Patch Tuesday, August 2014

Microsoft's monthly security release, Tuesday, August 12, 2014. Includes CVEs published within two days either side; Adobe and SAP ride the same day.

1 CVE · 0 critical · 1 exploited · 0 with public exploit code

Microsoft only. Adobe and SAP are below. Exploited first, then public exploit code, then highest CVSS.

← July 2014 September 2014 →Open in the dashboard

Microsoft

1 CVE · 0 critical · 1 exploited · 0 with public exploit code

8.8HighAug 12, 2014Microsoft Internet Explorer Privilege escalationCVE-2014-2817Microsoft Internet Explorer cotains an unspecified vulnerability that allows remote attackers to gain privileges via a crafted web site.Exploited26% likely

Adobe

1 CVE · 0 critical · 1 exploited · 0 with public exploit code

8.8HighAug 12, 2014Adobe Reader and AcrobatCVE-2014-0546Adobe Reader and Acrobat on Windows allow attackers to bypass a sandbox protection mechanism, and consequently execute native code in a privileged context.Exploited22% likely

SAP

No tracked SAP CVEs in this window.

The release date follows Microsoft's usual schedule (second Tuesday). Chips show what Watch Floor knows: CISA KEV listing, public exploit code and published detection rules.