Patch Tuesday, January 2019 Edition
Summary: Microsoft's January 2019 Patch Tuesday fixed roughly four dozen security issues across Windows, Internet Explorer, Edge, Office, SharePoint, .NET Framework and Exchange, with no new Adobe Flash updates and no zero-days among the batch. One fixed bug, CVE-2019-0579 in the Jet Database Engine, had been publicly disclosed before the patch, and the batch also included the emergency Internet Explorer fix for CVE-2018-8653 that attackers are already exploiting.
Bottom line: Recorded Future's Allan Liska said CVE-2018-8653 should be the number one priority because it is still being exploited in the wild and several exploit kits have folded the public proof-of-concept code into their platforms. Meanwhile, multiple organizations reported file-sharing failures after installing the KB4480970 rollup, forcing them to uninstall it.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2018-8653CVE-2019-0547CVE-2019-0579
- Related
- CVE-2018-8653: Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability Known Exploited Vulnerabilities · Nov 03, 2021Microsoft Issues Emergency Fix for IE Zero Day Cyber Risks ·Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026