Patch Tuesday, July 2018
Microsoft's monthly security release, Tuesday, July 10, 2018. Includes CVEs published within two days either side; Adobe and SAP ride the same day.
0 CVEs · 0 critical · 0 exploited · 0 with public exploit code
Microsoft only. Adobe and SAP are below. Exploited first, then public exploit code, then highest CVSS.
Microsoft
No tracked Microsoft CVEs in this window. Vendors sometimes publish a day or two later.
Adobe
2 CVEs · 0 critical · 2 exploited · 0 with public exploit code
- 8.8HighJul 9, 2018Adobe Acrobat and Reader Memory corruptionCVE-2018-4990Adobe Acrobat and Reader have a double free vulnerability that could lead to remote code execution.Exploited36% likely
- 7.8HighJul 9, 2018Adobe Flash Player Memory corruptionCVE-2018-5002Adobe Flash Player have a stack-based buffer overflow vulnerability that could lead to remote code execution.Exploited25% likely
SAP
No tracked SAP CVEs in this window.
The release date follows Microsoft's usual schedule (second Tuesday). Chips show what Watch Floor knows: CISA KEV listing, public exploit code and published detection rules.