微软9月补丁日严重漏洞安全通告
发布时间 2018-09-12漏洞编号和级别
详见下部列表
影响版本
NET Core、.NET Framework、Adobe Flash Player、Azure、Device Guard、Internet Explorer、Microsoft Edge、Microsoft Graphics Component、Microsoft Identity Services、Microsoft JET Database Engine、Microsoft Office、Microsoft Scripting Engine、Microsoft Windows、Microsoft XML Core Services、Windows Hyper-V、Windows Kernel、Windows Media、Windows Shell、Windows SMB Server以及Windows Subsystem for Linux。
漏洞概述
漏洞详细列表，标注为红色的是严重漏洞。
|
产品 |
CVE 编号 |
CVE 标题 |
|
.NET Framework |
CVE-2018-8421 |
.NET Framework 远程代码执行漏洞 |
|
Microsoft Edge |
CVE-2018-8464 |
Microsoft Edge PDF 远程代码执行漏洞 |
|
Microsoft Graphics Component |
CVE-2018-8475 |
Windows 远程代码执行漏洞 |
|
Microsoft Graphics Component |
CVE-2018-8332 |
Win32k Graphics 远程代码执行漏洞 |
|
Microsoft JET Database Engine |
CVE-2018-8392 |
Microsoft JET Database Engine 远程代码执行漏洞 |
|
Microsoft JET Database Engine |
CVE-2018-8393 |
Microsoft JET Database Engine 远程代码执行漏洞 |
|
Microsoft Office |
CVE-2018-8430 |
Word PDF 远程代码执行漏洞 |
|
Microsoft Office |
CVE-2018-8331 |
Microsoft Excel 远程代码执行漏洞 |
|
Microsoft XML Core Services |
CVE-2018-8420 |
MS XML 远程代码执行漏洞 |
|
Windows Hyper-V |
CVE-2018-0965 |
Windows Hyper-V 远程代码执行漏洞 |
|
Windows Hyper-V |
CVE-2018-8439 |
Windows Hyper-V 远程代码执行漏洞 |
|
.NET Core |
CVE-2018-8409 |
System.IO.Pipelines Denial of Service |
|
Adobe Flash Player |
ADV180023 |
September 2018 Adobe Flash 安全更新 |
|
Azure |
CVE-2018-8479 |
Azure IoT SDK 欺骗漏洞 |
|
Device Guard |
CVE-2018-8449 |
Device Guard 安全功能绕过漏洞 |
|
Internet Explorer |
CVE-2018-8461 |
Internet Explorer 内存破坏漏洞 |
|
Internet Explorer |
CVE-2018-8447 |
Internet Explorer 内存破坏漏洞 |
|
Internet Explorer |
CVE-2018-8470 |
Internet Explorer 安全功能绕过漏洞 |
|
Microsoft Edge |
CVE-2018-8425 |
Microsoft Edge 欺骗漏洞 |
|
Microsoft Edge |
CVE-2018-8366 |
Microsoft Edge 信息泄露漏洞 |
|
Microsoft Edge |
CVE-2018-8463 |
Microsoft Edge 特权提升漏洞 |
|
Microsoft Edge |
CVE-2018-8469 |
Microsoft Edge 特权提升漏洞 |
|
Microsoft Graphics Component |
CVE-2018-8422 |
Windows GDI 信息泄露漏洞 |
|
Microsoft Graphics Component |
CVE-2018-8424 |
Windows GDI 信息泄露漏洞 |
|
Microsoft Graphics Component |
CVE-2018-8433 |
Microsoft Graphics Component 信息泄露漏洞 |
|
Microsoft Graphics Component |
CVE-2018-8462 |
DirectX Graphics Kernel 特权提升漏洞 |
|
Microsoft Identity Services |
CVE-2018-8269 |
OData 拒绝服务漏洞 |
|
Microsoft Office |
CVE-2018-8426 |
Microsoft Office SharePoint XSS Vulnerability |
|
Microsoft Office |
CVE-2018-8428 |
Microsoft SharePoint 特权提升漏洞 |
|
Microsoft Office |
CVE-2018-8429 |
Microsoft Excel 信息泄露漏洞 |
|
Microsoft Office |
CVE-2018-8431 |
Microsoft SharePoint 特权提升漏洞 |
|
Microsoft Office |
CVE-2018-8474 |
Lync for Mac 2011 安全功能绕过漏洞 |
|
Microsoft Scripting Engine |
CVE-2018-8315 |
Microsoft Scripting Engine 信息泄露漏洞 |
|
Microsoft Scripting Engine |
CVE-2018-8367 |
Chakra Scripting Engine 内存破坏漏洞 |
|
Microsoft Scripting Engine |
CVE-2018-8354 |
Scripting Engine 内存破坏漏洞 |
|
Microsoft Scripting Engine |
CVE-2018-8391 |
Scripting Engine 内存破坏漏洞 |
|
Microsoft Scripting Engine |
CVE-2018-8452 |
Scripting Engine 信息泄露漏洞 |
|
Microsoft Scripting Engine |
CVE-2018-8456 |
Scripting Engine 内存破坏漏洞 |
|
Microsoft Scripting Engine |
CVE-2018-8457 |
Scripting Engine 内存破坏漏洞 |
|
Microsoft Scripting Engine |
CVE-2018-8459 |
Scripting Engine 内存破坏漏洞 |
|
Microsoft Scripting Engine |
CVE-2018-8465 |
Chakra Scripting Engine 内存破坏漏洞 |
|
Microsoft Scripting Engine |
CVE-2018-8466 |
Chakra Scripting Engine 内存破坏漏洞 |
|
Microsoft Scripting Engine |
CVE-2018-8467 |
Chakra Scripting Engine 内存破坏漏洞 |
|
Microsoft Windows |
CVE-2018-8271 |
Windows 信息泄露漏洞 |
|
Microsoft Windows |
CVE-2018-8410 |
Windows Registry 特权提升漏洞 |
|
Microsoft Windows |
ADV180022 |
Windows 拒绝服务漏洞 |
|
Microsoft Windows |
CVE-2018-8438 |
Windows Hyper-V 拒绝服务漏洞 |
|
Microsoft Windows |
CVE-2018-8440 |
Windows ALPC 特权提升漏洞 |
|
Windows Hyper-V |
CVE-2018-8434 |
Windows Hyper-V 信息泄露漏洞 |
|
Windows Hyper-V |
CVE-2018-8435 |
Windows Hyper-V 安全功能绕过漏洞 |
|
Windows Hyper-V |
CVE-2018-8436 |
Windows Hyper-V 拒绝服务漏洞 |
|
Windows Hyper-V |
CVE-2018-8437 |
Windows Hyper-V 拒绝服务漏洞 |
|
Windows Kernel |
CVE-2018-8336 |
Windows Kernel 信息泄露漏洞 |
|
Windows Kernel |
CVE-2018-8442 |
Windows Kernel 信息泄露漏洞 |
|
Windows Kernel |
CVE-2018-8443 |
Windows Kernel 信息泄露漏洞 |
|
Windows Kernel |
CVE-2018-8445 |
Windows Kernel 信息泄露漏洞 |
|
Windows Kernel |
CVE-2018-8446 |
Windows Kernel 信息泄露漏洞 |
|
Windows Kernel |
CVE-2018-8455 |
Windows Kernel 特权提升漏洞 |
|
Windows Media |
CVE-2018-8419 |
Windows Kernel 信息泄露漏洞 |
|
Windows Shell |
CVE-2018-8468 |
Windows 特权提升漏洞 |
|
Windows SMB Server |
CVE-2018-8335 |
Windows SMB 拒绝服务漏洞 |
|
Windows SMB Server |
CVE-2018-8444 |
Windows SMB 信息泄露漏洞 |
|
Windows Subsystem for Linux |
CVE-2018-8337 |
Windows Subsystem for Linux 安全功能绕过漏洞 |
|
Windows Subsystem for Linux |
CVE-2018-8441 |
Windows Subsystem for Linux 特权提升漏洞 |
漏洞验证
暂无POC\EXP，请依据版本号检测
修复建议
微软官方已经发布更新补丁，请及时进行补丁更新
https://portal.msrc.microsoft.com/en-us/security-guidance/releasenotedetail/498f2484-a096-e811-a978-000d3a33c573
参考链接
京公网安备11010802024551号