Microsoft Patch Tuesday — October 2018
Tuesday, 9 October 2018
Exploited 1
Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.
-
High 7.8
CVE-2018-8453 Exploited Public exploit An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privil…EPSS 70%
Critical 1
- Critical 9.8 EPSS 18%
Public exploit code 6
Not critical and not yet seen exploited, but exploit or proof-of-concept code is public.
-
Unscored
CVE-2018-8411 Public exploit An elevation of privilege vulnerability exists when NTFS improperly checks access, aka "NTFS Elevation of Privilege Vulnerability." This affects Windows 7, Win…EPSS 3.1%
-
Unscored
CVE-2018-8413 Public exploit A remote code execution vulnerability exists when "Windows Theme API" does not properly decompress files, aka "Windows Theme API Remote Code Execution Vulnerab…EPSS 46%
-
Unscored
CVE-2018-8527 Public exploit An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when parsing a malicious XEL file containing a reference to an …EPSS 23%
-
Unscored
CVE-2018-8532 Public exploit An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when parsing a malicious XMLA file containing a reference to an…EPSS 23%
-
Unscored
CVE-2018-8533 Public exploit An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when parsing malicious XML content containing a reference to an…EPSS 23%
-
Unscored
CVE-2018-8495 Public exploit A remote code execution vulnerability exists when Windows Shell improperly handles URIs, aka "Windows Shell Remote Code Execution Vulnerability." This affects …EPSS 51%
All vulnerabilities 49
Critical1 ShowHide
- Critical 9.8 EPSS 18%
High7 ShowHide
-
High 7.8
CVE-2018-8453 Exploited Public exploit An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privil…EPSS 70%
- High 7.5 EPSS 15%
- High 7.5 EPSS 14%
- High 7.5 EPSS 14%
- High 7.5 EPSS 14%
- High 7.5 EPSS 14%
- High 7.5 EPSS 14%
Unscored41 ShowHide
-
Unscored
CVE-2018-8411 Public exploit An elevation of privilege vulnerability exists when NTFS improperly checks access, aka "NTFS Elevation of Privilege Vulnerability." This affects Windows 7, Win…EPSS 3.1%
-
Unscored
CVE-2018-8413 Public exploit A remote code execution vulnerability exists when "Windows Theme API" does not properly decompress files, aka "Windows Theme API Remote Code Execution Vulnerab…EPSS 46%
-
Unscored
CVE-2018-8527 Public exploit An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when parsing a malicious XEL file containing a reference to an …EPSS 23%
-
Unscored
CVE-2018-8532 Public exploit An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when parsing a malicious XMLA file containing a reference to an…EPSS 23%
-
Unscored
CVE-2018-8533 Public exploit An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when parsing malicious XML content containing a reference to an…EPSS 23%
-
Unscored
CVE-2018-8495 Public exploit A remote code execution vulnerability exists when Windows Shell improperly handles URIs, aka "Windows Shell Remote Code Execution Vulnerability." This affects …EPSS 51%
-
Unscored
CVE-2018-8265 A remote code execution vulnerability exists in the way Microsoft Exchange software parses specially crafted email messages, aka "Microsoft Exchange Remote Cod…EPSS 19%
-
Unscored
CVE-2018-8320 A security feature bypass vulnerability exists in DNS Global Blocklist feature, aka "Windows DNS Security Feature Bypass Vulnerability." This affects Windows S…EPSS 4.7%
-
Unscored
CVE-2018-8329 An Elevation of Privilege vulnerability exists in Windows Subsystem for Linux when it fails to properly handle objects in memory, aka "Linux On Windows Elevati…EPSS 1.2%
-
Unscored
CVE-2018-8330 An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnera…EPSS 2.5%
-
Unscored
CVE-2018-8333 An Elevation of Privilege vulnerability exists in Filter Manager when it improperly handles objects in memory, aka "Microsoft Filter Manager Elevation Of Privi…EPSS 1.9%
-
Unscored
CVE-2018-8423 A remote code execution vulnerability exists in the Microsoft JET Database Engine, aka "Microsoft JET Database Engine Remote Code Execution Vulnerability." Thi…EPSS 32%
-
Unscored
CVE-2018-8427 An information disclosure vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka "Microsoft Graphics Components Infor…EPSS 2.3%
-
Unscored
CVE-2018-8432 A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka "Microsoft Graphics Components Remote …EPSS 20%
-
Unscored
CVE-2018-8448 An elevation of privilege vulnerability exists when Microsoft Exchange Outlook Web Access (OWA) fails to properly handle web requests, aka "Microsoft Exchange …EPSS 3.2%
-
Unscored
CVE-2018-8460 A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption Vulnerabili…EPSS 21%
-
Unscored
CVE-2018-8472 An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, allowing an attacker to r…EPSS 19%
-
Unscored
CVE-2018-8473 A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." T…EPSS 14%
-
Unscored
CVE-2018-8480 An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected Share…EPSS 2.3%
-
Unscored
CVE-2018-8481 An information disclosure vulnerability exists when Windows Media Player improperly discloses file information, aka "Windows Media Player Information Disclosur…EPSS 5%
-
Unscored
CVE-2018-8482 An information disclosure vulnerability exists when Windows Media Player improperly discloses file information, aka "Windows Media Player Information Disclosur…EPSS 5%
-
Unscored
CVE-2018-8484 An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "DirectX Graphics Ke…EPSS 1.2%
-
Unscored
CVE-2018-8486 An information disclosure vulnerability exists when DirectX improperly handles objects in memory, aka "DirectX Information Disclosure Vulnerability." This affe…EPSS 1.7%
-
Unscored
CVE-2018-8488 An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected Share…EPSS 2.3%
-
Unscored
CVE-2018-8489 A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest opera…EPSS 4.4%
-
Unscored
CVE-2018-8490 A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest opera…EPSS 4.1%
-
Unscored
CVE-2018-8491 A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption Vulnerabili…EPSS 13%
-
Unscored
CVE-2018-8492 A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows PowerShell session, aka "De…EPSS 2.1%
-
Unscored
CVE-2018-8493 An information disclosure vulnerability exists when the Windows TCP/IP stack improperly handles fragmented IP packets, aka "Windows TCP/IP Information Disclosu…EPSS 8.9%
-
Unscored
CVE-2018-8494 A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka "MS XML Remote Code Execution Vulnerab…EPSS 22%
-
Unscored
CVE-2018-8497 An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka "Windows Kernel Elevation of Privilege Vulnera…EPSS 1.1%
-
Unscored
CVE-2018-8498 An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected Share…EPSS 2.3%
-
Unscored
CVE-2018-8501 A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects in Protected View, aka "Micros…EPSS 20%
-
Unscored
CVE-2018-8502 A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in Protected View, aka "Microsoft E…EPSS 20%
-
Unscored
CVE-2018-8504 A remote code execution vulnerability exists in Microsoft Word software when the software fails to properly handle objects in Protected View, aka "Microsoft Wo…EPSS 20%
-
Unscored
CVE-2018-8506 An Information Disclosure vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory, aka "Microsoft Windows Codecs Librar…EPSS 4.4%
-
Unscored
CVE-2018-8509 A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." T…EPSS 13%
-
Unscored
CVE-2018-8512 A security feature bypass vulnerability exists in Microsoft Edge when the Edge Content Security Policy (CSP) fails to properly validate certain specially craft…EPSS 3.5%
-
Unscored
CVE-2018-8518 An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected Share…EPSS 2.8%
-
Unscored
CVE-2018-8530 A security feature bypass vulnerability exists when Microsoft Edge improperly handles requests of different origins, aka "Microsoft Edge Security Feature Bypas…EPSS 5.5%
-
Unscored
CVE-2018-8531 A remote code execution vulnerability exists in the way that Azure IoT Hub Device Client SDK using MQTT protocol accesses objects in memory, aka "Azure IoT Dev…EPSS 15%