微软于周二发布了1月安全更新补丁,修复了59个从简单的欺骗攻击到远程执行代码的安全问题,产品涉及.NET Framework、Adobe Flash Player、ASP .NET、ASP.NET、Graphic Fonts、Microsoft Browsers、Microsoft Edge、Microsoft Graphics Component、Microsoft Office、Microsoft Scripting Engine、Microsoft Windows、Side-Channel、Windows Kernel、Windows SMB Server以及Windows Subsystem for Linux。
相关信息如下(红色部分威胁相对比较高):
产品 | CVE 编号 | CVE 标题 |
.NET Framework | CVE-2018-0786 | .NET 安全功能绕过漏洞 |
.NET Framework | CVE-2018-0764 | .NET and .NET Core 拒绝服务漏洞 |
Adobe Flash Player | ADV180001 | January 2018 Adobe Flash 安全更新 |
ASP .NET | CVE-2018-0784 | ASP.NET Core 特权提升漏洞 |
ASP.NET | CVE-2018-0785 | ASP.NET Core CSRF漏洞 |
Graphic Fonts | CVE-2018-0788 | OpenType Font Driver 特权提升漏洞 |
Graphic Fonts | CVE-2018-0754 | OpenType Font Driver 信息泄露漏洞 |
Microsoft Browsers | CVE-2018-0762 | Scripting Engine 内存破坏漏洞 |
Microsoft Browsers | CVE-2018-0772 | Scripting Engine 内存破坏漏洞 |
Microsoft Edge | CVE-2018-0803 | Microsoft Edge 特权提升漏洞 |
Microsoft Edge | CVE-2018-0766 | Microsoft Edge 信息泄露漏洞 |
Microsoft Graphics Component | CVE-2018-0750 | Windows GDI 信息泄露漏洞 |
Microsoft Graphics Component | CVE-2018-0741 | Microsoft Color Management 信息泄露漏洞 |
Microsoft Office | ADV180003 | Microsoft Office Defense in Depth Update |
Microsoft Office | CVE-2018-0804 | Microsoft Word 远程代码执行漏洞 |
Microsoft Office | CVE-2018-0805 | Microsoft Word远程代码执行漏洞 |
Microsoft Office | CVE-2018-0806 | Microsoft Word远程代码执行漏洞 |
Microsoft Office | CVE-2018-0807 | Microsoft Word远程代码执行漏洞 |
Microsoft Office | CVE-2018-0812 | Microsoft Word 内存破坏漏洞 |
Microsoft Office | CVE-2018-0819 | 欺骗漏洞 in Microsoft Office for MAC |
Microsoft Office | CVE-2018-0795 | Microsoft Office远程代码执行漏洞 |
Microsoft Office | CVE-2018-0797 | Microsoft Word 内存破坏漏洞 |
Microsoft Office | CVE-2018-0799 | Microsoft Access Tampering Vulnerability |
Microsoft Office | CVE-2018-0802 | Microsoft Office 内存破坏漏洞 |
Microsoft Office | CVE-2018-0801 | Microsoft Office 远程代码执行漏洞 |
Microsoft Office | CVE-2018-0789 | Microsoft SharePoint 特权提升漏洞 |
Microsoft Office | CVE-2018-0790 | Microsoft SharePoint Cross Site Scripting 特权提升漏洞 |
Microsoft Office | CVE-2018-0791 | Microsoft Outlook 远程代码执行漏洞 |
Microsoft Office | CVE-2018-0792 | Microsoft Word 远程代码执行漏洞 |
Microsoft Office | CVE-2018-0793 | Microsoft Outlook 远程代码执行漏洞 |
Microsoft Office | CVE-2018-0794 | Microsoft Word 远程代码执行漏洞 |
Microsoft Office | CVE-2018-0796 | Microsoft Excel 远程代码执行漏洞 |
Microsoft Office | CVE-2018-0798 | Microsoft Office 内存破坏漏洞 |
Microsoft Scripting Engine | CVE-2018-0818 | Scripting Engine 安全特征绕过 |
Microsoft Scripting Engine | CVE-2018-0773 | Scripting Engine 内存破坏漏洞 |
Microsoft Scripting Engine | CVE-2018-0774 | Scripting Engine 内存破坏漏洞 |
Microsoft Scripting Engine | CVE-2018-0781 | Scripting Engine 内存破坏漏洞 |
Microsoft Scripting Engine | CVE-2018-0800 | Scripting Engine 信息泄露漏洞 |
Microsoft Scripting Engine | CVE-2018-0758 | Scripting Engine 内存破坏漏洞 |
Microsoft Scripting Engine | CVE-2018-0767 | Scripting Engine 信息泄露漏洞 |
Microsoft Scripting Engine | CVE-2018-0768 | Scripting Engine 内存破坏漏洞 |
Microsoft Scripting Engine | CVE-2018-0769 | Scripting Engine 内存破坏漏洞 |
Microsoft Scripting Engine | CVE-2018-0770 | Scripting Engine 内存破坏漏洞 |
Microsoft Scripting Engine | CVE-2018-0775 | Scripting Engine 内存破坏漏洞 |
Microsoft Scripting Engine | CVE-2018-0776 | Scripting Engine 内存破坏漏洞 |
Microsoft Scripting Engine | CVE-2018-0777 | Scripting Engine 内存破坏漏洞 |
Microsoft Scripting Engine | CVE-2018-0778 | Scripting Engine 内存破坏漏洞 |
Microsoft Scripting Engine | CVE-2018-0780 | Scripting Engine 信息泄露漏洞 |
Microsoft Windows | CVE-2018-0753 | Windows IPSec 拒绝服务漏洞 |
Side-Channel | ADV180002 | Guidance to mitigate speculative execution side-channel vulnerabilities |
Windows Kernel | CVE-2018-0746 | Windows 信息泄露漏洞 |
Windows Kernel | CVE-2018-0747 | Windows 信息泄露漏洞 |
Windows Kernel | CVE-2018-0748 | Windows 特权提升漏洞 |
Windows Kernel | CVE-2018-0751 | Windows 特权提升漏洞 |
Windows Kernel | CVE-2018-0752 | Windows 特权提升漏洞 |
Windows Kernel | CVE-2018-0744 | Windows 特权提升漏洞 |
Windows Kernel | CVE-2018-0745 | Windows 信息泄露漏洞 |
Windows SMB Server | CVE-2018-0749 | SMB Server 特权提升漏洞 |
Windows Subsystem for Linux | CVE-2018-0743 | Windows Subsystem for Linux 特权提升漏洞 |
修复建议
微软官方已经发布更新补丁,请及时进行补丁更新。