微软9月补丁日严沉缝隙安全公告
颁布功夫 2018-09-12缝隙编号和级别
详见下部列表
影响版本
NET Core、.NET Framework、Adobe Flash Player、Azure、Device Guard、Internet Explorer、Microsoft Edge、Microsoft Graphics Component、Microsoft Identity Services、Microsoft JET Database Engine、Microsoft Office、Microsoft Scripting Engine、Microsoft Windows、Microsoft XML Core Services、Windows Hyper-V、Windows Kernel、Windows Media、Windows Shell、Windows SMB Server以及Windows Subsystem for Linux。
缝隙概述
缝隙具体列表 ，标注为红色的是严沉缝隙。
|
产品 |
CVE 编号 |
CVE 标题 |
|
.NET Framework |
CVE-2018-8421 |
.NET Framework 远程代码执行缝隙 |
|
Microsoft Edge |
CVE-2018-8464 |
Microsoft Edge PDF 远程代码执行缝隙 |
|
Microsoft Graphics Component |
CVE-2018-8475 |
Windows 远程代码执行缝隙 |
|
Microsoft Graphics Component |
CVE-2018-8332 |
Win32k Graphics 远程代码执行缝隙 |
|
Microsoft JET Database Engine |
CVE-2018-8392 |
Microsoft JET Database Engine 远程代码执行缝隙 |
|
Microsoft JET Database Engine |
CVE-2018-8393 |
Microsoft JET Database Engine 远程代码执行缝隙 |
|
Microsoft Office |
CVE-2018-8430 |
Word PDF 远程代码执行缝隙 |
|
Microsoft Office |
CVE-2018-8331 |
Microsoft Excel 远程代码执行缝隙 |
|
Microsoft XML Core Services |
CVE-2018-8420 |
MS XML 远程代码执行缝隙 |
|
Windows Hyper-V |
CVE-2018-0965 |
Windows Hyper-V 远程代码执行缝隙 |
|
Windows Hyper-V |
CVE-2018-8439 |
Windows Hyper-V 远程代码执行缝隙 |
|
.NET Core |
CVE-2018-8409 |
System.IO.Pipelines Denial of Service |
|
Adobe Flash Player |
ADV180023 |
September 2018 Adobe Flash 安全更新 |
|
Azure |
CVE-2018-8479 |
Azure IoT SDK 糊弄缝隙 |
|
Device Guard |
CVE-2018-8449 |
Device Guard 安全职能绕过缝隙 |
|
Internet Explorer |
CVE-2018-8461 |
Internet Explorer 内存粉碎缝隙 |
|
Internet Explorer |
CVE-2018-8447 |
Internet Explorer 内存粉碎缝隙 |
|
Internet Explorer |
CVE-2018-8470 |
Internet Explorer 安全职能绕过缝隙 |
|
Microsoft Edge |
CVE-2018-8425 |
Microsoft Edge 糊弄缝隙 |
|
Microsoft Edge |
CVE-2018-8366 |
Microsoft Edge 信息泄露缝隙 |
|
Microsoft Edge |
CVE-2018-8463 |
Microsoft Edge 特权提升缝隙 |
|
Microsoft Edge |
CVE-2018-8469 |
Microsoft Edge 特权提升缝隙 |
|
Microsoft Graphics Component |
CVE-2018-8422 |
Windows GDI 信息泄露缝隙 |
|
Microsoft Graphics Component |
CVE-2018-8424 |
Windows GDI 信息泄露缝隙 |
|
Microsoft Graphics Component |
CVE-2018-8433 |
Microsoft Graphics Component 信息泄露缝隙 |
|
Microsoft Graphics Component |
CVE-2018-8462 |
DirectX Graphics Kernel 特权提升缝隙 |
|
Microsoft Identity Services |
CVE-2018-8269 |
OData 回绝服务缝隙 |
|
Microsoft Office |
CVE-2018-8426 |
Microsoft Office SharePoint XSS Vulnerability |
|
Microsoft Office |
CVE-2018-8428 |
Microsoft SharePoint 特权提升缝隙 |
|
Microsoft Office |
CVE-2018-8429 |
Microsoft Excel 信息泄露缝隙 |
|
Microsoft Office |
CVE-2018-8431 |
Microsoft SharePoint 特权提升缝隙 |
|
Microsoft Office |
CVE-2018-8474 |
Lync for Mac 2011 安全职能绕过缝隙 |
|
Microsoft Scripting Engine |
CVE-2018-8315 |
Microsoft Scripting Engine 信息泄露缝隙 |
|
Microsoft Scripting Engine |
CVE-2018-8367 |
Chakra Scripting Engine 内存粉碎缝隙 |
|
Microsoft Scripting Engine |
CVE-2018-8354 |
Scripting Engine 内存粉碎缝隙 |
|
Microsoft Scripting Engine |
CVE-2018-8391 |
Scripting Engine 内存粉碎缝隙 |
|
Microsoft Scripting Engine |
CVE-2018-8452 |
Scripting Engine 信息泄露缝隙 |
|
Microsoft Scripting Engine |
CVE-2018-8456 |
Scripting Engine 内存粉碎缝隙 |
|
Microsoft Scripting Engine |
CVE-2018-8457 |
Scripting Engine 内存粉碎缝隙 |
|
Microsoft Scripting Engine |
CVE-2018-8459 |
Scripting Engine 内存粉碎缝隙 |
|
Microsoft Scripting Engine |
CVE-2018-8465 |
Chakra Scripting Engine 内存粉碎缝隙 |
|
Microsoft Scripting Engine |
CVE-2018-8466 |
Chakra Scripting Engine 内存粉碎缝隙 |
|
Microsoft Scripting Engine |
CVE-2018-8467 |
Chakra Scripting Engine 内存粉碎缝隙 |
|
Microsoft Windows |
CVE-2018-8271 |
Windows 信息泄露缝隙 |
|
Microsoft Windows |
CVE-2018-8410 |
Windows Registry 特权提升缝隙 |
|
Microsoft Windows |
ADV180022 |
Windows 回绝服务缝隙 |
|
Microsoft Windows |
CVE-2018-8438 |
Windows Hyper-V 回绝服务缝隙 |
|
Microsoft Windows |
CVE-2018-8440 |
Windows ALPC 特权提升缝隙 |
|
Windows Hyper-V |
CVE-2018-8434 |
Windows Hyper-V 信息泄露缝隙 |
|
Windows Hyper-V |
CVE-2018-8435 |
Windows Hyper-V 安全职能绕过缝隙 |
|
Windows Hyper-V |
CVE-2018-8436 |
Windows Hyper-V 回绝服务缝隙 |
|
Windows Hyper-V |
CVE-2018-8437 |
Windows Hyper-V 回绝服务缝隙 |
|
Windows Kernel |
CVE-2018-8336 |
Windows Kernel 信息泄露缝隙 |
|
Windows Kernel |
CVE-2018-8442 |
Windows Kernel 信息泄露缝隙 |
|
Windows Kernel |
CVE-2018-8443 |
Windows Kernel 信息泄露缝隙 |
|
Windows Kernel |
CVE-2018-8445 |
Windows Kernel 信息泄露缝隙 |
|
Windows Kernel |
CVE-2018-8446 |
Windows Kernel 信息泄露缝隙 |
|
Windows Kernel |
CVE-2018-8455 |
Windows Kernel 特权提升缝隙 |
|
Windows Media |
CVE-2018-8419 |
Windows Kernel 信息泄露缝隙 |
|
Windows Shell |
CVE-2018-8468 |
Windows 特权提升缝隙 |
|
Windows SMB Server |
CVE-2018-8335 |
Windows SMB 回绝服务缝隙 |
|
Windows SMB Server |
CVE-2018-8444 |
Windows SMB 信息泄露缝隙 |
|
Windows Subsystem for Linux |
CVE-2018-8337 |
Windows Subsystem for Linux 安全职能绕过缝隙 |
|
Windows Subsystem for Linux |
CVE-2018-8441 |
Windows Subsystem for Linux 特权提升缝隙 |
缝隙验证
暂无POC\EXP ，请凭据版本号检测
建复建议
微软官方已经颁布更新补丁 ，请实时进行补丁更新
https://portal.msrc.microsoft.com/en-us/security-guidance/releasenotedetail/498f2484-a096-e811-a978-000d3a33c573
参考链接
京公网安备11010802024551号