Microsoft · Security update · April 10, 2018

KB4093114: April 2018 security update

KB4093114, released April 10, 2018, fixes 35 CVEs across 9 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
35
8 rated Critical
Exploited
0
None reported
Exploitation more likely
20
Vendor assessment
Highest EPSS
0.3973
98th percentile

Priority of the 35 CVEs

Patch now 0 Urgent 21 High 3 Routine 11

Applies to

Product
Internet Explorer 11 on Windows 8.1 for 32-bit systems
Internet Explorer 11 on Windows 8.1 for x64-based systems
Internet Explorer 11 on Windows RT 8.1
Internet Explorer 11 on Windows Server 2012 R2
Windows 8.1 for 32-bit systems
Windows 8.1 for x64-based systems
Windows RT 8.1
Windows Server 2012 R2
Windows Server 2012 R2 (Server Core installation)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Urgent CVE-2018-1010 Microsoft Graphics Component Remote Code Execution 8.8 0.3973 More likely
Urgent CVE-2018-1012 Microsoft Graphics Component Remote Code Execution 8.8 0.2326 Exploitation Less Likely
Urgent CVE-2018-1013 Microsoft Graphics Component Remote Code Execution 8.8 0.2326 More likely
Urgent CVE-2018-1015 Microsoft Graphics Component Remote Code Execution 8.8 0.2326 More likely
Urgent CVE-2018-1016 Microsoft Graphics Component Remote Code Execution 8.8 0.2326 More likely
Urgent CVE-2018-1003 Microsoft JET Database Engine Remote Code Execution 7.1 0.2281 More likely
Urgent CVE-2018-1004 Microsoft Scripting Engine Remote Code Execution 5.0 0.1873 More likely
Urgent CVE-2018-1020 Internet Explorer Remote Code Execution 6.4 0.1655 More likely
Urgent CVE-2018-0870 Internet Explorer Remote Code Execution 7.5 0.1543 More likely
Urgent CVE-2018-1018 Internet Explorer Remote Code Execution 7.5 0.1543 More likely
Urgent CVE-2018-0988 Microsoft Scripting Engine Remote Code Execution 6.4 0.1543 More likely
Urgent CVE-2018-0991 Internet Explorer Remote Code Execution 4.2 0.1543 More likely
Urgent CVE-2018-0996 Microsoft Scripting Engine Remote Code Execution 6.4 0.1495 More likely
Urgent CVE-2018-1001 Microsoft Scripting Engine Remote Code Execution 6.4 0.1495 More likely
Urgent CVE-2018-1000 Microsoft Scripting Engine Information Disclosure 6.4 0.0745 More likely
Urgent CVE-2018-0981 Microsoft Scripting Engine Information Disclosure 6.4 0.0642 More likely
Urgent CVE-2018-0987 Microsoft Scripting Engine Information Disclosure 2.4 0.0609 More likely
Urgent CVE-2018-0989 Microsoft Scripting Engine Information Disclosure 2.4 0.0533 More likely
Urgent CVE-2018-0971 Windows Kernel Information Disclosure 4.7 0.0344 More likely
Urgent CVE-2018-0973 Windows Kernel Information Disclosure 4.7 0.0344 More likely
Urgent CVE-2018-1008 Windows Kernel Elevation of Privilege 7.0 0.0111 More likely
High CVE-2018-0997 Internet Explorer Remote Code Execution 7.5 0.1543 Exploitation Less Likely
High CVE-2018-0957 Windows Hyper-V Information Disclosure 7.2 0.0158 N/A
High CVE-2018-1009 Microsoft Graphics Component Elevation of Privilege 7.0 0.0123 Exploitation Less Likely
Routine CVE-2018-0967 Microsoft Windows Denial of Service 5.3 0.1849 Exploitation Unlikely
Showing 1 to 25 of 35 1Next