Patch Tuesday Lowdown, October 2019 Edition

Summary: Microsoft's October 2019 Patch Tuesday fixed almost five dozen security problems in Windows and software running on it, with only about 15 percent rated critical. The roundup also folded in a fix for the Internet Explorer zero-day CVE-2019-1367 that Microsoft shipped as an emergency update in the third week of September, which had caused printer errors for some users, and addressed a pair of critical Excel flaws in versions 2010-2019 for Mac and Windows and Office 365 that could install malware when a user opens a booby-trapped file.
What you should know: The IE zero-day was already being exploited in the wild before a fix existed, and the patch for pre-Windows 10 systems has to be manually downloaded and installed rather than arriving automatically. The Excel flaws need only a user to open a malicious file, so the exposure sits in email attachments and shared documents rather than in anything an attacker has to break into.

Read the original at Krebs on Security ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2019-1367
Related: CVE-2019-1367: Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability Known Exploited Vulnerabilities · Nov 03, 2021
Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026