Critical Patches Issued for Microsoft Products

Summary

Multiple vulnerabilities have been discovered in Microsoft products, the most severe of which could allow for remote code execution. Successful exploitation of the most severe of these vulnerabilities could result in an attacker gaining the same privileges as the logged on user. Depending on the privileges associated with the user, an attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than those who operate with administrative user rights.

Threat Intelligence

There are currently no reports of these vulnerabilities being exploited in the wild.

Systems Affected

• ChakraCore
• Dynamics 365
• Internet Explorer 11, 9
• Microsoft Access 2010, 2013, 2016
• Microsoft Business Productivity Servers 2010
• Microsoft Dynamics 365
• Microsoft Dynamics NAV 2013, 2015, 2016, 2017, 2018
• Microsoft Edge (EdgeHTML-based)
• Microsoft Excel 2010, 2013, 2016
• Microsoft Forefront Endpoint Protection 2010
• Microsoft Office 2010, 2013, 2016, 2019
• Microsoft Office Online Server
• Microsoft Office Web Apps 2010, 2013
• Microsoft Outlook 2010, 2013, 2016
• Microsoft PowerPoint 2010, 2013, 2016
• Microsoft Project 2010, 2013, 2016
• Microsoft Project Server 2013
• Microsoft Publisher 2010, 2013, 2016
• Microsoft RMS Sharing for Mac
• Microsoft Remote Desktop for Mac
• Microsoft Research JavaScript Cryptography Library V1.4
• Microsoft Security Essentials
• Microsoft SharePoint Enterprise Server 2013, 2016
• Microsoft SharePoint Foundation 2010, 2013
• Microsoft SharePoint Server 2010, 2019
• Microsoft System Center 2012, 2012 R2
• Microsoft System Center Endpoint Protection
• Microsoft Visio 2010, 2013, 2016
• Microsoft Visual Studio 2015, 2017, 2019
• Microsoft Word 2010, 2013, 2016
• Microsoft Your Phone Companion App for Android
• Office 365
• OneDrive for Windows
• Windows 7, 8.1, RT 8.1, 10
• Windows Defender

Risk

Government:

• Large and medium government entities: High
• Small government entities: Medium

Businesses:

• Large and medium government entities: High
• Small government entities: Medium

Home users: Low

Technical Details

Multiple vulnerabilities have been discovered in Microsoft products, the most severe of which could allow for remote code execution.

A full list of all vulnerabilities can be found here.

Recommendations

We recommend the following actions be taken:

• Apply appropriate patches or appropriate mitigations provided by Microsoft to vulnerable systems immediately after appropriate testing.
• Run all software as a non-privileged user (one without administrative rights) to diminish the effects of a successful attack.
• Remind all users not to visit untrusted websites or follow links provided by unknown or untrusted sources.
• Inform and educate users regarding threats posed by hypertext links contained in emails or attachments especially from untrusted sources.
• Apply the Principle of Least Privilege to all systems and services.

References

Microsoft: here and here

Reporting

The NJCCIC encourages recipients who discover signs of malicious cyber activity to contact the NJCCIC via the cyber incident report form by clicking here.

Please do not hesitate to contact the NJCCIC at njccic@cyber.nj.gov with any questions.