Exploit / PoCcritical
Microsoft fixed the Zero-Day for JET flaw, but the fix is incomplete
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2018-8423 | A remote code execution vulnerability exists in the Microsoft JET Database Engine, aka "Microsoft JET Database Engine Remote Code Execution Vulnerability."… | 7.8 | 32% | PoC ×2 |
From the original article
3 min read at securityaffairs.com
Experts from 0Patch revealed that the Microsoft Zero-Day Patch for JET Database Engine vulnerability ( CVE-2018-8423 ) is incomplete. The vulnerability was discovered by the researcher Lucas Leong of the Trend Micro Security Research team that publicly disclosed an unpatched zero-day vulnerability in all supported versions of Microsoft Windows.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.