Patch Tuesday, May 2019
Microsoft's monthly security release, Tuesday, May 14, 2019. Includes CVEs published within two days either side; Adobe and SAP ride the same day.
3 CVEs · 1 critical · 3 exploited · 2 with public exploit code
Microsoft only. Adobe and SAP are below. Exploited first, then public exploit code, then highest CVSS.
Microsoft
3 CVEs · 1 critical · 3 exploited · 2 with public exploit code
- 9.8CriticalMay 16, 2019Microsoft Remote Desktop Services Memory corruptionCVE-2019-0708Microsoft Remote Desktop Services, formerly known as Terminal Service, contains an unspecified vulnerability that allows an unauthenticated attacker to connect to the target system using RDP and send specially crafted requests. Successful exploitation allows for remote code execution. The vulnerability is also known under the moniker of BlueKeep.Exploited100% likelyExploit codeExploit-DB · MetasploitDetection
- 7.8HighMay 16, 2019Microsoft Windows Privilege escalationCVE-2019-0863Microsoft Windows Error Reporting (WER) contains a privilege escalation vulnerability due to the way it handles files, allowing for code execution in kernel mode.Exploited5.2% likelyExploit codeExploit-DB
- 8.8HighMay 16, 2019Microsoft Graphics Device Interface (GDI) Code / command injectionCVE-2019-0903A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory. An attacker who successfully exploited this vulnerability could take control of the affected system.Exploited22% likely
Adobe
No tracked Adobe CVEs in this window.
SAP
No tracked SAP CVEs in this window.
The release date follows Microsoft's usual schedule (second Tuesday). Chips show what Watch Floor knows: CISA KEV listing, public exploit code and published detection rules.