It's September 2018, and Windows VMs can pwn their host servers by launching an evil app

Too smart? There's also an old-fashioned image file RCE

Admins will again be working overtime as Microsoft and Adobe have posted their monthly scheduled security updates for September."