Patch Tuesday, August 2018 Edition
Summary: Adobe released security updates for Flash Player fixing five vulnerabilities, while Microsoft pushed 17 updates addressing at least 60 vulnerabilities in Windows and other software, including two zero-day flaws that attackers were already exploiting. The zero-days were CVE-2018-8373, a critical Internet Explorer flaw used to foist malware on users who visit hacked or booby-trapped sites, and CVE-2018-8414, a Windows 10 shell bug that could allow an attacker to run code of his choice.
Key Takeaway: Two of the 60-plus flaws Microsoft patched were already being exploited in the wild before fixes existed, and one of them, CVE-2018-8345, can execute code simply by viewing a malicious .lnk file, with no click required.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2018-8345CVE-2018-8373CVE-2018-8414
- Related
- CVE-2018-8373: Microsoft Scripting Engine Memory Corruption Vulnerability Known Exploited Vulnerabilities · Mar 25, 2022CVE-2018-8414: Microsoft Windows Shell Remote Code Execution Vulnerability Known Exploited Vulnerabilities · Mar 25, 2022