Microsoft Patch Tuesday, May 2018 Edition
Summary: Microsoft released security updates fixing at least 67 holes across its Windows operating systems and related software, including one flaw, CVE-2018-8174, that Microsoft says is already being exploited in active attacks. Adobe also issued a Flash Player update to v. 29.0.0.171 addressing a single critical weakness, and Qualys flagged the Windows scripting engine bug as deserving priority over other patches in organizations testing updates before deployment.
Why it matters: One of the 67 flaws is already being used in live attacks against the Windows scripting engine, so the patch-testing window many organizations run before deploying is time an attacker can use. Commenters on the post also reported May updates leaving machines stuck on a spinning restart screen, breaking printing, and blocking RDP connections through CredSSP.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2018-8174
- Related
- CVE-2018-8174: Microsoft Windows VBScript Engine Out-of-Bounds Write Vulnerability Known Exploited Vulnerabilities · Feb 15, 2022