Archive

10 December 2019

Vulnerabilities first published on this day (UTC), newest first.

← November 2019 2019 / December /10 January 2020 →

All Critical High Medium Low Exploited only Public exploit

100 results · Feed

Unscored —

CVE-2019-19604

Arbitrary command execution is possible in Git before 2.20.2, 2.21.x before 2.21.1, 2.22.x before 2.22.2, 2.23.x before…

git git Debian Alpine

Dec 10, 2019
Medium 5.3

CVE-2019-14861

All Samba versions 4.x.x before 4.9.17, 4.10.x before 4.10.11 and 4.11.x before 4.11.3 have an issue, where the (poorly…

Red Hat samba samba samba Debian Ubuntu Alpine

Dec 10, 2019
Unscored —

CVE-2019-1490

A spoofing vulnerability exists when a Skype for Business Server does not properly sanitize a specially crafted request…

Microsoft Skype for Business Server 2019 CU2

Dec 10, 2019
Unscored —

CVE-2019-1489

An information disclosure vulnerability exists when the Windows Remote Desktop Protocol (RDP) fails to properly handle …

Microsoft Microsoft Windows XP Service Pack 3 Windows

Dec 10, 2019
Unscored —

CVE-2019-1487

An information disclosure vulnerability in Android Apps using Microsoft Authentication Library (MSAL) 0.3.1-Alpha or la…

Microsoft Microsoft Authentication Library (MSAL) for Android Android

Dec 10, 2019
Unscored —

CVE-2019-1488

A security feature bypass vulnerability exists when Microsoft Defender improperly handles specific buffers, aka 'Micros…

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows

Dec 10, 2019
Unscored —

CVE-2019-1485

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScri…

Microsoft Internet Explorer 11 Internet Explorer 9 Internet Explorer 10 Windows

Dec 10, 2019
Unscored —

CVE-2019-1486

A spoofing vulnerability exists in Visual Studio Live Share when a guest connected to a Live Share session is redirecte…

Microsoft Microsoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3) Microsoft Visual Studio 2019 Microsoft Visual Studio Live Share extension

Dec 10, 2019
Unscored —

CVE-2019-1481 EPSS 17%

An information disclosure vulnerability exists in Windows Media Player when it fails to properly handle objects in memo…

Microsoft Windows Windows

Dec 10, 2019
Unscored —

CVE-2019-1484

A remote code execution vulnerability exists when Microsoft Windows OLE fails to properly validate user input, aka 'Win…

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows

Dec 10, 2019
Unscored —

CVE-2019-1483

An elevation of privilege vulnerability exists when the Windows AppX Deployment Server improperly handles junctions.To …

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows

Dec 10, 2019
Unscored —

CVE-2019-1478

An elevation of privilege vulnerability exists when Windows improperly handles COM object creation, aka 'Windows COM Se…

Microsoft Windows Windows Server Windows

Dec 10, 2019
Unscored —

CVE-2019-1480

An information disclosure vulnerability exists in Windows Media Player when it fails to properly handle objects in memo…

Microsoft Windows Windows

Dec 10, 2019
Unscored —

CVE-2019-1477

An elevation of privilege vulnerability exists when the Windows Printer Service improperly validates file paths while l…

Microsoft Windows Windows Server Windows

Dec 10, 2019
Unscored —

CVE-2019-1476 Public exploit

An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard l…

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows

Dec 10, 2019
Unscored —

CVE-2019-1471

A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input fro…

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows Server, version 1909 (Server Core installation) Windows

Dec 10, 2019
Unscored —

CVE-2019-1474

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windo…

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows

Dec 10, 2019
Unscored —

CVE-2019-1472

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windo…

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows

Dec 10, 2019
Unscored —

CVE-2019-1470

An information disclosure vulnerability exists when Windows Hyper-V on a host operating system fails to properly valida…

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows Server, version 1909 (Server Core installation) Windows

Dec 10, 2019
Unscored —

CVE-2019-1469

An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'W…

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows

Dec 10, 2019
Unscored —

CVE-2019-1467

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its …

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows

Dec 10, 2019
Unscored —

CVE-2019-1468 EPSS 18%

A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedde…

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows

Dec 10, 2019
Unscored —

CVE-2019-1465

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its …

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows

Dec 10, 2019
Unscored —

CVE-2019-1466

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its …

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows

Dec 10, 2019
Unscored —

CVE-2019-1464

An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, ak…

Microsoft Microsoft Office Office 365 ProPlus Microsoft Excel

Dec 10, 2019
Unscored —

CVE-2019-1463

An information disclosure vulnerability exists in Microsoft Access software when the software fails to properly handle …

Microsoft Microsoft Office Office 365 ProPlus

Dec 10, 2019
Unscored —

CVE-2019-1462 EPSS 18%

A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handl…

Microsoft Microsoft Office Office 365 ProPlus Microsoft PowerPoint

Dec 10, 2019
Unscored —

CVE-2019-1461

A denial of service vulnerability exists in Microsoft Word software when the software fails to properly handle objects …

Microsoft Microsoft Office Office 365 ProPlus Microsoft Word

Dec 10, 2019
High 7.8

CVE-2019-1458 Exploited · Ransomware Public exploit EPSS 74%

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…

Microsoft Windows Windows Server Windows

Dec 10, 2019
KEV Jan 10, 2022
Unscored —

CVE-2019-1332 Public exploit EPSS 11%

A cross-site scripting (XSS) vulnerability exists when Microsoft SQL Server Reporting Services (SSRS) does not properly…

Microsoft Power BI Report Server SQL Server 2019 Reporting Services SQL Server 2017 Reporting Services

Dec 10, 2019
Unscored —

CVE-2019-1453

A denial of service vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connects to the target syste…

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows

Dec 10, 2019
Unscored —

CVE-2019-1400

An information disclosure vulnerability exists in Microsoft Access software when the software fails to properly handle …

Microsoft Microsoft Office Office 365 ProPlus

Dec 10, 2019
Unscored —

CVE-2019-13762

Insufficient policy enforcement in downloads in Google Chrome on Windows prior to 79.0.3945.79 allowed a local attacker…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu

Dec 10, 2019
Unscored —

CVE-2019-13763

Insufficient policy enforcement in payments in Google Chrome prior to 79.0.3945.79 allowed a remote attacker who had co…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu

Dec 10, 2019
Unscored —

CVE-2019-13764 Public exploit

Type confusion in JavaScript in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit he…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu

Dec 10, 2019
Unscored —

CVE-2019-13759

Incorrect security UI in interstitials in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to perform doma…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu

Dec 10, 2019
Unscored —

CVE-2019-13761

Incorrect security UI in Omnibox in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to perform domain spo…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu

Dec 10, 2019
Unscored —

CVE-2019-13758

Insufficient policy enforcement in navigation in Google Chrome on Android prior to 79.0.3945.79 allowed a remote attack…

Google Chrome chromium Browsers Debian

Dec 10, 2019
Unscored —

CVE-2019-13757

Incorrect security UI in Omnibox in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to perform domain spo…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu

Dec 10, 2019
Unscored —

CVE-2019-13755

Insufficient policy enforcement in extensions in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to disab…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu

Dec 10, 2019