Microsoft · Security update · March 13, 2018

KB4088879: March 2018 security update

KB4088879, released March 13, 2018, fixes 20 CVEs across 4 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
20
None rated Critical
Exploited
0
None reported
Exploitation more likely
14
Vendor assessment
Highest EPSS
0.2112
97th percentile

Priority of the 20 CVEs

Patch now 0 Urgent 14 High 4 Routine 2

Applies to

Product
Windows 8.1 for 32-bit systems
Windows 8.1 for x64-based systems
Windows Server 2012 R2
Windows Server 2012 R2 (Server Core installation)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Urgent CVE-2018-0883 Windows Shell Remote Code Execution 5.0 0.1454 More likely
Urgent CVE-2018-0895 Windows Kernel Information Disclosure 4.7 0.0276 More likely
Urgent CVE-2018-0901 Windows Kernel Information Disclosure 4.7 0.0236 More likely
Urgent CVE-2018-0894 Windows Kernel Information Disclosure 4.7 0.0234 More likely
Urgent CVE-2018-0897 Windows Kernel Information Disclosure 4.7 0.0234 More likely
Urgent CVE-2018-0898 Windows Kernel Information Disclosure 4.7 0.0212 More likely
Urgent CVE-2018-0899 Windows Kernel Information Disclosure 4.7 0.0212 More likely
Urgent CVE-2018-0900 Windows Kernel Information Disclosure 4.7 0.0212 More likely
Urgent CVE-2018-0896 Windows Kernel Information Disclosure 4.7 0.0209 More likely
Urgent CVE-2018-0904 Windows Kernel Information Disclosure 4.7 0.0209 More likely
Urgent CVE-2018-0811 Windows Kernel Information Disclosure 5.5 0.0181 More likely
Urgent CVE-2018-0813 Windows Kernel Information Disclosure 5.5 0.0181 More likely
Urgent CVE-2018-0814 Windows Kernel Information Disclosure 5.5 0.0181 More likely
Urgent CVE-2018-0817 Microsoft Graphics Component Elevation of Privilege 7.0 0.0130 More likely
High CVE-2018-0888 Windows Hyper-V Information Disclosure 7.2 0.0143 Exploitation Less Likely
High CVE-2018-0816 Microsoft Graphics Component Elevation of Privilege 7.0 0.0122 N/A
High CVE-2018-0868 Windows Installer Elevation of Privilege 7.4 0.0117 Exploitation Less Likely
High CVE-2018-0881 Microsoft Video Control Elevation of Privilege 7.0 0.0111 Exploitation Less Likely
Routine CVE-2018-0878 Microsoft Windows Information Disclosure 3.1 0.2112 Exploitation Less Likely
Routine CVE-2018-0885 Windows Hyper-V Denial of Service 5.8 0.0528 Exploitation Less Likely
Showing 1 to 20 of 20 1