PT-2018-2025

CVE-2018-8634

·

Published

2018-12-11

·

Updated

2020-08-24

Description by

CVSS 2.0
9.3
High
MetricsAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Windows Server 2016 Windows 10 Windows Server 2019 Windows 10 Servers
Description A remote code execution issue exists due to the improper handling of objects in memory by Microsoft text-to-speech. This allows remote attackers to execute arbitrary code and affect the system.
Recommendations For Windows Server 2016, update to a version that includes the fix for the Microsoft Text-To-Speech Remote Code Execution issue. For Windows 10, update to a version that includes the fix for the Microsoft Text-To-Speech Remote Code Execution issue. For Windows Server 2019, update to a version that includes the fix for the Microsoft Text-To-Speech Remote Code Execution issue. For Windows 10 Servers, update to a version that includes the fix for the Microsoft Text-To-Speech Remote Code Execution issue.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾