{"DocumentNotes":[{"Audience":"Public","Ordinal":"0","Title":"Release Notes","Type":1,"Value":"<p>The September security release consists of security updates for the following software:</p>\n<ul>\n<li>Internet Explorer</li>\n<li>Microsoft Edge</li>\n<li>Microsoft Windows</li>\n<li>Microsoft Office and Microsoft Office Services and Web Apps</li>\n<li>ChakraCore</li>\n<li>Adobe Flash Player</li>\n<li>.NET Framework</li>\n<li>Microsoft.Data.OData</li>\n<li>ASP.NET</li>\n<li>Team Foundation Server</li>\n</ul>\n<p>Please note the following information regarding the security updates:</p>\n<ul>\n<li>Windows 10 updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows 10, in addition to non-security updates. The updates are available via the <a href=\"http://catalog.update.microsoft.com/v7/site/Home.aspx\">Microsoft Update Catalog</a>.</li>\n<li>Starting in March 2017, a delta package will be available on the Microsoft Update Catalog for Windows 10 version 1607 and newer. This delta package contains just the delta changes between the previous month and the current release.</li>\n<li>Updates for Windows RT 8.1 and Microsoft Office RT software are only available via <a href=\"http://go.microsoft.com/fwlink/?LinkId=21130\">Windows Update</a>.</li>\n<li>For information on lifecycle and support dates for Windows 10 operating systems, please see <a href=\"https://support.microsoft.com/en-us/help/13853/windows-lifecycle-fact-sheet\">Windows Lifecycle Facts Sheet</a>.</li>\n<li>In addition to security changes for the vulnerabilities, updates include defense-in-depth updates to help improve security-related features.</li>\n</ul>\n<p><strong>The following CVEs have FAQs with additional information and may include * further steps to take after installing the updates.</strong></p>\n<ul>\n<li><a href=\"https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/ADV180022\">ADV180022</a>*</li>\n<li><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV180023\">ADV180023</a></li>\n<li><a href=\"https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2018-8315\">CVE-2018-8315</a></li>\n<li><a href=\"https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2018-8331\">CVE-2018-8331</a></li>\n<li><a href=\"https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2018-8336\">CVE-2018-8336</a></li>\n<li><a href=\"https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2018-8419\">CVE-2018-8419</a></li>\n<li><a href=\"https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2018-8424\">CVE-2018-8424</a></li>\n<li><a href=\"https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2018-8429\">CVE-2018-8429</a></li>\n<li><a href=\"https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2018-8430\">CVE-2018-8430</a></li>\n<li><a href=\"https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2018-8433\">CVE-2018-8433</a></li>\n<li><a href=\"https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2018-8434\">CVE-2018-8434</a></li>\n<li><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8442\">CVE-2018-8442</a></li>\n<li><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8443\">CVE-2018-8443</a></li>\n<li><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8444\">CVE-2018-8444</a></li>\n<li><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8445\">CVE-2018-8445</a></li>\n<li><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8446\">CVE-2018-8446</a></li>\n<li><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8452\">CVE-2018-8452</a></li>\n<li><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8474\">CVE-2018-8474</a>*</li>\n</ul>\n<p><strong>Known Issues</strong></p>\n<ul>\n<li><a href=\"https://support.microsoft.com/en-us/help/4457025\">4457025</a></li>\n<li><a href=\"https://support.microsoft.com/en-us/help/4457026\">4457026</a></li>\n<li><a href=\"https://support.microsoft.com/en-us/help/4457027\">4457027</a></li>\n<li><a href=\"https://support.microsoft.com/en-us/help/4457028\">4457028</a></li>\n<li><a href=\"https://support.microsoft.com/en-us/help/4457029\">4457029</a></li>\n<li><a href=\"https://support.microsoft.com/en-us/help/4457030\">4457030</a></li>\n<li><a href=\"https://support.microsoft.com/en-us/help/4457033\">4457033</a></li>\n<li><a href=\"https://support.microsoft.com/en-us/help/4457034\">4457034</a></li>\n<li><a href=\"https://support.microsoft.com/en-us/help/4457035\">4457035</a></li>\n<li><a href=\"https://support.microsoft.com/en-us/help/4457036\">4457036</a></li>\n<li><a href=\"https://support.microsoft.com/en-us/help/4457037\">4457037</a></li>\n<li><a href=\"https://support.microsoft.com/en-us/help/4457038\">4457038</a></li>\n<li><a href=\"https://support.microsoft.com/en-us/help/4457042\">4457042</a></li>\n<li><a href=\"https://support.microsoft.com/en-us/help/4457043\">4457043</a></li>\n<li><a href=\"https://support.microsoft.com/en-us/help/4457044\">4457044</a></li>\n<li><a href=\"https://support.microsoft.com/en-us/help/4457045\">4457045</a></li>\n<li><a href=\"https://support.microsoft.com/en-us/help/4457053\">4457053</a></li>\n<li><a href=\"https://support.microsoft.com/en-us/help/4457054\">4457054</a></li>\n<li><a href=\"https://support.microsoft.com/en-us/help/4457055\">4457055</a></li>\n<li><a href=\"https://support.microsoft.com/en-us/help/4457056\">4457056</a></li>\n<li><a href=\"https://support.microsoft.com/en-us/help/4457128\">4457128</a></li>\n<li><a href=\"https://support.microsoft.com/en-us/help/4457144\">4457144</a></li>\n<li><a href=\"https://support.microsoft.com/en-us/help/4457145\">4457145</a></li>\n<li><a href=\"https://support.microsoft.com/en-us/help/4457914\">4457914</a></li>\n<li><a href=\"https://support.microsoft.com/en-us/help/4457915\">4457915</a></li>\n<li><a href=\"https://support.microsoft.com/en-us/help/4457916\">4457916</a></li>\n<li><a href=\"https://support.microsoft.com/en-us/help/4457917\">4457917</a></li>\n<li><a href=\"https://support.microsoft.com/en-us/help/4457918\">4457918</a></li>\n<li><a href=\"https://support.microsoft.com/en-us/help/4457919\">4457919</a></li>\n<li><a href=\"https://support.microsoft.com/en-us/help/4457920\">4457920</a></li>\n<li><a href=\"https://support.microsoft.com/en-us/help/4457921\">4457921</a></li>\n<li><a href=\"https://support.microsoft.com/en-us/help/4458321\">4458321</a></li>\n</ul>\n"},{"Audience":"Public","Ordinal":"1","Title":"Legal Disclaimer","Type":5,"Value":"The information provided in the Microsoft Knowledge Base is provided \"as is\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply."}],"DocumentPublisher":{"ContactDetails":{"Value":"secure@microsoft.com"},"IssuingAuthority":{"Value":"The Microsoft Security Response Center (MSRC) identifies, monitors, resolves, and responds to security incidents and Microsoft software security vulnerabilities. For more information, see http://www.microsoft.com/security/msrc."},"Type":0},"DocumentTitle":{"Value":"September 2018 Security Updates"},"DocumentTracking":{"CurrentReleaseDate":"2021-12-16T00:00:00","Identification":{"Alias":{"Value":"2018-Sep"},"ID":{"Value":"2018-Sep"}},"InitialReleaseDate":"2018-09-11T07:00:00Z","RevisionHistory":[{"Date":"2021-12-16T00:00:00","Description":{"Value":"September 2018 Security Updates"},"Number":"1"}],"Status":2,"Version":"1.0"},"DocumentType":{"Value":"Security Update"},"ProductTree":{"Branch":[{"Items":[{"Items":[{"ProductID":"10952","Value":"Windows 10 Version 1703 for x64-based Systems"},{"ProductID":"11466","Value":"Windows Server, version 1709  (Server Core Installation)"},{"ProductID":"10853","Value":"Windows 10 Version 1607 for x64-based Systems"},{"ProductID":"10816","Value":"Windows Server 2016"},{"ProductID":"10855","Value":"Windows Server 2016  (Server Core installation)"},{"ProductID":"11498","Value":"Windows 10 Version 1803 for x64-based Systems"},{"ProductID":"11499","Value":"Windows Server, version 1803  (Server Core Installation)"},{"ProductID":"10951","Value":"Windows 10 Version 1703 for 32-bit Systems"},{"ProductID":"11497","Value":"Windows 10 Version 1803 for 32-bit Systems"},{"ProductID":"11453","Value":"Windows 10 Version 1709 for 32-bit Systems"},{"ProductID":"11454","Value":"Windows 10 Version 1709 for x64-based Systems"},{"ProductID":"10729","Value":"Windows 10 for 32-bit Systems"},{"ProductID":"10735","Value":"Windows 10 for x64-based Systems"},{"ProductID":"10852","Value":"Windows 10 Version 1607 for 32-bit Systems"},{"ProductID":"10481","Value":"Windows 8.1 for 32-bit systems"},{"ProductID":"10482","Value":"Windows 8.1 for x64-based systems"},{"ProductID":"10484","Value":"Windows RT 8.1"},{"ProductID":"10378","Value":"Windows Server 2012"},{"ProductID":"10379","Value":"Windows Server 2012 (Server Core installation)"},{"ProductID":"10483","Value":"Windows Server 2012 R2"},{"ProductID":"10543","Value":"Windows Server 2012 R2 (Server Core installation)"}],"Name":"Windows","Type":1},{"Items":[{"ProductID":"11562","Value":"Microsoft.Data.OData"},{"ProductID":"11564","Value":"ASP.NET Core 2.1"},{"ProductID":"11610","Value":"ASP.NET Core 2.2"},{"ProductID":"11566","Value":"System.IO.Pipelines"},{"ProductID":"11565","Value":".NET Core 2.1"},{"ProductID":"11513-11497","Value":"Microsoft .NET Framework 4.7.2 on Windows 10 Version 1803 for 32-bit Systems"},{"ProductID":"11513-11498","Value":"Microsoft .NET Framework 4.7.2 on Windows 10 Version 1803 for x64-based Systems"},{"ProductID":"11513-11499","Value":"Microsoft .NET Framework 4.7.2 on Windows Server, version 1803  (Server Core Installation)"},{"ProductID":"10728-9312","Value":"Microsoft .NET Framework 4.6 on Windows Server 2008 for 32-bit Systems Service Pack 2"},{"ProductID":"10728-9318","Value":"Microsoft .NET Framework 4.6 on Windows Server 2008 for x64-based Systems Service Pack 2"},{"ProductID":"9292-9312","Value":"Microsoft .NET Framework 2.0 Service Pack 2 on Windows Server 2008 for 32-bit Systems Service Pack 2"},{"ProductID":"9292-9311","Value":"Microsoft .NET Framework 2.0 Service Pack 2 on Windows Server 2008 for Itanium-Based Systems Service Pack 2"},{"ProductID":"9292-9318","Value":"Microsoft .NET Framework 2.0 Service Pack 2 on Windows Server 2008 for x64-based Systems Service Pack 2"},{"ProductID":"9195-9312","Value":"Microsoft .NET Framework 3.0 Service Pack 2 on Windows Server 2008 for 32-bit Systems Service Pack 2"},{"ProductID":"9195-9311","Value":"Microsoft .NET Framework 3.0 Service Pack 2 on Windows Server 2008 for Itanium-Based Systems Service Pack 2"},{"ProductID":"9195-9318","Value":"Microsoft .NET Framework 3.0 Service Pack 2 on Windows Server 2008 for x64-based Systems Service Pack 2"},{"ProductID":"2472-10951","Value":"Microsoft .NET Framework 3.5 on Windows 10 Version 1703 for 32-bit Systems"},{"ProductID":"2472-10952","Value":"Microsoft .NET Framework 3.5 on Windows 10 Version 1703 for x64-based Systems"},{"ProductID":"2472-11497","Value":"Microsoft .NET Framework 3.5 on Windows 10 Version 1803 for 32-bit Systems"},{"ProductID":"2472-11498","Value":"Microsoft .NET Framework 3.5 on Windows 10 Version 1803 for x64-based Systems"},{"ProductID":"2472-11499","Value":"Microsoft .NET Framework 3.5 on Windows Server, version 1803  (Server Core Installation)"},{"ProductID":"2472-11453","Value":"Microsoft .NET Framework 3.5 on Windows 10 Version 1709 for 32-bit Systems"},{"ProductID":"2472-11454","Value":"Microsoft .NET Framework 3.5 on Windows 10 Version 1709 for x64-based Systems"},{"ProductID":"2472-11466","Value":"Microsoft .NET Framework 3.5 on Windows Server, version 1709  (Server Core Installation)"},{"ProductID":"2472-10729","Value":"Microsoft .NET Framework 3.5 on Windows 10 for 32-bit Systems"},{"ProductID":"2472-10735","Value":"Microsoft .NET Framework 3.5 on Windows 10 for x64-based Systems"},{"ProductID":"2472-10852","Value":"Microsoft .NET Framework 3.5 on Windows 10 Version 1607 for 32-bit Systems"},{"ProductID":"2472-10853","Value":"Microsoft .NET Framework 3.5 on Windows 10 Version 1607 for x64-based Systems"},{"ProductID":"2472-10816","Value":"Microsoft .NET Framework 3.5 on Windows Server 2016"},{"ProductID":"2472-10855","Value":"Microsoft .NET Framework 3.5 on Windows Server 2016  (Server Core installation)"},{"ProductID":"2472-10481","Value":"Microsoft .NET Framework 3.5 on Windows 8.1 for 32-bit systems"},{"ProductID":"2472-10482","Value":"Microsoft .NET Framework 3.5 on Windows 8.1 for x64-based systems"},{"ProductID":"2472-10378","Value":"Microsoft .NET Framework 3.5 on Windows Server 2012"},{"ProductID":"2472-10379","Value":"Microsoft .NET Framework 3.5 on Windows Server 2012 (Server Core installation)"},{"ProductID":"2472-10483","Value":"Microsoft .NET Framework 3.5 on Windows Server 2012 R2"},{"ProductID":"2472-10543","Value":"Microsoft .NET Framework 3.5 on Windows Server 2012 R2 (Server Core installation)"},{"ProductID":"9495-10047","Value":"Microsoft .NET Framework 3.5.1 on Windows 7 for 32-bit Systems Service Pack 1"},{"ProductID":"9495-10048","Value":"Microsoft .NET Framework 3.5.1 on Windows 7 for x64-based Systems Service Pack 1"},{"ProductID":"9495-10050","Value":"Microsoft .NET Framework 3.5.1 on Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1"},{"ProductID":"9495-10051","Value":"Microsoft .NET Framework 3.5.1 on Windows Server 2008 R2 for x64-based Systems Service Pack 1"},{"ProductID":"9495-10049","Value":"Microsoft .NET Framework 3.5.1 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)"},{"ProductID":"10636-10047","Value":"Microsoft .NET Framework 4.5.2 on Windows 7 for 32-bit Systems Service Pack 1"},{"ProductID":"10636-10048","Value":"Microsoft .NET Framework 4.5.2 on Windows 7 for x64-based Systems Service Pack 1"},{"ProductID":"10636-10481","Value":"Microsoft .NET Framework 4.5.2 on Windows 8.1 for 32-bit systems"},{"ProductID":"10636-10482","Value":"Microsoft .NET Framework 4.5.2 on Windows 8.1 for x64-based systems"},{"ProductID":"10636-10484","Value":"Microsoft .NET Framework 4.5.2 on Windows RT 8.1"},{"ProductID":"10636-9312","Value":"Microsoft .NET Framework 4.5.2 on Windows Server 2008 for 32-bit Systems Service Pack 2"},{"ProductID":"10636-9318","Value":"Microsoft .NET Framework 4.5.2 on Windows Server 2008 for x64-based Systems Service Pack 2"},{"ProductID":"10636-10051","Value":"Microsoft .NET Framework 4.5.2 on Windows Server 2008 R2 for x64-based Systems Service Pack 1"},{"ProductID":"10636-10049","Value":"Microsoft .NET Framework 4.5.2 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)"},{"ProductID":"10636-10378","Value":"Microsoft .NET Framework 4.5.2 on Windows Server 2012"},{"ProductID":"10636-10379","Value":"Microsoft .NET Framework 4.5.2 on Windows Server 2012 (Server Core installation)"},{"ProductID":"10636-10483","Value":"Microsoft .NET Framework 4.5.2 on Windows Server 2012 R2"},{"ProductID":"10636-10543","Value":"Microsoft .NET Framework 4.5.2 on Windows Server 2012 R2 (Server Core installation)"},{"ProductID":"11529-10047","Value":"Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows 7 for 32-bit Systems Service Pack 1"},{"ProductID":"11529-10048","Value":"Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows 7 for x64-based Systems Service Pack 1"},{"ProductID":"11529-10481","Value":"Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows 8.1 for 32-bit systems"},{"ProductID":"11529-10482","Value":"Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows 8.1 for x64-based systems"},{"ProductID":"11529-10484","Value":"Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows RT 8.1"},{"ProductID":"11529-10051","Value":"Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2008 R2 for x64-based Systems Service Pack 1"},{"ProductID":"11529-10049","Value":"Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)"},{"ProductID":"11529-10378","Value":"Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012"},{"ProductID":"11529-10379","Value":"Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012 (Server Core installation)"},{"ProductID":"11529-10483","Value":"Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012 R2"},{"ProductID":"11529-10543","Value":"Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012 R2 (Server Core installation)"},{"ProductID":"11532-10852","Value":"Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows 10 Version 1607 for 32-bit Systems"},{"ProductID":"11532-10853","Value":"Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows 10 Version 1607 for x64-based Systems"},{"ProductID":"11532-10816","Value":"Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2016"},{"ProductID":"11532-10855","Value":"Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2016  (Server Core installation)"},{"ProductID":"11534-10951","Value":"Microsoft .NET Framework 4.7/4.7.1/4.7.2 on Windows 10 Version 1703 for 32-bit Systems"},{"ProductID":"11534-10952","Value":"Microsoft .NET Framework 4.7/4.7.1/4.7.2 on Windows 10 Version 1703 for x64-based Systems"},{"ProductID":"11535-11453","Value":"Microsoft .NET Framework 4.7.1/4.7.2 on Windows 10 Version 1709 for 32-bit Systems"},{"ProductID":"11535-11454","Value":"Microsoft .NET Framework 4.7.1/4.7.2 on Windows 10 Version 1709 for x64-based Systems"},{"ProductID":"11535-11466","Value":"Microsoft .NET Framework 4.7.1/4.7.2 on Windows Server, version 1709  (Server Core Installation)"},{"ProductID":"11502","Value":"C SDK for Azure IoT"}],"Name":"Developer Tools","Type":1},{"Items":[{"ProductID":"10047","Value":"Windows 7 for 32-bit Systems Service Pack 1"},{"ProductID":"10048","Value":"Windows 7 for x64-based Systems Service Pack 1"},{"ProductID":"9312","Value":"Windows Server 2008 for 32-bit Systems Service Pack 2"},{"ProductID":"10287","Value":"Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)"},{"ProductID":"9311","Value":"Windows Server 2008 for Itanium-Based Systems Service Pack 2"},{"ProductID":"9318","Value":"Windows Server 2008 for x64-based Systems Service Pack 2"},{"ProductID":"9344","Value":"Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)"},{"ProductID":"10050","Value":"Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1"},{"ProductID":"10051","Value":"Windows Server 2008 R2 for x64-based Systems Service Pack 1"},{"ProductID":"10049","Value":"Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)"},{"ProductID":"10336-9312","Value":"Internet Explorer 9 on Windows Server 2008 for 32-bit Systems Service Pack 2"},{"ProductID":"10336-9318","Value":"Internet Explorer 9 on Windows Server 2008 for x64-based Systems Service Pack 2"}],"Name":"ESU","Type":1},{"Items":[{"ProductID":"11447","Value":"ChakraCore"},{"ProductID":"10724-10951","Value":"Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1703 for 32-bit Systems"},{"ProductID":"10724-10952","Value":"Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1703 for x64-based Systems"},{"ProductID":"10724-11497","Value":"Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for 32-bit Systems"},{"ProductID":"10724-11498","Value":"Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for x64-based Systems"},{"ProductID":"10724-11453","Value":"Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1709 for 32-bit Systems"},{"ProductID":"10724-11454","Value":"Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1709 for x64-based Systems"},{"ProductID":"10724-10729","Value":"Microsoft Edge (EdgeHTML-based) on Windows 10 for 32-bit Systems"},{"ProductID":"10724-10735","Value":"Microsoft Edge (EdgeHTML-based) on Windows 10 for x64-based Systems"},{"ProductID":"10724-10852","Value":"Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for 32-bit Systems"},{"ProductID":"10724-10853","Value":"Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for x64-based Systems"},{"ProductID":"10724-10816","Value":"Microsoft Edge (EdgeHTML-based) on Windows Server 2016"},{"ProductID":"10555-10378","Value":"Internet Explorer 10 on Windows Server 2012"},{"ProductID":"10486-10951","Value":"Internet Explorer 11 on Windows 10 Version 1703 for 32-bit Systems"},{"ProductID":"10486-10952","Value":"Internet Explorer 11 on Windows 10 Version 1703 for x64-based Systems"},{"ProductID":"10486-11497","Value":"Internet Explorer 11 on Windows 10 Version 1803 for 32-bit Systems"},{"ProductID":"10486-11498","Value":"Internet Explorer 11 on Windows 10 Version 1803 for x64-based Systems"},{"ProductID":"10486-11453","Value":"Internet Explorer 11 on Windows 10 Version 1709 for 32-bit Systems"},{"ProductID":"10486-11454","Value":"Internet Explorer 11 on Windows 10 Version 1709 for x64-based Systems"},{"ProductID":"10486-10729","Value":"Internet Explorer 11 on Windows 10 for 32-bit Systems"},{"ProductID":"10486-10735","Value":"Internet Explorer 11 on Windows 10 for x64-based Systems"},{"ProductID":"10486-10852","Value":"Internet Explorer 11 on Windows 10 Version 1607 for 32-bit Systems"},{"ProductID":"10486-10853","Value":"Internet Explorer 11 on Windows 10 Version 1607 for x64-based Systems"},{"ProductID":"10486-10816","Value":"Internet Explorer 11 on Windows Server 2016"},{"ProductID":"10486-10047","Value":"Internet Explorer 11 on Windows 7 for 32-bit Systems Service Pack 1"},{"ProductID":"10486-10048","Value":"Internet Explorer 11 on Windows 7 for x64-based Systems Service Pack 1"},{"ProductID":"10486-10481","Value":"Internet Explorer 11 on Windows 8.1 for 32-bit systems"},{"ProductID":"10486-10482","Value":"Internet Explorer 11 on Windows 8.1 for x64-based systems"},{"ProductID":"10486-10484","Value":"Internet Explorer 11 on Windows RT 8.1"},{"ProductID":"10486-10051","Value":"Internet Explorer 11 on Windows Server 2008 R2 for x64-based Systems Service Pack 1"},{"ProductID":"10486-10483","Value":"Internet Explorer 11 on Windows Server 2012 R2"}],"Name":"Browser","Type":1},{"Items":[{"ProductID":"10734","Value":"Microsoft Office 2016 for Mac"},{"ProductID":"10906","Value":"Microsoft Office 2016 Click-to-Run (C2R) for 64-bit editions"},{"ProductID":"10905","Value":"Microsoft Office 2016 Click-to-Run (C2R) for 32-bit editions"},{"ProductID":"10950","Value":"Microsoft SharePoint Enterprise Server 2016"},{"ProductID":"10495","Value":"Microsoft SharePoint Server 2010 Service Pack 2"},{"ProductID":"11099","Value":"Microsoft SharePoint Enterprise Server 2013 Service Pack 1"},{"ProductID":"10739","Value":"Microsoft Excel 2016 (32-bit edition)"},{"ProductID":"10740","Value":"Microsoft Excel 2016 (64-bit edition)"},{"ProductID":"10489","Value":"Microsoft Excel 2010 Service Pack 2 (32-bit editions)"},{"ProductID":"10490","Value":"Microsoft Excel 2010 Service Pack 2 (64-bit editions)"},{"ProductID":"10656","Value":"Microsoft Excel 2013 RT Service Pack 1"},{"ProductID":"10654","Value":"Microsoft Excel 2013 Service Pack 1 (32-bit editions)"},{"ProductID":"10655","Value":"Microsoft Excel 2013 Service Pack 1 (64-bit editions)"},{"ProductID":"10279","Value":"Microsoft Excel Viewer 2007 Service Pack 3"},{"ProductID":"4497","Value":"Microsoft Office Compatibility Pack Service Pack 3"},{"ProductID":"10746","Value":"Microsoft Word 2016 (32-bit edition)"},{"ProductID":"10747","Value":"Microsoft Word 2016 (64-bit edition)"},{"ProductID":"10606","Value":"Microsoft Word 2013 RT Service Pack 1"},{"ProductID":"10604","Value":"Microsoft Word 2013 Service Pack 1 (32-bit editions)"},{"ProductID":"10605","Value":"Microsoft Word 2013 Service Pack 1 (64-bit editions)"},{"ProductID":"10120","Value":"Microsoft SharePoint Server 2010 Service Pack 2"},{"ProductID":"10139","Value":"Microsoft Lync for Mac 2011"}],"Name":"Microsoft Office","Type":1},{"Items":[{"ProductID":"10384-10951","Value":"Adobe Flash Player on Windows 10 Version 1703 for 32-bit Systems"},{"ProductID":"10384-10952","Value":"Adobe Flash Player on Windows 10 Version 1703 for x64-based Systems"},{"ProductID":"10384-11497","Value":"Adobe Flash Player on Windows 10 Version 1803 for 32-bit Systems"},{"ProductID":"10384-11498","Value":"Adobe Flash Player on Windows 10 Version 1803 for x64-based Systems"},{"ProductID":"10384-11453","Value":"Adobe Flash Player on Windows 10 Version 1709 for 32-bit Systems"},{"ProductID":"10384-11454","Value":"Adobe Flash Player on Windows 10 Version 1709 for x64-based Systems"},{"ProductID":"10384-10729","Value":"Adobe Flash Player on Windows 10 for 32-bit Systems"},{"ProductID":"10384-10735","Value":"Adobe Flash Player on Windows 10 for x64-based Systems"},{"ProductID":"10384-10852","Value":"Adobe Flash Player on Windows 10 Version 1607 for 32-bit Systems"},{"ProductID":"10384-10853","Value":"Adobe Flash Player on Windows 10 Version 1607 for x64-based Systems"},{"ProductID":"10384-10816","Value":"Adobe Flash Player on Windows Server 2016"},{"ProductID":"10384-10481","Value":"Adobe Flash Player on Windows 8.1 for 32-bit systems"},{"ProductID":"10384-10482","Value":"Adobe Flash Player on Windows 8.1 for x64-based systems"},{"ProductID":"10384-10484","Value":"Adobe Flash Player on Windows RT 8.1"},{"ProductID":"10384-10378","Value":"Adobe Flash Player on Windows Server 2012"},{"ProductID":"10384-10483","Value":"Adobe Flash Player on Windows Server 2012 R2"}],"Name":"Other","Type":1}],"Name":"Microsoft","Type":0}],"FullProductName":[{"ProductID":"10047","Value":"Windows 7 for 32-bit Systems Service Pack 1"},{"ProductID":"10048","Value":"Windows 7 for x64-based Systems Service Pack 1"},{"ProductID":"10049","Value":"Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)"},{"ProductID":"10050","Value":"Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1"},{"ProductID":"10051","Value":"Windows Server 2008 R2 for x64-based Systems Service Pack 1"},{"ProductID":"10120","Value":"Microsoft SharePoint Server 2010 Service Pack 2"},{"ProductID":"10139","Value":"Microsoft Lync for Mac 2011"},{"ProductID":"10279","Value":"Microsoft Excel Viewer 2007 Service Pack 3"},{"ProductID":"10287","Value":"Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)"},{"ProductID":"10336-9312","Value":"Internet Explorer 9 on Windows Server 2008 for 32-bit Systems Service Pack 2"},{"ProductID":"10336-9318","Value":"Internet Explorer 9 on Windows Server 2008 for x64-based Systems Service Pack 2"},{"ProductID":"10378","Value":"Windows Server 2012"},{"ProductID":"10379","Value":"Windows Server 2012 (Server Core installation)"},{"ProductID":"10384-10378","Value":"Adobe Flash Player on Windows Server 2012"},{"ProductID":"10384-10481","Value":"Adobe Flash Player on Windows 8.1 for 32-bit systems"},{"ProductID":"10384-10482","Value":"Adobe Flash Player on Windows 8.1 for x64-based systems"},{"ProductID":"10384-10483","Value":"Adobe Flash Player on Windows Server 2012 R2"},{"ProductID":"10384-10484","Value":"Adobe Flash Player on Windows RT 8.1"},{"ProductID":"10384-10729","Value":"Adobe Flash Player on Windows 10 for 32-bit Systems"},{"ProductID":"10384-10735","Value":"Adobe Flash Player on Windows 10 for x64-based Systems"},{"ProductID":"10384-10816","Value":"Adobe Flash Player on Windows Server 2016"},{"ProductID":"10384-10852","Value":"Adobe Flash Player on Windows 10 Version 1607 for 32-bit Systems"},{"ProductID":"10384-10853","Value":"Adobe Flash Player on Windows 10 Version 1607 for x64-based Systems"},{"ProductID":"10384-10951","Value":"Adobe Flash Player on Windows 10 Version 1703 for 32-bit Systems"},{"ProductID":"10384-10952","Value":"Adobe Flash Player on Windows 10 Version 1703 for x64-based Systems"},{"ProductID":"10384-11453","Value":"Adobe Flash Player on Windows 10 Version 1709 for 32-bit Systems"},{"ProductID":"10384-11454","Value":"Adobe Flash Player on Windows 10 Version 1709 for x64-based Systems"},{"ProductID":"10384-11497","Value":"Adobe Flash Player on Windows 10 Version 1803 for 32-bit Systems"},{"ProductID":"10384-11498","Value":"Adobe Flash Player on Windows 10 Version 1803 for x64-based Systems"},{"ProductID":"10481","Value":"Windows 8.1 for 32-bit systems"},{"ProductID":"10482","Value":"Windows 8.1 for x64-based systems"},{"ProductID":"10483","Value":"Windows Server 2012 R2"},{"ProductID":"10484","Value":"Windows RT 8.1"},{"ProductID":"10486-10047","Value":"Internet Explorer 11 on Windows 7 for 32-bit Systems Service Pack 1"},{"ProductID":"10486-10048","Value":"Internet Explorer 11 on Windows 7 for x64-based Systems Service Pack 1"},{"ProductID":"10486-10051","Value":"Internet Explorer 11 on Windows Server 2008 R2 for x64-based Systems Service Pack 1"},{"ProductID":"10486-10481","Value":"Internet Explorer 11 on Windows 8.1 for 32-bit systems"},{"ProductID":"10486-10482","Value":"Internet Explorer 11 on Windows 8.1 for x64-based systems"},{"ProductID":"10486-10483","Value":"Internet Explorer 11 on Windows Server 2012 R2"},{"ProductID":"10486-10484","Value":"Internet Explorer 11 on Windows RT 8.1"},{"ProductID":"10486-10729","Value":"Internet Explorer 11 on Windows 10 for 32-bit Systems"},{"ProductID":"10486-10735","Value":"Internet Explorer 11 on Windows 10 for x64-based Systems"},{"ProductID":"10486-10816","Value":"Internet Explorer 11 on Windows Server 2016"},{"ProductID":"10486-10852","Value":"Internet Explorer 11 on Windows 10 Version 1607 for 32-bit Systems"},{"ProductID":"10486-10853","Value":"Internet Explorer 11 on Windows 10 Version 1607 for x64-based Systems"},{"ProductID":"10486-10951","Value":"Internet Explorer 11 on Windows 10 Version 1703 for 32-bit Systems"},{"ProductID":"10486-10952","Value":"Internet Explorer 11 on Windows 10 Version 1703 for x64-based Systems"},{"ProductID":"10486-11453","Value":"Internet Explorer 11 on Windows 10 Version 1709 for 32-bit Systems"},{"ProductID":"10486-11454","Value":"Internet Explorer 11 on Windows 10 Version 1709 for x64-based Systems"},{"ProductID":"10486-11497","Value":"Internet Explorer 11 on Windows 10 Version 1803 for 32-bit Systems"},{"ProductID":"10486-11498","Value":"Internet Explorer 11 on Windows 10 Version 1803 for x64-based Systems"},{"ProductID":"10489","Value":"Microsoft Excel 2010 Service Pack 2 (32-bit editions)"},{"ProductID":"10490","Value":"Microsoft Excel 2010 Service Pack 2 (64-bit editions)"},{"ProductID":"10495","Value":"Microsoft SharePoint Server 2010 Service Pack 2"},{"ProductID":"10543","Value":"Windows Server 2012 R2 (Server Core installation)"},{"ProductID":"10555-10378","Value":"Internet Explorer 10 on Windows Server 2012"},{"ProductID":"10604","Value":"Microsoft Word 2013 Service Pack 1 (32-bit editions)"},{"ProductID":"10605","Value":"Microsoft Word 2013 Service Pack 1 (64-bit editions)"},{"ProductID":"10606","Value":"Microsoft Word 2013 RT Service Pack 1"},{"ProductID":"10636-10047","Value":"Microsoft .NET Framework 4.5.2 on Windows 7 for 32-bit Systems Service Pack 1"},{"ProductID":"10636-10048","Value":"Microsoft .NET Framework 4.5.2 on Windows 7 for x64-based Systems Service Pack 1"},{"ProductID":"10636-10049","Value":"Microsoft .NET Framework 4.5.2 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)"},{"ProductID":"10636-10051","Value":"Microsoft .NET Framework 4.5.2 on Windows Server 2008 R2 for x64-based Systems Service Pack 1"},{"ProductID":"10636-10378","Value":"Microsoft .NET Framework 4.5.2 on Windows Server 2012"},{"ProductID":"10636-10379","Value":"Microsoft .NET Framework 4.5.2 on Windows Server 2012 (Server Core installation)"},{"ProductID":"10636-10481","Value":"Microsoft .NET Framework 4.5.2 on Windows 8.1 for 32-bit systems"},{"ProductID":"10636-10482","Value":"Microsoft .NET Framework 4.5.2 on Windows 8.1 for x64-based systems"},{"ProductID":"10636-10483","Value":"Microsoft .NET Framework 4.5.2 on Windows Server 2012 R2"},{"ProductID":"10636-10484","Value":"Microsoft .NET Framework 4.5.2 on Windows RT 8.1"},{"ProductID":"10636-10543","Value":"Microsoft .NET Framework 4.5.2 on Windows Server 2012 R2 (Server Core installation)"},{"ProductID":"10636-9312","Value":"Microsoft .NET Framework 4.5.2 on Windows Server 2008 for 32-bit Systems Service Pack 2"},{"ProductID":"10636-9318","Value":"Microsoft .NET Framework 4.5.2 on Windows Server 2008 for x64-based Systems Service Pack 2"},{"ProductID":"10654","Value":"Microsoft Excel 2013 Service Pack 1 (32-bit editions)"},{"ProductID":"10655","Value":"Microsoft Excel 2013 Service Pack 1 (64-bit editions)"},{"ProductID":"10656","Value":"Microsoft Excel 2013 RT Service Pack 1"},{"ProductID":"10724-10729","Value":"Microsoft Edge (EdgeHTML-based) on Windows 10 for 32-bit Systems"},{"ProductID":"10724-10735","Value":"Microsoft Edge (EdgeHTML-based) on Windows 10 for x64-based Systems"},{"ProductID":"10724-10816","Value":"Microsoft Edge (EdgeHTML-based) on Windows Server 2016"},{"ProductID":"10724-10852","Value":"Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for 32-bit Systems"},{"ProductID":"10724-10853","Value":"Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for x64-based Systems"},{"ProductID":"10724-10951","Value":"Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1703 for 32-bit Systems"},{"ProductID":"10724-10952","Value":"Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1703 for x64-based Systems"},{"ProductID":"10724-11453","Value":"Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1709 for 32-bit Systems"},{"ProductID":"10724-11454","Value":"Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1709 for x64-based Systems"},{"ProductID":"10724-11497","Value":"Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for 32-bit Systems"},{"ProductID":"10724-11498","Value":"Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for x64-based Systems"},{"ProductID":"10728-9312","Value":"Microsoft .NET Framework 4.6 on Windows Server 2008 for 32-bit Systems Service Pack 2"},{"ProductID":"10728-9318","Value":"Microsoft .NET Framework 4.6 on Windows Server 2008 for x64-based Systems Service Pack 2"},{"ProductID":"10729","Value":"Windows 10 for 32-bit Systems"},{"ProductID":"10734","Value":"Microsoft Office 2016 for Mac"},{"ProductID":"10735","Value":"Windows 10 for x64-based Systems"},{"ProductID":"10739","Value":"Microsoft Excel 2016 (32-bit edition)"},{"ProductID":"10740","Value":"Microsoft Excel 2016 (64-bit edition)"},{"ProductID":"10746","Value":"Microsoft Word 2016 (32-bit edition)"},{"ProductID":"10747","Value":"Microsoft Word 2016 (64-bit edition)"},{"ProductID":"10816","Value":"Windows Server 2016"},{"ProductID":"10852","Value":"Windows 10 Version 1607 for 32-bit Systems"},{"ProductID":"10853","Value":"Windows 10 Version 1607 for x64-based Systems"},{"ProductID":"10855","Value":"Windows Server 2016  (Server Core installation)"},{"ProductID":"10905","Value":"Microsoft Office 2016 Click-to-Run (C2R) for 32-bit editions"},{"ProductID":"10906","Value":"Microsoft Office 2016 Click-to-Run (C2R) for 64-bit editions"},{"ProductID":"10950","Value":"Microsoft SharePoint Enterprise Server 2016"},{"ProductID":"10951","Value":"Windows 10 Version 1703 for 32-bit Systems"},{"ProductID":"10952","Value":"Windows 10 Version 1703 for x64-based Systems"},{"ProductID":"11099","Value":"Microsoft SharePoint Enterprise Server 2013 Service Pack 1"},{"ProductID":"11447","Value":"ChakraCore"},{"ProductID":"11453","Value":"Windows 10 Version 1709 for 32-bit Systems"},{"ProductID":"11454","Value":"Windows 10 Version 1709 for x64-based Systems"},{"ProductID":"11466","Value":"Windows Server, version 1709  (Server Core Installation)"},{"ProductID":"11497","Value":"Windows 10 Version 1803 for 32-bit Systems"},{"ProductID":"11498","Value":"Windows 10 Version 1803 for x64-based Systems"},{"ProductID":"11499","Value":"Windows Server, version 1803  (Server Core Installation)"},{"ProductID":"11502","Value":"C SDK for Azure IoT"},{"ProductID":"11513-11497","Value":"Microsoft .NET Framework 4.7.2 on Windows 10 Version 1803 for 32-bit Systems"},{"ProductID":"11513-11498","Value":"Microsoft .NET Framework 4.7.2 on Windows 10 Version 1803 for x64-based Systems"},{"ProductID":"11513-11499","Value":"Microsoft .NET Framework 4.7.2 on Windows Server, version 1803  (Server Core Installation)"},{"ProductID":"11529-10047","Value":"Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows 7 for 32-bit Systems Service Pack 1"},{"ProductID":"11529-10048","Value":"Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows 7 for x64-based Systems Service Pack 1"},{"ProductID":"11529-10049","Value":"Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)"},{"ProductID":"11529-10051","Value":"Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2008 R2 for x64-based Systems Service Pack 1"},{"ProductID":"11529-10378","Value":"Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012"},{"ProductID":"11529-10379","Value":"Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012 (Server Core installation)"},{"ProductID":"11529-10481","Value":"Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows 8.1 for 32-bit systems"},{"ProductID":"11529-10482","Value":"Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows 8.1 for x64-based systems"},{"ProductID":"11529-10483","Value":"Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012 R2"},{"ProductID":"11529-10484","Value":"Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows RT 8.1"},{"ProductID":"11529-10543","Value":"Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012 R2 (Server Core installation)"},{"ProductID":"11532-10816","Value":"Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2016"},{"ProductID":"11532-10852","Value":"Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows 10 Version 1607 for 32-bit Systems"},{"ProductID":"11532-10853","Value":"Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows 10 Version 1607 for x64-based Systems"},{"ProductID":"11532-10855","Value":"Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2016  (Server Core installation)"},{"ProductID":"11534-10951","Value":"Microsoft .NET Framework 4.7/4.7.1/4.7.2 on Windows 10 Version 1703 for 32-bit Systems"},{"ProductID":"11534-10952","Value":"Microsoft .NET Framework 4.7/4.7.1/4.7.2 on Windows 10 Version 1703 for x64-based Systems"},{"ProductID":"11535-11453","Value":"Microsoft .NET Framework 4.7.1/4.7.2 on Windows 10 Version 1709 for 32-bit Systems"},{"ProductID":"11535-11454","Value":"Microsoft .NET Framework 4.7.1/4.7.2 on Windows 10 Version 1709 for x64-based Systems"},{"ProductID":"11535-11466","Value":"Microsoft .NET Framework 4.7.1/4.7.2 on Windows Server, version 1709  (Server Core Installation)"},{"ProductID":"11562","Value":"Microsoft.Data.OData"},{"ProductID":"11564","Value":"ASP.NET Core 2.1"},{"ProductID":"11565","Value":".NET Core 2.1"},{"ProductID":"11566","Value":"System.IO.Pipelines"},{"ProductID":"11610","Value":"ASP.NET Core 2.2"},{"CPE":"cpe:2.3:a:microsoft:cbl2_zziplib_0.13.69-8:*:*:*:*:*:*:*:*","ProductID":"16954-16823","Value":"cbl2 zziplib 0.13.69-8 on CBL Mariner 2.0"},{"ProductID":"2472-10378","Value":"Microsoft .NET Framework 3.5 on Windows Server 2012"},{"ProductID":"2472-10379","Value":"Microsoft .NET Framework 3.5 on Windows Server 2012 (Server Core installation)"},{"ProductID":"2472-10481","Value":"Microsoft .NET Framework 3.5 on Windows 8.1 for 32-bit systems"},{"ProductID":"2472-10482","Value":"Microsoft .NET Framework 3.5 on Windows 8.1 for x64-based systems"},{"ProductID":"2472-10483","Value":"Microsoft .NET Framework 3.5 on Windows Server 2012 R2"},{"ProductID":"2472-10543","Value":"Microsoft .NET Framework 3.5 on Windows Server 2012 R2 (Server Core installation)"},{"ProductID":"2472-10729","Value":"Microsoft .NET Framework 3.5 on Windows 10 for 32-bit Systems"},{"ProductID":"2472-10735","Value":"Microsoft .NET Framework 3.5 on Windows 10 for x64-based Systems"},{"ProductID":"2472-10816","Value":"Microsoft .NET Framework 3.5 on Windows Server 2016"},{"ProductID":"2472-10852","Value":"Microsoft .NET Framework 3.5 on Windows 10 Version 1607 for 32-bit Systems"},{"ProductID":"2472-10853","Value":"Microsoft .NET Framework 3.5 on Windows 10 Version 1607 for x64-based Systems"},{"ProductID":"2472-10855","Value":"Microsoft .NET Framework 3.5 on Windows Server 2016  (Server Core installation)"},{"ProductID":"2472-10951","Value":"Microsoft .NET Framework 3.5 on Windows 10 Version 1703 for 32-bit Systems"},{"ProductID":"2472-10952","Value":"Microsoft .NET Framework 3.5 on Windows 10 Version 1703 for x64-based Systems"},{"ProductID":"2472-11453","Value":"Microsoft .NET Framework 3.5 on Windows 10 Version 1709 for 32-bit Systems"},{"ProductID":"2472-11454","Value":"Microsoft .NET Framework 3.5 on Windows 10 Version 1709 for x64-based Systems"},{"ProductID":"2472-11466","Value":"Microsoft .NET Framework 3.5 on Windows Server, version 1709  (Server Core Installation)"},{"ProductID":"2472-11497","Value":"Microsoft .NET Framework 3.5 on Windows 10 Version 1803 for 32-bit Systems"},{"ProductID":"2472-11498","Value":"Microsoft .NET Framework 3.5 on Windows 10 Version 1803 for x64-based Systems"},{"ProductID":"2472-11499","Value":"Microsoft .NET Framework 3.5 on Windows Server, version 1803  (Server Core Installation)"},{"ProductID":"4497","Value":"Microsoft Office Compatibility Pack Service Pack 3"},{"ProductID":"9195-9311","Value":"Microsoft .NET Framework 3.0 Service Pack 2 on Windows Server 2008 for Itanium-Based Systems Service Pack 2"},{"ProductID":"9195-9312","Value":"Microsoft .NET Framework 3.0 Service Pack 2 on Windows Server 2008 for 32-bit Systems Service Pack 2"},{"ProductID":"9195-9318","Value":"Microsoft .NET Framework 3.0 Service Pack 2 on Windows Server 2008 for x64-based Systems Service Pack 2"},{"ProductID":"9292-9311","Value":"Microsoft .NET Framework 2.0 Service Pack 2 on Windows Server 2008 for Itanium-Based Systems Service Pack 2"},{"ProductID":"9292-9312","Value":"Microsoft .NET Framework 2.0 Service Pack 2 on Windows Server 2008 for 32-bit Systems Service Pack 2"},{"ProductID":"9292-9318","Value":"Microsoft .NET Framework 2.0 Service Pack 2 on Windows Server 2008 for x64-based Systems Service Pack 2"},{"ProductID":"9311","Value":"Windows Server 2008 for Itanium-Based Systems Service Pack 2"},{"ProductID":"9312","Value":"Windows Server 2008 for 32-bit Systems Service Pack 2"},{"ProductID":"9318","Value":"Windows Server 2008 for x64-based Systems Service Pack 2"},{"ProductID":"9344","Value":"Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)"},{"ProductID":"9495-10047","Value":"Microsoft .NET Framework 3.5.1 on Windows 7 for 32-bit Systems Service Pack 1"},{"ProductID":"9495-10048","Value":"Microsoft .NET Framework 3.5.1 on Windows 7 for x64-based Systems Service Pack 1"},{"ProductID":"9495-10049","Value":"Microsoft .NET Framework 3.5.1 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)"},{"ProductID":"9495-10050","Value":"Microsoft .NET Framework 3.5.1 on Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1"},{"ProductID":"9495-10051","Value":"Microsoft .NET Framework 3.5.1 on Windows Server 2008 R2 for x64-based Systems Service Pack 1"}]},"Vulnerability":[{"Acknowledgments":[],"CVE":"CVE-2018-16548","CVSSScoreSets":[{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["16954-16823"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"}],"CWE":[{"ID":"CWE-772","Value":"Missing Release of Resource after Effective Lifetime"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025.  See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mitre","Type":8,"Value":"mitre"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"0","ProductStatuses":[{"ProductID":["16954-16823"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"0.13.69-8","ProductID":["16954-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["16954-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2021-12-16T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["16954-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["16954-16823"],"Type":3}],"Title":{"Value":"An issue was discovered in ZZIPlib through 0.13.69. There is a memory leak triggered in the function __zzip_parse_root_directory in zip.c which will lead to a denial of service attack."}},{"Acknowledgments":[{"Name":[{"Value":"Microsoft Virtualization Security Team"}],"URL":[""]}],"CVE":"CVE-2018-0965","CVSSScoreSets":[{"BaseScore":7.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10952"],"TemporalScore":6.8,"Vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11466"],"TemporalScore":6.8,"Vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":6.8,"Vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":6.8,"Vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":6.8,"Vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11498"],"TemporalScore":6.8,"Vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11499"],"TemporalScore":6.8,"Vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system. To exploit the vulnerability, an attacker could run a specially crafted application on a guest operating system that could cause the Hyper-V host operating system to execute arbitrary code.</p>\n<p>An attacker who successfully exploited the vulnerability could execute arbitrary code on the host operating system.</p>\n<p>The security update addresses the vulnerability by correcting how Hyper-V validates guest operating system user input.</p>\n"},{"Ordinal":"20","Title":"Windows Hyper-V","Type":7,"Value":"Windows Hyper-V"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"2","ProductStatuses":[{"ProductID":["10952","11466","10853","10816","10855","11498","11499"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457138"},"ProductID":["10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343885","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457138"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457142"},"ProductID":["11466"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343897","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457142"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457131"},"ProductID":["10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343887","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457131"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457128"},"ProductID":["11498","11499"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343909","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457128"}],"RevisionHistory":[{"Date":"2018-09-11T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11466"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11498"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11499"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11466"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11498"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11499"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Windows Hyper-V Remote Code Execution Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"<a href=\"https://www.linkedin.com/in/ericwscott/\">Eric Scott</a>"}],"URL":[""]},{"Name":[{"Value":"Gil Mirmovitch of <a href=\"https://alephsecurity.com\">Aleph Research, HCL Technologies</a>"}],"URL":[""]}],"CVE":"CVE-2018-8269","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A denial of service vulnerability exists when OData Library improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against an OData web application.</p>\n<p>A remote unauthenticated attacker could exploit this vulnerability by issuing specially crafted requests to the OData application.</p>\n<p>The update addresses the vulnerability by correcting how the OData web application handles web requests.</p>\n"},{"Ordinal":"20","Title":"ASP.NET","Type":7,"Value":"ASP.NET"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"3","ProductStatuses":[{"ProductID":["11562","11564","11610"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"ProductID":["11562","11564","11610"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://www.nuget.org/packages/Microsoft.Data.OData/5.8.4"}],"RevisionHistory":[{"Date":"2018-09-11T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2019-09-10T07:00:00Z","Description":{"Value":"<p>Revised the Security Updates table to include ASP.NET Core 2.1 and 2.2 because they are affected by CVE-2018-8269. See (Add link to issue in GitHub) for more information.</p>\n"},"Number":"2.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11562"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11564"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11610"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11562"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11564"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11610"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"OData Denial of Service Vulnerability"}},{"Acknowledgments":[{"Name":[{}],"URL":[""]},{"Name":[{"Value":"<a href=\"https://www.linkedin.com/in/amichaishulman/\">Amichai Shulman</a>\n<a href=\"https://www.linkedin.com/in/talbeery/\">Tal Be'ery</a>"}],"URL":[""]},{"Name":[{"Value":"Ruibo Liu of <a href=\"http://xlab.baidu.com\">Baidu XLab Tianya Team</a>"}],"URL":[""]}],"CVE":"CVE-2018-8271","CVSSScoreSets":[{"BaseScore":2.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10951"],"TemporalScore":2.5,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N"},{"BaseScore":2.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10952"],"TemporalScore":2.5,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N"},{"BaseScore":2.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11497"],"TemporalScore":2.5,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N"},{"BaseScore":2.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11498"],"TemporalScore":2.5,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N"},{"BaseScore":2.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11499"],"TemporalScore":2.5,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N"},{"BaseScore":2.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11453"],"TemporalScore":2.5,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N"},{"BaseScore":2.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11454"],"TemporalScore":2.5,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N"},{"BaseScore":2.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11466"],"TemporalScore":2.5,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N"},{"BaseScore":2.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":2.5,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N"},{"BaseScore":2.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":2.5,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N"},{"BaseScore":2.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10852"],"TemporalScore":2.5,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N"},{"BaseScore":2.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":2.5,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N"},{"BaseScore":2.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":2.5,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N"},{"BaseScore":2.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":2.5,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N"},{"BaseScore":2.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10047"],"TemporalScore":2.5,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N"},{"BaseScore":2.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10048"],"TemporalScore":2.5,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N"},{"BaseScore":2.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10481"],"TemporalScore":2.5,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N"},{"BaseScore":2.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10482"],"TemporalScore":2.5,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N"},{"BaseScore":2.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10484"],"TemporalScore":2.5,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N"},{"BaseScore":2.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9312"],"TemporalScore":2.5,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N"},{"BaseScore":2.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10287"],"TemporalScore":2.5,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N"},{"BaseScore":2.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9311"],"TemporalScore":2.5,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N"},{"BaseScore":2.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9318"],"TemporalScore":2.5,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N"},{"BaseScore":2.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9344"],"TemporalScore":2.5,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N"},{"BaseScore":2.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10050"],"TemporalScore":2.5,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N"},{"BaseScore":2.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10051"],"TemporalScore":2.5,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N"},{"BaseScore":2.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10049"],"TemporalScore":2.5,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N"},{"BaseScore":2.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10378"],"TemporalScore":2.5,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N"},{"BaseScore":2.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10379"],"TemporalScore":2.5,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N"},{"BaseScore":2.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10483"],"TemporalScore":2.5,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N"},{"BaseScore":2.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10543"],"TemporalScore":2.5,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>An information disclosure vulnerability exists in Windows when the Windows bowser.sys kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could potentially disclose contents of System memory.</p>\n<p>To exploit this vulnerability, an attacker would have to log on to the system first and then run a specially crafted application in user mode.</p>\n<p>The security update addresses the vulnerability by correcting how the bowser.sys kernel-mode driver handles objects in memory.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>\n<p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is uninitialized memory.</p>\n"},{"Ordinal":"20","Title":"Microsoft Windows","Type":7,"Value":"Microsoft Windows"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"4","ProductStatuses":[{"ProductID":["10951","10952","11497","11498","11499","11453","11454","11466","10729","10735","10852","10853","10816","10855","10047","10048","10481","10482","10484","9312","10287","9311","9318","9344","10050","10051","10049","10378","10379","10483","10543"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457138"},"ProductID":["10951","10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343885","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457138"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457128"},"ProductID":["11497","11498","11499"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343909","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457128"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457142"},"ProductID":["11453","11454","11466"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343897","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457142"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457132"},"ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343892","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457132"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457131"},"ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343887","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457131"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457144"},"ProductID":["10047","10048","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4343900","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457144"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457145"},"ProductID":["10047","10048","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457145"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457129"},"ProductID":["10481","10482","10484","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4343898","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457129"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457143"},"ProductID":["10481","10482","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457143"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4458010"},"ProductID":["9312","10287","9311","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4458010"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457984"},"ProductID":["9312","10287","9311","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457984"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457135"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4343901","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457135"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457140"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457140"}],"RevisionHistory":[{"Date":"2018-09-11T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11497"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11498"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11499"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11466"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10047"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10048"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10287"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["9311"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["9344"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10050"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11497"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11498"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11499"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11466"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10047"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10048"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10287"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9311"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9344"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10050"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Windows Information Disclosure Vulnerability"}},{"Acknowledgments":[],"CVE":"CVE-2018-8315","CVSSScoreSets":[{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11447"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10951"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10952"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11497"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11498"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11453"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11454"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10729"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10735"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10852"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10853"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10816"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10555-10378"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10951"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10952"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-11497"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-11498"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-11453"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-11454"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10729"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10735"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10852"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10853"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10816"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10047"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10048"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10481"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10482"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10484"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10051"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10483"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>An information disclosure vulnerability exists when the browser scripting engine improperly handle object types.</p>\n<p>An attacker who has successfully exploited this vulnerability might be able to read privileged data across trust boundaries. In browsing scenarios, an attacker could convince a user to visit a malicious site and leverage the vulnerability to obtain privileged information from the browser process,\nsuch as sensitive data from other opened tabs. An attacker could also inject malicious code into advertising networks used by trusted sites or embed malicious code on a compromised, but trusted, site.</p>\n<p>The security update addresses the vulnerability by correcting how the browser scripting engine handles object types.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>\n<p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is uninitialized memory.</p>\n"},{"Ordinal":"20","Title":"Microsoft Scripting Engine","Type":7,"Value":"Microsoft Scripting Engine"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"5","ProductStatuses":[{"ProductID":["11447","10724-10951","10724-10952","10724-11497","10724-11498","10724-11453","10724-11454","10724-10729","10724-10735","10724-10852","10724-10853","10724-10816","10555-10378","10486-10951","10486-10952","10486-11497","10486-11498","10486-11453","10486-11454","10486-10729","10486-10735","10486-10852","10486-10853","10486-10816","10486-10047","10486-10048","10486-10481","10486-10482","10486-10484","10486-10051","10486-10483"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Commit"},"ProductID":["11447"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://github.com/Microsoft/ChakraCore/releases/tag/v1.11.1"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457138"},"ProductID":["10724-10951","10724-10952","10486-10951","10486-10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343885","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457138"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457128"},"ProductID":["10724-11497","10724-11498","10486-11497","10486-11498"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343909","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457128"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457142"},"ProductID":["10724-11453","10724-11454","10486-11453","10486-11454"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343897","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457142"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457132"},"ProductID":["10724-10729","10724-10735","10486-10729","10486-10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343892","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457132"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457131"},"ProductID":["10724-10852","10724-10853","10724-10816","10486-10852","10486-10853","10486-10816"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343887","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457131"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457135"},"ProductID":["10555-10378"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4343901","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457135"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457426"},"ProductID":["10555-10378","10486-10047","10486-10048","10486-10481","10486-10482","10486-10051","10486-10483"],"RestartRequired":{"Value":"Yes"},"SubType":"IE Cumulative","Supercedence":"4343205","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457426"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457144"},"ProductID":["10486-10047","10486-10048","10486-10051"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4343900","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457144"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457129"},"ProductID":["10486-10481","10486-10482","10486-10484","10486-10483"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4343898","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457129"}],"RevisionHistory":[{"Date":"2018-09-11T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11447"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10724-10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10724-10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10724-11497"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10724-11498"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10724-11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10724-11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10724-10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10724-10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10724-10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10724-10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10724-10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10555-10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-11497"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-11498"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-10047"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-10048"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11447"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-11497"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-11498"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Low"},"ProductID":["10724-10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Low"},"ProductID":["10555-10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-11497"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-11498"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Low"},"ProductID":["10486-10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10047"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10048"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Low"},"ProductID":["10486-10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Low"},"ProductID":["10486-10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:N/A;DOS:N/A"},"Type":1}],"Title":{"Value":"Microsoft Scripting Engine Information Disclosure Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"<a href=\"https://twitter.com/zer0mem\">Peter Hlavaty @zer0mem</a> of <a href=\"https://keenlab.tencent.com/en/\">keenlab at tencent</a>​"}],"URL":[""]}],"CVE":"CVE-2018-8335","CVSSScoreSets":[{"BaseScore":4.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10951"],"TemporalScore":4.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H"},{"BaseScore":4.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10952"],"TemporalScore":4.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H"},{"BaseScore":4.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11497"],"TemporalScore":4.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H"},{"BaseScore":4.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11498"],"TemporalScore":4.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H"},{"BaseScore":4.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11499"],"TemporalScore":4.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H"},{"BaseScore":4.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11453"],"TemporalScore":4.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H"},{"BaseScore":4.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11454"],"TemporalScore":4.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H"},{"BaseScore":4.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11466"],"TemporalScore":4.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H"},{"BaseScore":4.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":4.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H"},{"BaseScore":4.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":4.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H"},{"BaseScore":4.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10852"],"TemporalScore":4.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H"},{"BaseScore":4.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":4.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H"},{"BaseScore":4.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":4.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H"},{"BaseScore":4.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":4.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H"},{"BaseScore":4.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10481"],"TemporalScore":4.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H"},{"BaseScore":4.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10482"],"TemporalScore":4.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H"},{"BaseScore":4.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10484"],"TemporalScore":4.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H"},{"BaseScore":4.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10378"],"TemporalScore":4.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H"},{"BaseScore":4.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10379"],"TemporalScore":4.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H"},{"BaseScore":4.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10483"],"TemporalScore":4.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H"},{"BaseScore":4.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10543"],"TemporalScore":4.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A denial of service vulnerability exists in the Microsoft Server Block Message (SMB) when an attacker sends specially crafted requests to the server. An attacker who exploited this vulnerability could cause the affected system to crash. To attempt to exploit this issue, an attacker would need to send specially crafted SMB requests to the target system.</p>\n<p>Note that the denial of service vulnerability would not allow an attacker to execute code or to elevate their user rights, but it could cause the affected system to stop accepting requests.</p>\n<p>The security update addresses the vulnerability by correcting the manner in which SMB handles specially crafted client requests.</p>\n"},{"Ordinal":"20","Title":"Windows SMB Server","Type":7,"Value":"Windows SMB Server"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"8","ProductStatuses":[{"ProductID":["10951","10952","11497","11498","11499","11453","11454","11466","10729","10735","10852","10853","10816","10855","10481","10482","10484","10378","10379","10483","10543"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457138"},"ProductID":["10951","10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343885","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457138"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457128"},"ProductID":["11497","11498","11499"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343909","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457128"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457142"},"ProductID":["11453","11454","11466"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343897","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457142"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457132"},"ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343892","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457132"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457131"},"ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343887","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457131"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457129"},"ProductID":["10481","10482","10484","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4343898","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457129"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457143"},"ProductID":["10481","10482","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457143"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457135"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4343901","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457135"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457140"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457140"}],"RevisionHistory":[{"Date":"2018-09-11T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11497"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11498"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11499"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11466"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11497"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11498"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11499"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11466"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Windows SMB Denial of Service Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Haikuo Xie of Baidu Security Lab working with Trend Micro's Zero Day Initiative"}],"URL":[""]}],"CVE":"CVE-2018-8336","CVSSScoreSets":[{"BaseScore":2.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10047"],"TemporalScore":2.5,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N"},{"BaseScore":2.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10048"],"TemporalScore":2.5,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N"},{"BaseScore":2.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9312"],"TemporalScore":2.5,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N"},{"BaseScore":2.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10287"],"TemporalScore":2.5,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N"},{"BaseScore":2.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9311"],"TemporalScore":2.5,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N"},{"BaseScore":2.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9318"],"TemporalScore":2.5,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N"},{"BaseScore":2.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9344"],"TemporalScore":2.5,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N"},{"BaseScore":2.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10050"],"TemporalScore":2.5,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N"},{"BaseScore":2.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10051"],"TemporalScore":2.5,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N"},{"BaseScore":2.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10049"],"TemporalScore":2.5,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system.</p>\n<p>To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application. The vulnerability would not allow an attacker to execute code or to elevate user rights directly, but it could be used to obtain information that could be used to try to further compromise the affected system.</p>\n<p>The update addresses the vulnerability by correcting how the Windows kernel handles objects in memory.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>\n<p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is\tKernel memory read - unintentional read access to memory contents in kernel space from a user mode process.</p>\n"},{"Ordinal":"20","Title":"Windows Kernel","Type":7,"Value":"Windows Kernel"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"9","ProductStatuses":[{"ProductID":["10047","10048","9312","10287","9311","9318","9344","10050","10051","10049"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457144"},"ProductID":["10047","10048","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4343900","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457144"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457145"},"ProductID":["10047","10048","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457145"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4458010"},"ProductID":["9312","10287","9311","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4458010"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457984"},"ProductID":["9312","10287","9311","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457984"}],"RevisionHistory":[{"Date":"2018-09-11T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10047"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10048"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10287"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["9311"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["9344"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10050"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10047"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10048"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10287"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9311"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9344"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10050"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A;Older Software Release:Exploitation Less Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Windows Kernel Information Disclosure Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"<a href=\"https://twitter.com/S0rryMybad\">Qixun Zhao</a> of <a href=\"http://www.360.com/\">Qihoo 360 Vulcan Team</a> "}],"URL":[""]},{"Name":[{"Value":"Ryoyichi working with <a href=\"http://www.zerodayinitiative.com/\">Trend Micro's Zero Day Initiative</a>"}],"URL":[""]},{"Name":[{"Value":"Yuki Chen of <a href=\"http://www.360.com/\">Qihoo 360 Vulcan Team</a>"}],"URL":[""]}],"CVE":"CVE-2018-8367","CVSSScoreSets":[{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11447"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10951"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10952"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11497"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11498"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11453"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11454"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10729"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10735"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10852"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10853"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10816"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based). The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>\n<p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft Edge (HTML-based) and then convince a user to view the website. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p>\n<p>The security update addresses the vulnerability by modifying how the Chakra scripting engine handles objects in memory.</p>\n"},{"Ordinal":"20","Title":"Microsoft Scripting Engine","Type":7,"Value":"Microsoft Scripting Engine"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"13","ProductStatuses":[{"ProductID":["11447","10724-10951","10724-10952","10724-11497","10724-11498","10724-11453","10724-11454","10724-10729","10724-10735","10724-10852","10724-10853","10724-10816"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Commit"},"ProductID":["11447"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://github.com/Microsoft/ChakraCore/releases/tag/v1.10.2"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457138"},"ProductID":["10724-10951","10724-10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343885","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457138"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457128"},"ProductID":["10724-11497","10724-11498"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343909","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457128"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457142"},"ProductID":["10724-11453","10724-11454"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343897","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457142"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457132"},"ProductID":["10724-10729","10724-10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343892","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457132"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457131"},"ProductID":["10724-10852","10724-10853","10724-10816"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343887","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457131"}],"RevisionHistory":[{"Date":"2018-09-11T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11447"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11497"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11498"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11447"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11497"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11498"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10724-10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A;DOS:N/A"},"Type":1}],"Title":{"Value":"Chakra Scripting Engine Memory Corruption Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"James Forshaw of <a href=\"http://www.google.com/\" >Google Project Zero</a>"}],"URL":[""]},{"Name":[{"Value":"<a href=\"https://www.linkedin.com/in/mauroleg/\">Mauro Leggieri</a> of <a href=\"https://www.trapmine.com\">TRAPMINE Inc. </a>​"}],"URL":[""]}],"CVE":"CVE-2018-8410","CVSSScoreSets":[{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10951"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10952"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11497"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11498"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11499"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11453"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11454"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10852"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10047"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10048"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10481"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10482"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10484"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10050"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10051"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10049"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10378"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10379"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10483"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10543"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11466"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>An elevation of privilege vulnerability exists when the Windows Kernel API improperly handles registry objects in memory. An attacker who successfully exploited the vulnerability could gain elevated privileges on a targeted system.</p>\n<p>A locally authenticated attacker could exploit this vulnerability by running a specially crafted application.</p>\n<p>The security update addresses the vulnerability by helping to ensure that the Windows Kernel API properly handles objects in memory.</p>\n"},{"Ordinal":"20","Title":"Microsoft Windows","Type":7,"Value":"Microsoft Windows"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"18","ProductStatuses":[{"ProductID":["10951","10952","11497","11498","11499","11453","11454","10729","10735","10852","10853","10816","10855","10047","10048","10481","10482","10484","10050","10051","10049","10378","10379","10483","10543","11466"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457138"},"ProductID":["10951","10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343885","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457138"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457128"},"ProductID":["11497","11498","11499"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343909","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457128"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457142"},"ProductID":["11453","11454","11466"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343897","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457142"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457132"},"ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343892","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457132"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457131"},"ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343887","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457131"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457144"},"ProductID":["10047","10048","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4343900","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457144"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457145"},"ProductID":["10047","10048","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457145"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457129"},"ProductID":["10481","10482","10484","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4343898","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457129"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457143"},"ProductID":["10481","10482","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457143"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457135"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4343901","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457135"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457140"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457140"}],"RevisionHistory":[{"Date":"2018-09-11T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2018-10-04T07:00:00Z","Description":{"Value":"<p>Added Windows Server, version 1709 (Server Core Installation) to the table. This is an informational change only.</p>\n"},"Number":"1.1"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11497"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11498"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11499"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10047"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10048"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10050"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11466"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11497"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11498"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11499"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10047"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10048"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10050"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11466"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Windows Registry Elevation of Privilege Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Tanghui Chen of <a href=\"http://xlab.baidu.com\">Baidu XLab Tianya Team</a>"}],"URL":[""]}],"CVE":"CVE-2018-8419","CVSSScoreSets":[{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10484"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10481"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9312"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10852"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10952"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10951"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10482"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10287"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9311"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9318"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9344"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10483"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10379"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10378"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10543"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10047"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11497"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11498"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10048"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10050"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10051"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10049"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11466"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11499"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system.</p>\n<p>To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application.</p>\n<p>The security update addresses the vulnerability by correcting how the Windows kernel initializes memory.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>\n<p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is uninitialized memory.</p>\n"},{"Ordinal":"20","Title":"Windows Media","Type":7,"Value":"Windows Media"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"19","ProductStatuses":[{"ProductID":["10484","10481","10735","9312","10852","10816","10952","10855","10951","10853","10729","10482","10287","9311","9318","9344","10483","10379","10378","10543","10047","11497","11498","10048","10050","10051","10049","11466","11499"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457129"},"ProductID":["10484","10481","10482","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4343898","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457143"},"ProductID":["10481","10482","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457143"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457132"},"ProductID":["10735","10729"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343892","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457132"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4458010"},"ProductID":["9312","10287","9311","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4458010"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457984"},"ProductID":["9312","10287","9311","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457984"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457131"},"ProductID":["10852","10816","10855","10853"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343887","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457131"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457138"},"ProductID":["10952","10951"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343885","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457138"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457135"},"ProductID":["10379","10378"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4343901","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457135"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457140"},"ProductID":["10379","10378"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457140"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457144"},"ProductID":["10047","10048","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4343900","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457144"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457145"},"ProductID":["10047","10048","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457145"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457128"},"ProductID":["11497","11498","11499"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343909","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457128"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457142"},"ProductID":["11466"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343897","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457142"}],"RevisionHistory":[{"Date":"2018-09-11T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10287"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["9311"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["9344"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10047"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11497"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11498"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10048"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10050"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11466"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11499"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10287"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9311"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9344"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10047"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11497"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11498"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10048"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10050"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11466"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11499"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Windows Kernel Information Disclosure Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Juha-Matti Tilli of <a href=\"http://comnet.aalto.fi/\">Aalto University Department of Communications and Networking</a><br>\n\nIlkka Sovanto of <a href=\"https://www.viestintavirasto.fi/en/cybersecurity/ficorasinformationsecurityservices/vulnerabilitycoordination.html\">NCSC-FI</a>"}],"URL":[""]}],"CVE":"ADV180022","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>Microsoft is aware of a denial of service vulnerability (named &quot;FragmentSmack&quot; CVE-2018-5391) affecting Windows systems. An attacker could send many 8-byte sized IP fragments with random starting offsets, but withhold the last fragment and exploit the worst-case complexity of linked lists in reassembling IP fragments. A system under attack would become unresponsive with 100% CPU utilization but would recover as soon as the attack terminated.</p>\n<h1>Recommended actions</h1>\n<p>To protect your system from this vulnerability, Microsoft recommends that you take the following actions:</p>\n<ol>\n<li>Register for security notifications mailer to be alerted of content changes to this advisory.  See <a href=\"https://technet.microsoft.com/en-us/security/dd252948.aspx\">Microsoft Technical Security Notifications</a>.</li>\n<li>Test and apply security updates. See the <strong>Affected Products</strong> table to download and install the updates.</li>\n<li>If you cannot apply the security updates immediately, you can apply the workaround described in <strong>FAQ #1</strong>.</li>\n</ol>\n<h1>FAQ</h1>\n<p><strong>1. What workaround(s) exist for this vulnerability?</strong></p>\n<p>The following commands disable packet reassembly. Any out-of-order packets are dropped. There is a potential for packet loss when discarding out-of-order packets. Valid scenarios should not exceed more than 50 out-of-order fragments.</p>\n<p>We recommend testing prior to updating production systems.</p>\n<pre><code>\nNetsh int ipv4 set global reassemblylimit=0\nNetsh int ipv6 set global reassemblylimit=0\n\n</code></pre>\n<p>Further netsh guidance can be found at <a href=\"https://docs.microsoft.com/en-us/windows-server/administration/windows-commands/netsh\">netsh</a>.</p>\n<p><strong>2. Is Azure affected?</strong></p>\n<p>Azure fabric layer protections mitigate this vulnerability. This is blocked before traffic reaches Azure VMs.</p>\n<p><strong>3. What can I do at the perimeter to block this attack?</strong></p>\n<p>Review the perimeter device guidance and modify reassembly packet limits similar to the commands listed in <strong>FAQ #1</strong>.</p>\n"},{"Ordinal":"20","Title":"Microsoft Windows","Type":7,"Value":"Microsoft Windows"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"0","ProductStatuses":[{"ProductID":["10951","10952","11497","11498","11499","11453","11454","11466","10729","10735","10852","10853","10816","10855","10047","10048","10481","10482","10484","9312","10287","9311","9318","9344","10050","10051","10049","10378","10379","10483","10543"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457138"},"ProductID":["10951","10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343885","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457138"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457128"},"ProductID":["11497","11498","11499"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343909","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457128"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457142"},"ProductID":["11453","11454","11466"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343897","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457142"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457132"},"ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343892","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457132"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457131"},"ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343887","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457131"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457144"},"ProductID":["10047","10048","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4343900","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457144"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457145"},"ProductID":["10047","10048","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457145"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457129"},"ProductID":["10481","10482","10484","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4343898","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457129"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457143"},"ProductID":["10481","10482","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457143"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4458010"},"ProductID":["9312","10287","9311","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4458010"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457984"},"ProductID":["9312","10287","9311","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457984"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457135"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4343901","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457135"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457140"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457140"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"<p>Refer to <strong>FAQ #1</strong> for the Workaround for this vulnerability.</p>\n"},"Type":0}],"RevisionHistory":[{"Date":"2018-09-11T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2018-09-12T07:00:00Z","Description":{"Value":"<p>Removed FAQ #3 regarding when the security updates would be available for this vulnerability. The security updates were released on September 9, 2018 at the same time the advisory was published; therefore, the FAQ is not applicable. This is an informational change only.</p>\n"},"Number":"1.1"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11497"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11498"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11499"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11466"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10047"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10048"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10287"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["9311"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["9344"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10050"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11497"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11498"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11499"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11466"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10047"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10048"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10287"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9311"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9344"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10050"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Windows Denial of Service Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Simon Zuckerbraun working with <a href=\"http://www.zerodayinitiative.com/\">Trend Micro's Zero Day Initiative</a>"}],"URL":[""]}],"CVE":"CVE-2018-8420","CVSSScoreSets":[{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9344"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11454"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11466"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11453"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10482"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10484"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10481"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10483"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10543"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11497"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11498"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11499"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10852"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10951"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10952"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10047"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10048"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10050"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10049"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10379"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10051"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10378"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9312"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9318"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10287"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9311"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input. An attacker who successfully exploited the vulnerability could run malicious code remotely to take control of the user’s system.</p>\n<p>To exploit the vulnerability, an attacker could host a specially crafted website designed to invoke MSXML through a web browser. However, an attacker would have no way to force a user to visit such a website. Instead, an attacker would typically have to convince a user to either click a link in an email message or instant message that would then take the user to the website. When Internet Explorer parses the XML content, an attacker could run malicious code remotely to take control of the user’s system.</p>\n<p>The update addresses the vulnerability by correcting how the MSXML parser processes user input.</p>\n"},{"Ordinal":"20","Title":"Microsoft XML Core Services","Type":7,"Value":"Microsoft XML Core Services"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"20","ProductStatuses":[{"ProductID":["10729","9344","10735","11454","11466","11453","10482","10484","10481","10483","10543","11497","11498","11499","10852","10853","10855","10816","10951","10952","10047","10048","10050","10049","10379","10051","10378","9312","9318","10287","9311"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457132"},"ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343892","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457132"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4458010"},"ProductID":["9344","9312","9318","10287","9311"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4458010"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457984"},"ProductID":["9344","9312","9318","10287","9311"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457984"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457142"},"ProductID":["11454","11466","11453"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343897","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457142"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457129"},"ProductID":["10482","10484","10481","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4343898","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457129"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457143"},"ProductID":["10482","10481","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457143"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457128"},"ProductID":["11497","11498","11499"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343909","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457128"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457131"},"ProductID":["10852","10853","10855","10816"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343887","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457131"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457138"},"ProductID":["10951","10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343885","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457138"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457144"},"ProductID":["10047","10048","10050","10049","10051"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4343900","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457144"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457145"},"ProductID":["10047","10048","10050","10049","10051"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457145"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457135"},"ProductID":["10379","10378"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4343901","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457135"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457140"},"ProductID":["10379","10378"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457140"}],"RevisionHistory":[{"Date":"2018-09-11T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9344"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11466"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11497"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11498"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11499"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10047"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10048"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10050"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10287"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9311"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["9344"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11466"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11497"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11498"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11499"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10047"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10048"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10050"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10287"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["9311"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"MS XML Remote Code Execution Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Vladislav Stolyarov of <a href=\"https://www.kaspersky.com/\">Kaspersky Lab</a>"}],"URL":[""]}],"CVE":"CVE-2018-8422","CVSSScoreSets":[{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10047"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10048"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10050"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10051"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10049"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.</p>\n<p>There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document, or by convincing a user to visit an untrusted webpage.</p>\n<p>The security update addresses the vulnerability by correcting how the Windows GDI component handles objects in memory.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>\n<p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is memory layout - the vulnerability allows an attacker to collect information that facilitates predicting addressing of the memory.</p>\n"},{"Ordinal":"20","Title":"Microsoft Graphics Component","Type":7,"Value":"Microsoft Graphics Component"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"22","ProductStatuses":[{"ProductID":["10047","10048","10050","10051","10049"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457144"},"ProductID":["10047","10048","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4343900","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457144"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457145"},"ProductID":["10047","10048","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457145"}],"RevisionHistory":[{"Date":"2018-09-11T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10047"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10048"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10050"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10047"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10048"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10050"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Windows GDI Information Disclosure Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"willJ working with <a href=\"http://www.zerodayinitiative.com/\">Trend Micro's Zero Day Initiative</a>"}],"URL":[""]}],"CVE":"CVE-2018-8424","CVSSScoreSets":[{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10951"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10952"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11497"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11498"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11499"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11453"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11454"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11466"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10852"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10047"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10048"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10481"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10482"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10484"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9312"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10287"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9311"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9318"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9344"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10050"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10051"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10049"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10378"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10379"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10483"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10543"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.</p>\n<p>There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document, or by convincing a user to visit an untrusted webpage.</p>\n<p>The security update addresses the vulnerability by correcting how the Windows GDI component handles objects in memory.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>\n<p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is memory layout - the vulnerability allows an attacker to collect information that facilitates predicting addressing of the memory.</p>\n"},{"Ordinal":"20","Title":"Microsoft Graphics Component","Type":7,"Value":"Microsoft Graphics Component"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"23","ProductStatuses":[{"ProductID":["10951","10952","11497","11498","11499","11453","11454","11466","10729","10735","10852","10853","10816","10855","10047","10048","10481","10482","10484","9312","10287","9311","9318","9344","10050","10051","10049","10378","10379","10483","10543"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457138"},"ProductID":["10951","10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343885","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457138"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457128"},"ProductID":["11497","11498","11499"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343909","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457128"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457142"},"ProductID":["11453","11454","11466"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343897","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457142"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457132"},"ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343892","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457132"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457131"},"ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343887","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457131"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457144"},"ProductID":["10047","10048","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4343900","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457144"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457145"},"ProductID":["10047","10048","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457145"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457129"},"ProductID":["10481","10482","10484","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4343898","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457129"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457143"},"ProductID":["10481","10482","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457143"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4458010"},"ProductID":["9312","10287","9311","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4458010"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457984"},"ProductID":["9312","10287","9311","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457984"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457135"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4343901","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457135"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457140"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457140"}],"RevisionHistory":[{"Date":"2018-09-11T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11497"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11498"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11499"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11466"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10047"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10048"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10287"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["9311"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["9344"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10050"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11497"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11498"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11499"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11466"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10047"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10048"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10287"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9311"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9344"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10050"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Windows GDI Information Disclosure Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"<a href=\"https://www.linkedin.com/in/jonathan-birch-ab27681/\">Jonathan Birch</a> of Microsoft Corporation"}],"URL":[""]}],"CVE":"CVE-2018-8425","CVSSScoreSets":[{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10951"],"TemporalScore":5.3,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10952"],"TemporalScore":5.3,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11497"],"TemporalScore":5.3,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11498"],"TemporalScore":5.3,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11453"],"TemporalScore":5.3,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11454"],"TemporalScore":5.3,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10729"],"TemporalScore":5.3,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10735"],"TemporalScore":5.3,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10852"],"TemporalScore":5.3,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10853"],"TemporalScore":5.3,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10816"],"TemporalScore":5.3,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A spoofing vulnerability exists when Microsoft Edge improperly handles specific HTML content. An attacker who successfully exploited this vulnerability could trick a user into believing that the user was on a legitimate website. The specially crafted website could either spoof content or serve as a pivot to chain an attack with other vulnerabilities in web services.</p>\n<p>To exploit the vulnerability, the user must either browse to a malicious website or be redirected to it. In an email attack scenario, an attacker could send an email message in an attempt to convince the user to click a link to a malicious site.</p>\n<p>In a web-based attack scenario, an attacker could host a specially crafted website designed to appear as a legitimate website to the user. However, the attacker would have no way to force the user to visit the specially crafted website. The attacker would have to convince the user to visit the specially crafted website, typically by way of enticement in an email or instant message.</p>\n<p>The security update addresses the vulnerability by correcting how Microsoft Edge handles specific HTML content.</p>\n"},{"Ordinal":"20","Title":"Microsoft Edge (HTML-based)","Type":7,"Value":"Microsoft Edge (HTML-based)"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"24","ProductStatuses":[{"ProductID":["10724-10951","10724-10952","10724-11497","10724-11498","10724-11453","10724-11454","10724-10729","10724-10735","10724-10852","10724-10853","10724-10816"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457138"},"ProductID":["10724-10951","10724-10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343885","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457138"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457128"},"ProductID":["10724-11497","10724-11498"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343909","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457128"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457142"},"ProductID":["10724-11453","10724-11454"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343897","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457142"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457132"},"ProductID":["10724-10729","10724-10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343892","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457132"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457131"},"ProductID":["10724-10852","10724-10853","10724-10816"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343887","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457131"}],"RevisionHistory":[{"Date":"2018-09-11T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["10724-10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["10724-10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["10724-11497"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["10724-11498"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["10724-11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["10724-11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["10724-10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["10724-10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["10724-10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["10724-10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["10724-10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-11497"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-11498"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Low"},"ProductID":["10724-10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A;DOS:N/A"},"Type":1}],"Title":{"Value":"Microsoft Edge Spoofing Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Behzad Najjarpour Jabbari, <a href=\"https://www.flexera.com/company/secunia-research/\">Secunia Research at Flexera</a>"}],"URL":[""]}],"CVE":"CVE-2018-8433","CVSSScoreSets":[{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10951"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10952"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11497"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11498"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11499"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11453"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11454"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11466"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10852"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10047"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10048"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10481"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10482"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10484"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9312"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10287"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9311"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9318"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9344"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10050"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10051"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10049"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10378"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10379"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10483"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10543"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>An information disclosure vulnerability exists when the Windows Graphics component improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system.</p>\n<p>An authenticated attacker could exploit this vulnerability by running a specially crafted application.</p>\n<p>The update addresses the vulnerability by correcting how the Windows Graphics Component handles objects in memory.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>\n<p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is memory layout - the vulnerability allows an attacker to collect information that facilitates predicting addressing of the memory.</p>\n"},{"Ordinal":"20","Title":"Microsoft Graphics Component","Type":7,"Value":"Microsoft Graphics Component"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"30","ProductStatuses":[{"ProductID":["10951","10952","11497","11498","11499","11453","11454","11466","10729","10735","10852","10853","10816","10855","10047","10048","10481","10482","10484","9312","10287","9311","9318","9344","10050","10051","10049","10378","10379","10483","10543"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457138"},"ProductID":["10951","10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343885","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457138"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457128"},"ProductID":["11497","11498","11499"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343909","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457128"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457142"},"ProductID":["11453","11454","11466"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343897","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457142"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457132"},"ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343892","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457132"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457131"},"ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343887","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457131"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457144"},"ProductID":["10047","10048","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4343900","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457144"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457145"},"ProductID":["10047","10048","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457145"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457129"},"ProductID":["10481","10482","10484","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4343898","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457129"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457143"},"ProductID":["10481","10482","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457143"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4458010"},"ProductID":["9312","10287","9311","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4458010"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457984"},"ProductID":["9312","10287","9311","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457984"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457135"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4343901","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457135"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457140"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457140"}],"RevisionHistory":[{"Date":"2018-09-11T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11497"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11498"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11499"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11466"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10047"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10048"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10287"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["9311"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["9344"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10050"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11497"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11498"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11499"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11466"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10047"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10048"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10287"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9311"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9344"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10050"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Microsoft Graphics Component Information Disclosure Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"ca0nguyen working with <a href=\"http://www.zerodayinitiative.com/\">Trend Micro's Zero Day Initiative</a>"}],"URL":[""]}],"CVE":"CVE-2018-8461","CVSSScoreSets":[{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-11453"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-11497"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-11498"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-11454"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, the attacker could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>\n<p>An attacker could host a specially crafted website designed to exploit the vulnerability through Internet Explorer and then convince a user to view the website. The attacker could also take advantage of compromised websites, or websites that accept or host user-provided content or advertisements, by adding specially crafted content that could exploit the vulnerability. However, in all cases an attacker would have no way to force a user to view the attacker-controlled content. Instead, an attacker would have to convince a user to take action, typically by an enticement in an email or instant message, or by getting the user to open an attachment sent through email.</p>\n<p>The security update addresses the vulnerability by modifying how Internet Explorer handles objects in memory.</p>\n"},{"Ordinal":"20","Title":"Internet Explorer","Type":7,"Value":"Internet Explorer"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"51","ProductStatuses":[{"ProductID":["10486-11453","10486-11497","10486-11498","10486-11454"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457142"},"ProductID":["10486-11453","10486-11454"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343897","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457142"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457128"},"ProductID":["10486-11497","10486-11498"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343909","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457128"}],"RevisionHistory":[{"Date":"2018-09-11T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-11497"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-11498"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-11497"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-11498"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Internet Explorer Memory Corruption Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"ChenNan and RanchoIce of Tencent ZhanluLab working with <a href=\"http://www.zerodayinitiative.com/\">Trend Micro's Zero Day Initiative</a>"}],"URL":[""]},{"Name":[{"Value":"<a href=\"https://www.cse-cst.gc.ca/\">Communications Security Establishment</a>"}],"URL":[""]}],"CVE":"CVE-2018-8462","CVSSScoreSets":[{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10951"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10952"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11497"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11498"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11499"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11453"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11454"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11466"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10852"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run processes in an elevated context.</p>\n<p>To exploit the vulnerability, an attacker would first have to log on to the system, and then run a specially crafted application to take control over the affected system.</p>\n<p>The security update addresses the vulnerability by correcting how DXGKRNL handles objects in memory.</p>\n"},{"Ordinal":"20","Title":"Microsoft Graphics Component","Type":7,"Value":"Microsoft Graphics Component"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"52","ProductStatuses":[{"ProductID":["10951","10952","11497","11498","11499","11453","11454","11466","10729","10735","10852","10853","10816","10855"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457138"},"ProductID":["10951","10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343885","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457138"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457128"},"ProductID":["11497","11498","11499"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343909","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457128"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457142"},"ProductID":["11453","11454","11466"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343897","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457142"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457132"},"ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343892","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457132"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457131"},"ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343887","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457131"}],"RevisionHistory":[{"Date":"2018-09-11T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11497"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11498"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11499"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11466"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11497"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11498"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11499"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11466"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"DirectX Graphics Kernel Elevation of Privilege Vulnerability"}},{"Acknowledgments":[],"CVE":"CVE-2018-8475","CVSSScoreSets":[{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10951"],"TemporalScore":7.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10952"],"TemporalScore":7.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11497"],"TemporalScore":7.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11498"],"TemporalScore":7.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11499"],"TemporalScore":7.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11453"],"TemporalScore":7.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11454"],"TemporalScore":7.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11466"],"TemporalScore":7.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":7.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":7.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10852"],"TemporalScore":7.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":7.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":7.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":7.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10047"],"TemporalScore":7.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10048"],"TemporalScore":7.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10481"],"TemporalScore":7.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10482"],"TemporalScore":7.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10484"],"TemporalScore":7.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9312"],"TemporalScore":7.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10287"],"TemporalScore":7.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9311"],"TemporalScore":7.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9318"],"TemporalScore":7.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9344"],"TemporalScore":7.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10050"],"TemporalScore":7.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10051"],"TemporalScore":7.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10049"],"TemporalScore":7.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10378"],"TemporalScore":7.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10379"],"TemporalScore":7.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10483"],"TemporalScore":7.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10543"],"TemporalScore":7.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A remote code execution vulnerability exists when Windows does not properly handle specially crafted image files. An attacker who successfully exploited the vulnerability could execute arbitrary code.</p>\n<p>To exploit the vulnerability, an attacker would have to convince a user to download an image file.</p>\n<p>The update addresses the vulnerability by properly handling image files.</p>\n"},{"Ordinal":"20","Title":"Microsoft Graphics Component","Type":7,"Value":"Microsoft Graphics Component"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"62","ProductStatuses":[{"ProductID":["10951","10952","11497","11498","11499","11453","11454","11466","10729","10735","10852","10853","10816","10855","10047","10048","10481","10482","10484","9312","10287","9311","9318","9344","10050","10051","10049","10378","10379","10483","10543"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457138"},"ProductID":["10951","10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343885","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457138"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457128"},"ProductID":["11497","11498","11499"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343909","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457128"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457142"},"ProductID":["11453","11454","11466"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343897","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457142"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457132"},"ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343892","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457132"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457131"},"ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343887","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457131"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457144"},"ProductID":["10047","10048","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4343900","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457144"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457145"},"ProductID":["10047","10048","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457145"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457129"},"ProductID":["10481","10482","10484","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4343898","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457129"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457143"},"ProductID":["10481","10482","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457143"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4458010"},"ProductID":["9312","10287","9311","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4458010"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457984"},"ProductID":["9312","10287","9311","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457984"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457135"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4343901","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457135"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457140"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457140"}],"RevisionHistory":[{"Date":"2018-09-11T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11497"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11498"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11499"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11466"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10047"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10048"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10287"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9311"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9344"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10050"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11497"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11498"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11499"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11466"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10047"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10048"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10287"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["9311"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["9344"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10050"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:Yes;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Windows Remote Code Execution Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Hossein Lotfi, <a href=\"https://www.flexera.com/company/secunia-research/\">Secunia Research at Flexera</a>"}],"URL":[""]}],"CVE":"CVE-2018-8332","CVSSScoreSets":[{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10951"],"TemporalScore":8.8,"Vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10952"],"TemporalScore":8.8,"Vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11497"],"TemporalScore":8.8,"Vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11498"],"TemporalScore":8.8,"Vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11499"],"TemporalScore":8.8,"Vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11453"],"TemporalScore":8.8,"Vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11454"],"TemporalScore":8.8,"Vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11466"],"TemporalScore":8.8,"Vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":8.8,"Vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":8.8,"Vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10852"],"TemporalScore":8.8,"Vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":8.8,"Vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":8.8,"Vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":8.8,"Vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10047"],"TemporalScore":8.8,"Vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10048"],"TemporalScore":8.8,"Vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10481"],"TemporalScore":8.8,"Vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10482"],"TemporalScore":8.8,"Vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10484"],"TemporalScore":8.8,"Vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9312"],"TemporalScore":8.8,"Vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10287"],"TemporalScore":8.8,"Vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9311"],"TemporalScore":8.8,"Vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9318"],"TemporalScore":8.8,"Vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9344"],"TemporalScore":8.8,"Vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10050"],"TemporalScore":8.8,"Vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10051"],"TemporalScore":8.8,"Vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10049"],"TemporalScore":8.8,"Vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10378"],"TemporalScore":8.8,"Vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10379"],"TemporalScore":8.8,"Vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10483"],"TemporalScore":8.8,"Vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10543"],"TemporalScore":8.8,"Vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.</p>\n<p>There are multiple ways an attacker could exploit this vulnerability.</p>\n<ul>\n<li><p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit this vulnerability and then convince a user to view the website. An attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically by getting them to click a link in an email message or in an Instant Messenger message that takes users to the attacker's website, or by opening an attachment sent through email.</p>\n</li>\n<li><p>In a file sharing attack scenario, an attacker could provide a specially crafted document file that is designed to exploit this vulnerability, and then convince a user to open the document file.</p>\n</li>\n</ul>\n<p>The security update addresses the vulnerability by correcting how the Windows font library handles embedded fonts.</p>\n"},{"Ordinal":"20","Title":"Microsoft Graphics Component","Type":7,"Value":"Microsoft Graphics Component"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"7","ProductStatuses":[{"ProductID":["10734","10906","10905","10951","10952","11497","11498","11499","11453","11454","11466","10729","10735","10852","10853","10816","10855","10047","10048","10481","10482","10484","9312","10287","9311","9318","9344","10050","10051","10049","10378","10379","10483","10543"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"ProductID":["10734"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":"https://go.microsoft.com/fwlink/p/?linkid=831049"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Click to Run"},"ProductID":["10906","10905"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457138"},"ProductID":["10951","10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343885","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457138"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457128"},"ProductID":["11497","11498","11499"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343909","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457128"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457142"},"ProductID":["11453","11454","11466"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343897","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457142"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457132"},"ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343892","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457132"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457131"},"ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343887","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457131"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457144"},"ProductID":["10047","10048","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4343900","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457144"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457145"},"ProductID":["10047","10048","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457145"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457129"},"ProductID":["10481","10482","10484","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4343898","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457129"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457143"},"ProductID":["10481","10482","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457143"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4458010"},"ProductID":["9312","10287","9311","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4458010"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457984"},"ProductID":["9312","10287","9311","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457984"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457135"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4343901","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457135"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457140"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457140"}],"RevisionHistory":[{"Date":"2018-09-11T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10734"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10906"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10905"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11497"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11498"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11499"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11466"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10047"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10048"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10287"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9311"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9344"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10050"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10734"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10906"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10905"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11497"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11498"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11499"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11466"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10047"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10048"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10287"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["9311"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["9344"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10050"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Win32k Graphics Remote Code Execution Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Michael Weber of NCC Group"}],"URL":[""]}],"CVE":"CVE-2018-8337","CVSSScoreSets":[{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11453"],"TemporalScore":4.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11454"],"TemporalScore":4.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11466"],"TemporalScore":4.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A security feature bypass vulnerability exists when Windows Subsystem for Linux improperly handles case sensitivity. An attacker who successfully exploited this vulnerability could replace or delete arbitrary files as a low privilege user.</p>\n<p>A attacker could exploit this vulnerability by running a specially crafted application.</p>\n<p>The update addresses the vulnerability by correcting how Windows Subsystem for Linux handles case sensitivity.</p>\n"},{"Ordinal":"20","Title":"Windows Subsystem for Linux","Type":7,"Value":"Windows Subsystem for Linux"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"10","ProductStatuses":[{"ProductID":["11453","11454","11466"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457142"},"ProductID":["11453","11454","11466"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343897","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457142"}],"RevisionHistory":[{"Date":"2018-09-11T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11466"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11466"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A;Older Software Release:Exploitation Less Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Windows Subsystem for Linux Security Feature Bypass Vulnerability"}},{"Acknowledgments":[{"Name":[{}],"URL":[""]},{"Name":[{"Value":"Michael Holman, Microsoft Chakra Core Team"}],"URL":[""]}],"CVE":"CVE-2018-8354","CVSSScoreSets":[{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11447"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10951"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10952"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11497"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11498"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11453"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11454"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10729"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10735"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10852"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10853"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10816"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge (HTML-based). The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>\n<p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft Edge (HTML-based) and then convince a user to view the website. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p>\n<p>The security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.</p>\n"},{"Ordinal":"20","Title":"Microsoft Scripting Engine","Type":7,"Value":"Microsoft Scripting Engine"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"11","ProductStatuses":[{"ProductID":["11447","10724-10951","10724-10952","10724-11497","10724-11498","10724-11453","10724-11454","10724-10729","10724-10735","10724-10852","10724-10853","10724-10816"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Commit"},"ProductID":["11447"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://github.com/Microsoft/ChakraCore/releases/tag/v1.11.1"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457138"},"ProductID":["10724-10951","10724-10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343885","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457138"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457128"},"ProductID":["10724-11497","10724-11498"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343909","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457128"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457142"},"ProductID":["10724-11453","10724-11454"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343897","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457142"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457132"},"ProductID":["10724-10729","10724-10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343892","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457132"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457131"},"ProductID":["10724-10852","10724-10853","10724-10816"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343887","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457131"}],"RevisionHistory":[{"Date":"2018-09-11T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11447"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11497"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11498"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11447"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-11497"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-11498"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Low"},"ProductID":["10724-10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A;DOS:N/A"},"Type":1}],"Title":{"Value":"Scripting Engine Memory Corruption Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Jun Kokatsu, Windows & Devices Group - Operating System Security Team"}],"URL":[""]},{"Name":[{}],"URL":[""]},{"Name":[{"Value":"James Lee <a href=\"https://twitter.com/Windowsrcer\"/>@Windowsrcer</a> of <a href=\"https://kryptoslogic.com\"/>Kryptos Logic</a>"}],"URL":[""]}],"CVE":"CVE-2018-8366","CVSSScoreSets":[{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11497"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11498"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>An information disclosure vulnerability exists when the Microsoft Edge Fetch API incorrectly handles a filtered response type. An attacker could use the vulnerability to read the URL of a cross-origin request. Websites that that do not securely populate the URL with confidential information could allow information to be disclosed to an attacker.</p>\n<p>To exploit the vulnerability, in a web-based attack scenario, an attacker could host a website in an attempt to exploit the vulnerability. In addition, the user must be logged on to a website that does not securely populate URLs with confidential information. However, in all cases an attacker would have no way to force a user to view the attacker-controlled content. Instead, an attacker would have to convince the user to take action. For example, an attacker could trick a user into clicking a link that takes them to the attacker's site.</p>\n<p>The update addresses the vulnerability by changing how the Fetch API in Microsoft Edge handles specific filtered response types.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>\n<p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is Personally Identifiable Information (PII).</p>\n"},{"Ordinal":"20","Title":"Microsoft Edge (HTML-based)","Type":7,"Value":"Microsoft Edge (HTML-based)"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"12","ProductStatuses":[{"ProductID":["10724-11497","10724-11498"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457128"},"ProductID":["10724-11497","10724-11498"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343909","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457128"}],"RevisionHistory":[{"Date":"2018-09-11T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10724-11497"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10724-11498"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-11497"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-11498"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A;DOS:N/A"},"Type":1}],"Title":{"Value":"Microsoft Edge Information Disclosure Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"<a href=\"https://twitter.com/S0rryMybad\">Qixun Zhao</a> of <a href=\"http://www.360.com/\">Qihoo 360 Vulcan Team</a>​"}],"URL":[""]}],"CVE":"CVE-2018-8391","CVSSScoreSets":[{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11447"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user.</p>\n<p>If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>\n<p>The security update addresses the vulnerability by modifying how the ChakraCore scripting engine handles objects in memory.</p>\n"},{"Ordinal":"20","Title":"Microsoft Scripting Engine","Type":7,"Value":"Microsoft Scripting Engine"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"14","ProductStatuses":[{"ProductID":["11447"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Commit"},"ProductID":["11447"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://github.com/Microsoft/ChakraCore/releases/tag/v1.11.1"}],"RevisionHistory":[{"Date":"2018-09-11T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11447"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11447"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A;DOS:N/A"},"Type":1}],"Title":{"Value":"Scripting Engine Memory Corruption Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Honggang Ren of Fortinet's FortiGuard Labs"}],"URL":[""]},{"Name":[{"Value":"Pengsu Cheng of Trend Micro Security Research working with <a href=\"http://www.zerodayinitiative.com/\">Trend Micro's Zero Day Initiative</a>"}],"URL":[""]}],"CVE":"CVE-2018-8392","CVSSScoreSets":[{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10952"],"TemporalScore":7.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11497"],"TemporalScore":7.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11498"],"TemporalScore":7.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11453"],"TemporalScore":7.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11499"],"TemporalScore":7.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":7.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":7.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10852"],"TemporalScore":7.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":7.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":7.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10048"],"TemporalScore":7.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10481"],"TemporalScore":7.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10047"],"TemporalScore":7.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10484"],"TemporalScore":7.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9312"],"TemporalScore":7.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9311"],"TemporalScore":7.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9318"],"TemporalScore":7.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10050"],"TemporalScore":7.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10051"],"TemporalScore":7.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10049"],"TemporalScore":7.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9344"],"TemporalScore":7.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10378"],"TemporalScore":7.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10379"],"TemporalScore":7.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10951"],"TemporalScore":7.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11454"],"TemporalScore":7.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":7.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10482"],"TemporalScore":7.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10287"],"TemporalScore":7.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10483"],"TemporalScore":7.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10543"],"TemporalScore":7.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11466"],"TemporalScore":7.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A buffer overflow vulnerability exists in the Microsoft JET Database Engine that could allow remote code execution on an affected system. An attacker who successfully exploited this vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.</p>\n<p>To exploit the vulnerability, a user must open a specially crafted Excel file while using an affected version of Microsoft Windows. In an email attack scenario, an attacker could exploit the vulnerability by sending a specially crafted Excel file to the user, and then convincing the user to open the file.</p>\n<p>The security update addresses the vulnerability by modifying how the Microsoft JET Database Engine handles objects in memory.</p>\n"},{"Ordinal":"20","Title":"Microsoft JET Database Engine","Type":7,"Value":"Microsoft JET Database Engine"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"15","ProductStatuses":[{"ProductID":["10952","11497","11498","11453","11499","10729","10735","10852","10816","10853","10048","10481","10047","10484","9312","9311","9318","10050","10051","10049","9344","10378","10379","10951","11454","10855","10482","10287","10483","10543","11466"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457138"},"ProductID":["10952","10951"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343885","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457138"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457128"},"ProductID":["11497","11498","11499"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343909","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457128"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457142"},"ProductID":["11453","11454","11466"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343897","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457142"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457132"},"ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343892","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457132"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457131"},"ProductID":["10852","10816","10853","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343887","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457131"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457144"},"ProductID":["10048","10047","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4343900","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457144"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457145"},"ProductID":["10048","10047","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457145"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457129"},"ProductID":["10481","10484","10482","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4343898","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457129"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457143"},"ProductID":["10481","10482","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457143"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4458010"},"ProductID":["9312","9311","9318","9344","10287"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4458010"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457984"},"ProductID":["9312","9311","9318","9344","10287"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457984"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457135"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4343901","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457135"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457140"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457140"}],"RevisionHistory":[{"Date":"2018-09-11T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11497"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11498"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11499"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10048"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10047"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9311"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10050"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9344"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10287"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11466"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11497"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11498"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11499"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10048"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10047"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9311"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10050"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9344"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10287"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11466"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Microsoft JET Database Engine Remote Code Execution Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Lucas Leong (@wmliang) of Trend Micro Security Research working with Trend Micro's Zero Day Initiative"}],"URL":[""]}],"CVE":"CVE-2018-8393","CVSSScoreSets":[{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10951"],"TemporalScore":7.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11497"],"TemporalScore":7.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11498"],"TemporalScore":7.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11454"],"TemporalScore":7.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":7.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":7.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":7.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":7.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":7.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10047"],"TemporalScore":7.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10048"],"TemporalScore":7.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10484"],"TemporalScore":7.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10482"],"TemporalScore":7.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10481"],"TemporalScore":7.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9312"],"TemporalScore":7.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10287"],"TemporalScore":7.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9318"],"TemporalScore":7.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9344"],"TemporalScore":7.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10050"],"TemporalScore":7.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10049"],"TemporalScore":7.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10952"],"TemporalScore":7.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11499"],"TemporalScore":7.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11453"],"TemporalScore":7.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10852"],"TemporalScore":7.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9311"],"TemporalScore":7.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10051"],"TemporalScore":7.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10378"],"TemporalScore":7.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10483"],"TemporalScore":7.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10379"],"TemporalScore":7.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10543"],"TemporalScore":7.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11466"],"TemporalScore":7.0,"Vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A buffer overflow vulnerability exists in the Microsoft JET Database Engine that could allow remote code execution on an affected system. An attacker who successfully exploited this vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.</p>\n<p>To exploit the vulnerability, a user must open a specially crafted Excel file while using an affected version of Microsoft Windows. In an email attack scenario, an attacker could exploit the vulnerability by sending a specially crafted Excel file to the user, and then convincing the user to open the file.</p>\n<p>The security update addresses the vulnerability by modifying how the Microsoft JET Database Engine handles objects in memory.</p>\n"},{"Ordinal":"20","Title":"Microsoft JET Database Engine","Type":7,"Value":"Microsoft JET Database Engine"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"16","ProductStatuses":[{"ProductID":["10951","11497","11498","11454","10729","10735","10816","10853","10855","10047","10048","10484","10482","10481","9312","10287","9318","9344","10050","10049","10952","11499","11453","10852","9311","10051","10378","10483","10379","10543","11466"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457138"},"ProductID":["10951","10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343885","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457138"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457128"},"ProductID":["11497","11498","11499"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343909","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457128"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457142"},"ProductID":["11454","11453","11466"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343897","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457142"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457132"},"ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343892","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457132"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457131"},"ProductID":["10816","10853","10855","10852"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343887","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457131"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457144"},"ProductID":["10047","10048","10050","10049","10051"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4343900","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457144"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457145"},"ProductID":["10047","10048","10050","10049","10051"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457145"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457129"},"ProductID":["10484","10482","10481","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4343898","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457143"},"ProductID":["10482","10481","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457143"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4458010"},"ProductID":["9312","10287","9318","9344","9311"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4458010"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457984"},"ProductID":["9312","10287","9318","9344","9311"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457984"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457135"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4343901","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457135"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457140"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457140"}],"RevisionHistory":[{"Date":"2018-09-11T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11497"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11498"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10047"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10048"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10287"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9344"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10050"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11499"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9311"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11466"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11497"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11498"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10047"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10048"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10287"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9344"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10050"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11499"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9311"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11466"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Microsoft JET Database Engine Remote Code Execution Vulnerability"}},{"Acknowledgments":[],"CVE":"CVE-2018-8409","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A denial of service vulnerability exists when System.IO.Pipelines improperly handles requests. An attacker who successfully exploited this vulnerability could cause a denial of service against an application that is leveraging System.IO.Pipelines.\nThe vulnerability can be exploited remotely, without authentication.</p>\n<p>A remote unauthenticated attacker could exploit this vulnerability by providing specially crafted requests to the application.</p>\n<p>The update addresses the vulnerability by correcting how System.IO.Pipelines handles requests.</p>\n"},{"Ordinal":"20","Title":".NET Core","Type":7,"Value":".NET Core"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"17","ProductStatuses":[{"ProductID":["11564","11566","11565"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"ProductID":["11564","11566","11565"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Type":2,"URL":"https://github.com/aspnet/announcements/issues/316"}],"RevisionHistory":[{"Date":"2018-09-11T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11564"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11566"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11565"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11564"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11566"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11565"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:Yes;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"System.IO.Pipelines Denial of Service"}},{"Acknowledgments":[{"Name":[{"Value":"<a href=\"https://twitter.com/irsdl\">Soroush Dalili</a> of <a href=\"https://www.nccgroup.trust/\">NCC Group</a>"}],"URL":[""]}],"CVE":"CVE-2018-8421","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A remote code execution vulnerability exists when Microsoft .NET Framework processes input. An attacker who successfully exploited this vulnerability could take control of an affected system.</p>\n<p>To exploit the vulnerability, an attacker would need to be able to upload a specially crafted file to a web application.</p>\n<p>The security update addresses the vulnerability by correcting how .NET Framework processes input.</p>\n"},{"Ordinal":"20","Title":".NET Framework","Type":7,"Value":".NET Framework"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"21","ProductStatuses":[{"ProductID":["11513-11497","11513-11498","11513-11499","10728-9312","10728-9318","9292-9312","9292-9311","9292-9318","9195-9312","9195-9311","9195-9318","2472-10951","2472-10952","2472-11497","2472-11498","2472-11499","2472-11453","2472-11454","2472-11466","2472-10729","2472-10735","2472-10852","2472-10853","2472-10816","2472-10855","2472-10481","2472-10482","2472-10378","2472-10379","2472-10483","2472-10543","9495-10047","9495-10048","9495-10050","9495-10051","9495-10049","10636-10047","10636-10048","10636-10481","10636-10482","10636-10484","10636-9312","10636-9318","10636-10051","10636-10049","10636-10378","10636-10379","10636-10483","10636-10543","11529-10047","11529-10048","11529-10481","11529-10482","11529-10484","11529-10051","11529-10049","11529-10378","11529-10379","11529-10483","11529-10543","11532-10852","11532-10853","11532-10816","11532-10855","11534-10951","11534-10952","11535-11453","11535-11454","11535-11466"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457128"},"ProductID":["11513-11497","11513-11498","11513-11499","2472-11497","2472-11498","2472-11499"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343909","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457128"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457035"},"ProductID":["10728-9312","10728-9318","11529-10047","11529-10048","11529-10051","11529-10049"],"RestartRequired":{"Value":"Maybe"},"SubType":"Monthly Rollup","Supercedence":"4345593, 4346083","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457921"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457027"},"ProductID":["10728-9312","10728-9318","11529-10047","11529-10048","11529-10051","11529-10049"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457917"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457043"},"ProductID":["9292-9312","9292-9311","9292-9318","9195-9312","9195-9311","9195-9318"],"RestartRequired":{"Value":"Maybe"},"SubType":"Monthly Rollup","Supercedence":"4345593, 4346083","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457921"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457054"},"ProductID":["9292-9312","9292-9311","9292-9318","9195-9312","9195-9311","9195-9318"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457917"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457138"},"ProductID":["2472-10951","2472-10952","11534-10951","11534-10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343885","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457138"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457142"},"ProductID":["2472-11453","2472-11454","2472-11466","11535-11453","11535-11454","11535-11466"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343897","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457142"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457132"},"ProductID":["2472-10729","2472-10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343892","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457132"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457131"},"ProductID":["2472-10852","2472-10853","2472-10816","2472-10855","11532-10852","11532-10853","11532-10816","11532-10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343887","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457131"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457045"},"ProductID":["2472-10481","2472-10482","2472-10483","2472-10543"],"RestartRequired":{"Value":"Maybe"},"SubType":"Monthly Rollup","Supercedence":"4345592, 4346082","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457920"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457056"},"ProductID":["2472-10481","2472-10482","2472-10483","2472-10543"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457916"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457042"},"ProductID":["2472-10378","2472-10379"],"RestartRequired":{"Value":"Maybe"},"SubType":"Monthly Rollup","Supercedence":"4345591, 4346081","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457919"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457053"},"ProductID":["2472-10378","2472-10379"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457915"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457044"},"ProductID":["9495-10047","9495-10048","9495-10050","9495-10051","9495-10049"],"RestartRequired":{"Value":"Maybe"},"SubType":"Monthly Rollup","Supercedence":"4345590, 4346080","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457918"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457055"},"ProductID":["9495-10047","9495-10048","9495-10050","9495-10051","9495-10049"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457914"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457038"},"ProductID":["10636-10047","10636-10048","10636-9312","10636-9318","10636-10051","10636-10049"],"RestartRequired":{"Value":"Maybe"},"SubType":"Monthly Rollup","Supercedence":"4345590, 4346080","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457918"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457030"},"ProductID":["10636-10047","10636-10048","10636-9312","10636-9318","10636-10051","10636-10049"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457914"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457036"},"ProductID":["10636-10481","10636-10482","10636-10484","10636-10483","10636-10543"],"RestartRequired":{"Value":"Maybe"},"SubType":"Monthly Rollup","Supercedence":"4345592, 4346082","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457920"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457028"},"ProductID":["10636-10481","10636-10482","10636-10483","10636-10543"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457916"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457037"},"ProductID":["10636-10378","10636-10379"],"RestartRequired":{"Value":"Maybe"},"SubType":"Monthly Rollup","Supercedence":"4345591, 4346081","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457919"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457029"},"ProductID":["10636-10378","10636-10379"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457915"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457034"},"ProductID":["11529-10481","11529-10482","11529-10484","11529-10483","11529-10543"],"RestartRequired":{"Value":"Maybe"},"SubType":"Monthly Rollup","Supercedence":"4345592, 4346082","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457920"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457026"},"ProductID":["11529-10481","11529-10482","11529-10483","11529-10543"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457916"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457033"},"ProductID":["11529-10378","11529-10379"],"RestartRequired":{"Value":"Maybe"},"SubType":"Monthly Rollup","Supercedence":"4345591, 4346081","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457919"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457025"},"ProductID":["11529-10378","11529-10379"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457915"}],"RevisionHistory":[{"Date":"2018-09-12T07:00:00Z","Description":{"Value":"<p>Corrected vulnerability description. This is an informational change only.</p>\n"},"Number":"1.1"},{"Date":"2018-09-11T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11513-11497"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11513-11498"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11513-11499"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10728-9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10728-9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9292-9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9292-9311"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9292-9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9195-9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9195-9311"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9195-9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["2472-10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["2472-10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["2472-11497"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["2472-11498"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["2472-11499"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["2472-11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["2472-11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["2472-11466"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["2472-10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["2472-10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["2472-10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["2472-10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["2472-10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["2472-10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["2472-10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["2472-10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["2472-10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["2472-10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["2472-10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["2472-10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9495-10047"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9495-10048"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9495-10050"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9495-10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9495-10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10636-10047"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10636-10048"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10636-10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10636-10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10636-10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10636-9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10636-9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10636-10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10636-10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10636-10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10636-10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10636-10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10636-10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11529-10047"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11529-10048"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11529-10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11529-10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11529-10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11529-10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11529-10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11529-10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11529-10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11529-10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11529-10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11532-10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11532-10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11532-10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11532-10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11534-10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11534-10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11535-11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11535-11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11535-11466"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11513-11497"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11513-11498"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11513-11499"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10728-9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10728-9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["9292-9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["9292-9311"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["9292-9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["9195-9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["9195-9311"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["9195-9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["2472-10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["2472-10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["2472-11497"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["2472-11498"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["2472-11499"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["2472-11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["2472-11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["2472-11466"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["2472-10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["2472-10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["2472-10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["2472-10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["2472-10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["2472-10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["2472-10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["2472-10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["2472-10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["2472-10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["2472-10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["2472-10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["9495-10047"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["9495-10048"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["9495-10050"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["9495-10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["9495-10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10636-10047"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10636-10048"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10636-10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10636-10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10636-10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10636-9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10636-9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10636-10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10636-10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10636-10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10636-10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10636-10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10636-10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11529-10047"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11529-10048"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11529-10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11529-10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11529-10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11529-10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11529-10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11529-10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11529-10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11529-10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11529-10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11532-10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11532-10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11532-10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11532-10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11534-10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11534-10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11535-11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11535-11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11535-11466"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A"},"Type":1}],"Title":{"Value":".NET Framework Remote Code Execution Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"<a href=\"https://twitter.com/soaj1664ashar\">Ashar Javed</a> of <a href=\"https://www.hyundai-autoever.eu/\">Hyundai AutoEver Europe GmbH</a>"}],"URL":[""]}],"CVE":"CVE-2018-8426","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint server.</p>\n<p>The attacker who successfully exploited the vulnerability could then perform cross-site scripting attacks on affected systems and run script in the security context of the current user. The attacks could allow the attacker to read content that the attacker is not authorized to read, use the victim's identity to take actions on the SharePoint site on behalf of the user, such as change permissions and delete content, and inject malicious content in the browser of the user.</p>\n<p>The security update addresses the vulnerability by helping to ensure that SharePoint Server properly sanitizes web requests.</p>\n"},{"Ordinal":"20","Title":"Microsoft Office","Type":7,"Value":"Microsoft Office"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"25","ProductStatuses":[{"ProductID":["10950","10495","11099"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4092459"},"ProductID":["10950"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"4032256","Type":2,"URL":"https://www.microsoft.com/downloads/details.aspx?familyid=2db6e341-2446-49f7-89ee-1424ba2bb2a7"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4022207"},"ProductID":["10495"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"4022145","Type":2,"URL":"https://www.microsoft.com/downloads/details.aspx?familyid=0aab00b4-2079-465e-9bd2-fcf2f96b4343"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4092470"},"ProductID":["11099"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"4022235","Type":2,"URL":"https://www.microsoft.com/downloads/details.aspx?familyid=d398c474-3d51-476a-8f14-69d8433d60e4"}],"RevisionHistory":[{"Date":"2018-09-11T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10950"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10495"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11099"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10950"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10495"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11099"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Microsoft Office SharePoint XSS Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"<a href=\"https://twitter.com/soaj1664ashar\">Ashar Javed</a> of <a href=\"https://www.hyundai-autoever.eu/\">Hyundai AutoEver Europe GmbH</a>"}],"URL":[""]}],"CVE":"CVE-2018-8428","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint server.</p>\n<p>The attacker who successfully exploited the vulnerability could then perform cross-site scripting attacks on affected systems and run script in the security context of the current user. These attacks could allow the attacker to read content that the attacker is not authorized to read, use the victim's identity to take actions on the SharePoint site on behalf of the user, such as change permissions and delete content, and inject malicious content in the browser of the user.</p>\n<p>The security update addresses the vulnerability by helping to ensure that SharePoint Server properly sanitizes web requests.</p>\n"},{"Ordinal":"20","Title":"Microsoft Office","Type":7,"Value":"Microsoft Office"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"26","ProductStatuses":[{"ProductID":["10950","11099"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4092459"},"ProductID":["10950"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"4032256","Type":2,"URL":"https://www.microsoft.com/downloads/details.aspx?familyid=2db6e341-2446-49f7-89ee-1424ba2bb2a7"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4092470"},"ProductID":["11099"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"4022235","Type":2,"URL":"https://www.microsoft.com/downloads/details.aspx?familyid=d398c474-3d51-476a-8f14-69d8433d60e4"}],"RevisionHistory":[{"Date":"2018-09-11T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10950"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11099"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10950"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11099"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Microsoft SharePoint Elevation of Privilege Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Jaanus Kp Clarified Security working with <a href=\"http://www.zerodayinitiative.com/\">Trend Micro's Zero Day Initiative</a>"}],"URL":[""]}],"CVE":"CVE-2018-8429","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory. An attacker who exploited the vulnerability could access information previously deleted from the active worksheet.</p>\n<p>To exploit the vulnerability, an attacker could craft a special document file and then convince the user to open it.</p>\n<p>The update addresses the vulnerability by changing the way certain Excel functions handle objects in memory.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>I am being offered this update for software that is not specifically indicated as being affected in the Affected Software and Vulnerability Severity Ratings table. Why am I being offered this update?</strong></p>\n<p>When updates address vulnerable code that exists in a component that is shared between multiple Microsoft Office products or shared between multiple versions of the same Microsoft Office product, the update is considered to be applicable to all supported products and versions that contain the vulnerable component.</p>\n<p>For example, when an update applies to Microsoft Office 2007 products, only Microsoft Office 2007 may be specifically listed in the Affected Software table. However, the update could apply to Microsoft Word 2007, Microsoft Excel 2007, Microsoft Visio 2007, Microsoft Compatibility Pack, Microsoft Excel Viewer, or any other Microsoft Office 2007 product that is not specifically listed in the Affected Software table. Furthermore, when an update applies to Microsoft Office 2010 products, only Microsoft Office 2010 may be specifically listed in the Affected Software table. However, the update could apply to Microsoft Word 2010, Microsoft Excel 2010, Microsoft Visio 2010, Microsoft Visio Viewer, or any other Microsoft Office 2010 product that is not specifically listed in the Affected Software table.</p>\n<p>For more information on this behavior and recommended actions, see <a href=\"https://support.microsoft.com/kb/830335\">Microsoft Knowledge Base Article 830335</a>. For a list of Microsoft Office products that an update may apply to, refer to the Microsoft Knowledge Base Article associated with the specific update.</p>\n"},{"Ordinal":"20","Title":"Microsoft Office","Type":7,"Value":"Microsoft Office"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"27","ProductStatuses":[{"ProductID":["10739","10740","10734","10905","10906","10489","10490","10656","10654","10655","10279","4497"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4092460"},"ProductID":["10739","10740"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"4032229","Type":2,"URL":"https://www.microsoft.com/downloads/details.aspx?familyid=b6c1792b-42c1-439d-aa90-3f17992553f2"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"ProductID":["10734"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":"https://go.microsoft.com/fwlink/p/?linkid=831049"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Click to Run"},"ProductID":["10905","10906"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4227175"},"ProductID":["10489","10490"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"4032223","Type":2,"URL":"https://www.microsoft.com/downloads/details.aspx?familyid=df453723-da05-46a0-967c-846941dd5233"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4092479"},"ProductID":["10656","10654","10655"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"4032241","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4092467"},"ProductID":["10279"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"4032213","Type":2,"URL":"https://www.microsoft.com/downloads/details.aspx?familyid=ca1a03f4-6f47-4c2b-a3b5-6e95411877fb"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4092466"},"ProductID":["4497"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"4032212","Type":2,"URL":"https://www.microsoft.com/downloads/details.aspx?familyid=d6d3086b-6f45-4de8-999a-168a9cea3846"}],"RevisionHistory":[{"Date":"2018-09-11T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10739"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10740"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10734"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10905"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10906"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10489"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10490"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10656"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10654"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10655"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10279"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["4497"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10739"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10740"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10734"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10905"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10906"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10489"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10490"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10656"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10654"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10655"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10279"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["4497"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Microsoft Excel Information Disclosure Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Omri Herscovici of <a href=\"https://www.checkpoint.com/\">Check Point</a>"}],"URL":[""]}],"CVE":"CVE-2018-8430","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A remote code execution vulnerability exists in Microsoft Word if a user opens a specially crafted PDF file. An attacker who successfully exploited the vulnerability could cause arbitrary code to execute in the context of the current user.</p>\n<p>To exploit the vulnerability, an attacker must entice the user to open a specially crafted PDF file.</p>\n<p>The update addresses the vulnerability by modifying how Microsoft Word parses PDF files.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>I am being offered this update for software that is not specifically indicated as being affected in the Affected Software and Vulnerability Severity Ratings table. Why am I being offered this update?</strong></p>\n<p>When updates address vulnerable code that exists in a component that is shared between multiple Microsoft Office products or shared between multiple versions of the same Microsoft Office product, the update is considered to be applicable to all supported products and versions that contain the vulnerable component.</p>\n<p>For example, when an update applies to Microsoft Office 2007 products, only Microsoft Office 2007 may be specifically listed in the Affected Software table. However, the update could apply to Microsoft Word 2007, Microsoft Excel 2007, Microsoft Visio 2007, Microsoft Compatibility Pack, Microsoft Excel Viewer, or any other Microsoft Office 2007 product that is not specifically listed in the Affected Software table. Furthermore, when an update applies to Microsoft Office 2010 products, only Microsoft Office 2010 may be specifically listed in the Affected Software table. However, the update could apply to Microsoft Word 2010, Microsoft Excel 2010, Microsoft Visio 2010, Microsoft Visio Viewer, or any other Microsoft Office 2010 product that is not specifically listed in the Affected Software table.</p>\n<p>For more information on this behavior and recommended actions, see <a href=\"https://support.microsoft.com/kb/830335\">Microsoft Knowledge Base Article 830335</a>. For a list of Microsoft Office products that an update may apply to, refer to the Microsoft Knowledge Base Article associated with the specific update.</p>\n"},{"Ordinal":"20","Title":"Microsoft Office","Type":7,"Value":"Microsoft Office"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"28","ProductStatuses":[{"ProductID":["10746","10747","10905","10906","10606","10604","10605"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4092447"},"ProductID":["10746","10747"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"4022218","Type":2,"URL":"https://www.microsoft.com/downloads/details.aspx?familyid=54c4ff0d-ae04-4952-8fd6-c1e9d9e352c6"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Click to Run"},"ProductID":["10905","10906"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4032246"},"ProductID":["10606","10604","10605"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"4022224","Type":2,"URL":""}],"RevisionHistory":[{"Date":"2018-09-11T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10746"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10747"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10905"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10906"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10606"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10604"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10605"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10746"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10747"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10905"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10906"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10606"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10604"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10605"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Word PDF Remote Code Execution Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"<a href=\"https://twitter.com/soaj1664ashar\">Ashar Javed</a> of <a href=\"https://www.hyundai-autoever.eu/\">Hyundai AutoEver Europe GmbH</a>"}],"URL":[""]}],"CVE":"CVE-2018-8431","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint server.</p>\n<p>The attacker who successfully exploited the vulnerability could then perform cross-site scripting attacks on affected systems and run script in the security context of the current user. These attacks could allow the attacker to read content that the attacker is not authorized to read, use the victim's identity to take actions on the SharePoint site on behalf of the user, such as change permissions and delete content, and inject malicious content in the browser of the user.</p>\n<p>The security update addresses the vulnerability by helping to ensure that SharePoint Server properly sanitizes web requests.</p>\n"},{"Ordinal":"20","Title":"Microsoft Office","Type":7,"Value":"Microsoft Office"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"29","ProductStatuses":[{"ProductID":["10950","11099","10120"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4092459"},"ProductID":["10950"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"4032256","Type":2,"URL":"https://www.microsoft.com/downloads/details.aspx?familyid=2db6e341-2446-49f7-89ee-1424ba2bb2a7"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4092470"},"ProductID":["11099"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"4022235","Type":2,"URL":"https://www.microsoft.com/downloads/details.aspx?familyid=d398c474-3d51-476a-8f14-69d8433d60e4"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4022207"},"ProductID":["10120"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"4022145","Type":2,"URL":"https://www.microsoft.com/downloads/details.aspx?familyid=0aab00b4-2079-465e-9bd2-fcf2f96b4343"}],"RevisionHistory":[{"Date":"2018-09-11T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10950"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11099"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10120"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10950"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11099"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10120"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Microsoft SharePoint Elevation of Privilege Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Giwan Go, <a href=\"http://hit.skku.edu/~hkchoi/\">Hyoung-Kee Choi</a> in <a href=\"http://hit.skku.edu/\">HIT Lab</a> at Sungkyunkwan University"}],"URL":[""]}],"CVE":"CVE-2018-8434","CVSSScoreSets":[{"BaseScore":5.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11498"],"TemporalScore":4.9,"Vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11499"],"TemporalScore":4.9,"Vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10952"],"TemporalScore":4.9,"Vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11454"],"TemporalScore":4.9,"Vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11466"],"TemporalScore":4.9,"Vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":4.9,"Vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":4.9,"Vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":4.9,"Vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":4.9,"Vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10048"],"TemporalScore":4.9,"Vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10482"],"TemporalScore":4.9,"Vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10484"],"TemporalScore":4.9,"Vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9318"],"TemporalScore":4.9,"Vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9344"],"TemporalScore":4.9,"Vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10051"],"TemporalScore":4.9,"Vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10049"],"TemporalScore":4.9,"Vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10378"],"TemporalScore":4.9,"Vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10379"],"TemporalScore":4.9,"Vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10483"],"TemporalScore":4.9,"Vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":5.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10543"],"TemporalScore":4.9,"Vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>An information disclosure vulnerability exists when Windows Hyper-V on a host operating system fails to properly validate input from an authenticated user on a guest operating system. To exploit the vulnerability, an attacker on a guest operating system could run a specially crafted application that could cause the Hyper-V host operating system to disclose memory information.</p>\n<p>An attacker who successfully exploited the vulnerability could gain access to information on the Hyper-V host operating system.</p>\n<p>The security update addresses the vulnerability by correcting how Hyper-V validates guest operating system user input.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>\n<p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is Guest VM to Hyper-V host server - virtualization security boundary.</p>\n"},{"Ordinal":"20","Title":"Windows Hyper-V","Type":7,"Value":"Windows Hyper-V"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"31","ProductStatuses":[{"ProductID":["11498","11499","10952","11454","11466","10735","10853","10816","10855","10048","10482","10484","9318","9344","10051","10049","10378","10379","10483","10543"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457128"},"ProductID":["11498","11499"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343909","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457128"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457138"},"ProductID":["10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343885","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457138"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457142"},"ProductID":["11454","11466"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343897","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457142"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457132"},"ProductID":["10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343892","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457132"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457131"},"ProductID":["10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343887","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457131"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457144"},"ProductID":["10048","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4343900","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457144"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457145"},"ProductID":["10048","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457145"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457129"},"ProductID":["10482","10484","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4343898","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457129"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457143"},"ProductID":["10482","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457143"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4458010"},"ProductID":["9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4458010"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457984"},"ProductID":["9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457984"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457135"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4343901","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457135"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457140"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457140"}],"RevisionHistory":[{"Date":"2018-09-11T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11498"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11499"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11466"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10048"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["9344"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11498"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11499"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11466"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10048"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9344"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Windows Hyper-V Information Disclosure Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Niels Ferguson of Microsoft Corporation"}],"URL":[""]}],"CVE":"CVE-2018-8435","CVSSScoreSets":[{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11499"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10952"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11498"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11454"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11466"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A security feature bypass vulnerability exists when Windows Hyper-V BIOS loader fails to provide a high-entropy source.</p>\n<p>To exploit this vulnerability, an attacker would need to reboot a guest virtual machine numerous times until the vulnerability is triggered.</p>\n<p>The security update addresses the vulnerability by correcting security feature behavior to ensure Windows Hyper-V BIOS loader provides a high-entropy source.</p>\n"},{"Ordinal":"20","Title":"Windows Hyper-V","Type":7,"Value":"Windows Hyper-V"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"32","ProductStatuses":[{"ProductID":["11499","10952","11498","11454","11466","10735","10853","10816","10855"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457128"},"ProductID":["11499","11498"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343909","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457128"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457138"},"ProductID":["10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343885","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457138"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457142"},"ProductID":["11454","11466"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343897","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457142"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457132"},"ProductID":["10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343892","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457132"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457131"},"ProductID":["10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343887","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457131"}],"RevisionHistory":[{"Date":"2018-09-11T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11499"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11498"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11466"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11499"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11498"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11466"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Windows Hyper-V Security Feature Bypass Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Peter Hlavaty (<a href=\"https://twitter.com/zer0mem\">@zer0mem</a>), KeenLab at <a href=\"http://keenlab.tencent.com/en/\">Tencent</a>"}],"URL":[""]}],"CVE":"CVE-2018-8436","CVSSScoreSets":[{"BaseScore":5.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11498"],"TemporalScore":4.9,"Vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11499"],"TemporalScore":4.9,"Vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a privileged user on a guest operating system. An attacker who successfully exploited the vulnerability could cause the host server to crash.</p>\n<p>To exploit the vulnerability, an attacker who already has a privileged account on a guest operating system, running as a virtual machine, could run a specially crafted application that causes a host machine to crash.</p>\n<p>The update addresses the vulnerability by modifying how virtual machines access the Hyper-V Network Switch.</p>\n"},{"Ordinal":"20","Title":"Windows Hyper-V","Type":7,"Value":"Windows Hyper-V"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"33","ProductStatuses":[{"ProductID":["11498","11499"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457128"},"ProductID":["11498","11499"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343909","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457128"}],"RevisionHistory":[{"Date":"2018-09-11T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11498"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11499"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11498"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11499"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:N/A;DOS:N/A"},"Type":1}],"Title":{"Value":"Windows Hyper-V Denial of Service Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Peter Hlavaty (<a href=\"https://twitter.com/zer0mem\">@zer0mem</a>), KeenLab, <a href=\"http://keenlab.tencent.com/en/\">Tencent</a>"}],"URL":[""]}],"CVE":"CVE-2018-8437","CVSSScoreSets":[{"BaseScore":5.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11498"],"TemporalScore":4.9,"Vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11499"],"TemporalScore":4.9,"Vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a privileged user on a guest operating system. An attacker who successfully exploited the vulnerability could cause the host server to crash.</p>\n<p>To exploit the vulnerability, an attacker who already has a privileged account on a guest operating system, running as a virtual machine, could run a specially crafted application that causes a host machine to crash.</p>\n<p>The update addresses the vulnerability by modifying how virtual machines access the Hyper-V Network Switch.</p>\n"},{"Ordinal":"20","Title":"Windows Hyper-V","Type":7,"Value":"Windows Hyper-V"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"34","ProductStatuses":[{"ProductID":["11498","11499"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457128"},"ProductID":["11498","11499"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343909","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457128"}],"RevisionHistory":[{"Date":"2018-09-11T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11498"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11499"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11498"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11499"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:N/A;DOS:N/A"},"Type":1}],"Title":{"Value":"Windows Hyper-V Denial of Service Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Deepti Bhardwaj, Microsoft Base Kernel Team"}],"URL":[""]},{"Name":[{"Value":"Nick Freeman"}],"URL":[""]}],"CVE":"CVE-2018-8438","CVSSScoreSets":[{"BaseScore":5.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11466"],"TemporalScore":5.2,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10951"],"TemporalScore":5.2,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10952"],"TemporalScore":5.2,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11497"],"TemporalScore":5.2,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11498"],"TemporalScore":5.2,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11499"],"TemporalScore":5.2,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11453"],"TemporalScore":5.2,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11454"],"TemporalScore":5.2,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":5.2,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":5.2,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10852"],"TemporalScore":5.2,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":5.2,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":5.2,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":5.2,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10481"],"TemporalScore":5.2,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10482"],"TemporalScore":5.2,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10484"],"TemporalScore":5.2,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10483"],"TemporalScore":5.2,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":5.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10543"],"TemporalScore":5.2,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a privileged user on a guest operating system. An attacker who successfully exploited the vulnerability could cause the host server to crash.</p>\n<p>To exploit the vulnerability, an attacker who already has a privileged account on a guest operating system, running as a virtual machine, could run a specially crafted application that causes a host machine to crash.</p>\n<p>The update addresses the vulnerability by modifying how virtual machines access the Hyper-V Network Switch.</p>\n"},{"Ordinal":"20","Title":"Microsoft Windows","Type":7,"Value":"Microsoft Windows"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"35","ProductStatuses":[{"ProductID":["11466","10951","10952","11497","11498","11499","11453","11454","10729","10735","10852","10853","10816","10855","10481","10482","10484","10483","10543"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457142"},"ProductID":["11466","11453","11454"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343897","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457142"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457138"},"ProductID":["10951","10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343885","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457138"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457128"},"ProductID":["11497","11498","11499"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343909","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457128"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457132"},"ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343892","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457132"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457131"},"ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343887","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457131"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457129"},"ProductID":["10481","10482","10484","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4343898","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457129"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457143"},"ProductID":["10481","10482","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457143"}],"RevisionHistory":[{"Date":"2018-09-11T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11466"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11497"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11498"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11499"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11466"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11497"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11498"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11499"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Windows Hyper-V Denial of Service Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Daniel King (<a href=\"https://twitter.com/long123king\">@long123king</a>), MSRC Microsoft"}],"URL":[""]}],"CVE":"CVE-2018-8439","CVSSScoreSets":[{"BaseScore":7.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10952"],"TemporalScore":6.8,"Vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11498"],"TemporalScore":6.8,"Vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11499"],"TemporalScore":6.8,"Vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11454"],"TemporalScore":6.8,"Vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11466"],"TemporalScore":6.8,"Vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":6.8,"Vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":6.8,"Vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":6.8,"Vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":6.8,"Vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10482"],"TemporalScore":6.8,"Vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10484"],"TemporalScore":6.8,"Vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10483"],"TemporalScore":6.8,"Vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10543"],"TemporalScore":6.8,"Vector":"CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system. To exploit the vulnerability, an attacker could run a specially crafted application on a guest operating system that could cause the Hyper-V host operating system to execute arbitrary code.</p>\n<p>An attacker who successfully exploited the vulnerability could execute arbitrary code on the host operating system.</p>\n<p>The security update addresses the vulnerability by correcting how Hyper-V validates guest operating system user input.</p>\n"},{"Ordinal":"20","Title":"Windows Hyper-V","Type":7,"Value":"Windows Hyper-V"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"36","ProductStatuses":[{"ProductID":["10952","11498","11499","11454","11466","10735","10853","10816","10855","10482","10484","10483","10543"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457138"},"ProductID":["10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343885","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457138"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457128"},"ProductID":["11498","11499"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343909","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457128"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457142"},"ProductID":["11454","11466"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343897","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457142"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457132"},"ProductID":["10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343892","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457132"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457131"},"ProductID":["10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343887","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457131"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457129"},"ProductID":["10482","10484","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4343898","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457129"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457143"},"ProductID":["10482","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457143"}],"RevisionHistory":[{"Date":"2018-09-11T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11498"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11499"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11466"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11498"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11499"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11466"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Windows Hyper-V Remote Code Execution Vulnerability"}},{"Acknowledgments":[],"CVE":"CVE-2018-8440","CVSSScoreSets":[{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10951"],"TemporalScore":7.5,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:H/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10952"],"TemporalScore":7.5,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:H/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11497"],"TemporalScore":7.5,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:H/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11498"],"TemporalScore":7.5,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:H/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11499"],"TemporalScore":7.5,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:H/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11453"],"TemporalScore":7.5,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:H/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11454"],"TemporalScore":7.5,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:H/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11466"],"TemporalScore":7.5,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:H/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":7.5,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:H/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":7.5,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:H/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10852"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10047"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10048"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10481"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10482"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10484"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9312"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10287"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9311"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9318"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9344"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10050"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10051"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10049"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10378"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10379"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10483"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10543"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC).</p>\n<p>An attacker who successfully exploited this vulnerability could run arbitrary code in the security context of the local system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>\n<p>To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control over an affected system.</p>\n<p>The update addresses the vulnerability by correcting how Windows handles calls to ALPC.</p>\n"},{"Ordinal":"20","Title":"Microsoft Windows","Type":7,"Value":"Microsoft Windows"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"37","ProductStatuses":[{"ProductID":["10951","10952","11497","11498","11499","11453","11454","11466","10729","10735","10852","10853","10816","10855","10047","10048","10481","10482","10484","9312","10287","9311","9318","9344","10050","10051","10049","10378","10379","10483","10543"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457138"},"ProductID":["10951","10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343885","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457138"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457128"},"ProductID":["11497","11498","11499"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343909","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457128"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457142"},"ProductID":["11453","11454","11466"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343897","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457142"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457132"},"ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343892","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457132"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457131"},"ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343887","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457131"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457144"},"ProductID":["10047","10048","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4343900","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457144"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457145"},"ProductID":["10047","10048","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457145"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457129"},"ProductID":["10481","10482","10484","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4343898","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457129"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457143"},"ProductID":["10481","10482","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457143"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4458010"},"ProductID":["9312","10287","9311","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4458010"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457984"},"ProductID":["9312","10287","9311","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457984"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457135"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4343901","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457135"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457140"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457140"}],"RevisionHistory":[{"Date":"2018-09-11T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11497"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11498"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11499"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11466"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10047"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10048"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10287"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["9311"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["9344"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10050"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11497"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11498"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11499"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11466"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10047"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10048"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10287"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9311"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9344"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10050"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:Yes;Exploited:Yes;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Windows ALPC Elevation of Privilege Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"<a href=\"https://twitter.com/anarcheuz\">Anthony LAOU HINE TSUEI</a> of <a href=\"https://keenlab.tencent.com/en/\">Tencent Keen Security Lab</a>​"}],"URL":[""]}],"CVE":"CVE-2018-8441","CVSSScoreSets":[{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11497"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11498"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11499"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>An elevation of privilege vulnerability exists due to an integer overflow in Windows Subsystem for Linux. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.</p>\n<p>To exploit the vulnerability, a locally authenticated attacker could run a specially crafted application.</p>\n<p>The security update addresses the vulnerability by correcting how Windows Subsystem for Linux handles objects in memory.</p>\n"},{"Ordinal":"20","Title":"Windows Subsystem for Linux","Type":7,"Value":"Windows Subsystem for Linux"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"38","ProductStatuses":[{"ProductID":["11497","11498","11499"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457128"},"ProductID":["11497","11498","11499"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343909","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457128"}],"RevisionHistory":[{"Date":"2018-09-11T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11497"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11498"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11499"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11497"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11498"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11499"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:N/A;DOS:N/A"},"Type":1}],"Title":{"Value":"Windows Subsystem for Linux Elevation of Privilege Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Tanghui Chen of <a href=\"http://xlab.baidu.com\">Baidu X-Lab Tianya Team</a>"}],"URL":[""]}],"CVE":"CVE-2018-8442","CVSSScoreSets":[{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10951"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10952"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11497"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11498"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11499"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11453"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11454"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11466"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10852"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10047"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10048"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10481"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10482"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10484"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9312"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10287"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9311"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9318"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9344"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10050"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10051"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10049"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10378"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10379"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10483"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10543"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system.</p>\n<p>An authenticated attacker could exploit this vulnerability by running a specially crafted application.</p>\n<p>The update addresses the vulnerability by correcting how the Windows kernel handles objects in memory.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>\n<p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is\tKernel memory read - unintentional read access to memory contents in kernel space from a user mode process.</p>\n"},{"Ordinal":"20","Title":"Windows Kernel","Type":7,"Value":"Windows Kernel"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"39","ProductStatuses":[{"ProductID":["10951","10952","11497","11498","11499","11453","11454","11466","10729","10735","10852","10853","10816","10855","10047","10048","10481","10482","10484","9312","10287","9311","9318","9344","10050","10051","10049","10378","10379","10483","10543"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457138"},"ProductID":["10951","10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343885","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457138"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457128"},"ProductID":["11497","11498","11499"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343909","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457128"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457142"},"ProductID":["11453","11454","11466"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343897","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457142"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457132"},"ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343892","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457132"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457131"},"ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343887","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457131"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457144"},"ProductID":["10047","10048","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4343900","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457144"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457145"},"ProductID":["10047","10048","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457145"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457129"},"ProductID":["10481","10482","10484","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4343898","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457129"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457143"},"ProductID":["10481","10482","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457143"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4458010"},"ProductID":["9312","10287","9311","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4458010"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457984"},"ProductID":["9312","10287","9311","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457984"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457135"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4343901","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457135"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457140"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457140"}],"RevisionHistory":[{"Date":"2018-09-11T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11497"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11498"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11499"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11466"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10047"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10048"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10287"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["9311"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["9344"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10050"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11497"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11498"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11499"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11466"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10047"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10048"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10287"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9311"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9344"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10050"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Windows Kernel Information Disclosure Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Tanghui Chen of <a href=\"http://xlab.baidu.com\">Baidu X-Lab Tianya Team</a>"}],"URL":[""]}],"CVE":"CVE-2018-8443","CVSSScoreSets":[{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10951"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10952"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11497"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11498"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11499"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11453"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11454"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11466"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10852"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10047"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10048"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10481"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10482"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10484"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9312"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10287"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9311"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9318"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9344"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10050"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10051"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10049"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10378"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10379"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10483"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10543"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system.</p>\n<p>An authenticated attacker could exploit this vulnerability by running a specially crafted application.</p>\n<p>The update addresses the vulnerability by correcting how the Windows kernel handles objects in memory.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>\n<p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is\tKernel memory read - unintentional read access to memory contents in kernel space from a user mode process.</p>\n"},{"Ordinal":"20","Title":"Windows Kernel","Type":7,"Value":"Windows Kernel"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"40","ProductStatuses":[{"ProductID":["10951","10952","11497","11498","11499","11453","11454","11466","10729","10735","10852","10853","10816","10855","10047","10048","10481","10482","10484","9312","10287","9311","9318","9344","10050","10051","10049","10378","10379","10483","10543"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457138"},"ProductID":["10951","10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343885","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457138"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457128"},"ProductID":["11497","11498","11499"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343909","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457128"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457142"},"ProductID":["11453","11454","11466"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343897","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457142"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457132"},"ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343892","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457132"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457131"},"ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343887","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457131"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457144"},"ProductID":["10047","10048","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4343900","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457144"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457145"},"ProductID":["10047","10048","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457145"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457129"},"ProductID":["10481","10482","10484","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4343898","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457129"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457143"},"ProductID":["10481","10482","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457143"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4458010"},"ProductID":["9312","10287","9311","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4458010"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457984"},"ProductID":["9312","10287","9311","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457984"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457135"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4343901","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457135"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457140"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457140"}],"RevisionHistory":[{"Date":"2018-09-11T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11497"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11498"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11499"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11466"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10047"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10048"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10287"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["9311"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["9344"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10050"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11497"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11498"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11499"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11466"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10047"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10048"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10287"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9311"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9344"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10050"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Windows Kernel Information Disclosure Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Haikuo Xie  of Baidu Security Lab"}],"URL":[""]}],"CVE":"CVE-2018-8444","CVSSScoreSets":[{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10481"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10482"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10484"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10378"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10379"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10483"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10543"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>An information disclosure vulnerability exists in the way that the Microsoft Server Message Block 2.0 (SMBv2) server handles certain requests. An attacker who successfully exploited this vulnerability could craft a special packet, which could lead to information disclosure from the server.</p>\n<p>To exploit the vulnerability, in most situations, an unauthenticated attacker could send a specially crafted packet to a targeted SMBv2 server.</p>\n<p>The security update addresses the vulnerability by correcting how SMBv2 handles these specially crafted requests.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>\n<p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is\tKernel memory read - unintentional read access to memory contents in kernel space from a user mode process.</p>\n"},{"Ordinal":"20","Title":"Windows SMB Server","Type":7,"Value":"Windows SMB Server"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"41","ProductStatuses":[{"ProductID":["10729","10735","10481","10482","10484","10378","10379","10483","10543"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457132"},"ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343892","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457132"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457129"},"ProductID":["10481","10482","10484","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4343898","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457129"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457143"},"ProductID":["10481","10482","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457143"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457135"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4343901","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457135"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457140"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457140"}],"RevisionHistory":[{"Date":"2018-09-11T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A;Older Software Release:Exploitation Less Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Windows SMB Information Disclosure Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Alex Ionescu, <a href=\"https://www.crowdstrike.com\">CrowdStrike Inc.</a>"}],"URL":[""]}],"CVE":"CVE-2018-8445","CVSSScoreSets":[{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11497"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11498"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11499"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system.</p>\n<p>An authenticated attacker could exploit this vulnerability by running a specially crafted application.</p>\n<p>The update addresses the vulnerability by correcting how the Windows kernel handles objects in memory.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>\n<p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is\tKernel memory read - unintentional read access to memory contents in kernel space from a user mode process.</p>\n"},{"Ordinal":"20","Title":"Windows Kernel","Type":7,"Value":"Windows Kernel"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"42","ProductStatuses":[{"ProductID":["11497","11498","11499"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457128"},"ProductID":["11497","11498","11499"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343909","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457128"}],"RevisionHistory":[{"Date":"2018-09-11T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11497"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11498"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11499"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11497"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11498"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11499"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:N/A;DOS:N/A"},"Type":1}],"Title":{"Value":"Windows Kernel Information Disclosure Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Ruibo Liu of <a href=\"http://xlab.baidu.com\">Baidu X-Lab Tianya Team</a>"}],"URL":[""]}],"CVE":"CVE-2018-8446","CVSSScoreSets":[{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10951"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10952"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11497"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11498"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11499"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11453"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11454"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10852"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10047"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10048"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10481"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10482"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10484"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9312"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10287"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9311"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9318"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9344"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10050"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10051"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10049"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10378"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10379"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10483"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10543"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11466"],"TemporalScore":4.2,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system.</p>\n<p>To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application. The vulnerability would not allow an attacker to execute code or to elevate user rights directly, but it could be used to obtain information that could be used to try to further compromise the affected system.</p>\n<p>The update addresses the vulnerability by correcting how the Windows kernel handles objects in memory.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>\n<p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is\tKernel memory read - unintentional read access to memory contents in kernel space from a user mode process.</p>\n"},{"Ordinal":"20","Title":"Windows Kernel","Type":7,"Value":"Windows Kernel"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"43","ProductStatuses":[{"ProductID":["10951","10952","11497","11498","11499","11453","11454","10729","10735","10852","10853","10816","10855","10047","10048","10481","10482","10484","9312","10287","9311","9318","9344","10050","10051","10049","10378","10379","10483","10543","11466"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457138"},"ProductID":["10951","10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343885","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457138"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457128"},"ProductID":["11497","11498","11499"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343909","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457128"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457142"},"ProductID":["11453","11454","11466"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343897","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457142"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457132"},"ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343892","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457132"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457131"},"ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343887","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457131"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457144"},"ProductID":["10047","10048","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4343900","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457144"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457145"},"ProductID":["10047","10048","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457145"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457129"},"ProductID":["10481","10482","10484","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4343898","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457129"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457143"},"ProductID":["10481","10482","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457143"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4458010"},"ProductID":["9312","10287","9311","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4458010"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457984"},"ProductID":["9312","10287","9311","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457984"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457135"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4343901","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457135"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457140"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457140"}],"RevisionHistory":[{"Date":"2018-09-11T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11497"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11498"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11499"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10047"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10048"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10287"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["9311"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["9344"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10050"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11466"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11497"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11498"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11499"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10047"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10048"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10287"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9311"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9344"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10050"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11466"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Windows Kernel Information Disclosure Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"ca0nguyen working with <a href=\"http://www.zerodayinitiative.com/\">Trend Micro's Zero Day Initiative</a>"}],"URL":[""]}],"CVE":"CVE-2018-8447","CVSSScoreSets":[{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10555-10378"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10336-9312"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10336-9318"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10951"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10952"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-11497"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-11498"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-11453"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-11454"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10729"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10735"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10852"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10853"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10816"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10047"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10048"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10481"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10482"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10484"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10051"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10483"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, the attacker could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>\n<p>An attacker could host a specially crafted website designed to exploit the vulnerability through Internet Explorer and then convince a user to view the website. The attacker could also take advantage of compromised websites, or websites that accept or host user-provided content or advertisements, by adding specially crafted content that could exploit the vulnerability. However, in all cases an attacker would have no way to force a user to view the attacker-controlled content. Instead, an attacker would have to convince a user to take action, typically by an enticement in an email or instant message, or by getting the user to open an attachment sent through email.</p>\n<p>The security update addresses the vulnerability by modifying how Internet Explorer handles objects in memory.</p>\n"},{"Ordinal":"20","Title":"Internet Explorer","Type":7,"Value":"Internet Explorer"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"44","ProductStatuses":[{"ProductID":["10555-10378","10336-9312","10336-9318","10486-10951","10486-10952","10486-11497","10486-11498","10486-11453","10486-11454","10486-10729","10486-10735","10486-10852","10486-10853","10486-10816","10486-10047","10486-10048","10486-10481","10486-10482","10486-10484","10486-10051","10486-10483"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457135"},"ProductID":["10555-10378"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4343901","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457135"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457426"},"ProductID":["10555-10378","10336-9312","10336-9318","10486-10047","10486-10048","10486-10481","10486-10482","10486-10051","10486-10483"],"RestartRequired":{"Value":"Yes"},"SubType":"IE Cumulative","Supercedence":"4343205","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457426"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4458010"},"ProductID":["10336-9312","10336-9318"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4458010"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457138"},"ProductID":["10486-10951","10486-10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343885","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457138"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457128"},"ProductID":["10486-11497","10486-11498"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343909","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457128"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457142"},"ProductID":["10486-11453","10486-11454"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343897","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457142"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457132"},"ProductID":["10486-10729","10486-10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343892","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457132"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457131"},"ProductID":["10486-10852","10486-10853","10486-10816"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343887","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457131"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457144"},"ProductID":["10486-10047","10486-10048","10486-10051"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4343900","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457144"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457129"},"ProductID":["10486-10481","10486-10482","10486-10484","10486-10483"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4343898","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457129"}],"RevisionHistory":[{"Date":"2018-09-11T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10555-10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10336-9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10336-9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-11497"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-11498"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10047"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10048"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10555-10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10336-9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10336-9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-11497"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-11498"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10486-10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10047"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10048"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10486-10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10486-10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Internet Explorer Memory Corruption Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"James Forshaw of <a href=\"http://www.google.com/\" >Google Project Zero</a>"}],"URL":[""]}],"CVE":"CVE-2018-8449","CVSSScoreSets":[{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10951"],"TemporalScore":4.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10952"],"TemporalScore":4.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11497"],"TemporalScore":4.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11498"],"TemporalScore":4.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11499"],"TemporalScore":4.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11453"],"TemporalScore":4.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11454"],"TemporalScore":4.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11466"],"TemporalScore":4.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":4.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":4.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10852"],"TemporalScore":4.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":4.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":4.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":4.8,"Vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A security feature bypass exists when Device Guard incorrectly validates an untrusted file. An attacker who successfully exploited this vulnerability could make an unsigned file appear to be signed. Because Device Guard relies on the signature to determine the file is non-malicious, Device Guard could then allow a malicious file to execute.</p>\n<p>In an attack scenario, an attacker could make an untrusted file appear to be a trusted file.</p>\n<p>The update addresses the vulnerability by correcting how Device Guard handles untrusted files.</p>\n"},{"Ordinal":"20","Title":"Device Guard","Type":7,"Value":"Device Guard"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"45","ProductStatuses":[{"ProductID":["10951","10952","11497","11498","11499","11453","11454","11466","10729","10735","10852","10853","10816","10855"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457138"},"ProductID":["10951","10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343885","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457138"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457128"},"ProductID":["11497","11498","11499"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343909","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457128"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457142"},"ProductID":["11453","11454","11466"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343897","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457142"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457132"},"ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343892","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457132"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457131"},"ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343887","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457131"}],"RevisionHistory":[{"Date":"2018-09-11T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11497"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11498"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11499"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11466"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11497"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11498"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11499"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11466"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Device Guard Security Feature Bypass Vulnerability"}},{"Acknowledgments":[],"CVE":"CVE-2018-8452","CVSSScoreSets":[{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11447"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10951"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10952"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11497"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11498"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11453"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11454"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10729"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10735"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10852"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10853"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10816"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10951"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10952"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-11497"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-11498"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-11453"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-11454"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10729"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10735"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10852"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10853"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10816"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10047"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10048"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10481"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10482"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10484"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10051"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10483"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Microsoft browsers. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.</p>\n<p>In a web-based attack scenario, an attacker could host a website in an attempt to exploit the vulnerability. In addition, compromised websites and websites that accept or host user-provided content could contain specially crafted content that could exploit the vulnerability. However, in all cases an attacker would have no way to force a user to view the attacker-controlled content. Instead, an attacker would have to convince a user to take action. For example, an attacker could trick a user into clicking a link that takes the user to the attacker's site.</p>\n<p>The security update addresses the vulnerability by changing how the scripting engine handles objects in memory.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>\n<p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is uninitialized memory.</p>\n"},{"Ordinal":"20","Title":"Microsoft Scripting Engine","Type":7,"Value":"Microsoft Scripting Engine"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"46","ProductStatuses":[{"ProductID":["11447","10724-10951","10724-10952","10724-11497","10724-11498","10724-11453","10724-11454","10724-10729","10724-10735","10724-10852","10724-10853","10724-10816","10486-10951","10486-10952","10486-11497","10486-11498","10486-11453","10486-11454","10486-10729","10486-10735","10486-10852","10486-10853","10486-10816","10486-10047","10486-10048","10486-10481","10486-10482","10486-10484","10486-10051","10486-10483"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Commit"},"ProductID":["11447"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://github.com/Microsoft/ChakraCore/releases/tag/v1.11.1"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457138"},"ProductID":["10724-10951","10724-10952","10486-10951","10486-10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343885","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457138"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457128"},"ProductID":["10724-11497","10724-11498","10486-11497","10486-11498"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343909","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457128"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457142"},"ProductID":["10724-11453","10724-11454","10486-11453","10486-11454"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343897","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457142"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457132"},"ProductID":["10724-10729","10724-10735","10486-10729","10486-10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343892","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457132"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457131"},"ProductID":["10724-10852","10724-10853","10724-10816","10486-10852","10486-10853","10486-10816"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343887","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457131"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457144"},"ProductID":["10486-10047","10486-10048","10486-10051"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4343900","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457144"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457426"},"ProductID":["10486-10047","10486-10048","10486-10481","10486-10482","10486-10051","10486-10483"],"RestartRequired":{"Value":"Yes"},"SubType":"IE Cumulative","Supercedence":"4343205","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457426"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457129"},"ProductID":["10486-10481","10486-10482","10486-10484","10486-10483"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4343898","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457129"}],"RevisionHistory":[{"Date":"2018-09-11T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11447"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10724-10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10724-10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10724-11497"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10724-11498"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10724-11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10724-11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10724-10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10724-10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10724-10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10724-10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10724-10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-11497"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-11498"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-10047"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-10048"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10486-10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11447"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-11497"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-11498"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Low"},"ProductID":["10724-10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-11497"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-11498"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Low"},"ProductID":["10486-10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10047"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10048"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Low"},"ProductID":["10486-10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Low"},"ProductID":["10486-10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A;DOS:N/A"},"Type":1}],"Title":{"Value":"Scripting Engine Information Disclosure Vulnerability"}},{"Acknowledgments":[],"CVE":"CVE-2018-8455","CVSSScoreSets":[{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10951"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10952"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11497"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11498"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11499"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11453"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11454"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11466"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10852"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10481"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10482"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10484"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10483"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10543"],"TemporalScore":6.3,"Vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.</p>\n<p>To exploit the vulnerability, a locally authenticated attacker could run a specially crafted application.</p>\n<p>The security update addresses the vulnerability by ensuring the Windows Kernel properly handles objects in memory.</p>\n"},{"Ordinal":"20","Title":"Windows Kernel","Type":7,"Value":"Windows Kernel"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"47","ProductStatuses":[{"ProductID":["10951","10952","11497","11498","11499","11453","11454","11466","10852","10853","10816","10855","10481","10482","10484","10483","10543"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457138"},"ProductID":["10951","10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343885","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457138"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457128"},"ProductID":["11497","11498","11499"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343909","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457128"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457142"},"ProductID":["11453","11454","11466"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343897","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457142"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4598243"},"ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4593226","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4598243"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4598243"},"ProductID":["10852","10853","10816","10855"],"Type":6,"URL":"https://support.microsoft.com/help/4598243"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4598285"},"ProductID":["10481","10482","10484","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4592484","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4598285"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4598285"},"ProductID":["10481","10482","10484","10483","10543"],"Type":6,"URL":"https://support.microsoft.com/help/4598285"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4598275"},"ProductID":["10481","10482","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4598275"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4598275"},"ProductID":["10481","10482","10483","10543"],"Type":6,"URL":"https://support.microsoft.com/help/4598275"}],"RevisionHistory":[{"Date":"2018-09-11T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2021-01-12T08:00:00Z","Description":{"Value":"<p>To comprehensively address CVE-2018-8455, Microsoft has released the following: January 2021 Security Update (4598243) for all affected versions of Windows 10 version 1607 and Windows Server 2016; January 2021 Monthly Rollup (4598285) and Security Only (4598275) updates for all affected versions of Windows 8.1 and Windows Server 2012 R2. Microsoft strongly recommends that customers install the updates to be fully protected from the vulnerability. Customers whose systems are configured to receive automatic updates do not need to take any further action.</p>\n"},"Number":"2.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11497"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11498"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11499"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11466"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11497"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11498"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11499"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11466"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Windows Kernel Elevation of Privilege Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"<a href=\"https://twitter.com/S0rryMybad\">Qixun Zhao</a> of <a href=\"http://www.360.com/\">Qihoo 360 Vulcan Team</a>​"}],"URL":[""]}],"CVE":"CVE-2018-8456","CVSSScoreSets":[{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11447"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10951"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10952"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11497"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11498"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11453"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11454"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user.</p>\n<p>If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>\n<p>The security update addresses the vulnerability by modifying how the ChakraCore scripting engine handles objects in memory.</p>\n"},{"Ordinal":"20","Title":"Microsoft Scripting Engine","Type":7,"Value":"Microsoft Scripting Engine"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"48","ProductStatuses":[{"ProductID":["11447","10724-10951","10724-10952","10724-11497","10724-11498","10724-11453","10724-11454"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Commit"},"ProductID":["11447"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://github.com/Microsoft/ChakraCore/releases/tag/v1.11.1"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457138"},"ProductID":["10724-10951","10724-10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343885","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457138"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457128"},"ProductID":["10724-11497","10724-11498"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343909","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457128"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457142"},"ProductID":["10724-11453","10724-11454"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343897","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457142"}],"RevisionHistory":[{"Date":"2018-09-11T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11447"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11497"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11498"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11447"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11497"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11498"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A;DOS:N/A"},"Type":1}],"Title":{"Value":"Scripting Engine Memory Corruption Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Microsoft Chakra Core Team"}],"URL":[""]}],"CVE":"CVE-2018-8457","CVSSScoreSets":[{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10951"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10952"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11497"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11498"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11453"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11454"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10729"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10735"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10852"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10853"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10816"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10555-10378"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10951"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10952"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-11497"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-11498"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-11453"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-11454"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10729"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10735"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10852"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10853"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10816"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10047"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10048"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10481"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10482"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10484"],"TemporalScore":6.7,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10051"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O"},{"BaseScore":6.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10483"],"TemporalScore":5.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>\n<p>In a web-based attack scenario, an attacker could host a specially crafted website designed to exploit the vulnerability through a Microsoft browser and then convince a user to view the website. An attacker could also embed an ActiveX control marked &quot;safe for initialization&quot; in an application or Microsoft Office document that hosts the browser rendering engine. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p>\n<p>The security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.</p>\n"},{"Ordinal":"20","Title":"Microsoft Scripting Engine","Type":7,"Value":"Microsoft Scripting Engine"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"49","ProductStatuses":[{"ProductID":["10724-10951","10724-10952","10724-11497","10724-11498","10724-11453","10724-11454","10724-10729","10724-10735","10724-10852","10724-10853","10724-10816","10555-10378","10486-10951","10486-10952","10486-11497","10486-11498","10486-11453","10486-11454","10486-10729","10486-10735","10486-10852","10486-10853","10486-10816","10486-10047","10486-10048","10486-10481","10486-10482","10486-10484","10486-10051","10486-10483"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457138"},"ProductID":["10724-10951","10724-10952","10486-10951","10486-10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343885","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457138"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457128"},"ProductID":["10724-11497","10724-11498","10486-11497","10486-11498"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343909","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457128"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457142"},"ProductID":["10724-11453","10724-11454","10486-11453","10486-11454"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343897","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457142"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457132"},"ProductID":["10724-10729","10724-10735","10486-10729","10486-10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343892","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457132"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457131"},"ProductID":["10724-10852","10724-10853","10724-10816","10486-10852","10486-10853","10486-10816"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343887","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457131"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457135"},"ProductID":["10555-10378"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4343901","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457135"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457426"},"ProductID":["10555-10378","10486-10047","10486-10048","10486-10481","10486-10482","10486-10051","10486-10483"],"RestartRequired":{"Value":"Yes"},"SubType":"IE Cumulative","Supercedence":"4343205","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457426"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457144"},"ProductID":["10486-10047","10486-10048","10486-10051"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4343900","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457144"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457129"},"ProductID":["10486-10481","10486-10482","10486-10484","10486-10483"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4343898","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457129"}],"RevisionHistory":[{"Date":"2018-09-11T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11497"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11498"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10555-10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-11497"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-11498"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10047"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10048"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10486-10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11497"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11498"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10724-10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10555-10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-11497"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-11498"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10486-10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10047"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10048"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10486-10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10486-10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10486-10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:Yes;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Scripting Engine Memory Corruption Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Yu Zhou of Ant-financial Light-Year Security Lab"}],"URL":[""]}],"CVE":"CVE-2018-8459","CVSSScoreSets":[{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11447"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11497"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11498"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user.</p>\n<p>If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>\n<p>The security update addresses the vulnerability by modifying how the ChakraCore scripting engine handles objects in memory.</p>\n"},{"Ordinal":"20","Title":"Microsoft Scripting Engine","Type":7,"Value":"Microsoft Scripting Engine"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"50","ProductStatuses":[{"ProductID":["11447","10724-11497","10724-11498"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Commit"},"ProductID":["11447"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://github.com/Microsoft/ChakraCore/releases/tag/v1.11.1"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457128"},"ProductID":["10724-11497","10724-11498"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343909","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457128"}],"RevisionHistory":[{"Date":"2018-09-11T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11447"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11497"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11498"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11447"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11497"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11498"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A;DOS:N/A"},"Type":1}],"Title":{"Value":"Scripting Engine Memory Corruption Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Lokihardt of <a href=\"https://www.google.com\">Google Project Zero</a>"}],"URL":[""]}],"CVE":"CVE-2018-8463","CVSSScoreSets":[{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11497"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11498"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppContainer sandbox in the browser. An attacker who successfully exploited this vulnerability could gain elevated privileges and break out of the Edge AppContainer sandbox.</p>\n<p>The vulnerability by itself does not allow arbitrary code to run. However, this vulnerability could be used in conjunction with one or more vulnerabilities (for example a remote code execution vulnerability and another elevation of privilege vulnerability) to take advantage of the elevated privileges when running.</p>\n<p>The security update addresses the vulnerability by modifying how Microsoft Edge handles sandboxing.</p>\n"},{"Ordinal":"20","Title":"Microsoft Edge (HTML-based)","Type":7,"Value":"Microsoft Edge (HTML-based)"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"53","ProductStatuses":[{"ProductID":["10724-11497","10724-11498"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457128"},"ProductID":["10724-11497","10724-11498"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343909","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457128"}],"RevisionHistory":[{"Date":"2018-09-11T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10724-11497"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10724-11498"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-11497"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-11498"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A;DOS:N/A"},"Type":1}],"Title":{"Value":"Microsoft Edge Elevation of Privilege Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Yoav Alon and Netanel Ben-Simon from Check Point Research"}],"URL":[""]}],"CVE":"CVE-2018-8464","CVSSScoreSets":[{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10951"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10952"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11497"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11498"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11453"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11454"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10729"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10735"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10852"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10853"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10816"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A remote code execution vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory. The vulnerability could corrupt memory in such a way that enables an attacker to execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>\n<p>To exploit the vulnerability, in a web-based attack scenario, an attacker could host a website that contains malicious PDF content. In addition, compromised websites and websites that accept or host user-provided content could contain specially crafted PDF content that could exploit the vulnerability. However, in all cases an attacker would have no way to force a user to view the attacker-controlled content. Instead, an attacker would have to convince a user to take action. For example, an attacker could trick a user into clicking a link that takes the user to the attacker's site.</p>\n<p>The security update addresses the vulnerability by modifying how Microsoft Edge PDF Reader handles objects in memory.</p>\n"},{"Ordinal":"20","Title":"Microsoft Edge (HTML-based)","Type":7,"Value":"Microsoft Edge (HTML-based)"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"54","ProductStatuses":[{"ProductID":["10724-10951","10724-10952","10724-11497","10724-11498","10724-11453","10724-11454","10724-10729","10724-10735","10724-10852","10724-10853","10724-10816"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457138"},"ProductID":["10724-10951","10724-10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343885","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457138"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457128"},"ProductID":["10724-11497","10724-11498"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343909","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457128"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457142"},"ProductID":["10724-11453","10724-11454"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343897","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457142"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457132"},"ProductID":["10724-10729","10724-10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343892","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457132"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457131"},"ProductID":["10724-10852","10724-10853","10724-10816"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343887","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457131"}],"RevisionHistory":[{"Date":"2018-09-11T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11497"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11498"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11497"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11498"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10724-10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A;DOS:N/A"},"Type":1}],"Title":{"Value":"Microsoft Edge PDF Remote Code Execution Vulnerability"}},{"Acknowledgments":[],"CVE":"CVE-2018-8465","CVSSScoreSets":[{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11447"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10951"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10952"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11497"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11498"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11453"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11454"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10852"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10853"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10816"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based). The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>\n<p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft Edge (HTML-based) and then convince a user to view the website. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p>\n<p>The security update addresses the vulnerability by modifying how the Chakra scripting engine handles objects in memory.</p>\n"},{"Ordinal":"20","Title":"Microsoft Scripting Engine","Type":7,"Value":"Microsoft Scripting Engine"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"55","ProductStatuses":[{"ProductID":["11447","10724-10951","10724-10952","10724-11497","10724-11498","10724-11453","10724-11454","10724-10852","10724-10853","10724-10816"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Commit"},"ProductID":["11447"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://github.com/Microsoft/ChakraCore/releases/tag/v1.11.1"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457138"},"ProductID":["10724-10951","10724-10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343885","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457138"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457128"},"ProductID":["10724-11497","10724-11498"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343909","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457128"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457142"},"ProductID":["10724-11453","10724-11454"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343897","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457142"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457131"},"ProductID":["10724-10852","10724-10853","10724-10816"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343887","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457131"}],"RevisionHistory":[{"Date":"2018-09-11T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11447"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11497"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11498"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11447"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11497"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11498"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10724-10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A;DOS:N/A"},"Type":1}],"Title":{"Value":"Chakra Scripting Engine Memory Corruption Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Lokihardt of <a href=\"https://www.google.com\">Google Project Zero</a>"}],"URL":[""]}],"CVE":"CVE-2018-8466","CVSSScoreSets":[{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11447"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10951"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10952"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11497"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11498"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11453"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11454"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10729"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10735"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10852"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10853"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10816"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based). The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>\n<p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft Edge (HTML-based) and then convince a user to view the website. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p>\n<p>The security update addresses the vulnerability by modifying how the Chakra scripting engine handles objects in memory.</p>\n"},{"Ordinal":"20","Title":"Microsoft Scripting Engine","Type":7,"Value":"Microsoft Scripting Engine"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"56","ProductStatuses":[{"ProductID":["11447","10724-10951","10724-10952","10724-11497","10724-11498","10724-11453","10724-11454","10724-10729","10724-10735","10724-10852","10724-10853","10724-10816"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Commit"},"ProductID":["11447"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://github.com/Microsoft/ChakraCore/releases/tag/v1.11.1"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457138"},"ProductID":["10724-10951","10724-10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343885","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457138"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457128"},"ProductID":["10724-11497","10724-11498"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343909","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457128"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457142"},"ProductID":["10724-11453","10724-11454"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343897","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457142"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457132"},"ProductID":["10724-10729","10724-10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343892","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457132"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457131"},"ProductID":["10724-10852","10724-10853","10724-10816"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343887","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457131"}],"RevisionHistory":[{"Date":"2018-09-11T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11447"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11497"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11498"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11447"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11497"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11498"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10724-10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A;DOS:N/A"},"Type":1}],"Title":{"Value":"Chakra Scripting Engine Memory Corruption Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Lokihardt of <a href=\"https://www.google.com\">Google Project Zero</a>"}],"URL":[""]},{"Name":[{"Value":"<a href=\"https://twitter.com/S0rryMybad\">Qixun Zhao</a> of <a href=\"http://www.360.com/\">Qihoo 360 Vulcan Team</a>​"}],"URL":[""]}],"CVE":"CVE-2018-8467","CVSSScoreSets":[{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11447"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10951"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10952"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11497"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11498"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11453"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11454"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10729"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10735"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10852"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10853"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10816"],"TemporalScore":3.8,"Vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based). The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>\n<p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft Edge (HTML-based) and then convince a user to view the website. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p>\n<p>The security update addresses the vulnerability by modifying how the Chakra scripting engine handles objects in memory.</p>\n"},{"Ordinal":"20","Title":"Microsoft Scripting Engine","Type":7,"Value":"Microsoft Scripting Engine"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"57","ProductStatuses":[{"ProductID":["11447","10724-10951","10724-10952","10724-11497","10724-11498","10724-11453","10724-11454","10724-10729","10724-10735","10724-10852","10724-10853","10724-10816"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Commit"},"ProductID":["11447"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://github.com/Microsoft/ChakraCore/releases/tag/v1.11.1"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457138"},"ProductID":["10724-10951","10724-10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343885","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457138"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457128"},"ProductID":["10724-11497","10724-11498"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343909","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457128"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457142"},"ProductID":["10724-11453","10724-11454"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343897","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457142"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457132"},"ProductID":["10724-10729","10724-10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343892","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457132"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457131"},"ProductID":["10724-10852","10724-10853","10724-10816"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343887","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457131"}],"RevisionHistory":[{"Date":"2018-09-11T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11447"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11497"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11498"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10724-10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11447"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11497"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11498"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10724-10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10724-10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A;DOS:N/A"},"Type":1}],"Title":{"Value":"Chakra Scripting Engine Memory Corruption Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Lokihardt of <a href=\"https://www.google.com\">Google Project Zero</a>"}],"URL":[""]}],"CVE":"CVE-2018-8468","CVSSScoreSets":[{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10951"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10952"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11497"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11498"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11499"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11453"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11454"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10852"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10047"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10048"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10481"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10482"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10484"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9312"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10287"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9311"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9318"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9344"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10050"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10051"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10049"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10378"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10379"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10483"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10543"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11466"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>An elevation of privilege vulnerability exists in Windows that allows a sandbox escape. An attacker who successfully exploited the vulnerability could use the sandbox escape to elevate privileges on an affected system.</p>\n<p>This vulnerability by itself does not allow arbitrary code execution. However, the vulnerability could allow arbitrary code to run if an attacker uses it in combination with another vulnerability, such as a remote code execution vulnerability or another elevation of privilege vulnerability, that can leverage the elevated privileges when code execution is attempted.</p>\n<p>The security update addresses the vulnerability by correcting how Windows parses files.</p>\n"},{"Ordinal":"20","Title":"Windows Shell","Type":7,"Value":"Windows Shell"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"58","ProductStatuses":[{"ProductID":["10951","10952","11497","11498","11499","11453","11454","10729","10735","10852","10853","10816","10855","10047","10048","10481","10482","10484","9312","10287","9311","9318","9344","10050","10051","10049","10378","10379","10483","10543","11466"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457138"},"ProductID":["10951","10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343885","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457138"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457128"},"ProductID":["11497","11498","11499"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343909","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457128"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457142"},"ProductID":["11453","11454","11466"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343897","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457142"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457132"},"ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343892","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457132"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457131"},"ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343887","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457131"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457144"},"ProductID":["10047","10048","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4343900","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457144"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457145"},"ProductID":["10047","10048","10050","10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457145"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457129"},"ProductID":["10481","10482","10484","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4343898","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457129"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457143"},"ProductID":["10481","10482","10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457143"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4458010"},"ProductID":["9312","10287","9311","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4458010"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457984"},"ProductID":["9312","10287","9311","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457984"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457135"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4343901","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457135"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457140"},"ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457140"}],"RevisionHistory":[{"Date":"2018-09-11T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2018-09-12T07:00:00Z","Description":{"Value":"<p>Corrected vulnerability description. This is an informational change only.</p>\n"},"Number":"1.1"},{"Date":"2018-10-04T07:00:00Z","Description":{"Value":"<p>Updated Security Impact values.  This is an informational change only.</p>\n"},"Number":"1.2"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11497"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11498"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11499"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10047"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10048"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10287"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["9311"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["9344"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10050"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11466"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11497"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11498"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11499"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10047"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10048"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10287"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9311"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9344"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10050"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11466"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Windows Elevation of Privilege Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Lokihardt of <a href=\"https://www.google.com\">Google Project Zero</a>\n"}],"URL":[""]},{"Name":[{"Value":"Yang Yu & Zhipeng Huo of <a href=\"https://xlab.tencent.com/en/\">Tencent Security Xuanwu Lab</a>"}],"URL":[""]}],"CVE":"CVE-2018-8469","CVSSScoreSets":[{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10951"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10952"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11497"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11498"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11453"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-11454"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10729"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10735"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10852"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10853"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10724-10816"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppContainer sandbox in the browser. An attacker who successfully exploited this vulnerability could gain elevated privileges and break out of the Edge AppContainer sandbox.</p>\n<p>The vulnerability by itself does not allow arbitrary code to run. However, this vulnerability could be used in conjunction with one or more vulnerabilities (for example a remote code execution vulnerability and another elevation of privilege vulnerability) to take advantage of the elevated privileges when running.</p>\n<p>The security update addresses the vulnerability by modifying how Microsoft Edge handles sandboxing.</p>\n"},{"Ordinal":"20","Title":"Microsoft Edge (HTML-based)","Type":7,"Value":"Microsoft Edge (HTML-based)"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"59","ProductStatuses":[{"ProductID":["10724-10951","10724-10952","10724-11497","10724-11498","10724-11453","10724-11454","10724-10729","10724-10735","10724-10852","10724-10853","10724-10816"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457138"},"ProductID":["10724-10951","10724-10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343885","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457138"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457128"},"ProductID":["10724-11497","10724-11498"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343909","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457128"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457142"},"ProductID":["10724-11453","10724-11454"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343897","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457142"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457132"},"ProductID":["10724-10729","10724-10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343892","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457132"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457131"},"ProductID":["10724-10852","10724-10853","10724-10816"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343887","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457131"}],"RevisionHistory":[{"Date":"2018-09-11T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10724-10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10724-10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10724-11497"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10724-11498"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10724-11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10724-11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10724-10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10724-10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10724-10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10724-10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10724-10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-11497"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-11498"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10724-10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Low"},"ProductID":["10724-10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A;DOS:N/A"},"Type":1}],"Title":{"Value":"Microsoft Edge Elevation of Privilege Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"<a href=\"https://twitter.com/kinugawamasato\">Masato Kinugawa</a> of <a href=\"https://cure53.de/\">Cure53</a>​"}],"URL":[""]}],"CVE":"CVE-2018-8470","CVSSScoreSets":[{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10951"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10952"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-11497"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-11498"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-11453"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-11454"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10729"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10735"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10852"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10853"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10816"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10047"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10048"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10481"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10482"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10484"],"TemporalScore":3.9,"Vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":2.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10051"],"TemporalScore":2.2,"Vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":2.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10486-10483"],"TemporalScore":2.2,"Vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A security feature bypass vulnerability exists in Internet Explorer due to how scripts are handled that allows a universal cross-site scripting (UXSS) condition. An attacker could use the UXSS vulnerability to access any session belonging to web pages currently opened (or cached) by the browser at the time the attack is triggered.</p>\n<p>To exploit the UXSS vulnerability, a user must be logged on and running an affected version of Internet Explorer. The user would then need to browse to a malicious website or a website serving the malicious code.</p>\n<p>The security update addresses the UXSS vulnerability by helping to ensure that Internet Explorer properly handles scripts.</p>\n"},{"Ordinal":"20","Title":"Internet Explorer","Type":7,"Value":"Internet Explorer"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"60","ProductStatuses":[{"ProductID":["10486-10951","10486-10952","10486-11497","10486-11498","10486-11453","10486-11454","10486-10729","10486-10735","10486-10852","10486-10853","10486-10816","10486-10047","10486-10048","10486-10481","10486-10482","10486-10484","10486-10051","10486-10483"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457138"},"ProductID":["10486-10951","10486-10952"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343885","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457138"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457128"},"ProductID":["10486-11497","10486-11498"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343909","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457128"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457142"},"ProductID":["10486-11453","10486-11454"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343897","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457142"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457132"},"ProductID":["10486-10729","10486-10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343892","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457132"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457131"},"ProductID":["10486-10852","10486-10853","10486-10816"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343887","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457131"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457144"},"ProductID":["10486-10047","10486-10048","10486-10051"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4343900","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457144"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457426"},"ProductID":["10486-10047","10486-10048","10486-10481","10486-10482","10486-10051","10486-10483"],"RestartRequired":{"Value":"Yes"},"SubType":"IE Cumulative","Supercedence":"4343205","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457426"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457129"},"ProductID":["10486-10481","10486-10482","10486-10484","10486-10483"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"4343898","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457129"}],"RevisionHistory":[{"Date":"2018-09-11T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10486-10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10486-10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10486-11497"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10486-11498"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10486-11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10486-11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10486-10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10486-10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10486-10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10486-10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10486-10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10486-10047"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10486-10048"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10486-10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10486-10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10486-10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10486-10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10486-10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-11497"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-11498"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Low"},"ProductID":["10486-10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10047"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10048"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10486-10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Low"},"ProductID":["10486-10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Low"},"ProductID":["10486-10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A;DOS:N/A"},"Type":1}],"Title":{"Value":"Internet Explorer Security Feature Bypass Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"<a href=\"https://twitter.com/n_joly\">Nicolas Joly</a> of Microsoft Corporation"}],"URL":[""]}],"CVE":"CVE-2018-8331","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an attacker could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.</p>\n<p>Exploitation of the vulnerability requires that a user open a specially crafted file with an affected version of Microsoft Excel. In an email attack scenario, an attacker could exploit the vulnerability by sending the specially crafted file to the user and convincing the user to open the file. In a web-based attack scenario, an attacker could host a website (or leverage a compromised website that accepts or hosts user-provided content) containing a specially crafted file designed to exploit the vulnerability. An attacker would have no way to force users to visit the website. Instead, an attacker would have to convince users to click a link, typically by way of an enticement in an email or instant message, and then convince them to open the specially crafted file.</p>\n<p>The security update addresses the vulnerability by correcting how Microsoft Excel handles objects in memory.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>I am being offered this update for software that is not specifically indicated as being affected in the Affected Software and Vulnerability Severity Ratings table. Why am I being offered this update?</strong></p>\n<p>When updates address vulnerable code that exists in a component that is shared between multiple Microsoft Office products or shared between multiple versions of the same Microsoft Office product, the update is considered to be applicable to all supported products and versions that contain the vulnerable component.</p>\n<p>For example, when an update applies to Microsoft Office 2007 products, only Microsoft Office 2007 may be specifically listed in the Affected Software table. However, the update could apply to Microsoft Word 2007, Microsoft Excel 2007, Microsoft Visio 2007, Microsoft Compatibility Pack, Microsoft Excel Viewer, or any other Microsoft Office 2007 product that is not specifically listed in the Affected Software table. Furthermore, when an update applies to Microsoft Office 2010 products, only Microsoft Office 2010 may be specifically listed in the Affected Software table. However, the update could apply to Microsoft Word 2010, Microsoft Excel 2010, Microsoft Visio 2010, Microsoft Visio Viewer, or any other Microsoft Office 2010 product that is not specifically listed in the Affected Software table.</p>\n<p>For more information on this behavior and recommended actions, see <a href=\"https://support.microsoft.com/kb/830335\">Microsoft Knowledge Base Article 830335</a>. For a list of Microsoft Office products that an update may apply to, refer to the Microsoft Knowledge Base Article associated with the specific update.</p>\n"},{"Ordinal":"20","Title":"Microsoft Office","Type":7,"Value":"Microsoft Office"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"6","ProductStatuses":[{"ProductID":["10734","10905","10906"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"ProductID":["10734"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":"https://go.microsoft.com/fwlink/p/?linkid=831049"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Click to Run"},"ProductID":["10905","10906"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""}],"RevisionHistory":[{"Date":"2018-09-11T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10734"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10905"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10906"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10734"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10905"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10906"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A;DOS:N/A"},"Type":1}],"Title":{"Value":"Microsoft Excel Remote Code Execution Vulnerability"}},{"Acknowledgments":[],"CVE":"ADV180023","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>This security update addresses the following vulnerabilities, which are described in Adobe Security Bulletin <a href=\"http://helpx.adobe.com/security/products/flash-player/apsb18-31.html\">APSB18-31</a>: CVE-2018-15967.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>How could an attacker exploit these vulnerabilities?</strong>\nIn a web-based attack scenario where the user is using Internet Explorer for the desktop, an attacker could host a specially crafted website that is designed to exploit any of these vulnerabilities through Internet Explorer and then convince a user to view the website. An attacker could also embed an ActiveX control marked &quot;safe for initialization&quot; in an application or Microsoft Office document that hosts the IE rendering engine. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit any of these vulnerabilities. In all cases, however, an attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically by clicking a link in an email message or in an Instant Messenger message that takes users to the attacker's website, or by opening an attachment sent through email.</p>\n<p>In a web-based attack scenario where the user is using Internet Explorer in the Windows 8-style UI, an attacker would first need to compromise a website already listed in the Compatibility View (CV) list. An attacker could then host a website that contains specially crafted Flash content designed to exploit any of these vulnerabilities through Internet Explorer and then convince a user to view the website. An attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically by clicking a link in an email message or in an Instant Messenger message that takes users to the attacker's website, or by opening an attachment sent through email. For more information about Internet Explorer and the CV List, please see the MSDN Article, Developer Guidance for websites with content for Adobe Flash Player in Windows 8.</p>\n"},{"Ordinal":"20","Title":"Adobe Flash Player","Type":7,"Value":"Adobe Flash Player"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"1","ProductStatuses":[{"ProductID":["10384-10951","10384-10952","10384-11497","10384-11498","10384-11453","10384-11454","10384-10729","10384-10735","10384-10852","10384-10853","10384-10816","10384-10481","10384-10482","10384-10484","10384-10378","10384-10483"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4457146"},"ProductID":["10384-10951","10384-10952","10384-11497","10384-11498","10384-11453","10384-11454","10384-10729","10384-10735","10384-10852","10384-10853","10384-10816","10384-10481","10384-10482","10384-10484","10384-10378","10384-10483"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"4343902","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4457146"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"<p>The following <a href=\"https://technet.microsoft.com/library/security/dn848375.aspx#Mitigation\">mitigating factors</a> may be helpful in your situation:</p>\n<ul>\n<li>In a web-based attack scenario where the user is using Internet Explorer for the desktop, an attacker could host a website that contains a webpage that is used to exploit any of these vulnerabilities. In addition, compromised websites and websites that accept or host user-provided content or advertisements could contain specially crafted content that could exploit any of these vulnerabilities. In all cases, however, an attacker would have no way to force users to visit these websites. Instead, an attacker would have to convince users to visit the website, typically by getting them to click a link in an email message or instant message that takes users to the attacker's website.</li>\n<li>Internet Explorer in the Windows 8-style UI will only play Flash content from sites listed on the Compatibility View (CV) list. This restriction requires an attacker to first compromise a website already listed on the CV list. An attacker could then host specially crafted Flash content designed to exploit any of these vulnerabilities through Internet Explorer and then convince a user to view the website. An attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically by clicking a link in an email message or in an instant message that takes users to the attacker's website, or by opening an attachment sent through email.</li>\n<li>By default, all supported versions of Microsoft Outlook and Windows Live Mail open HTML email messages in the Restricted sites zone. The Restricted sites zone, which disables scripts and ActiveX controls, helps reduce the risk of an attacker being able to use any of these vulnerabilities to execute malicious code. If a user clicks a link in an email message, the user could still be vulnerable to exploitation of any of these vulnerabilities through the web-based attack scenario.</li>\n<li>By default, Internet Explorer on Windows Server 2012 and Windows Server 2012 R2 runs in a restricted mode that is known as <a href=\"https://technet.microsoft.com/library/dd883248.aspx\">Enhanced Security Configuration</a>.  This mode can help reduce the likelihood of the exploitation of these Adobe Flash Player vulnerabilities in Internet Explorer.</li>\n</ul>\n"},"Type":1},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"<p>Workaround refers to a setting or configuration change that would help block known attack vectors before you apply the update.</p>\n<p><strong>Prevent Adobe Flash Player from running</strong>\nYou can disable attempts to instantiate Adobe Flash Player in Internet Explorer and other applications that honor the kill bit feature, such as Office 2007 and Office 2010, by setting the kill bit for the control in the registry.</p>\n<p><strong>Warning</strong> If you use Registry Editor incorrectly, you may cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that you can solve problems that result from using Registry Editor incorrectly. Use Registry Editor at your own risk.\nTo set the kill bit for the control in the registry, perform the following steps:</p>\n<ol>\n<li><p>Paste the following into a text file and save it with the .reg file extension.</p>\n<pre><code> Windows Registry Editor Version 5.00\n [HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Internet Explorer\\ActiveX Compatibility\\{D27CDB6E-AE6D-11CF-96B8-444553540000}]\n &quot;Compatibility Flags&quot;=dword:00000400\n\n [HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Internet Explorer\\ActiveX Compatibility\\{D27CDB6E-AE6D-11CF-96B8-444553540000}]\n &quot;Compatibility Flags&quot;=dword:00000400\n</code></pre>\n</li>\n<li><p>Double-click the .reg file to apply it to an individual system.</p>\n<p>You can also apply this workaround across domains by using Group Policy. For more information about Group Policy, see the TechNet article, Group Policy collection.</p>\n</li>\n</ol>\n<p><strong>Note</strong> You must restart Internet Explorer for your changes to take effect.\n<strong>Impact of workaround</strong>. There is no impact as long as the object is not intended to be used in Internet Explorer.\n<strong>How to undo the workaround.</strong> Delete the registry keys that were added in implementing this workaround.\n<strong>Prevent Adobe Flash Player from running in Internet Explorer through Group Policy</strong>\n<strong>Note</strong> The Group Policy MMC snap-in can be used to set policy for a machine, for an organizational unit, or for an entire domain. For more information about Group Policy, visit the following Microsoft Web sites:</p>\n<p><a href=\"https://technet.microsoft.com/library/hh831791\">Group Policy Overview</a>\n<a href=\"https://technet.microsoft.com/library/cc737816%28v=ws.10%29.aspx\">What is Group Policy Object Editor?</a>\n<a href=\"https://technet.microsoft.com/library/cc784165%28v=ws.10%29.aspx\">Core Group Policy tools and settings</a></p>\n<p>To disable Adobe Flash Player in Internet Explorer through Group Policy, perform the following steps:\n<strong>Note</strong> This workaround does not prevent Flash from being invoked from other applications, such as Microsoft Office 2007 or Microsoft Office 2010.</p>\n<ol>\n<li>Open the Group Policy Management Console and configure the console to work with the appropriate Group Policy object, such as local machine, OU, or domain GPO.</li>\n<li>Navigate to the following node:\n<strong>Administrative Templates -&gt; Windows Components -&gt; Internet Explorer -&gt; Security Features -&gt; Add-on Management</strong></li>\n<li>Double-click <strong>Turn off Adobe Flash in Internet Explorer and prevent applications from using Internet Explorer technology to instantiate Flash objects</strong>.</li>\n<li>Change the setting to Enabled.</li>\n<li>Click <strong>Apply</strong> and then click <strong>OK</strong> to return to the Group Policy Management Console.</li>\n<li>Refresh Group Policy on all systems or wait for the next scheduled Group Policy refresh interval for the settings to take effect.\n<strong>Prevent Adobe Flash Player from running in Office 2010 on affected systems</strong>\n<strong>Note</strong> This workaround does not prevent Adobe Flash Player from running in Internet Explorer.\n<strong>Warning</strong> If you use Registry Editor incorrectly, you may cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that you can solve problems that result from using Registry Editor incorrectly. Use Registry Editor at your own risk.\nFor detailed steps that you can use to prevent a control from running in Internet Explorer, see Microsoft Knowledge Base Article 240797. Follow the steps in the article to create a Compatibility Flags value in the registry to prevent a COM object from being instantiated in Internet Explorer.</li>\n</ol>\n<p>To disable Adobe Flash Player in Office 2010 only, set the kill bit for the ActiveX control for Adobe Flash Player in the registry using the following steps:</p>\n<ol>\n<li>Create a text file named Disable_Flash.reg with the following contents:</li>\n</ol>\n<pre><code>\t\t[HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Office\\Common\\COM\\Compatibility\\{D27CDB6E-AE6D-11CF-96B8-444553540000}]\n\t&quot;Compatibility Flags&quot;=dword:00000400\n</code></pre>\n<ol start=\"2\">\n<li>Double-click the .reg file to apply it to an individual system.</li>\n<li><strong>Note</strong> You must restart Internet Explorer for your changes to take effect.\nYou can also apply this workaround across domains by using Group Policy. For more information about Group Policy, see the TechNet article, <a href=\"http://go.microsoft.com/fwlink/?LinkID=215719\">Group Policy collection</a>.\n<strong>Prevent ActiveX controls from running in Office 2007 and Office 2010</strong></li>\n</ol>\n<p>To disable all ActiveX controls in Microsoft Office 2007 and Microsoft Office 2010, including Adobe Flash Player in Internet Explorer, perform the following steps:</p>\n<ol>\n<li>Click File, click Options, click Trust Center, and then click Trust Center Settings.</li>\n<li>Click ActiveX Settings in the left-hand pane, and then select Disable all controls without notifications.</li>\n<li>Click OK to save your settings.\n<strong>Impact of workaround</strong>. Office documents that use embedded ActiveX controls may not display as intended.\n<strong>How to undo the workaround</strong>.</li>\n</ol>\n<p>To re-enable ActiveX controls in Microsoft Office 2007 and Microsoft Office 2010, perform the following steps:</p>\n<ol>\n<li>Click File, click Options, click Trust Center, and then click Trust Center Settings.</li>\n<li>Click ActiveX Settings in the left-hand pane, and then deselect Disable all controls without notifications.</li>\n<li>Click OK to save your settings.\n<strong>Set Internet and Local intranet security zone settings to &quot;High&quot; to block ActiveX Controls and Active Scripting in these zones</strong>\nYou can help protect against exploitation of these vulnerabilities by changing your settings for the Internet security zone to block ActiveX controls and Active Scripting. You can do this by setting your browser security to High.</li>\n</ol>\n<p>To raise the browsing security level in Internet Explorer, perform the following steps:</p>\n<ol>\n<li>On the Internet Explorer <strong>Tools</strong> menu, click** Internet Option**s.</li>\n<li>In the <strong>Internet Options</strong> dialog box, click the <strong>Security</strong> tab, and then click <strong>Internet</strong>.</li>\n<li>Under <strong>Security level for this zone</strong>, move the slider to <strong>High</strong>. This sets the security level for all websites you visit to High.</li>\n<li>Click <strong>Local intranet</strong>.</li>\n<li>Under <strong>Security level for this zone</strong>, move the slider to <strong>High</strong>. This sets the security level for all websites you visit to High.</li>\n<li>Click <strong>OK</strong> to accept the changes and return to Internet Explorer.\n<strong>Note</strong> If no slider is visible, click <strong>Default Level</strong>, and then move the slider to <strong>High</strong>.\n<strong>Note</strong> Setting the level to High may cause some websites to work incorrectly. If you have difficulty using a website after you change this setting, and you are sure the site is safe to use, you can add that site to your list of trusted sites. This will allow the site to work correctly even with the security setting set to High.\n<strong>Impact of workaround</strong>. There are side effects to blocking ActiveX Controls and Active Scripting. Many websites on the Internet or an intranet use ActiveX or Active Scripting to provide additional functionality. For example, an online e-commerce site or banking site may use ActiveX Controls to provide menus, ordering forms, or even account statements. Blocking ActiveX Controls or Active Scripting is a global setting that affects all Internet and intranet sites. If you do not want to block ActiveX Controls or Active Scripting for such sites, use the steps outlined in &quot;Add sites that you trust to the Internet Explorer Trusted sites zone&quot;.\n<strong>Configure Internet Explorer to prompt before running Active Scripting or to disable Active Scripting in the Internet and Local intranet security zone</strong></li>\n</ol>\n<p>You can help protect against exploitation of these vulnerabilities by changing your settings to prompt before running Active Scripting or to disable Active Scripting in the Internet and Local intranet security zone. To do this, perform the following steps:</p>\n<ol>\n<li>In Internet Explorer, click <strong>Internet Options</strong> on the <strong>Tools</strong> menu.</li>\n<li>Click the <strong>Security</strong> tab.</li>\n<li>Click <strong>Internet</strong>, and then click <strong>Custom Level</strong>.</li>\n<li>Under <strong>Settings</strong>, in the <strong>Scripting</strong> section, under <strong>Active Scripting</strong>, click <strong>Prompt</strong> or <strong>Disable</strong>, and then click <strong>OK</strong>.</li>\n<li>Click <strong>Local intranet</strong>, and then click <strong>Custom Level</strong>.</li>\n<li>Under <strong>Settings</strong>, in the <strong>Scripting</strong> section, under <strong>Active Scripting</strong>, click <strong>Prompt</strong> or <strong>Disable</strong>, and then click <strong>OK</strong>.</li>\n<li>Click <strong>OK</strong> to return to Internet Explorer, and then click <strong>OK</strong> again.\n<strong>Note</strong> Disabling Active Scripting in the Internet and Local intranet security zones may cause some websites to work incorrectly. If you have difficulty using a website after you change this setting, and you are sure the site is safe to use, you can add that site to your list of trusted sites. This will allow the site to work correctly.\n<strong>Impact of workaround</strong>. There are side effects to prompting before running Active Scripting. Many websites that are on the Internet or on an intranet use Active Scripting to provide additional functionality. For example, an online e-commerce site or banking site may use Active Scripting to provide menus, ordering forms, or even account statements. Prompting before running Active Scripting is a global setting that affects all Internet and intranet sites. You will be prompted frequently when you enable this workaround. For each prompt, if you feel you trust the site that you are visiting, click <strong>Yes</strong> to run Active Scripting. If you do not want to be prompted for all these sites, use the steps outlined in &quot;Add sites that you trust to the Internet Explorer Trusted sites zone&quot;.\n<strong>Add sites that you trust to the Internet Explorer Trusted sites zone</strong>\nAfter you set Internet Explorer to require a prompt before it runs ActiveX controls and Active Scripting in the Internet zone and in the Local intranet zone, you can add sites that you trust to the Internet Explorer Trusted sites zone. This will allow you to continue to use trusted websites exactly as you do today, while helping to protect you from this attack on untrusted sites. We recommend that you add only sites that you trust to the Trusted sites zone.</li>\n</ol>\n<p>To do this, perform the following steps:</p>\n<ol>\n<li>In Internet Explorer, click <strong>Tools</strong>, click <strong>Internet Options</strong>, and then click the <strong>Security</strong> tab.</li>\n<li>In the <strong>Select a web content zone to specify its current security settings</strong> box, click <strong>Trusted Sites</strong>, and then click <strong>Sites</strong>.</li>\n<li>If you want to add sites that do not require an encrypted channel, click to clear the <strong>Require server verification (https:) for all sites in this zone</strong> check box.</li>\n<li>In the <strong>Add this website to the zone</strong> box, type the URL of a site that you trust, and then click <strong>Add</strong>.</li>\n<li>Repeat these steps for each site that you want to add to the zone.</li>\n<li>Click <strong>OK</strong> two times to accept the changes and return to Internet Explorer.\n<strong>Note</strong> Add any sites that you trust not to take malicious action on your system. Two sites in particular that you may want to add are *<strong>.windowsupdate.microsoft.com</strong> and *<strong>.update.microsoft.com</strong>. These are the sites that will host the update, and they require an ActiveX control to install the update.</li>\n</ol>\n"},"Type":0}],"RevisionHistory":[{"Date":"2018-09-11T07:00:00Z","Description":{"Value":"<p>Corrected severity and impact entries for Windows 10 in the Affected Software and Vulnerability Severity Ratings table. This is an informational change only. Customers who have successfully installed the update do not need to take any further action.</p>\n"},"Number":"1.1"},{"Date":"2018-09-11T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10384-10951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10384-10952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10384-11497"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10384-11498"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10384-11453"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10384-11454"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10384-10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10384-10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10384-10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10384-10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10384-10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10384-10481"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10384-10482"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10384-10484"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10384-10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10384-10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10384-10951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10384-10952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10384-11497"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10384-11498"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10384-11453"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10384-11454"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10384-10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10384-10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10384-10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10384-10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10384-10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10384-10481"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10384-10482"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10384-10484"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10384-10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10384-10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;DOS:N/A"},"Type":1}],"Title":{"Value":"September 2018 Adobe Flash Security Update"}},{"Acknowledgments":[{"Name":[{"Value":"Paul Burkeland of <a href=\"https://www.trustedsec.com\">TrustedSec</a>"}],"URL":[""]}],"CVE":"CVE-2018-8474","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A security feature bypass vulnerability exists when Lync for Mac 2011 fails to properly sanitize specially crafted messages. An attacker who successfully exploited this vulnerability could cause a targeted Lync for Mac 2011 user's system to browse to an attacker-specified website or automatically download file types on the operating system's safe file type list.</p>\n<p>For an attacker to exploit the vulnerability, a specially crafted message needs to be sent to a targeted user. The targeted user does not need to take any actions after receiving the message.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Where do I find the update for Lync for Mac 2011?</strong></p>\n<p>Microsoft is not planning on fixing this vulnerability in Microsoft Lync for Mac 2011.  Microsoft recommends upgrading to Skype for Business on Mac.</p>\n"},{"Ordinal":"20","Title":"Microsoft Office","Type":7,"Value":"Microsoft Office"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"61","ProductStatuses":[{"ProductID":["10139"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[],"RevisionHistory":[{"Date":"2018-09-11T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10139"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10139"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A;Older Software Release:Exploitation Less Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Lync for Mac 2011 Security Feature Bypass Vulnerability"}},{"Acknowledgments":[],"CVE":"CVE-2018-8479","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>A spoofing vulnerability exists for the Azure IoT Device Provisioning for the C SDK library using the HTTP protocol on Windows platform.  An attacker who successfully exploited this vulnerability could impersonate a server used during the provisioning process.</p>\n<p>To exploit this vulnerability, an attacker would need to perform a man-in-the-middle (MitM) attack on the network that provisioning was taking place.</p>\n<p>This security update addresses the vulnerability by correcting how the HTTP transport library validates certificates.</p>\n<p>This vulnerability does NOT impact other Azure IoT SDK’s such as Java/Node/C#, does NOT impact the C SDK when running on Linux or embedded OS’s, and only impacts when using the HTTP transport and NOT MQTT or AMQP</p>\n"},{"Ordinal":"20","Title":"Azure","Type":7,"Value":"Azure"},{"Ordinal":"30","Title":"Issuing CNA","Type":8,"Value":"Microsoft"}],"Ordinal":"63","ProductStatuses":[{"ProductID":["11502"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"ProductID":["11502"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://github.com/Azure/azure-iot-sdk-c/releases/tag/2018-09-11"}],"RevisionHistory":[{"Date":"2018-09-11T07:00:00Z","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["11502"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11502"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;DOS:N/A"},"Type":1}],"Title":{"Value":"Azure IoT SDK Spoofing Vulnerability"}}]}