# KB4471324: December 2018 cumulative update for Windows 10 1803 KB4471324, released December 11, 2018, fixes 23 CVEs across 16 products. 2 of them are being exploited (CVE-2018-8639); 2 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported. - Web page: https://patchblox.com/security/fix/microsoft/kb4471324 - Platform: Microsoft - Released: Dec 11, 2018 - Priority: Patch now (Closes CVE-2018-8639, exploited (CISA KEV, ransomware)) - CVEs: 23, exploited: 2, on CISA KEV: 2 - Vendor advisory: https://support.microsoft.com/help/4471324 ## Applies to | Product | Release | Fixed in | |---|---|---| | [Internet Explorer 11 on Windows 10 Version 1803 for 32-bit Systems](https://patchblox.com/security/data/product/microsoft/internet-explorer-11-on-windows-10-version-1803-for-32-bit-systems.md) | | 17134.471 | | [Internet Explorer 11 on Windows 10 Version 1803 for ARM64-based Systems](https://patchblox.com/security/data/product/microsoft/internet-explorer-11-on-windows-10-version-1803-for-arm64-based-systems.md) | | 17134.471 | | [Internet Explorer 11 on Windows 10 Version 1803 for x64-based Systems](https://patchblox.com/security/data/product/microsoft/internet-explorer-11-on-windows-10-version-1803-for-x64-based-systems.md) | | 17134.471 | | [Microsoft .NET Framework 3.5 on Windows 10 Version 1803 for 32-bit Systems](https://patchblox.com/security/data/product/microsoft/microsoft-.net-framework-3.5-on-windows-10-version-1803-for-32-bit-systems.md) | | 17134.471 | | [Microsoft .NET Framework 3.5 on Windows 10 Version 1803 for x64-based Systems](https://patchblox.com/security/data/product/microsoft/microsoft-.net-framework-3.5-on-windows-10-version-1803-for-x64-based-systems.md) | | 17134.471 | | [Microsoft .NET Framework 3.5 on Windows Server, version 1803 (Server Core Installation)](https://patchblox.com/security/data/product/microsoft/microsoft-.net-framework-3.5-on-windows-server-version-1803-server-core-installation.md) | | 17134.471 | | [Microsoft .NET Framework 4.7.2 on Windows 10 Version 1803 for 32-bit Systems](https://patchblox.com/security/data/product/microsoft/microsoft-.net-framework-4.7.2-on-windows-10-version-1803-for-32-bit-systems.md) | | 17134.471 | | [Microsoft .NET Framework 4.7.2 on Windows 10 Version 1803 for x64-based Systems](https://patchblox.com/security/data/product/microsoft/microsoft-.net-framework-4.7.2-on-windows-10-version-1803-for-x64-based-systems.md) | | 17134.471 | | [Microsoft .NET Framework 4.7.2 on Windows Server, version 1803 (Server Core Installation)](https://patchblox.com/security/data/product/microsoft/microsoft-.net-framework-4.7.2-on-windows-server-version-1803-server-core-installation.md) | | 17134.471 | | [Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for 32-bit Systems](https://patchblox.com/security/data/product/microsoft/microsoft-edge-edgehtml-based-on-windows-10-version-1803-for-32-bit-systems.md) | | 17134.471 | | [Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for ARM64-based Systems](https://patchblox.com/security/data/product/microsoft/microsoft-edge-edgehtml-based-on-windows-10-version-1803-for-arm64-based-systems.md) | | 17134.471 | | [Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for x64-based Systems](https://patchblox.com/security/data/product/microsoft/microsoft-edge-edgehtml-based-on-windows-10-version-1803-for-x64-based-systems.md) | | 17134.471 | | [Windows 10 Version 1803 for 32-bit Systems](https://patchblox.com/security/data/product/microsoft/windows-10-version-1803-for-32-bit-systems.md) | | 17134.471 | | [Windows 10 Version 1803 for ARM64-based Systems](https://patchblox.com/security/data/product/microsoft/windows-10-version-1803-for-arm64-based-systems.md) | | 17134.471 | | [Windows 10 Version 1803 for x64-based Systems](https://patchblox.com/security/data/product/microsoft/windows-10-version-1803-for-x64-based-systems.md) | | 17134.471 | | [Windows Server, version 1803 (Server Core Installation)](https://patchblox.com/security/data/product/microsoft/windows-server-version-1803-server-core-installation.md) | | 17134.471 | ## CVEs this fix closes | CVE | Priority | Component | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2018-8639](https://patchblox.com/security/data/cve/CVE-2018-8639.md) | Patch now | Microsoft Graphics Component | 7.0 | 0.2235 | CISA KEV, Ransomware | | [CVE-2018-8611](https://patchblox.com/security/data/cve/CVE-2018-8611.md) | Patch now | Windows Kernel | 7.0 | 0.0420 | CISA KEV | | [CVE-2018-8631](https://patchblox.com/security/data/cve/CVE-2018-8631.md) | Urgent | Internet Explorer | 6.4 | 0.6849 | More likely | | [CVE-2018-8617](https://patchblox.com/security/data/cve/CVE-2018-8617.md) | Urgent | Microsoft Scripting Engine | 4.2 | 0.6248 | More likely | | [CVE-2018-8619](https://patchblox.com/security/data/cve/CVE-2018-8619.md) | Urgent | Internet Explorer | 6.4 | 0.4484 | More likely | | [CVE-2018-8625](https://patchblox.com/security/data/cve/CVE-2018-8625.md) | Urgent | Microsoft Scripting Engine | 6.4 | 0.4376 | More likely | | [CVE-2018-8629](https://patchblox.com/security/data/cve/CVE-2018-8629.md) | Urgent | Microsoft Scripting Engine | 4.2 | 0.2260 | More likely | | [CVE-2018-8540](https://patchblox.com/security/data/cve/CVE-2018-8540.md) | Urgent | .NET Framework | n/a | 0.2158 | | | [CVE-2018-8626](https://patchblox.com/security/data/cve/CVE-2018-8626.md) | Urgent | Microsoft Windows DNS | 9.8 | 0.2124 | | | [CVE-2018-8634](https://patchblox.com/security/data/cve/CVE-2018-8634.md) | Urgent | Windows Authentication Methods | 4.2 | 0.1536 | More likely | | [CVE-2018-8624](https://patchblox.com/security/data/cve/CVE-2018-8624.md) | Urgent | Microsoft Scripting Engine | 4.2 | 0.1321 | More likely | | [CVE-2018-8583](https://patchblox.com/security/data/cve/CVE-2018-8583.md) | Urgent | Microsoft Scripting Engine | 4.2 | 0.1089 | More likely | | [CVE-2018-8618](https://patchblox.com/security/data/cve/CVE-2018-8618.md) | Urgent | Microsoft Scripting Engine | 4.2 | 0.1089 | More likely | | [CVE-2018-8643](https://patchblox.com/security/data/cve/CVE-2018-8643.md) | Urgent | Microsoft Scripting Engine | 6.4 | 0.0991 | More likely | | [CVE-2018-8596](https://patchblox.com/security/data/cve/CVE-2018-8596.md) | Urgent | Microsoft Graphics Component | 4.7 | 0.0707 | More likely | | [CVE-2018-8595](https://patchblox.com/security/data/cve/CVE-2018-8595.md) | Urgent | Microsoft Graphics Component | 4.7 | 0.0692 | More likely | | [CVE-2018-8637](https://patchblox.com/security/data/cve/CVE-2018-8637.md) | Urgent | Windows Kernel | 4.7 | 0.0185 | More likely | | [CVE-2018-8477](https://patchblox.com/security/data/cve/CVE-2018-8477.md) | Urgent | Windows Kernel | 3.3 | 0.0180 | More likely | | [CVE-2018-8612](https://patchblox.com/security/data/cve/CVE-2018-8612.md) | Urgent | Windows Kernel | 4.7 | 0.0142 | More likely | | [CVE-2018-8641](https://patchblox.com/security/data/cve/CVE-2018-8641.md) | Urgent | Windows Kernel-Mode Drivers | 7.0 | 0.0112 | More likely | | [CVE-2018-8599](https://patchblox.com/security/data/cve/CVE-2018-8599.md) | Urgent | Visual Studio | 7.0 | 0.0100 | More likely | | [CVE-2018-8517](https://patchblox.com/security/data/cve/CVE-2018-8517.md) | High | .NET Framework | n/a | 0.0567 | Disclosed | | [CVE-2018-8514](https://patchblox.com/security/data/cve/CVE-2018-8514.md) | Routine | Microsoft Windows DNS | 3.3 | 0.0189 | | --- Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo