Skip to main content

Microsoft Monthly Security Update (Oct 2018)

Last Update Date: 12 Oct 2018 Release Date: 10 Oct 2018 6125 Views

RISK: Medium Risk

TYPE: Operating Systems - Windows OS

TYPE: Windows OS

Microsoft has released monthly security update for their products:

 

Vulnerable ProductSeverityImpactsNotesDetails (including CVE)
BrowserModerately Critical Moderately CriticalSecurity Restriction Bypass
Remote Code Execution
 
Developer ToolsModerately Critical Moderately CriticalRemote Code Execution
Information Disclosure
 
Exchange ServerModerately Critical Moderately CriticalRemote Code Execution
Elevation of Privilege
 
Microsoft OfficeModerately Critical Moderately CriticalRemote Code Execution
Elevation of Privilege
Information Disclosure
 
WindowsModerately Critical Moderately CriticalSecurity Restriction Bypass
Remote Code Execution
Elevation of Privilege
Information Disclosure
Exploited in the wild (Local Exploit)

 

Number of 'Extremely Critical' product(s): 0

Number of 'Highly Critical' product(s): 0

Number of 'Moderately Critical' product(s): 5

Evaluation of overall 'Criticality Level': Moderately Critical


Impact

  • Elevation of Privilege
  • Remote Code Execution
  • Security Restriction Bypass
  • Information Disclosure

System / Technologies affected

  • Browser
  • Developer Tools
  • Exchange Server
  • Microsoft Office
  • Windows

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

  • The vendor has issued security updates for the products. Please refer to 'Details' column in the above table for details of individual product update or run software update.

Note: Customers running Windows 7 or Windows Server 2008 R2 need to ensure they have Servicing Stack Update (SSU) 3177467 installed before installing the October 2018 security updates, to avoid a failure to install. See Microsoft Knowledge Base Article 3177467 for more information about this SSU.


Vulnerability Identifier


Source


Related Link