Microsoft · Security update · May 8, 2018
KB4103712: May 2018 security update
KB4103712, released May 8, 2018, fixes 13 CVEs across 5 products. 3 of them are being exploited (CVE-2018-8174); 3 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.
Patch now3 on CISA KEVKnown ransomware useUnsupported product
CVEs closed
13
2 rated Critical
Exploited
3
CVE-2018-8174
Exploitation more likely
4
Vendor assessment
Highest EPSS
0.8824
99th percentile
Priority of the 13 CVEs
Patch now 3
Urgent 5
High 3
Routine 2
Applies to
CVEs this fix closes
| Priority | CVE | Component | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Patch now | CVE-2018-8174 | Microsoft Windows | Remote Code Execution | 7.5 | 0.8824 | KEVRansomwareExploited |
| Patch now | CVE-2018-8120 | Microsoft Graphics Component | Elevation of Privilege | 7.0 | 0.7329 | KEVRansomwareExploited |
| Patch now | CVE-2018-0824 | Windows COM | Remote Code Execution | 7.5 | 0.7304 | KEVExploited |
| Urgent | CVE-2018-0959 | Windows Hyper-V | Remote Code Execution | 7.6 | 0.0980 | Exploitation Less Likely |
| Urgent | CVE-2018-8127 | Windows Kernel | Information Disclosure | 4.7 | 0.0290 | More likely |
| Urgent | CVE-2018-8164 | Microsoft Graphics Component | Elevation of Privilege | 7.0 | 0.0146 | More likely |
| Urgent | CVE-2018-8124 | Microsoft Graphics Component | Elevation of Privilege | 7.0 | 0.0120 | More likely |
| Urgent | CVE-2018-8167 | Common Log File System Driver | Elevation of Privilege | 7.0 | 0.0102 | More likely |
| High | CVE-2018-0886 | Microsoft Windows | Remote Code Execution | 7.1 | 0.8197 | Exploitation Less Likely |
| High | CVE-2018-8897 | Windows Kernel | Elevation of Privilege | 7.0 | 0.1849 | Exploitation Unlikely |
| High | CVE-2018-8166 | Windows Kernel | Elevation of Privilege | 7.0 | 0.0122 | Exploitation Less Likely |
| Routine | CVE-2018-8136 | Microsoft Windows | Remote Code Execution | 6.5 | 0.2301 | Exploitation Less Likely |
| Routine | CVE-2017-11927 | Microsoft Windows | Information Disclosure | 4.3 | 0.0962 | Exploitation Less Likely |
Showing 1 to 13 of 13
1