Patch Tuesday, August 2019 Edition

Summary: Microsoft released patches for 93 vulnerabilities in Windows and related software in August 2019, including 35 affecting Server versions and 70 applying to Windows 10, with no zero-day flaws fixed. Among the fixes were four flaws in Remote Desktop Service, two of which (CVE-2019-1181 and CVE-2019-1182) Microsoft described as 'wormable' and comparable to BlueKeep.
Key Takeaway: Qualys said it is highly likely at least one of the wormable Remote Desktop flaws will be quickly weaponized, and this marks the fourth time in 2019 Microsoft has had to fix critical Remote Desktop issues - a particular exposure for enterprises that have enabled the service, since it is disabled by default in Windows 10.

Read the original at Krebs on Security ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2019-1181 CVE-2019-1182
Related: Microsoft Patch Tuesday — Aug. 2019: Vulnerability disclosures and Snort coverage Cyber Risks ·
The latest on Blue Keep and Deja Blue vulnerabilities — Using Firepower to defend against encrypted Deja Blue Cyber Risks ·
Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026