Microsoft Security Update Releases Issued: August 19, 2019

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

**************************************************************************************
Title: Microsoft Security Update Releases
Issued: August 19, 2019
**************************************************************************************

Summary
=======

The following CVE and advisory have undergone a major revision increment:

* CVE-2019-1108
* ADV170021


Revision Information:
=====================

- CVE-2019-1108 | Remote Desktop Protocol Client Information Disclosure
Vulnerability
- https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2019-1108
- Version: 2.0
- Reason for Revision: Added Microsoft Remote Desktop for Android to the Security
Updates table because it is affected by this vulnerability. Microsoft recommends
that customers running Microsoft Remote Desktop for Android install the latest
security update to be fully protected from this vulnerability. Added an FAQ to
explain how to get the update for Android.
- Originally posted: July 9, 2019
- Updated: August 16, 2019
- Aggregate CVE Severity Rating: Important

- ADV170021 | Microsoft Office Defense in Depth Update
- https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/ADV170021
- Version: 3.0
- Reason for Revision: ADV170021 has been revised to announce that the DDE Server is
now disabled by default for certain versions of Office 365.
- Originally posted: December 12, 2017
- Updated: August 13, 2019
- Aggregate CVE Severity Rating: None


**************************************************************************************

Other Information
=================

Recognize and avoid fraudulent email to Microsoft customers:
======================================================================================

If you receive an email message that claims to be distributing a Microsoft security update, it is a hoax that may contain malware or pointers to malicious websites.
Microsoft does not distribute security updates via email.