The August security updates have been released and consist of 93 CVEs and 2 advisories. Of these 93 CVEs, 29 are rated Critical, and 64 are rated Important in severity. None are listed as publicly known or as under active attack at the time of release but multiple bugs this month fall into the wormable category.
The updates address Information Disclosure, Elevation of Privilege, Remote Code Execution, Denial of Service, Security Feature Bypass, Tampering and Spoofing. They apply to the following: Microsoft Windows, Internet Explorer, Microsoft Edge, ChakraCore, Microsoft Office and Microsoft Office Services and Web Apps, Visual Studio, Online Services, Active Directory, Microsoft Dynamics.
Known Issues: See the Known Issues and accompanying work-around in the KB Articles for your version of Windows in the Update History:
Recommended Reading: See Dustin Childs review and analysis in Zero Day Initiative — The August 2019 Security Update Review.
The updates address Information Disclosure, Elevation of Privilege, Remote Code Execution, Denial of Service, Security Feature Bypass, Tampering and Spoofing. They apply to the following: Microsoft Windows, Internet Explorer, Microsoft Edge, ChakraCore, Microsoft Office and Microsoft Office Services and Web Apps, Visual Studio, Online Services, Active Directory, Microsoft Dynamics.
Known Issues: See the Known Issues and accompanying work-around in the KB Articles for your version of Windows in the Update History:
Recommended Reading: See Dustin Childs review and analysis in Zero Day Initiative — The August 2019 Security Update Review.
