Google Security Research Microsoft Edge - Sandbox Escape
remote windows CVE-2018-8469;CVE-2018-8468;CVE-2018-8463

Osanda Malith Jayathissa EE 4GEE Mini EE40_00_02.00_44 - Privilege Escalation
local windows CVE-2018-14327

Ilya Timchenko Rausoft ID.prove 2.95 - 'Username' SQL injection
webapps windows_x86-64 CVE-2018-16659

Ismail Tasdelen ManageEngine Desktop Central 10.0.271 - Cross-Site Scripting
webapps java

Sureshbabu Narvaneni iWay Data Quality Suite Web Console 10.6.1.ga - XML External Entity Injection
webapps windows

Qualys Corporation Linux Kernel 2.6.x / 3.10.x / 4.14.x (RedHat / Debian / CentOS) (x64) - 'Mutagen Astronomy' Local Privilege Escalation
local linux_x86-64 CVE-2018-14634

Google Security Research Linux Kernel - VMA Use-After-Free via Buggy vmacache_flush_all() Fastpath Local Privilege Escalation
local linux CVE-2018-17182

Google Security Research Linux Kernel - VMA Use-After-Free via Buggy vmacache_flush_all() Fastpath Local Privilege Escalation
local linux CVE-2018-17182

Gionathan Reale CrossFont 7.5 - Denial of Service (PoC)
dos windows_x86

Gionathan Reale TransMac 12.2 - Denial of Service (PoC)
dos windows_x86

Gionathan Reale Faleemi Desktop Software 1.8.2 - 'Device alias' Local Buffer Overflow (SEH)
local windows_x86

AkkuS Joomla! Component Responsive Portfolio 1.6.1 - 'filter_order_Dir' SQL Injection
webapps php

Ismail Tasdelen RICOH MP C406Z Printer - Cross-Site Scripting
webapps hardware

Google Security Research WebKit - 'WebCore::RenderTreeBuilder::removeAnonymousWrappersForInlineChildrenIfNeeded' Use-After-Free
dos multiple CVE-2018-4197

Google Security Research WebKit - 'WebCore::SVGTextLayoutAttributes::context' Use-After-Free
dos multiple CVE-2018-4318

Ismail Tasdelen RICOH MP 305+ Printer - Cross-Site Scripting
webapps hardware