Microsoft · Security update · May 8, 2018

KB4103727: May 2018 cumulative update for Windows 10 1709

KB4103727, released May 8, 2018, fixes 45 CVEs across 13 products. 2 of them are being exploited (CVE-2018-8174); 2 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now2 on CISA KEVKnown ransomware use2 publicly disclosedUnsupported product
CVEs closed
45
15 rated Critical
Exploited
2
CVE-2018-8174
Exploitation more likely
26
Vendor assessment
Highest EPSS
0.8824
99th percentile

Priority of the 45 CVEs

Patch now 2 Urgent 28 High 6 Routine 9

Applies to

ProductBuild after install
Internet Explorer 11 on Windows 10 Version 1709 for 32-bit Systems16299.431
Internet Explorer 11 on Windows 10 Version 1709 for x64-based Systems16299.431
Microsoft .NET Framework 3.5 on Windows 10 Version 1709 for 32-bit Systems16299.431
Microsoft .NET Framework 3.5 on Windows 10 Version 1709 for x64-based Systems16299.431
Microsoft .NET Framework 3.5 on Windows Server, version 1709 (Server Core Installation)16299.431
Microsoft .NET Framework 4.7.1 on Windows 10 Version 1709 for 32-bit Systems16299.431
Microsoft .NET Framework 4.7.1 on Windows 10 Version 1709 for x64-based Systems16299.431
Microsoft .NET Framework 4.7.1 on Windows Server, version 1709 (Server Core Installation)16299.431
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1709 for 32-bit Systems16299.431
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1709 for x64-based Systems16299.431
Windows 10 Version 1709 for 32-bit Systems16299.431
Windows 10 Version 1709 for x64-based Systems16299.431
Windows Server, version 1709 (Server Core Installation)16299.431

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2018-8174 Microsoft Windows Remote Code Execution 7.5 0.8824 KEVRansomwareExploited
Patch now CVE-2018-0824 Windows COM Remote Code Execution 7.5 0.7304 KEVExploited
Urgent CVE-2018-0953 Microsoft Scripting Engine 4.2 0.6631 More likely
Urgent CVE-2018-0946 Microsoft Scripting Engine Remote Code Execution 4.2 0.5113 More likely
Urgent CVE-2018-8133 Microsoft Scripting Engine Remote Code Execution 4.2 0.5021 More likely
Urgent CVE-2018-0943 Microsoft Scripting Engine Remote Code Execution 4.2 0.1575 More likely
Urgent CVE-2018-0951 Microsoft Scripting Engine Remote Code Execution 4.2 0.1575 More likely
Urgent CVE-2018-8128 Microsoft Scripting Engine Remote Code Execution 4.2 0.1575 More likely
Urgent CVE-2018-8130 Microsoft Scripting Engine Remote Code Execution 4.2 0.1575 More likely
Urgent CVE-2018-8137 Microsoft Scripting Engine Remote Code Execution 4.2 0.1575 More likely
Urgent CVE-2018-8114 Microsoft Scripting Engine Remote Code Execution 7.5 0.1567 More likely
Urgent CVE-2018-8122 Microsoft Scripting Engine Remote Code Execution 7.5 0.1567 More likely
Urgent CVE-2018-0955 Microsoft Scripting Engine Remote Code Execution 6.4 0.1567 More likely
Urgent CVE-2018-0954 Microsoft Scripting Engine Remote Code Execution 4.2 0.1546 More likely
Urgent CVE-2018-1022 Microsoft Scripting Engine Remote Code Execution 4.2 0.1546 More likely
Urgent CVE-2018-8178 Microsoft Browsers Remote Code Execution 4.2 0.1546 More likely
Urgent CVE-2018-8179 Microsoft Edge Remote Code Execution 4.2 0.1400 More likely
Urgent CVE-2018-0959 Windows Hyper-V Remote Code Execution 7.6 0.0980 Exploitation Less Likely
Urgent CVE-2018-1021 Microsoft Edge Information Disclosure 4.3 0.0613 More likely
Urgent CVE-2018-1025 Microsoft Browsers Information Disclosure 4.3 0.0608 More likely
Urgent CVE-2018-8123 Microsoft Edge Information Disclosure 4.2 0.0598 More likely
Urgent CVE-2018-0961 Windows Hyper-V Remote Code Execution 7.6 0.0310 Exploitation Less Likely
Urgent CVE-2018-8134 Windows Kernel Elevation of Privilege 7.0 0.0293 More likely
Urgent CVE-2018-8127 Windows Kernel Information Disclosure 4.7 0.0290 More likely
Urgent CVE-2018-8112 Microsoft Edge Security Feature Bypass 4.3 0.0277 More likely
Showing 1 to 25 of 45 1Next