-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ******************************************************************** Title: Microsoft Security Update Releases Issued: May 15, 2018 ******************************************************************** Summary ======= The following CVEs have been published or have undergone a major revision increment: * CVE-2018-8147 * CVE-2018-8162 * CVE-2018-8176 Revision Information: ===================== - CVE-2018-8147 | Microsoft Excel Remote Code Execution Vulnerability - https://portal.msrc.microsoft.com/en-us/security-guidance - Version: 2.0 - Reason for Revision: Microsoft is announcing the availability of the 16.13.18051301 update for Microsoft Office 2016 for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the Release Notes for more information and download links. - Originally posted: May 8, 2018 - Updated: May 15, 2018 - Aggregate CVE Severity Rating: Important - CVE-2018-8162 | Microsoft Excel Remote Code Execution Vulnerability - https://portal.msrc.microsoft.com/en-us/security-guidance - Version: 2.0 - Reason for Revision: Revised the Affected Products table to include Microsoft Office 2016 for Mac because it is affected by this CVE. Microsoft recommends that customers running Microsoft Office 2016 for Mac install the update to be protected from this vulnerability. - Originally posted: May 8, 2018 - Updated: May 15, 2018 - Aggregate CVE Severity Rating: Important - CVE-2018-8176 | Microsoft PowerPoint Remote Code Execution Vulnerability - https://portal.msrc.microsoft.com/en-us/security-guidance - Version: 2.0 - Reason for Revision: Information published. This CVE has been added to this month's Security Updates. Microsoft recommends that customers running Microsoft Office 2016 for Mac install the update to be protected from this vulnerability. - Originally posted: May 15, 2018 - Updated: N/A - Aggregate CVE Severity Rating: Important The following advisory has undergone a major revision increment: * ADV180002 Revision Information: ===================== - ADV180002 | Guidance to mitigate speculative execution side-channel vulnerabilities - https://portal.msrc.microsoft.com/en-us/security-guidance - Version: 19.0 - Reason for Revision: Updated FAQ #14 to announce that a stand-alone update for Windows 10 Version 1803 and Windows Server, version 1803 is available via the Microsoft Update Catalog. This update includes microcode updates from Intel. See Microsoft Knowledge Base Article 4100347 for more information. - Originally posted: January 3, 2018 - Updated: May 15, 2018 - Aggregate CVE Severity Rating: Important Other Information ================= Recognize and avoid fraudulent email to Microsoft customers: ============================================================= If you receive an email message that claims to be distributing a Microsoft security update, it is a hoax that may contain malware or pointers to malicious websites. Microsoft does not distribute security updates via email. The Microsoft Security Response Center (MSRC) uses PGP to digitally sign all security notifications. However, PGP is not required for reading security notifications, reading security bulletins, or installing security updates. You can obtain the MSRC public PGP key at . ******************************************************************** THE INFORMATION PROVIDED IN THIS MICROSOFT COMMUNICATION IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND. MICROSOFT DISCLAIMS ALL WARRANTIES, EITHER EXPRESS OR IMPLIED, INCLUDING THE WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. IN NO EVENT SHALL MICROSOFT CORPORATION OR ITS SUPPLIERS BE LIABLE FOR ANY DAMAGES WHATSOEVER INCLUDING DIRECT, INDIRECT, INCIDENTAL, CONSEQUENTIAL, LOSS OF BUSINESS PROFITS OR SPECIAL DAMAGES, EVEN IF MICROSOFT CORPORATION OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. SOME STATES DO NOT ALLOW THE EXCLUSION OR LIMITATION OF LIABILITY FOR CONSEQUENTIAL OR INCIDENTAL DAMAGES SO THE FOREGOING LIMITATION MAY NOT APPLY. ******************************************************************** Microsoft respects your privacy. Please read our online Privacy Statement at . If you would prefer not to receive future technical security notification alerts by email from Microsoft and its family of companies please visit the following website to unsubscribe: . These settings will not affect any newsletters youave requested or any mandatory service communications that are considered part of certain Microsoft services. For legal Information, see: . This newsletter was sent by: Microsoft Corporation 1 Microsoft Way Redmond, Washington, USA 98052 -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEELe29pj1Ogz+2MnKbEEiO2re18ugFAlr7bjwACgkQEEiO2re1 8ugrMA/8CtMI+xCwG12rWznv74Lab75n73zoy4jzsXVCheO1uxsa9JfVlofzP3QI d3YINGkvyPlGJMNEH8JUCRUETFTjiMIsPQLoRxcaXl32LlQqcSTmwN0b35hRuFf2 oikQ9PSey3b5vzYBDRuCxQkqTGRHXQkYPB3yvK6ZxDx98KsxMS0hlgcPPO0YzQYR R5EJvmjYGm3RY4Oo2VZAUUI5O1/JekZuCF8TLHMKDeFm54bWDOuqDe7wwUF8KDvK 5O+P2XmGT7l1D3GAlQu0mk0bMYRSH89Gk9bHVRX+uqJAvMGTeumgl5aZ6wCCCAZy pZWXk9bHlI7OUFmx+OMW/phHfMGp5E6WJ7t7TioNpxqXHSNXL1pntlmveSIBhDEJ fCQI+eK68koc1PoPHko0Op0V32ckqQTk0LSi2eA+0fOpY4e1xz3mIgYDadUUqTM+ WfPPbQL1YvCnzjZL6EepufEtFxcEqIAsA/F0WRI08QoI0yUbuzxV3BQaPwpgI2/M w/Jw52XM3HS5VEDLHYbv9bN5QGMuJUajt2LjjqNITic2MQ1Uj0k0fIXWVRSWD2w7 E36GGQG/JOQs6CFJP2Igq/Pdc1LmAQw9k6G1dHjby3Tup6UB3/lhWhA7CSPvTELL zC3/lhGUfILJcm8mxpGCiCA4pBXU+xRwhJU+vgSsGI6LWkegmr4= =UviP -----END PGP SIGNATURE-----