{"DocumentNotes":[{"Audience":"Public","Ordinal":"0","Title":"Release Notes","Type":1,"Value":"
The July security release consists of security updates for the following software:
\nPlease note the following information regarding the security updates:
\nThe following CVEs have FAQs with additional information and may include * further steps to take after installing the updates.
\nKnown Issues
\nIs Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?
\nOne of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See this blog post for more information. If impact to additional products is identified, we will update the CVE to reflect this.
\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"redhat","Type":8,"Value":"redhat"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"0","ProductStatuses":[{"ProductID":["16864-17084","16864-16817"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"4.18.3-1","ProductID":["16864-17084","16864-16817"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["16864-17084","16864-16817"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2024-10-15T00:00:00","Description":{"Value":"Information published.
\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["16864-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["16864-16817"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["16864-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["16864-16817"],"Type":3}],"Title":{"Value":"It was found that samba before 4.4.16 4.5.x before 4.5.14 and 4.6.x before 4.6.8 did not enforce \"SMB signing\" when certain configuration options were enabled. A remote attacker could launch a man-in-the-middle attack and retrieve information in plain-text."}},{"Acknowledgments":[],"CVE":"CVE-2017-7526","CVSSScoreSets":[{"BaseScore":6.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19588-17084"],"TemporalScore":6.1,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N"},{"BaseScore":6.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["20560-17084"],"TemporalScore":6.1,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N"}],"CWE":[{"ID":"CWE-200","Value":"Exposure of Sensitive Information to an Unauthorized Actor"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?
\nOne of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See this blog post for more information. If impact to additional products is identified, we will update the CVE to reflect this.
\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"redhat","Type":8,"Value":"redhat"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"1","ProductStatuses":[{"ProductID":["19588-17084","20560-17084"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"2.06-25","ProductID":["19588-17084","20560-17084"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["19588-17084","20560-17084"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2025-09-03T20:10:01","Description":{"Value":"Information published.
\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19588-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["20560-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["19588-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["20560-17084"],"Type":3}],"Title":{"Value":"libgcrypt before version 1.7.8 is vulnerable to a cache side-channel attack resulting into a complete break of RSA-1024 while using the left-to-right method for computing the sliding-window expansion. The same attack is believed to work on RSA-2048 with moderately more computation. This side-channel requires that attacker can run arbitrary software on the hardware where the private RSA key is used."}},{"Acknowledgments":[],"CVE":"CVE-2018-10906","CVSSScoreSets":[{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["16937-17084"],"TemporalScore":7.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["16935-16820"],"TemporalScore":7.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["16936-16823"],"TemporalScore":7.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["16937-16817"],"TemporalScore":7.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}],"CWE":[{"ID":"CWE-269","Value":"Improper Privilege Management"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?
\nOne of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See this blog post for more information. If impact to additional products is identified, we will update the CVE to reflect this.
\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"redhat","Type":8,"Value":"redhat"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"2","ProductStatuses":[{"ProductID":["16937-17084","16935-16820","16936-16823","16937-16817"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"2.9.7-10","ProductID":["16937-17084","16936-16823","16937-16817"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["16937-17084","16936-16823","16937-16817"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"2.9.7-7","ProductID":["16935-16820"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["16935-16820"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2026-02-18T02:16:05","Description":{"Value":"Information published.
\n"},"Number":"1.3"},{"Date":"2020-08-18T00:00:00","Description":{"Value":"Information published.
\n"},"Number":"1.0"},{"Date":"2021-12-16T00:00:00","Description":{"Value":"Added fuse to CBL-Mariner 2.0
\n"},"Number":"1.1"},{"Date":"2024-06-30T07:00:00","Description":{"Value":"Information published.
\n"},"Number":"1.2"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["16937-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["16935-16820"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["16936-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["16937-16817"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["16937-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["16935-16820"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["16936-16823"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["16937-16817"],"Type":3}],"Title":{"Value":"In fuse before versions 2.9.8 and 3.x before 3.2.5 fusermount is vulnerable to a restriction bypass when SELinux is active. This allows non-root users to mount a FUSE file system with the 'allow_other' mount option regardless of whether 'user_allow_other' is set in the fuse configuration. An attacker may use this flaw to mount a FUSE file system accessible by other users and trick them into accessing files on that file system possibly causing Denial of Service or other unspecified effects."}},{"Acknowledgments":[],"CVE":"CVE-2018-1129","CVSSScoreSets":[{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["16939-17084"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["16939-16817"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19856-17084"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"CWE":[{"ID":"CWE-287","Value":"Improper Authentication"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?
\nOne of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See this blog post for more information. If impact to additional products is identified, we will update the CVE to reflect this.
\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"redhat","Type":8,"Value":"redhat"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"3","ProductStatuses":[{"ProductID":["16939-17084","16939-16817","19856-17084"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"18.2.1-1","ProductID":["16939-17084","16939-16817","19856-17084"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["16939-17084","16939-16817","19856-17084"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2026-02-18T03:12:02","Description":{"Value":"Information published.
\n"},"Number":"1.1"},{"Date":"2026-08-12T21:46:31","Description":{"Value":"Information published.
\n"},"Number":"2.0"},{"Date":"2024-06-30T07:00:00","Description":{"Value":"Information published.
\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["16939-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["16939-16817"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19856-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["16939-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["16939-16817"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["19856-17084"],"Type":3}],"Title":{"Value":"A flaw was found in the way signature calculation was handled by cephx authentication protocol. An attacker having access to ceph cluster network who is able to alter the message payload was able to bypass signature checks done by cephx protocol. Ceph branches master mimic luminous and jewel are believed to be vulnerable."}},{"Acknowledgments":[],"CVE":"CVE-2018-13139","CVSSScoreSets":[{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["16897-16820"],"TemporalScore":8.8,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}],"CWE":[{"ID":"CWE-787","Value":"Out-of-bounds Write"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?
\nOne of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See this blog post for more information. If impact to additional products is identified, we will update the CVE to reflect this.
\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mitre","Type":8,"Value":"mitre"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"4","ProductStatuses":[{"ProductID":["16897-16820"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"1.0.31-1","ProductID":["16897-16820"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["16897-16820"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2021-01-28T00:00:00","Description":{"Value":"Information published.
\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["16897-16820"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["16897-16820"],"Type":3}],"Title":{"Value":"A stack-based buffer overflow in psf_memset in common.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted audio file. The vulnerability can be triggered by the executable sndfile-deinterleave."}},{"Acknowledgments":[],"CVE":"CVE-2018-13410","CVSSScoreSets":[{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["16944-17084"],"TemporalScore":9.8,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["16942-16820"],"TemporalScore":9.8,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["16943-16823"],"TemporalScore":9.8,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["16944-16817"],"TemporalScore":9.8,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}],"CWE":[{"ID":"CWE-416","Value":"Use After Free"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?
\nOne of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See this blog post for more information. If impact to additional products is identified, we will update the CVE to reflect this.
\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mitre","Type":8,"Value":"mitre"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"5","ProductStatuses":[{"ProductID":["16944-17084","16942-16820","16943-16823","16944-16817"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"3.0-6","ProductID":["16944-17084","16944-16817"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["16944-17084","16944-16817"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"3.0-5","ProductID":["16942-16820","16943-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["16942-16820","16943-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2020-08-18T00:00:00","Description":{"Value":"Information published.
\n"},"Number":"1.0"},{"Date":"2021-12-16T00:00:00","Description":{"Value":"Added zip to CBL-Mariner 2.0
\n"},"Number":"1.1"},{"Date":"2024-06-30T07:00:00","Description":{"Value":"Information published.
\n"},"Number":"1.2"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["16944-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["16942-16820"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["16943-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["16944-16817"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["16944-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["16942-16820"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["16943-16823"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["16944-16817"],"Type":3}],"Title":{"Value":"Info-ZIP Zip 3.0 when the -T and -TT command-line options are used allows attackers to cause a denial of service (invalid free and application crash) or possibly have unspecified other impact because of an off-by-one error. NOTE: it is unclear whether there are realistic scenarios in which an untrusted party controls the -TT value given that the entire purpose of -TT is execution of arbitrary commands"}},{"Acknowledgments":[],"CVE":"CVE-2018-13419","CVSSScoreSets":[{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["16897-16820"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"}],"CWE":[{"ID":"CWE-772","Value":"Missing Release of Resource after Effective Lifetime"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?
\nOne of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See this blog post for more information. If impact to additional products is identified, we will update the CVE to reflect this.
\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mitre","Type":8,"Value":"mitre"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"6","ProductStatuses":[{"ProductID":["16897-16820"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"1.0.31-1","ProductID":["16897-16820"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["16897-16820"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2021-01-28T00:00:00","Description":{"Value":"Information published.
\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["16897-16820"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["16897-16820"],"Type":3}],"Title":{"Value":"An issue has been found in libsndfile 1.0.28. There is a memory leak in psf_allocate in common.c as demonstrated by sndfile-convert. NOTE: The maintainer and third parties were unable to reproduce and closed the issue"}},{"Acknowledgments":[],"CVE":"CVE-2018-13420","CVSSScoreSets":[{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["16945-16820"],"TemporalScore":7.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["16946-16823"],"TemporalScore":7.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"CWE":[{"ID":"CWE-772","Value":"Missing Release of Resource after Effective Lifetime"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?
\nOne of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See this blog post for more information. If impact to additional products is identified, we will update the CVE to reflect this.
\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mitre","Type":8,"Value":"mitre"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"7","ProductStatuses":[{"ProductID":["16945-16820","16946-16823"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"2.7-4","ProductID":["16945-16820","16946-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["16945-16820","16946-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2020-09-25T00:00:00","Description":{"Value":"Information published.
\n"},"Number":"1.0"},{"Date":"2021-12-16T00:00:00","Description":{"Value":"Added gperftools to CBL-Mariner 2.0
\n"},"Number":"1.1"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["16945-16820"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["16946-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["16945-16820"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["16946-16823"],"Type":3}],"Title":{"Value":"Google gperftools 2.7 has a memory leak in malloc_extension.cc related to MallocExtension::Register and InitModule. NOTE: the software maintainer indicates that this is not a bug; it is only a false-positive report from the LeakSanitizer program"}},{"Acknowledgments":[],"CVE":"CVE-2018-14040","CVSSScoreSets":[{"BaseScore":6.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["20573-17084"],"TemporalScore":6.1,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"BaseScore":6.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["20526-17086"],"TemporalScore":6.1,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"BaseScore":6.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["20328-17086"],"TemporalScore":6.1,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"BaseScore":6.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["16947-16820"],"TemporalScore":6.1,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"BaseScore":6.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["16948-16823"],"TemporalScore":6.1,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"BaseScore":6.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["20564-17084"],"TemporalScore":6.1,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"BaseScore":6.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19407-17084"],"TemporalScore":6.1,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"BaseScore":6.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["20664-17086"],"TemporalScore":6.1,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"BaseScore":6.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19949-17086"],"TemporalScore":6.1,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?
\nOne of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See this blog post for more information. If impact to additional products is identified, we will update the CVE to reflect this.
\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mitre","Type":8,"Value":"mitre"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"8","ProductStatuses":[{"ProductID":["20573-17084","20526-17086","20328-17086","16947-16820","16948-16823","20564-17084","19407-17084","20664-17086","19949-17086"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"1.66.0-4","ProductID":["16947-16820"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["16947-16820"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"3.1.1-1","ProductID":["16948-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["16948-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2025-09-03T22:09:33","Description":{"Value":"Information published.
\n"},"Number":"1.0"},{"Date":"2025-11-25T01:01:37","Description":{"Value":"Information published.
\n"},"Number":"2.0"},{"Date":"2026-02-18T02:10:28","Description":{"Value":"Information published.
\n"},"Number":"2.1"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["20573-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["20526-17086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["20328-17086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["16947-16820"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["16948-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["20564-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19407-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["20664-17086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19949-17086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["20573-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["20526-17086"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["20328-17086"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["16947-16820"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["16948-16823"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["20564-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["19407-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["20664-17086"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["19949-17086"],"Type":3}],"Title":{"Value":"In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attributeIn Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute"}},{"Acknowledgments":[],"CVE":"CVE-2018-1999023","CVSSScoreSets":[{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["16939-17084"],"TemporalScore":8.8,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["16939-16817"],"TemporalScore":8.8,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19856-17084"],"TemporalScore":8.8,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}],"CWE":[{"ID":"CWE-94","Value":"Improper Control of Generation of Code ('Code Injection')"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?
\nOne of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See this blog post for more information. If impact to additional products is identified, we will update the CVE to reflect this.
\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mitre","Type":8,"Value":"mitre"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"9","ProductStatuses":[{"ProductID":["16939-17084","16939-16817","19856-17084"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"18.2.1-1","ProductID":["16939-17084","16939-16817","19856-17084"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["16939-17084","16939-16817","19856-17084"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2026-02-18T14:01:44","Description":{"Value":"Information published.
\n"},"Number":"1.1"},{"Date":"2026-08-12T21:17:00","Description":{"Value":"Information published.
\n"},"Number":"2.0"},{"Date":"2024-06-30T07:00:00","Description":{"Value":"Information published.
\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["16939-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["16939-16817"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19856-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["16939-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["16939-16817"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["19856-17084"],"Type":3}],"Title":{"Value":"The Battle for Wesnoth Project contains a Code Injection that can result in code execution outside the sandbox"}},{"Acknowledgments":[],"CVE":"CVE-2018-1999024","CVSSScoreSets":[{"BaseScore":5.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["16959-17084"],"TemporalScore":5.4,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N"},{"BaseScore":5.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["16959-16817"],"TemporalScore":5.4,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?
\nOne of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See this blog post for more information. If impact to additional products is identified, we will update the CVE to reflect this.
\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mitre","Type":8,"Value":"mitre"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"10","ProductStatuses":[{"ProductID":["16959-17084","16959-16817"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"1.26.3-4","ProductID":["16959-17084","16959-16817"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["16959-17084","16959-16817"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2025-09-03T22:22:20","Description":{"Value":"Information published.
\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["16959-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["16959-16817"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["16959-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["16959-16817"],"Type":3}],"Title":{"Value":"MathJax version prior to version 2.7.4 contains a Cross Site Scripting (XSS) vulnerability"}},{"Acknowledgments":[],"CVE":"CVE-2018-14042","CVSSScoreSets":[{"BaseScore":6.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["21900-17084"],"TemporalScore":6.1,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"BaseScore":6.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["21898-17084"],"TemporalScore":6.1,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"BaseScore":6.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["21823-17084"],"TemporalScore":6.1,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"}],"CWE":[{"ID":"CWE-79","Value":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?
\nOne of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See this blog post for more information. If impact to additional products is identified, we will update the CVE to reflect this.
\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mitre","Type":8,"Value":"mitre"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"11","ProductStatuses":[{"ProductID":["21900-17084","21898-17084","21823-17084"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"","ProductID":["21900-17084","21898-17084","21823-17084"],"RestartRequired":{},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["21900-17084","21898-17084","21823-17084"],"SubType":"Release Notes","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2026-10-01T01:08:49","Description":{"Value":"Information published.
\n"},"Number":"2.0"},{"Date":"2026-10-01T14:50:30","Description":{"Value":"Information published.
\n"},"Number":"3.0"},{"Date":"2025-09-03T23:08:20","Description":{"Value":"Information published.
\n"},"Number":"1.0"},{"Date":"2026-02-21T01:34:11","Description":{"Value":"Information published.
\n"},"Number":"1.1"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["21900-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["21898-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["21823-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["21900-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["21898-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["21823-17084"],"Type":3}],"Title":{"Value":"In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip."}},{"Acknowledgments":[],"CVE":"CVE-2018-1128","CVSSScoreSets":[],"CWE":[{"ID":"CWE-294","Value":"Authentication Bypass by Capture-replay"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"redhat","Type":8,"Value":"redhat"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"12","ProductStatuses":[{"ProductID":["19666-17084","19814"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[],"RevisionHistory":[{"Date":"2026-08-07T00:42:03","Description":{"Value":"Information published.
\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19666-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19814"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["19666-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["19814"],"Type":3}],"Title":{"Value":"It was found that cephx authentication protocol did not verify ceph clients correctly and was vulnerable to replay attack. Any attacker having access to ceph cluster network who is able to sniff packets on network can use this vulnerability to authenticate with ceph service and perform actions allowed by ceph service. Ceph branches master, mimic, luminous and jewel are believed to be vulnerable."}},{"Acknowledgments":[{"Name":[{"Value":"Masato Kinugawa of Cure53"}],"URL":[""]}],"CVE":"CVE-2018-0949","CVSSScoreSets":[{"BaseScore":2.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10555-10378"],"TemporalScore":2.2,"Vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":2.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10336-9312"],"TemporalScore":2.2,"Vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":2.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10336-9318"],"TemporalScore":2.2,"Vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10951"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10952"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-11453"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-11454"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10729"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10735"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10852"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10853"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":2.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10816"],"TemporalScore":2.2,"Vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10047"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10048"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10481"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10482"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10484"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":2.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10051"],"TemporalScore":2.2,"Vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":2.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10483"],"TemporalScore":2.2,"Vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-11497"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-11498"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"A security feature bypass vulnerability exists when Microsoft Internet Explorer improperly handles requests involving UNC resources.\nAn attacker who successfully exploited the vulnerability could force the browser to load data that would otherwise be restricted.
\nIn a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft Internet Explorer and then convince a user to view the website. The attacker could also take advantage of compromised websites, and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.
\nThe security update addresses the vulnerability by modifying how affected Microsoft Internet Explorer handles requests involving UNC resources.
\n"},{"Ordinal":"20","Title":"Internet Explorer","Type":7,"Value":"Internet Explorer"}],"Ordinal":"13","ProductStatuses":[{"ProductID":["10555-10378","10336-9312","10336-9318","10486-10951","10486-10952","10486-11453","10486-11454","10486-10729","10486-10735","10486-10852","10486-10853","10486-10816","10486-10047","10486-10048","10486-10481","10486-10482","10486-10484","10486-10051","10486-10483","10486-11497","10486-11498"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338830"},"ProductID":["10555-10378"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4284855","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338830"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4339093"},"ProductID":["10555-10378","10336-9312","10336-9318","10486-10047","10486-10048","10486-10481","10486-10482","10486-10051","10486-10483"],"RestartRequired":{"Value":"Yes"},"SubType":"IE Cumulative","Supercedence":"4230450","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4339093"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338816"},"ProductID":["10555-10378"],"RestartRequired":{"Value":"Yes"},"SubType":"Preview Rollup","Supercedence":"4284855","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338816"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345425"},"ProductID":["10555-10378"],"RestartRequired":{"Value":"Yes"},"SubType":"Standalone","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345425"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338826"},"ProductID":["10486-10951","10486-10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284874","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338826"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345419"},"ProductID":["10486-10951","10486-10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284874","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345419"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338825"},"ProductID":["10486-11453","10486-11454"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284819","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338825"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345420"},"ProductID":["10486-11453","10486-11454"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284819","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345420"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338829"},"ProductID":["10486-10729","10486-10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284860","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338829"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345455"},"ProductID":["10486-10729","10486-10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284860","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345455"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338814"},"ProductID":["10486-10852","10486-10853","10486-10816"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284880","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338814"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345418"},"ProductID":["10486-10852","10486-10853","10486-10816"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284880","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345418"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338818"},"ProductID":["10486-10047","10486-10048","10486-10051"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4284826","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338818"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338821"},"ProductID":["10486-10047","10486-10048","10486-10051"],"RestartRequired":{"Value":"Yes"},"SubType":"Preview Rollup","Supercedence":"4284826","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338821"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345459"},"ProductID":["10486-10047","10486-10048","10486-10051"],"RestartRequired":{"Value":"Yes"},"SubType":"Standalone","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345459"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338815"},"ProductID":["10486-10481","10486-10482","10486-10484","10486-10483"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4284815","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338815"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338831"},"ProductID":["10486-10481","10486-10482","10486-10483"],"RestartRequired":{"Value":"Yes"},"SubType":"Preview Rollup","Supercedence":"4284815","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338831"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345424"},"ProductID":["10486-10481","10486-10482","10486-10483"],"RestartRequired":{"Value":"Yes"},"SubType":"Standalone","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345424"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338819"},"ProductID":["10486-11497","10486-11498"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284835","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338819"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345421"},"ProductID":["10486-11497","10486-11498"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284835","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345421"}],"RevisionHistory":[{"Date":"2018-07-10T07:00:00Z","Description":{"Value":"Information published.
\n"},"Number":"1.0"},{"Date":"2018-07-18T07:00:00Z","Description":{"Value":"To address a known issue in the security updates released on July 10, Microsoft is releasing Alternate Cumulative update packages for Windows 10, and Standalone and Preview Rollup packages for all other supported editions of Windows. These packages are available via Microsoft Update catalog, WSUS, or by manually searching Windows Update. Customers who are experiencing issues after installing the July Windows security updates should install the replacement packages as applicable. Note that the IE Cumulative updates are not affected. Please refer to the Affected Products table for the replacement package KB numbers. Customers who have successfully installed the security updates and who are not experiencing any issues do not need to take any action.
\n"},"Number":"2.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10555-10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10336-9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10336-9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10486-10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10486-10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10486-11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10486-11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10486-10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10486-10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10486-10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10486-10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10486-10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10486-10047"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10486-10048"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10486-10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10486-10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10486-10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10486-10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10486-10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10486-11497"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10486-11498"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Low"},"ProductID":["10555-10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10336-9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10336-9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Low"},"ProductID":["10486-10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10047"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10048"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Low"},"ProductID":["10486-10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Low"},"ProductID":["10486-10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-11497"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-11498"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely"},"Type":1}],"Title":{"Value":"Internet Explorer Security Feature Bypass Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Soroush Dalili of NCC Group"}],"URL":[""]}],"CVE":"CVE-2018-8172","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"A remote code execution vulnerability exists in Visual Studio software when the software does not check the source code of a file for an unbuilt project. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an attacker could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.
\nExploitation of the vulnerability requires that a user open a specially crafted file with an affected version of Visual Studio. In an email attack scenario, an attacker could exploit the vulnerability by sending a specially crafted project, or resource file, to the user and convince the user to open the file.
\nThe security update addresses the vulnerability by correcting how Visual Studio checks the source code of a file.
\n"},{"Ordinal":"20","Title":"Visual Studio","Type":7,"Value":"Visual Studio"}],"Ordinal":"14","ProductStatuses":[{"ProductID":["11557","11558","10098","10326","10566","10577","11505","11531","11546"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4342192"},"ProductID":["11557"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://my.visualstudio.com/Downloads?q=blend"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4342191"},"ProductID":["11558"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://my.visualstudio.com/Downloads?q=blend"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4336919"},"ProductID":["10098"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://aka.ms/vs/10/release/4336919"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4336946"},"ProductID":["10326"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://aka.ms/vs/11/release/4336946"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4336986"},"ProductID":["10566"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://aka.ms/vs/12/release/4336986"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4336999"},"ProductID":["10577"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://aka.ms/vs/14/release/4336999"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"ProductID":["11505","11531"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://my.visualstudio.com/Downloads?q=Visual Studio 2017"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4342193"},"ProductID":["11546"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://my.visualstudio.com/Downloads?q=blend"}],"RevisionHistory":[{"Date":"2018-07-10T07:00:00Z","Description":{"Value":"Information published.
\n"},"Number":"1.0"},{"Date":"2018-07-31T07:00:00Z","Description":{"Value":"Revised the Affected Products table to include Expression Blend 3 Service Pack 1 and Expression Blend 2 Service Pack 2 because they are also affected by this vulnerability. Microsoft recommends that customers running either of these versions of Expression Blend install the update to be fully protected from this vulnerability.
\n"},"Number":"2.0"},{"Date":"2018-12-11T08:00:00Z","Description":{"Value":"This CVE has been revised to announce a detection change to correct an offering issue for the Visual Studio update. This is a detection change only. There were no changes to the update files. Customers who have already successfully installed the update do not need to take any action.
\n"},"Number":"2.1"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11557"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11558"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10098"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10326"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10566"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10577"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11505"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11531"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11546"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11557"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11558"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10098"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10326"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10566"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10577"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11505"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11531"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11546"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely"},"Type":1}],"Title":{"Value":"Visual Studio Remote Code Execution Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Lasse Trolle Borup of Langkjaer Cyber Defence"}],"URL":[""]}],"CVE":"CVE-2018-8202","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"An elevation of privilege vulnerability exists in .NET Framework which could allow an attacker to elevate their privilege level.
\nTo exploit the vulnerability, an attacker would first have to access the local machine, and then run a malicious program.
\nThe update addresses the vulnerability by correcting how .NET Framework activates COM objects.
\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"After I installed the July 2018 updates for .NET Framework, applications fail to start or are not working correctly. What do I need to do to remedy this situation?
\nMicrosoft is aware of multiple customer reports of applications that fail to start or that do not run correctly. Please refer to the following Recommended Actions.
\nRecommended actions
\nCustomers who have not installed security updates released on July 10 for .NET: Test the updates released on July 10, and if no application errors are found, apply the updates to production.
\nCustomers who have successfully installed security updates released on July 10 for .NET and who are not experiencing any issues: No further action is required.
\nCustomers who have installed security updates released on July 10 for .NET and who are experiencing application errors:
\nRisk guidance:
\nWorkstations and Terminal servers are the primary target systems where an attacker could have User level access to exploit the vulnerability. In web-application server scenarios, unprivileged users will not typically have system login access. As such, the attack surface is diminished.
\nInformation published.
\n"},"Number":"1.0"},{"Date":"2018-07-19T07:00:00Z","Description":{"Value":"To address a known issue in the security updates released on July 10, Microsoft is releasing Alternate Cumulative update packages for all supported editions of Windows 10. These packages are available via Microsoft Update catalog, WSUS, or by manually searching Windows Update. Customers who are experiencing issues after installing the July Windows security updates should install the replacement packages as applicable. Note that the Monthly Rollup and Security Only updates for .NET Framework are not affected. Please refer to the Affected Products table for the replacement package KB numbers. Customers who have successfully installed the security updates and who are not experiencing any issues do not need to take any action.
\n"},"Number":"2.0"},{"Date":"2018-07-19T07:00:00Z","Description":{"Value":"Corrected Supersedence entries in the Affected Products table. This is an informational change only.
\n"},"Number":"2.1"},{"Date":"2018-07-31T07:00:00Z","Description":{"Value":"Microsoft is announcing the release of updates, available via the Microsoft Update catalog, to resolve known issues some customers experienced after installing the July 2018 security updates for .NET Framework. Microsoft recommends that customers who experienced application errors as described in KB4345913 (https://support.microsoft.com/en-us/help/4345913) install the applicable Standalone update for your system. Customers running Window 10 Version 1607 or Windows Server 2016 should install Cumulative update 4346877 to resolve application errors. See the Affected Products table for links to download and install the updates.
\n"},"Number":"4.0"},{"Date":"2018-08-15T07:00:00Z","Description":{"Value":"Microsoft is releasing the August Monthly Rollup, Security Only, and Security Updates to fully resolve known issues some customers experienced after installing the July security updates for .NET Framework. Customers who installed either the Standalone updates or Alternate Cumulative update should also install the August updates. See the Affected Products table for links to download and install the August updates.
\n"},"Number":"5.0"},{"Date":"2018-07-26T07:00:00Z","Description":{"Value":"Microsoft is aware of a known issue some customers experienced after installing the security updates for CVE-2018-8202 that were released on July 10. We are investigating this issue and will rerelease security updates for this CVE as soon as they are available. In the meantime,\nplease refer to the FAQ section of CVE-2018-8202 for recommended actions you can take prior to deploying these updates. Also see KB4345913 for further information, including descriptions of application errors that customers might experience and available workarounds.
\n"},"Number":"3.0"},{"Date":"2018-08-01T07:00:00Z","Description":{"Value":"Corrected Article and Download entries in the Affected Products table. This is an informational change only.
\n"},"Number":"4.1"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10728-9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10728-9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["9292-9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["9292-9311"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["9292-9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["9195-9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["9195-9311"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["9195-9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["2472-10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["2472-10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["2472-11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["2472-11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["2472-11466"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["2472-10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["2472-10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["2472-10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["2472-10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["2472-10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["2472-10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["2472-10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["2472-10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["2472-10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["2472-10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["2472-10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["2472-10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["9495-10047"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["9495-10048"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["9495-10050"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["9495-10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["9495-10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10636-10047"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10636-10048"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10636-10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10636-10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10636-10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10636-9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10636-9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10636-10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10636-10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10636-10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10636-10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10636-10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10636-10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11513-11497"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11513-11498"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11513-11499"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11518-10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11518-10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["2472-11497"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["2472-11498"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["2472-11499"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11529-10047"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11529-10048"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11529-10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11529-10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11529-10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11529-10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11529-10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11529-10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11529-10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11529-10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11529-10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11532-10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11532-10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11532-10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11532-10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11534-10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11534-10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11535-11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11535-11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11535-11466"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10728-9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10728-9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9292-9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9292-9311"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9292-9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9195-9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9195-9311"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9195-9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["2472-10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["2472-10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["2472-11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["2472-11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["2472-11466"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["2472-10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["2472-10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["2472-10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["2472-10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["2472-10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["2472-10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["2472-10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["2472-10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["2472-10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["2472-10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["2472-10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["2472-10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9495-10047"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9495-10048"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9495-10050"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9495-10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9495-10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10636-10047"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10636-10048"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10636-10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10636-10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10636-10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10636-9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10636-9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10636-10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10636-10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10636-10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10636-10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10636-10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10636-10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11513-11497"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11513-11498"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11513-11499"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11518-10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11518-10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["2472-11497"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["2472-11498"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["2472-11499"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11529-10047"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11529-10048"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11529-10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11529-10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11529-10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11529-10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11529-10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11529-10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11529-10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11529-10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11529-10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11532-10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11532-10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11532-10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11532-10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11534-10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11534-10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11535-11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11535-11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11535-11466"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely"},"Type":1}],"Title":{"Value":".NET Framework Elevation of Privilege Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Brandon Falk (@gamozolabs) of the Enterprise Team"}],"URL":[""]}],"CVE":"CVE-2018-8206","CVSSScoreSets":[{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11497"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11498"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11499"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10951"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10952"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11453"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11454"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10852"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10047"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10048"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10481"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10482"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10484"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9312"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10287"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9311"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9318"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9344"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10050"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10051"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10049"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10378"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10379"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10483"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10543"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11466"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"A denial of service vulnerability exists when Windows improperly handles File Transfer Protocol (FTP) connections. An attacker who successfully exploited the vulnerability could cause a target system to stop responding.
\nTo exploit the vulnerability, an unauthenticated attacker could send specially crafted packets to a Windows computer that is processing connections on TCP port 21. The vulnerability would not allow an attacker to execute code or to elevate user rights directly, but it could be used to cause a target system to stop responding.
\nThe security update addresses the vulnerability by correcting how Windows handles FTP connections.
\n"},{"Ordinal":"20","Title":"Microsoft Windows","Type":7,"Value":"Microsoft Windows"}],"Ordinal":"16","ProductStatuses":[{"ProductID":["11497","11498","11499","10951","10952","11453","11454","10729","10735","10852","10853","10816","10855","10047","10048","10481","10482","10484","9312","10287","9311","9318","9344","10050","10051","10049","10378","10379","10483","10543","11466"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338819"},"ProductID":["11497","11498","11499"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284835","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338819"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345421"},"ProductID":["11497","11498","11499"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284835","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345421"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338826"},"ProductID":["10951","10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284874","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338826"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345419"},"ProductID":["10951","10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284874","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345419"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338825"},"ProductID":["11453","11454","11466"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284819","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338825"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345420"},"ProductID":["11453","11454","11466"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284819","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345420"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338829"},"ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284860","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338829"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345455"},"ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284860","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345455"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338814"},"ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284880","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338814"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345418"},"ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284880","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345418"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338818"},"ProductID":["10047","10048","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4284826","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338818"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338823"},"ProductID":["10047","10048","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338823"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338821"},"ProductID":["10047","10048","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Preview Rollup","Supercedence":"4284826","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338821"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345459"},"ProductID":["10047","10048","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Standalone","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345459"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338815"},"ProductID":["10481","10482","10484","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4284815","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338815"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338824"},"ProductID":["10481","10482","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338824"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338831"},"ProductID":["10481","10482","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Preview Rollup","Supercedence":"4284815","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338831"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345424"},"ProductID":["10481","10482","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Standalone","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345424"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4293756"},"ProductID":["9312","10287","9311","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4293756"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338830"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4284855","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338830"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338820"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338820"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338816"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Preview Rollup","Supercedence":"4284855","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338816"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345425"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Standalone","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345425"}],"RevisionHistory":[{"Date":"2018-07-10T07:00:00Z","Description":{"Value":"Information published.
\n"},"Number":"1.0"},{"Date":"2018-07-19T07:00:00Z","Description":{"Value":"To address a known issue in the security updates released on July 10, Microsoft is releasing Alternate Cumulative update packages for Windows 10, and Standalone and Preview Rollup packages for all other supported editions of Windows. These packages are available via Microsoft Update catalog, WSUS, or by manually searching Windows Update. Customers who are experiencing issues after installing the July Windows security updates should install the replacement packages as applicable. Please refer to the Affected Products table for the replacement package KB numbers. Customers who have successfully installed the security updates and who are not experiencing any issues do not need to take any action.
\n"},"Number":"2.0"},{"Date":"2018-07-26T07:00:00Z","Description":{"Value":"Corrected vulnerability description. This is an informational change only.
\n"},"Number":"2.1"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11497"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11498"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11499"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10047"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10048"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10287"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["9311"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["9344"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10050"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11466"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11497"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11498"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11499"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10047"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10048"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10287"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9311"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9344"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10050"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11466"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:Permanent"},"Type":1}],"Title":{"Value":"Windows Firewall Denial of Service Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Matt Graeber of SpecterOps"}],"URL":[""]}],"CVE":"CVE-2018-8222","CVSSScoreSets":[{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10951"],"TemporalScore":4.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10952"],"TemporalScore":4.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11497"],"TemporalScore":4.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11498"],"TemporalScore":4.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11453"],"TemporalScore":4.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11454"],"TemporalScore":4.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11466"],"TemporalScore":4.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":4.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":4.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10852"],"TemporalScore":4.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":4.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":4.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":4.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11499"],"TemporalScore":4.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows PowerShell session. An attacker who successfully exploited this vulnerability could inject code into a trusted PowerShell process to bypass the Device Guard Code Integrity policy on the local machine.
\nTo exploit the vulnerability, an attacker would first have to access the local machine, and then inject malicious code into a script that is trusted by the Code Integrity policy. The injected code would then run with the same trust level as the script and bypass the Code Integrity policy.
\nThe update addresses the vulnerability by correcting how PowerShell exposes functions and processes user supplied code.
\n"},{"Ordinal":"20","Title":"Device Guard","Type":7,"Value":"Device Guard"}],"Ordinal":"17","ProductStatuses":[{"ProductID":["10951","10952","11497","11498","11453","11454","11466","10729","10735","10852","10853","10816","10855","11499"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338826"},"ProductID":["10951","10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284874","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338826"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345419"},"ProductID":["10951","10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284874","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345419"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338819"},"ProductID":["11497","11498","11499"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284835","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338819"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345421"},"ProductID":["11497","11498","11499"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284835","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345421"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338825"},"ProductID":["11453","11454","11466"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284819","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338825"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345420"},"ProductID":["11453","11454","11466"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284819","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345420"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338829"},"ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284860","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338829"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345455"},"ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284860","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345455"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338814"},"ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284880","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338814"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345418"},"ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284880","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345418"}],"RevisionHistory":[{"Date":"2018-07-10T07:00:00Z","Description":{"Value":"Information published.
\n"},"Number":"1.0"},{"Date":"2018-07-19T07:00:00Z","Description":{"Value":"To address a known issue in the security updates released on July 10, Microsoft is releasing Alternate Cumulative update packages for Windows 10, and Standalone and Preview Rollup packages for all other supported editions of Windows. These packages are available via Microsoft Update catalog, WSUS, or by manually searching Windows Update. Customers who are experiencing issues after installing the July Windows security updates should install the replacement packages as applicable. Please refer to the Affected Products table for the replacement package KB numbers. Customers who have successfully installed the security updates and who are not experiencing any issues do not need to take any action.
\n"},"Number":"2.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11497"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11498"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11466"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11499"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11497"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11498"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11466"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11499"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely"},"Type":1}],"Title":{"Value":"Device Guard Code Integrity Policy Security Feature Bypass Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"David Baptiste of ESIEA - CVO Lab"}],"URL":[""]}],"CVE":"CVE-2018-8232","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"A Tampering vulnerability exists when Microsoft Macro Assembler improperly validates code.
\nAn attacker could introduce code into an application, which modifies data in an unintended manner.
\nThe security updates addresses the vulnerability by ensuring that Microsoft Macro Assembler properly validates code logic.
\n"},{"Ordinal":"20","Title":"Visual Studio","Type":7,"Value":"Visual Studio"}],"Ordinal":"18","ProductStatuses":[{"ProductID":["11505","11531"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"ProductID":["11505","11531"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://my.visualstudio.com/Downloads?q=Visual Studio 2017"}],"RevisionHistory":[{"Date":"2018-07-10T07:00:00Z","Description":{"Value":"Information published.
\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Tampering"},"ProductID":["11505"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Tampering"},"ProductID":["11531"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["11505"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["11531"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No"},"Type":1}],"Title":{"Value":"Microsoft Macro Assembler Tampering Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Yuki Chen of Qihoo 360 Vulcan Team"}],"URL":[""]},{"Name":[{"Value":"Anonymous working with Trend Micro's Zero Day Initiative"}],"URL":[""]}],"CVE":"CVE-2018-8242","CVSSScoreSets":[{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10555-10378"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10336-9312"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10336-9318"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10951"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10952"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-11497"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-11498"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-11453"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-11454"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10729"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10735"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10852"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10853"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10816"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10047"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10048"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10481"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10482"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10484"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10051"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10483"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
\nIn a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Internet Explorer and then convince a user to view the website. An attacker could also embed an ActiveX control marked "safe for initialization" in an application or Microsoft Office document that hosts the IE rendering engine. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.
\nThe security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.
\n"},{"Ordinal":"20","Title":"Microsoft Scripting Engine","Type":7,"Value":"Microsoft Scripting Engine"}],"Ordinal":"19","ProductStatuses":[{"ProductID":["10555-10378","10336-9312","10336-9318","10486-10951","10486-10952","10486-11497","10486-11498","10486-11453","10486-11454","10486-10729","10486-10735","10486-10852","10486-10853","10486-10816","10486-10047","10486-10048","10486-10481","10486-10482","10486-10484","10486-10051","10486-10483"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338830"},"ProductID":["10555-10378"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4284855","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338830"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4339093"},"ProductID":["10555-10378","10336-9312","10336-9318","10486-10047","10486-10048","10486-10481","10486-10482","10486-10051","10486-10483"],"RestartRequired":{"Value":"Yes"},"SubType":"IE Cumulative","Supercedence":"4230450","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4339093"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338816"},"ProductID":["10555-10378"],"RestartRequired":{"Value":"Yes"},"SubType":"Preview Rollup","Supercedence":"4284855","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338816"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345425"},"ProductID":["10555-10378"],"RestartRequired":{"Value":"Yes"},"SubType":"Standalone","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345425"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338826"},"ProductID":["10486-10951","10486-10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284874","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338826"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345419"},"ProductID":["10486-10951","10486-10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284874","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345419"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338819"},"ProductID":["10486-11497","10486-11498"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284835","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338819"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345421"},"ProductID":["10486-11497","10486-11498"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284835","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345421"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338825"},"ProductID":["10486-11453","10486-11454"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284819","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338825"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345420"},"ProductID":["10486-11453","10486-11454"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284819","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345420"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338829"},"ProductID":["10486-10729","10486-10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284860","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338829"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345455"},"ProductID":["10486-10729","10486-10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284860","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345455"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338814"},"ProductID":["10486-10852","10486-10853","10486-10816"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284880","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338814"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345418"},"ProductID":["10486-10852","10486-10853","10486-10816"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284880","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345418"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338818"},"ProductID":["10486-10047","10486-10048","10486-10051"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4284826","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338818"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338821"},"ProductID":["10486-10047","10486-10048","10486-10051"],"RestartRequired":{"Value":"Yes"},"SubType":"Preview Rollup","Supercedence":"4284826","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338821"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345459"},"ProductID":["10486-10047","10486-10048","10486-10051"],"RestartRequired":{"Value":"Yes"},"SubType":"Standalone","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345459"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338815"},"ProductID":["10486-10481","10486-10482","10486-10484","10486-10483"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4284815","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338815"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338831"},"ProductID":["10486-10481","10486-10482","10486-10483"],"RestartRequired":{"Value":"Yes"},"SubType":"Preview Rollup","Supercedence":"4284815","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338831"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345424"},"ProductID":["10486-10481","10486-10482","10486-10483"],"RestartRequired":{"Value":"Yes"},"SubType":"Standalone","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345424"}],"RevisionHistory":[{"Date":"2018-07-10T07:00:00Z","Description":{"Value":"Information published.
\n"},"Number":"1.0"},{"Date":"2018-07-19T07:00:00Z","Description":{"Value":"To address a known issue in the security updates released on July 10, Microsoft is releasing Alternate Cumulative update packages for Windows 10, and Standalone and Preview Rollup packages for all other supported editions of Windows. These packages are available via Microsoft Update catalog, WSUS, or by manually searching Windows Update. Customers who are experiencing issues after installing the July Windows security updates should install the replacement packages as applicable. Note that the IE Cumulative updates are not affected. Please refer to the Affected Products table for the replacement package KB numbers. Customers who have successfully installed the security updates and who are not experiencing any issues do not need to take any action.
\n"},"Number":"2.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10555-10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10336-9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10336-9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-11497"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-11498"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10047"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10048"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10555-10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10336-9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10336-9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-11497"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-11498"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10486-10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10047"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10048"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10486-10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10486-10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely"},"Type":1}],"Title":{"Value":"Scripting Engine Memory Corruption Vulnerability"}},{"Acknowledgments":[],"CVE":"CVE-2018-8356","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"A security feature bypass vulnerability exists when Microsoft .NET Framework components do not correctly validate certificates.
\nAn attacker could present expired certificates when challenged.
\nThe security update addresses the vulnerability by ensuring that .NET Framework components correctly validate certificates.
\n"},{"Ordinal":"20","Title":".NET Framework","Type":7,"Value":".NET Framework"}],"Ordinal":"20","ProductStatuses":[{"ProductID":["11463","11464","11465","11460","11461","11462","11550","11551","11545","11513-11497","11513-11498","11513-11499","11518-10729","11518-10735","2472-11497","2472-11498","2472-11499","10728-9312","10728-9318","9195-9312","9195-9311","9195-9318","2472-10951","2472-10952","2472-11453","2472-11454","2472-11466","2472-10729","2472-10735","2472-10852","2472-10853","2472-10816","2472-10855","2472-10481","2472-10482","2472-10378","2472-10379","2472-10483","2472-10543","9495-10047","9495-10048","9495-10050","9495-10051","9495-10049","10636-10047","10636-10048","10636-10481","10636-10482","10636-10484","10636-9312","10636-9318","10636-10051","10636-10049","10636-10378","10636-10379","10636-10483","10636-10543","11529-10047","11529-10048","11529-10481","11529-10482","11529-10484","11529-10051","11529-10049","11529-10378","11529-10379","11529-10483","11529-10543","11532-10852","11532-10853","11532-10816","11532-10855"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Commit"},"ProductID":["11463","11464","11465","11460","11461","11462"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://github.com/dotnet/announcements/issues/73"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"ProductID":["11550","11551","11545"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":"https://github.com/PowerShell/Announcements/issues/6"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338819"},"ProductID":["11513-11497","11513-11498","11513-11499","2472-11497","2472-11498","2472-11499"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284835","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338819"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345421"},"ProductID":["11513-11497","11513-11498","11513-11499","2472-11497","2472-11498","2472-11499"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284835","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345421"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338829"},"ProductID":["11518-10729","11518-10735","2472-10729","2472-10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284860","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338829"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345455"},"ProductID":["11518-10729","11518-10735","2472-10729","2472-10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284860","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345455"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338420"},"ProductID":["10728-9312","10728-9318","11529-10047","11529-10048","11529-10051","11529-10049"],"RestartRequired":{"Value":"Maybe"},"SubType":"Monthly Rollup","Supercedence":"4099636, 4291501","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4340559"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338606"},"ProductID":["10728-9312","10728-9318","11529-10047","11529-10048","11529-10051","11529-10049"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4340007"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338422"},"ProductID":["9195-9312","9195-9311","9195-9318"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4099636, 4291501","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4340559"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338611"},"ProductID":["9195-9312","9195-9311","9195-9318"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4340007"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338826"},"ProductID":["2472-10951","2472-10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284874","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338826"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345419"},"ProductID":["2472-10951","2472-10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284874","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345419"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338825"},"ProductID":["2472-11453","2472-11454","2472-11466"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284819","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338825"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345420"},"ProductID":["2472-11453","2472-11454","2472-11466"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284819","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345420"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338814"},"ProductID":["2472-10852","2472-10853","2472-10816","2472-10855","11532-10852","11532-10853","11532-10816","11532-10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284880","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338814"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345418"},"ProductID":["2472-10852","2472-10853","2472-10816","2472-10855","11532-10852","11532-10853","11532-10816","11532-10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284880","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345418"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338424"},"ProductID":["2472-10481","2472-10482","2472-10483","2472-10543"],"RestartRequired":{"Value":"Maybe"},"SubType":"Monthly Rollup","Supercedence":"4099635; 4291497","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4340558"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338613"},"ProductID":["2472-10481","2472-10482","2472-10483","2472-10543"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Only","Supercedence":"2898868","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4340006"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338421"},"ProductID":["2472-10378","2472-10379"],"RestartRequired":{"Value":"Maybe"},"SubType":"Monthly Rollup","Supercedence":"4099634; 4291495","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4340557"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338610"},"ProductID":["2472-10378","2472-10379"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4340005"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338423"},"ProductID":["9495-10047","9495-10048","9495-10050","9495-10051","9495-10049"],"RestartRequired":{"Value":"Maybe"},"SubType":"Monthly Rollup","Supercedence":"4099633, 4291493","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4340556"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338612"},"ProductID":["9495-10047","9495-10048","9495-10050","9495-10051","9495-10049"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4340004"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338417"},"ProductID":["10636-10047","10636-10048","10636-9312","10636-9318","10636-10051","10636-10049"],"RestartRequired":{"Value":"Maybe"},"SubType":"Monthly Rollup","Supercedence":"4099633, 4291493","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4340556"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338602"},"ProductID":["10636-10047","10636-10048","10636-9312","10636-9318","10636-10051","10636-10049"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4340004"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338415"},"ProductID":["10636-10481","10636-10482","10636-10484","10636-10483","10636-10543"],"RestartRequired":{"Value":"Maybe"},"SubType":"Monthly Rollup","Supercedence":"4099635; 4291497","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4340558"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338600"},"ProductID":["10636-10481","10636-10482","10636-10483","10636-10543"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Only","Supercedence":"2898871","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4340006"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338416"},"ProductID":["10636-10378","10636-10379"],"RestartRequired":{"Value":"Maybe"},"SubType":"Monthly Rollup","Supercedence":"4099634; 4291495","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4340557"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338601"},"ProductID":["10636-10378","10636-10379"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4340005"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338419"},"ProductID":["11529-10481","11529-10482","11529-10484","11529-10483","11529-10543"],"RestartRequired":{"Value":"Maybe"},"SubType":"Monthly Rollup","Supercedence":"4099635; 4291497","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4340558"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338605"},"ProductID":["11529-10481","11529-10482","11529-10483","11529-10543"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4340006"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338418"},"ProductID":["11529-10378","11529-10379"],"RestartRequired":{"Value":"Maybe"},"SubType":"Monthly Rollup","Supercedence":"4099634, 4291495","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4340557"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338604"},"ProductID":["11529-10378","11529-10379"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4340005"}],"RevisionHistory":[{"Date":"2018-07-10T07:00:00Z","Description":{"Value":"Information published.
\n"},"Number":"1.0"},{"Date":"2018-07-19T07:00:00Z","Description":{"Value":"To address a known issue in the security updates released on July 10, Microsoft is releasing Alternate Cumulative update packages for all supported editions of Windows 10. These packages are available via Microsoft Update catalog, WSUS, or by manually searching Windows Update. Customers who are experiencing issues after installing the July Windows security updates should install the replacement packages as applicable. Note that the Monthly Rollup and Security Only updates for .NET Framework are not affected. Please refer to the Affected Products table for the replacement package KB numbers. Customers who have successfully installed the security updates and who are not experiencing any issues do not need to take any action.
\n"},"Number":"2.0"},{"Date":"2018-07-19T07:00:00Z","Description":{"Value":"Corrected Supersedence entries in the Affected Products table. This is an informational change only.
\n"},"Number":"2.1"},{"Date":"2018-07-19T07:00:00Z","Description":{"Value":"Revised the Affected Products table to include PowerShell Core 6.0 and PowerShell Core 6.1 because these products are affected by CVE-2018-9356. See https://github.com/PowerShell/Announcements/issues/6 for more information.
\n"},"Number":"3.0"},{"Date":"2018-08-01T07:00:00Z","Description":{"Value":"Corrected Article and Download entries in the Affected Products table. This is an informational change only.
\n"},"Number":"3.1"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11463"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11464"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11465"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11460"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11461"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11462"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11550"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11551"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11545"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11513-11497"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11513-11498"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11513-11499"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11518-10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11518-10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["2472-11497"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["2472-11498"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["2472-11499"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10728-9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10728-9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["9195-9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["9195-9311"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["9195-9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["2472-10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["2472-10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["2472-11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["2472-11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["2472-11466"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["2472-10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["2472-10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["2472-10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["2472-10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["2472-10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["2472-10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["2472-10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["2472-10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["2472-10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["2472-10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["2472-10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["2472-10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["9495-10047"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["9495-10048"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["9495-10050"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["9495-10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["9495-10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10636-10047"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10636-10048"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10636-10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10636-10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10636-10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10636-9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10636-9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10636-10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10636-10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10636-10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10636-10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10636-10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10636-10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11529-10047"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11529-10048"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11529-10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11529-10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11529-10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11529-10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11529-10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11529-10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11529-10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11529-10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11529-10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11532-10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11532-10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11532-10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11532-10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11463"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11464"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11465"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11460"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11461"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11462"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11550"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11551"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11545"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11513-11497"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11513-11498"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11513-11499"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11518-10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11518-10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["2472-11497"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["2472-11498"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["2472-11499"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10728-9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10728-9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9195-9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9195-9311"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9195-9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["2472-10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["2472-10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["2472-11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["2472-11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["2472-11466"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["2472-10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["2472-10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["2472-10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["2472-10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["2472-10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["2472-10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["2472-10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["2472-10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["2472-10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["2472-10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["2472-10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["2472-10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9495-10047"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9495-10048"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9495-10050"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9495-10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9495-10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10636-10047"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10636-10048"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10636-10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10636-10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10636-10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10636-9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10636-9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10636-10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10636-10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10636-10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10636-10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10636-10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10636-10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11529-10047"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11529-10048"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11529-10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11529-10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11529-10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11529-10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11529-10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11529-10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11529-10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11529-10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11529-10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11532-10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11532-10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11532-10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11532-10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely;Older Software Release:Exploitation Unlikely"},"Type":1}],"Title":{"Value":".NET Framework Security Feature Bypass Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Soroush Dalili of NCC Group"}],"URL":[""]}],"CVE":"CVE-2018-8260","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.
\nAn attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an attacker could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.
\nExploitation of the vulnerability requires that a user open a specially crafted file with an affected version of .NET Framework. In an email attack scenario, an attacker could exploit the vulnerability by sending the specially crafted file to the user and convincing the user to open the file.
\nThe security update addresses the vulnerability by correcting how .NET Framework checks the source markup of a file.
\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"Are there any other .NET updates pertaining to this CVE that I should be aware of?
\nYes. To further address this vulnerability, for Windows 10 version 1709 and earlier, customers running .NET Framework 4.7.2 will receive an additional fix through Windows Update. Alternatively, you can download the additional fix via the .NET Framework 4.7.2 Web Installer by following this link: http://go.microsoft.com/fwlink/?LinkId=863262. Follow the instructions in the message box to download or save the update.
\n"},{"Ordinal":"20","Title":".NET Framework","Type":7,"Value":".NET Framework"}],"Ordinal":"21","ProductStatuses":[{"ProductID":["11545","11513-11497","11513-11498","11513-11499","11513-10951","11513-10952","11513-11453","11513-11454","11513-11466","11513-10852","11513-10853","11513-10816","11513-10855","11513-10047","11513-10048","11513-10481","11513-10482","11513-10484","11513-10051","11513-10049","11513-10378","11513-10379","11513-10483","11513-10543"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"ProductID":["11545"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://www.microsoft.com/net/download/thank-you/net472-developer-pack"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338819"},"ProductID":["11513-11497","11513-11498","11513-11499"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284835","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338819"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345421"},"ProductID":["11513-11497","11513-11498","11513-11499"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284835","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345421"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338826"},"ProductID":["11513-10951","11513-10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284874","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338826"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345419"},"ProductID":["11513-10951","11513-10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284874","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345419"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338825"},"ProductID":["11513-11453","11513-11454","11513-11466"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284819","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338825"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345420"},"ProductID":["11513-11453","11513-11454","11513-11466"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284819","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345420"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338814"},"ProductID":["11513-10852","11513-10853","11513-10816","11513-10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284880","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338814"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345418"},"ProductID":["11513-10852","11513-10853","11513-10816"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284880","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345418"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338420"},"ProductID":["11513-10047","11513-10048","11513-10051","11513-10049"],"RestartRequired":{"Value":"Maybe"},"SubType":"Monthly Rollup","Supercedence":"4099633, 4291493","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4340556"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338606"},"ProductID":["11513-10047","11513-10048","11513-10051","11513-10049"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4340004"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338419"},"ProductID":["11513-10481","11513-10482","11513-10484","11513-10483","11513-10543"],"RestartRequired":{"Value":"Maybe"},"SubType":"Monthly Rollup","Supercedence":"4099635; 4291497","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4340558"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338605"},"ProductID":["11513-10481","11513-10482","11513-10483","11513-10543"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4340006"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338418"},"ProductID":["11513-10378","11513-10379"],"RestartRequired":{"Value":"Maybe"},"SubType":"Monthly Rollup","Supercedence":"4099634, 4291495","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4340557"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338604"},"ProductID":["11513-10378","11513-10379"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4340005"}],"RevisionHistory":[{"Date":"2018-07-10T07:00:00Z","Description":{"Value":"Information published.
\n"},"Number":"1.0"},{"Date":"2018-07-19T07:00:00Z","Description":{"Value":"To address a known issue in the security updates released on July 10, Microsoft is releasing Alternate Cumulative update packages for all supported editions of Windows 10. These packages are available via Microsoft Update catalog, WSUS, or by manually searching Windows Update. Customers who are experiencing issues after installing the July Windows security updates should install the replacement packages as applicable. Note that the Monthly Rollup and Security Only updates for .NET Framework are not affected. Please refer to the Affected Products table for the replacement package KB numbers. Customers who have successfully installed the security updates and who are not experiencing any issues do not need to take any action.
\n"},"Number":"2.0"},{"Date":"2018-07-19T07:00:00Z","Description":{"Value":"Corrected Supersedence entries in the Affected Products table. This is an informational change only.
\n"},"Number":"2.1"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11545"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11513-11497"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11513-11498"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11513-11499"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11513-10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11513-10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11513-11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11513-11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11513-11466"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11513-10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11513-10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11513-10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11513-10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11513-10047"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11513-10048"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11513-10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11513-10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11513-10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11513-10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11513-10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11513-10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11513-10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11513-10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11513-10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11545"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11513-11497"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11513-11498"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11513-11499"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11513-10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11513-10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11513-11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11513-11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11513-11466"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11513-10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11513-10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11513-10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11513-10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11513-10047"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11513-10048"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11513-10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11513-10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11513-10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11513-10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11513-10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11513-10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11513-10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11513-10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11513-10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely;Older Software Release:Exploitation Unlikely"},"Type":1}],"Title":{"Value":".NET Framework Remote Code Execution Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Omair working with KrashConsulting"}],"URL":[""]}],"CVE":"CVE-2018-8262","CVSSScoreSets":[{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11497"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11498"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory. The vulnerability could corrupt memory in such a way that enables an attacker to execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
\nAn attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft Edge, and then convince a user to view the website. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements by adding specially crafted content that could exploit the vulnerability. In all cases, however, an attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically by way of enticement in an email or Instant Messenger message, or by getting them to open an attachment sent through email.
\nThe security update addresses the vulnerability by modifying how Microsoft Edge handles objects in memory.
\n"},{"Ordinal":"20","Title":"Microsoft Edge","Type":7,"Value":"Microsoft Edge"}],"Ordinal":"22","ProductStatuses":[{"ProductID":["10724-11497","10724-11498"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338819"},"ProductID":["10724-11497","10724-11498"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284835","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338819"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345421"},"ProductID":["10724-11497","10724-11498"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284835","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345421"}],"RevisionHistory":[{"Date":"2018-07-10T07:00:00Z","Description":{"Value":"Information published.
\n"},"Number":"1.0"},{"Date":"2018-07-19T07:00:00Z","Description":{"Value":"To address a known issue in the security updates released on July 10, Microsoft is releasing Alternate Cumulative update packages for Windows 10, and Standalone and Preview Rollup packages for all other supported editions of Windows. These packages are available via Microsoft Update catalog, WSUS, or by manually searching Windows Update. Customers who are experiencing issues after installing the July Windows security updates should install the replacement packages as applicable. Please refer to the Affected Products table for the replacement package KB numbers. Customers who have successfully installed the security updates and who are not experiencing any issues do not need to take any action.
\n"},"Number":"2.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11497"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11498"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11497"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11498"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A"},"Type":1}],"Title":{"Value":"Microsoft Edge Memory Corruption Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Akayn working with Trend Micro's Zero Day Initiative"}],"URL":[""]},{"Name":[{"Value":"Jonathan Downing (@0xKondara)"}],"URL":[""]},{"Name":[{"Value":"Jihui Lu of Tencent KeenLab"}],"URL":[""]}],"CVE":"CVE-2018-8274","CVSSScoreSets":[{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10951"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10952"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11497"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11498"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11453"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11454"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory. The vulnerability could corrupt memory in such a way that enables an attacker to execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
\nAn attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft Edge, and then convince a user to view the website. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements by adding specially crafted content that could exploit the vulnerability. In all cases, however, an attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically by way of enticement in an email or Instant Messenger message, or by getting them to open an attachment sent through email.
\nThe security update addresses the vulnerability by modifying how Microsoft Edge handles objects in memory.
\n"},{"Ordinal":"20","Title":"Microsoft Edge","Type":7,"Value":"Microsoft Edge"}],"Ordinal":"23","ProductStatuses":[{"ProductID":["10724-10951","10724-10952","10724-11497","10724-11498","10724-11453","10724-11454"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338826"},"ProductID":["10724-10951","10724-10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284874","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338826"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345419"},"ProductID":["10724-10951","10724-10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284874","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345419"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338819"},"ProductID":["10724-11497","10724-11498"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284835","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338819"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345421"},"ProductID":["10724-11497","10724-11498"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284835","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345421"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338825"},"ProductID":["10724-11453","10724-11454"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284819","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338825"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345420"},"ProductID":["10724-11453","10724-11454"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284819","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345420"}],"RevisionHistory":[{"Date":"2018-07-10T07:00:00Z","Description":{"Value":"Information published.
\n"},"Number":"1.0"},{"Date":"2018-07-19T07:00:00Z","Description":{"Value":"To address a known issue in the security updates released on July 10, Microsoft is releasing Alternate Cumulative update packages for Windows 10, and Standalone and Preview Rollup packages for all other supported editions of Windows. These packages are available via Microsoft Update catalog, WSUS, or by manually searching Windows Update. Customers who are experiencing issues after installing the July Windows security updates should install the replacement packages as applicable. Please refer to the Affected Products table for the replacement package KB numbers. Customers who have successfully installed the security updates and who are not experiencing any issues do not need to take any action.
\n"},"Number":"2.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11497"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11498"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11497"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11498"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A;DOS:N/A"},"Type":1}],"Title":{"Value":"Microsoft Edge Memory Corruption Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Simon Zuckerbraun with Trend Micro's Zero Day Initiative"}],"URL":[""]}],"CVE":"CVE-2018-8275","CVSSScoreSets":[{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11447"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10951"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10952"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11497"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11498"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11453"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11454"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10852"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10853"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10816"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory. The vulnerability could corrupt memory in such a way that enables an attacker to execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
\nAn attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft Edge, and then convince a user to view the website. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements by adding specially crafted content that could exploit the vulnerability. In all cases, however, an attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically by way of enticement in an email or Instant Messenger message, or by getting them to open an attachment sent through email.
\nThe security update addresses the vulnerability by modifying how Microsoft Edge handles objects in memory.
\n"},{"Ordinal":"20","Title":"Microsoft Scripting Engine","Type":7,"Value":"Microsoft Scripting Engine"}],"Ordinal":"24","ProductStatuses":[{"ProductID":["11447","10724-10951","10724-10952","10724-11497","10724-11498","10724-11453","10724-11454","10724-10852","10724-10853","10724-10816"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Commit"},"ProductID":["11447"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://github.com/Microsoft/ChakraCore/releases/tag/v1.10.1"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338826"},"ProductID":["10724-10951","10724-10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284874","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338826"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345419"},"ProductID":["10724-10951","10724-10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284874","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345419"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338819"},"ProductID":["10724-11497","10724-11498"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284835","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338819"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345421"},"ProductID":["10724-11497","10724-11498"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284835","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345421"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338825"},"ProductID":["10724-11453","10724-11454"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284819","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338825"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345420"},"ProductID":["10724-11453","10724-11454"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284819","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345420"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338814"},"ProductID":["10724-10852","10724-10853","10724-10816"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284880","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338814"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345418"},"ProductID":["10724-10852","10724-10853","10724-10816"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284880","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345418"}],"RevisionHistory":[{"Date":"2018-07-10T07:00:00Z","Description":{"Value":"Information published.
\n"},"Number":"1.0"},{"Date":"2018-07-19T07:00:00Z","Description":{"Value":"To address a known issue in the security updates released on July 10, Microsoft is releasing Alternate Cumulative update packages for Windows 10, and Standalone and Preview Rollup packages for all other supported editions of Windows. These packages are available via Microsoft Update catalog, WSUS, or by manually searching Windows Update. Customers who are experiencing issues after installing the July Windows security updates should install the replacement packages as applicable. Please refer to the Affected Products table for the replacement package KB numbers. Customers who have successfully installed the security updates and who are not experiencing any issues do not need to take any action.
\n"},"Number":"2.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11447"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11497"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11498"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11447"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11497"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11498"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10724-10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A"},"Type":1}],"Title":{"Value":"Microsoft Edge Memory Corruption Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Kai Kang (@4B5F5F4B)"}],"URL":[""]}],"CVE":"CVE-2018-8276","CVSSScoreSets":[{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11447"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10951"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10952"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11497"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11498"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11453"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11454"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"A security feature bypass vulnerability exists in the Microsoft Chakra scripting engine that allows Control Flow Guard (CFG) to be bypassed. By itself, the CFG bypass vulnerability does not allow arbitrary code execution. However, an attacker could use the CFG bypass vulnerability in conjunction with another vulnerability, such as a remote code execution vulnerability, to run arbitrary code on a target system.
\nTo exploit the CFG bypass vulnerability, a user must be logged on to the Microsoft Chakra scripting engine and running it. The user would then need to browse to a malicious website.
\nThe security update addresses the CFG bypass vulnerability by helping to ensure that the Microsoft Chakra scripting engine properly handles accessing memory.
\n"},{"Ordinal":"20","Title":"Microsoft Scripting Engine","Type":7,"Value":"Microsoft Scripting Engine"}],"Ordinal":"25","ProductStatuses":[{"ProductID":["11447","10724-10951","10724-10952","10724-11497","10724-11498","10724-11453","10724-11454"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Commit"},"ProductID":["11447"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://github.com/Microsoft/ChakraCore/releases/tag/v1.10.1"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338826"},"ProductID":["10724-10951","10724-10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284874","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338826"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345419"},"ProductID":["10724-10951","10724-10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284874","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345419"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338819"},"ProductID":["10724-11497","10724-11498"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284835","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338819"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345421"},"ProductID":["10724-11497","10724-11498"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284835","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345421"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338825"},"ProductID":["10724-11453","10724-11454"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284819","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338825"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345420"},"ProductID":["10724-11453","10724-11454"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284819","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345420"}],"RevisionHistory":[{"Date":"2018-07-10T07:00:00Z","Description":{"Value":"Information published.
\n"},"Number":"1.0"},{"Date":"2018-07-19T07:00:00Z","Description":{"Value":"To address a known issue in the security updates released on July 10, Microsoft is releasing Alternate Cumulative update packages for Windows 10, and Standalone and Preview Rollup packages for all other supported editions of Windows. These packages are available via Microsoft Update catalog, WSUS, or by manually searching Windows Update. Customers who are experiencing issues after installing the July Windows security updates should install the replacement packages as applicable. Please refer to the Affected Products table for the replacement package KB numbers. Customers who have successfully installed the security updates and who are not experiencing any issues do not need to take any action.
\n"},"Number":"2.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11447"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10724-10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10724-10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10724-11497"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10724-11498"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10724-11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10724-11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11447"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-11497"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-11498"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:N/A"},"Type":1}],"Title":{"Value":"Scripting Engine Security Feature Bypass Vulnerability"}},{"Acknowledgments":[],"CVE":"CVE-2018-8278","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"A spoofing vulnerability exists when Microsoft Edge improperly handles specific HTML content. An attacker who successfully exploited this vulnerability could trick a user into believing that the user was on a legitimate website. The specially crafted website could either spoof content or serve as a pivot to chain an attack with other vulnerabilities in web services.
\nTo exploit the vulnerability, the user must either browse to a malicious website or be redirected to it. In an email attack scenario, an attacker could send an email message in an attempt to convince the user to click a link to a malicious site.
\nIn a web-based attack scenario, an attacker could host a specially crafted website designed to appear as a legitimate website to the user. However, the attacker would have no way to force the user to visit the specially crafted website. The attacker would have to convince the user to visit the specially crafted website, typically by way of enticement in an email or instant message.
\nThe security update addresses the vulnerability by correcting how Microsoft Edge handles specific HTML content.
\n"},{"Ordinal":"20","Title":"Microsoft Edge","Type":7,"Value":"Microsoft Edge"}],"Ordinal":"26","ProductStatuses":[{"ProductID":["10724-11497","10724-11498"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338819"},"ProductID":["10724-11497","10724-11498"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284835","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338819"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345421"},"ProductID":["10724-11497","10724-11498"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284835","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345421"}],"RevisionHistory":[{"Date":"2018-07-10T07:00:00Z","Description":{"Value":"Information published.
\n"},"Number":"1.0"},{"Date":"2018-07-19T07:00:00Z","Description":{"Value":"To address a known issue in the security updates released on July 10, Microsoft is releasing Alternate Cumulative update packages for Windows 10, and Standalone and Preview Rollup packages for all other supported editions of Windows. These packages are available via Microsoft Update catalog, WSUS, or by manually searching Windows Update. Customers who are experiencing issues after installing the July Windows security updates should install the replacement packages as applicable. Please refer to the Affected Products table for the replacement package KB numbers. Customers who have successfully installed the security updates and who are not experiencing any issues do not need to take any action.
\n"},"Number":"2.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["10724-11497"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["10724-11498"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-11497"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-11498"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A"},"Type":1}],"Title":{"Value":"Microsoft Edge Spoofing Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Lokihardt of Google Project Zero"}],"URL":[""]}],"CVE":"CVE-2018-8279","CVSSScoreSets":[{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11447"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10951"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10952"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11497"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11498"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11453"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11454"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory. The vulnerability could corrupt memory in such a way that enables an attacker to execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
\nAn attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft Edge, and then convince a user to view the website. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements by adding specially crafted content that could exploit the vulnerability. In all cases, however, an attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically by way of enticement in an email or Instant Messenger message, or by getting them to open an attachment sent through email.
\nThe security update addresses the vulnerability by modifying how Microsoft Edge handles objects in memory.
\n"},{"Ordinal":"20","Title":"Microsoft Scripting Engine","Type":7,"Value":"Microsoft Scripting Engine"}],"Ordinal":"27","ProductStatuses":[{"ProductID":["11447","10724-10951","10724-10952","10724-11497","10724-11498","10724-11453","10724-11454"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Commit"},"ProductID":["11447"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://github.com/Microsoft/ChakraCore/releases/tag/v1.10.1"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338826"},"ProductID":["10724-10951","10724-10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284874","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338826"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345419"},"ProductID":["10724-10951","10724-10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284874","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345419"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338819"},"ProductID":["10724-11497","10724-11498"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284835","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338819"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345421"},"ProductID":["10724-11497","10724-11498"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284835","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345421"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338825"},"ProductID":["10724-11453","10724-11454"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284819","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338825"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345420"},"ProductID":["10724-11453","10724-11454"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284819","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345420"}],"RevisionHistory":[{"Date":"2018-07-10T07:00:00Z","Description":{"Value":"Information published.
\n"},"Number":"1.0"},{"Date":"2018-07-19T07:00:00Z","Description":{"Value":"To address a known issue in the security updates released on July 10, Microsoft is releasing Alternate Cumulative update packages for Windows 10, and Standalone and Preview Rollup packages for all other supported editions of Windows. These packages are available via Microsoft Update catalog, WSUS, or by manually searching Windows Update. Customers who are experiencing issues after installing the July Windows security updates should install the replacement packages as applicable. Please refer to the Affected Products table for the replacement package KB numbers. Customers who have successfully installed the security updates and who are not experiencing any issues do not need to take any action.
\n"},"Number":"2.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11447"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11497"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11498"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11447"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11497"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11498"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A"},"Type":1}],"Title":{"Value":"Microsoft Edge Memory Corruption Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Johnathan Norman - WDG OS Security Team"}],"URL":[""]}],"CVE":"CVE-2018-8280","CVSSScoreSets":[{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11447"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10951"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10952"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11497"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11498"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11453"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11454"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10729"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10735"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10852"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10853"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10816"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based)L. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
\nIn a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft Edge (HTML-based) and then convince a user to view the website. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.
\nThe security update addresses the vulnerability by modifying how the Chakra scripting engine handles objects in memory.
\n"},{"Ordinal":"20","Title":"Microsoft Scripting Engine","Type":7,"Value":"Microsoft Scripting Engine"}],"Ordinal":"28","ProductStatuses":[{"ProductID":["11447","10724-10951","10724-10952","10724-11497","10724-11498","10724-11453","10724-11454","10724-10729","10724-10735","10724-10852","10724-10853","10724-10816"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Commit"},"ProductID":["11447"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://github.com/Microsoft/ChakraCore/releases/tag/v1.10.1"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338826"},"ProductID":["10724-10951","10724-10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284874","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338826"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345419"},"ProductID":["10724-10951","10724-10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284874","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345419"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338819"},"ProductID":["10724-11497","10724-11498"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284835","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338819"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345421"},"ProductID":["10724-11497","10724-11498"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284835","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345421"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338825"},"ProductID":["10724-11453","10724-11454"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284819","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338825"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345420"},"ProductID":["10724-11453","10724-11454"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284819","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345420"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338829"},"ProductID":["10724-10729","10724-10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284860","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338829"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345455"},"ProductID":["10724-10729","10724-10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284860","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345455"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338814"},"ProductID":["10724-10852","10724-10853","10724-10816"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284880","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338814"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345418"},"ProductID":["10724-10852","10724-10853","10724-10816"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284880","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345418"}],"RevisionHistory":[{"Date":"2018-07-10T07:00:00Z","Description":{"Value":"Information published.
\n"},"Number":"1.0"},{"Date":"2018-07-19T07:00:00Z","Description":{"Value":"To address a known issue in the security updates released on July 10, Microsoft is releasing Alternate Cumulative update packages for Windows 10, and Standalone and Preview Rollup packages for all other supported editions of Windows. These packages are available via Microsoft Update catalog, WSUS, or by manually searching Windows Update. Customers who are experiencing issues after installing the July Windows security updates should install the replacement packages as applicable. Please refer to the Affected Products table for the replacement package KB numbers. Customers who have successfully installed the security updates and who are not experiencing any issues do not need to take any action.
\n"},"Number":"2.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11447"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11497"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11498"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11447"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11497"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11498"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10724-10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A"},"Type":1}],"Title":{"Value":"Chakra Scripting Engine Memory Corruption Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Lin Wang of Beihang University"}],"URL":[""]}],"CVE":"CVE-2018-8281","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an attacker could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.
\nExploitation of the vulnerability requires that a user open a specially crafted file with an affected version of Microsoft Office. In an email attack scenario, an attacker could exploit the vulnerability by sending the specially crafted file to the user and convincing the user to open the file. In a web-based attack scenario, an attacker could host a website (or leverage a compromised website that accepts or hosts user-provided content) containing a specially crafted file designed to exploit the vulnerability. An attacker would have no way to force users to visit the website. Instead, an attacker would have to convince users to click a link, typically by way of an enticement in an email or instant message, and then convince them to open the specially crafted file.
\nThe security update addresses the vulnerability by correcting how Microsoft Office handles objects in memory.
\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"I am being offered this update for software that is not specifically indicated as being affected in the Affected Software and Vulnerability Severity Ratings table. Why am I being offered this update?
\nWhen updates address vulnerable code that exists in a component that is shared between multiple Microsoft Office products or shared between multiple versions of the same Microsoft Office product, the update is considered to be applicable to all supported products and versions that contain the vulnerable component.
\nFor example, when an update applies to Microsoft Office 2007 products, only Microsoft Office 2007 may be specifically listed in the Affected Software table. However, the update could apply to Microsoft Word 2007, Microsoft Excel 2007, Microsoft Visio 2007, Microsoft Compatibility Pack, Microsoft Excel Viewer, or any other Microsoft Office 2007 product that is not specifically listed in the Affected Software table. Furthermore, when an update applies to Microsoft Office 2010 products, only Microsoft Office 2010 may be specifically listed in the Affected Software table. However, the update could apply to Microsoft Word 2010, Microsoft Excel 2010, Microsoft Visio 2010, Microsoft Visio Viewer, or any other Microsoft Office 2010 product that is not specifically listed in the Affected Software table.
\nFor more information on this behavior and recommended actions, see Microsoft Knowledge Base Article 830335. For a list of Microsoft Office products that an update may apply to, refer to the Microsoft Knowledge Base Article associated with the specific update.
\nWhy are there separate updates for Office Compatibility Pack, Excel Viewer, PowerPoint Viewer, and Word Viewer?
\nThe updates for Microsoft Office Compatibility Pack and the Office Viewer applications are only supported, and will only install from Microsoft Update, if they are being run on Windows Embedded POSReady 2009. This is because these applications ship pre-installed in Windows Embedded POSReady 2009, which is still in support. For other platforms, these applications are no longer supported.
\n"},{"Ordinal":"20","Title":"Microsoft Office","Type":7,"Value":"Microsoft Office"}],"Ordinal":"29","ProductStatuses":[{"ProductID":["10734","10905","10906","4497","1160","256","10903"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"ProductID":["10734"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":"https://go.microsoft.com/fwlink/p/?linkid=831049"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Click to Run"},"ProductID":["10905","10906"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4011202"},"ProductID":["4497","256","10903"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"3213641","Type":2,"URL":"https://www.microsoft.com/downloads/details.aspx?familyid=1dd9c1fd-596f-4969-a7a5-1ad444cedb98"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4032214"},"ProductID":["1160"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://www.microsoft.com/downloads/details.aspx?familyid=9018a59d-ace2-4734-b446-17904039a5be"}],"RevisionHistory":[{"Date":"2018-07-10T07:00:00Z","Description":{"Value":"Information published.
\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10734"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10905"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10906"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["4497"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["1160"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["256"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10903"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10734"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10905"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10906"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["4497"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["1160"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["256"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10903"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely"},"Type":1}],"Title":{"Value":"Microsoft Office Remote Code Execution Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"hungtt28 of Viettel Cyber Security working with Trend Micro's Zero Day Initiative"}],"URL":[""]}],"CVE":"CVE-2018-8282","CVSSScoreSets":[{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10951"],"TemporalScore":8.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10952"],"TemporalScore":8.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11497"],"TemporalScore":8.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11498"],"TemporalScore":8.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11499"],"TemporalScore":8.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11453"],"TemporalScore":8.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11454"],"TemporalScore":8.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11466"],"TemporalScore":8.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":8.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":8.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10852"],"TemporalScore":8.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":8.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":8.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":8.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10047"],"TemporalScore":7.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10048"],"TemporalScore":8.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10481"],"TemporalScore":7.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10482"],"TemporalScore":7.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10484"],"TemporalScore":8.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9312"],"TemporalScore":7.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10287"],"TemporalScore":7.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9311"],"TemporalScore":7.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9318"],"TemporalScore":7.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9344"],"TemporalScore":7.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10050"],"TemporalScore":8.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10051"],"TemporalScore":8.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10049"],"TemporalScore":8.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10378"],"TemporalScore":8.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10379"],"TemporalScore":8.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10483"],"TemporalScore":8.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10543"],"TemporalScore":8.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
\nTo exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system.
\nThe update addresses this vulnerability by correcting how the Windows kernel-mode driver handles objects in memory.
\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"Why are there two different impacts in the Affected Products table?
\nAn attacker could potentially exploit this vulnerability to elevate privileges from a client-side application sandbox in earlier Microsoft operating systems. However, mitigation technologies in later Microsoft operating systems make this more difficult. For this reason, this vulnerability has two different impact ratings.
\n"},{"Ordinal":"20","Title":"Windows Kernel","Type":7,"Value":"Windows Kernel"}],"Ordinal":"30","ProductStatuses":[{"ProductID":["10951","10952","11497","11498","11499","11453","11454","11466","10729","10735","10852","10853","10816","10855","10047","10048","10481","10482","10484","9312","10287","9311","9318","9344","10050","10051","10049","10378","10379","10483","10543"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338826"},"ProductID":["10951","10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284874","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338826"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345419"},"ProductID":["10951","10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284874","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345419"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338819"},"ProductID":["11497","11498","11499"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284835","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338819"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345421"},"ProductID":["11497","11498","11499"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284835","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345421"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338825"},"ProductID":["11453","11454","11466"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284819","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338825"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345420"},"ProductID":["11453","11454","11466"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284819","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345420"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338829"},"ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284860","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338829"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345455"},"ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284860","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345455"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338814"},"ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284880","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338814"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345418"},"ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284880","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345418"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338818"},"ProductID":["10047","10048","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4284826","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338818"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338823"},"ProductID":["10047","10048","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338823"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338821"},"ProductID":["10047","10048","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Preview Rollup","Supercedence":"4284826","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338821"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345459"},"ProductID":["10047","10048","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Standalone","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345459"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338815"},"ProductID":["10481","10482","10484","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4284815","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338815"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338824"},"ProductID":["10481","10482","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338824"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338831"},"ProductID":["10481","10482","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Preview Rollup","Supercedence":"4284815","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338831"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345424"},"ProductID":["10481","10482","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Standalone","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345424"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4339854"},"ProductID":["9312","10287","9311","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4339854"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338830"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4284855","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338830"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338820"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338820"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338816"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Preview Rollup","Supercedence":"4284855","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338816"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345425"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Standalone","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345425"}],"RevisionHistory":[{"Date":"2018-07-10T07:00:00Z","Description":{"Value":"Information published.
\n"},"Number":"1.0"},{"Date":"2018-07-19T07:00:00Z","Description":{"Value":"To address a known issue in the security updates released on July 10, Microsoft is releasing Alternate Cumulative update packages for Windows 10, and Standalone and Preview Rollup packages for all other supported editions of Windows. These packages are available via Microsoft Update catalog, WSUS, or by manually searching Windows Update. Customers who are experiencing issues after installing the July Windows security updates should install the replacement packages as applicable. Please refer to the Affected Products table for the replacement package KB numbers. Customers who have successfully installed the security updates and who are not experiencing any issues do not need to take any action.
\n"},"Number":"2.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11497"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11498"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11499"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11466"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10047"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10048"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10287"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["9311"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["9344"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10050"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11497"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11498"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11499"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11466"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10047"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10048"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10287"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9311"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9344"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10050"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely;Older Software Release:Exploitation More Likely"},"Type":1}],"Title":{"Value":"Win32k Elevation of Privilege Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Yu Zhou of Ant-financial Light-Year Security Lab"}],"URL":[""]}],"CVE":"CVE-2018-8283","CVSSScoreSets":[{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11447"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user.
\nIf the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
\nThe security update addresses the vulnerability by modifying how the ChakraCore scripting engine handles objects in memory.
\n"},{"Ordinal":"20","Title":"Microsoft Scripting Engine","Type":7,"Value":"Microsoft Scripting Engine"}],"Ordinal":"31","ProductStatuses":[{"ProductID":["11447"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Commit"},"ProductID":["11447"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://github.com/Microsoft/ChakraCore/releases/tag/v1.10.1"}],"RevisionHistory":[{"Date":"2018-07-10T07:00:00Z","Description":{"Value":"Information published.
\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11447"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11447"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A"},"Type":1}],"Title":{"Value":"Scripting Engine Memory Corruption Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Soroush Dalili of NCC Group"}],"URL":[""]}],"CVE":"CVE-2018-8284","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly. An attacker who successfully exploited this vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.
\nTo exploit the vulnerability, an attacker would need to pass specific input to an application utilizing susceptible .Net methods.
\nThe security update addresses the vulnerability by correcting how the Microsoft .NET Framework validates input.
\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"Why does the Affected Products table include several Microsoft SharePoint products without any security updates?
\nCustomers running SharePoint Server or any of the SharePoint products listed in the Affected Products table and who are also running any affected versions of .NET Framework are affected by this vulnerability. To be protected, you need to install the security updates for the versions of .NET that you are running on your system.
\n"},{"Ordinal":"20","Title":".NET Framework","Type":7,"Value":".NET Framework"}],"Ordinal":"32","ProductStatuses":[{"ProductID":["10950","11099","10502","10614","10505","10612","10495","10607","11513-11497","11513-11498","11513-11499","11518-10729","11518-10735","10728-9312","10728-9318","9292-9312","9292-9311","9292-9318","9195-9312","9195-9311","9195-9318","2472-10951","2472-10952","2472-11497","2472-11498","2472-11499","2472-11453","2472-11454","2472-11466","2472-10729","2472-10735","2472-10852","2472-10853","2472-10816","2472-10855","2472-10481","2472-10482","2472-10378","2472-10379","2472-10483","2472-10543","9495-10047","9495-10048","9495-10050","9495-10051","9495-10049","10636-10047","10636-10048","10636-10481","10636-10482","10636-10484","10636-9312","10636-9318","10636-10051","10636-10049","10636-10378","10636-10379","10636-10483","10636-10543","11529-10047","11529-10048","11529-10481","11529-10482","11529-10484","11529-10051","11529-10049","11529-10378","11529-10379","11529-10483","11529-10543","11532-10852","11532-10853","11532-10816","11532-10855","11534-10951","11534-10952","11535-11453","11535-11454","11535-11466"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338819"},"ProductID":["11513-11497","11513-11498","11513-11499","2472-11497","2472-11498","2472-11499"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284835","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338819"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345421"},"ProductID":["11513-11497","11513-11498","11513-11499","2472-11497","2472-11498","2472-11499"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284835","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345421"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338829"},"ProductID":["11518-10729","11518-10735","2472-10729","2472-10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284860","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338829"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345455"},"ProductID":["11518-10729","11518-10735","2472-10729","2472-10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284860","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345455"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338420"},"ProductID":["10728-9312","10728-9318","11529-10047","11529-10048","11529-10051","11529-10049"],"RestartRequired":{"Value":"Maybe"},"SubType":"Monthly Rollup","Supercedence":"4099636, 4291501","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4340559"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338606"},"ProductID":["10728-9312","10728-9318","11529-10047","11529-10048","11529-10051","11529-10049"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4340007"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338422"},"ProductID":["9292-9312","9292-9311","9292-9318","9195-9312","9195-9311","9195-9318"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4099636, 4291501","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4340559"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338611"},"ProductID":["9292-9312","9292-9311","9292-9318","9195-9312","9195-9311","9195-9318"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4340007"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338826"},"ProductID":["2472-10951","2472-10952","11534-10951","11534-10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284874","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338826"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345419"},"ProductID":["2472-10951","2472-10952","11534-10951","11534-10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284874","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345419"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338825"},"ProductID":["2472-11453","2472-11454","2472-11466","11535-11453","11535-11454","11535-11466"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284819","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338825"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345420"},"ProductID":["2472-11453","2472-11454","2472-11466","11535-11453","11535-11454","11535-11466"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284819","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345420"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338814"},"ProductID":["2472-10852","2472-10853","2472-10816","2472-10855","11532-10852","11532-10853","11532-10816","11532-10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284880","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338814"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345418"},"ProductID":["2472-10852","2472-10853","2472-10816","2472-10855","11532-10852","11532-10853","11532-10816","11532-10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284880","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345418"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338424"},"ProductID":["2472-10481","2472-10482","2472-10483","2472-10543"],"RestartRequired":{"Value":"Maybe"},"SubType":"Monthly Rollup","Supercedence":"4099635; 4291497","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4340558"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338613"},"ProductID":["2472-10481","2472-10482","2472-10483","2472-10543"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Only","Supercedence":"2898868","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4340006"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338421"},"ProductID":["2472-10378","2472-10379"],"RestartRequired":{"Value":"Maybe"},"SubType":"Monthly Rollup","Supercedence":"4099634; 4291495","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4340557"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338610"},"ProductID":["2472-10378","2472-10379"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4340005"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338423"},"ProductID":["9495-10047","9495-10048","9495-10050","9495-10051","9495-10049"],"RestartRequired":{"Value":"Maybe"},"SubType":"Monthly Rollup","Supercedence":"4099633, 4291493","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4340556"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338612"},"ProductID":["9495-10047","9495-10048","9495-10050","9495-10051","9495-10049"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4340004"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338417"},"ProductID":["10636-10047","10636-10048","10636-9312","10636-9318","10636-10051","10636-10049"],"RestartRequired":{"Value":"Maybe"},"SubType":"Monthly Rollup","Supercedence":"4099633, 4291493","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4340556"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338602"},"ProductID":["10636-10047","10636-10048","10636-9312","10636-9318","10636-10051","10636-10049"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4340004"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338415"},"ProductID":["10636-10481","10636-10482","10636-10484","10636-10483","10636-10543"],"RestartRequired":{"Value":"Maybe"},"SubType":"Monthly Rollup","Supercedence":"4099635; 4291497","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4340558"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338600"},"ProductID":["10636-10481","10636-10482","10636-10483","10636-10543"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Only","Supercedence":"2898871","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4340006"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338416"},"ProductID":["10636-10378","10636-10379"],"RestartRequired":{"Value":"Maybe"},"SubType":"Monthly Rollup","Supercedence":"4099634; 4291495","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4340557"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338601"},"ProductID":["10636-10378","10636-10379"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4340005"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338419"},"ProductID":["11529-10481","11529-10482","11529-10484","11529-10483","11529-10543"],"RestartRequired":{"Value":"Maybe"},"SubType":"Monthly Rollup","Supercedence":"4099635; 4291497","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4340558"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338605"},"ProductID":["11529-10481","11529-10482","11529-10483","11529-10543"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4340006"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338418"},"ProductID":["11529-10378","11529-10379"],"RestartRequired":{"Value":"Maybe"},"SubType":"Monthly Rollup","Supercedence":"4099634, 4291495","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4340557"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338604"},"ProductID":["11529-10378","11529-10379"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4340005"}],"RevisionHistory":[{"Date":"2018-07-10T07:00:00Z","Description":{"Value":"Information published.
\n"},"Number":"1.0"},{"Date":"2018-07-19T07:00:00Z","Description":{"Value":"To address a known issue in the security updates released on July 10, Microsoft is releasing Alternate Cumulative update packages for all supported editions of Windows 10. These packages are available via Microsoft Update catalog, WSUS, or by manually searching Windows Update. Customers who are experiencing issues after installing the July Windows security updates should install the replacement packages as applicable. Note that the Monthly Rollup and Security Only updates for .NET Framework are not affected. Please refer to the Affected Products table for the replacement package KB numbers. Customers who have successfully installed the security updates and who are not experiencing any issues do not need to take any action.
\n"},"Number":"2.0"},{"Date":"2018-07-19T07:00:00Z","Description":{"Value":"Corrected Supersedence entries in the Affected Products table. This is an informational change only.
\n"},"Number":"2.1"},{"Date":"2018-08-14T07:00:00Z","Description":{"Value":"Updated the Affected Products to include affected versions of Microsoft SharePoint Server, Microsoft SharePoint Foundation, Microsoft SharePoint Enterprise Server, and Microsoft Project Server. Customers running any of the SharePoint products listed in the Affected Products table and who are also running any affected versions of .NET Framework need to install the security updates for the versions of .NET running on their system to be fully protected from this vulnerability.
\n"},"Number":"3.0"},{"Date":"2018-09-05T07:00:00Z","Description":{"Value":"In the Affected Products table, restored the severity and impact information for multiple affected products. This is an informational change only. No further action is required.
\n"},"Number":"3.1"},{"Date":"2018-08-01T07:00:00Z","Description":{"Value":"Corrected Article and Download entries in the Affected Products table. This is an informational change only.
\n"},"Number":"2.2"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10950"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11099"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10502"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10614"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10505"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10612"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10495"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10607"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11513-11497"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11513-11498"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11513-11499"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11518-10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11518-10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10728-9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10728-9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9292-9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9292-9311"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9292-9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9195-9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9195-9311"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9195-9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["2472-10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["2472-10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["2472-11497"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["2472-11498"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["2472-11499"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["2472-11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["2472-11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["2472-11466"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["2472-10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["2472-10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["2472-10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["2472-10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["2472-10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["2472-10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["2472-10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["2472-10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["2472-10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["2472-10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["2472-10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["2472-10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9495-10047"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9495-10048"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9495-10050"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9495-10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9495-10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10636-10047"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10636-10048"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10636-10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10636-10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10636-10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10636-9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10636-9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10636-10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10636-10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10636-10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10636-10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10636-10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10636-10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11529-10047"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11529-10048"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11529-10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11529-10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11529-10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11529-10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11529-10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11529-10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11529-10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11529-10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11529-10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11532-10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11532-10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11532-10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11532-10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11534-10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11534-10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11535-11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11535-11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11535-11466"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10950"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11099"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10502"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10614"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10505"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10612"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10495"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10607"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11513-11497"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11513-11498"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11513-11499"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11518-10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11518-10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10728-9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10728-9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9292-9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9292-9311"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9292-9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9195-9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9195-9311"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9195-9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["2472-10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["2472-10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["2472-11497"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["2472-11498"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["2472-11499"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["2472-11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["2472-11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["2472-11466"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["2472-10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["2472-10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["2472-10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["2472-10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["2472-10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["2472-10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["2472-10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["2472-10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["2472-10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["2472-10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["2472-10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["2472-10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9495-10047"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9495-10048"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9495-10050"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9495-10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9495-10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10636-10047"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10636-10048"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10636-10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10636-10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10636-10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10636-9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10636-9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10636-10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10636-10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10636-10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10636-10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10636-10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10636-10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11529-10047"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11529-10048"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11529-10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11529-10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11529-10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11529-10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11529-10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11529-10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11529-10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11529-10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11529-10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11532-10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11532-10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11532-10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11532-10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11534-10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11534-10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11535-11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11535-11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11535-11466"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely"},"Type":1}],"Title":{"Value":".NET Framework Remote Code Execution Injection Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Johnathan Norman - WDG OS Security Team"}],"URL":[""]}],"CVE":"CVE-2018-8286","CVSSScoreSets":[{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11447"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10951"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10952"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11497"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11498"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11453"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11454"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based)L. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
\nIn a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft Edge (HTML-based) and then convince a user to view the website. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.
\nThe security update addresses the vulnerability by modifying how the Chakra scripting engine handles objects in memory.
\n"},{"Ordinal":"20","Title":"Microsoft Scripting Engine","Type":7,"Value":"Microsoft Scripting Engine"}],"Ordinal":"33","ProductStatuses":[{"ProductID":["11447","10724-10951","10724-10952","10724-11497","10724-11498","10724-11453","10724-11454"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Commit"},"ProductID":["11447"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://github.com/Microsoft/ChakraCore/releases/tag/v1.10.1"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338826"},"ProductID":["10724-10951","10724-10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284874","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338826"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345419"},"ProductID":["10724-10951","10724-10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284874","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345419"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338819"},"ProductID":["10724-11497","10724-11498"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284835","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338819"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345421"},"ProductID":["10724-11497","10724-11498"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284835","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345421"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338825"},"ProductID":["10724-11453","10724-11454"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284819","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338825"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345420"},"ProductID":["10724-11453","10724-11454"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284819","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345420"}],"RevisionHistory":[{"Date":"2018-07-10T07:00:00Z","Description":{"Value":"Information published.
\n"},"Number":"1.0"},{"Date":"2018-07-19T07:00:00Z","Description":{"Value":"To address a known issue in the security updates released on July 10, Microsoft is releasing Alternate Cumulative update packages for Windows 10, and Standalone and Preview Rollup packages for all other supported editions of Windows. These packages are available via Microsoft Update catalog, WSUS, or by manually searching Windows Update. Customers who are experiencing issues after installing the July Windows security updates should install the replacement packages as applicable. Please refer to the Affected Products table for the replacement package KB numbers. Customers who have successfully installed the security updates and who are not experiencing any issues do not need to take any action.
\n"},"Number":"2.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11447"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11497"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11498"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11447"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11497"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11498"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A"},"Type":1}],"Title":{"Value":"Chakra Scripting Engine Memory Corruption Vulnerability"}},{"Acknowledgments":[],"CVE":"CVE-2018-8287","CVSSScoreSets":[{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11447"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10555-10378"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10951"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10952"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-11497"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-11498"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-11453"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-11454"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10729"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10735"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10852"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10853"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10816"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10047"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10048"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10481"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10482"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10484"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10051"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10483"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10951"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10952"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11497"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11498"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11453"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11454"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10729"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10735"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10852"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10853"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10816"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
\nIn a web-based attack scenario, an attacker could host a specially crafted website designed to exploit the vulnerability through a Microsoft browser and then convince a user to view the website. An attacker could also embed an ActiveX control marked "safe for initialization" in an application or Microsoft Office document that hosts the browser rendering engine. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.
\nThe security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.
\n"},{"Ordinal":"20","Title":"Microsoft Scripting Engine","Type":7,"Value":"Microsoft Scripting Engine"}],"Ordinal":"34","ProductStatuses":[{"ProductID":["11447","10555-10378","10486-10951","10486-10952","10486-11497","10486-11498","10486-11453","10486-11454","10486-10729","10486-10735","10486-10852","10486-10853","10486-10816","10486-10047","10486-10048","10486-10481","10486-10482","10486-10484","10486-10051","10486-10483","10724-10951","10724-10952","10724-11497","10724-11498","10724-11453","10724-11454","10724-10729","10724-10735","10724-10852","10724-10853","10724-10816"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Commit"},"ProductID":["11447"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://github.com/Microsoft/ChakraCore/releases/tag/v1.10.1"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338830"},"ProductID":["10555-10378"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4284855","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338830"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4339093"},"ProductID":["10555-10378","10486-10047","10486-10048","10486-10481","10486-10482","10486-10051","10486-10483"],"RestartRequired":{"Value":"Yes"},"SubType":"IE Cumulative","Supercedence":"4230450","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4339093"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338816"},"ProductID":["10555-10378"],"RestartRequired":{"Value":"Yes"},"SubType":"Preview Rollup","Supercedence":"4284855","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338816"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345425"},"ProductID":["10555-10378"],"RestartRequired":{"Value":"Yes"},"SubType":"Standalone","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345425"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338826"},"ProductID":["10486-10951","10486-10952","10724-10951","10724-10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284874","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338826"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345419"},"ProductID":["10486-10951","10486-10952","10724-10951","10724-10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284874","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345419"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338819"},"ProductID":["10486-11497","10486-11498","10724-11497","10724-11498"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284835","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338819"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345421"},"ProductID":["10486-11497","10486-11498","10724-11497","10724-11498"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284835","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345421"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338825"},"ProductID":["10486-11453","10486-11454","10724-11453","10724-11454"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284819","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338825"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345420"},"ProductID":["10486-11453","10486-11454","10724-11453","10724-11454"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284819","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345420"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338829"},"ProductID":["10486-10729","10486-10735","10724-10729","10724-10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284860","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338829"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345455"},"ProductID":["10486-10729","10486-10735","10724-10729","10724-10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284860","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345455"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338814"},"ProductID":["10486-10852","10486-10853","10486-10816","10724-10852","10724-10853","10724-10816"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284880","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338814"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345418"},"ProductID":["10486-10852","10486-10853","10486-10816","10724-10852","10724-10853","10724-10816"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284880","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345418"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338818"},"ProductID":["10486-10047","10486-10048","10486-10051"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4284826","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338818"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338821"},"ProductID":["10486-10047","10486-10048","10486-10051"],"RestartRequired":{"Value":"Yes"},"SubType":"Preview Rollup","Supercedence":"4284826","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338821"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345459"},"ProductID":["10486-10047","10486-10048","10486-10051"],"RestartRequired":{"Value":"Yes"},"SubType":"Standalone","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345459"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338815"},"ProductID":["10486-10481","10486-10482","10486-10484","10486-10483"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4284815","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338815"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338831"},"ProductID":["10486-10481","10486-10482","10486-10483"],"RestartRequired":{"Value":"Yes"},"SubType":"Preview Rollup","Supercedence":"4284815","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338831"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345424"},"ProductID":["10486-10481","10486-10482","10486-10483"],"RestartRequired":{"Value":"Yes"},"SubType":"Standalone","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345424"}],"RevisionHistory":[{"Date":"2018-07-10T07:00:00Z","Description":{"Value":"Information published.
\n"},"Number":"1.0"},{"Date":"2018-07-19T07:00:00Z","Description":{"Value":"To address a known issue in the security updates released on July 10, Microsoft is releasing Alternate Cumulative update packages for Windows 10, and Standalone and Preview Rollup packages for all other supported editions of Windows. These packages are available via Microsoft Update catalog, WSUS, or by manually searching Windows Update. Customers who are experiencing issues after installing the July Windows security updates should install the replacement packages as applicable. Note that the IE Cumulative updates are not affected. Please refer to the Affected Products table for the replacement package KB numbers. Customers who have successfully installed the security updates and who are not experiencing any issues do not need to take any action.
\n"},"Number":"2.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11447"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10555-10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-11497"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-11498"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10047"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10048"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11497"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11498"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11447"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Low"},"ProductID":["10555-10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-11497"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-11498"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Low"},"ProductID":["10486-10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10047"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10048"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Low"},"ProductID":["10486-10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Low"},"ProductID":["10486-10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-11497"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-11498"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Low"},"ProductID":["10724-10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely"},"Type":1}],"Title":{"Value":"Scripting Engine Memory Corruption Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Lokihardt of Google Project Zero"}],"URL":[""]}],"CVE":"CVE-2018-8288","CVSSScoreSets":[{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11447"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10951"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10952"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-11497"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-11498"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-11453"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-11454"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10729"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10735"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10852"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10853"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10816"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10047"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10048"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10481"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10482"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10484"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10051"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10483"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10951"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10952"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11497"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11498"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11453"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11454"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10729"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10735"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10852"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10853"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10816"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
\nIn a web-based attack scenario, an attacker could host a specially crafted website designed to exploit the vulnerability through a Microsoft browser and then convince a user to view the website. An attacker could also embed an ActiveX control marked "safe for initialization" in an application or Microsoft Office document that hosts the browser rendering engine. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.
\nThe security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.
\n"},{"Ordinal":"20","Title":"Microsoft Scripting Engine","Type":7,"Value":"Microsoft Scripting Engine"}],"Ordinal":"35","ProductStatuses":[{"ProductID":["11447","10486-10951","10486-10952","10486-11497","10486-11498","10486-11453","10486-11454","10486-10729","10486-10735","10486-10852","10486-10853","10486-10816","10486-10047","10486-10048","10486-10481","10486-10482","10486-10484","10486-10051","10486-10483","10724-10951","10724-10952","10724-11497","10724-11498","10724-11453","10724-11454","10724-10729","10724-10735","10724-10852","10724-10853","10724-10816"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Commit"},"ProductID":["11447"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://github.com/Microsoft/ChakraCore/releases/tag/v1.10.1"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338826"},"ProductID":["10486-10951","10486-10952","10724-10951","10724-10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284874","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338826"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345419"},"ProductID":["10486-10951","10486-10952","10724-10951","10724-10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284874","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345419"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338819"},"ProductID":["10486-11497","10486-11498","10724-11497","10724-11498"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284835","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338819"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345421"},"ProductID":["10486-11497","10486-11498","10724-11497","10724-11498"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284835","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345421"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338825"},"ProductID":["10486-11453","10486-11454","10724-11453","10724-11454"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284819","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338825"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345420"},"ProductID":["10486-11453","10486-11454","10724-11453","10724-11454"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284819","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345420"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338829"},"ProductID":["10486-10729","10486-10735","10724-10729","10724-10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284860","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338829"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345455"},"ProductID":["10486-10729","10486-10735","10724-10729","10724-10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284860","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345455"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338814"},"ProductID":["10486-10852","10486-10853","10486-10816","10724-10852","10724-10853","10724-10816"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284880","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338814"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345418"},"ProductID":["10486-10852","10486-10853","10486-10816","10724-10852","10724-10853","10724-10816"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284880","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345418"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338818"},"ProductID":["10486-10047","10486-10048","10486-10051"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4284826","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338818"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4339093"},"ProductID":["10486-10047","10486-10048","10486-10481","10486-10482","10486-10051","10486-10483"],"RestartRequired":{"Value":"Yes"},"SubType":"IE Cumulative","Supercedence":"4230450","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4339093"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338821"},"ProductID":["10486-10047","10486-10048","10486-10051"],"RestartRequired":{"Value":"Yes"},"SubType":"Preview Rollup","Supercedence":"4284826","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338821"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345459"},"ProductID":["10486-10047","10486-10048","10486-10051"],"RestartRequired":{"Value":"Yes"},"SubType":"Standalone","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345459"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338815"},"ProductID":["10486-10481","10486-10482","10486-10484","10486-10483"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4284815","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338815"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338831"},"ProductID":["10486-10481","10486-10482","10486-10483"],"RestartRequired":{"Value":"Yes"},"SubType":"Preview Rollup","Supercedence":"4284815","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338831"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345424"},"ProductID":["10486-10481","10486-10482","10486-10483"],"RestartRequired":{"Value":"Yes"},"SubType":"Standalone","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345424"}],"RevisionHistory":[{"Date":"2018-07-10T07:00:00Z","Description":{"Value":"Information published.
\n"},"Number":"1.0"},{"Date":"2018-07-19T07:00:00Z","Description":{"Value":"To address a known issue in the security updates released on July 10, Microsoft is releasing Alternate Cumulative update packages for Windows 10, and Standalone and Preview Rollup packages for all other supported editions of Windows. These packages are available via Microsoft Update catalog, WSUS, or by manually searching Windows Update. Customers who are experiencing issues after installing the July Windows security updates should install the replacement packages as applicable. Note that the IE Cumulative updates are not affected. Please refer to the Affected Products table for the replacement package KB numbers. Customers who have successfully installed the security updates and who are not experiencing any issues do not need to take any action.
\n"},"Number":"2.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11447"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-11497"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-11498"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10047"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10048"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11497"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11498"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11447"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-11497"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-11498"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10486-10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10047"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10048"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10486-10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10486-10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11497"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11498"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10724-10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A"},"Type":1}],"Title":{"Value":"Scripting Engine Memory Corruption Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Jihui Lu of Tencent KeenLab"}],"URL":[""]},{"Name":[{"Value":"Marcin Towalski (@mtowalski1)"}],"URL":[""]}],"CVE":"CVE-2018-8289","CVSSScoreSets":[{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11497"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11498"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"An information disclosure vulnerability exists when Microsoft Edge based on Edge HTML improperly handles objects in memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.
\nTo exploit the vulnerability, in a web-based attack scenario, an attacker could host a website in an attempt to exploit the vulnerability. In addition, compromised websites and websites that accept or host user-provided content could contain specially crafted content that could exploit the vulnerability. However, in all cases an attacker would have no way to force a user to view the attacker-controlled content. Instead, an attacker would have to convince a user to take action. For example, an attacker could trick a user into clicking a link that takes the user to the attacker's site.
\nThe update addresses the vulnerability by modifying how Microsoft Edge based on Edge HTML handles objects in memory.
\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"What type of information could be disclosed by this vulnerability?
\nThe type of information that could be disclosed if an attacker successfully exploited this vulnerability is uninitialized memory.
\n"},{"Ordinal":"20","Title":"Microsoft Edge","Type":7,"Value":"Microsoft Edge"}],"Ordinal":"36","ProductStatuses":[{"ProductID":["10724-11497","10724-11498"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338819"},"ProductID":["10724-11497","10724-11498"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284835","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338819"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345421"},"ProductID":["10724-11497","10724-11498"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284835","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345421"}],"RevisionHistory":[{"Date":"2018-07-10T07:00:00Z","Description":{"Value":"Information published.
\n"},"Number":"1.0"},{"Date":"2018-07-19T07:00:00Z","Description":{"Value":"To address a known issue in the security updates released on July 10, Microsoft is releasing Alternate Cumulative update packages for Windows 10, and Standalone and Preview Rollup packages for all other supported editions of Windows. These packages are available via Microsoft Update catalog, WSUS, or by manually searching Windows Update. Customers who are experiencing issues after installing the July Windows security updates should install the replacement packages as applicable. Please refer to the Affected Products table for the replacement package KB numbers. Customers who have successfully installed the security updates and who are not experiencing any issues do not need to take any action.
\n"},"Number":"2.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10724-11497"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10724-11498"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-11497"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-11498"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A"},"Type":1}],"Title":{"Value":"Microsoft Edge based on Edge HTML Information Disclosure Vulnerability"}},{"Acknowledgments":[],"CVE":"CVE-2018-8290","CVSSScoreSets":[{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11447"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10951"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10952"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11497"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11498"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11453"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11454"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10729"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10735"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10852"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10853"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10816"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based)L. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
\nIn a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft Edge (HTML-based) and then convince a user to view the website. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.
\nThe security update addresses the vulnerability by modifying how the Chakra scripting engine handles objects in memory.
\n"},{"Ordinal":"20","Title":"Microsoft Scripting Engine","Type":7,"Value":"Microsoft Scripting Engine"}],"Ordinal":"37","ProductStatuses":[{"ProductID":["11447","10724-10951","10724-10952","10724-11497","10724-11498","10724-11453","10724-11454","10724-10729","10724-10735","10724-10852","10724-10853","10724-10816"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Commit"},"ProductID":["11447"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://github.com/Microsoft/ChakraCore/releases/tag/v1.10.1"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338826"},"ProductID":["10724-10951","10724-10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284874","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338826"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345419"},"ProductID":["10724-10951","10724-10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284874","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345419"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338819"},"ProductID":["10724-11497","10724-11498"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284835","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338819"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345421"},"ProductID":["10724-11497","10724-11498"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284835","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345421"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338825"},"ProductID":["10724-11453","10724-11454"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284819","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338825"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345420"},"ProductID":["10724-11453","10724-11454"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284819","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345420"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338829"},"ProductID":["10724-10729","10724-10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284860","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338829"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345455"},"ProductID":["10724-10729","10724-10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284860","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345455"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338814"},"ProductID":["10724-10852","10724-10853","10724-10816"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284880","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338814"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345418"},"ProductID":["10724-10852","10724-10853","10724-10816"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284880","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345418"}],"RevisionHistory":[{"Date":"2018-07-10T07:00:00Z","Description":{"Value":"Information published.
\n"},"Number":"1.0"},{"Date":"2018-07-19T07:00:00Z","Description":{"Value":"To address a known issue in the security updates released on July 10, Microsoft is releasing Alternate Cumulative update packages for Windows 10, and Standalone and Preview Rollup packages for all other supported editions of Windows. These packages are available via Microsoft Update catalog, WSUS, or by manually searching Windows Update. Customers who are experiencing issues after installing the July Windows security updates should install the replacement packages as applicable. Please refer to the Affected Products table for the replacement package KB numbers. Customers who have successfully installed the security updates and who are not experiencing any issues do not need to take any action.
\n"},"Number":"2.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11447"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11497"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11498"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11447"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11497"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11498"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10724-10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A"},"Type":1}],"Title":{"Value":"Chakra Scripting Engine Memory Corruption Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Lokihardt of Google Project Zero"}],"URL":[""]}],"CVE":"CVE-2018-8291","CVSSScoreSets":[{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11447"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10951"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10952"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11497"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11498"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11453"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11454"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10729"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10735"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10852"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10853"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10816"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10951"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10952"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-11497"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-11498"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-11453"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-11454"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10729"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10735"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10852"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10853"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10816"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10047"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10048"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10481"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10482"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10484"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10051"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10483"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
\nIn a web-based attack scenario, an attacker could host a specially crafted website designed to exploit the vulnerability through a Microsoft browser and then convince a user to view the website. An attacker could also embed an ActiveX control marked "safe for initialization" in an application or Microsoft Office document that hosts the browser rendering engine. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.
\nThe security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.
\n"},{"Ordinal":"20","Title":"Microsoft Scripting Engine","Type":7,"Value":"Microsoft Scripting Engine"}],"Ordinal":"38","ProductStatuses":[{"ProductID":["11447","10724-10951","10724-10952","10724-11497","10724-11498","10724-11453","10724-11454","10724-10729","10724-10735","10724-10852","10724-10853","10724-10816","10486-10951","10486-10952","10486-11497","10486-11498","10486-11453","10486-11454","10486-10729","10486-10735","10486-10852","10486-10853","10486-10816","10486-10047","10486-10048","10486-10481","10486-10482","10486-10484","10486-10051","10486-10483"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Commit"},"ProductID":["11447"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://github.com/Microsoft/ChakraCore/releases/tag/v1.10.1"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338826"},"ProductID":["10724-10951","10724-10952","10486-10951","10486-10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284874","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338826"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345419"},"ProductID":["10724-10951","10724-10952","10486-10951","10486-10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284874","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345419"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338819"},"ProductID":["10724-11497","10724-11498","10486-11497","10486-11498"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284835","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338819"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345421"},"ProductID":["10724-11497","10724-11498","10486-11497","10486-11498"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284835","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345421"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338825"},"ProductID":["10724-11453","10724-11454","10486-11453","10486-11454"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284819","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338825"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345420"},"ProductID":["10724-11453","10724-11454","10486-11453","10486-11454"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284819","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345420"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338829"},"ProductID":["10724-10729","10724-10735","10486-10729","10486-10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284860","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338829"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345455"},"ProductID":["10724-10729","10724-10735","10486-10729","10486-10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284860","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345455"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338814"},"ProductID":["10724-10852","10724-10853","10724-10816","10486-10852","10486-10853","10486-10816"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284880","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338814"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345418"},"ProductID":["10724-10852","10724-10853","10724-10816","10486-10852","10486-10853","10486-10816"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284880","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345418"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338818"},"ProductID":["10486-10047","10486-10048","10486-10051"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4284826","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338818"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4339093"},"ProductID":["10486-10047","10486-10048","10486-10481","10486-10482","10486-10051","10486-10483"],"RestartRequired":{"Value":"Yes"},"SubType":"IE Cumulative","Supercedence":"4230450","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4339093"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338821"},"ProductID":["10486-10047","10486-10048","10486-10051"],"RestartRequired":{"Value":"Yes"},"SubType":"Preview Rollup","Supercedence":"4284826","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338821"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345459"},"ProductID":["10486-10047","10486-10048","10486-10051"],"RestartRequired":{"Value":"Yes"},"SubType":"Standalone","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345459"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338815"},"ProductID":["10486-10481","10486-10482","10486-10484","10486-10483"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4284815","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338815"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338831"},"ProductID":["10486-10481","10486-10482","10486-10483"],"RestartRequired":{"Value":"Yes"},"SubType":"Preview Rollup","Supercedence":"4284815","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338831"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345424"},"ProductID":["10486-10481","10486-10482","10486-10483"],"RestartRequired":{"Value":"Yes"},"SubType":"Standalone","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345424"}],"RevisionHistory":[{"Date":"2018-07-10T07:00:00Z","Description":{"Value":"Information published.
\n"},"Number":"1.0"},{"Date":"2018-07-19T07:00:00Z","Description":{"Value":"To address a known issue in the security updates released on July 10, Microsoft is releasing Alternate Cumulative update packages for Windows 10, and Standalone and Preview Rollup packages for all other supported editions of Windows. These packages are available via Microsoft Update catalog, WSUS, or by manually searching Windows Update. Customers who are experiencing issues after installing the July Windows security updates should install the replacement packages as applicable. Note that the IE Cumulative updates are not affected. Please refer to the Affected Products table for the replacement package KB numbers. Customers who have successfully installed the security updates and who are not experiencing any issues do not need to take any action.
\n"},"Number":"2.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11447"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11497"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11498"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-11497"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-11498"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10047"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10048"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11447"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11497"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11498"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10724-10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-11497"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-11498"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10486-10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10047"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10048"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10486-10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10486-10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A"},"Type":1}],"Title":{"Value":"Scripting Engine Memory Corruption Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Pavel Avgustinov and Nick Rolfe of Semmle and LGTM.com"}],"URL":[""]}],"CVE":"CVE-2018-8294","CVSSScoreSets":[{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11447"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11497"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11498"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based)L. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
\nIn a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft Edge (HTML-based) and then convince a user to view the website. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.
\nThe security update addresses the vulnerability by modifying how the Chakra scripting engine handles objects in memory.
\n"},{"Ordinal":"20","Title":"Microsoft Scripting Engine","Type":7,"Value":"Microsoft Scripting Engine"}],"Ordinal":"39","ProductStatuses":[{"ProductID":["11447","10724-11497","10724-11498"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Commit"},"ProductID":["11447"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://github.com/Microsoft/ChakraCore/releases/tag/v1.10.1"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338819"},"ProductID":["10724-11497","10724-11498"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284835","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338819"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345421"},"ProductID":["10724-11497","10724-11498"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284835","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345421"}],"RevisionHistory":[{"Date":"2018-07-10T07:00:00Z","Description":{"Value":"Information published.
\n"},"Number":"1.0"},{"Date":"2018-07-19T07:00:00Z","Description":{"Value":"To address a known issue in the security updates released on July 10, Microsoft is releasing Alternate Cumulative update packages for Windows 10, and Standalone and Preview Rollup packages for all other supported editions of Windows. These packages are available via Microsoft Update catalog, WSUS, or by manually searching Windows Update. Customers who are experiencing issues after installing the July Windows security updates should install the replacement packages as applicable. Please refer to the Affected Products table for the replacement package KB numbers. Customers who have successfully installed the security updates and who are not experiencing any issues do not need to take any action.
\n"},"Number":"2.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11447"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11497"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11498"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11447"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11497"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11498"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A"},"Type":1}],"Title":{"Value":"Chakra Scripting Engine Memory Corruption Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Anonymous working with iDefense Labs"}],"URL":[""]}],"CVE":"CVE-2018-8296","CVSSScoreSets":[{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10951"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10952"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-11497"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-11498"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-11453"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-11454"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10729"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10735"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10852"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10853"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10816"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10047"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10048"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10481"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10482"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10484"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10051"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10483"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
\nIn a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Internet Explorer and then convince a user to view the website. An attacker could also embed an ActiveX control marked "safe for initialization" in an application or Microsoft Office document that hosts the IE rendering engine. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.
\nThe security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.
\n"},{"Ordinal":"20","Title":"Microsoft Scripting Engine","Type":7,"Value":"Microsoft Scripting Engine"}],"Ordinal":"40","ProductStatuses":[{"ProductID":["10486-10951","10486-10952","10486-11497","10486-11498","10486-11453","10486-11454","10486-10729","10486-10735","10486-10852","10486-10853","10486-10816","10486-10047","10486-10048","10486-10481","10486-10482","10486-10484","10486-10051","10486-10483"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338826"},"ProductID":["10486-10951","10486-10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284874","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338826"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345419"},"ProductID":["10486-10951","10486-10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284874","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345419"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338819"},"ProductID":["10486-11497","10486-11498"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284835","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338819"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345421"},"ProductID":["10486-11497","10486-11498"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284835","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345421"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338825"},"ProductID":["10486-11453","10486-11454"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284819","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338825"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345420"},"ProductID":["10486-11453","10486-11454"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284819","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345420"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338829"},"ProductID":["10486-10729","10486-10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284860","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338829"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345455"},"ProductID":["10486-10729","10486-10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284860","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345455"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338814"},"ProductID":["10486-10852","10486-10853","10486-10816"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284880","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338814"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345418"},"ProductID":["10486-10852","10486-10853","10486-10816"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284880","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345418"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338818"},"ProductID":["10486-10047","10486-10048","10486-10051"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4284826","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338818"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4339093"},"ProductID":["10486-10047","10486-10048","10486-10481","10486-10482","10486-10051","10486-10483"],"RestartRequired":{"Value":"Yes"},"SubType":"IE Cumulative","Supercedence":"4230450","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4339093"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338821"},"ProductID":["10486-10047","10486-10048","10486-10051"],"RestartRequired":{"Value":"Yes"},"SubType":"Preview Rollup","Supercedence":"4284826","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338821"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345459"},"ProductID":["10486-10047","10486-10048","10486-10051"],"RestartRequired":{"Value":"Yes"},"SubType":"Standalone","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345459"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338815"},"ProductID":["10486-10481","10486-10482","10486-10484","10486-10483"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4284815","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338815"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338831"},"ProductID":["10486-10481","10486-10482","10486-10483"],"RestartRequired":{"Value":"Yes"},"SubType":"Preview Rollup","Supercedence":"4284815","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338831"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345424"},"ProductID":["10486-10481","10486-10482","10486-10483"],"RestartRequired":{"Value":"Yes"},"SubType":"Standalone","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345424"}],"RevisionHistory":[{"Date":"2018-07-10T07:00:00Z","Description":{"Value":"Information published.
\n"},"Number":"1.0"},{"Date":"2018-07-19T07:00:00Z","Description":{"Value":"To address a known issue in the security updates released on July 10, Microsoft is releasing Alternate Cumulative update packages for Windows 10, and Standalone and Preview Rollup packages for all other supported editions of Windows. These packages are available via Microsoft Update catalog, WSUS, or by manually searching Windows Update. Customers who are experiencing issues after installing the July Windows security updates should install the replacement packages as applicable. Note that the IE Cumulative updates are not affected. Please refer to the Affected Products table for the replacement package KB numbers. Customers who have successfully installed the security updates and who are not experiencing any issues do not need to take any action.
\n"},"Number":"2.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-11497"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-11498"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10047"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10048"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-11497"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-11498"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10486-10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10047"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10048"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10486-10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10486-10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely"},"Type":1}],"Title":{"Value":"Scripting Engine Memory Corruption Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Marcin Towalski (@mtowalski1)"}],"URL":[""]},{"Name":[{"Value":"Liu Long of Qihoo 360 Vulcan Team"}],"URL":[""]}],"CVE":"CVE-2018-8297","CVSSScoreSets":[{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11497"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11498"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11453"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11454"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"An information disclosure vulnerability exists when Microsoft Edge based on Edge HTML improperly handles objects in memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.
\nTo exploit the vulnerability, in a web-based attack scenario, an attacker could host a website in an attempt to exploit the vulnerability. In addition, compromised websites and websites that accept or host user-provided content could contain specially crafted content that could exploit the vulnerability. However, in all cases an attacker would have no way to force a user to view the attacker-controlled content. Instead, an attacker would have to convince a user to take action. For example, an attacker could trick a user into clicking a link that takes the user to the attacker's site.
\nThe update addresses the vulnerability by modifying how Microsoft Edge based on Edge HTML handles objects in memory.
\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"What type of information could be disclosed by this vulnerability?
\nThe type of information that could be disclosed if an attacker successfully exploited this vulnerability is uninitialized memory.
\n"},{"Ordinal":"20","Title":"Microsoft Edge","Type":7,"Value":"Microsoft Edge"}],"Ordinal":"41","ProductStatuses":[{"ProductID":["10724-11497","10724-11498","10724-11453","10724-11454"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338819"},"ProductID":["10724-11497","10724-11498"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284835","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338819"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345421"},"ProductID":["10724-11497","10724-11498"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284835","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345421"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338825"},"ProductID":["10724-11453","10724-11454"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284819","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338825"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345420"},"ProductID":["10724-11453","10724-11454"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284819","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345420"}],"RevisionHistory":[{"Date":"2018-07-10T07:00:00Z","Description":{"Value":"Information published.
\n"},"Number":"1.0"},{"Date":"2018-07-19T07:00:00Z","Description":{"Value":"To address a known issue in the security updates released on July 10, Microsoft is releasing Alternate Cumulative update packages for Windows 10, and Standalone and Preview Rollup packages for all other supported editions of Windows. These packages are available via Microsoft Update catalog, WSUS, or by manually searching Windows Update. Customers who are experiencing issues after installing the July Windows security updates should install the replacement packages as applicable. Please refer to the Affected Products table for the replacement package KB numbers. Customers who have successfully installed the security updates and who are not experiencing any issues do not need to take any action.
\n"},"Number":"2.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10724-11497"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10724-11498"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10724-11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10724-11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-11497"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-11498"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A"},"Type":1}],"Title":{"Value":"Microsoft Edge based on Edge HTML Information Disclosure Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Lokihardt of Google Project Zero"}],"URL":[""]}],"CVE":"CVE-2018-8298","CVSSScoreSets":[{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11447"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user.
\nIf the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
\nThe security update addresses the vulnerability by modifying how the ChakraCore scripting engine handles objects in memory.
\n"},{"Ordinal":"20","Title":"Microsoft Scripting Engine","Type":7,"Value":"Microsoft Scripting Engine"}],"Ordinal":"42","ProductStatuses":[{"ProductID":["11447"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Commit"},"ProductID":["11447"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://github.com/Microsoft/ChakraCore/releases/tag/v1.10.1"}],"RevisionHistory":[{"Date":"2018-07-10T07:00:00Z","Description":{"Value":"Information published.
\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11447"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11447"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A"},"Type":1}],"Title":{"Value":"Scripting Engine Memory Corruption Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Alexandru Pitis of Microsoft Corporation"}],"URL":[""]}],"CVE":"CVE-2018-8301","CVSSScoreSets":[{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11497"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11498"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11453"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11454"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory. The vulnerability could corrupt memory in such a way that enables an attacker to execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
\nAn attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft Edge, and then convince a user to view the website. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements by adding specially crafted content that could exploit the vulnerability. In all cases, however, an attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically by way of enticement in an email or Instant Messenger message, or by getting them to open an attachment sent through email.
\nThe security update addresses the vulnerability by modifying how Microsoft Edge handles objects in memory.
\n"},{"Ordinal":"20","Title":"Microsoft Edge","Type":7,"Value":"Microsoft Edge"}],"Ordinal":"43","ProductStatuses":[{"ProductID":["10724-11497","10724-11498","10724-11453","10724-11454"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338819"},"ProductID":["10724-11497","10724-11498"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284835","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338819"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345421"},"ProductID":["10724-11497","10724-11498"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284835","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345421"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338825"},"ProductID":["10724-11453","10724-11454"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284819","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338825"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345420"},"ProductID":["10724-11453","10724-11454"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284819","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345420"}],"RevisionHistory":[{"Date":"2018-07-10T07:00:00Z","Description":{"Value":"Information published.
\n"},"Number":"1.0"},{"Date":"2018-07-19T07:00:00Z","Description":{"Value":"To address a known issue in the security updates released on July 10, Microsoft is releasing Alternate Cumulative update packages for Windows 10, and Standalone and Preview Rollup packages for all other supported editions of Windows. These packages are available via Microsoft Update catalog, WSUS, or by manually searching Windows Update. Customers who are experiencing issues after installing the July Windows security updates should install the replacement packages as applicable. Please refer to the Affected Products table for the replacement package KB numbers. Customers who have successfully installed the security updates and who are not experiencing any issues do not need to take any action.
\n"},"Number":"2.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11497"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11498"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11497"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11498"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A"},"Type":1}],"Title":{"Value":"Microsoft Edge Memory Corruption Vulnerability"}},{"Acknowledgments":[],"CVE":"CVE-2018-8313","CVSSScoreSets":[{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10951"],"TemporalScore":7.1,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:T/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10952"],"TemporalScore":7.1,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:T/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11497"],"TemporalScore":7.1,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:T/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11498"],"TemporalScore":7.1,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:T/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11499"],"TemporalScore":7.1,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:T/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11453"],"TemporalScore":7.1,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:T/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11454"],"TemporalScore":7.1,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:T/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":7.1,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:T/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":7.1,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:T/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10852"],"TemporalScore":7.1,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:T/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":7.1,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:T/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":7.1,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:T/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":7.1,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:T/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10481"],"TemporalScore":7.1,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:T/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10482"],"TemporalScore":7.1,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:T/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10484"],"TemporalScore":7.1,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:T/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10378"],"TemporalScore":7.1,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:T/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10379"],"TemporalScore":7.1,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:T/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10483"],"TemporalScore":7.1,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:T/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10543"],"TemporalScore":7.1,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:T/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11466"],"TemporalScore":7.1,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:T/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"An elevation of privilege vulnerability exists in the way that the Windows Kernel API enforces permissions. An attacker who successfully exploited the vulnerability could impersonate processes, interject cross-process communication, or interrupt system functionality.
\nTo exploit the vulnerability, a locally authenticated attacker could run a specially crafted application.
\nThe security update addresses the vulnerability by helping to ensure that the Windows Kernel API properly enforces permissions.
\n"},{"Ordinal":"20","Title":"Microsoft Windows","Type":7,"Value":"Microsoft Windows"}],"Ordinal":"44","ProductStatuses":[{"ProductID":["10951","10952","11497","11498","11499","11453","11454","10729","10735","10852","10853","10816","10855","10481","10482","10484","10378","10379","10483","10543","11466"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338826"},"ProductID":["10951","10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284874","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338826"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345419"},"ProductID":["10951","10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284874","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345419"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338819"},"ProductID":["11497","11498","11499"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284835","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338819"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345421"},"ProductID":["11497","11498","11499"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284835","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345421"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338825"},"ProductID":["11453","11454","11466"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284819","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338825"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345420"},"ProductID":["11453","11454","11466"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284819","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345420"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338829"},"ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284860","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338829"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345455"},"ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284860","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345455"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338814"},"ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284880","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338814"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345418"},"ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284880","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345418"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338815"},"ProductID":["10481","10482","10484","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4284815","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338815"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338824"},"ProductID":["10481","10482","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338824"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338831"},"ProductID":["10481","10482","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Preview Rollup","Supercedence":"4284815","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338831"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345424"},"ProductID":["10481","10482","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Standalone","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345424"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338830"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4284855","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338830"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338820"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338820"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338816"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Preview Rollup","Supercedence":"4284855","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338816"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345425"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Standalone","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345425"}],"RevisionHistory":[{"Date":"2018-07-10T07:00:00Z","Description":{"Value":"Information published.
\n"},"Number":"1.0"},{"Date":"2018-07-19T07:00:00Z","Description":{"Value":"To address a known issue in the security updates released on July 10, Microsoft is releasing Alternate Cumulative update packages for Windows 10, and Standalone and Preview Rollup packages for all other supported editions of Windows. These packages are available via Microsoft Update catalog, WSUS, or by manually searching Windows Update. Customers who are experiencing issues after installing the July Windows security updates should install the replacement packages as applicable. Please refer to the Affected Products table for the replacement package KB numbers. Customers who have successfully installed the security updates and who are not experiencing any issues do not need to take any action.
\n"},"Number":"2.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11497"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11498"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11499"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11466"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11497"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11498"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11499"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11466"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:Yes;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely"},"Type":1}],"Title":{"Value":"Windows Elevation of Privilege Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Jonathan Burns of Ionic Security\nColin McRae of Ionic Security\nRyan Speers of Ionic Security"}],"URL":[""]}],"CVE":"CVE-2018-8319","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"A Security Feature Bypass vulnerability exists in the MSR JavaScript Cryptography Library that is caused by multiple bugs in the library’s Elliptic Curve Cryptography (ECC) implementation.
\nAn attacker could potentially abuse these bugs to learn information about a server’s private ECC key (a key leakage attack) or craft an invalid ECDSA signature that nevertheless passes as valid.
\nThe security update addresses the vulnerability by fixing the bugs disclosed in the ECC implementation. In addition, an internal review resulted in other improvements to prevent rare failures in ECDH and ECDSA when using the NUMS curves.
\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"The vulnerable version of the MSR Crypto JavaScript Security library is 1.4. The version with the security update is 1.4.1.
\nThere are two possible steps required:
\nInformation published.
\n"},"Number":"1.0"},{"Date":"2018-07-16T07:00:00Z","Description":{"Value":"Information updated to announce the release of MSR JavaScript Cryptography Library version 1.4.1.
\n"},"Number":"2.0"},{"Date":"2018-07-11T07:00:00Z","Description":{"Value":"Added an FAQ regarding the availability of the update.
\n"},"Number":"1.1"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11539"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11539"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely"},"Type":1}],"Title":{"Value":"MSR JavaScript Cryptography Library Security Feature Bypass Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint server.
\nThe attacker who successfully exploited the vulnerability could then perform cross-site scripting attacks on affected systems and run script in the security context of the current user. These attacks could allow the attacker to read content that the attacker is not authorized to read, use the victim's identity to take actions on the SharePoint site on behalf of the user, such as change permissions and delete content, and inject malicious content in the browser of the user.
\nThe security update addresses the vulnerability by helping to ensure that SharePoint Server properly sanitizes web requests.
\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"After installing the updates for Microsoft SharePoint, are there any further steps I need to take?
\nYes. After installing the updates for any version of SharePoint, customers need to run psconfig.exe. See Why we recommend / require to run the Configuration Wizard also for Security fixes.
\n"},{"Ordinal":"20","Title":"Microsoft Office","Type":7,"Value":"Microsoft Office"}],"Ordinal":"46","ProductStatuses":[{"ProductID":["10950","11099"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4022228"},"ProductID":["10950"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"4022173","Type":2,"URL":"https://www.microsoft.com/downloads/details.aspx?familyid=6bed4299-d4e4-4793-b52a-c1930d0da1d0"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4022235"},"ProductID":["11099"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"4018390","Type":2,"URL":"https://www.microsoft.com/downloads/details.aspx?familyid=9018a59d-ace2-4734-b446-17904039a5be"}],"RevisionHistory":[{"Date":"2018-07-10T07:00:00Z","Description":{"Value":"Information published.
\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10950"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11099"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10950"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11099"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely"},"Type":1}],"Title":{"Value":"Microsoft SharePoint Elevation of Privilege Vulnerability"}},{"Acknowledgments":[],"CVE":"CVE-2018-8326","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"A cross-site-scripting (XSS) vulnerability exists when an open source customization for Microsoft Active Directory Federation Services (AD FS) does not properly sanitize a specially crafted web request to an affected AD FS server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected AD FS server.
\nThe attacker who successfully exploited the vulnerability could then perform cross-site scripting attacks on affected systems and run scripts in the security context of the current user. The attacks could allow the attacker to read content that the attacker is not authorized to read, use the victim's identity to take actions on the AD FS site on behalf of the user, such as change permissions and delete content, and inject malicious content in the browser of the user.
\nThe security update addresses the vulnerability by helping to ensure that the open source customization for AD FS properly sanitizes web requests.
\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"How do I know if I am affected?
\nOnly customers utilizing the Web Customization package on this GitHub repository need to install this update. Microsoft Active Directory Federation Services are not vulnerable.
\n"},{"Ordinal":"20","Title":"Active Directory","Type":7,"Value":"Active Directory"}],"Ordinal":"47","ProductStatuses":[{"ProductID":["11540"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"ProductID":["11540"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://github.com/Microsoft/adfsWebCustomization/releases/tag/v0.1"}],"RevisionHistory":[{"Date":"2018-07-10T07:00:00Z","Description":{"Value":"Information published.
\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["11540"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11540"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No"},"Type":1}],"Title":{"Value":"Open Source Customization for Active Directory Federation Services XSS Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Ryan Cumbee (Casaba Security, LLC) & Cory Carson (Casaba Security, LLC) under contract for Microsoft at the time."}],"URL":[""]}],"CVE":"CVE-2018-8327","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"A remote code execution vulnerability exists in PowerShell Editor Services. An attacker who successfully exploited this vulnerability could execute malicious code on a vulnerable system.
\nIn an attack scenario, an attacker could execute malicious code in a PowerShell Editor Services process.
\nThe update addresses the vulnerability by correcting how PowerShell Editor Services secures local connections.
\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"How do I know if I am affected by this vulnerability?
\nPlease follow the steps documented in the Release Notes.
\n"},{"Ordinal":"20","Title":"Microsoft PowerShell","Type":7,"Value":"Microsoft PowerShell"}],"Ordinal":"48","ProductStatuses":[{"ProductID":["11541","11542"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"ProductID":["11541","11542"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://github.com/PowerShell/PowerShellEditorServices/releases/tag/v1.8.0"}],"RevisionHistory":[{"Date":"2018-07-10T07:00:00Z","Description":{"Value":"Information published.
\n"},"Number":"1.0"},{"Date":"2018-07-11T07:00:00Z","Description":{"Value":"Updated links to GitHub open source code and release notes.
\n"},"Number":"1.1"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11541"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11542"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11541"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11542"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely"},"Type":1}],"Title":{"Value":"PowerShell Editor Services Remote Code Execution Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Debasish Mandal of the McAfee Labs HIPS R&D"}],"URL":[""]}],"CVE":"CVE-2018-8125","CVSSScoreSets":[{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10951"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10952"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11453"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11454"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10729"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10735"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10852"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10853"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10816"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11497"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11498"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory. The vulnerability could corrupt memory in such a way that enables an attacker to execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
\nAn attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft Edge, and then convince a user to view the website. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements by adding specially crafted content that could exploit the vulnerability. In all cases, however, an attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically by way of enticement in an email or Instant Messenger message, or by getting them to open an attachment sent through email.
\nThe security update addresses the vulnerability by modifying how Microsoft Edge handles objects in memory.
\n"},{"Ordinal":"20","Title":"Microsoft Scripting Engine","Type":7,"Value":"Microsoft Scripting Engine"}],"Ordinal":"49","ProductStatuses":[{"ProductID":["10724-10951","10724-10952","10724-11453","10724-11454","10724-10729","10724-10735","10724-10852","10724-10853","10724-10816","10724-11497","10724-11498"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338826"},"ProductID":["10724-10951","10724-10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284874","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338826"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345419"},"ProductID":["10724-10951","10724-10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284874","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345419"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338825"},"ProductID":["10724-11453","10724-11454"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284819","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338825"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345420"},"ProductID":["10724-11453","10724-11454"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284819","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345420"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338829"},"ProductID":["10724-10729","10724-10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284860","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338829"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345455"},"ProductID":["10724-10729","10724-10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284860","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345455"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338814"},"ProductID":["10724-10852","10724-10853","10724-10816"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284880","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338814"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345418"},"ProductID":["10724-10852","10724-10853","10724-10816"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284880","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345418"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338819"},"ProductID":["10724-11497","10724-11498"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284835","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338819"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345421"},"ProductID":["10724-11497","10724-11498"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284835","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345421"}],"RevisionHistory":[{"Date":"2018-07-19T07:00:00Z","Description":{"Value":"To address a known issue in the security updates released on July 10, Microsoft is releasing Alternate Cumulative update packages for Windows 10, and Standalone and Preview Rollup packages for all other supported editions of Windows. These packages are available via Microsoft Update catalog, WSUS, or by manually searching Windows Update. Customers who are experiencing issues after installing the July Windows security updates should install the replacement packages as applicable. Please refer to the Affected Products table for the replacement package KB numbers. Customers who have successfully installed the security updates and who are not experiencing any issues do not need to take any action.
\n"},"Number":"2.0"},{"Date":"2018-07-10T07:00:00Z","Description":{"Value":"Information published.
\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11497"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11498"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Low"},"ProductID":["10724-10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-11497"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-11498"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A;DOS:N/A"},"Type":1}],"Title":{"Value":"Microsoft Edge Memory Corruption Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Martin Knafve"}],"URL":[""]}],"CVE":"CVE-2018-8171","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"A Security Feature Bypass vulnerability exists in ASP.NET when the number of incorrect login attempts is not validated.
\nAn attacker who successfully exploited this vulnerability could try an infinite number of authentication attempts.
\nThe update addresses the vulnerability by validating the number of incorrect login attempts.
\n"},{"Ordinal":"20","Title":"ASP.NET","Type":7,"Value":"ASP.NET"}],"Ordinal":"50","ProductStatuses":[{"ProductID":["11460","11461","11462","11543-10566","11543-10577","11544-10566","11544-10577"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Commit"},"ProductID":["11460","11461","11462"],"RestartRequired":{},"SubType":"Security Update","Type":2,"URL":"https://github.com/aspnet/announcements/issues/310"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4339279"},"ProductID":["11543-10566","11543-10577","11544-10566","11544-10577"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://download.microsoft.com/download/1/A/7/1A7678D6-40B9-4D34-9716-06357B2F436F/AspNetWebFrameworksToolsVS2013-KB4339279.exe"}],"RevisionHistory":[{"Date":"2018-07-10T07:00:00Z","Description":{"Value":"Information published.
\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11460"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11461"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11462"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11543-10566"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11543-10577"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11544-10566"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11544-10577"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11460"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11461"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11462"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11543-10566"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11543-10577"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11544-10566"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11544-10577"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely;Older Software Release:Exploitation Unlikely"},"Type":1}],"Title":{"Value":"ASP.NET Security Feature Bypass Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Steven Thompson"}],"URL":[""]}],"CVE":"CVE-2018-8238","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"A security feature bypass vulnerability exists when Skype for Business or Lync do not properly parse UNC path links shared via messages. An attacker who successfully exploited the vulnerability could execute arbitrary commands in the context of the logged-in user. The security feature bypass by itself does not allow arbitrary code execution. Instead, an attacker would have to convince users to click a link to a file.
\nIn a file-sharing attack scenario, an attacker could provide a specially-crafted file designed to exploit the vulnerability, and then convince a user to click the link to the file.
\nThe update addresses the vulnerability by correcting how Skype for Business and Lync handle links to UNC paths.
\n"},{"Ordinal":"20","Title":"Skype for Business and Microsoft Lync","Type":7,"Value":"Skype for Business and Microsoft Lync"}],"Ordinal":"51","ProductStatuses":[{"ProductID":["10770","10771","10628","10630"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4022221"},"ProductID":["10770","10771"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"4011159","Type":2,"URL":"https://www.microsoft.com/downloads/details.aspx?familyid=599d8996-deb6-42c0-881d-574333a07847"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4022225"},"ProductID":["10628","10630"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"4011179","Type":2,"URL":"https://www.microsoft.com/downloads/details.aspx?familyid=6f2399a1-53bf-4840-a44e-bd9abef00a7c"}],"RevisionHistory":[{"Date":"2018-07-10T07:00:00Z","Description":{"Value":"Information published.
\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10770"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10771"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10628"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10630"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10770"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10771"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10628"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10630"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely"},"Type":1}],"Title":{"Value":"Skype for Business and Lync Security Feature Bypass Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Ashar Javed of Hyundai AutoEver Europe GmbH"}],"URL":[""]}],"CVE":"CVE-2018-8299","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint server.
\nThe attacker who successfully exploited the vulnerability could then perform cross-site scripting attacks on affected systems and run script in the security context of the current user. These attacks could allow the attacker to read content that the attacker is not authorized to read, use the victim's identity to take actions on the SharePoint site on behalf of the user, such as change permissions and delete content, and inject malicious content in the browser of the user.
\nThe security update addresses the vulnerability by helping to ensure that SharePoint Server properly sanitizes web requests.
\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"After installing the updates for Microsoft SharePoint, are there any further steps I need to take?
\nYes. After installing the updates for any version of SharePoint, customers need to run psconfig.exe. See Why we recommend / require to run the Configuration Wizard also for Security fixes.
\n"},{"Ordinal":"20","Title":"Microsoft Office","Type":7,"Value":"Microsoft Office"}],"Ordinal":"52","ProductStatuses":[{"ProductID":["10950","11099","10612"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4022228"},"ProductID":["10950"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"4022173","Type":2,"URL":"https://www.microsoft.com/downloads/details.aspx?familyid=6bed4299-d4e4-4793-b52a-c1930d0da1d0"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4022235"},"ProductID":["11099"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"4018390","Type":2,"URL":"https://www.microsoft.com/downloads/details.aspx?familyid=9018a59d-ace2-4734-b446-17904039a5be"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4022243"},"ProductID":["10612"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"4022190","Type":2,"URL":"https://www.microsoft.com/downloads/details.aspx?familyid=a11a325d-1064-4fc4-90f6-abf66fb76666"}],"RevisionHistory":[{"Date":"2018-07-10T07:00:00Z","Description":{"Value":"Information published.
\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10950"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11099"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10612"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10950"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11099"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10612"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Microsoft SharePoint Elevation of Privilege Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Soroush Dalili of NCC Group"}],"URL":[""]}],"CVE":"CVE-2018-8300","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the SharePoint application pool and the SharePoint server farm account.
\nExploitation of this vulnerability requires that a user uploads a specially crafted SharePoint application package to an affected version of SharePoint.
\nThe security update addresses the vulnerability by correcting how SharePoint checks the source markup of application packages.
\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"After installing the updates for Microsoft SharePoint, are there any further steps I need to take?
\nYes. After installing the updates for any version of SharePoint, customers need to run psconfig.exe. See Why we recommend / require to run the Configuration Wizard also for Security fixes.
\n"},{"Ordinal":"20","Title":"Microsoft Office","Type":7,"Value":"Microsoft Office"}],"Ordinal":"53","ProductStatuses":[{"ProductID":["10950","10612"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4022228"},"ProductID":["10950"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"4022173","Type":2,"URL":"https://www.microsoft.com/downloads/details.aspx?familyid=6bed4299-d4e4-4793-b52a-c1930d0da1d0"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4022243"},"ProductID":["10612"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"4022190","Type":2,"URL":"https://www.microsoft.com/downloads/details.aspx?familyid=a11a325d-1064-4fc4-90f6-abf66fb76666"}],"RevisionHistory":[{"Date":"2018-07-10T07:00:00Z","Description":{"Value":"Information published.
\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10950"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10612"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10950"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10612"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely"},"Type":1}],"Title":{"Value":"Microsoft SharePoint Remote Code Execution Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Roberto Rodriguez (@Cyb3rWard0g) of SpecterOps"}],"URL":[""]},{"Name":[{"Value":"Nick Freeman"}],"URL":[""]}],"CVE":"CVE-2018-8304","CVSSScoreSets":[{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11466"],"TemporalScore":5.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10951"],"TemporalScore":5.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10952"],"TemporalScore":5.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11453"],"TemporalScore":5.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11454"],"TemporalScore":5.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":5.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":5.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10852"],"TemporalScore":5.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":5.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":5.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":5.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10047"],"TemporalScore":5.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10048"],"TemporalScore":5.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10481"],"TemporalScore":5.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10482"],"TemporalScore":5.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10484"],"TemporalScore":5.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9312"],"TemporalScore":5.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10287"],"TemporalScore":5.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9311"],"TemporalScore":5.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9318"],"TemporalScore":5.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9344"],"TemporalScore":5.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10050"],"TemporalScore":5.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10051"],"TemporalScore":5.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10049"],"TemporalScore":5.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10378"],"TemporalScore":5.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10379"],"TemporalScore":5.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10483"],"TemporalScore":5.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10543"],"TemporalScore":5.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"A denial of service vulnerability exists in Windows Domain Name System (DNS) DNSAPI.dll when it fails to properly handle DNS responses. An attacker who successfully exploited the vulnerability could cause a system to stop responding. Note that the denial of service condition would not allow an attacker to execute code or to elevate user privileges. However, the denial of service condition could prevent authorized users from using system resources.
\nTo exploit the vulnerability, the attacker would use a malicious DNS server to send corrupted DNS responses to the target.
\nThe update addresses the vulnerability by modifying how Windows DNSAPI.dll handles DNS responses.
\n"},{"Ordinal":"20","Title":"Microsoft Windows DNS","Type":7,"Value":"Microsoft Windows DNS"}],"Ordinal":"54","ProductStatuses":[{"ProductID":["11466","10951","10952","11453","11454","10729","10735","10852","10853","10816","10855","10047","10048","10481","10482","10484","9312","10287","9311","9318","9344","10050","10051","10049","10378","10379","10483","10543"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338825"},"ProductID":["11466","11453","11454"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284819","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338825"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345420"},"ProductID":["11466","11453","11454"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284819","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345420"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338826"},"ProductID":["10951","10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284874","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338826"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345419"},"ProductID":["10951","10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284874","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345419"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338829"},"ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284860","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338829"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345455"},"ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284860","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345455"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338814"},"ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284880","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338814"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345418"},"ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284880","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345418"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338818"},"ProductID":["10047","10048","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4284826","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338818"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338823"},"ProductID":["10047","10048","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338823"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338821"},"ProductID":["10047","10048","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Preview Rollup","Supercedence":"4284826","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338821"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345459"},"ProductID":["10047","10048","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Standalone","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345459"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338815"},"ProductID":["10481","10482","10484","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4284815","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338815"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338824"},"ProductID":["10481","10482","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338824"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338831"},"ProductID":["10481","10482","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Preview Rollup","Supercedence":"4284815","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338831"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345424"},"ProductID":["10481","10482","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Standalone","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345424"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4291391"},"ProductID":["9312","10287","9311","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4291391"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338830"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4284855","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338830"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338820"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338820"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338816"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Preview Rollup","Supercedence":"4284855","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338816"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345425"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Standalone","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345425"}],"RevisionHistory":[{"Date":"2018-07-19T07:00:00Z","Description":{"Value":"To address a known issue in the security updates released on July 10, Microsoft is releasing Alternate Cumulative update packages for Windows 10, and Standalone and Preview Rollup packages for all other supported editions of Windows. These packages are available via Microsoft Update catalog, WSUS, or by manually searching Windows Update. Customers who are experiencing issues after installing the July Windows security updates should install the replacement packages as applicable. Please refer to the Affected Products table for the replacement package KB numbers. Customers who have successfully installed the security updates and who are not experiencing any issues do not need to take any action.
\n"},"Number":"2.0"},{"Date":"2018-07-10T07:00:00Z","Description":{"Value":"Information published.
\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11466"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10047"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10048"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10287"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["9311"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["9344"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10050"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11466"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10047"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10048"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10287"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9311"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9344"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10050"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A;Older Software Release:Exploitation Less Likely;DOS:Permanent"},"Type":1}],"Title":{"Value":"Windows DNSAPI Denial of Service Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Jens Müller (@jensvoid)"}],"URL":[""]}],"CVE":"CVE-2018-8305","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"An information disclosure vulnerability exists in Windows Mail Client when a message is opened. This vulnerability could potentially result in the disclosure of sensitive information to a malicious site.
\nTo exploit the vulnerability, an attacker would have to send a malicious email to a user and convince the user to open the email. A connection to a remote server could then be automatically initiated, depending on the URL contained in the malicious email, Windows Mail Client could fall back to initiating a web request to a remote server, disclosing the external IP of the user's system.
\nThe security update addresses the vulnerability by correcting how Windows Mail Client processes embedded URLs.
\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"What type of information could be disclosed by this vulnerability?
\nThe type of information that could be disclosed if an attacker successfully exploited this vulnerability is Personally Identifiable Information (PII).
\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"How do I get the update for Mail, Calendar and People for Windows 8.1?
\nInformation published.
\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11547"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11547"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A;Older Software Release:Exploitation Less Likely"},"Type":1}],"Title":{"Value":"Windows Mail Client Information Disclosure Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Tobias Glemser of secuvera GmbH"}],"URL":[""]},{"Name":[{"Value":"Simon Winter of Aalen University"}],"URL":[""]}],"CVE":"CVE-2018-8306","CVSSScoreSets":[{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11536"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11537"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11538"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"A command injection vulnerability exists in the Microsoft Wireless Display Adapter (MWDA) when the Microsoft Wireless Display Adapter does not properly manage user input. For this vulnerability to be exploited, the attacker must be authenticated (logged on) to the target display.
\nTo exploit the vulnerability, an attacker who is connected to the MWDA could send administrative commands to the MWDA, including commands with illegal characters which could cause the MWDA to stop functioning correctly.
\nThe update addresses the vulnerability by modifying how the Microsoft Wireless Display Adapter manages administrative input.
\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"How do I download the firmware for my Microsoft Wireless Display Adapter?
\nThe firmware is downloadable from the Wireless Display Adapter App which is available in the Microsoft App Store. The links in the Affected Products table will take you to the App Store. If the App is already installed, you can launch it from this window. Click on the Firmware tab and click the Download button.
\n"},{"Ordinal":"20","Title":"Microsoft Devices","Type":7,"Value":"Microsoft Devices"}],"Ordinal":"56","ProductStatuses":[{"ProductID":["11536","11537","11538"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Firmware"},"ProductID":["11536","11537","11538"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Type":2,"URL":"http://apps.microsoft.com/windows/app/microsoft-wireless-display/92ecc09f-9f01-4f9d-9e04-dd412d758b1a"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Launch the Microsoft Wireless Display Adapter Windows App. Click on the Security Settings tab. Click on the Pair with PIN Code check box.
\n"},"Type":1}],"RevisionHistory":[{"Date":"2018-07-10T07:00:00Z","Description":{"Value":"Information published.
\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11536"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11537"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11538"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11536"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11537"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11538"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely"},"Type":1}],"Title":{"Value":"Microsoft Wireless Display Adapter Command Injection Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Eduardo Braun Prado working with Trend Micro's Zero Day Initiative"}],"URL":[""]}],"CVE":"CVE-2018-8307","CVSSScoreSets":[{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10951"],"TemporalScore":4.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10952"],"TemporalScore":4.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11497"],"TemporalScore":4.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11498"],"TemporalScore":4.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11453"],"TemporalScore":4.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11454"],"TemporalScore":4.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11466"],"TemporalScore":4.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":4.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":4.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10852"],"TemporalScore":4.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":4.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":4.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":4.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10047"],"TemporalScore":4.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10048"],"TemporalScore":4.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10481"],"TemporalScore":4.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10482"],"TemporalScore":4.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10484"],"TemporalScore":4.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9312"],"TemporalScore":4.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10287"],"TemporalScore":4.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9311"],"TemporalScore":4.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9318"],"TemporalScore":4.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9344"],"TemporalScore":4.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10050"],"TemporalScore":4.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10051"],"TemporalScore":4.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10049"],"TemporalScore":4.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10378"],"TemporalScore":4.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10379"],"TemporalScore":4.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10483"],"TemporalScore":4.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10543"],"TemporalScore":4.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11499"],"TemporalScore":4.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"A security feature bypass vulnerability exists when Microsoft WordPad improperly handles embedded OLE objects. An attacker who successfully exploited the vulnerability could bypass content blocking.
\nIn a file-sharing attack scenario, an attacker could provide a specially crafted document file designed to exploit the vulnerability, and then convince a user to open the document file.
\nThe security update addresses the vulnerability by correcting how Microsoft WordPad handles input.
\n"},{"Ordinal":"20","Title":"Microsoft WordPad","Type":7,"Value":"Microsoft WordPad"}],"Ordinal":"57","ProductStatuses":[{"ProductID":["10951","10952","11497","11498","11453","11454","11466","10729","10735","10852","10853","10816","10855","10047","10048","10481","10482","10484","9312","10287","9311","9318","9344","10050","10051","10049","10378","10379","10483","10543","11499"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338826"},"ProductID":["10951","10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284874","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338826"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345419"},"ProductID":["10951","10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284874","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345419"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338819"},"ProductID":["11497","11498","11499"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284835","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338819"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345421"},"ProductID":["11497","11498","11499"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284835","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345421"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338825"},"ProductID":["11453","11454","11466"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284819","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338825"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345420"},"ProductID":["11453","11454","11466"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284819","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345420"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338829"},"ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284860","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338829"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345455"},"ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284860","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345455"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338814"},"ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284880","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338814"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345418"},"ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284880","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345418"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338818"},"ProductID":["10047","10048","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4284826","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338818"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338823"},"ProductID":["10047","10048","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338823"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338821"},"ProductID":["10047","10048","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Preview Rollup","Supercedence":"4284826","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338821"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345459"},"ProductID":["10047","10048","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Standalone","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345459"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338815"},"ProductID":["10481","10482","10484","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4284815","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338815"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338824"},"ProductID":["10481","10482","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338824"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338831"},"ProductID":["10481","10482","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Preview Rollup","Supercedence":"4284815","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338831"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345424"},"ProductID":["10481","10482","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Standalone","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345424"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4339291"},"ProductID":["9312","10287","9311","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4339291"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338830"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4284855","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338830"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338820"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338820"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338816"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Preview Rollup","Supercedence":"4284855","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338816"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345425"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Standalone","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345425"}],"RevisionHistory":[{"Date":"2018-07-19T07:00:00Z","Description":{"Value":"To address a known issue in the security updates released on July 10, Microsoft is releasing Alternate Cumulative update packages for Windows 10, and Standalone and Preview Rollup packages for all other supported editions of Windows. These packages are available via Microsoft Update catalog, WSUS, or by manually searching Windows Update. Customers who are experiencing issues after installing the July Windows security updates should install the replacement packages as applicable. Please refer to the Affected Products table for the replacement package KB numbers. Customers who have successfully installed the security updates and who are not experiencing any issues do not need to take any action.
\n"},"Number":"2.0"},{"Date":"2018-07-10T07:00:00Z","Description":{"Value":"Information published.
\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11497"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11498"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11466"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10047"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10048"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10287"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["9311"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["9344"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10050"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11499"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11497"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11498"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11466"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10047"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10048"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10287"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9311"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9344"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10050"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11499"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely"},"Type":1}],"Title":{"Value":"WordPad Security Feature Bypass Vulnerability"}},{"Acknowledgments":[],"CVE":"CVE-2018-8308","CVSSScoreSets":[{"BaseScore":6.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10951"],"TemporalScore":5.9,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10952"],"TemporalScore":5.9,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11497"],"TemporalScore":5.9,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11498"],"TemporalScore":5.9,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11499"],"TemporalScore":5.9,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11453"],"TemporalScore":5.9,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11454"],"TemporalScore":5.9,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":5.9,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":5.9,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10852"],"TemporalScore":5.9,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":5.9,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":5.9,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":5.9,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10047"],"TemporalScore":5.9,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10048"],"TemporalScore":5.9,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10481"],"TemporalScore":5.9,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10482"],"TemporalScore":5.9,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10484"],"TemporalScore":5.9,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9312"],"TemporalScore":5.9,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10287"],"TemporalScore":5.9,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9311"],"TemporalScore":5.9,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9318"],"TemporalScore":5.9,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9344"],"TemporalScore":5.9,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10050"],"TemporalScore":5.9,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10051"],"TemporalScore":5.9,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10049"],"TemporalScore":5.9,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10378"],"TemporalScore":5.9,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10379"],"TemporalScore":5.9,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10483"],"TemporalScore":5.9,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10543"],"TemporalScore":5.9,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11466"],"TemporalScore":5.9,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
\nTo exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application to take control of an affected system.
\nThe update addresses the vulnerability by correcting how the Windows kernel handles objects in memory.
\n"},{"Ordinal":"20","Title":"Microsoft Windows","Type":7,"Value":"Microsoft Windows"}],"Ordinal":"58","ProductStatuses":[{"ProductID":["10951","10952","11497","11498","11499","11453","11454","10729","10735","10852","10853","10816","10855","10047","10048","10481","10482","10484","9312","10287","9311","9318","9344","10050","10051","10049","10378","10379","10483","10543","11466"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338826"},"ProductID":["10951","10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284874","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338826"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345419"},"ProductID":["10951","10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284874","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345419"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338819"},"ProductID":["11497","11498","11499"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284835","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338819"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345421"},"ProductID":["11497","11498","11499"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284835","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345421"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338825"},"ProductID":["11453","11454","11466"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284819","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338825"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345420"},"ProductID":["11453","11454","11466"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284819","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345420"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338829"},"ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284860","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338829"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345455"},"ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284860","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345455"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338814"},"ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284880","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338814"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345418"},"ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284880","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345418"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338818"},"ProductID":["10047","10048","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4284826","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338818"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338823"},"ProductID":["10047","10048","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338823"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338821"},"ProductID":["10047","10048","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Preview Rollup","Supercedence":"4284826","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338821"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345459"},"ProductID":["10047","10048","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Standalone","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345459"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338815"},"ProductID":["10481","10482","10484","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4284815","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338815"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338824"},"ProductID":["10481","10482","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338824"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338831"},"ProductID":["10481","10482","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Preview Rollup","Supercedence":"4284815","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338831"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345424"},"ProductID":["10481","10482","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Standalone","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345424"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4295656"},"ProductID":["9312","10287","9311","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4295656"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345397"},"ProductID":["9312","10287","9311","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Standalone","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345397"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338830"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4284855","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338830"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338820"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338820"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338816"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Preview Rollup","Supercedence":"4284855","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338816"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345425"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Standalone","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345425"}],"RevisionHistory":[{"Date":"2018-07-19T07:00:00Z","Description":{"Value":"Microsoft is aware of a known issue some customers experienced after installing the security updates for CVE-2018-8308 that were released on July 10. We are investigating this issue and will rerelease security updates for this CVE as soon as they are available. In the meantime, customers who have already installed the July 10 security updates and who are experiencing a 0xD1 Stop error should install the applicable Alternate Cumulative Update for Windows 10, or the Standalone Update or Preview Rollup for older versions of Windows, released on July 18, 2018. These packages are available via Microsoft Update catalog, WSUS, or by manually searching Windows Update. Please see the Affected Products table for the replacement package KB numbers.
\n"},"Number":"2.0"},{"Date":"2018-07-10T07:00:00Z","Description":{"Value":"Information published.
\n"},"Number":"1.0"},{"Date":"2018-07-24T07:00:00Z","Description":{"Value":"The Windows Update classification for the following update packages has been changed from Optional to Recommended: 4338821, 4338816, 4338831. These packages will be installed automatically if the operating system is configured to receive automatic updates.
\n"},"Number":"3.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11497"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11498"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11499"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10047"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10048"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10287"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["9311"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["9344"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10050"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11466"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11497"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11498"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11499"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10047"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10048"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10287"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9311"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9344"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10050"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11466"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely"},"Type":1}],"Title":{"Value":"Windows Kernel Elevation of Privilege Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Axel Souchet (@0vercl0k) of MSRC Vulnerabilities and Mitigations Team"}],"URL":[""]}],"CVE":"CVE-2018-8309","CVSSScoreSets":[{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10951"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10952"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11497"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11498"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11499"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11453"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11454"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10852"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10047"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10048"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10481"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10482"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10484"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9312"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10287"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9311"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9318"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9344"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10050"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10051"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10049"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10378"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10379"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10483"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10543"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11466"],"TemporalScore":5.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"A denial of service vulnerability exists when Windows improperly handles objects in memory. An attacker who successfully exploited the vulnerability could cause a target system to stop responding.
\nTo exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application. The vulnerability would not allow an attacker to execute code or to elevate user rights directly, but it could be used to cause a target system to stop responding.
\nThe update addresses the vulnerability by correcting how Windows handles objects in memory.
\n"},{"Ordinal":"20","Title":"Microsoft Windows","Type":7,"Value":"Microsoft Windows"}],"Ordinal":"59","ProductStatuses":[{"ProductID":["10951","10952","11497","11498","11499","11453","11454","10729","10735","10852","10853","10816","10855","10047","10048","10481","10482","10484","9312","10287","9311","9318","9344","10050","10051","10049","10378","10379","10483","10543","11466"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338826"},"ProductID":["10951","10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284874","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338826"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345419"},"ProductID":["10951","10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284874","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345419"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338819"},"ProductID":["11497","11498","11499"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284835","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338819"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345421"},"ProductID":["11497","11498","11499"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284835","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345421"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338825"},"ProductID":["11453","11454","11466"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284819","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338825"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345420"},"ProductID":["11453","11454","11466"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284819","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345420"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338829"},"ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284860","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338829"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345455"},"ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284860","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345455"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338814"},"ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284880","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338814"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345418"},"ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284880","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345418"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338818"},"ProductID":["10047","10048","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4284826","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338818"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338823"},"ProductID":["10047","10048","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338823"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338821"},"ProductID":["10047","10048","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Preview Rollup","Supercedence":"4284826","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338821"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345459"},"ProductID":["10047","10048","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Standalone","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345459"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338815"},"ProductID":["10481","10482","10484","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4284815","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338815"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338824"},"ProductID":["10481","10482","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338824"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338831"},"ProductID":["10481","10482","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Preview Rollup","Supercedence":"4284815","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338831"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345424"},"ProductID":["10481","10482","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Standalone","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345424"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4340583"},"ProductID":["9312","10287","9311","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4093478","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4340583"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338830"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4284855","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338830"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338820"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338820"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338816"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Preview Rollup","Supercedence":"4284855","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338816"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345425"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Standalone","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345425"}],"RevisionHistory":[{"Date":"2018-07-19T07:00:00Z","Description":{"Value":"To address a known issue in the security updates released on July 10, Microsoft is releasing Alternate Cumulative update packages for Windows 10, and Standalone and Preview Rollup packages for all other supported editions of Windows. These packages are available via Microsoft Update catalog, WSUS, or by manually searching Windows Update. Customers who are experiencing issues after installing the July Windows security updates should install the replacement packages as applicable. Please refer to the Affected Products table for the replacement package KB numbers. Customers who have successfully installed the security updates and who are not experiencing any issues do not need to take any action.
\n"},"Number":"2.0"},{"Date":"2018-07-10T07:00:00Z","Description":{"Value":"Information published.
\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11497"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11498"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11499"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10047"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10048"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10287"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["9311"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["9344"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10050"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11466"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11497"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11498"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11499"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10047"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10048"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10287"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9311"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9344"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10050"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11466"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:Permanent"},"Type":1}],"Title":{"Value":"Windows Denial of Service Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Jonathan Birch of Microsoft Corporation"}],"URL":[""]}],"CVE":"CVE-2018-8310","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"A tampering vulnerability exists when Microsoft Outlook does not properly handle specific attachment types when rendering HTML emails. An attacker could exploit the vulnerability by sending a specially crafted email and attachment to a victim, or by hosting a malicious .eml file on a web server.
\nThe attacker who successfully exploited the vulnerability could then embed untrusted TrueType fonts in the body of an email. This behavior could be combined with other exploits to further compromise a user's system.
\nThe security update addresses the vulnerability by correcting how Microsoft Outlook handles attachments.
\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"I have Microsoft Word 2010 installed. Why am I not being offered the 4022200 update?
\nThe 4022200 update only applies to systems running specific configurations of Microsoft Office 2010. Some configurations will not be offered the update.
\nI am being offered this update for software that is not specifically indicated as being affected in the Affected Software and Vulnerability Severity Ratings table. Why am I being offered this update?
\nWhen updates address vulnerable code that exists in a component that is shared between multiple Microsoft Office products or shared between multiple versions of the same Microsoft Office product, the update is considered to be applicable to all supported products and versions that contain the vulnerable component.
\nFor example, when an update applies to Microsoft Office 2007 products, only Microsoft Office 2007 may be specifically listed in the Affected Software table. However, the update could apply to Microsoft Word 2007, Microsoft Excel 2007, Microsoft Visio 2007, Microsoft Compatibility Pack, Microsoft Excel Viewer, or any other Microsoft Office 2007 product that is not specifically listed in the Affected Software table. Furthermore, when an update applies to Microsoft Office 2010 products, only Microsoft Office 2010 may be specifically listed in the Affected Software table. However, the update could apply to Microsoft Word 2010, Microsoft Excel 2010, Microsoft Visio 2010, Microsoft Visio Viewer, or any other Microsoft Office 2010 product that is not specifically listed in the Affected Software table.
\nFor more information on this behavior and recommended actions, see Microsoft Knowledge Base Article 830335. For a list of Microsoft Office products that an update may apply to, refer to the Microsoft Knowledge Base Article associated with the specific update.
\n"},{"Ordinal":"20","Title":"Microsoft Office","Type":7,"Value":"Microsoft Office"}],"Ordinal":"60","ProductStatuses":[{"ProductID":["10746","10747","10905","10906","10521","10522","10513","10514","10606","10604","10605"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4022218"},"ProductID":["10746","10747"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"4018383","Type":2,"URL":"https://www.microsoft.com/downloads/details.aspx?familyid=563d2e51-402d-48f2-9a05-482bd6d1b82f"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Click to Run"},"ProductID":["10905","10906"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4022200"},"ProductID":["10521","10522"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"4022139","Type":2,"URL":"https://www.microsoft.com/downloads/details.aspx?familyid=81ab1870-0a3c-4807-9a1f-5451b5450714"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4022202"},"ProductID":["10513","10514"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"4022141","Type":2,"URL":"https://www.microsoft.com/downloads/details.aspx?familyid=524361d9-08ba-434f-a4f6-8006f30c15c0"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4022224"},"ProductID":["10606","10604","10605"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"4018396","Type":2,"URL":""}],"RevisionHistory":[{"Date":"2018-07-10T07:00:00Z","Description":{"Value":"Information published.
\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Tampering"},"ProductID":["10746"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Tampering"},"ProductID":["10747"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Tampering"},"ProductID":["10905"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Tampering"},"ProductID":["10906"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Tampering"},"ProductID":["10521"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Tampering"},"ProductID":["10522"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Tampering"},"ProductID":["10513"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Tampering"},"ProductID":["10514"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Tampering"},"ProductID":["10606"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Tampering"},"ProductID":["10604"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Tampering"},"ProductID":["10605"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Low"},"ProductID":["10746"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Low"},"ProductID":["10747"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Low"},"ProductID":["10905"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Low"},"ProductID":["10906"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Low"},"ProductID":["10521"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Low"},"ProductID":["10522"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Low"},"ProductID":["10513"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Low"},"ProductID":["10514"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Low"},"ProductID":["10606"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Low"},"ProductID":["10604"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Low"},"ProductID":["10605"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely"},"Type":1}],"Title":{"Value":"Microsoft Office Tampering Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Ping Fan (Zetta) Ke of Valkyrie-X Security Research Group (VXRL)"}],"URL":[""]}],"CVE":"CVE-2018-8311","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"A remote code execution vulnerability exists when Skype for Business and Microsoft Lync clients fail to properly sanitize specially crafted content. The vulnerability could corrupt memory in a way that could allow an attacker to execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, the attacker could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
\nAn attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft Edge, and then convince a user to view the website. The attacker could also take advantage of compromised websites, or websites that accept or host user-provided content or advertisements, by adding specially crafted content that could exploit the vulnerability. In all cases, however, an attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically via an enticement in email or instant message, or by getting them to open an email attachment.
\nThe security update addresses the vulnerability by modifying how Skype for Business and Lync clients sanitize content.
\n"},{"Ordinal":"20","Title":"Skype for Business and Microsoft Lync","Type":7,"Value":"Skype for Business and Microsoft Lync"}],"Ordinal":"61","ProductStatuses":[{"ProductID":["10770","10771","10628","10630"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4022221"},"ProductID":["10770","10771"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"4011159","Type":2,"URL":"https://www.microsoft.com/downloads/details.aspx?familyid=599d8996-deb6-42c0-881d-574333a07847"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4022225"},"ProductID":["10628","10630"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"4011179","Type":2,"URL":"https://www.microsoft.com/downloads/details.aspx?familyid=6f2399a1-53bf-4840-a44e-bd9abef00a7c"}],"RevisionHistory":[{"Date":"2018-07-10T07:00:00Z","Description":{"Value":"Information published.
\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10770"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10771"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10628"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10630"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10770"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10771"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10628"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10630"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely"},"Type":1}],"Title":{"Value":"Remote Code Execution Vulnerability in Skype For Business and Lync"}},{"Acknowledgments":[{"Name":[{"Value":"Vladislav Stolyarov of Kaspersky Lab"}],"URL":[""]}],"CVE":"CVE-2018-8312","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"A remote code execution vulnerability exists when Microsoft Access fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.
\nTo exploit the vulnerability, an attacker could provide a specially crafted document file designed to exploit the vulnerability and then convince a user to open the document file.
\nThe security update addresses the vulnerability by correcting how Microsoft Access handles objects in the memory.
\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"I am being offered this update for software that is not specifically indicated as being affected in the Affected Software and Vulnerability Severity Ratings table. Why am I being offered this update?
\nWhen updates address vulnerable code that exists in a component that is shared between multiple Microsoft Office products or shared between multiple versions of the same Microsoft Office product, the update is considered to be applicable to all supported products and versions that contain the vulnerable component.
\nFor example, when an update applies to Microsoft Office 2007 products, only Microsoft Office 2007 may be specifically listed in the Affected Software table. However, the update could apply to Microsoft Word 2007, Microsoft Excel 2007, Microsoft Visio 2007, Microsoft Compatibility Pack, Microsoft Excel Viewer, or any other Microsoft Office 2007 product that is not specifically listed in the Affected Software table. Furthermore, when an update applies to Microsoft Office 2010 products, only Microsoft Office 2010 may be specifically listed in the Affected Software table. However, the update could apply to Microsoft Word 2010, Microsoft Excel 2010, Microsoft Visio 2010, Microsoft Visio Viewer, or any other Microsoft Office 2010 product that is not specifically listed in the Affected Software table.
\nFor more information on this behavior and recommended actions, see Microsoft Knowledge Base Article 830335. For a list of Microsoft Office products that an update may apply to, refer to the Microsoft Knowledge Base Article associated with the specific update.
\n"},{"Ordinal":"20","Title":"Microsoft Office","Type":7,"Value":"Microsoft Office"}],"Ordinal":"62","ProductStatuses":[{"ProductID":["10796","10797","10751","10752","10905","10906"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4018351"},"ProductID":["10796","10797"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"4011234","Type":2,"URL":"https://www.microsoft.com/downloads/details.aspx?familyid=cc4eec1d-cfec-4041-8026-b2985813a82c"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4018338"},"ProductID":["10751","10752"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"4011665","Type":2,"URL":"https://www.microsoft.com/downloads/details.aspx?familyid=a24775e7-52a6-4622-800e-1d5d88ee8cfd"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Click to Run"},"ProductID":["10905","10906"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""}],"RevisionHistory":[{"Date":"2018-07-10T07:00:00Z","Description":{"Value":"Information published.
\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10796"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10797"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10751"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10752"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10905"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10906"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10796"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10797"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10751"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10752"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10905"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10906"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely"},"Type":1}],"Title":{"Value":"Microsoft Access Remote Code Execution Vulnerability"}},{"Acknowledgments":[],"CVE":"ADV180017","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"This security update addresses the following vulnerabilities, which are described in Adobe Security Bulletin APSB18-24: CVE-2018-5007, CVE-2018-5008.
\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"How could an attacker exploit these vulnerabilities?\nIn a web-based attack scenario where the user is using Internet Explorer for the desktop, an attacker could host a specially crafted website that is designed to exploit any of these vulnerabilities through Internet Explorer and then convince a user to view the website. An attacker could also embed an ActiveX control marked "safe for initialization" in an application or Microsoft Office document that hosts the IE rendering engine. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit any of these vulnerabilities. In all cases, however, an attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically by clicking a link in an email message or in an Instant Messenger message that takes users to the attacker's website, or by opening an attachment sent through email.
\nIn a web-based attack scenario where the user is using Internet Explorer in the Windows 8-style UI, an attacker would first need to compromise a website already listed in the Compatibility View (CV) list. An attacker could then host a website that contains specially crafted Flash content designed to exploit any of these vulnerabilities through Internet Explorer and then convince a user to view the website. An attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically by clicking a link in an email message or in an Instant Messenger message that takes users to the attacker's website, or by opening an attachment sent through email. For more information about Internet Explorer and the CV List, please see the MSDN Article, Developer Guidance for websites with content for Adobe Flash Player in Windows 8.
\n"},{"Ordinal":"20","Title":"Adobe Flash Player","Type":7,"Value":"Adobe Flash Player"}],"Ordinal":"63","ProductStatuses":[{"ProductID":["10384-10951","10384-10952","10384-11497","10384-11498","10384-11453","10384-11454","10384-10729","10384-10735","10384-10852","10384-10853","10384-10816","10384-10481","10384-10482","10384-10484","10384-10378","10384-10483"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338832"},"ProductID":["10384-10951","10384-10952","10384-11497","10384-11498","10384-11453","10384-11454","10384-10729","10384-10735","10384-10852","10384-10853","10384-10816","10384-10481","10384-10482","10384-10484","10384-10378","10384-10483"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4287903","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338832"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"The following mitigating factors may be helpful in your situation:
\nWorkaround refers to a setting or configuration change that would help block known attack vectors before you apply the update.
\nPrevent Adobe Flash Player from running\nYou can disable attempts to instantiate Adobe Flash Player in Internet Explorer and other applications that honor the kill bit feature, such as Office 2007 and Office 2010, by setting the kill bit for the control in the registry.
\nWarning If you use Registry Editor incorrectly, you may cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that you can solve problems that result from using Registry Editor incorrectly. Use Registry Editor at your own risk.\nTo set the kill bit for the control in the registry, perform the following steps:
\nPaste the following into a text file and save it with the .reg file extension.
\n Windows Registry Editor Version 5.00\n [HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Internet Explorer\\ActiveX Compatibility\\{D27CDB6E-AE6D-11CF-96B8-444553540000}]\n "Compatibility Flags"=dword:00000400\n\n [HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Internet Explorer\\ActiveX Compatibility\\{D27CDB6E-AE6D-11CF-96B8-444553540000}]\n "Compatibility Flags"=dword:00000400\n\nDouble-click the .reg file to apply it to an individual system.
\nYou can also apply this workaround across domains by using Group Policy. For more information about Group Policy, see the TechNet article, Group Policy collection.
\nNote You must restart Internet Explorer for your changes to take effect.\nImpact of workaround. There is no impact as long as the object is not intended to be used in Internet Explorer.\nHow to undo the workaround. Delete the registry keys that were added in implementing this workaround.\nPrevent Adobe Flash Player from running in Internet Explorer through Group Policy\nNote The Group Policy MMC snap-in can be used to set policy for a machine, for an organizational unit, or for an entire domain. For more information about Group Policy, visit the following Microsoft Web sites:
\nGroup Policy Overview\nWhat is Group Policy Object Editor?\nCore Group Policy tools and settings
\nTo disable Adobe Flash Player in Internet Explorer through Group Policy, perform the following steps:\nNote This workaround does not prevent Flash from being invoked from other applications, such as Microsoft Office 2007 or Microsoft Office 2010.
\nTo disable Adobe Flash Player in Office 2010 only, set the kill bit for the ActiveX control for Adobe Flash Player in the registry using the following steps:
\n\t\t[HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Office\\Common\\COM\\Compatibility\\{D27CDB6E-AE6D-11CF-96B8-444553540000}]\n\t"Compatibility Flags"=dword:00000400\n\nTo disable all ActiveX controls in Microsoft Office 2007 and Microsoft Office 2010, including Adobe Flash Player in Internet Explorer, perform the following steps:
\nTo re-enable ActiveX controls in Microsoft Office 2007 and Microsoft Office 2010, perform the following steps:
\nTo raise the browsing security level in Internet Explorer, perform the following steps:
\nYou can help protect against exploitation of these vulnerabilities by changing your settings to prompt before running Active Scripting or to disable Active Scripting in the Internet and Local intranet security zone. To do this, perform the following steps:
\nTo do this, perform the following steps:
\nInformation published.
\n"},"Number":"1.0"},{"Date":"2018-09-26T07:00:00Z","Description":{"Value":"Updated supersedence information. This is an informational change only.
\n"},"Number":"1.1"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10384-10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10384-10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10384-11497"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10384-11498"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10384-11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10384-11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10384-10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10384-10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10384-10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10384-10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10384-10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10384-10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10384-10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10384-10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10384-10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10384-10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10384-10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10384-10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10384-11497"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10384-11498"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10384-11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10384-11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10384-10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10384-10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10384-10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10384-10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10384-10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10384-10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10384-10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10384-10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10384-10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10384-10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No"},"Type":1}],"Title":{"Value":"July 2018 Adobe Flash Security Update"}},{"Acknowledgments":[],"CVE":"CVE-2018-8314","CVSSScoreSets":[{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10047"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10048"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10481"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10482"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10484"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9312"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10287"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9311"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9318"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9344"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10050"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10051"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10049"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10378"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10379"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10483"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10543"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"An elevation of privilege vulnerability exists when Windows fails a check, allowing a sandbox escape. An attacker who successfully exploited the vulnerability could use the sandbox escape to elevate privileges on an affected system.
\nThis vulnerability by itself does not allow arbitrary code execution. However, the vulnerability could allow arbitrary code to run if an attacker uses it in combination with another vulnerability, such as a remote code execution vulnerability or another elevation of privilege vulnerability, that can leverage the elevated privileges when code execution is attempted.
\nThe security update addresses the vulnerability by correcting how Windows file picker handles paths.
\n"},{"Ordinal":"20","Title":"Windows Shell","Type":7,"Value":"Windows Shell"}],"Ordinal":"64","ProductStatuses":[{"ProductID":["10729","10735","10047","10048","10481","10482","10484","9312","10287","9311","9318","9344","10050","10051","10049","10378","10379","10483","10543"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338829"},"ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284860","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338829"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345455"},"ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284860","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345455"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338818"},"ProductID":["10047","10048","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4284826","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338818"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338823"},"ProductID":["10047","10048","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338823"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338821"},"ProductID":["10047","10048","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Preview Rollup","Supercedence":"4284826","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338821"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345459"},"ProductID":["10047","10048","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Standalone","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345459"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338815"},"ProductID":["10481","10482","10484","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4284815","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338815"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338824"},"ProductID":["10481","10482","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338824"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338831"},"ProductID":["10481","10482","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Preview Rollup","Supercedence":"4284815","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338831"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345424"},"ProductID":["10481","10482","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Standalone","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345424"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4339503"},"ProductID":["9312","10287","9311","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4339503"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338830"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4284855","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338830"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338816"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Preview Rollup","Supercedence":"4284855","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338816"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345425"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Standalone","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345425"}],"RevisionHistory":[{"Date":"2018-07-19T07:00:00Z","Description":{"Value":"To address a known issue in the security updates released on July 10, Microsoft is releasing Alternate Cumulative update packages for Windows 10, and Standalone and Preview Rollup packages for all other supported editions of Windows. These packages are available via Microsoft Update catalog, WSUS, or by manually searching Windows Update. Customers who are experiencing issues after installing the July Windows security updates should install the replacement packages as applicable. Please refer to the Affected Products table for the replacement package KB numbers. Customers who have successfully installed the security updates and who are not experiencing any issues do not need to take any action.
\n"},"Number":"2.0"},{"Date":"2018-07-10T07:00:00Z","Description":{"Value":"Information published.
\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10047"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10048"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10287"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["9311"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["9344"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10050"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10047"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10048"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10287"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9311"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9344"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10050"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:Yes;Exploited:No;Latest Software Release:N/A;Older Software Release:Exploitation More Likely"},"Type":1}],"Title":{"Value":"Windows Elevation of Privilege Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Jihui Lu of Tencent KeenLab"}],"URL":[""]}],"CVE":"CVE-2018-8324","CVSSScoreSets":[{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10951"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10952"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11497"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11498"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11453"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11454"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory. The vulnerability could corrupt memory in such a way that enables an attacker to execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
\nAn attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft Edge, and then convince a user to view the website. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements by adding specially crafted content that could exploit the vulnerability. In all cases, however, an attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically by way of enticement in an email or Instant Messenger message, or by getting them to open an attachment sent through email.
\nThe security update addresses the vulnerability by modifying how Microsoft Edge handles objects in memory.
\n"},{"Ordinal":"20","Title":"Microsoft Edge","Type":7,"Value":"Microsoft Edge"}],"Ordinal":"65","ProductStatuses":[{"ProductID":["10724-10951","10724-10952","10724-11497","10724-11498","10724-11453","10724-11454"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338826"},"ProductID":["10724-10951","10724-10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284874","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338826"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345419"},"ProductID":["10724-10951","10724-10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284874","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345419"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338819"},"ProductID":["10724-11497","10724-11498"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284835","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338819"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345421"},"ProductID":["10724-11497","10724-11498"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284835","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345421"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338825"},"ProductID":["10724-11453","10724-11454"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284819","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338825"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345420"},"ProductID":["10724-11453","10724-11454"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284819","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345420"}],"RevisionHistory":[{"Date":"2018-07-19T07:00:00Z","Description":{"Value":"To address a known issue in the security updates released on July 10, Microsoft is releasing Alternate Cumulative update packages for Windows 10, and Standalone and Preview Rollup packages for all other supported editions of Windows. These packages are available via Microsoft Update catalog, WSUS, or by manually searching Windows Update. Customers who are experiencing issues after installing the July Windows security updates should install the replacement packages as applicable. Please refer to the Affected Products table for the replacement package KB numbers. Customers who have successfully installed the security updates and who are not experiencing any issues do not need to take any action.
\n"},"Number":"2.0"},{"Date":"2018-07-10T07:00:00Z","Description":{"Value":"Information published.
\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10724-10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10724-10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10724-11497"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10724-11498"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10724-11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10724-11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11497"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11498"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A;DOS:N/A"},"Type":1}],"Title":{"Value":"Microsoft Edge Memory Corruption Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Masato Kinugawa of Cure53"}],"URL":[""]}],"CVE":"CVE-2018-8325","CVSSScoreSets":[{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11497"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11498"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"An information disclosure vulnerability exists when Microsoft Edge based on Edge HTML improperly handles objects in memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.
\nTo exploit the vulnerability, in a web-based attack scenario, an attacker could host a website in an attempt to exploit the vulnerability. In addition, compromised websites and websites that accept or host user-provided content could contain specially crafted content that could exploit the vulnerability. However, in all cases an attacker would have no way to force a user to view the attacker-controlled content. Instead, an attacker would have to convince a user to take action. For example, an attacker could trick a user into clicking a link that takes the user to the attacker's site.
\nThe update addresses the vulnerability by modifying how Microsoft Edge based on Edge HTML handles objects in memory.
\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"What type of information could be disclosed by this vulnerability?
\nThe type of information that could be disclosed if an attacker successfully exploited this vulnerability is uninitialized memory.
\n"},{"Ordinal":"20","Title":"Microsoft Edge","Type":7,"Value":"Microsoft Edge"}],"Ordinal":"66","ProductStatuses":[{"ProductID":["10724-11497","10724-11498"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4338819"},"ProductID":["10724-11497","10724-11498"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4284835","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4338819"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4345421"},"ProductID":["10724-11497","10724-11498"],"RestartRequired":{"Value":"Yes"},"SubType":"Alternate Cumulative","Supercedence":"4284835","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4345421"}],"RevisionHistory":[{"Date":"2018-07-19T07:00:00Z","Description":{"Value":"To address a known issue in the security updates released on July 10, Microsoft is releasing Alternate Cumulative update packages for Windows 10, and Standalone and Preview Rollup packages for all other supported editions of Windows. These packages are available via Microsoft Update catalog, WSUS, or by manually searching Windows Update. Customers who are experiencing issues after installing the July Windows security updates should install the replacement packages as applicable. Please refer to the Affected Products table for the replacement package KB numbers. Customers who have successfully installed the security updates and who are not experiencing any issues do not need to take any action.
\n"},"Number":"2.0"},{"Date":"2018-07-10T07:00:00Z","Description":{"Value":"Information published.
\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10724-11497"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10724-11498"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-11497"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-11498"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:N/A"},"Type":1}],"Title":{"Value":"Microsoft Edge based on Edge HTML Information Disclosure Vulnerability"}}]}