Microsoft · Security update · June 12, 2018

KB4284874: June 2018 cumulative update for Windows 10 1703

KB4284874, released June 12, 2018, fixes 34 CVEs across 6 products. None of them is reported as exploited. Patch Radar priority: Urgent. The product is no longer supported.

Urgent1 publicly disclosedUnsupported product

CVEs closed

7 rated Critical

Exploited

None reported

Exploitation more likely

Microsoft's assessment

Highest EPSS

0.7058

99th percentile

Priority of the 34 CVEs

Patch now 0
                                Urgent 13
                                High 5
                                Routine 16

Applies to

Product	Build after install
Internet Explorer 11 on Windows 10 Version 1703 for 32-bit Systems	15063.1155
Internet Explorer 11 on Windows 10 Version 1703 for x64-based Systems	15063.1155
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1703 for 32-bit Systems	15063.1155
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1703 for x64-based Systems	15063.1155
Windows 10 Version 1703 for 32-bit Systems	15063.1155
Windows 10 Version 1703 for x64-based Systems	15063.1155

CVEs this fix closes

Priority	CVE	Component	Impact	CVSS	EPSS	Exploitation
Urgent	CVE-2018-8229	Microsoft Scripting Engine	Remote Code Execution	4.2	0.7058	More likely
Urgent	CVE-2018-8239	Microsoft Windows	Information Disclosure	4.4	0.5729	More likely
Urgent	CVE-2018-8225	Microsoft Windows	Remote Code Execution	8.1	0.2460	Exploitation Less Likely
Urgent	CVE-2018-8231	Microsoft Windows	Remote Code Execution	8.1	0.1698	Exploitation Less Likely
Urgent	CVE-2018-8227	Microsoft Scripting Engine	Remote Code Execution	4.2	0.1691	More likely
Urgent	CVE-2018-8267	Microsoft Scripting Engine	Remote Code Execution	7.5	0.1639	DisclosedMore likely
Urgent	CVE-2018-8236	Microsoft Edge	Remote Code Execution	4.2	0.1492	More likely
Urgent	CVE-2018-8213	Microsoft Windows	Remote Code Execution	7.8	0.0878	Exploitation Less Likely
Urgent	CVE-2018-8251	Microsoft Windows	Remote Code Execution	4.2	0.0799	More likely
Urgent	CVE-2018-8234	Microsoft Edge	Information Disclosure	4.3	0.0681	More likely
Urgent	CVE-2018-0982	Microsoft Windows	Elevation of Privilege	7.0	0.0262	More likely
Urgent	CVE-2018-8121	Windows Kernel	Information Disclosure	4.7	0.0155	More likely
Urgent	CVE-2018-1036	Microsoft NTFS	Elevation of Privilege	7.0	0.0112	More likely
High	CVE-2018-8210	Microsoft Windows	Remote Code Execution	7.3	0.2511	Exploitation Less Likely
High	CVE-2018-8214	Microsoft Windows	Elevation of Privilege	7.0	0.0336	Exploitation Less Likely
High	CVE-2018-8208	Microsoft Windows	Elevation of Privilege	7.0	0.0324	Exploitation Less Likely
High	CVE-2018-8169	HID Parser Library	Elevation of Privilege	7.0	0.0120	None reported
High	CVE-2018-8219	Windows Hyper-V	Elevation of Privilege	7.6	0.0120	Exploitation Less Likely
Routine	CVE-2018-0978	Internet Explorer	Remote Code Execution	2.4	0.1639	Exploitation Less Likely
Routine	CVE-2018-8226	Microsoft Windows	Denial of Service	5.3	0.1439	Exploitation Unlikely
Routine	CVE-2018-1040	Microsoft Windows	Denial of Service	5.3	0.0726	Exploitation Less Likely
Routine	CVE-2018-0871	Microsoft Edge	Information Disclosure	4.3	0.0681	Exploitation Less Likely
Routine	CVE-2018-8113	Internet Explorer	Security Feature Bypass	4.3	0.0590	Exploitation Less Likely
Routine	CVE-2018-8235	Microsoft Edge	Security Feature Bypass	4.3	0.0320	Exploitation Less Likely
Routine	CVE-2018-8209	Microsoft Windows	Information Disclosure	5.5	0.0293	Exploitation Less Likely

Released the same day

KB4011026
Microsoft Office Online Server 2016
KB4011186
Microsoft Publisher 2010 Service Pack 2 (32-bit editions), Microsoft Publisher 2010 Service Pack 2 (64-bit editions)
KB4022151
Microsoft Excel Viewer
KB4022160
Microsoft Outlook 2016 (32-bit edition), Microsoft Outlook 2016 (64-bit edition)
KB4022169
Microsoft Outlook 2013 RT Service Pack 1, Microsoft Outlook 2013 Service Pack 1 (32-bit editions), Microsoft Outlook 2013 Service Pack 1 (64-bit editions)
KB4022173
Microsoft SharePoint Enterprise Server 2016
KB4022174
Microsoft Excel 2016 (32-bit edition), Microsoft Excel 2016 (64-bit edition)
KB4022177
Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition)
KB4022182
Microsoft Office 2013 RT Service Pack 1, Microsoft Office 2013 Service Pack 1 (32-bit editions), Microsoft Office 2013 Service Pack 1 (64-bit editions)
KB4022183
Microsoft Office Web Apps Server 2013 Service Pack 1
KB4022190
Microsoft SharePoint Foundation 2013 Service Pack 1
KB4022191
Microsoft Excel 2013 RT Service Pack 1, Microsoft Excel 2013 Service Pack 1 (32-bit editions), Microsoft Excel 2013 Service Pack 1 (64-bit editions)

Vendor advisory

https://support.microsoft.com/help/4284874

For tools and AI agents

This page as data: JSON · Markdown

Which machines still need it?

Patchblox reads the OS build on every Windows machine, from Intune, ConfigMgr or its own agent, and shows which ones are still below the fixed build.

Get a demo

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.