Vulnerabilitycritical
Microsoft Patch Tuesday
- CVEs
- CVE-2018-0870CVE-2018-0959CVE-2018-0979CVE-2018-0980CVE-2018-0981CVE-2018-0986CVE-2018-0988CVE-2018-0990CVE-2018-0991CVE-2018-0993CVE-2018-0994CVE-2018-0995CVE-2018-0996CVE-2018-1000CVE-2018-1004CVE-2018-1010CVE-2018-1012CVE-2018-1013CVE-2018-1015CVE-2018-1016CVE-2018-1018CVE-2018-1019CVE-2018-1020CVE-2018-1023CVE-2018-1011CVE-2018-1026CVE-2018-1027CVE-2018-1028CVE-2018-1029CVE-2018-1030CVE-2018-0887CVE-2018-0890CVE-2018-0892CVE-2018-0920CVE-2018-0950CVE-2018-0956CVE-2018-0957CVE-2018-0960CVE-2018-0963CVE-2018-0964CVE-2018-0966CVE-2018-0967CVE-2018-0968CVE-2018-0969CVE-2018-0970CVE-2018-0971
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2018-1004 | A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code Execution… | 8.8 group max | 19% | ||
| CVE-2018-1010 | A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Microsoft Graphics Remote… | 8.8 group max | 40% | ||
| CVE-2018-0980 | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting… | 7.5 group max | 67% | PoC | |
CVE-2018-0920+3 related CVEs | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel… | 7.8 | 21% | ||
CVE-2018-1026+2 related CVEs | A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka "Microsoft Office… | 8.8 group max | 42% | ||
| CVE-2018-0959 | A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest… | 7.6 | 10% | ||
| CVE-2018-0986 | A remote code execution vulnerability exists when the Microsoft Malware Protection Engine does not properly scan a specially crafted file, leading to memory… | 8.8 | 63% | PoC | |
| CVE-2018-1023 | A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory, aka "Microsoft Browser Memory Corruption… | 7.5 | 15% | ||
| CVE-2018-1028 | A remote code execution vulnerability exists when the Office graphics component improperly handles specially crafted embedded fonts, aka "Microsoft Office… | 8.8 | 19% |
From the original article
6 min read at blog.talosintelligence.com
Today, Microsoft has released its monthly set of security advisories for vulnerabilities that have been identified and addressed in various products. This month's advisory release addresses 65 new vulnerabilities and one advisory, with 25 of them rated critical, 39 of them rated important and one of them rated moderate.
By Vanja Svajcer · blog.talosintelligence.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.