Microsoft’s updates are available now for the June 2018 Patch Tuesday event. Here’s what is being patched today:
- Internet Explorer
- Microsoft Edge
- Microsoft Windows
- Microsoft Office and Microsoft Office Services and Web Apps
- Adobe Flash Player
Additionally, Microsoft has updated its guidance for the CBC Symmetric Encryption Security Feature Bypass.
Microsoft is announcing improved guidance on the use of Cipher-Block-Chaining (CBC) mode with symmetric encryption. A “padding oracle” Security Feature Bypass vulnerability may exist in certain circumstances if padded CBC block ciphers are used without additional data integrity checks. This could allow an attacker to decrypt and tamper with encrypted data without knowing the encryption key. This vulnerability can be used both locally, and in network-based attacks.
Looking for an awesome, no-nonsense technical conference for IT Pros, Developers, and DevOps? IT/Dev Connections kicks off in Dallas, Texas in 2018!