December 2018 Security Update Release

Today, we released a security update for Internet Explorer after receiving a report from Google about a new vulnerability being used in targeted attacks. Customers who have Windows Update enabled and have applied the latest security updates, are protected automatically. We encourage customers to...

December 19, 2018—KB4483228 (OS Build 10240.18064)

December 19, 2018—KB4483228 OS Build 10240.18064 Applies To Windows 10 Improvements and fixes This update includes quality improvements. No new operating system features are being introduced in this update. Key changes include: Security update to Internet Explorer. If you installed earlier update...

December 2018 Security Update Release

Today, we released a security update for Internet Explorer after receiving a report from Google about a new vulnerability being used in targeted attacks. Customers who have Windows Update enabled and have applied the latest security updates, are protected automatically. We encourage customers to...

Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully...

December 19, 2018—KB4483232 (OS Build 16299.847)

December 19, 2018—KB4483232 OS Build 16299.847 Applies To Windows 10, version 1709, all editions Note Because of minimal operations during the holidays and upcoming Western new year, there won’t be any preview releases for the month of December 2018. Monthly servicing will resume with the January...

Internet Explorer help

Internet Explorer help Internet Explorer 11 support ended Support for Internet Explorer 11 ended on June 15, 2022. If any site you visit needs Internet Explorer, you can reload it with Internet Explorer mode in Microsoft Edge. Get started with Microsoft Edge Make the switch from Internet Explorer...

December 19, 2018—KB4483234 (OS Build 17134.472)

December 19, 2018—KB4483234 OS Build 17134.472 Applies To Windows 10, version 1803, all editions Note Because of minimal operations during the holidays and upcoming Western new year, there won’t be any preview releases for the month of December 2018. Monthly servicing will resume with the January...

PDF Explorer 1.5.66.2 - Buffer Overflow (SEH)

PDF Explorer 1.5.66.2 - Buffer Overflow SEH Exploit Title: PDF Explorer SEH Local Exploit Original Discovery:Gionathan "John" Reale DoS exploit Exploit Author: Achilles Date: 18-12-2018 Vendor Homepage: http://www.rttsoftware.com/ Software Link:...

KLA11392 ACE vulnerability in Microsoft Internet Explorer

A memory corruption vulnerability was found in Microsoft Internet Explorer. Malicious users can exploit this vulnerability remotely via specially crafted website to execute arbitrary code. Original advisories CVE-2018-8653 Exploitation Public exploits exist for this vulnerability. Malware exists...

KLA11882 ACE vulnerability in Microsoft Products (ESU)

A memory corruption vulnerability was found in Microsoft Products Extended Support Update. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2018-8653 Exploitation Public exploits exist for this vulnerability. Malware exists for this vulnerability...

Security Updates for Internet Explorer (December 2018 OOB)

The Internet Explorer installation on the remote host is missing security updates. It is, therefore, affected by a remote code execution vulnerability: - A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The...

Microsoft Internet Explorer Scripting Engine CVE-2018-8653 Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial of service conditions. Internet Explorer 9, 10 and 11 are...

PDF Explorer 1.5.66.2 SEH Buffer Overflow

Exploit Title: PDF Explorer SEH Local Exploit Original Discovery:Gionathan "John" Reale DoS exploit Exploit Author: Achilles Date: 18-12-2018 Vendor Homepage: http://www.rttsoftware.com/ Software Link: https://www.rttsoftware.com/files/PDFExplorerTrialSetup.zip Tested Version: 1.5.66.2 Tested on:...

PT-2018-2067

Name of the Vulnerable Software and Affected Versions Internet Explorer versions 9 through 11 Description The issue is caused by a memory corruption vulnerability in the scripting engine of Internet Explorer, allowing a remote attacker to execute arbitrary code with the help of a specially crafte...

KB4483229: Windows 10 Version 1607 and Windows Server 2016 December 2018 OOB Security Update

The remote Windows host is missing security update 4483229. It is, therefore, affected by a remote code execution vulnerability: - A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memo...

Microsoft Releases Out-of-Band Security Updates

Microsoft has released out-of-band security updates to address a vulnerability in Internet Explorer 9, 10, and 11. An attacker could exploit this vulnerability to take control of an affected system. This vulnerability was detected in exploits in the wild. The National Cybersecurity and...

VulnCheck KEV: CVE-2018-8653

Microsoft Internet Explorer contains a memory corruption vulnerability due to how the Scripting Engine handles objects in memory, leading to remote code execution...

Microsoft Internet Explorer Scripting Engine Memory Corruption (CVE-2018-8653)

A memory corruption vulnerability exists in Microsoft Internet Explorer. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

KB4483232: Windows 10 Version 1709 and Windows Server Version 1709 December 2018 OOB Security Update

The remote Windows host is missing security update 4483232. It is, therefore, affected by a remote code execution vulnerability: - A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memo...

KB4483234: Windows 10 Version 1803 and Windows Server Version 1803 December 2018 OOB Security Update

The remote Windows host is missing security update 4483234. It is, therefore, affected by a remote code execution vulnerability: - A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memo...