Microsoft Security Advisory: CVE-2018-8115 fix is available on GitHub @ AskWoody

Microsoft Security Advisory: CVE-2018-8115 fix is available on GitHub

Posted on May 2, 2018 at 20:48 CDT by woody • Comment in the Forums

This one isn’t particularly interesting from a vulnerability point of view — it’s a zero day that hasn’t been exploited as yet. CVE-2018-8115 | Windows Host Compute Service Shim Remote Code Execution Vulnerability can be fixed by installing a new version of the file hcsshim

What I found interesting: The new version of hcsshim isn’t in the Microsoft Update Catalog. It’s posted on GitHub. The new hcsshim isn’t from an official Microsoft account, mind you, but from a personal account, darrenstahlmsft.

Times change, eh?

UPDATE: Michael Hanselmann, who discovered and reported the security hole, has posted a brief explanation.

Windows Patches/Security CVE-2018-8115, GitHub, hcsshim

Plus Membership

Donations from Plus members keep this site going. You can identify the people who support AskWoody by the Plus badge on their avatars.

AskWoody Plus members not only get access to all of the contents of this site -- including Susan Bradley's frequently updated Patch Watch listing -- they also receive weekly AskWoody Plus Newsletters (formerly Windows Secrets Newsletter) and AskWoody Plus Alerts, emails when there are important breaking developments.

Welcome to our unique respite from the madness.

It's easy to post questions about Windows 11, Windows 10, Win8.1, Win7, Surface, Office, or browse through our Forums. Post anonymously or register for greater privileges. Keep it civil, please: Decorous Lounge rules strictly enforced. Questions? Contact Customer Support.

S	M	T	W	T	F	S
				1	2	3
4	5	6	7	8	9	10
11	12	13	14	15	16	17
18	19	20	21	22	23	24
25	26	27	28	29	30	31

Microsoft Security Advisory: CVE-2018-8115 fix is available on GitHub

Plus Membership

Search Newsletters

Search Forums

View the Forum

Search for Topics

Recent Topics

Recent blog posts

My Profile

Key Links

Remembering Woody

Microsoft Security Advisory: CVE-2018-8115 fix is available on GitHub

Plus Membership

Search Newsletters

Search Forums

View the Forum

Search for Topics

Recent Topics

Recent blog posts

My Profile

Login and Registration

Key Links

Remembering Woody