Skip to content
NewA calmer, faster ZeroHour

Patch Tuesday, August 2018 Edition

Krebs on Security ()3 min read2 · 1 read
Analyze CVE-2018-8373 with Vani AIImpact, affected versions, exploitation, mitigations and detection

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2018-8345
A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed, aka "LNK Remote Code…
7.514%
CVE-2018-8373
Memory Corruption RCE in Microsoft Internet Explorer Scripting Engine
7.562%KEV
KEV
CVE-2018-8414
File Path Validation RCE in Microsoft Windows Shell (Windows 10 and Server 1703–1803)
8.873%KEV
KEV

From the original article

3 min read at krebsonsecurity.com

Adobe and Microsoft each released security updates for their software on Tuesday. Adobe plugged five security holes in its Flash Player browser plugin. Microsoft pushed 17 updates to fix at least 60 vulnerabilities in Windows and other software, including two “ zero-day ” flaws that attackers were already exploiting before Microsoft issued patches to fix them.

Krebs on Security

krebsonsecurity.com

Read the full article at Krebs on Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.