May 2018 Patch Tuesday - Medium Weight, However One Active Exploit Needs Attention

Windows 10 will let you Alt+Tab between browser tabs and apps

"In a web-based attack scenario, an attacker could host a specially crafted website that is created to exploit the vulnerability through Internet Explorer and then convince a user to view the website", Microsoft notes in an advisory for the bug CVE-2018-8174.

The update includes patches for two flaws that are already being exploited in the wild, one of which was being used by an advanced persistent threat (APT) attack group to target Windows users through Internet Explorer (IE).

Microsoft also introduced some changes to "Sets" by bringing acrylic title bar, adjusting the window border to grey colour, introducing if users want to open new apps and websites in a new tab or new window and even adding recent Microsoft Edge tabs in the Alt + Tab mode.

The update includes a fix for Microsoft's Korean input method editor (IME). Microsoft has promised regular updates to Search Previews in the future. The option to name the folder will be shown when you expand the folder that has several tiles in it.

Meanwhile the second zero-day is CVE-2018-8120, which is an elevation-of-privilege vulnerability in the Win32k component. CVE-2018-0961 addresses abuse of vSMB packets, while CVE-2018-0959 could allow arbitrary code execution on the host from a guest OS. According to Gill Langston, in Qualys' Patch Tuesday commentary, the two Hyper-V bugs could enable a guest operating system to compromise the host. The code exploits a vulnerability in Microsoft's handling of NTFS filesystem images and was discovered by.


"CVE-2018-8174, on the other hand, affects all supported versions of Windows and could lead to arbitrary code execution", said Wiseman. The flaw in Windows 10 and Windows Server, designated CVE-2018-8170, had been publicly reported but has not yet been seen in in-the-wild attacks.

Adobe also patched a critical vulnerability in Flash Player this month: CVE-2018-4944.

Microsoft is in the process of rolling out its Windows 10 April update to users around the globe.

First, however, some organizations may need to update their version of Windows to ensure they're still getting the latest cumulative and security updates.

Third-party clipboard tools that extend the Clipboard are popular applications on Windows and it seems likely that Microsoft will please part of the userbase with the improved Clipboard that it plans to integrate in Windows 10 natively. For now, users with unspecified Intel SSDs will not receive the April update automatically, and they also can not install the update manually.

Related:

  • Twitter could soon add encryption to direct messages

    Twitter could soon add encryption to direct messages

    Twitter's DM feature has become a useful way of contacting strangers without acquiring their email address or phone number. Instant messaging app WhatsApp also uses "end-to-end encryption" while this can be opted into Messenger, as well.
    Reports Indicate Walmart is Ready to Acquire Flipkart

    Reports Indicate Walmart is Ready to Acquire Flipkart

    Crown for Indian e-commerce market would now be fought between old local foes - Amazon and Walmart . Flipkart, Amazon and Walmart have all repeatedly declined to comment on the talks.
    Homes Destroyed as Authorities Order More Evacuations over Hawaii Volcano

    Homes Destroyed as Authorities Order More Evacuations over Hawaii Volcano

    On Saturday morning, she received alerts from her security system that motion sensors throughout the house had been triggered. Military reservists from the National Guard have been sent in to help residents evacuate the area by Hawaii's Gov.
  • Magnitude-4.5 quake  rattles LA area

    Magnitude-4.5 quake rattles LA area

    There were no immediate reports of damages or injuries, but residents of San Diego County and Tijuana reported being jolted awake. The epicenter was located almost 7 miles north of Cabazon, a town of about 2,500 located 90 miles east of downtown Los Angeles.
    Hazard sends warning to L'Pool & Spurs for the top four spot

    Hazard sends warning to L'Pool & Spurs for the top four spot

    With just two games left, they are two wins away from a historic season and two losses away from the Europa League. It's normal to be a bit nervous, and today was a must-win game.
    View iOS, Android Content on Windows 10 PCs With 'Your Phone'

    View iOS, Android Content on Windows 10 PCs With 'Your Phone'

    Project Kinect for Azure is a package of sensors (including a next-generation depth camera) with on-board compute capabilities. In Seattle, at the company's Build conference , the company is opening up new APIs and tying deeper into SharePoint as well.
  • At Least Seven Killed In Attacks On Police Stations In Kabul

    At Least Seven Killed In Attacks On Police Stations In Kabul

    Violence in Afghanistan has surged since the Taliban launched its annual spring offensive, dubbed as "Al Khandaq", two weeks ago. Zabihullah Mujahed, Taliban spokesman, claimed responsibility for the attack on Police Station 10 in a tweet.
    Hottest Bank Holiday Monday in 40 years

    Hottest Bank Holiday Monday in 40 years

    Met Office forecaster Craig Snell said: "It looks likely we'll at least see our warmest Bank Holiday Monday on record on Monday". Bookmaker Coral has cut the odds on this month seeing the hottest May day ever recorded to 6-4 from 2-1.
    Trump tries to sink Blankenship in West Virginia primary

    Trump tries to sink Blankenship in West Virginia primary

    Trump's tweet is a reminder that he believes, deeply, in the concept that winning isn't everything, it's the only thing. Trump would measure in the competition in any respect underscores how alarmed party officials are about Mr.
  • Florida deputy airlifted to hospital after shooting in Highlands County

    Florida deputy airlifted to hospital after shooting in Highlands County

    Court records show that Ables was already on probation for battery of an elderly person at the time he was arrested Sunday. According to officials, the 69-year-old man is an ex-convict with a history of violence towards law enforcement.
    Sarah Ferguson snubbed from Prince Harry & Meghan Markle's reception

    Sarah Ferguson snubbed from Prince Harry & Meghan Markle's reception

    Meghan's mum Doria Ragland will travel with her daughter to the chapel where her dad, Thomas Markle, will walk her down the aisle. More than 1,000 people have already been invited into the grounds of Windsor Castle for the wedding.
    Who Knew? Jada Pinkett Smith & Gabriel Union Were Beefing for 17 Years!

    Who Knew? Jada Pinkett Smith & Gabriel Union Were Beefing for 17 Years!

    We were doing the sex show, I was like, 'What was your introduction to sex?'" Jada said with a laugh. Watch her talk about it below. "There were times where I was like, 'I am so unworthy of love".

Comments

Latest news

Morrisey defeats Jenkins, Blankenship for GOP Senate nod
He told them that "I$3 f people like me can't win from red states, you'll be in the minority the rest of your life". But Tuesday's turnout, where Republicans outvoted Democrats by almost two to one, doesn't bode well for Donnelly.

Mom and 2 children die after car hits alligator on I-95
A mother and her two young children have died after their auto hit an alligator on Interstate 95 in SC , authorities said. Josh Stanley (top left) along with his spouse Amber Stanley, 24, (top) along with their kids, Jack, 4, and Autumn, 2.

Trump administration hits 3 Venezuelans, 20 companies, with sanctions
Maduro, himself subject to sanctions a year ago , regularly laughs off Washington's disapproval and blames the U.S. He said the OAS must respond to the crisis by removing Venezuela from its membership.

'Mini-Trump' candidates battle it out in Republican primaries
Braun says he voted in Democratic primaries in the past because in his southern in home Democrats held all the local offices. It could also be seen as a win for Senate Majority Leader Mitch McConnell, who clashed with Blankenship during the campaign.

Mark Ingram suspended four games
The 2017 Offensive Rookie of the Year would rack up 728 yards and eight scores while pacing the league with 6.1 yards per carry. That's when he'll find out if he's worth more money than the Saints are paying him.

North Korea Warns The United States
Trump told the National Rifle Association's annual convention on Friday that he had toned down his rhetoric before the talks. The Rodong Sinmun commentary, however, said that Japan must first shift its stance on maintaining pressure on the North.

Trump's GOP 'warriors' lead charge against Mueller
And Giuliani has called into question whether Trump would be treated fairly by Mueller's prosecutors if he were to agree to an interview.

Kendall Jenner 'Shoves' Assistant Out The Way At Met Gala
Kylie who was making her official red carpet debut since welcoming her daughter, Stormi three months ago didn't fare well either. Kim pulled added hair extensions to her raven locks which she pulled back into elegant half-up do. "She wants a healthy Kanye".

NY Solicitor General Barbara Underwood named as acting attorney general
In a statement , Schneiderman admitted that he engaged in role-playing but never assaulted anyone and never had nonconsensual sex. Ms Manning Barish said Mr Schneiderman became violent a few weeks after they began dating.

Ireland: Facebook to curb foreign ads related to abortion referendum
The move will see the creation of 400 new construction jobs in the 16 months it takes to build the facilities at Grange Castle. The company will soon start requiring political advertisers to be residents in the country where the election is taking place.

Ebola Virus Returns: Latest Outbreak in Congo Kills 17
Government Health officials in the Democratic Republic of Congo (DRC) have confirmed two new cases of Ebola in the country. The team found 5 cases, 2 of whom were hospitalized at Bikoro General Hospital and 3 at the Ikoko Impenge Health Center.

Laurent Koscielny Sends Emotional Message to Arsenal Fans Following Injury
Before the game in his final programme notes, Wenger said he expected to be saddened by the occasion. And Wenger is confident Wilshere will still be an Arsenal player next season. "There's a good basis".

First Lady of the United States Melania Trump unveils her formal platform
Something unique though: "She has not narrowed her platform down to just one topic as has been done in the past", Grisham said. Her choice was ridiculed nearly immediately, given her husband's longtime habit of calling people names on Twitter, but Mrs.

Hezbollah To Win Big In First Lebanese Parliamentary Elections In Nine Years
The military wing of this organization recognized a terrorist group in the United Kingdom, Australia and the European Union. The biggest victor so far is the right-wing Christian Lebanese Forces, which nearly doubled its number of seats to 15.

Gennady Golovkin Crushes Opponent In 2nd Round For 20th Consecutive Title Defence
Canelo was suspended for six months on April 18 by the Nevada State Athletic Commission, and will be eligible to fight in August. Golovkin has repeated the record in this weight category, having defended the world champion title in 20 duels in a row.

Other news