Patch Tuesday, September 2019 Edition
Summary: Microsoft released security updates for about 80 vulnerabilities across its Windows operating systems and related software, assigning a critical rating to almost a quarter of them. Two of the patched bugs, CVE-2019-1214 and CVE-2019-1215, are privilege escalation flaws in all supported Windows versions that have already been exploited in the wild.
Key Takeaway: Two of this month's flaws are already being exploited to gain administrator rights, and September marks the fourth time this year Microsoft has patched critical Remote Desktop Protocol flaws - a service attackers keep returning to.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2019-1214CVE-2019-1215
- Related
- CVE-2019-1214: Microsoft Windows Privilege Common Log File System (CLFS) Escalation Vulnerability Known Exploited Vulnerabilities · Nov 03, 2021CVE-2019-1215: Microsoft Windows Privilege Escalation Vulnerability Known Exploited Vulnerabilities · Nov 03, 2021Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026