古风君子以泽,盗墓笔记txt全集下载,好看的小说君子以泽

微軟2019年7月的補丁星期二修復了2個Zero-Day漏洞

2019-07-10 10:19:13 【大中小】

今天是微軟2019年7月的補丁星期二，這意味著今天每個人都應該對你的Windows管理員特別好，因為他們開始測試并可能部署更新。本月的更新中包含針對五個公開披露的漏洞的修復程序，但未被利用，以及兩個零日漏洞，這些漏洞在野外被積極利用。

隨著2019年7月安全更新的發(fā)布，微軟發(fā)布了1個建議，1個服務堆棧更新，以及77個漏洞的更新。在這些漏洞中，有15個被列為嚴重漏洞。

有關(guān)非安全Windows更新的信息，您可以閱讀今天的Windows 2010年7月10日累積更新和Windows 7 7月2019累積更新。

所有用戶都應盡快安裝這些安全更新，以保護Windows免受安全風險。

修補了兩個零日漏洞

隨著今天的安全更新發(fā)布，微軟已經(jīng)修復了兩個被利用的漏洞，這些漏洞可能允許程序以更高的權(quán)限級別運行。

第一個零日標題為“CVE-2019-1132 - Win32k特權(quán)提升漏洞”，由ESET高級惡意軟件研究員Anton Cherepanov發(fā)現(xiàn)。如果被利用，此漏洞可能允許攻擊者“以內(nèi)核模式運行任意代碼。然后攻擊者可以安裝程序;查看，更改或刪除數(shù)據(jù);或創(chuàng)建具有完全用戶權(quán)限的新帳戶。”

由于Cherepanov是ESET的惡意軟件研究員，很可能發(fā)現(xiàn)這個漏洞被某種類型的計算機感染所利用。在一條推文中，為了回應BleepingComputer提出的問題，Cherepanov表示即將提供更多信息。

第二個漏洞標題為“CVE-2019-0880 - Microsoft splwow64特權(quán)提升漏洞”，由ReSecurity的Gene Yoo發(fā)現(xiàn)。這是發(fā)現(xiàn)3月份披露的Citrix hack的同一家安全公司。 BleepingComputer試圖聯(lián)系他們，但此時沒有收到回復。

五個公開披露的漏洞

隨著7月補丁周二的更新，微軟已經(jīng)發(fā)布了五個公開披露的漏洞的安全更新。不過，微軟已經(jīng)表示，這些漏洞都沒有被發(fā)現(xiàn)在野外被利用。

此列表中包含由Google Project Zero研究員Tavis Ormandy公開披露的SymCrypt DoS漏洞補丁，因為Microsoft未達到其補丁截止日期。

CVE-2019-0865 - SymCrypt拒絕服務漏洞

CVE-2018-15664 - Docker特權(quán)提升漏洞

CVE-2019-0962 - Azure自動化特權(quán)提升漏洞

CVE-2019-1068 - Microsoft SQL Server遠程執(zhí)行代碼漏洞

CVE-2019-1129 - Windows特權(quán)提升漏洞

SandboxEscaper披露的漏洞已修復

本月修復了一個名為“CVE-2019-1130 | Windows特權(quán)提升漏洞”的權(quán)限提升漏洞，該漏洞由SandboxEscaper披露并歸因于她的一個“Polar Bear”別名。

在過去，SandboxEscaper會公開披露她的漏洞為零天，但這一漏洞似乎是私下提交給微軟的。

2019年7月補丁星期二安全更新

以下是2019年7月補丁星期二更新中已解決的漏洞，建議和SSU的完整列表。要訪問每個漏洞及其影響的系統(tǒng)的完整描述，您可以在此處查看完整報告。

Tag	CVE ID	CVE Title	Severity
.NET Framework	CVE-2019-1083	.NET Denial of Service Vulnerability	Important
.NET Framework	CVE-2019-1113	.NET Framework Remote Code Execution Vulnerability	Critical
.NET Framework	CVE-2019-1006	WCF/WIF SAML Token Authentication Bypass Vulnerability	Important
ASP.NET	CVE-2019-1075	ASP.NET Core Spoofing Vulnerability	Moderate
Azure	CVE-2019-0962	Azure Automation Elevation of Privilege Vulnerability	Important
Azure DevOps	CVE-2019-1076	Team Foundation Server Cross-site Scripting Vulnerability	Important
Azure DevOps	CVE-2019-1072	Azure DevOps Server and Team Foundation Server Remote Code Execution Vulnerability	Critical
Internet Explorer	CVE-2019-1063	Internet Explorer Memory Corruption Vulnerability	Critical
Microsoft Browsers	CVE-2019-1104	Microsoft Browser Memory Corruption Vulnerability	Critical
Microsoft Exchange Server	ADV190021	Outlook on the web Cross-Site Scripting Vulnerability	Important
Microsoft Exchange Server	CVE-2019-1136	Microsoft Exchange Server Elevation of Privilege Vulnerability	Important
Microsoft Exchange Server	CVE-2019-1137	Microsoft Exchange Server Spoofing Vulnerability	Important
Microsoft Graphics Component	CVE-2019-1118	DirectWrite Remote Code Execution Vulnerability	Important
Microsoft Graphics Component	CVE-2019-1119	DirectWrite Remote Code Execution Vulnerability	Important
Microsoft Graphics Component	CVE-2019-1117	DirectWrite Remote Code Execution Vulnerability	Important
Microsoft Graphics Component	CVE-2019-1127	DirectWrite Remote Code Execution Vulnerability	Important
Microsoft Graphics Component	CVE-2019-1116	Windows GDI Information Disclosure Vulnerability	Important
Microsoft Graphics Component	CVE-2019-1120	DirectWrite Remote Code Execution Vulnerability	Important
Microsoft Graphics Component	CVE-2019-1124	DirectWrite Remote Code Execution Vulnerability	Important
Microsoft Graphics Component	CVE-2019-0999	DirectX Elevation of Privilege Vulnerability	Important
Microsoft Graphics Component	CVE-2019-1128	DirectWrite Remote Code Execution Vulnerability	Important
Microsoft Graphics Component	CVE-2019-1121	DirectWrite Remote Code Execution Vulnerability	Important
Microsoft Graphics Component	CVE-2019-1122	DirectWrite Remote Code Execution Vulnerability	Important
Microsoft Graphics Component	CVE-2019-1123	DirectWrite Remote Code Execution Vulnerability	Important
Microsoft Graphics Component	CVE-2019-1097	DirectWrite Information Disclosure Vulnerability	Important
Microsoft Graphics Component	CVE-2019-1096	Win32k Information Disclosure Vulnerability	Important
Microsoft Graphics Component	CVE-2019-1101	Windows GDI Information Disclosure Vulnerability	Important
Microsoft Graphics Component	CVE-2019-1098	Windows GDI Information Disclosure Vulnerability	Important
Microsoft Graphics Component	CVE-2019-1095	Windows GDI Information Disclosure Vulnerability	Important
Microsoft Graphics Component	CVE-2019-1102	GDI+ Remote Code Execution Vulnerability	Critical
Microsoft Graphics Component	CVE-2019-1100	Windows GDI Information Disclosure Vulnerability	Important
Microsoft Graphics Component	CVE-2019-1094	Windows GDI Information Disclosure Vulnerability	Important
Microsoft Graphics Component	CVE-2019-1093	DirectWrite Information Disclosure Vulnerability	Important
Microsoft Office	CVE-2019-1084	Microsoft Exchange Information Disclosure Vulnerability	Important
Microsoft Office	CVE-2019-1111	Microsoft Excel Remote Code Execution Vulnerability	Important
Microsoft Office	CVE-2019-1110	Microsoft Excel Remote Code Execution Vulnerability	Important
Microsoft Office	CVE-2019-1109	Microsoft Office Spoofing Vulnerability	Important
Microsoft Office	CVE-2019-1112	Microsoft Excel Information Disclosure Vulnerability	Important
Microsoft Office SharePoint	CVE-2019-1134	Microsoft Office SharePoint XSS Vulnerability	Important
Microsoft Scripting Engine	CVE-2019-1062	Chakra Scripting Engine Memory Corruption Vulnerability	Critical
Microsoft Scripting Engine	CVE-2019-1004	Scripting Engine Memory Corruption Vulnerability	Critical
Microsoft Scripting Engine	CVE-2019-1001	Scripting Engine Memory Corruption Vulnerability	Critical
Microsoft Scripting Engine	CVE-2019-1059	Scripting Engine Memory Corruption Vulnerability	Moderate
Microsoft Scripting Engine	CVE-2019-1056	Scripting Engine Memory Corruption Vulnerability	Critical
Microsoft Scripting Engine	CVE-2019-1106	Chakra Scripting Engine Memory Corruption Vulnerability	Critical
Microsoft Scripting Engine	CVE-2019-1092	Chakra Scripting Engine Memory Corruption Vulnerability	Critical
Microsoft Scripting Engine	CVE-2019-1103	Chakra Scripting Engine Memory Corruption Vulnerability	Critical
Microsoft Scripting Engine	CVE-2019-1107	Chakra Scripting Engine Memory Corruption Vulnerability	Critical
Microsoft Windows	CVE-2019-1067	Windows Kernel Elevation of Privilege Vulnerability	Important
Microsoft Windows	CVE-2019-1074	Microsoft Windows Elevation of Privilege Vulnerability	Important
Microsoft Windows	CVE-2019-1091	Microsoft unistore.dll Information Disclosure Vulnerability	Important
Microsoft Windows	CVE-2019-1082	Microsoft Windows Elevation of Privilege Vulnerability	Important
Microsoft Windows	CVE-2019-0975	ADFS Security Feature Bypass Vulnerability	Important
Microsoft Windows	CVE-2019-1130	Windows Elevation of Privilege Vulnerability	Important
Microsoft Windows	CVE-2019-1129	Windows Elevation of Privilege Vulnerability	Important
Microsoft Windows	CVE-2019-1037	Windows Error Reporting Elevation of Privilege Vulnerability	Important
Microsoft Windows	CVE-2019-0880	Microsoft splwow64 Elevation of Privilege Vulnerability	Important
Microsoft Windows	CVE-2019-0865	SymCrypt Denial of Service Vulnerability	Important
Microsoft Windows	CVE-2019-0785	Windows DHCP Server Remote Code Execution Vulnerability	Critical
Microsoft Windows	CVE-2019-0887	Remote Desktop Services Remote Code Execution Vulnerability	Important
Microsoft Windows	CVE-2019-0966	Windows Hyper-V Denial of Service Vulnerability	Important
Microsoft Windows	CVE-2019-1126	ADFS Security Feature Bypass Vulnerability	Important
Microsoft Windows DNS	CVE-2019-1090	Windows dnsrlvr.dll Elevation of Privilege Vulnerability	Important
Microsoft Windows DNS	CVE-2019-0811	Windows DNS Server Denial of Service Vulnerability	Important
Open Source Software	CVE-2018-15664	Docker Elevation of Privilege Vulnerability	Important
Servicing Stack Updates	ADV990001	Latest Servicing Stack Updates	Critical
SQL Server	CVE-2019-1068	Microsoft SQL Server Remote Code Execution Vulnerability	Important
Visual Studio	CVE-2019-1077	Visual Studio Elevation of Privilege Vulnerability	Important
Visual Studio	CVE-2019-1079	Visual Studio Information Disclosure Vulnerability	Important
Windows Kernel	CVE-2019-1073	Windows Kernel Information Disclosure Vulnerability	Important
Windows Kernel	CVE-2019-1132	Win32k Elevation of Privilege Vulnerability	Important
Windows Kernel	CVE-2019-1071	Windows Kernel Information Disclosure Vulnerability	Important
Windows Kernel	CVE-2019-1089	Windows RPCSS Elevation of Privilege Vulnerability	Important
Windows Media	CVE-2019-1086	Windows Audio Service Elevation of Privilege Vulnerability	Important
Windows Media	CVE-2019-1088	Windows Audio Service Elevation of Privilege Vulnerability	Important
Windows Media	CVE-2019-1087	Windows Audio Service Elevation of Privilege Vulnerability	Important
Windows Media	CVE-2019-1085	Windows WLAN Service Elevation of Privilege Vulnerability	Important
Windows RDP	CVE-2019-1108	Remote Desktop Protocol Client Information Disclosure Vulnerability	Important
Windows Shell	CVE-2019-1099	Windows GDI Information Disclosure Vulnerability	Important



【大中小】【打印】【關(guān)閉】【返回頂部】
分享到:
上一篇：英特爾修復了企業(yè)級SSD中的Priv E..	下一篇：Web安全漏洞之Electron框架漏洞

国产成人毛片毛片久久网_国产午夜激无码av毛片不_国产乱对白精彩在线播放_av资源站中文字幕_亚洲男人的天堂网站_国产成人综合亚洲网_中国国产激情一区_少妇一级淫片免费放_亚洲一本大道av久在线播放_免费观看美女裸体网站

安全播報

聯(lián)系我們