Multiple vulnerabilities in Microsoft Development Tools

Beschreibung

Multiple serious vulnerabilities were found in Microsoft Development Tools. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges. Below is a complete list of vulnerabilities:

1. A vulnerability in Chakra scripting engine in Microsoft Edge can be exploited remotely via specially crafted website to execute arbitrary code;
2. A vulnerability in the way scripting engine handles objects in memory can be exploited remotely via specially crafted website to execute arbitrary code;
3. A vulnerability in the way scripting engine handles objects in memory can be exploited remotely via specially crafted website to execute arbitrary code;
4. A vulnerability in Chakra scripting engine in Microsoft Edge can be exploited remotely via specially crafted website to execute arbitrary code;
5. A vulnerability in Chakra scripting engine in Microsoft Edge can be exploited remotely via specially crafted website to execute arbitrary code;
6. A vulnerability related to Diagnostics Hub Standard Collector can be exploited locally via specially crafted application to gain privileges;
7. A vulnerability in Chakra scripting engine in Microsoft Edge can be exploited remotely to execute arbitrary code;
8. A vulnerability in Chakra scripting engine in Microsoft Edge can be exploited remotely via specially crafted website to execute arbitrary code;
9. A vulnerability in the way scripting engine handles objects in memory can be exploited remotely via specially crafted website to execute arbitrary code;
10. A vulnerability in the way scripting engine handles objects in memory can be exploited remotely to execute arbitrary code;
11. An information disclosure vulnerability in Microsoft .NET Framework can be exploited to obtain sensitive information

Ursprüngliche Informationshinweise

• CVE-2018-8384

• CVE-2018-8372
• CVE-2018-8385
• CVE-2018-8266
• CVE-2018-8380
• CVE-2018-0952
• CVE-2018-8359
• CVE-2018-8381
• CVE-2018-8355
• CVE-2018-8390
• CVE-2018-8360
• CVE-2018-8372
• CVE-2018-8385
• CVE-2018-8380
• CVE-2018-0952

CVE Liste

• CVE-2018-8384
  critical
• CVE-2018-8372
  critical
• CVE-2018-8385
  critical
• CVE-2018-8266
  critical
• CVE-2018-8380
  critical
• CVE-2018-0952
  critical
• CVE-2018-8359
  critical
• CVE-2018-8381
  critical
• CVE-2018-8355
  critical
• CVE-2018-8390
  critical
• CVE-2018-8360
  critical

KB Liste

• 4344151
• 4344146
• 4343909
• 4344166
• 4344177
• 4344178
• 4344147
• 4344148
• 4343885
• 4344172
• 4344144
• 4343887
• 4344149
• 4344175
• 4344165
• 4344167
• 4343892
• 4344153
• 4344150
• 4344152
• 4344176
• 4344171
• 4344173
• 4344145
• 4343897
• 4469516

Mehr erfahren

Informieren Sie sich über die Statistiken der in Ihrer Region verbreiteten Sicherheitslücken statistics.securelist.com