• June 2019 Patch Tuesday is rolling out

    With Bluekeep patching behind us (hopefully), we are waiting for the June 2019 results to come rolling in.

    There are (only) 108 new entries in the Windows Update Catalog.

    The Security Update Guide lists 2,210new individual patches today.

    Martin Brinkman has his usual thorough summary posted on ghacks.

    Microsoft released security updates for all supported versions of the Microsoft Windows operating system on the June 11, 2019 Patch Day.

    • Microsoft released security updates for all supported versions of the Windows operating system in June 2019.
    • All client and server versions have critically rated vulnerabilities patched.
    • Microsoft released security updates for other products such as Internet Explorer, Microsoft Edge, Microsoft Office, Azure, Microsoft Exchange Server, and Skype

    Windows 7: 42 vulnerabilities of which 3 are rated critical and 39 are rated important
    Windows 8.1: 35 vulnerabilities of which 3 are rated critical and 32 are rated important
    Windows 10 version 1703:  41 vulnerabilities of which 4 is critical and 37 are important
    Windows 10 version 1709: 43 vulnerabilities of which 4 is critical and 39 are important
    Windows 10 version 1803: 45 vulnerabilities of which 3 are critical and 43 are important
    Windows 10 version 1809: 47 vulnerabilities of which 3 are critical and 44 are important
    Windows 10 version 1903: 42 vulnerabilities of which 3 are critical and 39 are important

    Internet Explorer 11: 7 vulnerability, 5 critical, 2 important
    Microsoft Edge: 14 vulnerabilities, 12 critical, 2 important

    Dustin Childs has his report of Microsoft released CVEs, 88 of them including an exploit for Windows Task Scheduler, for ZDI.

    Earlier today, Microsoft released a patch to address CVE-2019-1069, an escalation of privilege vulnerability in the Windows Task Scheduler. Bugs of this nature have existed since Windows XP, but this most recent version impacts the latest Windows 10 and Windows Server 2019 versions. Information about the vulnerability was publicly available prior to the patch being released…

    See the full report on ZDI.

    For those of you updating manually, there are new Servicing Stacks for Server 2019, Server 2016,  and Win10 v1809 and v1607.