# KB4462915: October 2018 security update

KB4462915, released October 9, 2018, fixes 14 CVEs across 5 products. One of them is being exploited (CVE-2018-8453); 1 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

- Web page: https://patchblox.com/security/fix/microsoft/kb4462915
- Platform: Microsoft
- Released: Oct 9, 2018
- Priority: Patch now (Closes CVE-2018-8453, exploited (CISA KEV, ransomware))
- CVEs: 14, exploited: 1, on CISA KEV: 1
- Vendor advisory: https://support.microsoft.com/help/4462915

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [Windows 7 for 32-bit Systems Service Pack 1](https://patchblox.com/security/data/product/microsoft/windows-7-for-32-bit-systems-service-pack-1.md) |  |  |
| [Windows 7 for x64-based Systems Service Pack 1](https://patchblox.com/security/data/product/microsoft/windows-7-for-x64-based-systems-service-pack-1.md) |  |  |
| [Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1](https://patchblox.com/security/data/product/microsoft/windows-server-2008-r2-for-itanium-based-systems-service-pack-1.md) |  |  |
| [Windows Server 2008 R2 for x64-based Systems Service Pack 1](https://patchblox.com/security/data/product/microsoft/windows-server-2008-r2-for-x64-based-systems-service-pack-1.md) |  |  |
| [Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)](https://patchblox.com/security/data/product/microsoft/windows-server-2008-r2-for-x64-based-systems-service-pack-1-server-core-installation.md) |  |  |

## CVEs this fix closes

| CVE | Priority | Component | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2018-8453](https://patchblox.com/security/data/cve/CVE-2018-8453.md) | Patch now | Microsoft Graphics Component | 7.0 | 0.7004 | CISA KEV, Ransomware |
| [CVE-2018-8413](https://patchblox.com/security/data/cve/CVE-2018-8413.md) | Urgent | Windows Shell | 5.0 | 0.4625 | More likely |
| [CVE-2018-8494](https://patchblox.com/security/data/cve/CVE-2018-8494.md) | Urgent | Microsoft XML Core Services | 7.5 | 0.2209 |  |
| [CVE-2018-8489](https://patchblox.com/security/data/cve/CVE-2018-8489.md) | Urgent | Windows Hyper-V | 7.6 | 0.0440 |  |
| [CVE-2018-8411](https://patchblox.com/security/data/cve/CVE-2018-8411.md) | Urgent | Microsoft Windows | 7.0 | 0.0307 | More likely |
| [CVE-2018-8333](https://patchblox.com/security/data/cve/CVE-2018-8333.md) | Urgent | Microsoft Windows | 7.0 | 0.0187 | More likely |
| [CVE-2018-8486](https://patchblox.com/security/data/cve/CVE-2018-8486.md) | Urgent | Microsoft Graphics Component | 4.7 | 0.0175 | More likely |
| [CVE-2018-8423](https://patchblox.com/security/data/cve/CVE-2018-8423.md) | High | Microsoft JET Database Engine | 7.8 | 0.3215 | Disclosed |
| [CVE-2018-8432](https://patchblox.com/security/data/cve/CVE-2018-8432.md) | Routine | Microsoft Office | 5.0 | 0.1955 |  |
| [CVE-2018-8472](https://patchblox.com/security/data/cve/CVE-2018-8472.md) | Routine | Microsoft Graphics Component | 4.7 | 0.1887 |  |
| [CVE-2018-8481](https://patchblox.com/security/data/cve/CVE-2018-8481.md) | Routine | Windows Media Player | 3.5 | 0.0500 |  |
| [CVE-2018-8482](https://patchblox.com/security/data/cve/CVE-2018-8482.md) | Routine | Windows Media Player | 3.5 | 0.0500 |  |
| [CVE-2018-8320](https://patchblox.com/security/data/cve/CVE-2018-8320.md) | Routine | Microsoft Windows DNS | 4.3 | 0.0465 |  |
| [CVE-2018-8330](https://patchblox.com/security/data/cve/CVE-2018-8330.md) | Routine | Windows Kernel | 4.7 | 0.0254 |  |

---

Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo