Tuesday, February 27, 2024

Microsoft Fixes 79 Vulnerabilities Including Two Active Zero-Days Exploits and 4 Critical RDP Flaws

Microsoft released security updates for September that addresses 79 security vulnerabilities, out of the 17 are critical, 61 rated as important and one classified as Moderate.

The update covers two active Elevation of Privilege Zero-Days Vulnerabilities CVE-2019-1215 & CVE-2019-1214.

CVE-2019-1214 – Vulnerability exists in Windows Common Log File System, successful exploitation of the vulnerability allows an attacker to run processes in an elevated context.

CVE-2019-1215 – Vulnerability exists in ws2ifsl.sys (Winsock), successful exploitation allows an attacker to execute code with elevated privileges.

RDP Flaws

Microsoft fixed four (CVE-2019-1290, CVE-2019-1291, CVE-2019-0787, CVE-2019-0788) critical code execution flaws that exist in the Windows Remote Desktop Client.

To exploit these vulnerabilities an attacker could have control of a server and convince the user to connect with the server. These vulnerabilities are Unlike the wormable BlueKeep bug, which allows attackers to target Remote Desktop servers.

Microsoft also released a fix for the elevation of privilege vulnerability (CVE-2019-1235) exists in Windows Text Service Framework (TSF) as it fails to input commands.

“An attacker who successfully exploited this vulnerability could inject commands or read input sent through a malicious Input Method Editor (IME). This only affects systems that have installed an IME.”

“To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system.”

The security update also covers the flaws in the way the VBScript engine handles objects in the memory. An attacker who exploits the vulnerability could gain the same user rights associated with the current user.

Security Updates Covers following Softwares

  • Microsoft Windows
  • Internet Explorer
  • Microsoft Edge (EdgeHTML-based)
  • ChakraCore
  • Microsoft Office and Microsoft Office Services and Web Apps
  • Adobe Flash Player
  • Microsoft Lync
  • Visual Studio
  • Microsoft Exchange Server
  • .NET Framework
  • Microsoft Yammer
  • .NET Core
  • Team Foundation Server
  • Project Rome

How to Update Windows

  1. Select the start button from the bottom left.

  2. Click on Settings

  3. Select Update & Security

  4. Choose windows to update from the sidebar

  5. Check for Updates

You can follow us on LinkedinTwitterFacebook for daily Cybersecurity and hacking news updates.


Latest articles

Abyss Locker Ransomware Attacks Microsoft Windows and Linux Users

FortiGuard Labs has released a report detailing the emergence and impact of the Abyss...

14-Year-Old CMS Editor Flaw Exploited to Hack Govt & Edu Sites

Hackers have exploited a vulnerability in a 14-year-old Content Management System (CMS) editor, FCKeditor,...

Zyxel Firewall Flaw Let Attackers Execute Remote Code

Four new vulnerabilities have been discovered in some of the Zyxel Firewall and access...

Hackers Abuse Telegram API To Exfiltrate User Information

Attackers have been using keywords like "remittance" and "receipts" to spread phishing scripts using...

ThreatHunter.ai Stops Hundreds of Attacks in 48 Hours: Fighting Ransomware and Nation-State Cyber Threats

The current large surge in cyber threats has left many organizations grappling for security...

WordPress Plugin Flaw Exposes 200,000+ Websites for Hacking

A critical security flaw has been identified in the Ultimate Member plugin for WordPress,...

Hackers Actively Hijacking ConnectWise ScreenConnect server

ConnectWise, a prominent software company, issued an urgent security bulletin on February 19, 2024,...
Guru baran
Guru baranhttps://gbhackers.com
Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications.

Live Account Takeover Attack Simulation

Live Account Take Over Attack

Live Webinar on How do hackers bypass 2FA ,Detecting ATO attacks, A demo of credential stuffing, brute force and session jacking-based ATO attacks, Identifying attacks with behaviour-based analysis and Building custom protection for applications and APIs.

Related Articles