July 2018 - Microsoft Releases Security Patches

Microsoft addresses vulnerabilities in its July security bulletin. Trend Micro Deep Security covers the following:

• CVE-2018-8298 - Scripting Engine Memory Corruption Vulnerability
  Risk Rating: Critical
  
  This remote code execution vulnerability exists in the ChakraCore scripting engine. Objects in memory may be corrupted by an attacker, causing the vulnerability.



• CVE-2018-8274 - Microsoft Edge Memory Corruption Vulnerability
  Risk Rating: Critical
  
  This remote code execution vulnerability exists in the handling of objects in memory in Microsoft Edge. This handling is corrected by this specific patch.



• CVE-2018-8296 - Scripting Engine Memory Corruption Vulnerability
  Risk Rating: Critical
  
  This remote code execution vulnerability exists in the handling of objects in memory by Internet Explorer. This handling is corrected by this specific patch.



• CVE-2018-8283 - Scripting Engine Memory Corruption Vulnerability
  Risk Rating: Critical
  
  This remote code execution vulnerability exists in the handling of objects in memory by the ChakraCore scripting engine. This handling is corrected by this specific patch.



• CVE-2018-8278 - Microsoft Edge Spoofing Vulnerability
  Risk Rating: Important
  
  This spoofing vulnerability exists in the handling of specific HTML content by Microsoft Edge. This handling is corrected by this specific patch.



• CVE-2018-8291 - Scripting Engine Memory Corruption Vulnerability
  Risk Rating: Critical
  
  This remote code execution vulnerability exists in the handling of objects in memory by Microsoft Edge and Internet Explorer. This handling is corrected by this specific patch.



• CVE-2018-8125 - Microsoft Edge Memory Corruption Vulnerability
  Risk Rating: Important
  
  This remote code execution vulnerability exists in the handling of objects in memory by Microsoft Edge. This handling is corrected by this specific patch.



• CVE-2018-8324 - Microsoft Edge Information Disclosure Vulnerability
  Risk Rating: Critical
  
  This information disclosure vulnerability exists in the handling of objects in memory by Microsoft Edge. This handling is corrected by this specific patch.



• CVE-2018-8262 - Microsoft Edge Memory Corruption Vulnerability
  Risk Rating: Critical
  
  This remote code execution vulnerability exists in the handling of objects in memory by Microsoft Edge. This handling is corrected by this specific patch.



• CVE-2018-8289 - Microsoft Edge Information Disclosure Vulnerability
  Risk Rating: Important
  
  The information disclosure vulnerability exists in the improper handling of objects in memory by Microsoft Edge. This handling is corrected by this specific patch.



• CVE-2018-8275 - Microsoft Edge Memory Corruption Vulnerability
  Risk Rating: Critical
  
  This remote code execution vulnerability exists in Microsoft Edge. Objects in memory may be corrupted by an attacker, causing the vulnerability.



• CVE-2018-8279 - Microsoft Edge Memory Corruption Vulnerability
  Risk Rating: Critical
  
  This remote code execution vulnerability exists in the handling of objects in memory by Microsoft Edge. This handling is corrected by this specific patch.



• CVE-2018-0949 - Internet Explorer Security Feature Bypass Vulnerability
  Risk Rating: Important
  
  This security feature bypass vulnerability exists in Microsoft Internet Explorer when handling UNC resources. This handling is corrected by this specific patch.



• CVE-2018-8297 - Microsoft Edge Information Disclosure Vulnerability
  Risk Rating: Important
  
  This information disclosure vulnerability exists in the way Microsoft Edge handles objects in memory. This handling is corrected by this specific patch.



• CVE-2018-8242 - Scripting Engine Memory Corruption Vulnerability
  Risk Rating: Critical
  
  This information disclosure vulnerability exists in the way Internet Explorer handles objects in memory. This handling is corrected by this specific patch.



• CVE-2018-8288 - Scripting Engine Memory Corruption Vulnerability
  Risk Rating: Critical
  
  This information disclosure vulnerability exists in the way Internet Explorer and Microsoft Edge handles objects in memory. This handling is corrected by this specific patch.