October 2018 Patch Tuesday: Microsoft fixes 49 flaws, one APT-wielded zero-day
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2018-8423+1 related CVE | A remote code execution vulnerability exists in the Microsoft JET Database Engine, aka "Microsoft JET Database Engine Remote Code Execution Vulnerability."… | 7.8 | 32% | PoC ×2 | |
| CVE-2018-8453 | Win32k Elevation of Privilege Flaw in Windows 7-10 and Windows Server (CVE-2018-8453) | 7.8 | 70% | KEVRansomwarePoC ×2 | KEV |
| CVE-2018-8531 | A remote code execution vulnerability exists in the way that Azure IoT Hub Device Client SDK using MQTT protocol accesses objects in memory, aka "Azure IoT… | 8.8 | 15% |
From the original article
2 min read at helpnetsecurity.com
With the October 2018 Patch Tuesday release Microsoft has fixed 49 vulnerabilities, 12 of which are rated “critical.” The only zero-day in this batch is CVE-2018-8453 , an elevation of privilege vulnerability affecting Windows.
By @zeljkazorz · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.