Vulnerabilitycritical
Microsoft Patch Tuesday
- CVEs
- CVE-2018-0965CVE-2018-8367CVE-2018-8420CVE-2018-8461CVE-2018-8475CVE-2018-8332CVE-2018-8391CVE-2018-8439CVE-2018-8447CVE-2018-8456CVE-2018-8457CVE-2018-8464CVE-2018-8465CVE-2018-8466CVE-2018-8467CVE-2018-8421CVE-2018-8354CVE-2018-8392CVE-2018-8393CVE-2018-8430CVE-2018-8331CVE-2018-8315CVE-2018-8335CVE-2018-8425CVE-2018-8440CVE-2018-8271CVE-2018-8336CVE-2018-8337CVE-2018-8366
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2018-8420 | A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka "MS XML Remote Code Execution… | 8.8 group max | 49% | ||
CVE-2018-8457+3 related CVEs | A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory… | 7.5 group max | 13% | ||
| CVE-2018-8331 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel… | 7.8 | 20% | ||
CVE-2018-8332+1 related CVE | A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Win32k Graphics Remote… | 8.8 group max | 19% | ||
| CVE-2018-8336 | An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure… | 5.5 | 3% | ||
| CVE-2018-8466 | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting… | 7.5 | 69% | ||
CVE-2018-8464+3 related CVEs | An remote code execution vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory, aka "Microsoft Edge PDF Remote Code… | 7.5 group max | 43% | ||
| CVE-2018-8421 | A remote code execution vulnerability exists when Microsoft .NET Framework processes untrusted input, aka ".NET Framework Remote Code Execution Vulnerability."… | 9.8 | 29% | ||
| CVE-2018-8440 | Local Privilege Escalation in Windows ALPC Handling (Win 7–10, Server 2008–2016) | 7.8 | 19% | KEVRansomwarePoC | KEV |
From the original article
7 min read at blog.talosintelligence.com
Microsoft released its monthly set of security updates today for a variety of its products that address a variety of bugs. The latest Patch Tuesday covers 61 vulnerabilities, 17 of which are rated "critical," 43 that are rated "important" and one that is considered to have "moderate" severity.
blog.talosintelligence.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.