Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
kasperskyKaspersky LabKLA11898
HistoryNov 13, 2018 - 12:00 a.m.

KLA11898 Multiple vulnerabilities in Microsoft Products (ESU)

2018-11-1300:00:00
Kaspersky Lab
threats.kaspersky.com
117

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.5 High

AI Score

Confidence

High

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.947 High

EPSS

Percentile

99.2%

JSON

Detect date:

11/13/2018

Severity:

Critical

Description:

Multiple vulnerabilities were found in Microsoft Products (Extended Security Update). Malicious users can exploit these vulnerabilities to obtain sensitive information, gain privileges, execute arbitrary code, spoof user interface.

Exploitation:

Public exploits exist for this vulnerability.

Affected products:

Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)
Windows Server 2019
Windows 10 for 32-bit Systems
Windows Server, version 1803 (Server Core Installation)
Internet Explorer 9
Windows 10 for x64-based Systems
Windows Server 2012 (Server Core installation)
Windows Server 2016 (Server Core installation)
Windows 7 for x64-based Systems Service Pack 1
Windows 8.1 for 32-bit systems
Windows 8.1 for x64-based systems
Windows Server 2012
Windows Server 2008 for 32-bit Systems Service Pack 2
Internet Explorer 11
Windows Server 2008 for x64-based Systems Service Pack 2
Windows 10 Version 1803 for ARM64-based Systems
PowerShell Core 6.0
Windows Server 2016
Windows 10 Version 1709 for x64-based Systems
Windows RT 8.1
Windows Server 2008 for Itanium-Based Systems Service Pack 2
Windows 10 Version 1703 for x64-based Systems
Windows 10 Version 1809 for 32-bit Systems
Windows 10 Version 1709 for ARM64-based Systems
Windows 10 Version 1809 for ARM64-based Systems
Windows Server 2012 R2 (Server Core installation)
Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1
Windows Server 2019 (Server Core installation)
PowerShell Core 6.1
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)
Windows 10 Version 1607 for 32-bit Systems
Windows 10 Version 1809 for x64-based Systems
Windows 10 Version 1607 for x64-based Systems
Windows 7 for 32-bit Systems Service Pack 1
Windows 10 Version 1803 for 32-bit Systems
Windows Server 2008 R2 for x64-based Systems Service Pack 1
Windows 10 Version 1709 for 32-bit Systems
Windows 10 Version 1703 for 32-bit Systems
Internet Explorer 10
Microsoft.PowerShell.Archive 1.2.2.0
Windows Server 2012 R2
Windows 10 Version 1803 for x64-based Systems

Solution:

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Original advisories:

CVE-2018-8563
CVE-2018-8562
CVE-2018-8450
CVE-2018-8471
CVE-2018-8553
CVE-2018-8550
CVE-2018-8544
CVE-2018-8589
CVE-2018-8415
CVE-2018-8476
CVE-2018-8565
CVE-2018-8407
CVE-2018-8408
CVE-2018-8552
CVE-2018-8256
ADV990001

Impacts:

ACE

Related products:

Microsoft Internet Explorer

CVE-IDS:

CVE-2018-85527.5Critical
CVE-2018-84085.5High
CVE-2018-85537.8Critical
CVE-2018-85507.8Critical
CVE-2018-85627.8Critical
CVE-2018-85635.5High
CVE-2018-84157.8Critical
CVE-2018-84717.8Critical
CVE-2018-85448.8Critical
CVE-2018-84769.8Critical
CVE-2018-85897.8Critical
CVE-2018-82568.8Critical
CVE-2018-85655.5High
CVE-2018-84508.8Critical
CVE-2018-84075.5High

KB list:

4467706
4466536
4467107
4467700
4467106
5017397
5034867
5034865
5035969
5035968

Microsoft official advisories:

References

Related

mskb 21
openvas 11
nessus 11
kaspersky 3
qualysblog 1
talosblog 1
osv 2
prion 15
symantec 10
cvelist 15
cve 15
mscve 15
checkpoint_advisories 9
zdi 2
securelist 7
veracode 1
attackerkb 1
cisa_kev 1
zdt 3
packetstorm 2
exploitpack 1
thn 1
krebs 1
exploitdb 1
myhack58 2
threatpost 2
mskb
mskb
November 13, 2018—KB4467106 (Security-only update)
2018-11-13 08:00:00
November 13, 2018—KB4467107 (Monthly Rollup)
2018-11-13 08:00:00
November 13, 2018—KB4467706 (Monthly Rollup)
2018-11-13 08:00:00
openvas
openvas
Microsoft Windows Multiple Vulnerabilities (KB4467107)
2018-11-14 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB4467697)
2018-11-14 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB4467680)
2018-11-14 00:00:00
nessus
nessus
KB4467106: Windows 7 and Windows Server 2008 R2 November 2018 Security Update
2018-11-13 00:00:00
KB4467700: Windows Server 2008 November 2018 Security Update
2018-11-13 00:00:00
KB4467678: Windows Server 2012 November 2018 Security Update
2018-11-13 00:00:00
kaspersky
kaspersky
KLA11354 Multiple vulnerabilities in Microsoft Windows
2018-11-13 00:00:00
KLA11358 Multiple vulnerabilities in Microsoft Development Tools
2018-11-13 00:00:00
KLA11353 Multiple vulnerabilities in Microsoft Browser
2018-11-13 00:00:00
qualysblog
qualysblog
November 2018 Patch Tuesday – 62 Vulns, TFTP Server RCE, Adobe PoC
2018-11-13 18:46:17
talosblog
talosblog
Microsoft Patch Tuesday — November 2018: Vulnerability disclosures and Snort coverage
2018-11-13 10:53:00
osv
osv
CVE-2018-8415
2018-11-14 01:29:00
CVE-2018-8256
2018-11-14 01:29:00
prion
prion
Code injection
2018-11-14 01:29:00
Remote code execution
2018-11-14 01:29:00
Remote code execution
2018-11-14 01:29:00
symantec
symantec
Microsoft Windows Kernel 'Win32k.sys' CVE-2018-8589 Local Privilege Escalation Vulnerability
2018-11-13 00:00:00
Microsoft Windows PowerShell CVE-2018-8256 Remote Code Execution Vulnerability
2018-11-13 00:00:00
Microsoft Windows Kernel 'Win32k.sys' CVE-2018-8565 Local Information Disclosure Vulnerability
2018-11-13 00:00:00
cvelist
cvelist
CVE-2018-8589
2018-11-14 01:00:00
CVE-2018-8407
2018-11-14 01:00:00
CVE-2018-8256
2018-11-14 01:00:00
cve
cve
CVE-2018-8256
2018-11-14 01:29:00
CVE-2018-8407
2018-11-14 01:29:00
CVE-2018-8471
2018-11-14 01:29:00
mscve
mscve
Microsoft PowerShell Remote Code Execution Vulnerability
2018-11-13 08:00:00
Windows Remote Procedure Call Information Disclosure Vulnerability
2018-11-13 08:00:00
Windows Win32k Elevation of Privilege Vulnerability
2018-11-13 08:00:00
checkpoint_advisories
checkpoint_advisories
Microsoft Graphics Components Remote Code Execution (CVE-2018-8553)
2018-11-13 00:00:00
Microsoft Windows VBScript Engine Remote Code Execution (CVE-2018-8544)
2018-11-13 00:00:00
Microsoft Windows Win32k Elevation of Privilege (CVE-2018-8589)
2018-11-13 00:00:00
zdi
zdi
Microsoft Windows NtGdiExtTextOutW Out-Of-Bounds Write Privilege Escalation Vulnerability
2018-11-21 00:00:00
Microsoft Windows VBScript Class_Terminate Scripting.Dictionary Use-After-Free Remote Code Execution Vulnerability
2018-11-21 00:00:00
securelist
securelist
A new exploit for zero-day vulnerability CVE-2018-8589
2018-11-14 07:00:38
IT threat evolution Q1 2019
2019-05-23 10:00:14
The fourth horseman: CVE-2019-0797 vulnerability
2019-03-13 10:00:52
veracode
veracode
Code Injection
2018-11-15 06:42:35
attackerkb
attackerkb
CVE-2018-8589
2018-11-14 00:00:00
cisa_kev
cisa_kev
Microsoft Win32k Privilege Escalation Vulnerability
2022-05-23 00:00:00
zdt
zdt
Microsoft VBScript rtFilter Out-Of-Bounds Read Exploit
2018-12-01 00:00:00
Microsoft VBScript OLEAUT32!VariantClear / scrrun!VBADictionary::put_Item Use-After-Free
2018-12-01 00:00:00
Microsoft Windows - DfMarshal Unsafe Unmarshaling Privilege Escalation Exploit
2018-11-20 00:00:00
packetstorm
packetstorm
Microsoft VBScript OLEAUT32!VariantClear / scrrun!VBADictionary::put_Item Use-After-Free
2018-11-30 00:00:00
Microsoft VBScript rtFilter Out-Of-Bounds Read
2018-11-30 00:00:00
exploitpack
exploitpack
Microsoft Windows - DfMarshal Unsafe Unmarshaling Privilege Escalation
2018-11-20 00:00:00
thn
thn
63 New Flaws (Including 0-Days) Windows Users Need to Patch Now
2018-11-14 09:55:00
krebs
krebs
Patch Tuesday, November 2018 Edition
2018-11-14 13:25:13
exploitdb
exploitdb
Microsoft Windows - DfMarshal Unsafe Unmarshaling Privilege Escalation
2018-11-20 00:00:00
myhack58
myhack58
CNNVD about Microsoft more security vulnerability Advisory-vulnerability warning-the black bar safety net
2018-11-15 00:00:00
By 2019, 3-month Microsoft patch day multiple vulnerabilities early warning-vulnerability warning-the black bar safety net
2019-03-17 00:00:00
threatpost
threatpost
Windows Zero-Day Emerges in Active Exploits
2019-04-16 16:13:33
Microsoft Patches Zero-Day Bug in Win7, Server 2008 and 2008 R2
2018-11-13 22:10:46

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.5 High

AI Score

Confidence

High

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.947 High

EPSS

Percentile

99.2%

JSON
Related for KLA11898
mskb21openvas11nessus11kaspersky3qualysblog1talosblog1osv2prion15symantec10cvelist15cve15mscve15checkpoint_advisories9zdi2securelist7veracode1attackerkb1cisa_kev1zdt3packetstorm2exploitpack1thn1krebs1exploitdb1myhack582threatpost2