CVE-2018-8634: Critical severity windows 10 vulnerability

Published Dec 12, 2018

Updated

A remote code execution vulnerability exists in Windows where Microsoft text-to-speech fails to properly handle objects in the memory, aka "Microsoft Text-To-Speech Remote Code Execution Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019, Windows 10 Servers.

Affected Software

10 affected components

Microsoft Windows 10

Microsoft Windows 10=1607

Microsoft Windows 10=1703

Microsoft Windows 10=1709

Microsoft Windows 10=1803

Microsoft Windows 10=1809

Microsoft Windows Server 2016

Microsoft Windows Server 2016=1709

Microsoft Windows Server 2016=1803

Microsoft Windows Server 2019

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8634

Event History

Dec 12, 2018

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2018-8634?

CVE-2018-8634 has a critical severity rating as it allows remote code execution.

How do I fix CVE-2018-8634?

To fix CVE-2018-8634, apply the security update provided by Microsoft for your specific version of Windows.

What versions of Windows are affected by CVE-2018-8634?

CVE-2018-8634 affects Windows Server 2016, Windows 10, and Windows Server 2019 across various builds.

Can CVE-2018-8634 be exploited remotely?

Yes, CVE-2018-8634 can be exploited remotely through malicious text-to-speech content.

What is the impact of CVE-2018-8634 if exploited?

If CVE-2018-8634 is successfully exploited, it can lead to unauthorized remote code execution on the affected systems.