Patch Tuesday, November 2019 Edition
Summary: Microsoft's November 2019 Patch Tuesday fixed at least 74 weaknesses in Windows and related software, including a zero-day in Internet Explorer (CVE-2019-1429) already being exploited in the wild and a flaw in Office for Mac (CVE-2019-1457) that lets older macro types run without prompting even when macros are disabled. More than a dozen flaws were rated critical, and Microsoft also patched nine vulnerabilities in Windows Hyper-V, five of them critical.
Key Takeaway: One of the 74 flaws is an Internet Explorer zero-day under active exploitation, and the Office for Mac bug means a documented 'disable all macros' setting does not stop the older macro type from executing. Windows 7, Server 2008 and 2008 R2 stop receiving security updates after January 2020, leaving any remaining endpoints without fixes for flaws like these.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2019-13720CVE-2019-1429CVE-2019-1457
- Related
- CVE-2019-13720: Google Chrome Web Audio Use-After-Free Vulnerability Known Exploited Vulnerabilities · May 23, 2022CVE-2019-1429: Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability Known Exploited Vulnerabilities · Nov 03, 2021