Vulnerabilitycritical
Microsoft Patch Tuesday
- CVEs
- CVE-2018-0758CVE-2018-0762CVE-2018-0767CVE-2018-0769CVE-2018-0770CVE-2018-0772CVE-2018-0773CVE-2018-0774CVE-2018-0775CVE-2018-0776CVE-2018-0777CVE-2018-0778CVE-2018-0780CVE-2018-0781CVE-2018-0797CVE-2018-0800CVE-2018-0741CVE-2018-0743CVE-2018-0744CVE-2018-0745CVE-2018-0746CVE-2018-0747CVE-2018-0748CVE-2018-0749CVE-2018-0750CVE-2018-0751CVE-2018-0752CVE-2018-0753CVE-2018-0754CVE-2018-0764CVE-2018-0766CVE-2018-0768CVE-2018-0784CVE-2018-0786CVE-2018-0788CVE-2018-0789CVE-2018-0790CVE-2018-0791CVE-2018-0792CVE-2018-0793CVE-2018-0794CVE-2018-0795CVE-2018-0796CVE-2018-0798CVE-2018-0799CVE-2018-0801CVE-2018-0802CVE-2018-0803CVE-2018-0805CVE-2018-0806CVE-2018-0807CVE-2018-0812CVE-2018-0818CVE-2018-0819
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2018-0788+2 related CVEs | The Windows Adobe Type Manager Font Driver (Atmfd.dll) in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, and Windows Server 2012… | 7.0 group max | 1% | ||
| CVE-2018-0749 | The Microsoft Server Message Block (SMB) Server in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2… | 7.8 group max | 3% | PoC | |
| CVE-2018-0758 | Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current… | 7.5 group max | 81% | PoC | |
CVE-2018-0764+1 related CVE | Microsoft .NET Framework 1.1, 2.0, 3.0, 3.5, 3.5.1, 4, 4.5, 4.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 5.7 and .NET Core 1.0 | 7.5 | 9% | ||
| CVE-2018-0769 | Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current… | 7.5 group max | 79% | PoC | |
| CVE-2018-0784 | ASP.NET Core 1.0. 1.1, and 2.0 allow an elevation of privilege vulnerability due to the ASP.NET Core project templates, aka "ASP.NET Core Elevation Of… | 8.8 | 6% | ||
CVE-2018-0789+2 related CVEs | Microsoft SharePoint Foundation 2010, Microsoft SharePoint Server 2013 and Microsoft SharePoint Server 2016 allow an elevation of privilege vulnerability due… | 8.8 group max | 6% | ||
| CVE-2018-0798 | Memory Corruption RCE in Microsoft Office Equation Editor (CVE-2018-0798) | 8.8 group max | 95% | KEV | KEV |
| CVE-2018-0796 | Microsoft Excel in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution vulnerability… | 8.8 | 23% | ||
| CVE-2018-0818 | Microsoft ChakraCore allows an attacker to bypass Control Flow Guard (CFG) in conjunction with another vulnerability to run arbitrary code on a target system… | 7.5 | 4% |
From the original article
12 min read at blog.talosintelligence.com
Today Microsoft has released its monthly set of security advisories for vulnerabilities that have been identified and addressed in various products. This month's advisory release addresses 56 new vulnerabilities with 16 of them rated critical, 39 of them rated important and 1 of them rated Moderate. These vulnerabilities impact ASP.
blog.talosintelligence.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.