Microsoft Outlook could be affected by the Spectre-Meltdown bug
Microsoft Outlook could be affected by the Spectre-Meltdown bug The February updates address security flaws in Internet Explorer, Edge, Microsoft's ChakraCore JavaScript engine, Windows, and Office. Two worrying bugs fixed this month affected Outlook. One, a memory-corruption flaw, identified as CVE-2018-0852, could allow an attacker to run arbitrary code. Microsoft says exploitation of this flaw is "less likely" and that an attacker would need to trick a victim into opening a file or visiting an attack site. However, it also notes that an attack vector is the Preview Pane. The second Outlook bug that could be worth patching immediately is elevation of privilege vulnerability CVE-2018-0850, which stems from Outlook insufficiently validating the formatting of incoming messages before processing them. An attacker could send a specially crafted email that forces Outlook…