Microsoft Patch Tuesday — October 2019
Tuesday, 8 October 2019
- Vulnerabilities
- 60
- Critical
- 0
- High
- 6
- Zero-days
- 0
- Public exploit
- 8
Exploited 2
Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.
-
High 7.8
CVE-2019-1322 Exploited Public exploit An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka 'Microsoft Windows Elevation of Privilege Vulnerabi…EPSS 19%
-
High 7.8
CVE-2019-1315 Exploited Public exploit An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles hard links, aka 'Windows Error Reporting Manager Elevati…EPSS 3.5%
Public exploit code 6
Not critical and not yet seen exploited, but exploit or proof-of-concept code is public.
-
Unscored
CVE-2019-1343 Public exploit A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Service Vulnerability'. This CVE ID is uniqu…EPSS 11%
-
Unscored
CVE-2019-1344 Public exploit An information disclosure vulnerability exists in the way that the Windows Code Integrity Module handles objects in memory, aka 'Windows Code Integrity Module …EPSS 3.1%
-
Unscored
CVE-2019-1345 Public exploit An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnera…EPSS 3%
-
Unscored
CVE-2019-1346 Public exploit A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Service Vulnerability'. This CVE ID is uniqu…EPSS 11%
-
Unscored
CVE-2019-1347 Public exploit A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Service Vulnerability'. This CVE ID is uniqu…EPSS 15%
-
Unscored
CVE-2019-1364 Public exploit An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka 'Win32k Elevation…EPSS 2.9%
All vulnerabilities 60
High6 ShowHide
-
High 7.8
CVE-2019-1322 Exploited Public exploit An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka 'Microsoft Windows Elevation of Privilege Vulnerabi…EPSS 19%
-
High 7.8
CVE-2019-1315 Exploited Public exploit An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles hard links, aka 'Windows Error Reporting Manager Elevati…EPSS 3.5%
- High 7.5 EPSS 10%
- High 7.5 EPSS 10%
- High 7.5 EPSS 9.9%
- High 7.5 EPSS 9.9%
Unscored54 ShowHide
-
Unscored
CVE-2019-1343 Public exploit A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Service Vulnerability'. This CVE ID is uniqu…EPSS 11%
-
Unscored
CVE-2019-1344 Public exploit An information disclosure vulnerability exists in the way that the Windows Code Integrity Module handles objects in memory, aka 'Windows Code Integrity Module …EPSS 3.1%
-
Unscored
CVE-2019-1345 Public exploit An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnera…EPSS 3%
-
Unscored
CVE-2019-1346 Public exploit A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Service Vulnerability'. This CVE ID is uniqu…EPSS 11%
-
Unscored
CVE-2019-1347 Public exploit A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Service Vulnerability'. This CVE ID is uniqu…EPSS 15%
-
Unscored
CVE-2019-1364 Public exploit An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka 'Win32k Elevation…EPSS 2.9%
-
Unscored
CVE-2019-0608 A spoofing vulnerability exists when Microsoft Browsers does not properly parse HTTP content, aka 'Microsoft Browser Spoofing Vulnerability'. This CVE ID is un…EPSS 2.4%
-
Unscored
CVE-2019-1060 A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code Execution Vulnerab…EPSS 14%
-
Unscored
CVE-2019-1070 A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected Sh…EPSS 1.5%
-
Unscored
CVE-2019-1166 A tampering vulnerability exists in Microsoft Windows when a man-in-the-middle attacker is able to successfully bypass the NTLM MIC (Message Integrity Check) p…EPSS 68%
-
Unscored
CVE-2019-1230 An information disclosure vulnerability exists when the Windows Hyper-V Network Switch on a host operating system fails to properly validate input from an auth…EPSS 5.8%
-
Unscored
CVE-2019-1238 A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'.…EPSS 5.9%
-
Unscored
CVE-2019-1239 A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'.…EPSS 7.5%
-
Unscored
CVE-2019-1311 A remote code execution vulnerability exists when the Windows Imaging API improperly handles objects in memory, aka 'Windows Imaging API Remote Code Execution …EPSS 36%
-
Unscored
CVE-2019-1313 An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when it improperly enforces permissions, aka 'SQL Server Manage…EPSS 5.3%
- Unscored
-
Unscored
CVE-2019-1316 An elevation of privilege vulnerability exists in Microsoft Windows Setup when it does not properly handle privileges, aka 'Microsoft Windows Setup Elevation o…EPSS 1.1%
-
Unscored
CVE-2019-1317 A denial of service vulnerability exists when Windows improperly handles hard links, aka 'Microsoft Windows Denial of Service Vulnerability'.EPSS 1%
-
Unscored
CVE-2019-1318 A spoofing vulnerability exists when Transport Layer Security (TLS) accesses non- Extended Master Secret (EMS) sessions, aka 'Microsoft Windows Transport Layer…EPSS 3.5%
- Unscored
-
Unscored
CVE-2019-1320 An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka 'Microsoft Windows Elevation of Privilege Vulnerabi…EPSS 1.1%
- Unscored
- Unscored
-
Unscored
CVE-2019-1325 An elevation of privilege vulnerability exists in the Windows redirected drive buffering system (rdbss.sys) when the operating system improperly handles specif…EPSS 1.4%
-
Unscored
CVE-2019-1326 A denial of service vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connects to the target system using RDP and sends specially crafted …EPSS 6.5%
-
Unscored
CVE-2019-1327 A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Rem…EPSS 14%
-
Unscored
CVE-2019-1328 A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, a…EPSS 1.5%
-
Unscored
CVE-2019-1329 An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected Share…EPSS 1.5%
-
Unscored
CVE-2019-1330 An elevation of privilege vulnerability exists in Microsoft SharePoint, aka 'Microsoft SharePoint Elevation of Privilege Vulnerability'. This CVE ID is unique …EPSS 2.6%
-
Unscored
CVE-2019-1331 A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Rem…EPSS 20%
-
Unscored
CVE-2019-1333 A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote…EPSS 16%
-
Unscored
CVE-2019-1334 An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnera…EPSS 2.3%
- Unscored
-
Unscored
CVE-2019-1337 An information disclosure vulnerability exists when Windows Update Client fails to properly handle objects in memory, aka 'Windows Update Client Information Di…EPSS 2.2%
-
Unscored
CVE-2019-1338 A security feature bypass vulnerability exists in Microsoft Windows when a man-in-the-middle attacker is able to successfully bypass the NTLMv2 protection if a…EPSS 3.6%
-
Unscored
CVE-2019-1339 An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles hard links, aka 'Windows Error Reporting Manager Elevati…EPSS 1.3%
-
Unscored
CVE-2019-1340 An elevation of privilege vulnerability exists in Windows AppX Deployment Server that allows file creation in arbitrary locations.To exploit the vulnerability,…EPSS 1.1%
-
Unscored
CVE-2019-1341 An elevation of privilege vulnerability exists when umpo.dll of the Power Service, improperly handles a Registry Restore Key function, aka 'Windows Power Servi…EPSS 1.1%
-
Unscored
CVE-2019-1342 An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles a process crash, aka 'Windows Error Reporting Manager El…EPSS 1.2%
-
Unscored
CVE-2019-1356 An information disclosure vulnerability exists when Microsoft Edge based on Edge HTML improperly handles objects in memory, aka 'Microsoft Edge based on Edge H…EPSS 6.2%
-
Unscored
CVE-2019-1357 A spoofing vulnerability exists when Microsoft Browsers improperly handle browser cookies, aka 'Microsoft Browser Spoofing Vulnerability'. This CVE ID is uniqu…EPSS 2.3%
-
Unscored
CVE-2019-1358 A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Ex…EPSS 76%
-
Unscored
CVE-2019-1359 A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Ex…EPSS 19%
-
Unscored
CVE-2019-1361 An information disclosure vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka 'Microsoft Graphics Components Infor…EPSS 6.9%
-
Unscored
CVE-2019-1362 An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka 'Win32k Elevation…EPSS 1.5%
-
Unscored
CVE-2019-1363 An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, allowing an attacker to r…EPSS 2.2%
-
Unscored
CVE-2019-1365 An elevation of privilege vulnerability exists when Microsoft IIS Server fails to check the length of a buffer prior to copying memory to it.An attacker who su…EPSS 4.4%
-
Unscored
CVE-2019-1368 A security feature bypass exists when Windows Secure Boot improperly restricts access to debugging functionality, aka 'Windows Secure Boot Security Feature Byp…EPSS 1.4%
-
Unscored
CVE-2019-1369 An information disclosure vulnerability exists when affected Open Enclave SDK versions improperly handle objects in memory, aka 'Open Enclave SDK Information D…EPSS 2.1%
-
Unscored
CVE-2019-1371 A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka 'Internet Explorer Memory Corruption Vulnerabili…EPSS 7.4%
-
Unscored
CVE-2019-1372 An remote code execution vulnerability exists when Azure App Service/ Antares on Azure Stack fails to check the length of a buffer prior to copying memory to i…EPSS 19%
-
Unscored
CVE-2019-1375 A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected…EPSS 1.6%
-
Unscored
CVE-2019-1376 An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when it improperly enforces permissions, aka 'SQL Server Manage…EPSS 5.4%
-
Unscored
CVE-2019-1378 An elevation of privilege vulnerability exists in Windows 10 Update Assistant in the way it handles permissions.A locally authenticated attacker could run arbi…EPSS 1.3%