As part of our September patch Tuesday announcement, we'd like to let you know that "Microsoft released out-of-band security updates to fix IE zero-day & Defender bug"

With Radia, these vulnerabilities can be seamlessly distributed to your end point infrastructure as our patch Tuesday tests are complete. We strongly encourage our customers to immediately consider testing and rolling out these KB articles to their end point infrastructure.  We’ve provided the CVEs and KB article mapping below for mitigating these vulnerabilities:

Microsoft Security Update web site:

https://portal.msrc.microsoft.com/en-us/security-guidance/summary

CVE-2019-1367 | Scripting Engine Memory Corruption Vulnerability

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1367

CVE-2019-1255 | Microsoft Defender Denial of Service Vulnerability

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1255

The WUASCAN.CAB file which was released during the September patch Tuesday does not contain the information about these patches. Radia Patch Manager can still acquire and patch these vulnerabilities using our XML descriptor files which are available via support or enabling the Non-security data feed in the console.

If you’ve any questions regarding this kindly talk to Radia support team support@accelerite.com.