a href="https://twitter.com/Bl1nnnk">JunGu</a> of Alibaba Orion Security Lab
1.0
2019-03-12T07:00:00Z
<p>Information published.</p>
Scripting Engine Memory Corruption Vulnerability
<p>A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Internet Explorer and then convince a user to view the website. An attacker could also embed an ActiveX control marked "safe for initialization" in an application or Microsoft Office document that hosts the IE rendering engine. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p>
<p>The security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.</p>
Microsoft Scripting Engine
CVE-2019-0783
10555-10378
10486-10951
10486-10952
10486-11497
10486-11498
10486-11563
10486-11568
10486-11569
10486-11570
10486-11571
10486-11453
10486-11454
10486-11583
10486-10729
10486-10735
10486-10852
10486-10853
10486-10816
10486-10047
10486-10048
10486-10481
10486-10482
10486-10484
10486-10051
10486-10483
Remote Code Execution
10555-10378
Remote Code Execution
10486-10951
Remote Code Execution
10486-10952
Remote Code Execution
10486-11497
Remote Code Execution
10486-11498
Remote Code Execution
10486-11563
Remote Code Execution
10486-11568
Remote Code Execution
10486-11569
Remote Code Execution
10486-11570
Remote Code Execution
10486-11571
Remote Code Execution
10486-11453
Remote Code Execution
10486-11454
Remote Code Execution
10486-11583
Remote Code Execution
10486-10729
Remote Code Execution
10486-10735
Remote Code Execution
10486-10852
Remote Code Execution
10486-10853
Remote Code Execution
10486-10816
Remote Code Execution
10486-10047
Remote Code Execution
10486-10048
Remote Code Execution
10486-10481
Remote Code Execution
10486-10482
Remote Code Execution
10486-10484
Remote Code Execution
10486-10051
Remote Code Execution
10486-10483
Low
10555-10378
Important
10486-10951
Important
10486-10952
Important
10486-11497
Important
10486-11498
Important
10486-11563
Important
10486-11568
Important
10486-11569
Important
10486-11570
Low
10486-11571
Important
10486-11453
Important
10486-11454
Important
10486-11583
Important
10486-10729
Important
10486-10735
Important
10486-10852
Important
10486-10853
Low
10486-10816
Important
10486-10047
Important
10486-10048
Important
10486-10481
Important
10486-10482
Important
10486-10484
Low
10486-10051
Low
10486-10483
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10555-10378
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10951
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10952
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11497
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11498
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11563
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11568
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11569
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11570
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11571
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11453
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11454
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11583
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10729
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10735
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10852
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10853
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10816
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10047
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10048
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10481
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10482
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10484
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10051
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10483
4489891
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489891
4487025
10555-10378
Yes
Monthly Rollup
4489891
https://support.microsoft.com/help/4489891
10555-10378
4489873
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489873
4486474
10555-10378
10486-10047
10486-10048
10486-10481
10486-10482
10486-10051
10486-10483
Yes
IE Cumulative
4489873
https://support.microsoft.com/help/4489873
10555-10378
10486-10047
10486-10048
10486-10481
10486-10482
10486-10051
10486-10483
4489871
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489871
4487020
10486-10951
10486-10952
Yes
Security Update
4489868
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489868
4487017
10486-11497
10486-11498
10486-11563
Yes
Security Update
4489899
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489899
4487044
10486-11568
10486-11569
10486-11570
10486-11571
Yes
Security Update
4489899
https://support.microsoft.com/help/4489899
10486-11568
10486-11569
10486-11570
10486-11571
4489886
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489886
4486996
10486-11453
10486-11454
10486-11583
Yes
Security Update
4489872
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489872
4487018
10486-10729
10486-10735
Yes
Security Update
4489872
https://support.microsoft.com/help/4489872
10486-10729
10486-10735
4489882
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489882
4487026
10486-10852
10486-10853
10486-10816
Yes
Security Update
4489882
https://support.microsoft.com/help/4489882
10486-10852
10486-10853
10486-10816
4489878
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489878
4486563
10486-10047
10486-10048
10486-10051
Yes
Monthly Rollup
4489878
https://support.microsoft.com/help/4489878
10486-10047
10486-10048
10486-10051
4489881
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489881
4487000
10486-10481
10486-10482
10486-10484
10486-10483
Yes
Monthly Rollup
4489881
https://support.microsoft.com/help/4489881
10486-10481
10486-10482
10486-10484
10486-10483
Steven Hunter of MSRC Vulnerabilities & Mitigations
1.0
2019-03-12T07:00:00Z
<p>Information published.</p>
Windows ActiveX Remote Code Execution Vulnerability
<p>A remote code execution vulnerability exists in the way that the ActiveX Data objects (ADO) handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Internet Explorer and then convince a user to view the website. An attacker could also embed an ActiveX control marked "safe for initialization" in an application or Microsoft Office document that hosts the IE rendering engine. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p>
<p>The security update addresses the vulnerability by modifying how the ActiveX Data objects handles objects in memory.</p>
Microsoft Windows
CVE-2019-0784
10951
10952
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11466
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
9312
10287
9311
9318
9344
10050
10051
10049
10378
10379
10483
10543
Remote Code Execution
10951
Remote Code Execution
10952
Remote Code Execution
11497
Remote Code Execution
11498
Remote Code Execution
11499
Remote Code Execution
11563
Remote Code Execution
11568
Remote Code Execution
11569
Remote Code Execution
11570
Remote Code Execution
11571
Remote Code Execution
11572
Remote Code Execution
11453
Remote Code Execution
11454
Remote Code Execution
11583
Remote Code Execution
11466
Remote Code Execution
10729
Remote Code Execution
10735
Remote Code Execution
10852
Remote Code Execution
10853
Remote Code Execution
10816
Remote Code Execution
10855
Remote Code Execution
10047
Remote Code Execution
10048
Remote Code Execution
10481
Remote Code Execution
10482
Remote Code Execution
10484
Remote Code Execution
9312
Remote Code Execution
10287
Remote Code Execution
9311
Remote Code Execution
9318
Remote Code Execution
9344
Remote Code Execution
10050
Remote Code Execution
10051
Remote Code Execution
10049
Remote Code Execution
10378
Remote Code Execution
10379
Remote Code Execution
10483
Remote Code Execution
10543
Critical
10951
Critical
10952
Critical
11497
Critical
11498
Critical
11499
Critical
11563
Critical
11568
Critical
11569
Critical
11570
Critical
11571
Critical
11572
Critical
11453
Critical
11454
Critical
11583
Critical
11466
Critical
10729
Critical
10735
Critical
10852
Critical
10853
Critical
10816
Critical
10855
Critical
10047
Critical
10048
Critical
10481
Critical
10482
Critical
10484
Critical
9312
Critical
10287
Critical
9311
Critical
9318
Critical
9344
Critical
10050
Critical
10051
Critical
10049
Critical
10378
Critical
10379
Critical
10483
Critical
10543
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10951
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10952
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
11497
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
11498
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
11499
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
11563
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
11568
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
11569
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
11570
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
11571
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
11572
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
11453
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
11454
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
11583
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
11466
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10729
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10735
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10852
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10853
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10816
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10855
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10047
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10048
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10481
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10482
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10484
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
9312
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10287
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
9311
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
9318
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
9344
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10050
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10051
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10049
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10378
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10379
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10483
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10543
4489871
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489871
4487020
10951
10952
Yes
Security Update
4489868
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489868
4487017
11497
11498
11499
11563
Yes
Security Update
4489899
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489899
4487044
11568
11569
11570
11571
11572
Yes
Security Update
4489899
https://support.microsoft.com/help/4489899
11568
11569
11570
11571
11572
4489886
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489886
4486996
11453
11454
11583
11466
Yes
Security Update
4489872
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489872
4487018
10729
10735
Yes
Security Update
4489872
https://support.microsoft.com/help/4489872
10729
10735
4489882
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489882
4487026
10852
10853
10816
10855
Yes
Security Update
4489882
https://support.microsoft.com/help/4489882
10852
10853
10816
10855
4489878
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489878
4486563
10047
10048
10050
10051
10049
Yes
Monthly Rollup
4489878
https://support.microsoft.com/help/4489878
10047
10048
10050
10051
10049
4489885
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489885
10047
10048
10050
10051
10049
Yes
Security Only
4489885
https://support.microsoft.com/help/4489885
10047
10048
10050
10051
10049
4489881
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489881
4487000
10481
10482
10484
10483
10543
Yes
Monthly Rollup
4489881
https://support.microsoft.com/help/4489881
10481
10482
10484
10483
10543
4489883
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489883
10481
10482
10483
10543
Security Only
4489883
https://support.microsoft.com/help/4489883
10481
10482
10483
10543
4489880
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489880
4487023
9312
10287
9311
9318
9344
Yes
Monthly Rollup
4489876
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489876
4487019
9312
10287
9311
9318
9344
Yes
Security Only
4489891
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489891
4487025
10378
10379
Yes
Monthly Rollup
4489891
https://support.microsoft.com/help/4489891
10378
10379
4489884
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489884
10378
10379
Yes
Security Only
4489884
https://support.microsoft.com/help/4489884
10378
10379
Yuki Chen of <a href="http://www.360.com/">Qihoo 360 Vulcan Team</a>
Anonymous working with <a href="https://www.zerodayinitiative.com/">Trend Micro's Zero Day Initiative</a>
1.0
2019-03-12T07:00:00Z
<p>Information published.</p>
Win32k Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system.</p>
<p>The update addresses this vulnerability by correcting how Win32k handles objects in memory.</p>
Microsoft Graphics Component
CVE-2019-0797
10951
10952
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11466
10729
10735
10852
10853
10816
10855
10481
10482
10484
10378
10379
10483
10543
Elevation of Privilege
10951
Elevation of Privilege
10952
Elevation of Privilege
11497
Elevation of Privilege
11498
Elevation of Privilege
11499
Elevation of Privilege
11563
Elevation of Privilege
11568
Elevation of Privilege
11569
Elevation of Privilege
11570
Elevation of Privilege
11571
Elevation of Privilege
11572
Elevation of Privilege
11453
Elevation of Privilege
11454
Elevation of Privilege
11583
Elevation of Privilege
11466
Elevation of Privilege
10729
Elevation of Privilege
10735
Elevation of Privilege
10852
Elevation of Privilege
10853
Elevation of Privilege
10816
Elevation of Privilege
10855
Elevation of Privilege
10481
Elevation of Privilege
10482
Elevation of Privilege
10484
Elevation of Privilege
10378
Elevation of Privilege
10379
Elevation of Privilege
10483
Elevation of Privilege
10543
Important
10951
Important
10952
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11466
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10481
Important
10482
Important
10484
Important
10378
Important
10379
Important
10483
Important
10543
Publicly Disclosed:No;Exploited:Yes;Latest Software Release:Exploitation Unlikely;Older Software Release:Exploitation Detected;DOS:N/A
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10951
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10952
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11497
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11498
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11499
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11563
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11453
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11454
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11583
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11466
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10729
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10735
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10852
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10853
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10816
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10855
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10481
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10482
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10484
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10378
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10379
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10483
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10543
4489871
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489871
4487020
10951
10952
Yes
Security Update
4489868
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489868
4487017
11497
11498
11499
11563
Yes
Security Update
4489899
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489899
4487044
11568
11569
11570
11571
11572
Yes
Security Update
4489899
https://support.microsoft.com/help/4489899
11568
11569
11570
11571
11572
4489886
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489886
4486996
11453
11454
11583
11466
Yes
Security Update
4489872
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489872
4487018
10729
10735
Yes
Security Update
4489872
https://support.microsoft.com/help/4489872
10729
10735
4489882
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489882
4487026
10852
10853
10816
10855
Yes
Security Update
4489882
https://support.microsoft.com/help/4489882
10852
10853
10816
10855
4489881
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489881
4487000
10481
10482
10484
10483
10543
Yes
Monthly Rollup
4489881
https://support.microsoft.com/help/4489881
10481
10482
10484
10483
10543
4489883
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489883
10481
10482
10483
10543
Security Only
4489883
https://support.microsoft.com/help/4489883
10481
10482
10483
10543
4489891
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489891
4487025
10378
10379
Yes
Monthly Rollup
4489891
https://support.microsoft.com/help/4489891
10378
10379
4489884
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489884
10378
10379
Yes
Security Only
4489884
https://support.microsoft.com/help/4489884
10378
10379
(<a href="https://www.linkedin.com/in/vasiliy-berdnikov-4b07b624">Vasily Berdnikov</a>) of <a href="https://www.kaspersky.com/">Kaspersky Lab</a><br>
(<a href="https://twitter.com/oct0xor">Boris Larin</a>) of <a href="https://www.kaspersky.com/">Kaspersky Lab</a>
1.0
2019-03-12T07:00:00Z
<p>Information published.</p>
SHA-2 Code Sign Support Advisory
<p>Microsoft is announcing the release of SHA-2 code sign support for Windows 7 SP1, Windows Server 2008 R2 SP1 and Windows Server 2008 SP2.</p>
<p>Please see <a href="https://support.microsoft.com/en-us/help/4472027">2019 SHA-2 Code Signing Support requirement for Windows and WSUS</a> for more information.</p>
Microsoft Windows
ADV190009
10047
10048
9312
10287
9311
9318
9344
10050
10051
10049
Defense in Depth
10047
Defense in Depth
10048
Defense in Depth
9312
Defense in Depth
10287
Defense in Depth
9311
Defense in Depth
9318
Defense in Depth
9344
Defense in Depth
10050
Defense in Depth
10051
Defense in Depth
10049
10047
10048
9312
10287
9311
9318
9344
10050
10051
10049
Publicly Disclosed:No;Exploited:No;DOS:N/A
4474419
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4474419
3212642
10047
10048
9312
10287
9311
9318
9344
10050
10051
10049
Yes
Security Update
1.0
2019-03-12T07:00:00Z
<p>Information published.</p>
2.0
2019-05-14T07:00:00Z
<p>Microsoft is announcing the availability of the support SHA-2 code sign support for Windows Server 2008 Service Pack 2.</p>
3.0
2019-06-11T07:00:00Z
<p>To correct an issue with the SHA-2 support for MSI files, Microsoft is re-releasing KB4474419 for Windows Server 2008 Service Pack 2. Microsoft recommends that customers running Windows Server 2008 Service Pack 2 reinstall update 4474419.</p>
4.0
2019-08-13T07:00:00Z
<p>To address a known issue with system restarts if the Itanium-based boot manager (bootmgfw.efi) is not updated on systems running Windows 7 Service Pack 1 or Windows Server 2008 R2 Service Pack 1, Microsoft is re-releasing KB4474419. Microsoft recommends that customers running these versions of Windows on Itanium-based systems reinstall update 4474419. IMPORTANT: In the case of systems running Windows Server 2008 R2 for Itanium-based systems, to prevent further restart issues customers MUST install update 4474419 before installing any security updates released on or after August 13, 2019. For more information about the known issues see <a href="https://support.microsoft.com/en-us/help/4474419">Microsoft Knowledge Base Article 4474419</a>.</p>
5.0
2019-09-10T07:00:00Z
<p>To address a known issue on systems running Windows 7 Service Pack 1, Windows Server 2008 R2 Service Pack 1, and Windows Server 2008 Service Pack 2, Microsoft is re-releasing KB4474419. Microsoft recommends that customers running these versions of Windows reinstall update 4474419.</p>
Skype for Business and Lync Spoofing Vulnerability
<p>A spoofing vulnerability exists when a Lync Server or Skype for Business Server does not properly sanitize a specially crafted request. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected server. The attacker who successfully exploited this vulnerability could then perform cross-site scripting attacks on affected systems and run script in the security context of the current user.</p>
<p>For the vulnerability to be exploited, a user must click a specially crafted URL that takes the user to a targeted Lync or Skype for Business site.</p>
<p>In an email attack scenario, an attacker could exploit the vulnerability by sending an email message containing the specially crafted URL to the user of the targeted Lync or Skype for Business site and convincing the user to click the specially crafted URL.</p>
<p>The security update addresses the vulnerability by helping to ensure that Lync Server and Skype for Business Server properly sanitize web requests.</p>
Skype for Business
CVE-2019-0798
11632
11633
Spoofing
11632
Spoofing
11633
Important
11632
Important
11633
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
3061064
https://www.microsoft.com/downloads/details.aspx?familyid=0d08ed37-106a-456f-a5c6-61df22588bec
11632
Maybe
Security Update
2809243
https://www.microsoft.com/downloads/details.aspx?familyid=dac7c777-fe8a-45a2-9a82-07a2e15c298f
11633
Maybe
Security Update
<a href="https://batr.am">Malte Batram</a>
1.0
2019-03-12T07:00:00Z
<p>Information published.</p>
Best Practices Regarding Sharing of a Single User Account Across Multiple Users
<p>Microsoft strongly recommends customers avoid the use of a 'common' or 'shared' Windows logon account. A single user account should never be shared amongst different users. This is especially true when users are logging into the same physical machine. Customers who have solutions designed this way are encouraged to engage their solution vendors for assistance in configuring their product to support independent user accounts.</p>
<p>Microsoft considers the practice of sharing the same user account with multiple users a significant security risk. There is no security boundary between sessions using the same user account on the same Windows client or server.</p>
<p>For more information on User and Session boundaries, please see the <a href="https://aka.ms/windowscriteria">Security Servicing Criteria for Windows</a>.</p>
<h1>FAQ</h1>
<p><strong>What is a session?</strong></p>
<p>A session consists of all the processes and other system objects which represent a single user's logon session.  These objects include all windows, desktops and windows stations.</p>
<p><strong>How can Windows be configured to allow a single user to have multiple sessions?</strong></p>
<p>This can be achieved by either First-party or Third-party applications. One example, applicable to some versions of Windows Server, is by enabling the group policy setting under:</p>
<p><code>Computer Configuration\Administrative Templates\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Connections</code></p>
<p>The setting is "Restrict Remote Desktop Services users to a single Remote Desktop Services session".
If this policy is disabled, then users are allowed to make multiple simultaneous remote connections using the same user account to an RDS server via Remote Desktop Services.</p>
<p><strong>Is this information related to a security vulnerability?</strong></p>
<p>No, this is guidance on best practices in your network environment. There are no security updates planned for this issue.</p>
Microsoft Windows
ADV190010
9237
9237
9237
Publicly Disclosed:No;Exploited:No;DOS:N/A
1.0
2019-03-12T07:00:00Z
<p>Information published.</p>
Win32k Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system.</p>
<p>The update addresses this vulnerability by correcting how Win32k handles objects in memory.</p>
Microsoft Graphics Component
CVE-2019-0808
10047
10048
9312
10287
9311
9318
9344
10050
10051
10049
Elevation of Privilege
10047
Elevation of Privilege
10048
Elevation of Privilege
9312
Elevation of Privilege
10287
Elevation of Privilege
9311
Elevation of Privilege
9318
Elevation of Privilege
9344
Elevation of Privilege
10050
Elevation of Privilege
10051
Elevation of Privilege
10049
Important
10047
Important
10048
Important
9312
Important
10287
Important
9311
Important
9318
Important
9344
Important
10050
Important
10051
Important
10049
Publicly Disclosed:Yes;Exploited:Yes;Latest Software Release:N/A;Older Software Release:Exploitation Detected;DOS:N/A
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10047
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10048
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9312
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10287
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9311
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9318
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9344
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10050
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10051
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10049
4489878
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489878
4486563
10047
10048
10050
10051
10049
Yes
Monthly Rollup
4489878
https://support.microsoft.com/help/4489878
10047
10048
10050
10051
10049
4489885
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489885
10047
10048
10050
10051
10049
Yes
Security Only
4489885
https://support.microsoft.com/help/4489885
10047
10048
10050
10051
10049
4489880
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489880
4487023
9312
10287
9311
9318
9344
Yes
Monthly Rollup
4489876
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489876
4487019
9312
10287
9311
9318
9344
Yes
Security Only
Clément Lecigne of Google’s Threat Analysis Group
1.0
2019-03-12T07:00:00Z
<p>Information published.</p>
1.1
2019-03-13T07:00:00Z
<p>Updated the Publicly Disclosed information.</p>
Azure SSH Keypairs Security Feature Bypass Vulnerability
<p>A security feature bypass exists in Azure SSH Keypairs, due to a change in the provisioning logic for some Linux images that use cloud-init. Extraneous Microsoft service public keys can be unexpectedly added to the VM authorized keys file in the limited scenarios described in <a href="https://support.microsoft.com/en-us/help/4491476/extraneous-ssh-public-keys-added-to-authorized-keys-file-on-linux-vm">4491476</a>. For more information on how to know if you are affected and how to protect yourself, please see <a href="https://support.microsoft.com/en-us/help/4491476/extraneous-ssh-public-keys-added-to-authorized-keys-file-on-linux-vm">4491476</a>.</p>
<p>This update addresses this vulnerability by preventing these keys from being added.</p>
Azure
CVE-2019-0816
11631
Security Feature Bypass
11631
Moderate
11631
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
4491476
11631
Yes
Security Update
1.0
2019-03-12T07:00:00Z
<p>Information published.</p>
Chakra Scripting Engine Memory Corruption Vulnerability
<p>A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based). The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft Edge (HTML-based) and then convince a user to view the website. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p>
<p>The security update addresses the vulnerability by modifying how the Chakra scripting engine handles objects in memory.</p>
Microsoft Scripting Engine
CVE-2019-0592
11447
10724-11568
10724-11569
10724-11570
10724-11571
Elevation of Privilege
11447
Elevation of Privilege
10724-11568
Elevation of Privilege
10724-11569
Elevation of Privilege
10724-11570
Elevation of Privilege
10724-11571
Critical
11447
Critical
10724-11568
Critical
10724-11569
Critical
10724-11570
Moderate
10724-11571
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A;DOS:N/A
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11568
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11569
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11570
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-11571
Release Notes
https://github.com/Microsoft/ChakraCore/releases/tag/v1.11.7
11447
Maybe
Security Update
4489899
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489899
4487044
10724-11568
10724-11569
10724-11570
10724-11571
Yes
Security Update
4489899
https://support.microsoft.com/help/4489899
10724-11568
10724-11569
10724-11570
10724-11571
Zhenhuan Li(@zenhumany) of <a href="http://www.tencent.com/">Tencent Zhanlu Lab</a>
MoonLiang of <a href="https://xlab.tencent.com/">Tencent Security Xuanwu Lab</a>
Yuki Chen of <a href="http://www.360.com/">Qihoo 360 Vulcan Team</a>
1.0
2019-03-12T07:00:00Z
<p>Information published.</p>
Windows Deployment Services TFTP Server Remote Code Execution Vulnerability
<p>A remote code execution vulnerability exists in the way that Windows Deployment Services TFTP Server handles objects in memory.</p>
<p>An attacker who successfully exploited the vulnerability could execute arbitrary code with elevated permissions on a target system.</p>
<p>To exploit the vulnerability, an attacker could create a specially crafted request, causing Windows to execute arbitrary code with elevated permissions.</p>
<p>The security update addresses the vulnerability by correcting how Windows Deployment Services TFTP Server handles objects in memory.</p>
Microsoft Windows
CVE-2019-0603
11497
11498
11499
11563
11568
11569
11570
11571
11572
10852
10853
10816
10855
10047
10048
10481
10482
10484
9312
10287
9311
9318
9344
10050
10051
10049
10378
10379
10483
10543
Remote Code Execution
11497
Remote Code Execution
11498
Remote Code Execution
11499
Remote Code Execution
11563
Remote Code Execution
11568
Remote Code Execution
11569
Remote Code Execution
11570
Remote Code Execution
11571
Remote Code Execution
11572
Remote Code Execution
10852
Remote Code Execution
10853
Remote Code Execution
10816
Remote Code Execution
10855
Remote Code Execution
10047
Remote Code Execution
10048
Remote Code Execution
10481
Remote Code Execution
10482
Remote Code Execution
10484
Remote Code Execution
9312
Remote Code Execution
10287
Remote Code Execution
9311
Remote Code Execution
9318
Remote Code Execution
9344
Remote Code Execution
10050
Remote Code Execution
10051
Remote Code Execution
10049
Remote Code Execution
10378
Remote Code Execution
10379
Remote Code Execution
10483
Remote Code Execution
10543
Critical
11497
Critical
11498
Critical
11499
Critical
11563
Critical
11568
Critical
11569
Critical
11570
Critical
11571
Critical
11572
Critical
10852
Critical
10853
Critical
10816
Critical
10855
Critical
10047
Critical
10048
Critical
10481
Critical
10482
Critical
10484
Critical
9312
Critical
10287
Critical
9311
Critical
9318
Critical
9344
Critical
10050
Critical
10051
Critical
10049
Critical
10378
Critical
10379
Critical
10483
Critical
10543
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11497
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11498
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11499
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11563
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10852
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10853
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10816
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10855
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10047
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10048
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10481
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10482
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10484
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9312
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10287
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9311
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9318
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9344
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10050
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10051
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10049
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10378
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10379
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10483
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10543
4489868
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489868
4487017
11497
11498
11499
11563
Yes
Security Update
4489899
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489899
4487044
11568
11569
11570
11571
11572
Yes
Security Update
4489899
https://support.microsoft.com/help/4489899
11568
11569
11570
11571
11572
4489882
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489882
4487026
10852
10853
10816
10855
Yes
Security Update
4489882
https://support.microsoft.com/help/4489882
10852
10853
10816
10855
4489878
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489878
4486563
10047
10048
10050
10051
10049
Yes
Monthly Rollup
4489878
https://support.microsoft.com/help/4489878
10047
10048
10050
10051
10049
4489885
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489885
10047
10048
10050
10051
10049
Yes
Security Only
4489885
https://support.microsoft.com/help/4489885
10047
10048
10050
10051
10049
4489881
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489881
4487000
10481
10482
10484
10483
10543
Yes
Monthly Rollup
4489881
https://support.microsoft.com/help/4489881
10481
10482
10484
10483
10543
4489883
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489883
10481
10482
10483
10543
Security Only
4489883
https://support.microsoft.com/help/4489883
10481
10482
10483
10543
4489880
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489880
4487023
9312
10287
9311
9318
9344
Yes
Monthly Rollup
4489876
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489876
4487019
9312
10287
9311
9318
9344
Yes
Security Only
4489891
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489891
4487025
10378
10379
Yes
Monthly Rollup
4489891
https://support.microsoft.com/help/4489891
10378
10379
4489884
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489884
10378
10379
Yes
Security Only
4489884
https://support.microsoft.com/help/4489884
10378
10379
John Simpson working with <a href="http://www.zerodayinitiative.com/">Trend Micro's Zero Day Initiative</a>
1.0
2019-03-12T07:00:00Z
<p>Information published.</p>
Windows GDI Information Disclosure Vulnerability
<p>An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.</p>
<p>There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document, or by convincing a user to visit an untrusted webpage.</p>
<p>The security update addresses the vulnerability by correcting how the Windows GDI component handles objects in memory.</p>
<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>
<p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is uninitialized memory.</p>
Microsoft Graphics Component
CVE-2019-0614
10951
10952
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11466
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
9312
10287
9311
9318
9344
10050
10051
10049
10378
10379
10483
10543
Information Disclosure
10951
Information Disclosure
10952
Information Disclosure
11497
Information Disclosure
11498
Information Disclosure
11499
Information Disclosure
11563
Information Disclosure
11568
Information Disclosure
11569
Information Disclosure
11570
Information Disclosure
11571
Information Disclosure
11572
Information Disclosure
11453
Information Disclosure
11454
Information Disclosure
11583
Information Disclosure
11466
Information Disclosure
10729
Information Disclosure
10735
Information Disclosure
10852
Information Disclosure
10853
Information Disclosure
10816
Information Disclosure
10855
Information Disclosure
10047
Information Disclosure
10048
Information Disclosure
10481
Information Disclosure
10482
Information Disclosure
10484
Information Disclosure
9312
Information Disclosure
10287
Information Disclosure
9311
Information Disclosure
9318
Information Disclosure
9344
Information Disclosure
10050
Information Disclosure
10051
Information Disclosure
10049
Information Disclosure
10378
Information Disclosure
10379
Information Disclosure
10483
Information Disclosure
10543
Important
10951
Important
10952
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11466
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9311
Important
9318
Important
9344
Important
10050
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10951
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10952
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11497
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11498
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11499
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11563
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11568
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11569
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11570
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11571
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11572
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11453
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11454
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11583
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11466
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10729
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10735
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10852
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10853
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10816
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10855
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10047
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10048
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10481
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10482
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10484
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9312
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10287
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9311
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9318
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9344
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10050
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10051
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10049
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10378
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10379
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10483
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10543
4489871
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489871
4487020
10951
10952
Yes
Security Update
4489868
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489868
4487017
11497
11498
11499
11563
Yes
Security Update
4489899
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489899
4487044
11568
11569
11570
11571
11572
Yes
Security Update
4489899
https://support.microsoft.com/help/4489899
11568
11569
11570
11571
11572
4489886
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489886
4486996
11453
11454
11583
11466
Yes
Security Update
4489872
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489872
4487018
10729
10735
Yes
Security Update
4489872
https://support.microsoft.com/help/4489872
10729
10735
4489882
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489882
4487026
10852
10853
10816
10855
Yes
Security Update
4489882
https://support.microsoft.com/help/4489882
10852
10853
10816
10855
4489878
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489878
4486563
10047
10048
10050
10051
10049
Yes
Monthly Rollup
4489878
https://support.microsoft.com/help/4489878
10047
10048
10050
10051
10049
4489885
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489885
10047
10048
10050
10051
10049
Yes
Security Only
4489885
https://support.microsoft.com/help/4489885
10047
10048
10050
10051
10049
4489881
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489881
4487000
10481
10482
10484
10483
10543
Yes
Monthly Rollup
4489881
https://support.microsoft.com/help/4489881
10481
10482
10484
10483
10543
4489883
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489883
10481
10482
10483
10543
Security Only
4489883
https://support.microsoft.com/help/4489883
10481
10482
10483
10543
4489880
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489880
4487023
9312
10287
9311
9318
9344
Yes
Monthly Rollup
4489876
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489876
4487019
9312
10287
9311
9318
9344
Yes
Security Only
4489891
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489891
4487025
10378
10379
Yes
Monthly Rollup
4489891
https://support.microsoft.com/help/4489891
10378
10379
4489884
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489884
10378
10379
Yes
Security Only
4489884
https://support.microsoft.com/help/4489884
10378
10379
riusksk of VulWar Corp working with <a href="https://www.zerodayinitiative.com/">Trend Micro's Zero Day Initiative</a>
1.0
2019-03-12T07:00:00Z
<p>Information published.</p>
Jet Database Engine Remote Code Execution Vulnerability
<p>A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system.</p>
<p>An attacker could exploit this vulnerability by enticing a victim to open a specially crafted file.</p>
<p>The update addresses the vulnerability by correcting the way the Windows Jet Database Engine handles objects in memory.</p>
Microsoft JET Database Engine
CVE-2019-0617
10951
10952
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11466
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
9312
10287
9311
9318
9344
10050
10051
10049
10378
10379
10483
10543
Remote Code Execution
10951
Remote Code Execution
10952
Remote Code Execution
11497
Remote Code Execution
11498
Remote Code Execution
11499
Remote Code Execution
11563
Remote Code Execution
11568
Remote Code Execution
11569
Remote Code Execution
11570
Remote Code Execution
11571
Remote Code Execution
11572
Remote Code Execution
11453
Remote Code Execution
11454
Remote Code Execution
11583
Remote Code Execution
11466
Remote Code Execution
10729
Remote Code Execution
10735
Remote Code Execution
10852
Remote Code Execution
10853
Remote Code Execution
10816
Remote Code Execution
10855
Remote Code Execution
10047
Remote Code Execution
10048
Remote Code Execution
10481
Remote Code Execution
10482
Remote Code Execution
10484
Remote Code Execution
9312
Remote Code Execution
10287
Remote Code Execution
9311
Remote Code Execution
9318
Remote Code Execution
9344
Remote Code Execution
10050
Remote Code Execution
10051
Remote Code Execution
10049
Remote Code Execution
10378
Remote Code Execution
10379
Remote Code Execution
10483
Remote Code Execution
10543
Important
10951
Important
10952
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11466
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9311
Important
9318
Important
9344
Important
10050
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10951
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10952
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11497
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11498
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11499
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11563
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11453
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11454
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11583
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11466
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10729
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10735
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10852
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10853
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10816
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10855
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10047
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10048
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10481
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10482
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10484
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9312
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10287
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9311
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9318
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9344
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10050
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10051
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10049
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10378
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10379
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10483
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10543
4489871
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489871
4487020
10951
10952
Yes
Security Update
4489868
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489868
4487017
11497
11498
11499
11563
Yes
Security Update
4489899
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489899
4487044
11568
11569
11570
11571
11572
Yes
Security Update
4489899
https://support.microsoft.com/help/4489899
11568
11569
11570
11571
11572
4489886
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489886
4486996
11453
11454
11583
11466
Yes
Security Update
4489872
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489872
4487018
10729
10735
Yes
Security Update
4489872
https://support.microsoft.com/help/4489872
10729
10735
4489882
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489882
4487026
10852
10853
10816
10855
Yes
Security Update
4489882
https://support.microsoft.com/help/4489882
10852
10853
10816
10855
4489878
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489878
4486563
10047
10048
10050
10051
10049
Yes
Monthly Rollup
4489878
https://support.microsoft.com/help/4489878
10047
10048
10050
10051
10049
4489885
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489885
10047
10048
10050
10051
10049
Yes
Security Only
4489885
https://support.microsoft.com/help/4489885
10047
10048
10050
10051
10049
4489881
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489881
4487000
10481
10482
10484
10483
10543
Yes
Monthly Rollup
4489881
https://support.microsoft.com/help/4489881
10481
10482
10484
10483
10543
4489883
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489883
10481
10482
10483
10543
Security Only
4489883
https://support.microsoft.com/help/4489883
10481
10482
10483
10543
4489880
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489880
4487023
9312
10287
9311
9318
9344
Yes
Monthly Rollup
4489876
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489876
4487019
9312
10287
9311
9318
9344
Yes
Security Only
4489891
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489891
4487025
10378
10379
Yes
Monthly Rollup
4489891
https://support.microsoft.com/help/4489891
10378
10379
4489884
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489884
10378
10379
Yes
Security Only
4489884
https://support.microsoft.com/help/4489884
10378
10379
rgod of 9sg Security Team - rgod@9sgsec.com working with <a href="https://www.zerodayinitiative.com/">Trend Micro's Zero Day Initiative</a>
1.0
2019-03-12T07:00:00Z
<p>Information published.</p>
Windows VBScript Engine Remote Code Execution Vulnerability
<p>A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Internet Explorer and then convince a user to view the website. An attacker could also embed an ActiveX control marked "safe for initialization" in an application or Microsoft Office document that hosts the IE rendering engine. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p>
<p>The security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.</p>
Microsoft Scripting Engine
CVE-2019-0665
10555-10378
10486-10951
10486-10952
10486-11497
10486-11498
10486-11563
10486-11568
10486-11569
10486-11570
10486-11571
10486-11453
10486-11454
10486-11583
10486-10729
10486-10735
10486-10852
10486-10853
10486-10816
10486-10047
10486-10048
10486-10481
10486-10482
10486-10484
10486-10051
10486-10483
Remote Code Execution
10555-10378
Remote Code Execution
10486-10951
Remote Code Execution
10486-10952
Remote Code Execution
10486-11497
Remote Code Execution
10486-11498
Remote Code Execution
10486-11563
Remote Code Execution
10486-11568
Remote Code Execution
10486-11569
Remote Code Execution
10486-11570
Remote Code Execution
10486-11571
Remote Code Execution
10486-11453
Remote Code Execution
10486-11454
Remote Code Execution
10486-11583
Remote Code Execution
10486-10729
Remote Code Execution
10486-10735
Remote Code Execution
10486-10852
Remote Code Execution
10486-10853
Remote Code Execution
10486-10816
Remote Code Execution
10486-10047
Remote Code Execution
10486-10048
Remote Code Execution
10486-10481
Remote Code Execution
10486-10482
Remote Code Execution
10486-10484
Remote Code Execution
10486-10051
Remote Code Execution
10486-10483
Low
10555-10378
Important
10486-10951
Important
10486-10952
Important
10486-11497
Important
10486-11498
Important
10486-11563
Important
10486-11568
Important
10486-11569
Important
10486-11570
Important
10486-11571
Important
10486-11453
Important
10486-11454
Important
10486-11583
Important
10486-10729
Important
10486-10735
Important
10486-10852
Important
10486-10853
Low
10486-10816
Important
10486-10047
Important
10486-10048
Important
10486-10481
Important
10486-10482
Important
10486-10484
Low
10486-10051
Low
10486-10483
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11568
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11569
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11570
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11571
4489891
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489891
4487025
10555-10378
Yes
Monthly Rollup
4489891
https://support.microsoft.com/help/4489891
10555-10378
4489873
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489873
4486474
10555-10378
10486-10047
10486-10048
10486-10481
10486-10482
10486-10051
10486-10483
Yes
IE Cumulative
4489873
https://support.microsoft.com/help/4489873
10555-10378
10486-10047
10486-10048
10486-10481
10486-10482
10486-10051
10486-10483
4489871
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489871
4487020
10486-10951
10486-10952
Yes
Security Update
4489868
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489868
4487017
10486-11497
10486-11498
10486-11563
Yes
Security Update
4489899
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489899
4487044
10486-11568
10486-11569
10486-11570
10486-11571
Yes
Security Update
4489899
https://support.microsoft.com/help/4489899
10486-11568
10486-11569
10486-11570
10486-11571
4489886
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489886
4486996
10486-11453
10486-11454
10486-11583
Yes
Security Update
4489872
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489872
4487018
10486-10729
10486-10735
Yes
Security Update
4489872
https://support.microsoft.com/help/4489872
10486-10729
10486-10735
4489882
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489882
4487026
10486-10852
10486-10853
10486-10816
Yes
Security Update
4489882
https://support.microsoft.com/help/4489882
10486-10852
10486-10853
10486-10816
4489878
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489878
4486563
10486-10047
10486-10048
10486-10051
Yes
Monthly Rollup
4489878
https://support.microsoft.com/help/4489878
10486-10047
10486-10048
10486-10051
4489881
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489881
4487000
10486-10481
10486-10482
10486-10484
10486-10483
Yes
Monthly Rollup
4489881
https://support.microsoft.com/help/4489881
10486-10481
10486-10482
10486-10484
10486-10483
Yuki Chen of <a href="http://www.360.com/">Qihoo 360 Vulcan Team</a>
working with <a href="http://www.zerodayinitiative.com/">Trend Micro's Zero Day Initiative</a>
Simon Zuckerbraun working with <a href="http://www.zerodayinitiative.com/">Trend Micro's Zero Day Initiative</a>
1.0
2019-03-12T07:00:00Z
<p>Information published.</p>
Windows VBScript Engine Remote Code Execution Vulnerability
<p>A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Internet Explorer and then convince a user to view the website. An attacker could also embed an ActiveX control marked "safe for initialization" in an application or Microsoft Office document that hosts the IE rendering engine. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p>
<p>The security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.</p>
Microsoft Scripting Engine
CVE-2019-0666
10555-10378
10336-9312
10336-9318
10486-10951
10486-10952
10486-11497
10486-11498
10486-11563
10486-11568
10486-11569
10486-11570
10486-11571
10486-11453
10486-11454
10486-11583
10486-10729
10486-10735
10486-10852
10486-10853
10486-10816
10486-10047
10486-10048
10486-10481
10486-10482
10486-10484
10486-10051
10486-10483
Remote Code Execution
10555-10378
Remote Code Execution
10336-9312
Remote Code Execution
10336-9318
Remote Code Execution
10486-10951
Remote Code Execution
10486-10952
Remote Code Execution
10486-11497
Remote Code Execution
10486-11498
Remote Code Execution
10486-11563
Remote Code Execution
10486-11568
Remote Code Execution
10486-11569
Remote Code Execution
10486-11570
Remote Code Execution
10486-11571
Remote Code Execution
10486-11453
Remote Code Execution
10486-11454
Remote Code Execution
10486-11583
Remote Code Execution
10486-10729
Remote Code Execution
10486-10735
Remote Code Execution
10486-10852
Remote Code Execution
10486-10853
Remote Code Execution
10486-10816
Remote Code Execution
10486-10047
Remote Code Execution
10486-10048
Remote Code Execution
10486-10481
Remote Code Execution
10486-10482
Remote Code Execution
10486-10484
Remote Code Execution
10486-10051
Remote Code Execution
10486-10483
Moderate
10555-10378
Moderate
10336-9312
Moderate
10336-9318
Critical
10486-10951
Critical
10486-10952
Critical
10486-11497
Critical
10486-11498
Critical
10486-11563
Critical
10486-11568
Critical
10486-11569
Critical
10486-11570
Moderate
10486-11571
Critical
10486-11453
Critical
10486-11454
Critical
10486-11583
Critical
10486-10729
Critical
10486-10735
Critical
10486-10852
Critical
10486-10853
Moderate
10486-10816
Critical
10486-10047
Critical
10486-10048
Critical
10486-10481
Critical
10486-10482
Critical
10486-10484
Moderate
10486-10051
Moderate
10486-10483
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11568
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11569
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11570
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11571
4489891
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489891
4487025
10555-10378
Yes
Monthly Rollup
4489891
https://support.microsoft.com/help/4489891
10555-10378
4489873
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489873
4486474
10555-10378
10336-9312
10336-9318
10486-10047
10486-10048
10486-10481
10486-10482
10486-10051
10486-10483
Yes
IE Cumulative
4489873
https://support.microsoft.com/help/4489873
10555-10378
10336-9312
10336-9318
10486-10047
10486-10048
10486-10481
10486-10482
10486-10051
10486-10483
4489880
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489880
4487023
10336-9312
10336-9318
Yes
Monthly Rollup
4489871
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489871
4487020
10486-10951
10486-10952
Yes
Security Update
4489868
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489868
4487017
10486-11497
10486-11498
10486-11563
Yes
Security Update
4489899
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489899
4487044
10486-11568
10486-11569
10486-11570
10486-11571
Yes
Security Update
4489899
https://support.microsoft.com/help/4489899
10486-11568
10486-11569
10486-11570
10486-11571
4489886
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489886
4486996
10486-11453
10486-11454
10486-11583
Yes
Security Update
4489872
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489872
4487018
10486-10729
10486-10735
Yes
Security Update
4489872
https://support.microsoft.com/help/4489872
10486-10729
10486-10735
4489882
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489882
4487026
10486-10852
10486-10853
10486-10816
Yes
Security Update
4489882
https://support.microsoft.com/help/4489882
10486-10852
10486-10853
10486-10816
4489878
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489878
4486563
10486-10047
10486-10048
10486-10051
Yes
Monthly Rollup
4489878
https://support.microsoft.com/help/4489878
10486-10047
10486-10048
10486-10051
4489881
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489881
4487000
10486-10481
10486-10482
10486-10484
10486-10483
Yes
Monthly Rollup
4489881
https://support.microsoft.com/help/4489881
10486-10481
10486-10482
10486-10484
10486-10483
Yuki Chen of <a href="http://www.360.com/">Qihoo 360 Vulcan Team</a>
1.0
2019-03-12T07:00:00Z
<p>Information published.</p>
Windows VBScript Engine Remote Code Execution Vulnerability
<p>A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Internet Explorer and then convince a user to view the website. An attacker could also embed an ActiveX control marked "safe for initialization" in an application or Microsoft Office document that hosts the IE rendering engine. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p>
<p>The security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.</p>
Microsoft Scripting Engine
CVE-2019-0667
10555-10378
10336-9312
10336-9318
10486-10951
10486-10952
10486-11497
10486-11498
10486-11563
10486-11568
10486-11569
10486-11570
10486-11571
10486-11453
10486-11454
10486-11583
10486-10729
10486-10735
10486-10852
10486-10853
10486-10816
10486-10047
10486-10048
10486-10481
10486-10482
10486-10484
10486-10051
10486-10483
Remote Code Execution
10555-10378
Remote Code Execution
10336-9312
Remote Code Execution
10336-9318
Remote Code Execution
10486-10951
Remote Code Execution
10486-10952
Remote Code Execution
10486-11497
Remote Code Execution
10486-11498
Remote Code Execution
10486-11563
Remote Code Execution
10486-11568
Remote Code Execution
10486-11569
Remote Code Execution
10486-11570
Remote Code Execution
10486-11571
Remote Code Execution
10486-11453
Remote Code Execution
10486-11454
Remote Code Execution
10486-11583
Remote Code Execution
10486-10729
Remote Code Execution
10486-10735
Remote Code Execution
10486-10852
Remote Code Execution
10486-10853
Remote Code Execution
10486-10816
Remote Code Execution
10486-10047
Remote Code Execution
10486-10048
Remote Code Execution
10486-10481
Remote Code Execution
10486-10482
Remote Code Execution
10486-10484
Remote Code Execution
10486-10051
Remote Code Execution
10486-10483
Moderate
10555-10378
Moderate
10336-9312
Moderate
10336-9318
Critical
10486-10951
Critical
10486-10952
Critical
10486-11497
Critical
10486-11498
Critical
10486-11563
Critical
10486-11568
Critical
10486-11569
Critical
10486-11570
Critical
10486-11571
Critical
10486-11453
Critical
10486-11454
Critical
10486-11583
Critical
10486-10729
Critical
10486-10735
Critical
10486-10852
Critical
10486-10853
Moderate
10486-10816
Critical
10486-10047
Critical
10486-10048
Critical
10486-10481
Critical
10486-10482
Critical
10486-10484
Moderate
10486-10051
Moderate
10486-10483
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11568
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11569
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11570
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11571
4489891
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489891
4487025
10555-10378
Yes
Monthly Rollup
4489891
https://support.microsoft.com/help/4489891
10555-10378
4489873
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489873
4486474
10555-10378
10336-9312
10336-9318
10486-10047
10486-10048
10486-10481
10486-10482
10486-10051
10486-10483
Yes
IE Cumulative
4489873
https://support.microsoft.com/help/4489873
10555-10378
10336-9312
10336-9318
10486-10047
10486-10048
10486-10481
10486-10482
10486-10051
10486-10483
4489880
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489880
4487023
10336-9312
10336-9318
Yes
Monthly Rollup
4489871
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489871
4487020
10486-10951
10486-10952
Yes
Security Update
4489868
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489868
4487017
10486-11497
10486-11498
10486-11563
Yes
Security Update
4489899
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489899
4487044
10486-11568
10486-11569
10486-11570
10486-11571
Yes
Security Update
4489899
https://support.microsoft.com/help/4489899
10486-11568
10486-11569
10486-11570
10486-11571
4489886
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489886
4486996
10486-11453
10486-11454
10486-11583
Yes
Security Update
4489872
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489872
4487018
10486-10729
10486-10735
Yes
Security Update
4489872
https://support.microsoft.com/help/4489872
10486-10729
10486-10735
4489882
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489882
4487026
10486-10852
10486-10853
10486-10816
Yes
Security Update
4489882
https://support.microsoft.com/help/4489882
10486-10852
10486-10853
10486-10816
4489878
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489878
4486563
10486-10047
10486-10048
10486-10051
Yes
Monthly Rollup
4489878
https://support.microsoft.com/help/4489878
10486-10047
10486-10048
10486-10051
4489881
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489881
4487000
10486-10481
10486-10482
10486-10484
10486-10483
Yes
Monthly Rollup
4489881
https://support.microsoft.com/help/4489881
10486-10481
10486-10482
10486-10484
10486-10483
Lei Cao
Anonymous working with <a href="https://www.zerodayinitiative.com/">Trend Micro's Zero Day Initiative</a>
Ivan Fratric of <a href="https://www.google.com/">Google Project Zero</a>
ysuper
Yuki Chen of <a href="http://www.360.com/">Qihoo 360 Vulcan Team</a>
Keqi Hu and zhangjie from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd
1.0
2019-03-12T07:00:00Z
<p>Information published.</p>
Scripting Engine Memory Corruption Vulnerability
<p>A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Internet Explorer and then convince a user to view the website. An attacker could also embed an ActiveX control marked "safe for initialization" in an application or Microsoft Office document that hosts the IE rendering engine. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p>
<p>The security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.</p>
Microsoft Scripting Engine
CVE-2019-0680
10486-10951
10486-10952
10486-11497
10486-11498
10486-11563
10486-11568
10486-11569
10486-11570
10486-11571
10486-11453
10486-11454
10486-11583
10486-10729
10486-10735
10486-10852
10486-10853
10486-10816
10486-10047
10486-10048
10486-10481
10486-10482
10486-10484
10486-10051
10486-10483
Remote Code Execution
10486-10951
Remote Code Execution
10486-10952
Remote Code Execution
10486-11497
Remote Code Execution
10486-11498
Remote Code Execution
10486-11563
Remote Code Execution
10486-11568
Remote Code Execution
10486-11569
Remote Code Execution
10486-11570
Remote Code Execution
10486-11571
Remote Code Execution
10486-11453
Remote Code Execution
10486-11454
Remote Code Execution
10486-11583
Remote Code Execution
10486-10729
Remote Code Execution
10486-10735
Remote Code Execution
10486-10852
Remote Code Execution
10486-10853
Remote Code Execution
10486-10816
Remote Code Execution
10486-10047
Remote Code Execution
10486-10048
Remote Code Execution
10486-10481
Remote Code Execution
10486-10482
Remote Code Execution
10486-10484
Remote Code Execution
10486-10051
Remote Code Execution
10486-10483
Critical
10486-10951
Critical
10486-10952
Critical
10486-11497
Critical
10486-11498
Critical
10486-11563
Critical
10486-11568
Critical
10486-11569
Critical
10486-11570
Moderate
10486-11571
Critical
10486-11453
Critical
10486-11454
Critical
10486-11583
Critical
10486-10729
Critical
10486-10735
Critical
10486-10852
Critical
10486-10853
Moderate
10486-10816
Critical
10486-10047
Critical
10486-10048
Critical
10486-10481
Critical
10486-10482
Critical
10486-10484
Moderate
10486-10051
Moderate
10486-10483
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A;DOS:N/A
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10951
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10952
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11497
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11498
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11563
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11568
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11569
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11570
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11571
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11453
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11454
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-11583
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10729
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10735
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10852
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10853
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10816
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10047
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10048
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10481
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10482
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10484
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10051
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10486-10483
4489871
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489871
4487020
10486-10951
10486-10952
Yes
Security Update
4489868
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489868
4487017
10486-11497
10486-11498
10486-11563
Yes
Security Update
4489899
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489899
4487044
10486-11568
10486-11569
10486-11570
10486-11571
Yes
Security Update
4489899
https://support.microsoft.com/help/4489899
10486-11568
10486-11569
10486-11570
10486-11571
4489886
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489886
4486996
10486-11453
10486-11454
10486-11583
Yes
Security Update
4489872
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489872
4487018
10486-10729
10486-10735
Yes
Security Update
4489872
https://support.microsoft.com/help/4489872
10486-10729
10486-10735
4489882
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489882
4487026
10486-10852
10486-10853
10486-10816
Yes
Security Update
4489882
https://support.microsoft.com/help/4489882
10486-10852
10486-10853
10486-10816
4489878
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489878
4486563
10486-10047
10486-10048
10486-10051
Yes
Monthly Rollup
4489878
https://support.microsoft.com/help/4489878
10486-10047
10486-10048
10486-10051
4489873
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489873
4486474
10486-10047
10486-10048
10486-10481
10486-10482
10486-10051
10486-10483
Yes
IE Cumulative
4489873
https://support.microsoft.com/help/4489873
10486-10047
10486-10048
10486-10481
10486-10482
10486-10051
10486-10483
4489881
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489881
4487000
10486-10481
10486-10482
10486-10484
10486-10483
Yes
Monthly Rollup
4489881
https://support.microsoft.com/help/4489881
10486-10481
10486-10482
10486-10484
10486-10483
Yuki Chen of <a href="http://www.360.com/">Qihoo 360 Vulcan Team</a>
1.0
2019-03-12T07:00:00Z
<p>Information published.</p>
Windows Subsystem for Linux Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists due to an integer overflow in Windows Subsystem for Linux. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.</p>
<p>To exploit the vulnerability, a locally authenticated attacker could run a specially crafted application.</p>
<p>The security update addresses the vulnerability by correcting how Windows Subsystem for Linux handles objects in memory.</p>
Windows Subsystem for Linux
CVE-2019-0682
10951
10952
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11466
Elevation of Privilege
10951
Elevation of Privilege
10952
Elevation of Privilege
11497
Elevation of Privilege
11498
Elevation of Privilege
11499
Elevation of Privilege
11563
Elevation of Privilege
11568
Elevation of Privilege
11569
Elevation of Privilege
11570
Elevation of Privilege
11571
Elevation of Privilege
11572
Elevation of Privilege
11453
Elevation of Privilege
11454
Elevation of Privilege
11583
Elevation of Privilege
11466
Important
10951
Important
10952
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11466
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10951
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10952
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11497
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11498
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11499
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11563
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11453
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11454
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11583
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11466
4489871
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489871
4487020
10951
10952
Yes
Security Update
4489868
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489868
4487017
11497
11498
11499
11563
Yes
Security Update
4489899
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489899
4487044
11568
11569
11570
11571
11572
Yes
Security Update
4489899
https://support.microsoft.com/help/4489899
11568
11569
11570
11571
11572
4489886
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489886
4486996
11453
11454
11583
11466
Yes
Security Update
<a href="https://twitter.com/anarcheuz">Anthony LAOU HINE TSUEI</a>
1.0
2019-03-12T07:00:00Z
<p>Information published.</p>
Active Directory Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists in Active Directory Forest trusts due to a default setting that lets an attacker in the trusting forest request delegation of a TGT for an identity from the trusted forest. To exploit this vulnerability, an attacker would first need to compromise an Active Directory forest.</p>
<p>An attacker who successfully exploited this vulnerability could request delegation of a TGT for an identity from the trusted forest.</p>
<p>This update addresses the vulnerability by ensuring new Active Directory Forest trusts disable TGT delegation by default. The update does not change existing TGT delegation configurations.</p>
Active Directory
CVE-2019-0683
11646
11647
11644
11645
10951
10952
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
9312
10287
9311
9318
9344
10050
10051
10049
10378
10379
10483
10543
Elevation of Privilege
11646
Elevation of Privilege
11647
Elevation of Privilege
11644
Elevation of Privilege
11645
Elevation of Privilege
10951
Elevation of Privilege
10952
Elevation of Privilege
11497
Elevation of Privilege
11498
Elevation of Privilege
11499
Elevation of Privilege
11563
Elevation of Privilege
11568
Elevation of Privilege
11569
Elevation of Privilege
11570
Elevation of Privilege
11571
Elevation of Privilege
11572
Elevation of Privilege
11453
Elevation of Privilege
11454
Elevation of Privilege
11583
Elevation of Privilege
10729
Elevation of Privilege
10735
Elevation of Privilege
10852
Elevation of Privilege
10853
Elevation of Privilege
10816
Elevation of Privilege
10855
Elevation of Privilege
10047
Elevation of Privilege
10048
Elevation of Privilege
10481
Elevation of Privilege
10482
Elevation of Privilege
10484
Elevation of Privilege
9312
Elevation of Privilege
10287
Elevation of Privilege
9311
Elevation of Privilege
9318
Elevation of Privilege
9344
Elevation of Privilege
10050
Elevation of Privilege
10051
Elevation of Privilege
10049
Elevation of Privilege
10378
Elevation of Privilege
10379
Elevation of Privilege
10483
Elevation of Privilege
10543
Important
11646
Important
11647
Important
11644
Important
11645
Important
10951
Important
10952
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9311
Important
9318
Important
9344
Important
10050
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Publicly Disclosed:Yes;Exploited:No;Latest Software Release:N/A;Older Software Release:Exploitation Less Likely;DOS:N/A
4.9
4.4
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N/E:P/RL:O/RC:C
10047
4.9
4.4
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N/E:P/RL:O/RC:C
10048
4.9
4.4
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N/E:P/RL:O/RC:C
9312
4.9
4.4
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N/E:P/RL:O/RC:C
10287
4.9
4.4
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N/E:P/RL:O/RC:C
9311
4.9
4.4
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N/E:P/RL:O/RC:C
9318
4.9
4.4
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N/E:P/RL:O/RC:C
9344
4.9
4.4
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N/E:P/RL:O/RC:C
10050
4.9
4.4
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N/E:P/RL:O/RC:C
10051
4.9
4.4
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N/E:P/RL:O/RC:C
10049
4507453
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507453
4503293
11646
11647
11644
11645
Yes
Security Update
4507453
https://support.microsoft.com/help/4507453
11646
11647
11644
11645
4507450
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507450
4503279
10951
10952
Yes
Security Update
4507450
https://support.microsoft.com/help/4507450
10951
10952
4507435
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507435
4503286
11497
11498
11499
11563
Yes
Security Update
4507435
https://support.microsoft.com/help/4507435
11497
11498
11499
11563
4507469
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507469
4503327
11568
11569
11570
11571
11572
Yes
Security Update
4507469
https://support.microsoft.com/help/4507469
11568
11569
11570
11571
11572
4507455
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507455
4503284
11453
11454
11583
Yes
Security Update
4507455
https://support.microsoft.com/help/4507455
11453
11454
11583
4507458
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507458
4503291
10729
10735
Yes
Security Update
4507458
https://support.microsoft.com/help/4507458
10729
10735
4507460
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507460
4503267
10852
10853
10816
10855
Yes
Security Update
4507460
https://support.microsoft.com/help/4507460
10852
10853
10816
10855
4507449
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507449
4503292
10047
10048
10050
10051
10049
Yes
Monthly Rollup
4507449
https://support.microsoft.com/help/4507449
10047
10048
10050
10051
10049
4507456
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507456
10047
10048
10050
10051
10049
Yes
Security Only
4507448
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507448
4503276
10481
10482
10484
10483
10543
Yes
Monthly Rollup
4507448
https://support.microsoft.com/help/4507448
10481
10482
10484
10483
10543
4507457
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507457
10481
10482
10483
10543
Yes
Security Only
4507457
https://support.microsoft.com/help/4507457
10481
10482
10483
10543
4507452
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507452
4503273
9312
10287
9311
9318
9344
Yes
Monthly Rollup
4507461
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507461
9312
10287
9311
9318
9344
Yes
Security Only
4507462
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507462
4503285
10378
10379
Yes
Monthly Rollup
4507462
https://support.microsoft.com/help/4507462
10378
10379
4507464
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4507464
10378
10379
Yes
Security Only
4507464
https://support.microsoft.com/help/4507464
10378
10379
Will Schroeder (<a href="https://twitter.com/harmj0y">@harmj0y</a>) of <a href="https://www.specterops.io/">SpecterOps</a>
1.1
2019-03-14T07:00:00Z
<p>Updated vulnerability description.</p>
2.0
2019-05-14T07:00:00Z
<p>On May 14, 2019, Microsoft released security updates for all versions of Microsoft Windows to introduce a new trust flag to add a new safe default configuration for CVE-2019-0683, the CVE that addresses the issue described in ADV190006. For more information please see https://support.microsoft.com/en-us/help/4490425/updates-to-tgt-delegation-across-incoming-trusts-in-windows-server.</p>
1.0
2019-03-12T07:00:00Z
<p>Information published.</p>
3.0
2019-07-09T07:00:00Z
<p>On July 9, 2019, Microsoft released security updates for all versions of Microsoft Windows to set the new trust flag to Yes for CVE-2019-0683, the CVE that addresses the issue described in ADV190006. For more information please see https://support.microsoft.com/en-us/help/4490425/updates-to-tgt-delegation-across-incoming-trusts-in-windows-server.</p>
Windows Subsystem for Linux Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists due to an integer overflow in Windows Subsystem for Linux. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.</p>
<p>To exploit the vulnerability, a locally authenticated attacker could run a specially crafted application.</p>
<p>The security update addresses the vulnerability by correcting how Windows Subsystem for Linux handles objects in memory.</p>
Windows Subsystem for Linux
CVE-2019-0689
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11466
Elevation of Privilege
11497
Elevation of Privilege
11498
Elevation of Privilege
11499
Elevation of Privilege
11563
Elevation of Privilege
11568
Elevation of Privilege
11569
Elevation of Privilege
11570
Elevation of Privilege
11571
Elevation of Privilege
11572
Elevation of Privilege
11453
Elevation of Privilege
11454
Elevation of Privilege
11583
Elevation of Privilege
11466
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11466
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11497
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11498
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11499
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11563
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11453
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11454
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11583
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11466
4489868
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489868
4487017
11497
11498
11499
11563
Yes
Security Update
4489899
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489899
4487044
11568
11569
11570
11571
11572
Yes
Security Update
4489899
https://support.microsoft.com/help/4489899
11568
11569
11570
11571
11572
4489886
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489886
4486996
11453
11454
11583
11466
Yes
Security Update
<a href="https://twitter.com/anarcheuz">Anthony LAOU HINE TSUEI</a>
1.0
2019-03-12T07:00:00Z
<p>Information published.</p>
Windows Hyper-V Denial of Service Vulnerability
<p>A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a privileged user on a guest operating system. An attacker who successfully exploited the vulnerability could cause the host server to crash.</p>
<p>To exploit the vulnerability, an attacker who already has a privileged account on a guest operating system, running as a virtual machine, could run a specially crafted application that causes a host machine to crash.</p>
<p>The update addresses the vulnerability by modifying how virtual machines access the Hyper-V Network Switch.</p>
Windows Hyper-V
CVE-2019-0690
10952
11498
11499
11569
11571
11572
11454
11466
10735
10853
10816
10855
10048
10482
9318
9344
10051
10049
10378
10379
10483
10543
Denial of Service
10952
Denial of Service
11498
Denial of Service
11499
Denial of Service
11569
Denial of Service
11571
Denial of Service
11572
Denial of Service
11454
Denial of Service
11466
Denial of Service
10735
Denial of Service
10853
Denial of Service
10816
Denial of Service
10855
Denial of Service
10048
Denial of Service
10482
Denial of Service
9318
Denial of Service
9344
Denial of Service
10051
Denial of Service
10049
Denial of Service
10378
Denial of Service
10379
Denial of Service
10483
Denial of Service
10543
Important
10952
Important
11498
Important
11499
Important
11569
Important
11571
Important
11572
Important
11454
Important
11466
Important
10735
Important
10853
Important
10816
Important
10855
Important
10048
Important
10482
Important
9318
Important
9344
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
6.8
6.1
CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10952
6.8
6.1
CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
11498
6.8
6.1
CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
11499
6.8
6.1
CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
11569
6.8
6.1
CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
11571
6.8
6.1
CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
11572
6.8
6.1
CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
11454
6.8
6.1
CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
11466
6.8
6.1
CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10735
6.8
6.1
CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10853
6.8
6.1
CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10816
6.8
6.1
CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10855
6.8
6.1
CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10048
6.8
6.1
CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10482
6.8
6.1
CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
9318
6.8
6.1
CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
9344
6.8
6.1
CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10051
6.8
6.1
CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10049
6.8
6.1
CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10378
6.8
6.1
CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10379
6.8
6.1
CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10483
6.8
6.1
CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10543
4489871
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489871
4487020
10952
Yes
Security Update
4489868
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489868
4487017
11498
11499
Yes
Security Update
4489899
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489899
4487044
11569
11571
11572
Yes
Security Update
4489899
https://support.microsoft.com/help/4489899
11569
11571
11572
4489886
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489886
4486996
11454
11466
Yes
Security Update
4489872
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489872
4487018
10735
Yes
Security Update
4489872
https://support.microsoft.com/help/4489872
10735
4489882
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489882
4487026
10853
10816
10855
Yes
Security Update
4489882
https://support.microsoft.com/help/4489882
10853
10816
10855
4489878
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489878
4486563
10048
10051
10049
Yes
Monthly Rollup
4489878
https://support.microsoft.com/help/4489878
10048
10051
10049
4489885
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489885
10048
10051
10049
Yes
Security Only
4489885
https://support.microsoft.com/help/4489885
10048
10051
10049
4489881
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489881
4487000
10482
10483
10543
Yes
Monthly Rollup
4489881
https://support.microsoft.com/help/4489881
10482
10483
10543
4489883
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489883
10482
10483
10543
Security Only
4489883
https://support.microsoft.com/help/4489883
10482
10483
10543
4489880
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489880
4487023
9318
9344
Yes
Monthly Rollup
4489876
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489876
4487019
9318
9344
Yes
Security Only
4489891
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489891
4487025
10378
10379
Yes
Monthly Rollup
4489891
https://support.microsoft.com/help/4489891
10378
10379
4489884
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489884
10378
10379
Yes
Security Only
4489884
https://support.microsoft.com/help/4489884
10378
10379
Marcel de Wijs
1.0
2019-03-12T07:00:00Z
<p>Information published.</p>
Windows Subsystem for Linux Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists due to an integer overflow in Windows Subsystem for Linux. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.</p>
<p>To exploit the vulnerability, a locally authenticated attacker could run a specially crafted application.</p>
<p>The security update addresses the vulnerability by correcting how Windows Subsystem for Linux handles objects in memory.</p>
Windows Subsystem for Linux
CVE-2019-0692
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11466
Elevation of Privilege
11497
Elevation of Privilege
11498
Elevation of Privilege
11499
Elevation of Privilege
11563
Elevation of Privilege
11568
Elevation of Privilege
11569
Elevation of Privilege
11570
Elevation of Privilege
11571
Elevation of Privilege
11572
Elevation of Privilege
11453
Elevation of Privilege
11454
Elevation of Privilege
11583
Elevation of Privilege
11466
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11466
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11497
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11498
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11499
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11563
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11453
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11454
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11583
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11466
4489868
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489868
4487017
11497
11498
11499
11563
Yes
Security Update
4489899
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489899
4487044
11568
11569
11570
11571
11572
Yes
Security Update
4489899
https://support.microsoft.com/help/4489899
11568
11569
11570
11571
11572
4489886
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489886
4486996
11453
11454
11583
11466
Yes
Security Update
<a href="https://twitter.com/anarcheuz">Anthony LAOU HINE TSUEI</a>
1.0
2019-03-12T07:00:00Z
<p>Information published.</p>
Windows Subsystem for Linux Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists due to an integer overflow in Windows Subsystem for Linux. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.</p>
<p>To exploit the vulnerability, a locally authenticated attacker could run a specially crafted application.</p>
<p>The security update addresses the vulnerability by correcting how Windows Subsystem for Linux handles objects in memory.</p>
Windows Subsystem for Linux
CVE-2019-0693
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11466
Elevation of Privilege
11497
Elevation of Privilege
11498
Elevation of Privilege
11499
Elevation of Privilege
11563
Elevation of Privilege
11568
Elevation of Privilege
11569
Elevation of Privilege
11570
Elevation of Privilege
11571
Elevation of Privilege
11572
Elevation of Privilege
11453
Elevation of Privilege
11454
Elevation of Privilege
11583
Elevation of Privilege
11466
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11466
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11497
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11498
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11499
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11563
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11453
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11454
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11583
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11466
4489868
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489868
4487017
11497
11498
11499
11563
Yes
Security Update
4489899
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489899
4487044
11568
11569
11570
11571
11572
Yes
Security Update
4489899
https://support.microsoft.com/help/4489899
11568
11569
11570
11571
11572
4489886
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489886
4486996
11453
11454
11583
11466
Yes
Security Update
<a href="https://twitter.com/anarcheuz">Anthony LAOU HINE TSUEI</a>
1.0
2019-03-12T07:00:00Z
<p>Information published.</p>
Windows Subsystem for Linux Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists due to an integer overflow in Windows Subsystem for Linux. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.</p>
<p>To exploit the vulnerability, a locally authenticated attacker could run a specially crafted application.</p>
<p>The security update addresses the vulnerability by correcting how Windows Subsystem for Linux handles objects in memory.</p>
Windows Subsystem for Linux
CVE-2019-0694
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11466
Elevation of Privilege
11497
Elevation of Privilege
11498
Elevation of Privilege
11499
Elevation of Privilege
11563
Elevation of Privilege
11568
Elevation of Privilege
11569
Elevation of Privilege
11570
Elevation of Privilege
11571
Elevation of Privilege
11572
Elevation of Privilege
11453
Elevation of Privilege
11454
Elevation of Privilege
11583
Elevation of Privilege
11466
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11466
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11497
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11498
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11499
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11563
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11453
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11454
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11583
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11466
4493464
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4493464
4489868
11497
11498
11563
Yes
Security Update
4493464
https://support.microsoft.com/help/4493464
11497
11498
11563
4489868
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489868
4487017
11499
Yes
Security Update
4489899
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489899
4487044
11568
11569
11570
11571
11572
Yes
Security Update
4489899
https://support.microsoft.com/help/4489899
11568
11569
11570
11571
11572
4493441
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4493441
4489886
11453
11454
11583
Yes
Security Update
4493441
https://support.microsoft.com/help/4493441
11453
11454
11583
4489886
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489886
4486996
11466
Yes
Security Update
<a href="https://twitter.com/anarcheuz">Anthony LAOU HINE TSUEI</a>
1.0
2019-03-12T07:00:00Z
<p>Information published.</p>
2.0
2019-04-09T07:00:00Z
<p>To address a known issue customers may have experienced when attempting to start the Secure Shell (SSH) client program from Windows Subsystem for Linux (WSL), Microsoft has released the April security updates for Windows 10 Version 1709; Windows Server, version 1709 (Server Core Installation); Windows 10 Version 1803; and Windows Server, version 1803 (Server Core Installation). Microsoft recommends that customers who have experienced this known issue install the April security updates.</p>
Windows Hyper-V Information Disclosure Vulnerability
<p>An information disclosure vulnerability exists when Windows Hyper-V on a host operating system fails to properly validate input from an authenticated user on a guest operating system. To exploit the vulnerability, an attacker on a guest operating system could run a specially crafted application that could cause the Hyper-V host operating system to disclose memory information.</p>
<p>An attacker who successfully exploited the vulnerability could gain access to information on the Hyper-V host operating system.</p>
<p>The security update addresses the vulnerability by correcting how Hyper-V validates guest operating system user input.</p>
<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>
<p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is Guest VM to Hyper-V host server - virtualization security boundary.</p>
Windows Hyper-V
CVE-2019-0695
10952
11498
11499
11454
10735
10853
10816
10855
11569
11571
11572
11466
Information Disclosure
10952
Information Disclosure
11498
Information Disclosure
11499
Information Disclosure
11454
Information Disclosure
10735
Information Disclosure
10853
Information Disclosure
10816
Information Disclosure
10855
Information Disclosure
11569
Information Disclosure
11571
Information Disclosure
11572
Information Disclosure
11466
Important
10952
Important
11498
Important
11499
Important
11454
Important
10735
Important
10853
Important
10816
Important
10855
Important
11569
Important
11571
Important
11572
Important
11466
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
6.8
6.1
CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10952
6.8
6.1
CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
11498
6.8
6.1
CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
11499
6.8
6.1
CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
11454
6.8
6.1
CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10735
6.8
6.1
CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10853
6.8
6.1
CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10816
6.8
6.1
CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10855
6.8
6.1
CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
11569
6.8
6.1
CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
11571
6.8
6.1
CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
11572
6.8
6.1
CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
11466
4489871
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489871
4487020
10952
Yes
Security Update
4489868
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489868
4487017
11498
11499
Yes
Security Update
4489886
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489886
4486996
11454
11466
Yes
Security Update
4489872
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489872
4487018
10735
Yes
Security Update
4489872
https://support.microsoft.com/help/4489872
10735
4489882
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489882
4487026
10853
10816
10855
Yes
Security Update
4489882
https://support.microsoft.com/help/4489882
10853
10816
10855
4489899
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489899
4487044
11569
11571
11572
Yes
Security Update
4489899
https://support.microsoft.com/help/4489899
11569
11571
11572
Jaanus Kääp of <a href="https://www.clarifiedsecurity.com/">Clarified Security</a>
Shawn Denbow of Windows Security Team
1.0
2019-03-12T07:00:00Z
<p>Information published.</p>
1.1
2019-07-09T07:00:00Z
<p>Corrected the CVE title and description to address the vulnerability as Information Disclosure. In the Affected Products table, corrected the Impact to Information Disclosure. This is an informational change only.</p>
Windows Kernel Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application to take control of an affected system.</p>
<p>The update addresses the vulnerability by correcting how the Windows kernel handles objects in memory.</p>
Windows Kernel
CVE-2019-0696
10951
10952
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11466
10852
10853
10816
10855
Elevation of Privilege
10951
Elevation of Privilege
10952
Elevation of Privilege
11497
Elevation of Privilege
11498
Elevation of Privilege
11499
Elevation of Privilege
11563
Elevation of Privilege
11568
Elevation of Privilege
11569
Elevation of Privilege
11570
Elevation of Privilege
11571
Elevation of Privilege
11572
Elevation of Privilege
11453
Elevation of Privilege
11454
Elevation of Privilege
11583
Elevation of Privilege
11466
Elevation of Privilege
10852
Elevation of Privilege
10853
Elevation of Privilege
10816
Elevation of Privilege
10855
Important
10951
Important
10952
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11466
Important
10852
Important
10853
Important
10816
Important
10855
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10951
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10952
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11497
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11498
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11499
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11563
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11453
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11454
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11583
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11466
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10852
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10853
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10816
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10855
4489871
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489871
4487020
10951
10952
Yes
Security Update
4489868
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489868
4487017
11497
11498
11499
11563
Yes
Security Update
4489899
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489899
4487044
11568
11569
11570
11571
11572
Yes
Security Update
4489899
https://support.microsoft.com/help/4489899
11568
11569
11570
11571
11572
4489886
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489886
4486996
11453
11454
11583
11466
Yes
Security Update
4489882
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489882
4487026
10852
10853
10816
10855
Yes
Security Update
4489882
https://support.microsoft.com/help/4489882
10852
10853
10816
10855
MSRC Vulnerabilities and Mitigations Team
1.0
2019-03-12T07:00:00Z
<p>Information published.</p>
Windows DHCP Client Remote Code Execution Vulnerability
<p>A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client. An attacker who successfully exploited the vulnerability could run arbitrary code on the client machine.</p>
<p>To exploit the vulnerability, an attacker could send specially crafted DHCP responses to a client.</p>
<p>The security update addresses the vulnerability by correcting how Windows DHCP clients handle certain DHCP responses.</p>
Windows DHCP Client
CVE-2019-0697
11497
11498
11499
11563
11568
11569
11570
11571
11572
Remote Code Execution
11497
Remote Code Execution
11498
Remote Code Execution
11499
Remote Code Execution
11563
Remote Code Execution
11568
Remote Code Execution
11569
Remote Code Execution
11570
Remote Code Execution
11571
Remote Code Execution
11572
Critical
11497
Critical
11498
Critical
11499
Critical
11563
Critical
11568
Critical
11569
Critical
11570
Critical
11571
Critical
11572
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
9.8
8.8
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11497
9.8
8.8
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11498
9.8
8.8
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11499
9.8
8.8
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11563
9.8
8.8
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
9.8
8.8
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
9.8
8.8
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
9.8
8.8
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
9.8
8.8
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
4489868
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489868
4487017
11497
11498
11499
11563
Yes
Security Update
4489899
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489899
4487044
11568
11569
11570
11571
11572
Yes
Security Update
4489899
https://support.microsoft.com/help/4489899
11568
11569
11570
11571
11572
Microsoft Windows Enterprise Security Team
Mikhail Tsvetkov of <a href="https://www.ptsecurity.com">Positive Technologies</a>
1.0
2019-03-12T07:00:00Z
<p>Information published.</p>
Windows DHCP Client Remote Code Execution Vulnerability
<p>A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client. An attacker who successfully exploited the vulnerability could run arbitrary code on the client machine.</p>
<p>To exploit the vulnerability, an attacker could send specially crafted DHCP responses to a client.</p>
<p>The security update addresses the vulnerability by correcting how Windows DHCP clients handle certain DHCP responses.</p>
Windows DHCP Client
CVE-2019-0698
11497
11498
11499
11563
11568
11569
11570
11571
11572
Remote Code Execution
11497
Remote Code Execution
11498
Remote Code Execution
11499
Remote Code Execution
11563
Remote Code Execution
11568
Remote Code Execution
11569
Remote Code Execution
11570
Remote Code Execution
11571
Remote Code Execution
11572
Critical
11497
Critical
11498
Critical
11499
Critical
11563
Critical
11568
Critical
11569
Critical
11570
Critical
11571
Critical
11572
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
9.8
8.8
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11497
9.8
8.8
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11498
9.8
8.8
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11499
9.8
8.8
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11563
9.8
8.8
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
9.8
8.8
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
9.8
8.8
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
9.8
8.8
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
9.8
8.8
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
4489868
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489868
4487017
11497
11498
11499
11563
Yes
Security Update
4489899
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489899
4487044
11568
11569
11570
11571
11572
Yes
Security Update
4489899
https://support.microsoft.com/help/4489899
11568
11569
11570
11571
11572
Microsoft Windows Enterprise Security Team
1.0
2019-03-12T07:00:00Z
<p>Information published.</p>
Windows Hyper-V Denial of Service Vulnerability
<p>A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate input from a privileged user on a guest operating system. To exploit the vulnerability, an attacker who already has a privileged account on a guest operating system, running as a virtual machine, could run a specially crafted application that causes a host machine to crash.</p>
<p>To exploit the vulnerability, an attacker who already has a privileged account on a guest operating system, running as a virtual machine, could run a specially crafted application.</p>
<p>The security update addresses the vulnerability by resolving a number of conditions where Hyper-V would fail to prevent a guest operating system from sending malicious requests.</p>
Windows Hyper-V
CVE-2019-0701
11498
11499
11569
11571
11572
Denial of Service
11498
Denial of Service
11499
Denial of Service
11569
Denial of Service
11571
Denial of Service
11572
Important
11498
Important
11499
Important
11569
Important
11571
Important
11572
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
6.8
6.1
CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
11498
6.8
6.1
CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
11499
6.8
6.1
CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
11569
6.8
6.1
CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
11571
6.8
6.1
CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
11572
4489868
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489868
4487017
11498
11499
Yes
Security Update
4489899
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489899
4487044
11569
11571
11572
Yes
Security Update
4489899
https://support.microsoft.com/help/4489899
11569
11571
11572
1.0
2019-03-12T07:00:00Z
<p>Information published.</p>
Windows Kernel Information Disclosure Vulnerability
<p>An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system.</p>
<p>To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application. The vulnerability would not allow an attacker to execute code or to elevate user rights directly, but it could be used to obtain information that could be used to try to further compromise the affected system.</p>
<p>The update addresses the vulnerability by correcting how the Windows kernel handles objects in memory.</p>
<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>
<p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is Kernel memory read - unintentional read access to memory contents in kernel space from a user mode process.</p>
Windows Kernel
CVE-2019-0702
10951
10952
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11466
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
9312
10287
9311
9318
9344
10050
10051
10049
10378
10379
10483
10543
Information Disclosure
10951
Information Disclosure
10952
Information Disclosure
11497
Information Disclosure
11498
Information Disclosure
11499
Information Disclosure
11563
Information Disclosure
11568
Information Disclosure
11569
Information Disclosure
11570
Information Disclosure
11571
Information Disclosure
11572
Information Disclosure
11453
Information Disclosure
11454
Information Disclosure
11583
Information Disclosure
11466
Information Disclosure
10729
Information Disclosure
10735
Information Disclosure
10852
Information Disclosure
10853
Information Disclosure
10816
Information Disclosure
10855
Information Disclosure
10047
Information Disclosure
10048
Information Disclosure
10481
Information Disclosure
10482
Information Disclosure
10484
Information Disclosure
9312
Information Disclosure
10287
Information Disclosure
9311
Information Disclosure
9318
Information Disclosure
9344
Information Disclosure
10050
Information Disclosure
10051
Information Disclosure
10049
Information Disclosure
10378
Information Disclosure
10379
Information Disclosure
10483
Information Disclosure
10543
Important
10951
Important
10952
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11466
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9311
Important
9318
Important
9344
Important
10050
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10951
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10952
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11497
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11498
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11499
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11563
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11568
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11569
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11570
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11571
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11572
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11453
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11454
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11583
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11466
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10729
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10735
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10852
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10853
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10816
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10855
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10047
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10048
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10482
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10484
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9312
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10287
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9311
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9318
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9344
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10050
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10051
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10049
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10378
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10379
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10483
5.5
5.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10543
4489871
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489871
4487020
10951
10952
Yes
Security Update
4489868
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489868
4487017
11497
11498
11499
11563
Yes
Security Update
4489899
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489899
4487044
11568
11569
11570
11571
11572
Yes
Security Update
4489899
https://support.microsoft.com/help/4489899
11568
11569
11570
11571
11572
4489886
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489886
4486996
11453
11454
11583
11466
Yes
Security Update
4489872
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489872
4487018
10729
10735
Yes
Security Update
4489872
https://support.microsoft.com/help/4489872
10729
10735
4489882
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489882
4487026
10852
10853
10816
10855
Yes
Security Update
4489882
https://support.microsoft.com/help/4489882
10852
10853
10816
10855
4489878
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489878
4486563
10047
10048
10050
10051
10049
Yes
Monthly Rollup
4489878
https://support.microsoft.com/help/4489878
10047
10048
10050
10051
10049
4489885
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489885
10047
10048
10050
10051
10049
Yes
Security Only
4489885
https://support.microsoft.com/help/4489885
10047
10048
10050
10051
10049
4489881
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489881
4487000
10481
10482
10484
10483
10543
Yes
Monthly Rollup
4489881
https://support.microsoft.com/help/4489881
10481
10482
10484
10483
10543
4489883
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489883
10481
10482
10483
10543
Security Only
4489883
https://support.microsoft.com/help/4489883
10481
10482
10483
10543
4489880
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489880
4487023
9312
10287
9311
9318
9344
Yes
Monthly Rollup
4489876
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489876
4487019
9312
10287
9311
9318
9344
Yes
Security Only
4489891
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489891
4487025
10378
10379
Yes
Monthly Rollup
4489891
https://support.microsoft.com/help/4489891
10378
10379
4489884
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489884
10378
10379
Yes
Security Only
4489884
https://support.microsoft.com/help/4489884
10378
10379
<a href="https://twitter.com/YHZX_2013">ZiMi</a> and <a href="https://twitter.com/Bl1nnnk">JunGu</a> of Alibaba Orion Security Lab
1.0
2019-03-12T07:00:00Z
<p>Information published.</p>
Windows SMB Information Disclosure Vulnerability
<p>An information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests. An authenticated attacker who successfully exploited this vulnerability could craft a special packet, which could lead to information disclosure from the server.</p>
<p>To exploit the vulnerability, an attacker would have to be able to authenticate and send SMB messages to an impacted Windows SMB Server</p>
<p>The security update addresses the vulnerability by correcting how Windows SMB Server handles authenticated requests.</p>
<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>
<p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is memory layout - the vulnerability allows an attacker to collect information that facilitates predicting addressing of the memory.</p>
Windows SMB Server
CVE-2019-0703
10951
10952
11497
11498
11499
11453
11454
11466
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
9312
10287
9311
9318
9344
10050
10051
10049
10378
10379
10483
10543
11568
11569
11570
11571
11572
11563
11583
Information Disclosure
10951
Information Disclosure
10952
Information Disclosure
11497
Information Disclosure
11498
Information Disclosure
11499
Information Disclosure
11453
Information Disclosure
11454
Information Disclosure
11466
Information Disclosure
10729
Information Disclosure
10735
Information Disclosure
10852
Information Disclosure
10853
Information Disclosure
10816
Information Disclosure
10855
Information Disclosure
10047
Information Disclosure
10048
Information Disclosure
10481
Information Disclosure
10482
Information Disclosure
10484
Information Disclosure
9312
Information Disclosure
10287
Information Disclosure
9311
Information Disclosure
9318
Information Disclosure
9344
Information Disclosure
10050
Information Disclosure
10051
Information Disclosure
10049
Information Disclosure
10378
Information Disclosure
10379
Information Disclosure
10483
Information Disclosure
10543
Information Disclosure
11568
Information Disclosure
11569
Information Disclosure
11570
Information Disclosure
11571
Information Disclosure
11572
Information Disclosure
11563
Information Disclosure
11583
Important
10951
Important
10952
Important
11497
Important
11498
Important
11499
Important
11453
Important
11454
Important
11466
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9311
Important
9318
Important
9344
Important
10050
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11563
Important
11583
Publicly Disclosed:No;Exploited:Yes;Latest Software Release:Exploitation Detected;Older Software Release:Exploitation Detected;DOS:N/A
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10951
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10952
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11497
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11498
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11499
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11453
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11454
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11466
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10729
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10735
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10852
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10853
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10816
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10855
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10047
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10048
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10481
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10482
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10484
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9312
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10287
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9311
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9318
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9344
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10050
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10051
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10049
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10378
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10379
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10483
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10543
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11568
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11569
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11570
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11571
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11572
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11563
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11583
4489871
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489871
4487020
10951
10952
Yes
Security Update
4489868
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489868
4487017
11497
11498
11499
11563
Yes
Security Update
4489886
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489886
4486996
11453
11454
11466
11583
Yes
Security Update
4489872
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489872
4487018
10729
10735
Yes
Security Update
4489872
https://support.microsoft.com/help/4489872
10729
10735
4489882
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489882
4487026
10852
10853
10816
10855
Yes
Security Update
4489882
https://support.microsoft.com/help/4489882
10852
10853
10816
10855
4489878
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489878
4486563
10047
10048
10050
10051
10049
Yes
Monthly Rollup
4489878
https://support.microsoft.com/help/4489878
10047
10048
10050
10051
10049
4489885
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489885
10047
10048
10050
10051
10049
Yes
Security Only
4489885
https://support.microsoft.com/help/4489885
10047
10048
10050
10051
10049
4489881
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489881
4487000
10481
10482
10484
10483
10543
Yes
Monthly Rollup
4489881
https://support.microsoft.com/help/4489881
10481
10482
10484
10483
10543
4489883
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489883
10481
10482
10483
10543
Security Only
4489883
https://support.microsoft.com/help/4489883
10481
10482
10483
10543
4489880
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489880
4487023
9312
10287
9311
9318
9344
Yes
Monthly Rollup
4489876
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489876
4487019
9312
10287
9311
9318
9344
Yes
Security Only
4489891
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489891
4487025
10378
10379
Yes
Monthly Rollup
4489891
https://support.microsoft.com/help/4489891
10378
10379
4489884
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489884
10378
10379
Yes
Security Only
4489884
https://support.microsoft.com/help/4489884
10378
10379
4489899
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489899
4487044
11568
11569
11570
11571
11572
Yes
Security Update
4489899
https://support.microsoft.com/help/4489899
11568
11569
11570
11571
11572
Piotr Krysiuk of <a href="https://www.symantec.com/">Symantec</a>
Andrew Burkhardt of MSRC Vulnerabilities & Mitigations Team
1.0
2019-03-12T07:00:00Z
<p>Information published.</p>
1.1
2019-05-07T07:00:00Z
<p>Corrected Active Attack entry to Yes. When this information was originally released, Microsoft was aware of limited, targeted attacks that attempt to exploit this vulnerability.</p>
Windows SMB Information Disclosure Vulnerability
<p>An information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests. An authenticated attacker who successfully exploited this vulnerability could craft a special packet, which could lead to information disclosure from the server.</p>
<p>To exploit the vulnerability, an attacker would have to be able to authenticate and send SMB messages to an impacted Windows SMB Server</p>
<p>The security update addresses the vulnerability by correcting how Windows SMB Server handles authenticated requests.</p>
<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>
<p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is memory layout - the vulnerability allows an attacker to collect information that facilitates predicting addressing of the memory.</p>
Windows SMB Server
CVE-2019-0704
10951
10952
11497
11498
11499
11563
11568
11569
11570
11571
11572
11453
11454
11583
11466
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
9312
10287
9311
9318
9344
10050
10051
10049
10378
10379
10483
10543
Information Disclosure
10951
Information Disclosure
10952
Information Disclosure
11497
Information Disclosure
11498
Information Disclosure
11499
Information Disclosure
11563
Information Disclosure
11568
Information Disclosure
11569
Information Disclosure
11570
Information Disclosure
11571
Information Disclosure
11572
Information Disclosure
11453
Information Disclosure
11454
Information Disclosure
11583
Information Disclosure
11466
Information Disclosure
10729
Information Disclosure
10735
Information Disclosure
10852
Information Disclosure
10853
Information Disclosure
10816
Information Disclosure
10855
Information Disclosure
10047
Information Disclosure
10048
Information Disclosure
10481
Information Disclosure
10482
Information Disclosure
10484
Information Disclosure
9312
Information Disclosure
10287
Information Disclosure
9311
Information Disclosure
9318
Information Disclosure
9344
Information Disclosure
10050
Information Disclosure
10051
Information Disclosure
10049
Information Disclosure
10378
Information Disclosure
10379
Information Disclosure
10483
Information Disclosure
10543
Important
10951
Important
10952
Important
11497
Important
11498
Important
11499
Important
11563
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11583
Important
11466
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9311
Important
9318
Important
9344
Important
10050
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10951
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10952
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11497
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11498
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11499
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11563
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11568
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11569
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11570
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11571
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11572
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11453
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11454
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11583
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11466
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10729
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10735
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10852
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10853
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10816
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10855
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10047
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10048
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10481
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10482
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10484
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9312
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10287
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9311
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9318
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9344
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10050
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10051
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10049
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10378
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10379
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10483
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10543
4489871
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489871
4487020
10951
10952
Yes
Security Update
4489868
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489868
4487017
11497
11498
11499
11563
Yes
Security Update
4489899
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489899
4487044
11568
11569
11570
11571
11572
Yes
Security Update
4489899
https://support.microsoft.com/help/4489899
11568
11569
11570
11571
11572
4489886
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489886
4486996
11453
11454
11583
11466
Yes
Security Update
4489872
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489872
4487018
10729
10735
Yes
Security Update
4489872
https://support.microsoft.com/help/4489872
10729
10735
4489882
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489882
4487026
10852
10853
10816
10855
Yes
Security Update
4489882
https://support.microsoft.com/help/4489882
10852
10853
10816
10855
4489878
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489878
4486563
10047
10048
10050
10051
10049
Yes
Monthly Rollup
4489878
https://support.microsoft.com/help/4489878
10047
10048
10050
10051
10049
4489885
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489885
10047
10048
10050
10051
10049
Yes
Security Only
4489885
https://support.microsoft.com/help/4489885
10047
10048
10050
10051
10049
4489881
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489881
4487000
10481
10482
10484
10483
10543
Yes
Monthly Rollup
4489881
https://support.microsoft.com/help/4489881
10481
10482
10484
10483
10543
4489883
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489883
10481
10482
10483
10543
Security Only
4489883
https://support.microsoft.com/help/4489883
10481
10482
10483
10543
4489880
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489880
4487023
9312
10287
9311
9318
9344
Yes
Monthly Rollup
4489876
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489876
4487019
9312
10287
9311
9318
9344
Yes
Security Only
4489891
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489891
4487025
10378
10379
Yes
Monthly Rollup
4489891
https://support.microsoft.com/help/4489891
10378
10379
4489884
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489884
10378
10379
Yes
Security Only
4489884
https://support.microsoft.com/help/4489884
10378
10379
Andrew Burkhardt of MSRC Vulnerabilities & Mitigations Team
Andrew Burkhardt of MSRC Vulnerabilities & Mitigations Team
1.0
2019-03-12T07:00:00Z
<p>Information published.</p>
Windows DHCP Client Remote Code Execution Vulnerability
<p>A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client. An attacker who successfully exploited the vulnerability could run arbitrary code on the client machine.</p>
<p>To exploit the vulnerability, an attacker could send specially crafted DHCP responses to a client.</p>
<p>The security update addresses the vulnerability by correcting how Windows DHCP clients handle certain DHCP responses.</p>
Windows DHCP Client
CVE-2019-0726
11497
11498
11499
11563
11568
11569
11570
11571
11572
Remote Code Execution
11497
Remote Code Execution
11498
Remote Code Execution
11499
Remote Code Execution
11563
Remote Code Execution
11568
Remote Code Execution
11569
Remote Code Execution
11570
Remote Code Execution
11571
Remote Code Execution
11572
Critical
11497
Critical
11498
Critical
11499
Critical
11563
Critical
11568
Critical
11569
Critical
11570
Critical
11571
Critical
11572
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
9.8
8.8
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11497
9.8
8.8
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11498
9.8
8.8
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11499
9.8
8.8
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11563
9.8
8.8
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11568
9.8
8.8
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11569
9.8
8.8
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11570
9.8
8.8
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11571
9.8
8.8
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
11572
4489868
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489868
4487017
11497
11498
11499
11563
Yes
Security Update
4489899
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489899
4487044
11568
11569
11570
11571
11572
Yes
Security Update
4489899
https://support.microsoft.com/help/4489899
11568
11569
11570
11571
11572
Mark Barnes (<a href="https://twitter.com/incanus">@incanus</a>) of MWR Labs
Saran Neti of Trend Micro
Hector Cuesta <a href="https://twitter.com/HectorCuesta">@HectorCuesta</a>
Mikhail Tsvetkov of <a href="https://www.ptsecurity.com">Positive Technologies</a>
1.0
2019-03-12T07:00:00Z
<p>Information published.</p>
March 2019 Adobe Flash Security Update
<p>This security update addresses minor security fixes, which are described in Adobe Security Bulletin <a href="https://helpx.adobe.com/security/products/flash-player/apsb19-12.html">APSB19-12</a>.</p>
<p><strong>How could an attacker exploit these vulnerabilities?</strong>
In a web-based attack scenario where the user is using Internet Explorer for the desktop, an attacker could host a specially crafted website that is designed to exploit any of these vulnerabilities through Internet Explorer and then convince a user to view the website. An attacker could also embed an ActiveX control marked "safe for initialization" in an application or Microsoft Office document that hosts the IE rendering engine. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit any of these vulnerabilities. In all cases, however, an attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically by clicking a link in an email message or in an Instant Messenger message that takes users to the attacker's website, or by opening an attachment sent through email.</p>
<p>In a web-based attack scenario where the user is using Internet Explorer in the Windows 8-style UI, an attacker would first need to compromise a website already listed in the Compatibility View (CV) list. An attacker could then host a website that contains specially crafted Flash content designed to exploit any of these vulnerabilities through Internet Explorer and then convince a user to view the website. An attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically by clicking a link in an email message or in an Instant Messenger message that takes users to the attacker's website, or by opening an attachment sent through email. For more information about Internet Explorer and the CV List, please see the MSDN Article, Developer Guidance for websites with content for Adobe Flash Player in Windows 8.</p>
Adobe Flash Player
ADV190008
10384-10951
10384-10952
10384-11497
10384-11498
10384-11563
10384-11568
10384-11569
10384-11570
10384-11571
10384-11453
10384-11454
10384-11583
10384-10729
10384-10735
10384-10852
10384-10853
10384-10816
10384-10481
10384-10482
10384-10484
10384-10378
10384-10483
Defense in Depth
10384-10951
Defense in Depth
10384-10952
Defense in Depth
10384-11497
Defense in Depth
10384-11498
Defense in Depth
10384-11563
Defense in Depth
10384-11568
Defense in Depth
10384-11569
Defense in Depth
10384-11570
Defense in Depth
10384-11571
Defense in Depth
10384-11453
Defense in Depth
10384-11454
Defense in Depth
10384-11583
Defense in Depth
10384-10729
Defense in Depth
10384-10735
Defense in Depth
10384-10852
Defense in Depth
10384-10853
Defense in Depth
10384-10816
Defense in Depth
10384-10481
Defense in Depth
10384-10482
Defense in Depth
10384-10484
Defense in Depth
10384-10378
Defense in Depth
10384-10483
Low
10384-10951
Low
10384-10952
Low
10384-11497
Low
10384-11498
Low
10384-11563
Low
10384-11568
Low
10384-11569
Low
10384-11570
Low
10384-11571
Low
10384-11453
Low
10384-11454
Low
10384-11583
Low
10384-10729
Low
10384-10735
Low
10384-10852
Low
10384-10853
Low
10384-10816
Low
10384-10481
Low
10384-10482
Low
10384-10484
Low
10384-10378
Low
10384-10483
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A
4489907
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489907
4480979
10384-10951
10384-10952
10384-11497
10384-11498
10384-11563
10384-11568
10384-11569
10384-11570
10384-11571
10384-11453
10384-11454
10384-11583
10384-10729
10384-10735
10384-10852
10384-10853
10384-10816
10384-10481
10384-10482
10384-10484
10384-10378
10384-10483
Yes
Security Update
<p>The following <a href="https://technet.microsoft.com/library/security/dn848375.aspx#Mitigation">mitigating factors</a> may be helpful in your situation:</p>
<ul>
<li>In a web-based attack scenario where the user is using Internet Explorer for the desktop, an attacker could host a website that contains a webpage that is used to exploit any of these vulnerabilities. In addition, compromised websites and websites that accept or host user-provided content or advertisements could contain specially crafted content that could exploit any of these vulnerabilities. In all cases, however, an attacker would have no way to force users to visit these websites. Instead, an attacker would have to convince users to visit the website, typically by getting them to click a link in an email message or instant message that takes users to the attacker's website.</li>
<li>Internet Explorer in the Windows 8-style UI will only play Flash content from sites listed on the Compatibility View (CV) list. This restriction requires an attacker to first compromise a website already listed on the CV list. An attacker could then host specially crafted Flash content designed to exploit any of these vulnerabilities through Internet Explorer and then convince a user to view the website. An attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically by clicking a link in an email message or in an instant message that takes users to the attacker's website, or by opening an attachment sent through email.</li>
<li>By default, all supported versions of Microsoft Outlook and Windows Live Mail open HTML email messages in the Restricted sites zone. The Restricted sites zone, which disables scripts and ActiveX controls, helps reduce the risk of an attacker being able to use any of these vulnerabilities to execute malicious code. If a user clicks a link in an email message, the user could still be vulnerable to exploitation of any of these vulnerabilities through the web-based attack scenario.</li>
<li>By default, Internet Explorer on Windows Server 2012 and Windows Server 2012 R2 runs in a restricted mode that is known as <a href="https://technet.microsoft.com/library/dd883248.aspx">Enhanced Security Configuration</a>. This mode can help reduce the likelihood of the exploitation of these Adobe Flash Player vulnerabilities in Internet Explorer.</li>
</ul>
<p>Workaround refers to a setting or configuration change that would help block known attack vectors before you apply the update.</p>
<p><strong>Prevent Adobe Flash Player from running</strong>
You can disable attempts to instantiate Adobe Flash Player in Internet Explorer and other applications that honor the kill bit feature, such as Office 2007 and Office 2010, by setting the kill bit for the control in the registry.</p>
<p><strong>Warning</strong> If you use Registry Editor incorrectly, you may cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that you can solve problems that result from using Registry Editor incorrectly. Use Registry Editor at your own risk.
To set the kill bit for the control in the registry, perform the following steps:</p>
<ol>
<li><p>Paste the following into a text file and save it with the .reg file extension.</p>
<pre><code> Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{D27CDB6E-AE6D-11CF-96B8-444553540000}]
"Compatibility Flags"=dword:00000400
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{D27CDB6E-AE6D-11CF-96B8-444553540000}]
"Compatibility Flags"=dword:00000400
</code></pre>
</li>
<li><p>Double-click the .reg file to apply it to an individual system.</p>
<p>You can also apply this workaround across domains by using Group Policy. For more information about Group Policy, see the TechNet article, Group Policy collection.</p>
</li>
</ol>
<p><strong>Note</strong> You must restart Internet Explorer for your changes to take effect.
<strong>Impact of workaround</strong>. There is no impact as long as the object is not intended to be used in Internet Explorer.
<strong>How to undo the workaround.</strong> Delete the registry keys that were added in implementing this workaround.
<strong>Prevent Adobe Flash Player from running in Internet Explorer through Group Policy</strong>
<strong>Note</strong> The Group Policy MMC snap-in can be used to set policy for a machine, for an organizational unit, or for an entire domain. For more information about Group Policy, visit the following Microsoft Web sites:</p>
<p><a href="https://technet.microsoft.com/library/hh831791">Group Policy Overview</a>
<a href="https://technet.microsoft.com/library/cc737816%28v=ws.10%29.aspx">What is Group Policy Object Editor?</a>
<a href="https://technet.microsoft.com/library/cc784165%28v=ws.10%29.aspx">Core Group Policy tools and settings</a></p>
<p>To disable Adobe Flash Player in Internet Explorer through Group Policy, perform the following steps:
<strong>Note</strong> This workaround does not prevent Flash from being invoked from other applications, such as Microsoft Office 2007 or Microsoft Office 2010.</p>
<ol>
<li>Open the Group Policy Management Console and configure the console to work with the appropriate Group Policy object, such as local machine, OU, or domain GPO.</li>
<li>Navigate to the following node:
<strong>Administrative Templates -> Windows Components -> Internet Explorer -> Security Features -> Add-on Management</strong></li>
<li>Double-click <strong>Turn off Adobe Flash in Internet Explorer and prevent applications from using Internet Explorer technology to instantiate Flash objects</strong>.</li>
<li>Change the setting to Enabled.</li>
<li>Click <strong>Apply</strong> and then click <strong>OK</strong> to return to the Group Policy Management Console.</li>
<li>Refresh Group Policy on all systems or wait for the next scheduled Group Policy refresh interval for the settings to take effect.
<strong>Prevent Adobe Flash Player from running in Office 2010 on affected systems</strong>
<strong>Note</strong> This workaround does not prevent Adobe Flash Player from running in Internet Explorer.
<strong>Warning</strong> If you use Registry Editor incorrectly, you may cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that you can solve problems that result from using Registry Editor incorrectly. Use Registry Editor at your own risk.
For detailed steps that you can use to prevent a control from running in Internet Explorer, see Microsoft Knowledge Base Article 240797. Follow the steps in the article to create a Compatibility Flags value in the registry to prevent a COM object from being instantiated in Internet Explorer.</li>
</ol>
<p>To disable Adobe Flash Player in Office 2010 only, set the kill bit for the ActiveX control for Adobe Flash Player in the registry using the following steps:</p>
<ol>
<li>Create a text file named Disable_Flash.reg with the following contents:</li>
</ol>
<pre><code> [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\Common\COM\Compatibility\{D27CDB6E-AE6D-11CF-96B8-444553540000}]
"Compatibility Flags"=dword:00000400
</code></pre>
<ol start="2">
<li>Double-click the .reg file to apply it to an individual system.</li>
<li><strong>Note</strong> You must restart Internet Explorer for your changes to take effect.
You can also apply this workaround across domains by using Group Policy. For more information about Group Policy, see the TechNet article, <a href="http://go.microsoft.com/fwlink/?LinkID=215719">Group Policy collection</a>.
<strong>Prevent ActiveX controls from running in Office 2007 and Office 2010</strong></li>
</ol>
<p>To disable all ActiveX controls in Microsoft Office 2007 and Microsoft Office 2010, including Adobe Flash Player in Internet Explorer, perform the following steps:</p>
<ol>
<li>Click File, click Options, click Trust Center, and then click Trust Center Settings.</li>
<li>Click ActiveX Settings in the left-hand pane, and then select Disable all controls without notifications.</li>
<li>Click OK to save your settings.
<strong>Impact of workaround</strong>. Office documents that use embedded ActiveX controls may not display as intended.
<strong>How to undo the workaround</strong>.</li>
</ol>
<p>To re-enable ActiveX controls in Microsoft Office 2007 and Microsoft Office 2010, perform the following steps:</p>
<ol>
<li>Click File, click Options, click Trust Center, and then click Trust Center Settings.</li>
<li>Click ActiveX Settings in the left-hand pane, and then deselect Disable all controls without notifications.</li>
<li>Click OK to save your settings.
<strong>Set Internet and Local intranet security zone settings to "High" to block ActiveX Controls and Active Scripting in these zones</strong>
You can help protect against exploitation of these vulnerabilities by changing your settings for the Internet security zone to block ActiveX controls and Active Scripting. You can do this by setting your browser security to High.</li>
</ol>
<p>To raise the browsing security level in Internet Explorer, perform the following steps:</p>
<ol>
<li>On the Internet Explorer <strong>Tools</strong> menu, click** Internet Option**s.</li>
<li>In the <strong>Internet Options</strong> dialog box, click the <strong>Security</strong> tab, and then click <strong>Internet</strong>.</li>
<li>Under <strong>Security level for this zone</strong>, move the slider to <strong>High</strong>. This sets the security level for all websites you visit to High.</li>
<li>Click <strong>Local intranet</strong>.</li>
<li>Under <strong>Security level for this zone</strong>, move the slider to <strong>High</strong>. This sets the security level for all websites you visit to High.</li>
<li>Click <strong>OK</strong> to accept the changes and return to Internet Explorer.
<strong>Note</strong> If no slider is visible, click <strong>Default Level</strong>, and then move the slider to <strong>High</strong>.
<strong>Note</strong> Setting the level to High may cause some websites to work incorrectly. If you have difficulty using a website after you change this setting, and you are sure the site is safe to use, you can add that site to your list of trusted sites. This will allow the site to work correctly even with the security setting set to High.
<strong>Impact of workaround</strong>. There are side effects to blocking ActiveX Controls and Active Scripting. Many websites on the Internet or an intranet use ActiveX or Active Scripting to provide additional functionality. For example, an online e-commerce site or banking site may use ActiveX Controls to provide menus, ordering forms, or even account statements. Blocking ActiveX Controls or Active Scripting is a global setting that affects all Internet and intranet sites. If you do not want to block ActiveX Controls or Active Scripting for such sites, use the steps outlined in "Add sites that you trust to the Internet Explorer Trusted sites zone".
<strong>Configure Internet Explorer to prompt before running Active Scripting or to disable Active Scripting in the Internet and Local intranet security zone</strong></li>
</ol>
<p>You can help protect against exploitation of these vulnerabilities by changing your settings to prompt before running Active Scripting or to disable Active Scripting in the Internet and Local intranet security zone. To do this, perform the following steps:</p>
<ol>
<li>In Internet Explorer, click <strong>Internet Options</strong> on the <strong>Tools</strong> menu.</li>
<li>Click the <strong>Security</strong> tab.</li>
<li>Click <strong>Internet</strong>, and then click <strong>Custom Level</strong>.</li>
<li>Under <strong>Settings</strong>, in the <strong>Scripting</strong> section, under <strong>Active Scripting</strong>, click <strong>Prompt</strong> or <strong>Disable</strong>, and then click <strong>OK</strong>.</li>
<li>Click <strong>Local intranet</strong>, and then click <strong>Custom Level</strong>.</li>
<li>Under <strong>Settings</strong>, in the <strong>Scripting</strong> section, under <strong>Active Scripting</strong>, click <strong>Prompt</strong> or <strong>Disable</strong>, and then click <strong>OK</strong>.</li>
<li>Click <strong>OK</strong> to return to Internet Explorer, and then click <strong>OK</strong> again.
<strong>Note</strong> Disabling Active Scripting in the Internet and Local intranet security zones may cause some websites to work incorrectly. If you have difficulty using a website after you change this setting, and you are sure the site is safe to use, you can add that site to your list of trusted sites. This will allow the site to work correctly.
<strong>Impact of workaround</strong>. There are side effects to prompting before running Active Scripting. Many websites that are on the Internet or on an intranet use Active Scripting to provide additional functionality. For example, an online e-commerce site or banking site may use Active Scripting to provide menus, ordering forms, or even account statements. Prompting before running Active Scripting is a global setting that affects all Internet and intranet sites. You will be prompted frequently when you enable this workaround. For each prompt, if you feel you trust the site that you are visiting, click <strong>Yes</strong> to run Active Scripting. If you do not want to be prompted for all these sites, use the steps outlined in "Add sites that you trust to the Internet Explorer Trusted sites zone".
<strong>Add sites that you trust to the Internet Explorer Trusted sites zone</strong>
After you set Internet Explorer to require a prompt before it runs ActiveX controls and Active Scripting in the Internet zone and in the Local intranet zone, you can add sites that you trust to the Internet Explorer Trusted sites zone. This will allow you to continue to use trusted websites exactly as you do today, while helping to protect you from this attack on untrusted sites. We recommend that you add only sites that you trust to the Trusted sites zone.</li>
</ol>
<p>To do this, perform the following steps:</p>
<ol>
<li>In Internet Explorer, click <strong>Tools</strong>, click <strong>Internet Options</strong>, and then click the <strong>Security</strong> tab.</li>
<li>In the <strong>Select a web content zone to specify its current security settings</strong> box, click <strong>Trusted Sites</strong>, and then click <strong>Sites</strong>.</li>
<li>If you want to add sites that do not require an encrypted channel, click to clear the <strong>Require server verification (https:) for all sites in this zone</strong> check box.</li>
<li>In the <strong>Add this website to the zone</strong> box, type the URL of a site that you trust, and then click <strong>Add</strong>.</li>
<li>Repeat these steps for each site that you want to add to the zone.</li>
<li>Click <strong>OK</strong> two times to accept the changes and return to Internet Explorer.
<strong>Note</strong> Add any sites that you trust not to take malicious action on your system. Two sites in particular that you may want to add are *<strong>.windowsupdate.microsoft.com</strong> and *<strong>.update.microsoft.com</strong>. These are the sites that will host the update, and they require an ActiveX control to install the update.</li>
</ol>
1.0
2019-03-12T07:00:00Z
<p>Information published.</p>
Azure Linux Agent Information Disclosure Vulnerability
<p>An information disclosure vulnerability exists in the way Azure WaLinuxAgent creates swap files on resource disks. An authenticated attacker who successfully exploited this vulnerability could view data in swap that is normally hidden.</p>
<p>None of the Azure endorsed <a href="https://docs.microsoft.com/en-us/azure/virtual-machines/linux/endorsed-distros">distros</a> are vulnerable to this issue by default, but this can occur on customer customized or modified images when swapfile is created by the Azure linux agent and python3 is enabled as the default python version.</p>
<p>This update addresses this vulnerability by preventing how the swap information is accessed.</p>
<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>
<p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is Kernel memory read - unintentional read access to memory contents in kernel space from a user mode process.</p>
Azure
CVE-2019-0804
11643
Information Disclosure
11643
Important
11643
Publicly Disclosed:No;Exploited:No;DOS:N/A
Release Notes
https://github.com/Azure/WALinuxAgent/releases/tag/v2.2.38
11643
Maybe
Security Update
<p>To mitigate this issue, validate whether the swapfile exists and if so, make sure it is secured by setting its access permissions to root only by executing the following command as root:</p>
<p><code>sudo chmod 600 /mnt/resource/swapfile</code></p>
<p>or</p>
<p><code>sudo chmod 600 /mnt/swapfile </code></p>
<p>depending on the specific distro.</p>
<p>Please also refer to your specific OS distro advisory for further details and additional mitigation options.</p>
Francis McBratney with Destinatech Limited
1.1
2019-03-20T07:00:00Z
<p>Added details to the vulnerability description and added a mitigation. This is an informational change only.</p>
1.0
2019-03-14T07:00:00Z
<p>Information published.</p>
Visual Studio Remote Code Execution Vulnerability
<p>A remote code execution vulnerability exists when the Visual Studio C++ Redistributable Installer improperly validates input before loading dynamic link library (DLL) files. An attacker who successfully exploited the vulnerability could execute arbitrary code in the context of the current user. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.</p>
<p>To exploit the vulnerability, an attacker must place a malicious DLL on a local system and convince a user to execute a specific executable.</p>
<p>The security update addresses the vulnerability by correcting how the Visual Studio C++ Redistributable Installer validates input before loading DLL files.</p>
Visual Studio
CVE-2019-0809
11600
Remote Code Execution
11600
Important
11600
Publicly Disclosed:Yes;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
Release Notes
https://visualstudio.microsoft.com/downloads/
11600
Maybe
Security Update
1.0
2019-03-12T07:00:00Z
<p>Information published.</p>
Windows SMB Information Disclosure Vulnerability
<p>An information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests. An authenticated attacker who successfully exploited this vulnerability could craft a special packet, which could lead to information disclosure from the server.</p>
<p>To exploit the vulnerability, an attacker would have to be able to authenticate and send SMB messages to an impacted Windows SMB Server</p>
<p>The security update addresses the vulnerability by correcting how Windows SMB Server handles authenticated requests.</p>
<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>
<p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is memory layout - the vulnerability allows an attacker to collect information that facilitates predicting addressing of the memory.</p>
Windows SMB Server
CVE-2019-0821
10951
10952
11497
11498
11499
11568
11569
11570
11571
11572
11453
11454
11466
10729
10735
10852
10853
10816
10855
10047
10048
10481
10482
10484
9312
10287
9311
9318
9344
10050
10051
10049
10378
10379
10483
10543
11563
11583
Information Disclosure
10951
Information Disclosure
10952
Information Disclosure
11497
Information Disclosure
11498
Information Disclosure
11499
Information Disclosure
11568
Information Disclosure
11569
Information Disclosure
11570
Information Disclosure
11571
Information Disclosure
11572
Information Disclosure
11453
Information Disclosure
11454
Information Disclosure
11466
Information Disclosure
10729
Information Disclosure
10735
Information Disclosure
10852
Information Disclosure
10853
Information Disclosure
10816
Information Disclosure
10855
Information Disclosure
10047
Information Disclosure
10048
Information Disclosure
10481
Information Disclosure
10482
Information Disclosure
10484
Information Disclosure
9312
Information Disclosure
10287
Information Disclosure
9311
Information Disclosure
9318
Information Disclosure
9344
Information Disclosure
10050
Information Disclosure
10051
Information Disclosure
10049
Information Disclosure
10378
Information Disclosure
10379
Information Disclosure
10483
Information Disclosure
10543
Information Disclosure
11563
Information Disclosure
11583
Important
10951
Important
10952
Important
11497
Important
11498
Important
11499
Important
11568
Important
11569
Important
11570
Important
11571
Important
11572
Important
11453
Important
11454
Important
11466
Important
10729
Important
10735
Important
10852
Important
10853
Important
10816
Important
10855
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9311
Important
9318
Important
9344
Important
10050
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Important
11563
Important
11583
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10951
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10952
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11497
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11498
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11499
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11568
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11569
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11570
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11571
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11572
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11453
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11454
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11466
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10729
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10735
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10852
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10853
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10816
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10855
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10047
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10048
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10481
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10482
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10484
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9312
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10287
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9311
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9318
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9344
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10050
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10051
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10049
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10378
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10379
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10483
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10543
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11563
6.5
5.9
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
11583
4489871
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489871
4487020
10951
10952
Yes
Security Update
4489868
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489868
4487017
11497
11498
11499
11563
Yes
Security Update
4489899
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489899
4487044
11568
11569
11570
11571
11572
Yes
Security Update
4489899
https://support.microsoft.com/help/4489899
11568
11569
11570
11571
11572
4489886
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489886
4486996
11453
11454
11466
11583
Yes
Security Update
4489872
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489872
4487018
10729
10735
Yes
Security Update
4489872
https://support.microsoft.com/help/4489872
10729
10735
4489882
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489882
4487026
10852
10853
10816
10855
Yes
Security Update
4489882
https://support.microsoft.com/help/4489882
10852
10853
10816
10855
4489878
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489878
4486563
10047
10048
10050
10051
10049
Yes
Monthly Rollup
4489878
https://support.microsoft.com/help/4489878
10047
10048
10050
10051
10049
4489885
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489885
10047
10048
10050
10051
10049
Yes
Security Only
4489885
https://support.microsoft.com/help/4489885
10047
10048
10050
10051
10049
4489881
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489881
4487000
10481
10482
10484
10483
10543
Yes
Monthly Rollup
4489881
https://support.microsoft.com/help/4489881
10481
10482
10484
10483
10543
4489883
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489883
10481
10482
10483
10543
Security Only
4489883
https://support.microsoft.com/help/4489883
10481
10482
10483
10543
4489880
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489880
4487023
9312
10287
9311
9318
9344
Yes
Monthly Rollup
4489876
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489876
4487019
9312
10287
9311
9318
9344
Yes
Security Only
4489891
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489891
4487025
10378
10379
Yes
Monthly Rollup
4489891
https://support.microsoft.com/help/4489891
10378
10379
4489884
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4489884
10378
10379
Yes
Security Only
4489884
https://support.microsoft.com/help/4489884
10378
10379
1.0
2019-03-12T07:00:00Z
<p>Information published.</p>