March 12, 2019—KB4489882 (OS Build 14393.2848)

March 12, 2019—KB4489882 OS Build 14393.2848 Applies To Windows 10, version 1607, all editions Windows Server 2016, all editions Note Reminder: The additional servicing for Windows 10 Enterprise, Education, and IoT Enterprise editions ends on April 9, 2019 and doesn't extend beyond this date. To...

March 12, 2019—KB4489884 (Security-only update)

March 12, 2019—KB4489884 Security-only update Applies To Windows Server 2012 Windows Embedded 8 Standard Improvements and fixes This security update includes quality improvements. No new operating system features are being introduced in this update. Key changes include: Addresses an issue that...

Windows VBScript Engine Remote Code Execution Vulnerability

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerabili...

CVE-2019-9644

An XSSI cross-site inclusion vulnerability in Jupyter Notebook before 5.7.6 allows inclusion of resources on malicious pages when visited by users who are authenticated with a Jupyter server. Access to the content of resources has been demonstrated with Internet Explorer through capturing of erro...

CVE-2019-9644

An XSSI cross-site inclusion vulnerability in Jupyter Notebook before 5.7.6 allows inclusion of resources on malicious pages when visited by users who are authenticated with a Jupyter server. Access to the content of resources has been demonstrated with Internet Explorer through capturing of erro...

CVE-2019-9644

An XSSI cross-site inclusion vulnerability in Jupyter Notebook before 5.7.6 allows inclusion of resources on malicious pages when visited by users who are authenticated with a Jupyter server. Access to the content of resources has been demonstrated with Internet Explorer through capturing of erro...

PT-2019-1605

Name of the Vulnerable Software and Affected Versions Internet Explorer affected versions not specified Microsoft Windows affected versions not specified Description A remote code execution issue exists due to errors in handling objects in memory by the VBScript engine. This could allow a remote...

PT-2019-1588

Name of the Vulnerable Software and Affected Versions Microsoft Edge and Internet Explorer affected versions not specified Description A remote code execution issue exists due to errors in processing objects in memory. This could allow an attacker to execute arbitrary code in the context of the...

PT-2019-1590

Name of the Vulnerable Software and Affected Versions Internet Explorer affected versions not specified Description A remote code execution issue exists due to errors in handling objects in memory. This could allow a remote attacker to execute arbitrary code in the context of the current user,...

PT-2019-1607

Name of the Vulnerable Software and Affected Versions Internet Explorer affected versions not specified Description A remote code execution issue exists due to errors in handling objects in memory. This could allow a remote attacker to execute arbitrary code in the context of the current user,...

PT-2019-1642

Name of the Vulnerable Software and Affected Versions Internet Explorer affected versions not specified Description The issue is caused by Internet Explorer improperly accessing objects in memory, which can lead to memory corruption. This allows a remote attacker to execute arbitrary code in the...

Microsoft Edge and Internet Explorer CVE-2019-0762 Security Bypass Vulnerability

Description Microsoft Edge and Internet Explorer are prone to a security-bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions. This may lead to other attacks. Technologies Affected Microsoft Edge Microsoft Internet Explorer 10 Microsoft Internet Explore...

Microsoft Internet Explorer Scripting Engine CVE-2019-0783 Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial of service conditions. Internet Explorer 10 and 11 are...

Microsoft Internet Explorer Security Feature Bypass (CVE-2019-0768)

A security bypass vulnerability exists in Microsoft Internet Explorer. Successful exploitation of this vulnerability would allow remote attackers to bypass security tests and protocols on the affected system...

Microsoft Internet Explorer Scripting Engine Memory Corruption (CVE-2019-0665)

A memory corruption vulnerability exists in Microsoft Internet Explorer. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

KB4489872: Windows 10 March 2019 Security Update

The remote Windows host is missing security update 4489872. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability...

PT-2019-1646

Name of the Vulnerable Software and Affected Versions Internet Explorer affected versions not specified Description A security feature bypass issue exists due to improper restriction of VBScript execution under specific conditions, allowing requests that should otherwise be ignored. This could...

Microsoft Internet Explorer Attr nodeValue Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Microsoft Internet Explorer event Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

PT-2019-1587

Name of the Vulnerable Software and Affected Versions Microsoft Edge and Internet Explorer affected versions not specified Description A remote code execution issue exists due to errors in handling objects in memory by the scripting engine in Microsoft browsers. This could allow a remote attacker...