# KB4462917: October 2018 cumulative update for Windows 10 1607

KB4462917, released October 9, 2018, fixes 23 CVEs across 10 products. One of them is being exploited (CVE-2018-8453); 1 on CISA KEV. Patch Radar priority: Patch now.

- Web page: https://patchblox.com/security/fix/microsoft/kb4462917
- Platform: Microsoft
- Released: Oct 9, 2018
- Priority: Patch now (Closes CVE-2018-8453, exploited (CISA KEV, ransomware))
- CVEs: 23, exploited: 1, on CISA KEV: 1
- Vendor advisory: https://support.microsoft.com/help/4462917

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [Internet Explorer 11 on Windows 10 Version 1607 for 32-bit Systems](https://patchblox.com/security/data/product/microsoft/internet-explorer-11-on-windows-10-version-1607-for-32-bit-systems.md) |  | 14393.2551 |
| [Internet Explorer 11 on Windows 10 Version 1607 for x64-based Systems](https://patchblox.com/security/data/product/microsoft/internet-explorer-11-on-windows-10-version-1607-for-x64-based-systems.md) |  | 14393.2551 |
| [Internet Explorer 11 on Windows Server 2016](https://patchblox.com/security/data/product/microsoft/internet-explorer-11-on-windows-server-2016.md) |  | 14393.2551 |
| [Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for 32-bit Systems](https://patchblox.com/security/data/product/microsoft/microsoft-edge-edgehtml-based-on-windows-10-version-1607-for-32-bit-systems.md) |  | 14393.2551 |
| [Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for x64-based Systems](https://patchblox.com/security/data/product/microsoft/microsoft-edge-edgehtml-based-on-windows-10-version-1607-for-x64-based-systems.md) |  | 14393.2551 |
| [Microsoft Edge (EdgeHTML-based) on Windows Server 2016](https://patchblox.com/security/data/product/microsoft/microsoft-edge-edgehtml-based-on-windows-server-2016.md) |  | 14393.2551 |
| [Windows 10 Version 1607 for 32-bit Systems](https://patchblox.com/security/data/product/microsoft/windows-10-version-1607-for-32-bit-systems.md) |  | 14393.2551 |
| [Windows 10 Version 1607 for x64-based Systems](https://patchblox.com/security/data/product/microsoft/windows-10-version-1607-for-x64-based-systems.md) |  | 14393.2551 |
| [Windows Server 2016](https://patchblox.com/security/data/product/microsoft/windows-server-2016.md) |  | 14393.2551 |
| [Windows Server 2016 (Server Core installation)](https://patchblox.com/security/data/product/microsoft/windows-server-2016-server-core-installation.md) |  | 14393.2551 |

## CVEs this fix closes

| CVE | Priority | Component | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2018-8453](https://patchblox.com/security/data/cve/CVE-2018-8453.md) | Patch now | Microsoft Graphics Component | 7.0 | 0.7004 | CISA KEV, Ransomware |
| [CVE-2018-8413](https://patchblox.com/security/data/cve/CVE-2018-8413.md) | Urgent | Windows Shell | 5.0 | 0.4625 | More likely |
| [CVE-2018-8494](https://patchblox.com/security/data/cve/CVE-2018-8494.md) | Urgent | Microsoft XML Core Services | 7.5 | 0.2209 |  |
| [CVE-2018-8460](https://patchblox.com/security/data/cve/CVE-2018-8460.md) | Urgent | Internet Explorer | 7.5 | 0.2067 | More likely |
| [CVE-2018-8505](https://patchblox.com/security/data/cve/CVE-2018-8505.md) | Urgent | Microsoft Scripting Engine | 4.2 | 0.1423 | More likely |
| [CVE-2018-8491](https://patchblox.com/security/data/cve/CVE-2018-8491.md) | Urgent | Internet Explorer | 7.5 | 0.1279 | More likely |
| [CVE-2018-8489](https://patchblox.com/security/data/cve/CVE-2018-8489.md) | Urgent | Windows Hyper-V | 7.6 | 0.0440 |  |
| [CVE-2018-8490](https://patchblox.com/security/data/cve/CVE-2018-8490.md) | Urgent | Windows Hyper-V | 7.6 | 0.0413 |  |
| [CVE-2018-8411](https://patchblox.com/security/data/cve/CVE-2018-8411.md) | Urgent | Microsoft Windows | 7.0 | 0.0307 | More likely |
| [CVE-2018-8492](https://patchblox.com/security/data/cve/CVE-2018-8492.md) | Urgent | Device Guard | 5.3 | 0.0210 | More likely |
| [CVE-2018-8333](https://patchblox.com/security/data/cve/CVE-2018-8333.md) | Urgent | Microsoft Windows | 7.0 | 0.0187 | More likely |
| [CVE-2018-8486](https://patchblox.com/security/data/cve/CVE-2018-8486.md) | Urgent | Microsoft Graphics Component | 4.7 | 0.0175 | More likely |
| [CVE-2018-8497](https://patchblox.com/security/data/cve/CVE-2018-8497.md) | Urgent | Windows Kernel | 7.8 | 0.0111 | Disclosed |
| [CVE-2018-8423](https://patchblox.com/security/data/cve/CVE-2018-8423.md) | High | Microsoft JET Database Engine | 7.8 | 0.3215 | Disclosed |
| [CVE-2018-8484](https://patchblox.com/security/data/cve/CVE-2018-8484.md) | High | Microsoft Graphics Component | 7.0 | 0.0118 |  |
| [CVE-2018-8495](https://patchblox.com/security/data/cve/CVE-2018-8495.md) | Routine | Windows Shell | 4.2 | 0.5101 |  |
| [CVE-2018-8472](https://patchblox.com/security/data/cve/CVE-2018-8472.md) | Routine | Microsoft Graphics Component | 4.7 | 0.1887 |  |
| [CVE-2018-8503](https://patchblox.com/security/data/cve/CVE-2018-8503.md) | Routine | Microsoft Scripting Engine | 4.2 | 0.1423 |  |
| [CVE-2018-8493](https://patchblox.com/security/data/cve/CVE-2018-8493.md) | Routine | Microsoft Windows | 5.9 | 0.0890 |  |
| [CVE-2018-8481](https://patchblox.com/security/data/cve/CVE-2018-8481.md) | Routine | Windows Media Player | 3.5 | 0.0500 |  |
| [CVE-2018-8482](https://patchblox.com/security/data/cve/CVE-2018-8482.md) | Routine | Windows Media Player | 3.5 | 0.0500 |  |
| [CVE-2018-8320](https://patchblox.com/security/data/cve/CVE-2018-8320.md) | Routine | Microsoft Windows DNS | 4.3 | 0.0465 |  |
| [CVE-2018-8330](https://patchblox.com/security/data/cve/CVE-2018-8330.md) | Routine | Windows Kernel | 4.7 | 0.0254 |  |

---

Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo
