Remote Code Execution Archives

Microsoft company keeps on monitoring their customers' feedback and software bugs, security issues in their products with real time cyber-security standards to release patch updates. Microsoft released latest security patch updates for this month. Microsoft officially released security patch updates for 53 vulnerabilities, affecting Windows, Internet Explorer (IE), Edge, ChakraCore, .NET Framework, ASP.NET, PowerShell, Visual Studio, and Microsoft Office and Office Services, and Adobe Flash Player tools. Total vulnerabilities 53 Critical vulnerabilities 17 Important vulnerabilities 34 Low / Moderate vulnerabilities 1 Critical vulnerabilities are: Scripting Engine Memory Corruption Vulnerability (CVE-2018-8242) Edge Memory Corruption Vulnerability (CVE-2018-8262) Edge Memory Corruption Vulnerability (CVE-2018-8274) Scripting Engine Memory Corruption Vulnerability (CVE-2018-8275) Scripting Engine Memory Corruption Vulnerability (CVE-2018-8279) Chakra Scripting Engine Memory Corruption Vulnerability (CVE-2018-8280) Scripting Engine Memory Corruption Vulnerability (CVE-2018-8283) Chakra Scripting Engine Memory Corruption Vulnerability (CVE-2018-8286) Scripting Engine Memory Corruption Vulnerability (CVE-2018-8288) Chakra Scripting Engine Memory Corruption Vulnerability (CVE-2018-8290) Scripting Engine Memory Corruption Vulnerability (CVE-2018-8291) Chakra Scripting Engine Memory Corruption Vulnerability (CVE-2018-8294) Scripting Engine Memory Corruption Vulnerability (CVE-2018-8296) Chakra Scripting Engine Memory Corruption Vulnerability (CVE-2018-8298) Microsoft Edge Memory Corruption Vulnerability (CVE-2018-8301) Microsoft Edge Information Disclosure Vulnerability (CVE-2018-8324) PowerShell Editor Services Remote Code Execution Vulnerability (CVE-2018-8327) Important vulnerabilities are: Microsoft Edge—Remote code execution (RCE), Information disclosure, spoofing, and security feature bypass flaws Microsoft Internet Explorer (IE)— RCE and security feature bypass flaws MS Office (Powerpoint, Word, Excel, Access, Lync, Skype)—security feature bypass, RCE, and elevation of privilege flaws Windows 10, 8.1, 7 and Server 2008, 2012, 2016—Denial of Service, security feature bypass, elevation of privilege flaws Microsoft .NET Framework—Elevation of privilege and RCE flaws Microsoft SharePoint—Elevation of Privilege, and RCE flaws ChakraCore—RCE, and security feature bypass vulnerabilities Microsoft Visual Studio—RCE flaw Expression Blend 4—RCE flaw ASP .NET—security feature bypass flaws Mail, Calendar, and People in Windows 8.1 App Store—information disclosure flaw Microsoft strongly advised all customers to apply available security patches immediately when notification appears on the screen to keep hackers and cybercriminals away from taking control of your computers. How to check and update new patches: For installing security updates, open your control panel and click Settings --> Navigate into Update & security --> Navigate into Windows Update --> Click Check for updates. Or if you like to install these updates manually, then refer to the steps described in the URL https://portal.msrc.microsoft.com/en-us/security-guidance/releasenotedetail/1c26eff2-573f-e811-a96f-000d3a33c573

GTechHub

GTechHub

Tag: Remote Code Execution

Vulnerability in ManageEngine Desktop Central Could Allow for Remote Code Execution

Patch updates for 53 Microsoft Vulnerabilities