Microsoft Releases May 2019 Security Updates

Microsoft has released updates to address multiple vulnerabilities in Microsoft software. A remote attacker could exploit some of these vulnerabilities to take control of an affected system.

Threat ID:: CC-3060
Category:
Threat Severity:: Medium
Threat Vector:
Published:: 15 May 2019 12:00 AM

Report a cyber attack: call 0300 303 5222 or email [email protected]

Summary

Microsoft has released updates to address multiple vulnerabilities in Microsoft software. A remote attacker could exploit some of these vulnerabilities to take control of an affected system.

Affected platforms

The following platforms are known to be affected:

Microsoft Office

.NET Core

.NET Framework
Adobe Flash Player
ASP.NET Core
Azure
Azure DevOps Server
ChakraCore
Internet Explorer
Microsoft Edge
Microsoft Office and Microsoft Office Services & Web Apps
Microsoft Windows
NuGet
Online Services
Skype for Android
SQL Server
Team Foundation Server
Visual Studio

Threat details

Update 20 May 2019

Microsoft has now released additional updates to address an issue where Internet Explorer 11 and Microsoft Edge could have been prevented from accessing .gov.uk websites that do not support HTTP Strict Transport Security (HSTS). Users and administrators are encouraged to review the following Windows Knowledge Base articles and apply the relevant updates:

KB4505050</

Remediation steps

Type	Step
	Users and administrators are encouraged to review Microsoft’s May 2019 Security Update Summary and Deployment Information and apply the necessary updates.

Last edited: 14 February 2020 2:44 pm