Vulnerabilitycritical
Microsoft Patch Tuesday — October 18: Vulnerability disclosures and Snort coverage
- CVEs
- CVE-2018-8491CVE-2018-8460CVE-2018-8509CVE-2018-8473CVE-2018-8513CVE-2018-8500CVE-2018-8511CVE-2018-8505CVE-2018-8510CVE-2018-8494CVE-2018-8490CVE-2018-8489CVE-2018-8512CVE-2018-8448CVE-2018-8453CVE-2018-8484CVE-2018-8423CVE-2018-8502CVE-2018-8501CVE-2018-8432CVE-2018-8504CVE-2018-8427CVE-2018-8480CVE-2018-8518CVE-2018-8488CVE-2018-8498CVE-2018-8333CVE-2018-8411CVE-2018-8320
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2018-8494 | A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka "MS XML Remote Code Execution… | 8.8 group max | 22% | ||
CVE-2018-8432+1 related CVE | A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka "Microsoft Graphics Components Remote… | 7.8 group max | 20% | ||
| CVE-2018-8448 | An elevation of privilege vulnerability exists when Microsoft Exchange Outlook Web Access (OWA) fails to properly handle web requests, aka "Microsoft Exchange… | 5.4 | 3% | ||
| CVE-2018-8453 | Win32k Elevation of Privilege Flaw in Windows 7-10 and Windows Server (CVE-2018-8453) | 7.8 | 70% | KEVRansomwarePoC ×2 | KEV |
CVE-2018-8460+1 related CVE | A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption… | 7.5 | 21% | ||
| CVE-2018-8500 | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption… | 9.8 group max | 18% | ||
CVE-2018-8518+3 related CVEs | An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected… | 5.4 | 3% | ||
CVE-2018-8501+1 related CVE | A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects in Protected View, aka… | 8.8 | 20% | ||
| CVE-2018-8502 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in Protected View, aka "Microsoft… | 8.8 | 20% |
From the original article
7 min read at blog.talosintelligence.com
Microsoft released its monthly security update today, disclosing a variety of vulnerabilities in several of its products. The latest Patch Tuesday covers 49 vulnerabilities, 12 of which are rated "critical," 34 that are rated "important,” two that are considered to have “moderate” severity and one that’s rated as “low.”
blog.talosintelligence.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.