53 vulnerabilities in today’s Patch Tuesday
There is a Dashboard set up by Morphus Labs
3 publicly disclosed and 17 critical.
It is always important to keep up on your patching regimen, as today’s vulnerabilities become more and more dangerous in the future.
But one has to assess the current and older vulnerabilities with what is going on in _your_ environment. Here is another article on what type of updates there are in this month’s updates Dark Reading: “July Security Updates”
Since most of these updates are browser based except for the latest update for the Meltdown and Spectre type of fix.
Looking over the updates one has to look at the remote code execution vulnerabilities to find the issues to patch first.
Because Microsoft has put out patches once a month on the 2nd Tuesday, some other software companies also do the same, so IT departments have a consistent review of the patches to be installed. Adobe has released 105 vulnerabilities for Reader and Acrobat, as well as some Flash. One thing that comes out of these situations is the planning of downtime for cloud systems which have to have all patches installed for the users who wish to run their applications.
So even if most of the vulnerabilities are browser based then some servers may need to have a number of patches.
In my opinion this Vulnerability “CVE-2018-8327” is very dangerous, as it is a remote code execution malicious code potential. Microsoft Security TechCenter goes into some details.
Since this is a new vulnerability as of July10 there is a race now on, the race is as to who will install patches or who will download malicious software (Malware) first.
Image is from the SanS.edu website.
Also an update today – 7/12/18:
Lists the vulnerabilities in a different manner than Internet Storm center.
From Talos Blog:
Microsoft released its monthly set of security advisories today for vulnerabilities that have been identified and addressed in various products. This month’s release addresses 53 new vulnerabilities, 17 of which are rated critical, 34 are rated important, one is rated moderate, and one is rated as low severity. These vulnerabilities impact Windows Operating System, Edge, Internet Explorer and more.
Reference: https://blog.talosintelligence.com/2018/07/ms-tuesday.html
Snort SID: 47111-47114, 47091-47092, 47107-47110, 47100-47103, 47096-47099
Contact Us to discuss the current patches within your environment.