Microsoft Update
3245Warning Date
Severity Level
Warning Number
Target Sector
11 December, 2019
● High
2019-708
All
Description:
Microsoft has released security update to address multiple vulnerabilities in the following products:
• Microsoft Windows
• Internet Explorer
• SQL Server
• Visual Studio
• Skype for Business
• Microsoft Office and Microsoft Office Services and Web Apps
Threats:
Attacker could exploit these vulnerabilities by doing the following:
• Denial of service attack (DoS).
• Sensitive information disclosure.
• Install programs; view, change, or delete data; or create new accounts with full user rights.
• Privilege escalation.
• Remote code execution.
Best practice and Recommendations:
The CERT team encourages users to review Microsoft security advisory and apply the necessary updates:
https://portal.msrc.microsoft.com/en-us/security-guidance/releasenotedetail/2019-Dec