Microsoft · Security update · April 10, 2018
KB4092946: April 2018 security update
KB4092946, released April 10, 2018, fixes 13 CVEs across 9 products. None of them is reported as exploited. Patch Radar priority: Urgent. The product is no longer supported.
UrgentUnsupported product
CVEs closed
13
3 rated Critical
Exploited
0
None reported
Exploitation more likely
12
Vendor assessment
Highest EPSS
0.1873
97th percentile
Priority of the 13 CVEs
Patch now 0
Urgent 12
High 1
Routine 0
Applies to
CVEs this fix closes
| Priority | CVE | Component | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Urgent | CVE-2018-1004 | Microsoft Scripting Engine | Remote Code Execution | 5.0 | 0.1873 | More likely |
| Urgent | CVE-2018-1020 | Internet Explorer | Remote Code Execution | 6.4 | 0.1655 | More likely |
| Urgent | CVE-2018-0870 | Internet Explorer | Remote Code Execution | 7.5 | 0.1543 | More likely |
| Urgent | CVE-2018-1018 | Internet Explorer | Remote Code Execution | 7.5 | 0.1543 | More likely |
| Urgent | CVE-2018-0988 | Microsoft Scripting Engine | Remote Code Execution | 6.4 | 0.1543 | More likely |
| Urgent | CVE-2018-0991 | Internet Explorer | Remote Code Execution | 4.2 | 0.1543 | More likely |
| Urgent | CVE-2018-0996 | Microsoft Scripting Engine | Remote Code Execution | 6.4 | 0.1495 | More likely |
| Urgent | CVE-2018-1001 | Microsoft Scripting Engine | Remote Code Execution | 6.4 | 0.1495 | More likely |
| Urgent | CVE-2018-1000 | Microsoft Scripting Engine | Information Disclosure | 6.4 | 0.0745 | More likely |
| Urgent | CVE-2018-0981 | Microsoft Scripting Engine | Information Disclosure | 6.4 | 0.0642 | More likely |
| Urgent | CVE-2018-0987 | Microsoft Scripting Engine | Information Disclosure | 2.4 | 0.0609 | More likely |
| Urgent | CVE-2018-0989 | Microsoft Scripting Engine | Information Disclosure | 2.4 | 0.0533 | More likely |
| High | CVE-2018-0997 | Internet Explorer | Remote Code Execution | 7.5 | 0.1543 | Exploitation Less Likely |
Showing 1 to 13 of 13
1