Patch Tuesday, March 2019 Edition
Summary: Microsoft released updates fixing more than six dozen security vulnerabilities across Windows, Internet Explorer, Edge, Office and Sharepoint, with roughly one-quarter of the flaws remotely exploitable without user help. The batch addressed a Kaspersky Lab-reported zero-day (CVE-2019-0797) used to install malware and a Windows 7 and Windows Server 2008 zero-day (CVE-2019-0808) chained with a Chrome flaw (CVE-2019-5786) to drop malicious code.
Why it matters: Two zero-days in this batch were already being exploited in the wild, and the Windows flaw was chained with a Chrome bug to deliver malware - meaning patching one side of that chain leaves the other exposed.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2019-0797CVE-2019-0808CVE-2019-5786
- Related
- CVE-2019-5786: Google Chrome Blink Use-After-Free Vulnerability Known Exploited Vulnerabilities · May 23, 2022CVE-2019-0808: Microsoft Win32k Privilege Escalation Vulnerability Known Exploited Vulnerabilities · Nov 03, 2021CVE-2019-0797: Microsoft Win32k Privilege Escalation Vulnerability Known Exploited Vulnerabilities · Nov 03, 2021