{"id":6377,"date":"2018-08-02T08:11:33","date_gmt":"2018-08-02T06:11:33","guid":{"rendered":"http:\/\/159.69.82.204\/win\/?p=6377"},"modified":"2022-01-24T17:38:44","modified_gmt":"2022-01-24T16:38:44","slug":"microsoft-security-update-releases-notifications-08-01-2018","status":"publish","type":"post","link":"https:\/\/borncity.com\/win\/2018\/08\/02\/microsoft-security-update-releases-notifications-08-01-2018\/","title":{"rendered":"Microsoft Security Update Releases\/Notifications (08\/01\/2018)"},"content":{"rendered":"

[German<\/a>]Effective August 1, 2018, Microsoft has pulished Microsoft Security Update Releases<\/em> for CVE-2018-8172 and CVE-2018-8202 and Microsoft Security Advisory Notification<\/em> (with notes on Spectre patches). Here are the details.<\/p>\n

<\/p>\n

********************************************************************
Title: Microsoft Security Update Releases
Issued: August 1, 2018
********************************************************************<\/p>\n

Summary
=======<\/p>\n

The following CVEs have undergone a major revision increment:<\/p>\n

* CVE-2018-8172
* CVE-2018-8202<\/p>\n

Revision Information:
=====================<\/p>\n

– CVE-2018-8172 | Visual Studio Remote Code Execution
   Vulnerability
– https:\/\/portal.msrc.microsoft.com\/en-us\/security-guidance<\/a>
– Reason for Revision: Revised the Affected Products table to
   include Expression Blend 3 Service Pack 1 and Expression Blend
   2 Service Pack 2 because they are also affected by this
   vulnerability. Microsoft recommends that customers running
   either of these versions of Expression Blend install the
   update to be fully protected from this vulnerability.
– Originally posted: July 10, 2018
– Updated: July 31, 2018
– Aggregate CVE Severity Rating: Important
– Version: 2.0<\/p>\n

– CVE-2018-8202 | .NET Framework Elevation of Privilege
   Vulnerability
– https:\/\/portal.msrc.microsoft.com\/en-us\/security-guidance<\/a>
– Reason for Revision: Microsoft is announcing the release of
   updates, available via the Microsoft Update catalog, to resolve
   known issues some customers experienced after installing the
   July 2018 security updates for .NET Framework. Microsoft
   recommends that customers who experienced application errors as
   described in KB4345913
   (https:\/\/support.microsoft.com\/en-us\/help\/4345913) install the
   applicable Standalone update for your system. Customers running
   Window 10 Version 1607 or Windows Server 2016 should install
   Cumulative update 4346877 to resolve application errors. See
   the Affected Products table for links to download and install
   the updates.
– Originally posted: July 10, 2018
– Updated: July 31, 2018
– Aggregate CVE Severity Rating: Important
– Version: 4.0<\/p>\n

I reported on the last point in the article NET-Framework Updates July 30, 2018 with Fixes<\/a>. The second document concerns notes for the Spectre patches:<\/p>\n

********************************************************************
Title: Microsoft Security Advisory Notification
Issued: August 1, 2018
********************************************************************<\/p>\n

Security Advisories Released or Updated on August 1, 2018
===================================================================<\/p>\n

* Microsoft Security Advisory ADV180002<\/p>\n

– Title: Guidance to mitigate speculative execution side-channel
   vulnerabilities
– https:\/\/portal.msrc.microsoft.com\/en-us\/security-guidance\/advisory\/ADV180002<\/a>
– Reason for Revision: Added FAQ #18 to address a high CPU
   utilization issue some customers with an AMD-based device are
   experiencing after installing the June or July Windows security
   updates or after installing a BIOS update. 
– Originally posted: January 3, 2018
– Updated: August 1, 2018
– Version: 23.0<\/p>\n","protected":false},"excerpt":{"rendered":"

[German]Effective August 1, 2018, Microsoft has pulished Microsoft Security Update Releases for CVE-2018-8172 and CVE-2018-8202 and Microsoft Security Advisory Notification (with notes on Spectre patches). Here are the details.<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[580],"tags":[65,69,195],"class_list":["post-6377","post","type-post","status-publish","format-standard","hentry","category-security","tag-microsoft","tag-security","tag-update"],"_links":{"self":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts\/6377","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/comments?post=6377"}],"version-history":[{"count":0,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts\/6377\/revisions"}],"wp:attachment":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/media?parent=6377"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/categories?post=6377"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/tags?post=6377"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}