Microsoft Tuesday August 2018

Summary: Microsoft's August 2018 Patch Tuesday addresses 62 new vulnerabilities, including 20 rated critical, 38 important, one moderate and one low, affecting Windows, Edge, Internet Explorer and other products, plus a critical update advisory ADV180020 covering Adobe Flash bulletin APSB18-25. Cisco Talos flagged 10 critical and two important flaws as notable, among them remote code execution in SQL Server (CVE-2018-8273) and Exchange (CVE-2018-8302), font library and PDF Library flaws (CVE-2018-8344, CVE-2018-8350), five Chakra scripting engine flaws in Edge, and a Device Guard bypass (CVE-2018-8200).
What you should know: Several of these flaws can be triggered by a user merely visiting a crafted page or opening a document, and CVE-2018-8302 lets an attacker run code as the system user in Exchange, so the patch window is the exposure window.

Read the original at Cisco Talos ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2018-8266 CVE-2018-8273 CVE-2018-8302 CVE-2018-8344 CVE-2018-8350 CVE-2018-8355 CVE-2018-8380 CVE-2018-8381 CVE-2018-8384 CVE-2018-8397
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026