Rewterz Threat Advisory – CVE-2019-1367 – Internet Explorer Scripting Engine Memory Corruption Vulnerability
September 24, 2019Rewterz Threat Alert – QNAPCrypt Ransomware New Variant
September 24, 2019Severity
Medium
Analysis summary
A denial of service vulnerability exists when Microsoft Defender improperly handles files. An attacker could exploit the vulnerability to prevent legitimate accounts from executing legitimate system binaries.
To exploit the vulnerability, an attacker would first require execution on the victim system.
Impact
Denial of service
Affected Vendors
Microsoft
Affected Products
Microsoft Defender
Remediation
Malware Protection Engine comes with an auto-update feature that will automatically install the newly patched version within 48 hours of its availability.