Microsoft Patch Tuesday, June 2019 Edition
Summary: Microsoft released updates fixing 88 security vulnerabilities in Windows and related software, including four privilege escalation flaws with existing exploit code: CVE-2019-1064 and CVE-2019-1069 affecting Windows 10 and later, and CVE-2019-1053 and CVE-2019-0973 affecting all supported Windows versions. A memory corruption bug in Microsoft Word (CVE-2019-1034 and CVE-2019-1035) affects all versions on Windows and Mac plus Office 365 and can be triggered by a malicious document or link, while Microsoft says it has seen no exploitation against any of the 88 bugs.
Key Takeaway: Four of the patched flaws already had public exploit code before this week's fixes, and Recorded Future's Allan Liska notes that if the Word vulnerability is reverse engineered it could be widely exploited - a document format cybercriminals already favor.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2019-0973CVE-2019-1034CVE-2019-1035CVE-2019-1053CVE-2019-1064CVE-2019-1069
- Related
- CVE-2019-1064: Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability Known Exploited Vulnerabilities · Mar 15, 2022CVE-2019-1069: Microsoft Task Scheduler Privilege Escalation Vulnerability Known Exploited Vulnerabilities · Mar 15, 2022Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026