Microsoft Patch Tuesday - February 2018
Summary: Microsoft released its February 2018 monthly security advisories addressing 54 new vulnerabilities, with 14 rated critical, 38 rated important, and 2 rated moderate, affecting Outlook, Edge, Scripting Engine, App Container, and Windows. Among the critical issues, CVE-2018-0852 is a remote code execution vulnerability in Outlook that requires a user to open a specially crafted file, and CVE-2018-0850 is an Outlook elevation of privilege vulnerability triggered when a crafted email causes Outlook to load a local or remote message store over SMB.
What's compelling: Two of this month's 14 critical flaws sit in Outlook, the client your users open all day, and one of them fires on receipt of a crafted email rather than a click - so the patch window is the only control standing between an attacker and the mailbox.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2018-0850CVE-2018-0852
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026