Microsoft released patches for two Win32k bugs actively under attack, along with fixes for four additional bugs that are publicly known. News broke last week that two vulnerabilities CVE-2019-0808 and a separate Google Chrome were being actively exploited in the wild together. In all, Microsoft reported 64 unique bugs, 17 critical, 45 rated important, one moderate and one low in severity, in March Patch Tuesday. The bugs are both elevation of privilege vulnerabilities, tied to the way Windows handles objects in memory.
Source: https://threatpost.com/microsoft-patches-two-win32k-bugs-under-active-attack/142742/

