Patch Tuesday, October 2019
Microsoft's monthly security release, Tuesday, October 8, 2019. Includes CVEs published within two days either side; Adobe and SAP ride the same day.
2 CVEs · 0 critical · 2 exploited · 2 with public exploit code
Microsoft only. Adobe and SAP are below. Exploited first, then public exploit code, then highest CVSS.
Microsoft
2 CVEs · 0 critical · 2 exploited · 2 with public exploit code
- 7.8HighOct 10, 2019Microsoft Windows Path traversal / file handlingCVE-2019-1315A privilege escalation vulnerability exists when Windows Error Reporting manager improperly handles hard links. An attacker who successfully exploited this vulnerability could overwrite a targeted file leading to an elevated status.Exploited3.5% likelyExploit code
- 7.8HighOct 10, 2019Microsoft Windows Privilege escalationCVE-2019-1322A privilege escalation vulnerability exists when Windows improperly handles authentication requests. An attacker who successfully exploited this vulnerability could run processes in an elevated context.Exploited19% likelyExploit codeExploit-DB · Metasploit
Adobe
No tracked Adobe CVEs in this window.
SAP
No tracked SAP CVEs in this window.
The release date follows Microsoft's usual schedule (second Tuesday). Chips show what Watch Floor knows: CISA KEV listing, public exploit code and published detection rules.