Question

1. What is Microsoft Patch Tuesday? 2. Pick a patch released from Microsoft this month. Research the patch, summarize the vulnerability and risk impact, identify the CVE, justify the CVSS, list the versions of software requiring the patch remediation, and if there are any exploits "in the wild".

Answer 1

Answer 1
*********

Patch Tuesday (also known as Update Tuesday) is an unofficial term used to refer to when Microsoft regularly releases software patches for its software products.

Microsoft formalized Patch Tuesday in October 2003. Patch Tuesday occurs on the second, and sometimes fourth, Tuesday of each month in North America.

Answer 2
*********
CVE-2019-1073 | Windows Kernel Information Disclosure Vulnerability
Published: 07/09/2019

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system.

To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application. The vulnerability would not allow an attacker to execute code or to elevate user rights directly, but it could be used to obtain information that could be used to try to further compromise the affected system.

CVE-2019-1167 | Windows Defender Application Control Security Feature Bypass Vulnerability
Published: 07/16/2019 | Last Updated : 07/16/2019

A security feature bypass vulnerability exists in Windows Defender Application Control (WDAC) which could allow an attacker to bypass WDAC enforcement. An attacker who successfully exploited this vulnerability could circumvent PowerShell Core Constrained Language Mode on the machine.

To exploit the vulnerability, an attacker would first have administrator access to the local machine where PowerShell is running in Constrained Language mode. By doing that an attacker could access resources in an unintended way.

The update addresses the vulnerability by correcting how the Windows kernel handles objects in memory.

if you have any doubt then please ask me without any hesitation in the comment section below , if you like my answer then please thumbs up for the answer , before giving thumbs down please discuss the question it may possible that we may understand the question different way and we can edit and change the answers if you argue, thanks :)