Microsoft · Security update · May 8, 2018

KB4103723: May 2018 cumulative update for Windows 10 1607

KB4103723, released May 8, 2018, fixes 37 CVEs across 18 products. 2 of them are being exploited (CVE-2018-8174); 2 on CISA KEV. Patch Radar priority: Patch now.

Patch now2 on CISA KEVKnown ransomware use
CVEs closed
37
12 rated Critical
Exploited
2
CVE-2018-8174
Exploitation more likely
20
Vendor assessment
Highest EPSS
0.8824
99th percentile

Priority of the 37 CVEs

Patch now 2 Urgent 22 High 5 Routine 8

Applies to

ProductBuild after install
Internet Explorer 11 on Windows 10 Version 1607 for 32-bit Systems14393.2248
Internet Explorer 11 on Windows 10 Version 1607 for x64-based Systems14393.2248
Internet Explorer 11 on Windows Server 201614393.2248
Microsoft .NET Framework 3.5 on Windows 10 Version 1607 for 32-bit Systems14393.2248
Microsoft .NET Framework 3.5 on Windows 10 Version 1607 for x64-based Systems14393.2248
Microsoft .NET Framework 3.5 on Windows Server 201614393.2248
Microsoft .NET Framework 3.5 on Windows Server 2016 (Server Core installation)14393.2248
Microsoft .NET Framework 4.6.2/4.7/4.7.1 on Windows 10 Version 1607 for 32-bit Systems14393.2248
Microsoft .NET Framework 4.6.2/4.7/4.7.1 on Windows 10 Version 1607 for x64-based Systems14393.2248
Microsoft .NET Framework 4.6.2/4.7/4.7.1 on Windows Server 201614393.2248
Microsoft .NET Framework 4.6.2/4.7/4.7.1 on Windows Server 2016 (Server Core installation)14393.2248
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for 32-bit Systems14393.2248
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for x64-based Systems14393.2248
Microsoft Edge (EdgeHTML-based) on Windows Server 201614393.2248
Windows 10 Version 1607 for 32-bit Systems14393.2248
Windows 10 Version 1607 for x64-based Systems14393.2248
Windows Server 201614393.2248
Windows Server 2016 (Server Core installation)14393.2248

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2018-8174 Microsoft Windows Remote Code Execution 7.5 0.8824 KEVRansomwareExploited
Patch now CVE-2018-0824 Windows COM Remote Code Execution 7.5 0.7304 KEVExploited
Urgent CVE-2018-0953 Microsoft Scripting Engine 4.2 0.6631 More likely
Urgent CVE-2018-8133 Microsoft Scripting Engine Remote Code Execution 4.2 0.5021 More likely
Urgent CVE-2018-0943 Microsoft Scripting Engine Remote Code Execution 4.2 0.1575 More likely
Urgent CVE-2018-0951 Microsoft Scripting Engine Remote Code Execution 4.2 0.1575 More likely
Urgent CVE-2018-8137 Microsoft Scripting Engine Remote Code Execution 4.2 0.1575 More likely
Urgent CVE-2018-8114 Microsoft Scripting Engine Remote Code Execution 7.5 0.1567 More likely
Urgent CVE-2018-8122 Microsoft Scripting Engine Remote Code Execution 7.5 0.1567 More likely
Urgent CVE-2018-0955 Microsoft Scripting Engine Remote Code Execution 6.4 0.1567 More likely
Urgent CVE-2018-0954 Microsoft Scripting Engine Remote Code Execution 4.2 0.1546 More likely
Urgent CVE-2018-1022 Microsoft Scripting Engine Remote Code Execution 4.2 0.1546 More likely
Urgent CVE-2018-8178 Microsoft Browsers Remote Code Execution 4.2 0.1546 More likely
Urgent CVE-2018-8179 Microsoft Edge Remote Code Execution 4.2 0.1400 More likely
Urgent CVE-2018-0959 Windows Hyper-V Remote Code Execution 7.6 0.0980 Exploitation Less Likely
Urgent CVE-2018-1025 Microsoft Browsers Information Disclosure 4.3 0.0608 More likely
Urgent CVE-2018-0961 Windows Hyper-V Remote Code Execution 7.6 0.0310 Exploitation Less Likely
Urgent CVE-2018-8134 Windows Kernel Elevation of Privilege 7.0 0.0293 More likely
Urgent CVE-2018-8127 Windows Kernel Information Disclosure 4.7 0.0290 More likely
Urgent CVE-2018-8112 Microsoft Edge Security Feature Bypass 4.3 0.0277 More likely
Urgent CVE-2018-8164 Microsoft Graphics Component Elevation of Privilege 7.0 0.0146 More likely
Urgent CVE-2018-8165 Microsoft Graphics Component Elevation of Privilege 7.0 0.0133 More likely
Urgent CVE-2018-8124 Microsoft Graphics Component Elevation of Privilege 7.0 0.0120 More likely
Urgent CVE-2018-8167 Common Log File System Driver Elevation of Privilege 7.0 0.0102 More likely
High CVE-2018-0886 Microsoft Windows Remote Code Execution 7.1 0.8197 Exploitation Less Likely
Showing 1 to 25 of 37 1Next