Microsoft · Security update · May 8, 2018

KB4103731: May 2018 cumulative update for Windows 10 1703

KB4103731, released May 8, 2018, fixes 40 CVEs across 10 products. 2 of them are being exploited (CVE-2018-8174); 2 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now2 on CISA KEVKnown ransomware use1 publicly disclosedUnsupported product
CVEs closed
40
14 rated Critical
Exploited
2
CVE-2018-8174
Exploitation more likely
23
Vendor assessment
Highest EPSS
0.8824
99th percentile

Priority of the 40 CVEs

Patch now 2 Urgent 25 High 5 Routine 8

Applies to

ProductBuild after install
Internet Explorer 11 on Windows 10 Version 1703 for 32-bit Systems15063.1088
Internet Explorer 11 on Windows 10 Version 1703 for x64-based Systems15063.1088
Microsoft .NET Framework 3.5 on Windows 10 Version 1703 for 32-bit Systems15063.1088
Microsoft .NET Framework 3.5 on Windows 10 Version 1703 for x64-based Systems15063.1088
Microsoft .NET Framework 4.7/4.7.1 on Windows 10 Version 1703 for 32-bit Systems15063.1088
Microsoft .NET Framework 4.7/4.7.1 on Windows 10 Version 1703 for x64-based Systems15063.1088
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1703 for 32-bit Systems15063.1088
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1703 for x64-based Systems15063.1088
Windows 10 Version 1703 for 32-bit Systems15063.1088
Windows 10 Version 1703 for x64-based Systems15063.1088

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2018-8174 Microsoft Windows Remote Code Execution 7.5 0.8824 KEVRansomwareExploited
Patch now CVE-2018-0824 Windows COM Remote Code Execution 7.5 0.7304 KEVExploited
Urgent CVE-2018-0953 Microsoft Scripting Engine 4.2 0.6631 More likely
Urgent CVE-2018-0946 Microsoft Scripting Engine Remote Code Execution 4.2 0.5113 More likely
Urgent CVE-2018-8133 Microsoft Scripting Engine Remote Code Execution 4.2 0.5021 More likely
Urgent CVE-2018-0943 Microsoft Scripting Engine Remote Code Execution 4.2 0.1575 More likely
Urgent CVE-2018-0951 Microsoft Scripting Engine Remote Code Execution 4.2 0.1575 More likely
Urgent CVE-2018-8128 Microsoft Scripting Engine Remote Code Execution 4.2 0.1575 More likely
Urgent CVE-2018-8137 Microsoft Scripting Engine Remote Code Execution 4.2 0.1575 More likely
Urgent CVE-2018-8114 Microsoft Scripting Engine Remote Code Execution 7.5 0.1567 More likely
Urgent CVE-2018-8122 Microsoft Scripting Engine Remote Code Execution 7.5 0.1567 More likely
Urgent CVE-2018-0955 Microsoft Scripting Engine Remote Code Execution 6.4 0.1567 More likely
Urgent CVE-2018-0954 Microsoft Scripting Engine Remote Code Execution 4.2 0.1546 More likely
Urgent CVE-2018-1022 Microsoft Scripting Engine Remote Code Execution 4.2 0.1546 More likely
Urgent CVE-2018-8178 Microsoft Browsers Remote Code Execution 4.2 0.1546 More likely
Urgent CVE-2018-8179 Microsoft Edge Remote Code Execution 4.2 0.1400 More likely
Urgent CVE-2018-0959 Windows Hyper-V Remote Code Execution 7.6 0.0980 Exploitation Less Likely
Urgent CVE-2018-1025 Microsoft Browsers Information Disclosure 4.3 0.0608 More likely
Urgent CVE-2018-0961 Windows Hyper-V Remote Code Execution 7.6 0.0310 Exploitation Less Likely
Urgent CVE-2018-8134 Windows Kernel Elevation of Privilege 7.0 0.0293 More likely
Urgent CVE-2018-8127 Windows Kernel Information Disclosure 4.7 0.0290 More likely
Urgent CVE-2018-8112 Microsoft Edge Security Feature Bypass 4.3 0.0277 More likely
Urgent CVE-2018-8164 Microsoft Graphics Component Elevation of Privilege 7.0 0.0146 More likely
Urgent CVE-2018-8165 Microsoft Graphics Component Elevation of Privilege 7.0 0.0133 More likely
Urgent CVE-2018-8124 Microsoft Graphics Component Elevation of Privilege 7.0 0.0120 More likely
Showing 1 to 25 of 40 1Next