{"metadata": {"vulnerability": "CVE-2019-1182", "count": 43, "kinds": {"milestone": 6, "sighting": 11, "kev": 0, "other": 26}, "linked_omitted": 0}, "data": [{"timestamp": "2018-11-26T00:00:00Z", "date_only": false, "value": "2018-11-26T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2019-1182", "field": "cveMetadata.dateReserved"}, {"timestamp": "2019-05-29T07:35:00Z", "date_only": false, "value": "2019-05-29T07:35:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_pepperlfuchsse \u00b7 VDE-2019-011", "record": "VDE-2019-011", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2019-05-29T07:35:00Z", "date_only": false, "value": "2019-05-29T07:35:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_pepperlfuchsse \u00b7 VDE-2019-011", "record": "VDE-2019-011", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2019-08-13T05:00:00Z", "date_only": false, "value": "2019-08-13T05:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://msrc.microsoft.com/blog/2019/08/patch-new-wormable-vulnerabilities-in-remote-desktop-services-cve-2019-1181-1182/", "record": "CVE-2019-1182", "field": "creation_timestamp", "uuid": "b488a6ae-49f7-43b7-b6f8-df48ef1c93a3", "url": "https://msrc.microsoft.com/blog/2019/08/patch-new-wormable-vulnerabilities-in-remote-desktop-services-cve-2019-1181-1182/"}, {"timestamp": "2019-08-13T07:00:00Z", "date_only": false, "value": "2019-08-13T07:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / microsoft", "record": "CVE-2019-1182", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2019-08-13T23:12:13Z", "date_only": false, "value": "2019-08-13T23:12:13.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cybershit/558", "record": "CVE-2019-1182", "field": "creation_timestamp", "uuid": "04e7309c-cc96-47db-9d82-e02d4bb5890d", "content": "\u041d\u0435 \u0443\u0441\u043f\u0435\u043b\u0438 \u043e\u0442\u043e\u0439\u0442\u0438 \u043e\u0442 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0435\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 RDS (BlueKeep), \u043f\u043e\u043b\u0443\u0447\u0430\u0439\u0442\u0435 \u043d\u043e\u0432\u044b\u0435 \u2014 CVE-2019-1181, CVE-2019-1182, CVE-2019-1222, CVE-2019-1226, \u0432 \u044d\u0442\u043e\u0442 \u0440\u0430\u0437 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 \u0441\u0430\u043c\u043e\u0439 \u043a\u043e\u043c\u0430\u043d\u0434\u043e\u0439 Microsoft.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u044b: \n*7SP1\n*Server 2008 R2 SP1\n*Server 2012 & R2\n*8.1\n*\u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 Windows 10, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u0435\n\n\u041d\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u044b:\n*XP\n*Server 2003, 2008\n\n[RU] https://habr.com/ru/post/463591\n\n\u041f\u0430\u0442\u0447\u0438:\nhttps://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1181\nhttps://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1182\nhttps://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1222\nhttps://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1226\n\n\u0421\u043e\u043d \u0434\u043b\u044f \u0441\u043b\u0430\u0431\u0430\u043a\u043e\u0432, \u0432\u043f\u0435\u0440\u0435\u0434 \u043f\u0430\u0442\u0447\u0438\u0442\u044c!", "url": "https://t.me/cybershit/558"}, {"timestamp": "2019-08-14T00:00:00Z", "date_only": true, "value": "2019-08-14", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2019-27324", "record": "CNVD-2019-27324", "field": "openTime", "linked_record": true}, {"timestamp": "2019-08-14T00:00:00Z", "date_only": false, "value": "2019-08-14T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_alerte \u00b7 CERTFR-2019-ALE-012", "record": "CERTFR-2019-ALE-012", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2019-08-14T00:00:00Z", "date_only": false, "value": "2019-08-14T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2019-AVI-397", "record": "CERTFR-2019-AVI-397", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2019-08-14T00:00:00Z", "date_only": true, "value": "2019-08-14", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2019-27324", "record": "CNVD-2019-27324", "field": "submitTime", "linked_record": true}, {"timestamp": "2019-08-14T04:00:00Z", "date_only": false, "value": "2019-08-14T04:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=410", "record": "CVE-2019-1182", "field": "creation_timestamp", "uuid": "f73a4b03-c113-4e0d-895f-da5d2ab8981d", "url": "https://www.govcert.gov.hk/en/alerts_detail.php?id=410"}, {"timestamp": "2019-08-14T06:05:15Z", "date_only": false, "value": "2019-08-14T06:05:15.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/information_security_channel/30178", "record": "CVE-2019-1182", "field": "creation_timestamp", "uuid": "7a16bced-4a68-4568-bf1f-6b3ee7d36fa7", "content": "Microsoft released new security updates under Patch Tuesday for August and fixed more than 90 vulnerabilities including 2 Bluekep based \u201cwormable \u201cremote code execution vulnerabilities that reside in the windows remote desktop services. Same as Bluekeep RDP flaw, newly discovered two RCE vulnerabilities (CVE-2019-1181\u00a0and\u00a0CVE-2019-1182) in remote desktop services are \u201cWormable\u201d that means attackers propagate the [\u2026]\nThe post 2 \u201cWormable\u201d Bluekeep Based RCE Bugs in Windows Remote Desktop Services let Hackers Control Your System Remotely (https://gbhackers.com/wormable-rce-bugs/) appeared first on GBHackers On Security (https://gbhackers.com/).", "url": "https://t.me/information_security_channel/30178", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2019-08-14T08:12:32Z", "date_only": false, "value": "2019-08-14T08:12:32.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/SecLabNews/5590", "record": "CVE-2019-1182", "field": "creation_timestamp", "uuid": "cd9a3cca-768f-4563-9a5f-1275e94af4c5", "content": "\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Microsoft \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0432 Remote Desktop Services (RDS) \u0447\u0435\u0442\u044b\u0440\u0435 \u043d\u043e\u0432\u044b\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0430\u043f\u043e\u0434\u043e\u0431\u0438\u0435 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 BlueKeep. \u041a\u0430\u043a \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0442 \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u044b, CVE-2019-1181, CVE-2019-1182, CVE-2019-1222 \u0438 CVE-2019-1226 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439 \u0431\u0435\u0437 \u043a\u0430\u043a\u043e\u0433\u043e-\u043b\u0438\u0431\u043e \u0443\u0447\u0430\u0441\u0442\u0438\u044f \u0441\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u044b \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.    \n\u041d\u043e\u0432\u044b\u0435 \u0447\u0435\u0440\u0432\u0435\u043e\u0431\u0440\u0430\u0437\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 Windows 10", "url": "https://t.me/SecLabNews/5590"}, {"timestamp": "2019-08-14T11:53:58Z", "date_only": false, "value": "2019-08-14T11:53:58.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/alexmakus/2993", "record": "CVE-2019-1182", "field": "creation_timestamp", "uuid": "94b0e955-e506-47aa-b924-9de6e3706af7", "content": "\u043f\u043e \u043d\u0430\u0432\u043e\u0434\u043a\u0435 \u0447\u0438\u0442\u0430\u0442\u0435\u043b\u044f: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Windows, \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u0430\u044f \u043d\u0430\u0448\u0443\u043c\u0435\u0432\u0448\u0435\u0439 BlueKeep (CVE-2019-0708), \u0442\u043e\u043b\u044c\u043a\u043e \u044d\u0442\u043e\u0442 \u0440\u0430\u0437 \u043d\u0435 \u043d\u0430\u0434\u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043f\u0430\u0442\u0447 \u0434\u043b\u044f Windows XP. \u0417\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b \u0432\u0435\u0440\u0441\u0438\u0438 \u043e\u0442 Windows 7 SP1 \u0434\u043e Windows 10, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u0430\u043a \u043f\u0438\u0448\u0435\u0442 Microsoft, \"wormable\", \u0442\u043e \u0435\u0441\u0442\u044c \u0438\u043c\u0435\u044e\u0442 \u0441\u0432\u043e\u0439\u0441\u0442\u0432\u043e \u0440\u0430\u0437\u043c\u043d\u043e\u0436\u0430\u0442\u044c\u0441\u044f \u043c\u0435\u0436\u0434\u0443 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430\u043c\u0438 \u0431\u0435\u0437 \u043f\u043e\u043c\u043e\u0449\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439. \n\nhttps://msrc-blog.microsoft.com/2019/08/13/patch-new-wormable-vulnerabilities-in-remote-desktop-services-cve-2019-1181-1182/\n\n\u0430\u043f\u0434\u0435\u0439\u0442\u044b \u0431\u0440\u0430\u0442\u044c \u0442\u0443\u0442 \nhttps://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1182\n\n\u041a\u0442\u043e \u043d\u0435 \u043f\u0440\u043e\u0430\u043f\u0434\u0435\u0439\u0442\u0438\u043b\u0441\u044f, \u0442\u043e\u0442 \u0441\u0430\u043c \u0441\u0435\u0431\u0435 \u041a\u0435\u0432\u0438\u043d \u041c\u0438\u0442\u043d\u0438\u043a.", "url": "https://t.me/alexmakus/2993", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2019-08-14T13:17:22Z", "date_only": false, "value": "2019-08-14T13:17:22.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/microsoftin-etatyopoyta-sovelluksen-haavoittuvuuksia-hyodynnetaan-tietomurroissa", "record": "CVE-2019-1182", "field": "creation_timestamp", "uuid": "a97fb744-6609-4535-addd-fdfff4bada49", "url": "https://www.kyberturvallisuuskeskus.fi/fi/microsoftin-etatyopoyta-sovelluksen-haavoittuvuuksia-hyodynnetaan-tietomurroissa"}, {"timestamp": "2019-08-14T20:55:04Z", "date_only": false, "value": "2019-08-14T20:55:04.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2019-1182", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2019-08-14T21:15:00Z", "date_only": false, "value": "2019-08-14T21:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-VW3C-3FMQ-QPGQ", "record": "GHSA-VW3C-3FMQ-QPGQ", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2019-08-14T21:15:00Z", "date_only": false, "value": "2019-08-14T21:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2019-1182", "record": "GSD-2019-1182", "field": "namespaces.nvd.nist.gov.publishedDate", "linked_record": true}, {"timestamp": "2019-08-14T21:15:16.813Z", "date_only": false, "value": "2019-08-14T21:15:16.813", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2019-1182", "record": "FKIE_CVE-2019-1182", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2019-09-10T00:00:00Z", "date_only": true, "value": "2019-09-10", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2019-AVI-429", "record": "CERTFR-2019-AVI-429", "field": "initial_release_date", "linked_record": true, "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2019-09-10T00:00:00Z", "date_only": false, "value": "2019-09-10T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2019-AVI-429", "record": "CERTFR-2019-AVI-429", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2019-10-07T10:00:00Z", "date_only": false, "value": "2019-10-07T10:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_pepperlfuchsse \u00b7 VDE-2019-011", "record": "VDE-2019-011", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2019-10-07T10:00:00Z", "date_only": false, "value": "2019-10-07T10:00:00.000Z", "kind": "other", "label": "Updated", "source": "csaf_pepperlfuchsse \u00b7 VDE-2019-011", "record": "VDE-2019-011", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2019-10-25T00:00:00Z", "date_only": false, "value": "2019-10-25T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_alerte \u00b7 CERTFR-2019-ALE-012", "record": "CERTFR-2019-ALE-012", "field": "revisions.2.revision_date", "linked_record": true}, {"timestamp": "2019-11-08T10:29:26Z", "date_only": false, "value": "2019-11-08T10:29:26.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/5dc3d86a-32a4-41c7-90f7-4ca0950d210f", "record": "CVE-2019-1182", "field": "creation_timestamp", "uuid": "bd3d262f-a0d3-43c9-a807-98b3401dfd59"}, {"timestamp": "2019-11-12T00:00:00Z", "date_only": false, "value": "2019-11-12T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2019-AVI-553", "record": "CERTFR-2019-AVI-553", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2020-08-24T17:37:00Z", "date_only": false, "value": "2020-08-24T17:37Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2019-1182", "record": "GSD-2019-1182", "field": "namespaces.nvd.nist.gov.lastModifiedDate", "linked_record": true}, {"timestamp": "2022-05-24T22:29:00Z", "date_only": false, "value": "2022-05-24T22:29:00Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-VW3C-3FMQ-QPGQ", "record": "GHSA-VW3C-3FMQ-QPGQ", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-12-13T01:23:51.528Z", "date_only": false, "value": "2023-12-13T01:23:51.528054Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2019-1182", "record": "GSD-2019-1182", "field": "gsd.osvSchema.modified", "linked_record": true}, {"timestamp": "2024-05-29T16:50:35.379Z", "date_only": false, "value": "2024-05-29T16:50:35.379Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / microsoft", "record": "CVE-2019-1182", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-06-18T20:42:39.694Z", "date_only": false, "value": "2024-06-18T20:42:39.694032Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2019-1182", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2024-06-18T20:42:39.694Z", "date_only": false, "value": "2024-06-18T20:42:39.694032Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2019-1182", "record": "FKIE_CVE-2019-1182", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2024-06-18T20:42:46.392Z", "date_only": false, "value": "2024-06-18T20:42:46.392Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2019-1182", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-04T18:13:29.139Z", "date_only": false, "value": "2024-08-04T18:13:29.139Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2019-1182", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-04T18:13:29.139Z", "date_only": false, "value": "2024-08-04T18:13:29.139Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2019-1182", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-06-30T08:12:23.200Z", "date_only": false, "value": "2025-06-30T08:12:23.200Z", "kind": "other", "label": "Document generated", "source": "csaf_pepperlfuchsse \u00b7 VDE-2019-011", "record": "VDE-2019-011", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-02-20T21:31:10Z", "date_only": false, "value": "2026-02-20T21:31:10Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-VW3C-3FMQ-QPGQ", "record": "GHSA-VW3C-3FMQ-QPGQ", "field": "modified", "linked_record": true}, {"timestamp": "2026-06-17T02:28:01.557Z", "date_only": false, "value": "2026-06-17T02:28:01.557", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2019-1182", "record": "FKIE_CVE-2019-1182", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-07-29T12:01:52.228Z", "date_only": false, "value": "2026-07-29T12:01:52.228169Z", "kind": "sighting", "label": "Seen", "source": "Telegram/KqgkUUPOH75KZwKv3x50T7l-W-hxbmte_81z4-0ashu2fQ", "record": "CVE-2019-1182", "field": "creation_timestamp", "uuid": "5a8d95b0-a3b9-428b-ad38-5b3b35435d95"}, {"timestamp": "2026-08-22T21:00:06.541Z", "date_only": false, "value": "2026-08-22T21:00:06.541226Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/nuancesprognews/469", "record": "CVE-2019-1182", "field": "creation_timestamp", "uuid": "840db309-b779-4f87-ad4c-ad7bbd21049f", "content": "\u200b\u200bMicrosoft \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432\u0438\u0434\u0430 BlueKeep \u0432 Windows\n\nMicrosoft \u043e\u0442\u0447\u0438\u0442\u0430\u043b\u0430\u0441\u044c \u0432 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438 \u0434\u0432\u0443\u0445 \u043e\u043f\u0430\u0441\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Windows Desktop Services. \u042d\u0442\u0438 \u0431\u0440\u0435\u0448\u0438 \u0441\u0445\u043e\u0436\u0438 \u0441\u043e \u0432\u0441\u0435\u043c \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0439 BlueKeep, \u0442\u043e \u0435\u0441\u0442\u044c \u043c\u043e\u0433\u0443\u0442 \u0441\u043f\u0440\u043e\u0432\u043e\u0446\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0447\u0435\u0440\u0432\u0435\u043e\u0431\u0440\u0430\u0437\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u2014 \u043a\u043e\u0433\u0434\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441 \u043f\u0435\u0440\u0435\u0431\u0438\u0440\u0430\u0435\u0442\u0441\u044f \u0441 \u043e\u0434\u043d\u043e\u0433\u043e \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430 \u043d\u0430 \u0434\u0440\u0443\u0433\u043e\u0439 \u0431\u0435\u0437 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c. \n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b CVE-2019-1181 \u0438 CVE-2019-1182. \u0421 \u0430\u0432\u0433\u0443\u0441\u0442\u043e\u0432\u0441\u043a\u0438\u043c \u043d\u0430\u0431\u043e\u0440\u043e\u043c \u043f\u0430\u0442\u0447\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0432\u044b\u0448\u0435\u043b \u0432\u0447\u0435\u0440\u0430, Microsoft \u0437\u0430\u043b\u0430\u0442\u0430\u043b\u0430 \u044d\u0442\u0438 \u0434\u044b\u0440\u044b. \n\n\u0425\u043e\u0440\u043e\u0448\u0430\u044f \u043d\u043e\u0432\u043e\u0441\u0442\u044c \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u0434\u0432\u0435 \u043d\u043e\u0432\u044b\u0435 \u0431\u0440\u0435\u0448\u0438 \u043d\u0435\u043b\u044c\u0437\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e Remote Desktop Protocol (RDP). \n\n\u00ab\u0421\u043f\u0438\u0441\u043e\u043a \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u043d\u043e\u0432\u044b\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 \u0432\u0435\u0440\u0441\u0438\u0439 \u0432\u044b\u0433\u043b\u044f\u0434\u0438\u0442 \u0442\u0430\u043a: Windows 7 SP1, Windows Server 2008 R2 SP1, Windows Server 2012, Windows 8.1, Windows Server 2012 R2, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 Windows 10\u00bb, \u2014 \u043e\u0431\u044a\u044f\u0441\u043d\u044f\u0435\u0442 \u0433\u043b\u0430\u0432\u0430 \u043e\u0442\u0434\u0435\u043b\u0430 \u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043d\u0430 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u044b \u0432 Microsoft Security Response Center (MSRC) \u0421\u0430\u0439\u043c\u043e\u043d \u041f\u043e\u0443\u043f. \u00ab\u0421\u0438\u0441\u0442\u0435\u043c\u0430\u043c Windows XP, Windows Server 2003 \u0438 Windows Server 2008 \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0435 \u0443\u0433\u0440\u043e\u0436\u0430\u044e\u0442\u00bb, \u2014 \u0434\u043e\u0431\u0430\u0432\u0438\u043b \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442.\n\n\u041f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u041f\u043e\u0443\u043f\u0430, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c \u044d\u0442\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0433\u043e \u0430\u0443\u0434\u0438\u0442\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u043b\u0430 \u043a\u043e\u043c\u0430\u043d\u0434\u0430 Microsoft. \u041c\u0435\u0441\u044f\u0446 \u043d\u0430\u0437\u0430\u0434 \u043c\u044b \u043f\u0438\u0441\u0430\u043b\u0438, \u0447\u0442\u043e \u0431\u043e\u043b\u0435\u0435 800 000 \u0441\u0438\u0441\u0442\u0435\u043c \u0432\u0441\u0435 \u0435\u0449\u0451 \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0434\u043b\u044f \u0430\u0442\u0430\u043a, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0431\u0440\u0435\u0448\u044c BlueKeep (CVE-2019-0708).\n\n\u27a1\ufe0f http://bit.ly/2YOnfnZ", "url": "https://t.me/nuancesprognews/469"}, {"timestamp": "2026-08-23T00:00:12.672Z", "date_only": false, "value": "2026-08-23T00:00:12.672538Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/nuancesprognews/469", "record": "CVE-2019-1182", "field": "creation_timestamp", "uuid": "630aa85a-d394-4884-8d0d-f8b0aae6f55a", "content": "\u200b\u200bMicrosoft \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432\u0438\u0434\u0430 BlueKeep \u0432 Windows\n\nMicrosoft \u043e\u0442\u0447\u0438\u0442\u0430\u043b\u0430\u0441\u044c \u0432 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438 \u0434\u0432\u0443\u0445 \u043e\u043f\u0430\u0441\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Windows Desktop Services. \u042d\u0442\u0438 \u0431\u0440\u0435\u0448\u0438 \u0441\u0445\u043e\u0436\u0438 \u0441\u043e \u0432\u0441\u0435\u043c \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0439 BlueKeep, \u0442\u043e \u0435\u0441\u0442\u044c \u043c\u043e\u0433\u0443\u0442 \u0441\u043f\u0440\u043e\u0432\u043e\u0446\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0447\u0435\u0440\u0432\u0435\u043e\u0431\u0440\u0430\u0437\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u2014 \u043a\u043e\u0433\u0434\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441 \u043f\u0435\u0440\u0435\u0431\u0438\u0440\u0430\u0435\u0442\u0441\u044f \u0441 \u043e\u0434\u043d\u043e\u0433\u043e \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430 \u043d\u0430 \u0434\u0440\u0443\u0433\u043e\u0439 \u0431\u0435\u0437 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c. \n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b CVE-2019-1181 \u0438 CVE-2019-1182. \u0421 \u0430\u0432\u0433\u0443\u0441\u0442\u043e\u0432\u0441\u043a\u0438\u043c \u043d\u0430\u0431\u043e\u0440\u043e\u043c \u043f\u0430\u0442\u0447\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0432\u044b\u0448\u0435\u043b \u0432\u0447\u0435\u0440\u0430, Microsoft \u0437\u0430\u043b\u0430\u0442\u0430\u043b\u0430 \u044d\u0442\u0438 \u0434\u044b\u0440\u044b. \n\n\u0425\u043e\u0440\u043e\u0448\u0430\u044f \u043d\u043e\u0432\u043e\u0441\u0442\u044c \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u0434\u0432\u0435 \u043d\u043e\u0432\u044b\u0435 \u0431\u0440\u0435\u0448\u0438 \u043d\u0435\u043b\u044c\u0437\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e Remote Desktop Protocol (RDP). \n\n\u00ab\u0421\u043f\u0438\u0441\u043e\u043a \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u043d\u043e\u0432\u044b\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 \u0432\u0435\u0440\u0441\u0438\u0439 \u0432\u044b\u0433\u043b\u044f\u0434\u0438\u0442 \u0442\u0430\u043a: Windows 7 SP1, Windows Server 2008 R2 SP1, Windows Server 2012, Windows 8.1, Windows Server 2012 R2, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 Windows 10\u00bb, \u2014 \u043e\u0431\u044a\u044f\u0441\u043d\u044f\u0435\u0442 \u0433\u043b\u0430\u0432\u0430 \u043e\u0442\u0434\u0435\u043b\u0430 \u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043d\u0430 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u044b \u0432 Microsoft Security Response Center (MSRC) \u0421\u0430\u0439\u043c\u043e\u043d \u041f\u043e\u0443\u043f. \u00ab\u0421\u0438\u0441\u0442\u0435\u043c\u0430\u043c Windows XP, Windows Server 2003 \u0438 Windows Server 2008 \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0435 \u0443\u0433\u0440\u043e\u0436\u0430\u044e\u0442\u00bb, \u2014 \u0434\u043e\u0431\u0430\u0432\u0438\u043b \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442.\n\n\u041f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u041f\u043e\u0443\u043f\u0430, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c \u044d\u0442\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0433\u043e \u0430\u0443\u0434\u0438\u0442\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u043b\u0430 \u043a\u043e\u043c\u0430\u043d\u0434\u0430 Microsoft. \u041c\u0435\u0441\u044f\u0446 \u043d\u0430\u0437\u0430\u0434 \u043c\u044b \u043f\u0438\u0441\u0430\u043b\u0438, \u0447\u0442\u043e \u0431\u043e\u043b\u0435\u0435 800 000 \u0441\u0438\u0441\u0442\u0435\u043c \u0432\u0441\u0435 \u0435\u0449\u0451 \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0434\u043b\u044f \u0430\u0442\u0430\u043a, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0431\u0440\u0435\u0448\u044c BlueKeep (CVE-2019-0708).\n\n\u27a1\ufe0f http://bit.ly/2YOnfnZ", "url": "https://t.me/nuancesprognews/469", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-24T00:00:00Z", "date_only": false, "value": "2026-09-24T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2019-AVI-429", "record": "CERTFR-2019-AVI-429", "field": "last_revision_date", "linked_record": true}, {"timestamp": "2026-09-24T00:00:00Z", "date_only": false, "value": "2026-09-24T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2019-AVI-429", "record": "CERTFR-2019-AVI-429", "field": "revisions.1.revision_date", "linked_record": true}], "metrics": {"as_of": "2026-11-11T01:12:51.073Z", "anchors": {"origin": {"timestamp": "2019-05-29T07:35:00Z", "date_only": false, "value": "2019-05-29T07:35:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_pepperlfuchsse \u00b7 VDE-2019-011", "record": "VDE-2019-011", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2019-05-29T07:35:00Z", "date_only": false, "value": "2019-05-29T07:35:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_pepperlfuchsse \u00b7 VDE-2019-011", "record": "VDE-2019-011", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "exploit_publication": {"timestamp": "2019-08-14T11:53:58Z", "date_only": false, "value": "2019-08-14T11:53:58.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/alexmakus/2993", "record": "CVE-2019-1182", "field": "creation_timestamp", "uuid": "94b0e955-e506-47aa-b924-9de6e3706af7", "content": "\u043f\u043e \u043d\u0430\u0432\u043e\u0434\u043a\u0435 \u0447\u0438\u0442\u0430\u0442\u0435\u043b\u044f: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Windows, \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u0430\u044f \u043d\u0430\u0448\u0443\u043c\u0435\u0432\u0448\u0435\u0439 BlueKeep (CVE-2019-0708), \u0442\u043e\u043b\u044c\u043a\u043e \u044d\u0442\u043e\u0442 \u0440\u0430\u0437 \u043d\u0435 \u043d\u0430\u0434\u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043f\u0430\u0442\u0447 \u0434\u043b\u044f Windows XP. \u0417\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b \u0432\u0435\u0440\u0441\u0438\u0438 \u043e\u0442 Windows 7 SP1 \u0434\u043e Windows 10, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u0430\u043a \u043f\u0438\u0448\u0435\u0442 Microsoft, \"wormable\", \u0442\u043e \u0435\u0441\u0442\u044c \u0438\u043c\u0435\u044e\u0442 \u0441\u0432\u043e\u0439\u0441\u0442\u0432\u043e \u0440\u0430\u0437\u043c\u043d\u043e\u0436\u0430\u0442\u044c\u0441\u044f \u043c\u0435\u0436\u0434\u0443 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430\u043c\u0438 \u0431\u0435\u0437 \u043f\u043e\u043c\u043e\u0449\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439. \n\nhttps://msrc-blog.microsoft.com/2019/08/13/patch-new-wormable-vulnerabilities-in-remote-desktop-services-cve-2019-1181-1182/\n\n\u0430\u043f\u0434\u0435\u0439\u0442\u044b \u0431\u0440\u0430\u0442\u044c \u0442\u0443\u0442 \nhttps://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1182\n\n\u041a\u0442\u043e \u043d\u0435 \u043f\u0440\u043e\u0430\u043f\u0434\u0435\u0439\u0442\u0438\u043b\u0441\u044f, \u0442\u043e\u0442 \u0441\u0430\u043c \u0441\u0435\u0431\u0435 \u041a\u0435\u0432\u0438\u043d \u041c\u0438\u0442\u043d\u0438\u043a.", "url": "https://t.me/alexmakus/2993", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": {"timestamp": "2019-08-14T06:05:15Z", "date_only": false, "value": "2019-08-14T06:05:15.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/information_security_channel/30178", "record": "CVE-2019-1182", "field": "creation_timestamp", "uuid": "7a16bced-4a68-4568-bf1f-6b3ee7d36fa7", "content": "Microsoft released new security updates under Patch Tuesday for August and fixed more than 90 vulnerabilities including 2 Bluekep based \u201cwormable \u201cremote code execution vulnerabilities that reside in the windows remote desktop services. Same as Bluekeep RDP flaw, newly discovered two RCE vulnerabilities (CVE-2019-1181\u00a0and\u00a0CVE-2019-1182) in remote desktop services are \u201cWormable\u201d that means attackers propagate the [\u2026]\nThe post 2 \u201cWormable\u201d Bluekeep Based RCE Bugs in Windows Remote Desktop Services let Hackers Control Your System Remotely (https://gbhackers.com/wormable-rce-bugs/) appeared first on GBHackers On Security (https://gbhackers.com/).", "url": "https://t.me/information_security_channel/30178", "metric_role": "exploitation", "metric_basis": "sighting_report"}, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": true, "seconds": 6647415.0, "hours": 1846.5041666666666, "days": 76.93767361111111, "min_seconds": 6647415.0, "max_seconds": 6647415.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2019-05-29T07:35:00Z", "date_only": false, "value": "2019-05-29T07:35:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_pepperlfuchsse \u00b7 VDE-2019-011", "record": "VDE-2019-011", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2019-08-14T06:05:15Z", "date_only": false, "value": "2019-08-14T06:05:15.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/information_security_channel/30178", "record": "CVE-2019-1182", "field": "creation_timestamp", "uuid": "7a16bced-4a68-4568-bf1f-6b3ee7d36fa7", "content": "Microsoft released new security updates under Patch Tuesday for August and fixed more than 90 vulnerabilities including 2 Bluekep based \u201cwormable \u201cremote code execution vulnerabilities that reside in the windows remote desktop services. Same as Bluekeep RDP flaw, newly discovered two RCE vulnerabilities (CVE-2019-1181\u00a0and\u00a0CVE-2019-1182) in remote desktop services are \u201cWormable\u201d that means attackers propagate the [\u2026]\nThe post 2 \u201cWormable\u201d Bluekeep Based RCE Bugs in Windows Remote Desktop Services let Hackers Control Your System Remotely (https://gbhackers.com/wormable-rce-bugs/) appeared first on GBHackers On Security (https://gbhackers.com/).", "url": "https://t.me/information_security_channel/30178", "metric_role": "exploitation", "metric_basis": "sighting_report"}}, "disclosure_to_exploit": {"available": true, "seconds": 6647415.0, "hours": 1846.5041666666666, "days": 76.93767361111111, "min_seconds": 6647415.0, "max_seconds": 6647415.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2019-05-29T07:35:00Z", "date_only": false, "value": "2019-05-29T07:35:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_pepperlfuchsse \u00b7 VDE-2019-011", "record": "VDE-2019-011", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2019-08-14T06:05:15Z", "date_only": false, "value": "2019-08-14T06:05:15.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/information_security_channel/30178", "record": "CVE-2019-1182", "field": "creation_timestamp", "uuid": "7a16bced-4a68-4568-bf1f-6b3ee7d36fa7", "content": "Microsoft released new security updates under Patch Tuesday for August and fixed more than 90 vulnerabilities including 2 Bluekep based \u201cwormable \u201cremote code execution vulnerabilities that reside in the windows remote desktop services. Same as Bluekeep RDP flaw, newly discovered two RCE vulnerabilities (CVE-2019-1181\u00a0and\u00a0CVE-2019-1182) in remote desktop services are \u201cWormable\u201d that means attackers propagate the [\u2026]\nThe post 2 \u201cWormable\u201d Bluekeep Based RCE Bugs in Windows Remote Desktop Services let Hackers Control Your System Remotely (https://gbhackers.com/wormable-rce-bugs/) appeared first on GBHackers On Security (https://gbhackers.com/).", "url": "https://t.me/information_security_channel/30178", "metric_role": "exploitation", "metric_basis": "sighting_report"}}, "disclosure_to_exploit_publication": {"available": true, "seconds": 6668338.0, "hours": 1852.316111111111, "days": 77.17983796296296, "min_seconds": 6668338.0, "max_seconds": 6668338.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2019-05-29T07:35:00Z", "date_only": false, "value": "2019-05-29T07:35:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_pepperlfuchsse \u00b7 VDE-2019-011", "record": "VDE-2019-011", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2019-08-14T11:53:58Z", "date_only": false, "value": "2019-08-14T11:53:58.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/alexmakus/2993", "record": "CVE-2019-1182", "field": "creation_timestamp", "uuid": "94b0e955-e506-47aa-b924-9de6e3706af7", "content": "\u043f\u043e \u043d\u0430\u0432\u043e\u0434\u043a\u0435 \u0447\u0438\u0442\u0430\u0442\u0435\u043b\u044f: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Windows, \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u0430\u044f \u043d\u0430\u0448\u0443\u043c\u0435\u0432\u0448\u0435\u0439 BlueKeep (CVE-2019-0708), \u0442\u043e\u043b\u044c\u043a\u043e \u044d\u0442\u043e\u0442 \u0440\u0430\u0437 \u043d\u0435 \u043d\u0430\u0434\u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043f\u0430\u0442\u0447 \u0434\u043b\u044f Windows XP. \u0417\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b \u0432\u0435\u0440\u0441\u0438\u0438 \u043e\u0442 Windows 7 SP1 \u0434\u043e Windows 10, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u0430\u043a \u043f\u0438\u0448\u0435\u0442 Microsoft, \"wormable\", \u0442\u043e \u0435\u0441\u0442\u044c \u0438\u043c\u0435\u044e\u0442 \u0441\u0432\u043e\u0439\u0441\u0442\u0432\u043e \u0440\u0430\u0437\u043c\u043d\u043e\u0436\u0430\u0442\u044c\u0441\u044f \u043c\u0435\u0436\u0434\u0443 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430\u043c\u0438 \u0431\u0435\u0437 \u043f\u043e\u043c\u043e\u0449\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439. \n\nhttps://msrc-blog.microsoft.com/2019/08/13/patch-new-wormable-vulnerabilities-in-remote-desktop-services-cve-2019-1181-1182/\n\n\u0430\u043f\u0434\u0435\u0439\u0442\u044b \u0431\u0440\u0430\u0442\u044c \u0442\u0443\u0442 \nhttps://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1182\n\n\u041a\u0442\u043e \u043d\u0435 \u043f\u0440\u043e\u0430\u043f\u0434\u0435\u0439\u0442\u0438\u043b\u0441\u044f, \u0442\u043e\u0442 \u0441\u0430\u043c \u0441\u0435\u0431\u0435 \u041a\u0435\u0432\u0438\u043d \u041c\u0438\u0442\u043d\u0438\u043a.", "url": "https://t.me/alexmakus/2993", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 235244271.073695, "hours": 65345.63085380417, "days": 2722.734618908507, "min_seconds": 235244271.073695, "max_seconds": 235244271.073695, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2019-05-29T07:35:00Z", "date_only": false, "value": "2019-05-29T07:35:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_pepperlfuchsse \u00b7 VDE-2019-011", "record": "VDE-2019-011", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2026-11-11T01:12:51.073Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": true, "seconds": 228596856.073695, "hours": 63499.126687137505, "days": 2645.7969452973957, "min_seconds": 228596856.073695, "max_seconds": 228596856.073695, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2019-08-14T06:05:15Z", "date_only": false, "value": "2019-08-14T06:05:15.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/information_security_channel/30178", "record": "CVE-2019-1182", "field": "creation_timestamp", "uuid": "7a16bced-4a68-4568-bf1f-6b3ee7d36fa7", "content": "Microsoft released new security updates under Patch Tuesday for August and fixed more than 90 vulnerabilities including 2 Bluekep based \u201cwormable \u201cremote code execution vulnerabilities that reside in the windows remote desktop services. Same as Bluekeep RDP flaw, newly discovered two RCE vulnerabilities (CVE-2019-1181\u00a0and\u00a0CVE-2019-1182) in remote desktop services are \u201cWormable\u201d that means attackers propagate the [\u2026]\nThe post 2 \u201cWormable\u201d Bluekeep Based RCE Bugs in Windows Remote Desktop Services let Hackers Control Your System Remotely (https://gbhackers.com/wormable-rce-bugs/) appeared first on GBHackers On Security (https://gbhackers.com/).", "url": "https://t.me/information_security_channel/30178", "metric_role": "exploitation", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-11T01:12:51.073Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploit_publication_to_patch": {"available": true, "seconds": 228575933.073695, "hours": 63493.31474269306, "days": 2645.554780945544, "min_seconds": 228575933.073695, "max_seconds": 228575933.073695, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2019-08-14T11:53:58Z", "date_only": false, "value": "2019-08-14T11:53:58.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/alexmakus/2993", "record": "CVE-2019-1182", "field": "creation_timestamp", "uuid": "94b0e955-e506-47aa-b924-9de6e3706af7", "content": "\u043f\u043e \u043d\u0430\u0432\u043e\u0434\u043a\u0435 \u0447\u0438\u0442\u0430\u0442\u0435\u043b\u044f: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Windows, \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u0430\u044f \u043d\u0430\u0448\u0443\u043c\u0435\u0432\u0448\u0435\u0439 BlueKeep (CVE-2019-0708), \u0442\u043e\u043b\u044c\u043a\u043e \u044d\u0442\u043e\u0442 \u0440\u0430\u0437 \u043d\u0435 \u043d\u0430\u0434\u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043f\u0430\u0442\u0447 \u0434\u043b\u044f Windows XP. \u0417\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b \u0432\u0435\u0440\u0441\u0438\u0438 \u043e\u0442 Windows 7 SP1 \u0434\u043e Windows 10, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u0430\u043a \u043f\u0438\u0448\u0435\u0442 Microsoft, \"wormable\", \u0442\u043e \u0435\u0441\u0442\u044c \u0438\u043c\u0435\u044e\u0442 \u0441\u0432\u043e\u0439\u0441\u0442\u0432\u043e \u0440\u0430\u0437\u043c\u043d\u043e\u0436\u0430\u0442\u044c\u0441\u044f \u043c\u0435\u0436\u0434\u0443 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430\u043c\u0438 \u0431\u0435\u0437 \u043f\u043e\u043c\u043e\u0449\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439. \n\nhttps://msrc-blog.microsoft.com/2019/08/13/patch-new-wormable-vulnerabilities-in-remote-desktop-services-cve-2019-1181-1182/\n\n\u0430\u043f\u0434\u0435\u0439\u0442\u044b \u0431\u0440\u0430\u0442\u044c \u0442\u0443\u0442 \nhttps://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1182\n\n\u041a\u0442\u043e \u043d\u0435 \u043f\u0440\u043e\u0430\u043f\u0434\u0435\u0439\u0442\u0438\u043b\u0441\u044f, \u0442\u043e\u0442 \u0441\u0430\u043c \u0441\u0435\u0431\u0435 \u041a\u0435\u0432\u0438\u043d \u041c\u0438\u0442\u043d\u0438\u043a.", "url": "https://t.me/alexmakus/2993", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-11T01:12:51.073Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}