Multiple vulnerabilities in Microsoft Development Tools

Beschreibung

Multiple serious vulnerabilities have been found in Microsoft Development Tools. Malicious users can exploit these vulnerabilities to obtain sensitive information, bypass security restrictions or execute arbitrary code.

Below is a complete list of vulnerabilities:

1. Multiple memory corruption vulnerabilities in Chakra script engine can be exploited remotely via specially crafted website to execute arbitrary code;
2. A security feature bypass vulnerability in Microsoft Wireless Keyboard 850 can be exploited remotely to bypass security restrictions and obtain sensitive information;
3. An uninitialized memory vulnerability in Microsoft Visual Studio can be exploited locally to obtain sensitive data.

Ursprüngliche Informationshinweise

• CVE-2018-0994

• CVE-2018-0990
• CVE-2018-1023
• CVE-2018-1019
• CVE-2018-0979
• CVE-2018-0980
• CVE-2018-0995
• CVE-2018-0993
• CVE-2018-8117
• CVE-2018-1037

CVE Liste

• CVE-2018-0994
  critical
• CVE-2018-0990
  critical
• CVE-2018-1023
  critical
• CVE-2018-1019
  critical
• CVE-2018-0979
  critical
• CVE-2018-0980
  critical
• CVE-2018-0995
  critical
• CVE-2018-0993
  critical
• CVE-2018-8117
  critical
• CVE-2018-1037
  critical

KB Liste

• 4089501
• 4087371
• 4091346
• 4089283

Mehr erfahren

Informieren Sie sich über die Statistiken der in Ihrer Region verbreiteten Sicherheitslücken statistics.securelist.com