Microsofts månatliga säkerhetsuppdateringar för mars 2019

Microsoft har släppt sina månatliga säkerhetsuppdateringar.[1]
Totalt rättas 72 sårbarheter varav 17 klassas som kritiska. De kritiska kan utnyttjas av en fjärrangripare för att exekvera skadlig kod.

De kritiska sårbarheterna:

CVE-2019-0592 - Chakra Scripting Engine Memory Corruption Vulnerability
CVE-2019-0603 - Windows Deployment Services TFTP Server Remote Code Execution Vulnerability
CVE-2019-0609 - Scripting Engine Memory Corruption Vulnerability
CVE-2019-0639 - Scripting Engine Memory Corruption Vulnerability
CVE-2019-0666 - Windows VBScript Engine Remote Code Execution Vulnerability
CVE-2019-0667 - Windows VBScript Engine Remote Code Execution Vulnerability
CVE-2019-0680 - Scripting Engine Memory Corruption Vulnerability
CVE-2019-0697 - Windows DHCP Client Remote Code Execution Vulnerability
CVE-2019-0698 - Windows DHCP Client Remote Code Execution Vulnerability
CVE-2019-0726 - Windows DHCP Client Remote Code Execution Vulnerability
CVE-2019-0756 - MS XML Remote Code Execution Vulnerability
CVE-2019-0763 - Internet Explorer Memory Corruption Vulnerability
CVE-2019-0769 - Scripting Engine Memory Corruption Vulnerability
CVE-2019-0770 - Scripting Engine Memory Corruption Vulnerability
CVE-2019-0771 - Scripting Engine Memory Corruption Vulnerability
CVE-2019-0773 - Scripting Engine Memory Corruption Vulnerability
CVE-2019-0784 - Windows ActiveX Remote Code Execution Vulnerability

Rekommendation

CERT-SE rekommenderar att uppdatera sårbara system snarast för att upprätthålla en grundläggande nivå av systemsäkerhet.

Källor

[1] https://portal.msrc.microsoft.com/en-us/security-guidance