Microsoft Patch Tuesday, June 2018 Edition

Summary: Microsoft released June 2018 updates fixing more than four dozen security holes in Windows and related software, with almost a quarter rated critical and most of those in Microsoft browsers or browser components. One flaw, CVE-2018-8267, was publicly disclosed before the patch release, and Recorded Future flagged a remote code execution vulnerability in Windows DNS present in all supported versions from Windows 7 to Windows 10 and Windows Server 2008 to 2016.
What you should know: The DNS flaw lets an attacker send a crafted DNS packet or spoofed response and take control of the target machine, and Qualys rates mobile workstations connecting to untrusted Wi-Fi as high risk - a category that describes most of your traveling workforce.

Read the original at Krebs on Security ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2018-8267
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026