CVE-2018-1016

CVE-2018-1016 is a Windows font library remote code execution vulnerability. The issue arises from the Windows font library improperly handling specially crafted embedded fonts, enabling code execution on a vulnerable system. Affected products include multiple Windows versions (Windows 7, Windows...

CVE-2018-1013

A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Microsoft Graphics Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012,...

CVE-2018-1008

An elevation of privilege vulnerability exists in Windows Adobe Type Manager Font Driver ATMFD.dll when it fails to properly handle objects in memory, aka "OpenType Font Driver Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server...

CVE-2018-1008

CVE-2018-1008 describes a local elevation-of-privilege vulnerability in Windows Adobe Type Manager Font Driver (ATMFD.dll). The flaw stems from improper handling of objects in memory, enabling an attacker to execute arbitrary code with kernel or SYSTEM privileges on vulnerable Windows editions (W...

CVE-2018-1010

Technical details about CVE-2018-1010 are not publicly provided in the supplied documents. The connected MSKB entries relate to OS updates but do not disclose vulnerability specifics. Monitor for updates from Microsoft for any confirmed fixes or advisories.

CVE-2018-1013

CVE-2018-1013 is a remote code execution issue in the Windows font library triggered by specially crafted embedded fonts. Affected OS versions include Windows 7, Windows 8.1, Windows 10 and corresponding Server editions (2012/2016, etc.). Root cause is improper handling of embedded fonts by the W...

CVE-2018-1010

A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Microsoft Graphics Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012,...

Microsoft Windows Remote Code Execution Vulnerability (CNVD-2018-08494)

Microsoft Windows 10 and others are a series of operating systems released by Microsoft Corporation.Microsoft Windows 10 is a set of operating systems for personal computers.Windows Server 2008 SP2 is a set of server operating systems. A remote code execution vulnerability exists in Microsoft...

Microsoft Windows Remote Code Execution Vulnerability (CNVD-2018-08491)

Microsoft Windows 10 and others are a series of operating systems released by Microsoft Corporation.Microsoft Windows 10 is a set of operating systems for personal computers.Windows Server 2008 SP2 is a set of server operating systems. A remote code execution vulnerability exists in Microsoft...

Microsoft Windows Remote Code Execution Vulnerability (CNVD-2018-08492)

Microsoft Windows 10 and others are a series of operating systems released by Microsoft Corporation.Microsoft Windows 10 is a set of operating systems for personal computers.Windows Server 2008 SP2 is a set of server operating systems. A remote code execution vulnerability exists in Microsoft...

Microsoft Windows Remote Code Execution Vulnerability (CNVD-2018-08336)

Microsoft Windows 10 and others are a series of operating systems released by Microsoft Corporation.Microsoft Windows 10 is a set of operating systems for personal computers.Windows Server 2008 SP2 is a set of server operating systems. A remote code execution vulnerability exists in Microsoft...

Microsoft Windows Multiple Vulnerabilities (KB4093109)

This host is missing a critical security update according to Microsoft KB4093109 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Multiple Vulnerabilities (KB4093107)

This host is missing a critical security update according to Microsoft KB4093107 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Multiple Vulnerabilities (KB4093111)

This host is missing a critical security update according to Microsoft KB4093111 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Multiple Vulnerabilities (KB4093118)

This host is missing a critical security update according to Microsoft KB4093118 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Multiple Vulnerabilities (KB4093112)

This host is missing a critical security update according to Microsoft KB4093112 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Font Integer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the rendering of...

April Patch Tuesday – 63 Microsoft vulnerabilities, 19 for Adobe

Today's Patch Tuesday is smaller than last month, but there are more critical updates this time. Out of the 63 vulnerabilities covered by the Microsoft patches, 22 of them are critical. Adobe has released 6 bulletins covering 19 vulnerabilities. According to Microsoft and Adobe, there are no acti...

Microsoft Graphics Remote Code Execution Vulnerability

A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker who successfully exploited the vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data...

Description of the security update for the Microsoft graphics remote code execution vulnerability in Windows Server 2008, Windows Embedded POSReady 2009, and Windows Embedded Standard 2009: April 10, 2018

None None...