Microsoft Patch Tuesday — Dec. 2019: Vulnerability disclosures and Snort coverage
Summary: Microsoft's December 2019 Patch Tuesday disclosed 25 vulnerabilities, two rated critical, affecting products including Remote Desktop Protocol, Hyper-V and multiple Office products, and Cisco Talos released Snort rules 52402, 52403, 52410, 52411, 52419 and 52420 to cover some of them. The entry details CVE-2019-1468 (remote code execution in the Windows font library via malicious embedded fonts), CVE-2019-1471 (Hyper-V input validation failure letting a guest OS run code on the host), CVE-2019-1458 (Win32k elevation of privilege that Microsoft reports has been used in the wild), CVE-2019-1469 (Win32k information disclosure) and CVE-2019-1485 (VBScript engine remote code execution triggered through Internet Explorer).
Key Takeaway: One of the 25 flaws, CVE-2019-1458 in Win32k, was already being exploited in the wild at disclosure, and CVE-2019-1471 lets an authenticated guest operating system execute arbitrary code on the Hyper-V host itself.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2019-1458CVE-2019-1468CVE-2019-1469CVE-2019-1471CVE-2019-1485
- Related
- Patch Tuesday, December 2019 Edition Cyber Risks ·CVE-2019-1458: Microsoft Win32k Privilege Escalation Vulnerability Known Exploited Vulnerabilities · Jan 10, 2022Microsoft Patch Tuesday, January 2021 Edition Cyber Risks ·