Patch Tuesday, July 2018 Edition

Summary: Microsoft's July 2018 Patch Tuesday shipped 14 updates fixing more than 50 flaws in Windows and associated software, with all but two of the critical fixes applying to Internet Explorer and Edge, while Adobe released a Flash Player update to version 30.0.0.134 and Reader/Acrobat patches covering more than 100 vulnerabilities. According to SANS, at least three flaws - CVE-2018-8278, CVE-2018-8313 and CVE-2018-8314 - had already been publicly disclosed before the patch release.
Bottom line: Three of the patched flaws were public before Microsoft shipped fixes, giving attackers a head start on writing exploits, and the Reader/Acrobat bundle alone closes more than 100 holes that an emailed document can trigger.

Read the original at Krebs on Security ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026