Patch Tuesday, October 2018 Edition
Summary: Microsoft released October 2018 updates fixing roughly 50 security problems in Windows and related software, including CVE-2018-8453, a zero-day that lets an attacker who can log in gain administrator privileges on Windows 7, 8.1, 10 and Server 2008 through 2019, and CVE-2018-8423, a publicly disclosed flaw with sample exploit code that can be triggered by opening a crafted file such as a booby-trapped Office document. Microsoft briefly paused Windows 10 updates after users reported losing all files in their My Documents folder, and rolling back to prior saved versions did not restore them.
What you should know: A patch meant to close a zero-day also wiped user files for some Windows 10 users, and System Restore did not bring them back - so the recovery step many organizations count on failed at the moment it was needed.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2018-8423CVE-2018-8453
- Related
- CVE-2018-8453: Microsoft Win32k Privilege Escalation Vulnerability Known Exploited Vulnerabilities · Jan 21, 2022Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026