微软于周二发布了1月安全更新补丁，修复了51个从简单的欺骗攻击到远程执行代码的安全问题。
产品涉及.NET Framework、Adobe Flash Player、Android App、ASP.NET、Internet Explorer、Microsoft Edge、Microsoft Exchange Server、Microsoft JET Database Engine、Microsoft Office、Microsoft Office SharePoint、Microsoft Scripting Engine、Microsoft Windows、Microsoft XML、Servicing Stack Updates、Visual Studio、Windows COM、Windows DHCP Client、Windows Hyper-V、Windows Kernel以及Windows Subsystem for Linux。
漏洞简介
相关信息如下：
|
产品 |
CVE 编号 |
CVE 标题 |
严重程度 |
|
.NET Framework |
CVE-2019-0545 |
.NET Framework 信息泄露漏洞 |
Important |
|
Adobe Flash Player |
ADV190001 |
January 2019 Adobe Flash Update |
Unknown |
|
Android App |
CVE-2019-0622 |
Skype for Android 特权提升漏洞 |
Moderate |
|
ASP.NET |
CVE-2019-0548 |
ASP.NET Core 拒绝服务漏洞 |
Important |
|
ASP.NET |
CVE-2019-0564 |
ASP.NET Core 拒绝服务漏洞 |
Important |
|
Internet Explorer |
CVE-2019-0541 |
MSHTML Engine 远程代码执行漏洞 |
Important |
|
Microsoft Edge |
CVE-2019-0565 |
Microsoft Edge 内存破坏漏洞 |
Critical |
|
Microsoft Edge |
CVE-2019-0566 |
Microsoft Edge 特权提升漏洞 |
Important |
|
Microsoft Exchange Server |
CVE-2019-0586 |
Microsoft Exchange 内存破坏漏洞 |
Important |
|
Microsoft Exchange Server |
CVE-2019-0588 |
Microsoft Exchange 信息泄露漏洞 |
Important |
|
Microsoft JET Database Engine |
CVE-2019-0538 |
Jet Database Engine 远程代码执行漏洞 |
Important |
|
Microsoft JET Database Engine |
CVE-2019-0575 |
Jet Database Engine 远程代码执行漏洞 |
Important |
|
Microsoft JET Database Engine |
CVE-2019-0576 |
Jet Database Engine 远程代码执行漏洞 |
Important |
|
Microsoft JET Database Engine |
CVE-2019-0577 |
Jet Database Engine 远程代码执行漏洞 |
Important |
|
Microsoft JET Database Engine |
CVE-2019-0578 |
Jet Database Engine 远程代码执行漏洞 |
Important |
|
Microsoft JET Database Engine |
CVE-2019-0579 |
Jet Database Engine 远程代码执行漏洞 |
Important |
|
Microsoft JET Database Engine |
CVE-2019-0580 |
Jet Database Engine 远程代码执行漏洞 |
Important |
|
Microsoft JET Database Engine |
CVE-2019-0581 |
Jet Database Engine 远程代码执行漏洞 |
Important |
|
Microsoft JET Database Engine |
CVE-2019-0582 |
Jet Database Engine 远程代码执行漏洞 |
Important |
|
Microsoft JET Database Engine |
CVE-2019-0583 |
Jet Database Engine 远程代码执行漏洞 |
Important |
|
Microsoft JET Database Engine |
CVE-2019-0584 |
Jet Database Engine 远程代码执行漏洞 |
Important |
|
Microsoft Office |
CVE-2019-0585 |
Microsoft Word 远程代码执行漏洞 |
Important |
|
Microsoft Office |
CVE-2019-0559 |
Microsoft Outlook 信息泄露漏洞 |
Important |
|
Microsoft Office |
CVE-2019-0560 |
Microsoft Office 信息泄露漏洞 |
Important |
|
Microsoft Office |
CVE-2019-0561 |
Microsoft Word 信息泄露漏洞 |
Important |
|
Microsoft Office SharePoint |
CVE-2019-0556 |
Microsoft Office SharePoint XSS Vulnerability |
Important |
|
Microsoft Office SharePoint |
CVE-2019-0557 |
Microsoft Office SharePoint XSS Vulnerability |
Important |
|
Microsoft Office SharePoint |
CVE-2019-0558 |
Microsoft Office SharePoint XSS Vulnerability |
Important |
|
Microsoft Office SharePoint |
CVE-2019-0562 |
Microsoft SharePoint 特权提升漏洞 |
Important |
|
Microsoft Scripting Engine |
CVE-2019-0539 |
Chakra Scripting Engine 内存破坏漏洞 |
Critical |
|
Microsoft Scripting Engine |
CVE-2019-0567 |
Chakra Scripting Engine 内存破坏漏洞 |
Critical |
|
Microsoft Scripting Engine |
CVE-2019-0568 |
Chakra Scripting Engine 内存破坏漏洞 |
Critical |
|
Microsoft Windows |
CVE-2019-0543 |
Microsoft Windows 特权提升漏洞 |
Important |
|
Microsoft Windows |
CVE-2019-0570 |
Windows Runtime 特权提升漏洞 |
Important |
|
Microsoft Windows |
CVE-2019-0571 |
Windows Data Sharing Service 特权提升漏洞 |
Important |
|
Microsoft Windows |
CVE-2019-0572 |
Windows Data Sharing Service 特权提升漏洞 |
Important |
|
Microsoft Windows |
CVE-2019-0573 |
Windows Data Sharing Service 特权提升漏洞 |
Important |
|
Microsoft Windows |
CVE-2019-0574 |
Windows Data Sharing Service 特权提升漏洞 |
Important |
|
Microsoft XML |
CVE-2019-0555 |
Microsoft XmlDocument 特权提升漏洞 |
Important |
|
Servicing Stack Updates |
ADV990001 |
Latest Servicing Stack Updates |
Critical |
|
Visual Studio |
CVE-2019-0537 |
Microsoft Visual Studio 信息泄露漏洞 |
Important |
|
Visual Studio |
CVE-2019-0546 |
Visual Studio 远程代码执行漏洞 |
Moderate |
|
Windows COM |
CVE-2019-0552 |
Windows COM 特权提升漏洞 |
Important |
|
Windows DHCP Client |
CVE-2019-0547 |
Windows DHCP Client 远程代码执行漏洞 |
Critical |
|
Windows Hyper-V |
CVE-2019-0550 |
Windows Hyper-V 远程代码执行漏洞 |
Critical |
|
Windows Hyper-V |
CVE-2019-0551 |
Windows Hyper-V 远程代码执行漏洞 |
Critical |
|
Windows Kernel |
CVE-2019-0536 |
Windows Kernel 信息泄露漏洞 |
Important |
|
Windows Kernel |
CVE-2019-0549 |
Windows Kernel 信息泄露漏洞 |
Important |
|
Windows Kernel |
CVE-2019-0554 |
Windows Kernel 信息泄露漏洞 |
Important |
|
Windows Kernel |
CVE-2019-0569 |
Windows Kernel 信息泄露漏洞 |
Important |
|
Windows Subsystem for Linux |
CVE-2019-0553 |
Windows Subsystem for Linux 信息泄露漏洞 |
Important |
修复建议
微软官方已经发布更新补丁，请及时进行补丁更新。
附录