Выпущены обновления безопасности Microsoft за июль 2019

Microsoft выпустила обновления безопасности за июль.

На следующие уязвимости и обновления безопасности следует обратить особое внимание:

Windows/Windows Server

CVE-2019-0785 – Windows DHCP Server Remote Code Execution Vulnerability (Base CVSS Score 9.8)

CVE-2019-1129 – Windows Elevation of Privilege Vulnerability (Publicly Disclosed) Ссылка

CVE-2019-0865 – SymCrypt Denial of Service Vulnerability (Publicly Disclosed) Ссылка

CVE-2019-0880 – Microsoft splwow64 Elevation of Privilege Vulnerability (Exploitation Detected)

CVE-2019-1102 – GDI+ Remote Code Execution Vulnerability

CVE-2019-1132 – Win32k Elevation of Privilege Vulnerability (Exploitation Detected)

CVE-2019-0887 – Remote Desktop Services Remote Code Execution Vulnerability (Exploitation Detected)

Microsoft Browsers

CVE-2019-1001 – Scripting Engine Memory Corruption Vulnerability

Microsoft Office

CVE-2019-1110 – Microsoft Excel Remote Code Execution Vulnerability

Microsoft SharePoint Server

CVE-2019-1134 – Microsoft Office SharePoint XSS Vulnerability

Microsoft Exchange Server

CVE-2019-1084 – Microsoft Exchange Information Disclosure Vulnerability

CVE-2019-1136 – Microsoft Exchange Server Elevation of Privilege Vulnerability

CVE-2019-1137 – Microsoft Exchange Server Spoofing Vulnerability

Microsoft SQL Server

CVE-2019-1068 – Microsoft SQL Server Remote Code Execution Vulnerability (Publicly Disclosed)

.NET Framework

CVE-2019-1006 – WCF/WIF SAML Token Authentication Bypass Vulnerability

CVE-2019-1083 – .NET Denial of Service Vulnerability

CVE-2019-1113 – .NET Framework Remote Code Execution Vulnerability

CVE-2019-1075 – ASP.NET Core Spoofing Vulnerability

Team Foundation Server/Azure DevOps Server

CVE-2019-1072 – Azure DevOps Server and Team Foundation Server Remote Code Execution Vulnerability

CVE-2019-1076 – Team Foundation Server Cross-site Scripting Vulnerability

Visual Studio

CVE-2019-1077 – Visual Studio Elevation of Privilege Vulnerability

CVE-2019-1079 – Visual Studio Information Disclosure Vulnerability

CVE-2019-1113 – .NET Framework Remote Code Execution Vulnerability

Azure Kubernetes Service & Azure IoT Edge

CVE-2018-15664 – Docker Runtime Elevation of Privilege Vulnerability (Publicly Disclosed)

Рекомендации по безопасности

Были выпущены следующие рекомендательные документы (security advisory):

ADV190021 – Outlook on the web Cross-Site Scripting Vulnerability

Были дополнены и обновлены следующие рекомендательные документы:

ADV990001 – Latest Servicing Stack Updates

New Servicing Stack Update for every OS except Windows 7, Windows Server 2008 & 2008 R2.

Другие новости