微软9月补丁日严重误差清静通告
宣布时间 2018-09-12误差编号和级别
详见下部列表
影响版本
NET Core、.NET Framework、Adobe Flash Player、Azure、Device Guard、Internet Explorer、Microsoft Edge、Microsoft Graphics Component、Microsoft Identity Services、Microsoft JET Database Engine、Microsoft Office、Microsoft Scripting Engine、Microsoft Windows、Microsoft XML Core Services、Windows Hyper-V、Windows Kernel、Windows Media、Windows Shell、Windows SMB Server以及Windows Subsystem for Linux。
误差概述
误差详细列表，标注为红色的是严重误差。
|
产品 |
CVE 编号 |
CVE 问题 |
|
.NET Framework |
CVE-2018-8421 |
.NET Framework 远程代码执行误差 |
|
Microsoft Edge |
CVE-2018-8464 |
Microsoft Edge PDF 远程代码执行误差 |
|
Microsoft Graphics Component |
CVE-2018-8475 |
Windows 远程代码执行误差 |
|
Microsoft Graphics Component |
CVE-2018-8332 |
Win32k Graphics 远程代码执行误差 |
|
Microsoft JET Database Engine |
CVE-2018-8392 |
Microsoft JET Database Engine 远程代码执行误差 |
|
Microsoft JET Database Engine |
CVE-2018-8393 |
Microsoft JET Database Engine 远程代码执行误差 |
|
Microsoft Office |
CVE-2018-8430 |
Word PDF 远程代码执行误差 |
|
Microsoft Office |
CVE-2018-8331 |
Microsoft Excel 远程代码执行误差 |
|
Microsoft XML Core Services |
CVE-2018-8420 |
MS XML 远程代码执行误差 |
|
Windows Hyper-V |
CVE-2018-0965 |
Windows Hyper-V 远程代码执行误差 |
|
Windows Hyper-V |
CVE-2018-8439 |
Windows Hyper-V 远程代码执行误差 |
|
.NET Core |
CVE-2018-8409 |
System.IO.Pipelines Denial of Service |
|
Adobe Flash Player |
ADV180023 |
September 2018 Adobe Flash 清静更新 |
|
Azure |
CVE-2018-8479 |
Azure IoT SDK 诱骗误差 |
|
Device Guard |
CVE-2018-8449 |
Device Guard 清静功效绕过误差 |
|
Internet Explorer |
CVE-2018-8461 |
Internet Explorer 内存破损误差 |
|
Internet Explorer |
CVE-2018-8447 |
Internet Explorer 内存破损误差 |
|
Internet Explorer |
CVE-2018-8470 |
Internet Explorer 清静功效绕过误差 |
|
Microsoft Edge |
CVE-2018-8425 |
Microsoft Edge 诱骗误差 |
|
Microsoft Edge |
CVE-2018-8366 |
Microsoft Edge 信息泄露误差 |
|
Microsoft Edge |
CVE-2018-8463 |
Microsoft Edge 特权提升误差 |
|
Microsoft Edge |
CVE-2018-8469 |
Microsoft Edge 特权提升误差 |
|
Microsoft Graphics Component |
CVE-2018-8422 |
Windows GDI 信息泄露误差 |
|
Microsoft Graphics Component |
CVE-2018-8424 |
Windows GDI 信息泄露误差 |
|
Microsoft Graphics Component |
CVE-2018-8433 |
Microsoft Graphics Component 信息泄露误差 |
|
Microsoft Graphics Component |
CVE-2018-8462 |
DirectX Graphics Kernel 特权提升误差 |
|
Microsoft Identity Services |
CVE-2018-8269 |
OData 拒绝服务误差 |
|
Microsoft Office |
CVE-2018-8426 |
Microsoft Office SharePoint XSS Vulnerability |
|
Microsoft Office |
CVE-2018-8428 |
Microsoft SharePoint 特权提升误差 |
|
Microsoft Office |
CVE-2018-8429 |
Microsoft Excel 信息泄露误差 |
|
Microsoft Office |
CVE-2018-8431 |
Microsoft SharePoint 特权提升误差 |
|
Microsoft Office |
CVE-2018-8474 |
Lync for Mac 2011 清静功效绕过误差 |
|
Microsoft Scripting Engine |
CVE-2018-8315 |
Microsoft Scripting Engine 信息泄露误差 |
|
Microsoft Scripting Engine |
CVE-2018-8367 |
Chakra Scripting Engine 内存破损误差 |
|
Microsoft Scripting Engine |
CVE-2018-8354 |
Scripting Engine 内存破损误差 |
|
Microsoft Scripting Engine |
CVE-2018-8391 |
Scripting Engine 内存破损误差 |
|
Microsoft Scripting Engine |
CVE-2018-8452 |
Scripting Engine 信息泄露误差 |
|
Microsoft Scripting Engine |
CVE-2018-8456 |
Scripting Engine 内存破损误差 |
|
Microsoft Scripting Engine |
CVE-2018-8457 |
Scripting Engine 内存破损误差 |
|
Microsoft Scripting Engine |
CVE-2018-8459 |
Scripting Engine 内存破损误差 |
|
Microsoft Scripting Engine |
CVE-2018-8465 |
Chakra Scripting Engine 内存破损误差 |
|
Microsoft Scripting Engine |
CVE-2018-8466 |
Chakra Scripting Engine 内存破损误差 |
|
Microsoft Scripting Engine |
CVE-2018-8467 |
Chakra Scripting Engine 内存破损误差 |
|
Microsoft Windows |
CVE-2018-8271 |
Windows 信息泄露误差 |
|
Microsoft Windows |
CVE-2018-8410 |
Windows Registry 特权提升误差 |
|
Microsoft Windows |
ADV180022 |
Windows 拒绝服务误差 |
|
Microsoft Windows |
CVE-2018-8438 |
Windows Hyper-V 拒绝服务误差 |
|
Microsoft Windows |
CVE-2018-8440 |
Windows ALPC 特权提升误差 |
|
Windows Hyper-V |
CVE-2018-8434 |
Windows Hyper-V 信息泄露误差 |
|
Windows Hyper-V |
CVE-2018-8435 |
Windows Hyper-V 清静功效绕过误差 |
|
Windows Hyper-V |
CVE-2018-8436 |
Windows Hyper-V 拒绝服务误差 |
|
Windows Hyper-V |
CVE-2018-8437 |
Windows Hyper-V 拒绝服务误差 |
|
Windows Kernel |
CVE-2018-8336 |
Windows Kernel 信息泄露误差 |
|
Windows Kernel |
CVE-2018-8442 |
Windows Kernel 信息泄露误差 |
|
Windows Kernel |
CVE-2018-8443 |
Windows Kernel 信息泄露误差 |
|
Windows Kernel |
CVE-2018-8445 |
Windows Kernel 信息泄露误差 |
|
Windows Kernel |
CVE-2018-8446 |
Windows Kernel 信息泄露误差 |
|
Windows Kernel |
CVE-2018-8455 |
Windows Kernel 特权提升误差 |
|
Windows Media |
CVE-2018-8419 |
Windows Kernel 信息泄露误差 |
|
Windows Shell |
CVE-2018-8468 |
Windows 特权提升误差 |
|
Windows SMB Server |
CVE-2018-8335 |
Windows SMB 拒绝服务误差 |
|
Windows SMB Server |
CVE-2018-8444 |
Windows SMB 信息泄露误差 |
|
Windows Subsystem for Linux |
CVE-2018-8337 |
Windows Subsystem for Linux 清静功效绕过误差 |
|
Windows Subsystem for Linux |
CVE-2018-8441 |
Windows Subsystem for Linux 特权提升误差 |
误差验证
暂无POC\EXP，请依据版本号检测
修复建议
微软官方已经宣布更新补丁，请实时举行补丁更新
https://portal.msrc.microsoft.com/en-us/security-guidance/releasenotedetail/498f2484-a096-e811-a978-000d3a33c573
参考链接
京公网安备11010802024551号