阅读： 0
微软于周二发布了9月安全更新补丁，修复了81个从简单的欺骗攻击到远程执行代码的安全问题
综述
微软于周二发布了9月安全更新补丁，修复了81个从简单的欺骗攻击到远程执行代码的安全问题，产品涉及.NET Core、.NET Framework、Active Directory、Adobe Flash Player、ASP.NET、Common Log File System Driver、Microsoft Browsers、Microsoft Edge、Microsoft Exchange Server、Microsoft Graphics Component、Microsoft JET Database Engine、Microsoft Office、Microsoft Office SharePoint、Microsoft Scripting Engine、Microsoft Windows、Microsoft Yammer、Project Rome、Servicing Stack Updates、Skype for Business and Microsoft Lync、Team Foundation Server、Visual Studio、Windows Hyper-V、Windows Kernel以及Windows RDP。
相关信息如下：
| 产品 | CVE 编号 | CVE 标题 | 严重程度 |
| .NET Core | CVE-2019-1301 | .NET Core 拒绝服务漏洞 | Important |
| .NET Framework | CVE-2019-1142 | .NET Framework 特权提升漏洞 | Important |
| Active Directory | CVE-2019-1273 | Active Directory Federation Services XSS Vulnerability | Important |
| Adobe Flash Player | ADV190022 | September 2019 Adobe Flash 安全更新 | Critical |
| ASP.NET | CVE-2019-1302 | ASP.NET Core Elevation Of Privilege Vulnerability | Important |
| Common Log File System Driver | CVE-2019-1214 | Windows Common Log File System Driver 特权提升漏洞 | Important |
| Common Log File System Driver | CVE-2019-1282 | Windows Common Log File System Driver 信息泄露漏洞 | Important |
| Microsoft Browsers | CVE-2019-1220 | Microsoft Browser 安全功能绕过漏洞 | Important |
| Microsoft Edge | CVE-2019-1299 | Microsoft Edge based on Edge HTML 信息泄露漏洞 | Important |
| Microsoft Exchange Server | CVE-2019-1233 | Microsoft Exchange 拒绝服务漏洞 | Important |
| Microsoft Exchange Server | CVE-2019-1266 | Microsoft Exchange 欺骗漏洞 | Important |
| Microsoft Graphics Component | CVE-2019-1216 | DirectX 信息泄露漏洞 | Important |
| Microsoft Graphics Component | CVE-2019-1244 | DirectWrite 信息泄露漏洞 | Important |
| Microsoft Graphics Component | CVE-2019-1245 | DirectWrite 信息泄露漏洞 | Important |
| Microsoft Graphics Component | CVE-2019-1251 | DirectWrite 信息泄露漏洞 | Important |
| Microsoft Graphics Component | CVE-2019-1252 | Windows GDI 信息泄露漏洞 | Important |
| Microsoft Graphics Component | CVE-2019-1283 | Microsoft Graphics Components 信息泄露漏洞 | Important |
| Microsoft Graphics Component | CVE-2019-1284 | DirectX 特权提升漏洞 | Important |
| Microsoft Graphics Component | CVE-2019-1286 | Windows GDI 信息泄露漏洞 | Important |
| Microsoft JET Database Engine | CVE-2019-1240 | Jet Database Engine 远程代码执行漏洞 | Important |
| Microsoft JET Database Engine | CVE-2019-1241 | Jet Database Engine 远程代码执行漏洞 | Important |
| Microsoft JET Database Engine | CVE-2019-1242 | Jet Database Engine 远程代码执行漏洞 | Important |
| Microsoft JET Database Engine | CVE-2019-1243 | Jet Database Engine 远程代码执行漏洞 | Important |
| Microsoft JET Database Engine | CVE-2019-1246 | Jet Database Engine 远程代码执行漏洞 | Important |
| Microsoft JET Database Engine | CVE-2019-1247 | Jet Database Engine 远程代码执行漏洞 | Important |
| Microsoft JET Database Engine | CVE-2019-1248 | Jet Database Engine 远程代码执行漏洞 | Important |
| Microsoft JET Database Engine | CVE-2019-1249 | Jet Database Engine 远程代码执行漏洞 | Important |
| Microsoft JET Database Engine | CVE-2019-1250 | Jet Database Engine 远程代码执行漏洞 | Important |
| Microsoft Office | CVE-2019-1297 | Microsoft Excel 远程代码执行漏洞 | Important |
| Microsoft Office | CVE-2019-1263 | Microsoft Excel 信息泄露漏洞 | Important |
| Microsoft Office | CVE-2019-1264 | Microsoft Office 安全功能绕过漏洞 | Important |
| Microsoft Office SharePoint | CVE-2019-1257 | Microsoft SharePoint 远程代码执行漏洞 | Critical |
| Microsoft Office SharePoint | CVE-2019-1259 | Microsoft SharePoint 欺骗漏洞 | Moderate |
| Microsoft Office SharePoint | CVE-2019-1260 | Microsoft SharePoint 特权提升漏洞 | Important |
| Microsoft Office SharePoint | CVE-2019-1261 | Microsoft SharePoint 欺骗漏洞 | Important |
| Microsoft Office SharePoint | CVE-2019-1262 | Microsoft Office SharePoint XSS Vulnerability | Important |
| Microsoft Office SharePoint | CVE-2019-1295 | Microsoft SharePoint 远程代码执行漏洞 | Critical |
| Microsoft Office SharePoint | CVE-2019-1296 | Microsoft SharePoint 远程代码执行漏洞 | Critical |
| Microsoft Scripting Engine | CVE-2019-1138 | Chakra Scripting Engine 内存破坏漏洞 | Moderate |
| Microsoft Scripting Engine | CVE-2019-1208 | VBScript 远程代码执行漏洞 | Critical |
| Microsoft Scripting Engine | CVE-2019-1217 | Chakra Scripting Engine 内存破坏漏洞 | Critical |
| Microsoft Scripting Engine | CVE-2019-1221 | Scripting Engine 内存破坏漏洞 | Critical |
| Microsoft Scripting Engine | CVE-2019-1236 | VBScript 远程代码执行漏洞 | Critical |
| Microsoft Scripting Engine | CVE-2019-1237 | Chakra Scripting Engine 内存破坏漏洞 | Critical |
| Microsoft Scripting Engine | CVE-2019-1298 | Chakra Scripting Engine 内存破坏漏洞 | Moderate |
| Microsoft Scripting Engine | CVE-2019-1300 | Chakra Scripting Engine 内存破坏漏洞 | Critical |
| Microsoft Windows | CVE-2019-1215 | Windows 特权提升漏洞 | Important |
| Microsoft Windows | CVE-2019-1219 | Windows Transaction Manager 信息泄露漏洞 | Important |
| Microsoft Windows | CVE-2019-1267 | Microsoft Compatibility Appraiser 特权提升漏洞 | Important |
| Microsoft Windows | CVE-2019-1268 | Winlogon 特权提升漏洞 | Important |
| Microsoft Windows | CVE-2019-1269 | Windows ALPC 特权提升漏洞 | Important |
| Microsoft Windows | CVE-2019-1270 | Microsoft Windows Store Installer 特权提升漏洞 | Important |
| Microsoft Windows | CVE-2019-1271 | Windows Media 特权提升漏洞 | Important |
| Microsoft Windows | CVE-2019-1272 | Windows ALPC 特权提升漏洞 | Important |
| Microsoft Windows | CVE-2019-1235 | Windows Text Service Framework 特权提升漏洞 | Important |
| Microsoft Windows | CVE-2019-1253 | Windows 特权提升漏洞 | Important |
| Microsoft Windows | CVE-2019-1277 | Windows Audio Service 特权提升漏洞 | Important |
| Microsoft Windows | CVE-2019-1278 | Windows 特权提升漏洞 | Important |
| Microsoft Windows | CVE-2019-1280 | LNK 远程代码执行漏洞 | Critical |
| Microsoft Windows | CVE-2019-1287 | Windows Network Connectivity Assistant 特权提升漏洞 | Important |
| Microsoft Windows | CVE-2019-1289 | Windows Update Delivery Optimization 特权提升漏洞 | Important |
| Microsoft Windows | CVE-2019-1292 | Windows 拒绝服务漏洞 | Important |
| Microsoft Windows | CVE-2019-1294 | Windows Secure Boot 安全功能绕过漏洞 | Important |
| Microsoft Windows | CVE-2019-1303 | Windows 特权提升漏洞 | Important |
| Microsoft Yammer | CVE-2019-1265 | Microsoft Yammer 安全功能绕过漏洞 | Important |
| Project Rome | CVE-2019-1231 | Rome SDK 信息泄露漏洞 | Important |
| Servicing Stack Updates | ADV990001 | Latest Servicing Stack Updates | Critical |
| Skype for Business and Microsoft Lync | CVE-2019-1209 | Lync 2013 信息泄露漏洞 | Important |
| Team Foundation Server | CVE-2019-1305 | Team Foundation Server Cross-site Scripting Vulnerability | Important |
| Team Foundation Server | CVE-2019-1306 | Azure DevOps and Team Foundation Server 远程代码执行漏洞 | Critical |
| Visual Studio | CVE-2019-1232 | Diagnostics Hub Standard Collector Service 特权提升漏洞 | Important |
| Windows Hyper-V | CVE-2019-0928 | Windows Hyper-V 拒绝服务漏洞 | Important |
| Windows Hyper-V | CVE-2019-1254 | Windows Hyper-V 信息泄露漏洞 | Important |
| Windows Kernel | CVE-2019-1274 | Windows Kernel 信息泄露漏洞 | Important |
| Windows Kernel | CVE-2019-1256 | Win32k 特权提升漏洞 | Important |
| Windows Kernel | CVE-2019-1285 | Win32k 特权提升漏洞 | Important |
| Windows Kernel | CVE-2019-1293 | Windows SMB Client Driver 信息泄露漏洞 | Important |
| Windows RDP | CVE-2019-0787 | Remote Desktop Client 远程代码执行漏洞 | Critical |
| Windows RDP | CVE-2019-0788 | Remote Desktop Client 远程代码执行漏洞 | Critical |
| Windows RDP | CVE-2019-1290 | Remote Desktop Client 远程代码执行漏洞 | Critical |
| Windows RDP | CVE-2019-1291 | Remote Desktop Client 远程代码执行漏洞 | Critical |
修复建议
微软官方已经发布更新补丁，请及时进行补丁更新。
完整报告原文下载：