Microsoft · Security update · May 8, 2018
KB4103718: May 2018 security update
KB4103718, released May 8, 2018, fixes 21 CVEs across 8 products. 3 of them are being exploited (CVE-2018-8174); 3 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.
Patch now3 on CISA KEVKnown ransomware useUnsupported product
CVEs closed
21
7 rated Critical
Exploited
3
CVE-2018-8174
Exploitation more likely
11
Vendor assessment
Highest EPSS
0.8824
99th percentile
Priority of the 21 CVEs
Patch now 3
Urgent 12
High 3
Routine 3
Applies to
CVEs this fix closes
| Priority | CVE | Component | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Patch now | CVE-2018-8174 | Microsoft Windows | Remote Code Execution | 7.5 | 0.8824 | KEVRansomwareExploited |
| Patch now | CVE-2018-8120 | Microsoft Graphics Component | Elevation of Privilege | 7.0 | 0.7329 | KEVRansomwareExploited |
| Patch now | CVE-2018-0824 | Windows COM | Remote Code Execution | 7.5 | 0.7304 | KEVExploited |
| Urgent | CVE-2018-8114 | Microsoft Scripting Engine | Remote Code Execution | 7.5 | 0.1567 | More likely |
| Urgent | CVE-2018-8122 | Microsoft Scripting Engine | Remote Code Execution | 7.5 | 0.1567 | More likely |
| Urgent | CVE-2018-0955 | Microsoft Scripting Engine | Remote Code Execution | 6.4 | 0.1567 | More likely |
| Urgent | CVE-2018-0954 | Microsoft Scripting Engine | Remote Code Execution | 4.2 | 0.1546 | More likely |
| Urgent | CVE-2018-1022 | Microsoft Scripting Engine | Remote Code Execution | 4.2 | 0.1546 | More likely |
| Urgent | CVE-2018-8178 | Microsoft Browsers | Remote Code Execution | 4.2 | 0.1546 | More likely |
| Urgent | CVE-2018-0959 | Windows Hyper-V | Remote Code Execution | 7.6 | 0.0980 | Exploitation Less Likely |
| Urgent | CVE-2018-1025 | Microsoft Browsers | Information Disclosure | 4.3 | 0.0608 | More likely |
| Urgent | CVE-2018-8127 | Windows Kernel | Information Disclosure | 4.7 | 0.0290 | More likely |
| Urgent | CVE-2018-8164 | Microsoft Graphics Component | Elevation of Privilege | 7.0 | 0.0146 | More likely |
| Urgent | CVE-2018-8124 | Microsoft Graphics Component | Elevation of Privilege | 7.0 | 0.0120 | More likely |
| Urgent | CVE-2018-8167 | Common Log File System Driver | Elevation of Privilege | 7.0 | 0.0102 | More likely |
| High | CVE-2018-0886 | Microsoft Windows | Remote Code Execution | 7.1 | 0.8197 | Exploitation Less Likely |
| High | CVE-2018-8897 | Windows Kernel | Elevation of Privilege | 7.0 | 0.1849 | Exploitation Unlikely |
| High | CVE-2018-8166 | Windows Kernel | Elevation of Privilege | 7.0 | 0.0122 | Exploitation Less Likely |
| Routine | CVE-2018-8145 | Microsoft Scripting Engine | Information Disclosure | 4.3 | 0.6664 | Exploitation Unlikely |
| Routine | CVE-2018-8136 | Microsoft Windows | Remote Code Execution | 6.5 | 0.2301 | Exploitation Less Likely |
| Routine | CVE-2017-11927 | Microsoft Windows | Information Disclosure | 4.3 | 0.0962 | Exploitation Less Likely |
Showing 1 to 21 of 21
1