Patch Tuesday, April 2019
Microsoft's monthly security release, Tuesday, April 9, 2019. Includes CVEs published within two days either side; Adobe and SAP ride the same day.
7 CVEs · 0 critical · 7 exploited · 5 with public exploit code
Microsoft only. Adobe and SAP are below. Exploited first, then public exploit code, then highest CVSS.
Microsoft
7 CVEs · 0 critical · 7 exploited · 5 with public exploit code
- 7.8HighApr 9, 2019Microsoft Win32k Privilege escalationCVE-2019-0803Microsoft Win32k contains an unspecified vulnerability due to it failing to properly handle objects in memory causing privilege escalation. Successful exploitation allows an attacker to run code in kernel mode.Exploited45% likelyExploit codeExploit-DB
- 7.8HighApr 9, 2019Microsoft Win32k Privilege escalationCVE-2019-0808Microsoft Win32k contains a privilege escalation vulnerability due to the component failing to properly handle objects in memory. Successful exploitation allows an attacker to run code in kernel mode.Exploited53% likelyExploit codeExploit-DB · Metasploit
- 7.8HighApr 9, 2019Microsoft Windows Path traversal / file handlingCVE-2019-0841A privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context.Exploited41% likelyExploit codeExploit-DB · Metasploit
- 7.8HighApr 9, 2019Microsoft Win32k Privilege escalationCVE-2019-0859Microsoft Win32k fails to properly handle objects in memory causing privilege escalation. Successful exploitation allows an attacker to run code in kernel mode.Exploited4.2% likelyExploit code
- 7.5HighApr 9, 2019Microsoft Internet Explorer Memory corruptionCVE-2019-0752A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet ExplorerExploited82% likelyExploit codeExploit-DBDetection
- 7.8HighApr 9, 2019Microsoft Win32k Privilege escalationCVE-2019-0797Microsoft Win32k contains a privilege escalation vulnerability when the Win32k component fails to properly handle objects in memory. Successful exploitation allows an attacker to execute code in kernel mode.Exploited1.9% likely
- 6.5MediumApr 8, 2019Microsoft Windows Information disclosureCVE-2019-0703An information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests, which could lead to information disclosure from the server.Exploited9.4% likely
Adobe
No tracked Adobe CVEs in this window.
SAP
No tracked SAP CVEs in this window.
The release date follows Microsoft's usual schedule (second Tuesday). Chips show what Watch Floor knows: CISA KEV listing, public exploit code and published detection rules.