Microsoft Advisory for Microsoft Products (ESU)

Beschreibung

Microsoft released an advisory and security updates related to a newly-discovered class of hardware vulnerabilities (known as Spectre and Meltdown). Also, a new subclass of speculative execution side channel vulnerabilities known as Speculative Store Bypass (SSB) has been announced and assigned CVE-2018-3639.

An attacker may be able to read privileged data across trust boundaries. In the case of Just-in-Time (JIT) compilers, it may be possible for an attacker to supply JavaScript that produces native code that could give rise to an instance of CVE-2018-3639.

Ursprüngliche Informationshinweise

• ADV180012

Betroffene Produkte

• Microsoft-Windows
• Microsoft-Windows-Server

CVE Liste

KB Liste

• 4480960
• 4480968
• 4480957
• 4480970

Mehr erfahren

Informieren Sie sich über die Statistiken der in Ihrer Region verbreiteten Sicherheitslücken statistics.securelist.com