Patch Tuesday, February 2019 Edition
Summary: Microsoft released February 2019 patches covering at least 70 distinct security vulnerabilities in Windows and related software, 20 of them rated critical. The batch includes a Google-discovered Internet Explorer zero-day (CVE-2019-0676) already used in attacks, a Windows DHCP client flaw (CVE-2019-0626) exploitable via a crafted DHCP request, and a publicly disclosed Exchange bug (CVE-2019-0686) that Microsoft says it expects to be exploited soon.
What's compelling: An Exchange flaw that lets someone on the same network read other users' inboxes is patched but not yet seen exploited - Microsoft's own assessment is that exploitation is likely soon, which puts a clock on internal rollout rather than the usual wait-and-see.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2019-0626CVE-2019-0676CVE-2019-0686
- Related
- CVE-2019-0676: Microsoft Internet Explorer Information Disclosure Vulnerability Known Exploited Vulnerabilities · May 23, 2022Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026