← back
CVE-2018-8634

CVE-2018-8634

EPSS 14.5%
Vexday Risk Score
8Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 14.5%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
12 Dec 2018Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
A remote code execution vulnerability exists in Windows where Microsoft text-to-speech fails to properly handle objects in the memory, aka "Microsoft Text-To-Speech Remote Code Execution Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019, Windows 10 Servers.
Affected products
Microsoft · Windows 10Microsoft · Windows 10 ServersMicrosoft · Windows Server 2016Microsoft · Windows Server 2019
References
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8634http://www.securityfocus.com/bid/106078