63 New Flaws (Including 0
- CVEs
- CVE-2018-8589CVE-2018-8584CVE-2018-8566CVE-2018-8476CVE-2018-8553CVE-2018-8588CVE-2018-8541CVE-2018-8542CVE-2018-8543CVE-2018-8544CVE-2018-8555CVE-2018-8556CVE-2018-8557CVE-2018-8551CVE-2018-8609CVE-2018-8600CVE-2018-8602CVE-2018-8605CVE-2018-8606CVE-2018-8607CVE-2018-8608CVE-2018-8471CVE-2018-8485CVE-2018-8554CVE-2018-8561CVE-2018-8562CVE-2018-8572CVE-2018-8581CVE-2018-8550CVE-2018-8552CVE-2018-8568CVE-2018-8592CVE-2018-8567CVE-2018-8563CVE-2018-8407CVE-2018-8454CVE-2018-8565CVE-2018-8558CVE-2018-8408CVE-2018-8545CVE-2018-8578CVE-2018-8579CVE-2018-8256CVE-2018-8522CVE-2018-8576CVE-2018-8524CVE-2018-8539CVE-2018-8573CVE-2018-8574CVE-2018-8575
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2018-8256 | A remote code execution vulnerability exists when PowerShell improperly handles specially crafted files, aka "Microsoft PowerShell Remote Code Execution… | 8.8 | 23% | ||
| CVE-2018-8544 | A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code Execution… | 8.8 group max | 48% | PoC | |
| CVE-2018-8476 | A remote code execution vulnerability exists in the way that Windows Deployment Services TFTP Server handles objects in memory, aka "Windows Deployment… | 9.8 | 65% | ||
| CVE-2018-8522 | A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory, aka "Microsoft Outlook Remote… | 7.8 group max | 19% | ||
| CVE-2018-8541 | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting… | 7.5 | 14% | ||
CVE-2018-8567+1 related CVE | An elevation of privilege vulnerability exists when Microsoft Edge does not properly enforce cross-domain policies, which could allow an attacker to access… | 5.4 group max | 3% | ||
| CVE-2018-8552 | An information disclosure vulnerability exists when VBScript improperly discloses the contents of its memory, which could provide an attacker with information… | 7.5 | 51% | PoC | |
| CVE-2018-8563 | An information disclosure vulnerability exists when DirectX improperly handles objects in memory, aka "DirectX Information Disclosure Vulnerability." This… | 5.5 | 2% | ||
CVE-2018-8568+2 related CVEs | An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected… | 5.4 group max | 2% | ||
| CVE-2018-8575 | A remote code execution vulnerability exists in Microsoft Project software when it fails to properly handle objects in memory, aka "Microsoft Project Remote… | 7.8 | 20% | ||
| CVE-2018-8581 | Privilege Escalation (Arbitrary User Impersonation) in Microsoft Exchange Server | 7.4 | 28% | KEVRansomware | KEV |
| CVE-2018-8589 | Local Privilege Escalation in Microsoft Windows Win32k (Windows 7 / Server 2008) | 7.8 | 3% | KEV | KEV |
| CVE-2018-8600 | A Cross-site Scripting (XSS) vulnerability exists when Azure App Services on Azure Stack does not properly sanitize user provided input, aka "Azure App Service… | 6.1 | 2% | ||
| CVE-2018-8602 | A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka "Team Foundation Server… | 5.4 | 2% | ||
CVE-2018-8609+4 related CVEs | A remote code execution vulnerability exists in Microsoft Dynamics 365 (on-premises) version 8 when the server fails to properly sanitize web requests to an… | 8.8 group max | 10% |
From the original article
5 min read at thehackernews.com
It's Patch Tuesday once again… time for another round of security updates for the Windows operating system and other Microsoft products. This month Windows users and system administrators need to immediately take care of a total of 63 security vulnerabilities, of which 12 are rated critical, 49 important and one moderate and one low in severity.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.