Microsoft · Security update · July 10, 2018

KB4338814: July 2018 cumulative update for Windows 10 1607

KB4338814, released July 10, 2018, fixes 21 CVEs across 22 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent1 publicly disclosed
CVEs closed
21
6 rated Critical
Exploited
0
None reported
Exploitation more likely
11
Vendor assessment
Highest EPSS
0.6922
99th percentile

Priority of the 21 CVEs

Patch now 0 Urgent 11 High 5 Routine 5

Applies to

ProductBuild after install
Internet Explorer 11 on Windows 10 Version 1607 for 32-bit Systems14393.2363
Internet Explorer 11 on Windows 10 Version 1607 for x64-based Systems14393.2363
Internet Explorer 11 on Windows Server 201614393.2363
Microsoft .NET Framework 3.5 on Windows 10 Version 1607 for 32-bit Systems14393.2363
Microsoft .NET Framework 3.5 on Windows 10 Version 1607 for x64-based Systems14393.2363
Microsoft .NET Framework 3.5 on Windows Server 201614393.2363
Microsoft .NET Framework 3.5 on Windows Server 2016 (Server Core installation)14393.2363
Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows 10 Version 1607 for 32-bit Systems14393.2363
Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows 10 Version 1607 for x64-based Systems14393.2363
Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 201614393.2363
Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2016 (Server Core installation)14393.2363
Microsoft .NET Framework 4.7.2 on Windows 10 Version 1607 for 32-bit Systems14393.2363
Microsoft .NET Framework 4.7.2 on Windows 10 Version 1607 for x64-based Systems14393.2363
Microsoft .NET Framework 4.7.2 on Windows Server 201614393.2363
Microsoft .NET Framework 4.7.2 on Windows Server 2016 (Server Core installation)14393.2363
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for 32-bit Systems14393.2363
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for x64-based Systems14393.2363
Microsoft Edge (EdgeHTML-based) on Windows Server 201614393.2363
Windows 10 Version 1607 for 32-bit Systems14393.2363
Windows 10 Version 1607 for x64-based Systems14393.2363
Windows Server 201614393.2363
Windows Server 2016 (Server Core installation)14393.2363

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Urgent CVE-2018-8288 Microsoft Scripting Engine Remote Code Execution 4.2 0.6922 More likely
Urgent CVE-2018-8291 Microsoft Scripting Engine Remote Code Execution 4.2 0.6922 More likely
Urgent CVE-2018-8275 Microsoft Scripting Engine Remote Code Execution 4.2 0.2099 More likely
Urgent CVE-2018-8280 Microsoft Scripting Engine Remote Code Execution 4.2 0.2099 More likely
Urgent CVE-2018-8290 Microsoft Scripting Engine Remote Code Execution 4.2 0.2099 More likely
Urgent CVE-2018-8125 Microsoft Scripting Engine Remote Code Execution 4.2 0.2036 More likely
Urgent CVE-2018-8242 Microsoft Scripting Engine Remote Code Execution 6.4 0.1930 More likely
Urgent CVE-2018-8296 Microsoft Scripting Engine Remote Code Execution 7.5 0.1705 More likely
Urgent CVE-2018-8287 Microsoft Scripting Engine Remote Code Execution 7.5 0.1633 More likely
Urgent CVE-2018-0949 Internet Explorer Security Feature Bypass 2.4 0.1203 More likely
Urgent CVE-2018-8313 Microsoft Windows Elevation of Privilege 7.8 0.0131 DisclosedMore likely
High CVE-2018-8284 .NET Framework Remote Code Execution n/a 0.4599 Exploitation Less Likely
High CVE-2018-8260 .NET Framework Remote Code Execution n/a 0.1595 Exploitation Unlikely
High CVE-2018-8206 Microsoft Windows Denial of Service 7.5 0.1181 Exploitation Less Likely
High CVE-2018-8282 Windows Kernel Denial of Service 8.8 0.0131 Exploitation Unlikely
High CVE-2018-8356 .NET Framework Security Feature Bypass n/a 0.0075 Exploitation Unlikely
Routine CVE-2018-8304 Microsoft Windows DNS Denial of Service 5.9 0.1292 N/A
Routine CVE-2018-8308 Microsoft Windows Elevation of Privilege 6.6 0.0394 Exploitation Less Likely
Routine CVE-2018-8307 Microsoft WordPad Security Feature Bypass 5.3 0.0382 Exploitation Less Likely
Routine CVE-2018-8222 Device Guard Security Feature Bypass 5.3 0.0214 Exploitation Less Likely
Routine CVE-2018-8309 Microsoft Windows Denial of Service 5.5 0.0171 Exploitation Less Likely
Showing 1 to 21 of 21 1