Patch Tuesday Lowdown, July 2019 Edition
Summary: Microsoft released updates fixing 77 security holes in Windows and related software, including two zero-day flaws actively exploited in the wild and four other bugs publicly detailed before the patch. The most severe enterprise issue is CVE-2019-0785, a Windows DHCP server flaw in Server 2012 through Server 2019 that lets an unauthenticated attacker seize remote control by sending a crafted data packet.
Bottom line: This is the fifth time this year Microsoft has patched a critical flaw in the Windows DHCP component, and the two zero-days (CVE-2019-1132 on Windows 7 and Server 2008, CVE-2019-0880 on Windows 8.1 and Server 2012 and later) are already being exploited, so the window for unpatched systems is not theoretical.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2019-0785CVE-2019-0865CVE-2019-0880CVE-2019-0887CVE-2019-1132
- Related
- CVE-2019-0880: Microsoft Windows Privilege Escalation Vulnerability Known Exploited Vulnerabilities · May 23, 2022CVE-2019-1132: Microsoft Win32k Privilege Escalation Vulnerability Known Exploited Vulnerabilities · Mar 15, 2022Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026