Microsoft · Security update · July 10, 2018

KB4338606: July 2018 security update

KB4338606, released July 10, 2018, fixes 4 CVEs across 10 products. None of them is reported as exploited. Patch Radar priority: High. The product is no longer supported.

HighUnsupported product
CVEs closed
4
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.4599
98th percentile

Priority of the 4 CVEs

Patch now 0 Urgent 0 High 4 Routine 0

Applies to

Product
Microsoft .NET Framework 4.6 on Windows Server 2008 for 32-bit Systems Service Pack 2
Microsoft .NET Framework 4.6 on Windows Server 2008 for x64-based Systems Service Pack 2
Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows 7 for 32-bit Systems Service Pack 1
Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows 7 for x64-based Systems Service Pack 1
Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2008 R2 for x64-based Systems Service Pack 1
Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)
Microsoft .NET Framework 4.7.2 on Windows 7 for 32-bit Systems Service Pack 1
Microsoft .NET Framework 4.7.2 on Windows 7 for x64-based Systems Service Pack 1
Microsoft .NET Framework 4.7.2 on Windows Server 2008 R2 for x64-based Systems Service Pack 1
Microsoft .NET Framework 4.7.2 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
High CVE-2018-8284 .NET Framework Remote Code Execution n/a 0.4599 Exploitation Less Likely
High CVE-2018-8260 .NET Framework Remote Code Execution n/a 0.1595 Exploitation Unlikely
High CVE-2018-8202 .NET Framework Elevation of Privilege n/a 0.0131 Exploitation Less Likely
High CVE-2018-8356 .NET Framework Security Feature Bypass n/a 0.0075 Exploitation Unlikely
Showing 1 to 4 of 4 1