Forest Global Training Partners

Cyber Risks · Cisco Talos

Microsoft Patch Tuesday — Aug. 2019: Vulnerability disclosures and Snort coverage

Summary: Microsoft's August 2019 Patch Tuesday disclosed 97 vulnerabilities, of which 31 are rated critical, 65 important and one moderate, spanning graphics components, Outlook and the Chakra Scripting Engine. Two of the critical bugs, CVE-2019-1181 and CVE-2019-1182, are remote code execution flaws in Remote Desktop Protocol that require no user interaction and no authentication, letting an attacker execute arbitrary code by sending specially crafted requests.

What's compelling: These RDP flaws need no credentials and no user action, and they arrive in the same protocol that carried BlueKeep - a wormable bug Microsoft says has yet to be exploited in the wild, which means the window before someone weaponizes this class of bug is the only thing standing between you and it.

Read the original at Cisco Talos ↗

Topics
Vulnerabilities & Patching
Mentions
CVE-2019-1181CVE-2019-1182CVE-2019-1185CVE-2019-1200CVE-2019-9506
Related