Microsoft에서 53가지 취약점에 대한 보안패치를 적용.
Microsoft는 Windows, Internet Explorer (IE), Edge, ChakraCore, .NET Framework, ASP.NET, PowerShell, Visual Studio, Microsoft Office / Office Services 및 Adobe Flash Player에 영향을주는 53 가지 보안 취약점에 대한 보안 패치 업데이트를 발표.
대부분은 IE, Edge 브라우저 및 Chakra 스크립팅 엔진의 메모리 손상 취약점. 악용 될 경우 인증되지 않은 원격 공격자가 현재 사용자의 컨텍스트에서 대상 시스템에서 임의 코드를 실행할 수 있게 함.
https://technet.microsoft.com/ko-kr/security/dn440717
- 치명적인 취역점 패치
Scripting Engine Memory Corruption Vulnerability (CVE-2018-8242) : https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8242
Edge Memory Corruption Vulnerability (CVE-2018-8262) : https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8262
Edge Memory Corruption Vulnerability (CVE-2018-8274)
Scripting Engine Memory Corruption Vulnerability (CVE-2018-8275)
Scripting Engine Memory Corruption Vulnerability (CVE-2018-8279)
Chakra Scripting Engine Memory Corruption Vulnerability (CVE-2018-8280)
Scripting Engine Memory Corruption Vulnerability (CVE-2018-8283)
Chakra Scripting Engine Memory Corruption Vulnerability (CVE-2018-8286)
Scripting Engine Memory Corruption Vulnerability (CVE-2018-8288)
Chakra Scripting Engine Memory Corruption Vulnerability (CVE-2018-8290)
Scripting Engine Memory Corruption Vulnerability (CVE-2018-8291)
Chakra Scripting Engine Memory Corruption Vulnerability (CVE-2018-8294)
Scripting Engine Memory Corruption Vulnerability (CVE-2018-8296)
Chakra Scripting Engine Memory Corruption Vulnerability (CVE-2018-8298)
Microsoft Edge Memory Corruption Vulnerability (CVE-2018-8301)
Microsoft Edge Information Disclosure Vulnerability (CVE-2018-8324)
PowerShell Editor Services Remote Code Execution Vulnerability (CVE-2018-8327) : https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8327
- 34가지의 중요한 패치
Microsoft Edge—Remote code execution (RCE), Information disclosure, spoofing, and security feature bypass flaws
Microsoft Internet Explorer (IE)— RCE and security feature bypass flaws
MS Office (Powerpoint, Word, Excel, Access, Lync, Skype)—security feature bypass, RCE, and elevation of privilege flaws
Windows 10, 8.1, 7 and Server 2008, 2012, 2016—Denial of Service, security feature bypass, elevation of privilege flaws
Microsoft .NET Framework—Elevation of privilege and RCE flaws
Microsoft SharePoint—Elevation of Privilege, and RCE flaws
ChakraCore—RCE, and security feature bypass vulnerabilities
Microsoft Visual Studio—RCE flaw
Expression Blend 4—RCE flaw
ASP .NET—security feature bypass flaws
Mail, Calendar, and People in Windows 8.1 App Store—information disclosure flaw
