Patch Tuesday, August 2018
Microsoft's monthly security release, Tuesday, August 14, 2018. Includes CVEs published within two days either side; Adobe and SAP ride the same day.
4 CVEs · 0 critical · 4 exploited · 1 with public exploit code
Microsoft only. Adobe and SAP are below. Exploited first, then public exploit code, then highest CVSS.
Microsoft
4 CVEs · 0 critical · 4 exploited · 1 with public exploit code
- 8.8HighAug 15, 2018Microsoft Windows Code / command injectionCVE-2018-8414A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths.Exploited73% likelyExploit code
- 7.8HighAug 15, 2018Microsoft DirectX Graphics Kernel (DXGKRNL) Denial of serviceCVE-2018-8405An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory.Exploited3.4% likely
- 7.8HighAug 15, 2018Microsoft DirectX Graphics Kernel (DXGKRNL) Denial of serviceCVE-2018-8406An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory.Exploited3.4% likely
- 7.5HighAug 15, 2018Microsoft Internet Explorer Scripting Engine Memory corruptionCVE-2018-8373A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer.Exploited62% likely
Adobe
No tracked Adobe CVEs in this window.
SAP
No tracked SAP CVEs in this window.
The release date follows Microsoft's usual schedule (second Tuesday). Chips show what Watch Floor knows: CISA KEV listing, public exploit code and published detection rules.