Microsoft Patch Tuesday — Nov. 2019: Vulnerability disclosures and Snort coverage

Summary: Microsoft's November 2019 Patch Tuesday disclosed 75 vulnerabilities, 13 rated critical and the rest important, spanning the Scripting Engine, Windows Hyper-V and Win32. Cisco Talos discovered CVE-2019-1448, a remote code execution flaw in Microsoft Excel, and also disclosed an RCE in Microsoft Media Foundation, while Hyper-V bugs CVE-2019-0721, CVE-2019-1389, CVE-2019-1397 and CVE-2019-1398 could let an authenticated guest user run a crafted application to escape the hypervisor or a sandbox.
What's compelling: Four of the critical flaws are hypervisor escapes reachable by an authenticated user on a guest OS, which puts the boundary between tenant workloads and the host itself in scope for this patch cycle.

Read the original at Cisco Talos ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2019-0721 CVE-2019-1020 CVE-2019-1389 CVE-2019-1390 CVE-2019-1397 CVE-2019-1398 CVE-2019-1426 CVE-2019-1427 CVE-2019-1428 CVE-2019-1429 CVE-2019-1448
Related: CVE-2019-1429: Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability Known Exploited Vulnerabilities · Nov 03, 2021
Patch Tuesday, November 2019 Edition Cyber Risks ·
Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026