October Patch Tuesday: Changes, urgent updates and what's coming next
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2016-3298 | Information Disclosure in Microsoft Internet Explorer Messaging API | 6.5 | 33% | KEV | KEV |
| CVE-2016-3393 | Remote Code Execution in Microsoft Windows GDI/GDI+ Graphics Component | 7.8 | 68% | KEV | KEV |
| CVE-2016-3396 | Graphics Device Interface (aka GDI or GDI+) in Microsoft Windows Vista SP2 | 7.8 | 24% | ||
| CVE-2016-7189 | The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code via a crafted web site, aka "Scripting Engine Remote Code… | 7.5 | 48% | ||
| CVE-2016-7193 | Memory Corruption RCE in Microsoft Word and Office Components via Crafted RTF Files | 7.8 | 58% | KEV | KEV |
From the original article
6 min read at helpnetsecurity.com
The leaves aren’t the only things changing this October. Patch Tuesday is here and with it comes some interesting updates from big names in the software space.
By @helpnetsecurity · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.