August 2018 Microsoft Patch Tuesday fixes two flaws exploited in attacks in the wild
60
CVE-2018-8397
- CVSS 3.0
- 8.8 high
- EPSS
- 68%p99
- Published
- ·
- Modified
Description · NVD
A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka "GDI+ Remote Code Execution Vulnerability." This affects Windows Server 2008, Windows 7, Windows Server 2008 R2.
- Vendors
- microsoft
- Products
- windows 7, windows server 2008
- Vector
- CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
In the news
3 storiesMicrosoft Releases Patches for 60 Flaws—Two Under Active Attack
60
60