Microsoft · Security update · May 8, 2018

KB4103715: May 2018 security update

KB4103715, released May 8, 2018, fixes 13 CVEs across 4 products. 2 of them are being exploited (CVE-2018-8174); 2 on CISA KEV. Patch Radar priority: Patch now.

Patch now2 on CISA KEVKnown ransomware use
CVEs closed
13
2 rated Critical
Exploited
2
CVE-2018-8174
Exploitation more likely
5
Vendor assessment
Highest EPSS
0.8824
99th percentile

Priority of the 13 CVEs

Patch now 2 Urgent 6 High 3 Routine 2

Applies to

Product
Windows 8.1 for 32-bit systems
Windows 8.1 for x64-based systems
Windows Server 2012 R2
Windows Server 2012 R2 (Server Core installation)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2018-8174 Microsoft Windows Remote Code Execution 7.5 0.8824 KEVRansomwareExploited
Patch now CVE-2018-0824 Windows COM Remote Code Execution 7.5 0.7304 KEVExploited
Urgent CVE-2018-0959 Windows Hyper-V Remote Code Execution 7.6 0.0980 Exploitation Less Likely
Urgent CVE-2018-8134 Windows Kernel Elevation of Privilege 7.0 0.0293 More likely
Urgent CVE-2018-8127 Windows Kernel Information Disclosure 4.7 0.0290 More likely
Urgent CVE-2018-8164 Microsoft Graphics Component Elevation of Privilege 7.0 0.0146 More likely
Urgent CVE-2018-8124 Microsoft Graphics Component Elevation of Privilege 7.0 0.0120 More likely
Urgent CVE-2018-8167 Common Log File System Driver Elevation of Privilege 7.0 0.0102 More likely
High CVE-2018-0886 Microsoft Windows Remote Code Execution 7.1 0.8197 Exploitation Less Likely
High CVE-2018-8897 Windows Kernel Elevation of Privilege 7.0 0.1849 Exploitation Unlikely
High CVE-2018-8166 Windows Kernel Elevation of Privilege 7.0 0.0122 Exploitation Less Likely
Routine CVE-2018-8136 Microsoft Windows Remote Code Execution 6.5 0.2301 Exploitation Less Likely
Routine CVE-2017-11927 Microsoft Windows Information Disclosure 4.3 0.0962 Exploitation Less Likely
Showing 1 to 13 of 13 1