Vulnerabilitycritical

Microsoft Update Tuesday November 2013: HyperV vulnerability and fix for 0day

Cisco TalosNov 13, 2013 · 01:16 UTC (Nov 13, 2013)2 min read3

Read at blog.talosintelligence.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2013-3940 CVE-2013-3918 CVE-2013-3898 CVE-2013-3887 CVE-2013-3905 CVE-2013-3869

Tags: cve-2013-3940 cve-2013-3918 cve-2013-3898 cve-2013-3887 cve-2013-3905 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2013-3918	Out-of-Bounds Write RCE in Microsoft Windows InformationCardSigninHelper ActiveX	—	74%	KEV	— KEV Oct 6, 2025

From the original article

2 min read at blog.talosintelligence.com

We have a relatively light Update Tuesday this month: 8 bulletins covering 19 CVEs, 3 of which are marked critical. The most interesting vulnerability this month is actually in the non-critical ones: a vulnerability in Hyper-V ( MS13-092 ). We’re also getting a fix for a 0-day vulnerability in ActiveX ( MS13-090 ).

Cisco Talos

blog.talosintelligence.com

Read the full article at Cisco Talos

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.