CVE-2018-8634

Description

A remote code execution vulnerability exists in Windows where Microsoft text-to-speech fails to properly handle objects in the memory, aka Microsoft Text-To-Speech Remote Code Execution Vulnerability. This affects Windows Server 2016, Windows 10, Windows Server 2019, Windows 10 Servers.

Risk Information

Base Score
4.3
MODERATE
Vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
EPSS Score
Exploitation Probability
32.912

Associated Vulnerability

VulnerabilityOS Platform
Chakra Scripting Engine Memory Corruption Vulnerability for Windows 10 Version 1703 for x64-based Systems (KB4471327) - CumulativeWindows
Chakra Scripting Engine Memory Corruption Vulnerability for Windows 10 Version 1703 for x86-based Systems (KB4471327) - DeltaWindows
Chakra Scripting Engine Memory Corruption Vulnerability for Windows 10 Version 1703 for x86-based Systems (KB4471327) - CumulativeWindows
Chakra Scripting Engine Memory Corruption Vulnerability for Windows 10 Version 1703 for x64-based Systems (KB4471327) - DeltaWindows
Windows GDI Information Disclosure Vulnerability for Windows 10 Version 1507 for x64-based Systems (KB4471323) - CumulativeWindows
Windows GDI Information Disclosure Vulnerability for Windows 10 Version 1507 for x86-based Systems (KB4471323) - CumulativeWindows
Chakra Scripting Engine Memory Corruption Vulnerability for Windows Server 2016 (1803) for x64-based Systems (KB4471324) - DeltaWindows
Chakra Scripting Engine Memory Corruption Vulnerability for Windows Server 2016 (1803) for x64-based Systems (KB4471324) - CumulativeWindows
Chakra Scripting Engine Memory Corruption Vulnerability for Windows 10 Version 1803 for x64-based Systems (KB4471324) - DeltaWindows
Chakra Scripting Engine Memory Corruption Vulnerability for Windows 10 Version 1803 for x86-based Systems (KB4471324) - CumulativeWindows
Chakra Scripting Engine Memory Corruption Vulnerability for Windows 10 Version 1803 for x64-based Systems (KB4471324) - CumulativeWindows
Chakra Scripting Engine Memory Corruption Vulnerability for Windows 10 Version 1803 for x86-based Systems (KB4471324) - DeltaWindows
Chakra Scripting Engine Memory Corruption Vulnerability for Windows 10 Version 1809 for x64-based Systems (KB4471332) - CumulativeWindows
Chakra Scripting Engine Memory Corruption Vulnerability for Windows Server 2019 for x64-based Systems (KB4471332) - CumulativeWindows
Chakra Scripting Engine Memory Corruption Vulnerability for Windows 10 Version 1809 for x86-based Systems (KB4471332) - CumulativeWindows
Chakra Scripting Engine Memory Corruption Vulnerability for Windows Server 2016 (1709) for x64-based Systems (KB4471329) - CumulativeWindows
Chakra Scripting Engine Memory Corruption Vulnerability for Windows 10 Version 1709 for x86-based Systems (KB4471329) - DeltaWindows
Chakra Scripting Engine Memory Corruption Vulnerability for Windows 10 Version 1709 for x64-based Systems (KB4471329) - CumulativeWindows
Chakra Scripting Engine Memory Corruption Vulnerability for Windows 10 Version 1709 for x64-based Systems (KB4471329) - DeltaWindows
Chakra Scripting Engine Memory Corruption Vulnerability for Windows Server 2016 (1709) for x64-based Systems (KB4471329) - DeltaWindows
Chakra Scripting Engine Memory Corruption Vulnerability for Windows 10 Version 1709 for x86-based Systems (KB4471329) - CumulativeWindows
Chakra Scripting Engine Memory Corruption Vulnerability for Windows Server 2016 for x64-based Systems (KB4471321) - DeltaWindows
Chakra Scripting Engine Memory Corruption Vulnerability for Windows Server 2016 for x64-based Systems (KB4471321) - CumulativeWindows
Chakra Scripting Engine Memory Corruption Vulnerability for Windows 10 Version 1607 for x64-based Systems (KB4471321) - DeltaWindows
Chakra Scripting Engine Memory Corruption Vulnerability for Windows 10 Version 1607 for x64-based Systems (KB4471321) - CumulativeWindows
Chakra Scripting Engine Memory Corruption Vulnerability for Windows 10 Version 1607 for x86-based Systems (KB4471321) - DeltaWindows
Chakra Scripting Engine Memory Corruption Vulnerability for Windows 10 Version 1607 for x86-based Systems (KB4471321) - CumulativeWindows

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-257342018-12 Cumulative Update for Windows 10 Version 1507 for x64-based Systems (KB4471323)
PATCH-257352018-12 Cumulative Update for Windows 10 Version 1507 for x86-based Systems (KB4471323)
PATCH-257882018-12 Delta Update for Windows Server 2016 (1803) for x64-based Systems (KB4471324)
PATCH-257892018-12 Cumulative Update for Windows Server 2016 (1803) for x64-based Systems (KB4471324)
PATCH-257902018-12 Delta Update for Windows 10 Version 1803 for x64-based Systems (KB4471324)
PATCH-257912018-12 Cumulative Update for Windows 10 Version 1803 for x86-based Systems (KB4471324)
PATCH-257922018-12 Cumulative Update for Windows 10 Version 1803 for x64-based Systems (KB4471324)
PATCH-257932018-12 Delta Update for Windows 10 Version 1803 for x86-based Systems (KB4471324)
PATCH-257942018-12 Cumulative Update for Windows 10 Version 1809 for x64-based Systems (KB4471332)
PATCH-257952018-12 Cumulative Update for Windows Server 2019 for x64-based Systems (KB4471332)
PATCH-257962018-12 Cumulative Update for Windows 10 Version 1809 for x86-based Systems (KB4471332)
PATCH-257822018-12 Cumulative Update for Windows Server 2016 (1709) for x64-based Systems (KB4471329)
PATCH-257832018-12 Delta Update for Windows 10 Version 1709 for x86-based Systems (KB4471329)
PATCH-257842018-12 Cumulative Update for Windows 10 Version 1709 for x64-based Systems (KB4471329)
PATCH-257852018-12 Delta Update for Windows 10 Version 1709 for x64-based Systems (KB4471329)
PATCH-257862018-12 Delta Update for Windows Server 2016 (1709) for x64-based Systems (KB4471329)
PATCH-257872018-12 Cumulative Update for Windows 10 Version 1709 for x86-based Systems (KB4471329)
PATCH-257282018-12 Delta Update for Windows Server 2016 for x64-based Systems (KB4471321)
PATCH-257292018-12 Cumulative Update for Windows Server 2016 for x64-based Systems (KB4471321)
PATCH-257302018-12 Delta Update for Windows 10 Version 1607 for x64-based Systems (KB4471321)
PATCH-257312018-12 Cumulative Update for Windows 10 Version 1607 for x64-based Systems (KB4471321)
PATCH-257322018-12 Delta Update for Windows 10 Version 1607 for x86-based Systems (KB4471321)
PATCH-257332018-12 Cumulative Update for Windows 10 Version 1607 for x86-based Systems (KB4471321)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234