Forest Global Training Partners

Cyber Risks · Krebs on Security

Patch Tuesday, September 2018 Edition

Summary: Adobe and Microsoft released September 2018 patches, with Microsoft fixing at least 61 vulnerabilities in Windows and related software, including 17 rated critical. One zero-day, CVE-2018-8440, affects Windows 7 through Windows 10 and lets a program launched by a restricted user gain administrative access; it was publicized August 27 in a since-deleted tweet linking to proof-of-concept code on Github, and security experts have since seen that code used in active attacks.

Bottom line: Attackers already have working exploit code for CVE-2018-8440, and two more of the patched flaws - CVE-2018-8457 and CVE-2018-8475 - were publicly detailed before today, so the window between disclosure and exploitation is already open on systems running Windows 7 through Windows 10.

Read the original at Krebs on Security ↗

Topics
Vulnerabilities & Patching
Mentions
CVE-2018-15967CVE-2018-8409CVE-2018-8440CVE-2018-8457CVE-2018-8475
Related
CVE-2018-8440: Microsoft Windows Privilege Escalation Vulnerability Known Exploited Vulnerabilities · Mar 28, 2022