Microsoft · Security update · June 12, 2018

KB4284880: June 2018 cumulative update for Windows 10 1607

KB4284880, released June 12, 2018, fixes 30 CVEs across 10 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent1 publicly disclosed

CVEs closed

7 rated Critical

Exploited

None reported

Exploitation more likely

Microsoft's assessment

Highest EPSS

0.7058

99th percentile

Priority of the 30 CVEs

Patch now 0
                                Urgent 11
                                High 5
                                Routine 14

Applies to

Product	Build after install
Internet Explorer 11 on Windows 10 Version 1607 for 32-bit Systems	14393.2312
Internet Explorer 11 on Windows 10 Version 1607 for x64-based Systems	14393.2312
Internet Explorer 11 on Windows Server 2016	14393.2312
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for 32-bit Systems	14393.2312
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for x64-based Systems	14393.2312
Microsoft Edge (EdgeHTML-based) on Windows Server 2016	14393.2312
Windows 10 Version 1607 for 32-bit Systems	14393.2312
Windows 10 Version 1607 for x64-based Systems	14393.2312
Windows Server 2016	14393.2312
Windows Server 2016 (Server Core installation)	14393.2312

CVEs this fix closes

Priority	CVE	Component	Impact	CVSS	EPSS	Exploitation
Urgent	CVE-2018-8229	Microsoft Scripting Engine	Remote Code Execution	4.2	0.7058	More likely
Urgent	CVE-2018-8239	Microsoft Windows	Information Disclosure	4.4	0.5729	More likely
Urgent	CVE-2018-8225	Microsoft Windows	Remote Code Execution	8.1	0.2460	Exploitation Less Likely
Urgent	CVE-2018-8231	Microsoft Windows	Remote Code Execution	8.1	0.1698	Exploitation Less Likely
Urgent	CVE-2018-8267	Microsoft Scripting Engine	Remote Code Execution	7.5	0.1639	DisclosedMore likely
Urgent	CVE-2018-8236	Microsoft Edge	Remote Code Execution	4.2	0.1492	More likely
Urgent	CVE-2018-8213	Microsoft Windows	Remote Code Execution	7.8	0.0878	Exploitation Less Likely
Urgent	CVE-2018-8251	Microsoft Windows	Remote Code Execution	4.2	0.0799	More likely
Urgent	CVE-2018-8234	Microsoft Edge	Information Disclosure	4.3	0.0681	More likely
Urgent	CVE-2018-0982	Microsoft Windows	Elevation of Privilege	7.0	0.0262	More likely
Urgent	CVE-2018-1036	Microsoft NTFS	Elevation of Privilege	7.0	0.0112	More likely
High	CVE-2018-8210	Microsoft Windows	Remote Code Execution	7.3	0.2511	Exploitation Less Likely
High	CVE-2018-8214	Microsoft Windows	Elevation of Privilege	7.0	0.0336	Exploitation Less Likely
High	CVE-2018-8208	Microsoft Windows	Elevation of Privilege	7.0	0.0324	Exploitation Less Likely
High	CVE-2018-8169	HID Parser Library	Elevation of Privilege	7.0	0.0120	None reported
High	CVE-2018-8219	Windows Hyper-V	Elevation of Privilege	7.6	0.0120	Exploitation Less Likely
Routine	CVE-2018-0978	Internet Explorer	Remote Code Execution	2.4	0.1639	Exploitation Less Likely
Routine	CVE-2018-8226	Microsoft Windows	Denial of Service	5.3	0.1439	Exploitation Unlikely
Routine	CVE-2018-1040	Microsoft Windows	Denial of Service	5.3	0.0726	Exploitation Less Likely
Routine	CVE-2018-8235	Microsoft Edge	Security Feature Bypass	4.3	0.0320	Exploitation Less Likely
Routine	CVE-2018-8209	Microsoft Windows	Information Disclosure	5.5	0.0293	Exploitation Less Likely
Routine	CVE-2018-8207	Windows Kernel	Information Disclosure	4.7	0.0260	Exploitation Less Likely
Routine	CVE-2018-8212	Device Guard	Security Feature Bypass	5.3	0.0227	Exploitation Less Likely
Routine	CVE-2018-8211	Device Guard	Security Feature Bypass	5.3	0.0218	Exploitation Less Likely
Routine	CVE-2018-8215	Device Guard	Security Feature Bypass	5.3	0.0218	Exploitation Less Likely

Released the same day

KB4011026
Microsoft Office Online Server 2016
KB4011186
Microsoft Publisher 2010 Service Pack 2 (32-bit editions), Microsoft Publisher 2010 Service Pack 2 (64-bit editions)
KB4022151
Microsoft Excel Viewer
KB4022160
Microsoft Outlook 2016 (32-bit edition), Microsoft Outlook 2016 (64-bit edition)
KB4022169
Microsoft Outlook 2013 RT Service Pack 1, Microsoft Outlook 2013 Service Pack 1 (32-bit editions), Microsoft Outlook 2013 Service Pack 1 (64-bit editions)
KB4022173
Microsoft SharePoint Enterprise Server 2016
KB4022174
Microsoft Excel 2016 (32-bit edition), Microsoft Excel 2016 (64-bit edition)
KB4022177
Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition)
KB4022182
Microsoft Office 2013 RT Service Pack 1, Microsoft Office 2013 Service Pack 1 (32-bit editions), Microsoft Office 2013 Service Pack 1 (64-bit editions)
KB4022183
Microsoft Office Web Apps Server 2013 Service Pack 1
KB4022190
Microsoft SharePoint Foundation 2013 Service Pack 1
KB4022191
Microsoft Excel 2013 RT Service Pack 1, Microsoft Excel 2013 Service Pack 1 (32-bit editions), Microsoft Excel 2013 Service Pack 1 (64-bit editions)

Vendor advisory

https://support.microsoft.com/help/4284880

For tools and AI agents

This page as data: JSON · Markdown

Which machines still need it?

Patchblox reads the OS build on every Windows machine, from Intune, ConfigMgr or its own agent, and shows which ones are still below the fixed build.

Get a demo

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.