December 2018 Patch Tuesday: Microsoft patches Windows zero-day exploited in the wild
60
CVE-2018-8634
- CVSS 3.0
- 8.8 high
- EPSS
- 15%p97
- Published
- ·
- Modified
Description · NVD
A remote code execution vulnerability exists in Windows where Microsoft text-to-speech fails to properly handle objects in the memory, aka "Microsoft Text-To-Speech Remote Code Execution Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019, Windows 10 Servers.
- Vendors
- microsoft
- Products
- windows 10, windows server 2016, windows server 2019
- Vector
- CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H