Microsoft Update Tuesday October 2014: Fixes for 4 0
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2014-4113 | Local Privilege Escalation in Microsoft Win32k Kernel Component (CVE-2014-4113) | — | 87% | KEV | — KEV |
| CVE-2014-4114 | Remote Code Execution in Microsoft Windows OLE via Crafted Files | — | 82% | KEV | — KEV |
| CVE-2014-4148 | Kernel-Mode Remote Code Execution in Microsoft Windows via TrueType Font Handling | — | 60% | KEV | — KEV |
From the original article
3 min read at blog.talosintelligence.com
Microsoft Tuesday is here once again and this month they are releasing a total of eight bulletins. Three of which are rated as critical, while the remaining five are rated as important. There’s a total of 24 CVEs this month, 20 of which were privately disclosed to Microsoft and four which are either publicly known or under active attack, making them 0-day vulnerabilities.
blog.talosintelligence.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.