Microsoft · Security update · May 8, 2018

KB4092041: May 2018 security update

KB4092041, released May 8, 2018, fixes 5 CVEs across 5 products. None of them is reported as exploited. Patch Radar priority: Urgent. The product is no longer supported.

UrgentUnsupported product
CVEs closed
5
1 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.2364
97th percentile

Priority of the 5 CVEs

Patch now 0 Urgent 1 High 3 Routine 1

Applies to

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Urgent CVE-2018-8154 Microsoft Exchange Server Remote Code Execution n/a 0.2364 Exploitation Less Likely
High CVE-2018-8151 Microsoft Exchange Server Information Disclosure n/a 0.0870 Exploitation Less Likely
High CVE-2018-8152 Microsoft Exchange Server Elevation of Privilege n/a 0.0351 Exploitation Less Likely
High CVE-2018-8159 Microsoft Exchange Server Elevation of Privilege n/a 0.0351 Exploitation Less Likely
Routine CVE-2018-8153 Microsoft Exchange Server Spoofing n/a 0.0344 Exploitation Less Likely
Showing 1 to 5 of 5 1