Experts from Qihoo 360 disclosed technical details of the actively exploited Windows zero-day flaw CVE-2019-0808. The vulnerability was reported to Microsoft by researchers from Googles Threat Analysis Group that observed it had been exploited alongside a Chrome vulnerability patched early March. Microsoft addressed the flaw with the release of the Patch Tuesday security updates for March 2019. Experts explained how to trigger the flaw and provided details on how Microsoft has fixed the problem. The researchers also developed a PoC exploit that have only partially disclosed.”]
Source: https://securityaffairs.co/wordpress/82428/hacking/cve-2019-0808-win-flaw.html