10 matches found
Microsoft Fixes 66 Bugs in April Patch Tuesday Release
Microsoft’s April Patch Tuesday release includes fixes for 66 bugs, 24 of which are rated critical. Notable is Microsoft’s disclosure of a publicly known SharePoint elevation of privilege bug CVE-2018-1034, rated important, which has no fix but has not been publicly exploited. Microsoft SharePoin...
March 13, 2018—KB4088875 (Monthly Rollup)
None None...
CVE-2018-1038
The CVE-2018-1038 entry affects Windows 7 SP1 and Windows Server 2008 R2 SP1. Root cause: a mis-set bit in a page-table entry allowed userspace to overwrite page tables, enabling local privilege escalation. Documented impact is elevation of privilege with full confidentiality/integrity/availabili...
A “Patch for the Meltdown Patch” released out of band Thursday night
The Meltdown/Spectre saga continues… Late Thursday, Microsoft released a patch for Windows 7 and Server 2008 R2 operating systems to resolve CVE-2018-1038. Apparently, this vulnerability was actually introduced by the patches released in January to mitigate the effects of Meltdown. Microsoft did...
Microsoft Fixes Bad Patch That Left Win7, Server 2008 Open to Attack
Microsoft released an out-of-band fix on Thursday for a Windows vulnerability introduced earlier this year as a patch. If exploited, the bug could allow an authenticated attacker to install programs, access stored data or create new accounts with full user rights on Windows 7 and Server 2008 R2...
KLA11219 PE vulnerability in Microsoft Products (ESU)
PE vulnerability was found in Microsoft Products Extended Support Update. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2018-1038 Exploitation Public exploits exist for this vulnerability. Malware exists for this vulnerability. Usually such malware is...
Windows 7 and Windows Server 2008 R2 x64 fail to protect kernel memory when the Microsoft update for meltdown is installed
Overview When the Microsoft update for meltdown is installed on a Windows 7 x64 or Windows Server 2008 R2 x64 system, an unprivileged process may be able to read and write the entire memory space available to the Windows kernel. Description The update that Microsoft has released for meltdown on x...
February 13, 2018—KB4074587 (Security-only update)
None None...