MS Sec Notification mailing list archives

Microsoft Security Update Minor Revisions


From: "Microsoft" <securitynotifications () e-mail microsoft com>
Date: Tue, 08 May 2018 11:03:12 -0600

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

********************************************************************
Title: Microsoft Security Update Minor Revisions
Issued: May 8, 2018
********************************************************************

Summary
=======

The following CVE has been revised in the April 2018 Security 
Updates. 

* CVE-2018-8117

Revision Information:
=====================

CVE-2018-8117

 - Title: CVE-2018-1038 | Microsoft Wireless Keyboard 850 
   Security Feature Bypass Vulnerability
 - https://portal.msrc.microsoft.com/en-us/security-guidance
 - Reasons for Revision: Microsoft is announcing that with the 
   release of the May 2018 security updates for Windows, 
   customers who have a Microsoft Wireless Keyboard 850 
   installed will be notified automatically via a popup that 
   an important firmware update is available for the keyboard. 
   Users will be directed to 
   https://go.microsoft.com/fwlink/?linkid=871281 to manually 
   download and install the update. Microsoft recommends that 
   customers install the update to be protected from 
   CVE-2018-8117.
 - Originally posted: April 10, 2018  
 - Updated: May 8, 2018
 - CVE Severity Rating: Important
 - Version: 1.1

Other Information
=================

Recognize and avoid fraudulent email to Microsoft customers:
=============================================================
If you receive an email message that claims to be distributing 
a Microsoft security update, it is a hoax that may contain 
malware or pointers to malicious websites. Microsoft does 
not distribute security updates via email. 

The Microsoft Security Response Center (MSRC) uses PGP to digitally 
sign all security notifications. However, PGP is not required for 
reading security notifications, reading security bulletins, or 
installing security updates. You can obtain the MSRC public PGP key
at <https://technet.microsoft.com/security/dn753714>.

********************************************************************
THE INFORMATION PROVIDED IN THIS MICROSOFT COMMUNICATION IS
PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND. MICROSOFT
DISCLAIMS ALL WARRANTIES, EITHER EXPRESS OR IMPLIED, INCLUDING
THE WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
PURPOSE.
IN NO EVENT SHALL MICROSOFT CORPORATION OR ITS SUPPLIERS BE
LIABLE FOR ANY DAMAGES WHATSOEVER INCLUDING DIRECT, INDIRECT,
INCIDENTAL, CONSEQUENTIAL, LOSS OF BUSINESS PROFITS OR SPECIAL
DAMAGES, EVEN IF MICROSOFT CORPORATION OR ITS SUPPLIERS HAVE BEEN
ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
SOME STATES DO NOT ALLOW THE EXCLUSION OR LIMITATION OF LIABILITY
FOR CONSEQUENTIAL OR INCIDENTAL DAMAGES SO THE FOREGOING
LIMITATION MAY NOT APPLY.
********************************************************************

Microsoft respects your privacy. Please read our online Privacy
Statement at <http://go.microsoft.com/fwlink/?LinkId=81184>.

If you would prefer not to receive future technical security
notification alerts by email from Microsoft and its family of
companies please visit the following website to unsubscribe:
<https://profile.microsoft.com/RegSysProfileCenter/subscriptionwizar
d.aspx?wizid=5a2a311b-5189-4c9b-9f1a-d5e913a26c2e&%3blcid=1033>.

These settings will not affect any newsletters you’ve requested or
any mandatory service communications that are considered part of
certain Microsoft services.

For legal Information, see:
<http://www.microsoft.com/info/legalinfo/default.mspx>.

This newsletter was sent by:
Microsoft Corporation
1 Microsoft Way
Redmond, Washington, USA
98052
-----BEGIN PGP SIGNATURE-----
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=5Pvh
-----END PGP SIGNATURE-----


Current thread: