本月微软补丁日共六个漏洞被提前公开，其中两个Windows特权提升漏洞CVE-2019-0797和CVE-2019-0808被国外的安全研究员发现了野外利用，微软紧急修复了这两个Win32k提权0day漏洞。
CVE-2019-0797是一个win32k驱动程序中存在竞争条件引发的漏洞，它的产生是由于未记录的系统调用NtDCompositionDiscardFrame和NtDCompositionDestroyConnection之间缺乏正确同步。黑客需登录系统，并通过运行特制的应用程序利用该漏洞进行攻击，成功利用漏洞可以让黑客在内核模式下运行任意代码，黑客可以完全控制受影响的系统。
这是除了CVE-2018-8589和CVE-2018-8611之外，同一APT组织SandCat所使用的第三种利用竞争条件的0day漏洞攻击。该漏洞影响从Windows 8到Windows 10 1703 64位的所有操作系统。
CVE-2019-0808则是上周被公布在野利用的一枚0day漏洞，该漏洞的利用方式与前者类似，成功利用它可以让黑客在内核模式下运行任意代码。
攻击者将它和Chrome浏览器0day漏洞CVE-2019-5786组合在一起发动漏洞利用攻击。在CVE-2019-5786帮助攻击者逃离Chrome安全沙箱后，再利用CVE-2019-0808是提升的管理员权限执行其恶意代码。
除此之外，本月还一次性公布了3个Windows DHCP客户端远程执行代码漏洞（CVE-2019-0697，CVE-2019-0698，CVE-2019-0726），影响Windows 10 1803- Windows 10 1809的所有系统，无需用户交互即可被利用，成功利用后可在客户端计算机上运行任意代码。漏洞威胁程度较高，建议优先修复。
漏洞编号：CVE-2019-0808
漏洞曝光时间：2019-03-13
漏洞风险程度：重要
漏洞曝光程度：已公开
受影响软件以及版本：
|
Windows 7 for 32-bit Systems Service Pack 1 |
|
Windows 7 for 32-bit Systems Service Pack 1 |
|
Windows 7 for x64-based Systems Service Pack 1 |
|
Windows 7 for x64-based Systems Service Pack 1 |
|
Windows Server 2008 for 32-bit Systems Service Pack 2 |
|
Windows Server 2008 for 32-bit Systems Service Pack 2 |
|
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) |
|
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) |
|
Windows Server 2008 for Itanium-Based Systems Service Pack 2 |
|
Windows Server 2008 for Itanium-Based Systems Service Pack 2 |
|
Windows Server 2008 for x64-based Systems Service Pack 2 |
|
Windows Server 2008 for x64-based Systems Service Pack 2 |
|
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) |
|
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) |
|
Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1 |
|
Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1 |
|
Windows Server 2008 R2 for x64-based Systems Service Pack 1 |
|
Windows Server 2008 R2 for x64-based Systems Service Pack 1 |
|
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) |
|
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) |
漏洞编号：CVE-2019-0797
漏洞曝光时间：2019-03-13
漏洞风险程度：重要
漏洞曝光程度：已公开
受影响软件以及版本：
|
Windows 10 for 32-bit Systems |
|
Windows 10 for x64-based Systems |
|
Windows 10 Version 1607 for 32-bit Systems |
|
Windows 10 Version 1607 for x64-based Systems |
|
Windows 10 Version 1703 for 32-bit Systems |
|
Windows 10 Version 1703 for x64-based Systems |
|
Windows 10 Version 1709 for 32-bit Systems |
|
Windows 10 Version 1709 for 64-based Systems |
|
Windows 10 Version 1709 for ARM64-based Systems |
|
Windows 10 Version 1803 for 32-bit Systems |
|
Windows 10 Version 1803 for ARM64-based Systems |
|
Windows 10 Version 1803 for x64-based Systems |
|
Windows 10 Version 1809 for 32-bit Systems |
|
Windows 10 Version 1809 for ARM64-based Systems |
|
Windows 10 Version 1809 for x64-based Systems |
|
Windows 8.1 for 32-bit systems |
|
Windows 8.1 for 32-bit systems |
|
Windows 8.1 for x64-based systems |
|
Windows 8.1 for x64-based systems |
|
Windows RT 8.1 |
|
Windows Server 2012 |
|
Windows Server 2012 |
|
Windows Server 2012 (Server Core installation) |
|
Windows Server 2012 (Server Core installation) |
|
Windows Server 2012 R2 |
|
Windows Server 2012 R2 |
|
Windows Server 2012 R2 (Server Core installation) |
|
Windows Server 2012 R2 (Server Core installation) |
|
Windows Server 2016 |
|
Windows Server 2016 (Server Core installation) |
|
Windows Server 2019 |
|
Windows Server 2019 (Server Core installation) |
|
Windows Server, version 1709 (Server Core Installation) |
|
Windows Server, version 1803 (Server Core Installation) |
目前，腾讯电脑管家已第一时间推送以上漏洞补丁，为避免被黑客攻击，建议大家进及时行漏洞修复，保护个人隐私安全。
微软安全公告链接：
https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2019-0797；
https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2019-0808；
参考链接：
https://securelist.com/cve-2019-0797-zero-day-vulnerability/89885/
