Microsoft · Security update · May 8, 2018

KB4103721: May 2018 cumulative update for Windows 10 1803

KB4103721, released May 8, 2018, fixes 39 CVEs across 13 products. 2 of them are being exploited (CVE-2018-8174); 2 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now2 on CISA KEVKnown ransomware useUnsupported product
CVEs closed
39
16 rated Critical
Exploited
2
CVE-2018-8174
Exploitation more likely
24
Vendor assessment
Highest EPSS
0.8824
99th percentile

Priority of the 39 CVEs

Patch now 2 Urgent 26 High 5 Routine 6

Applies to

ProductBuild after install
Internet Explorer 11 on Windows 10 Version 1803 for 32-bit Systems17134.48
Internet Explorer 11 on Windows 10 Version 1803 for x64-based Systems17134.48
Microsoft .NET Framework 3.5 on Windows 10 Version 1803 for 32-bit Systems17134.48
Microsoft .NET Framework 3.5 on Windows 10 Version 1803 for x64-based Systems17134.48
Microsoft .NET Framework 3.5 on Windows Server, version 1803 (Server Core Installation)17134.48
Microsoft .NET Framework 4.7.2 on Windows 10 Version 1803 for 32-bit Systems17134.48
Microsoft .NET Framework 4.7.2 on Windows 10 Version 1803 for x64-based Systems17134.48
Microsoft .NET Framework 4.7.2 on Windows Server, version 1803 (Server Core Installation)17134.48
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for 32-bit Systems17134.48
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for x64-based Systems17134.48
Windows 10 Version 1803 for 32-bit Systems17134.48
Windows 10 Version 1803 for x64-based Systems17134.48
Windows Server, version 1803 (Server Core Installation)17134.48

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2018-8174 Microsoft Windows Remote Code Execution 7.5 0.8824 KEVRansomwareExploited
Patch now CVE-2018-0824 Windows COM Remote Code Execution 7.5 0.7304 KEVExploited
Urgent CVE-2018-0953 Microsoft Scripting Engine 4.2 0.6631 More likely
Urgent CVE-2018-8139 Microsoft Scripting Engine Remote Code Execution 4.2 0.6631 More likely
Urgent CVE-2018-0946 Microsoft Scripting Engine Remote Code Execution 4.2 0.5113 More likely
Urgent CVE-2018-8133 Microsoft Scripting Engine Remote Code Execution 4.2 0.5021 More likely
Urgent CVE-2018-0943 Microsoft Scripting Engine Remote Code Execution 4.2 0.1575 More likely
Urgent CVE-2018-0945 Microsoft Scripting Engine Remote Code Execution 4.2 0.1575 More likely
Urgent CVE-2018-8128 Microsoft Scripting Engine Remote Code Execution 4.2 0.1575 More likely
Urgent CVE-2018-8130 Microsoft Scripting Engine Remote Code Execution 4.2 0.1575 More likely
Urgent CVE-2018-8137 Microsoft Scripting Engine Remote Code Execution 4.2 0.1575 More likely
Urgent CVE-2018-8114 Microsoft Scripting Engine Remote Code Execution 7.5 0.1567 More likely
Urgent CVE-2018-8122 Microsoft Scripting Engine Remote Code Execution 7.5 0.1567 More likely
Urgent CVE-2018-0955 Microsoft Scripting Engine Remote Code Execution 6.4 0.1567 More likely
Urgent CVE-2018-0954 Microsoft Scripting Engine Remote Code Execution 4.2 0.1546 More likely
Urgent CVE-2018-1022 Microsoft Scripting Engine Remote Code Execution 4.2 0.1546 More likely
Urgent CVE-2018-8178 Microsoft Browsers Remote Code Execution 4.2 0.1546 More likely
Urgent CVE-2018-8179 Microsoft Edge Remote Code Execution 4.2 0.1400 More likely
Urgent CVE-2018-0959 Windows Hyper-V Remote Code Execution 7.6 0.0980 Exploitation Less Likely
Urgent CVE-2018-1025 Microsoft Browsers Information Disclosure 4.3 0.0608 More likely
Urgent CVE-2018-0961 Windows Hyper-V Remote Code Execution 7.6 0.0310 Exploitation Less Likely
Urgent CVE-2018-8134 Windows Kernel Elevation of Privilege 7.0 0.0293 More likely
Urgent CVE-2018-8127 Windows Kernel Information Disclosure 4.7 0.0290 More likely
Urgent CVE-2018-8112 Microsoft Edge Security Feature Bypass 4.3 0.0277 More likely
Urgent CVE-2018-8164 Microsoft Graphics Component Elevation of Privilege 7.0 0.0146 More likely
Showing 1 to 25 of 39 1Next