August 2018 Microsoft Patch Tuesday fixes two flaws exploited in attacks in the wild
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2018-8273 | A buffer overflow vulnerability exists in the Microsoft SQL Server that could allow remote code execution on an affected system, aka "Microsoft SQL Server… | 9.8 | 29% | ||
| CVE-2018-8302 | A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka "Microsoft… | 9.8 | 26% | ||
CVE-2018-8344+2 related CVEs | A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Microsoft Graphics Remote… | 8.8 group max | 22% | ||
| CVE-2018-8373 | Memory Corruption RCE in Microsoft Internet Explorer Scripting Engine | 7.5 | 62% | KEV | KEV |
| CVE-2018-8397 | A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka "GDI+ Remote Code… | 8.8 | 68% | ||
| CVE-2018-8414 | File Path Validation RCE in Microsoft Windows Shell (Windows 10 and Server 1703–1803) | 8.8 | 73% | KEV | KEV |
From the original article
4 min read at securityaffairs.com
Microsoft Patch Tuesday update for August 2018 addresses a total of 60 vulnerabilities, two of which are actively exploited in attacks in the wild. After Adobe, also Microsoft released the Patch Tuesday update for August 2018 that addresses a total of 60 vulnerabilities in Microsoft Windows, Edge Browser, Internet Explorer, Office, ChakraCore, . NET Framework, Exchange Server, Microsoft SQL Server and Visual Studio.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.