HKCert
  

Microsoft Monthly Security Update (Oct 2018)

Release Date: 10 / 10 / 2018
Last Update: 12 / 10 / 2018
Criticality Level:  


Microsoft has released monthly security update for their products:

 

Vulnerable ProductSeverityImpactsNotesDetails (including CVE)
BrowserModerately Critical Moderately CriticalSecurity Restriction Bypass
Remote Code Execution
 
Developer ToolsModerately Critical Moderately CriticalRemote Code Execution
Information Disclosure
 
Exchange ServerModerately Critical Moderately CriticalRemote Code Execution
Elevation of Privilege
 
Microsoft OfficeModerately Critical Moderately CriticalRemote Code Execution
Elevation of Privilege
Information Disclosure
 
WindowsModerately Critical Moderately CriticalSecurity Restriction Bypass
Remote Code Execution
Elevation of Privilege
Information Disclosure
Exploited in the wild (Local Exploit)

 

Number of 'Extremely Critical' product(s): 0

Number of 'Highly Critical' product(s): 0

Number of 'Moderately Critical' product(s): 5

Evaluation of overall 'Criticality Level': Moderately Critical

  • Elevation of Privilege
  • Remote Code Execution
  • Security Restriction Bypass
  • Information Disclosure
  • Browser
  • Developer Tools
  • Exchange Server
  • Microsoft Office
  • Windows

Before installation of the software, please visit the software manufacturer web-site for more details.

  • The vendor has issued security updates for the products. Please refer to 'Details' column in the above table for details of individual product update or run software update.

Note: Customers running Windows 7 or Windows Server 2008 R2 need to ensure they have Servicing Stack Update (SSU) 3177467 installed before installing the October 2018 security updates, to avoid a failure to install. See Microsoft Knowledge Base Article 3177467 for more information about this SSU.