Microsoft security update released: Internet Explorer RCE Zero-Day vulnerability patched

Microsoft’s bequest browser, Internet Explorer, may compel you to reboot your PC soon.

The remote code execution IE Zero-day vulnerability in Internet explorer scripting engine allows threat actors to execute arbitrary code in the context of the user.

Manipulators who successfully exploited the IE Zero-day vulnerability could leverage security privileges of the logged in user & execute malevolent code to corrupt system memory. In other words, if you are logged on with administrative user rights, this vulnerability could be exploited to take full control of an affected system. Threat actors can leverage this opportunity to:

1. Deploy malicious code on user’s system.
2. Install malicious programs.
3. View, change, or delete data
4. Create new accounts with full user rights

This Zero-day vulnerability is tracked as CVE-2018-8653 & can further be exploited in the following ways:

1. In Web-based scenarios, attackers could host especially crafted malicious sites designed to exploit vulnerability via Internet Explorer. Innocent users can then be lured to visit the contagious sites via ads or booby trapped emails. The embedded malefic script in the corrupt site in turn may infect user‘s system.
2. Threat actors can also make hay of the Applications that embed the IE scripting engine to render web based content to vitiate user system. Examples of such apps include – applications that are part of the Office suite.

 Microsoft’s out-of-band security update to cope with Internet Explorer RCE (Remote Code Execution) Zero-Day

Microsoft recently released an out-of-band security update, to fix Internet Explorer RCE Zero-Day vulnerability that has been wildly abused.

Read Full Article :- Click here