Microsoft · Security update · July 10, 2018

KB4338831: July 2018 security update

KB4338831, released July 10, 2018, fixes 14 CVEs across 7 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent2 publicly disclosed
CVEs closed
14
3 rated Critical
Exploited
0
None reported
Exploitation more likely
7
Vendor assessment
Highest EPSS
0.6922
99th percentile

Priority of the 14 CVEs

Patch now 0 Urgent 7 High 2 Routine 5

Applies to

Product
Internet Explorer 11 on Windows 8.1 for 32-bit systems
Internet Explorer 11 on Windows 8.1 for x64-based systems
Internet Explorer 11 on Windows Server 2012 R2
Windows 8.1 for 32-bit systems
Windows 8.1 for x64-based systems
Windows Server 2012 R2
Windows Server 2012 R2 (Server Core installation)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Urgent CVE-2018-8288 Microsoft Scripting Engine Remote Code Execution 4.2 0.6922 More likely
Urgent CVE-2018-8291 Microsoft Scripting Engine Remote Code Execution 4.2 0.6922 More likely
Urgent CVE-2018-8242 Microsoft Scripting Engine Remote Code Execution 6.4 0.1930 More likely
Urgent CVE-2018-8296 Microsoft Scripting Engine Remote Code Execution 7.5 0.1705 More likely
Urgent CVE-2018-8287 Microsoft Scripting Engine Remote Code Execution 7.5 0.1633 More likely
Urgent CVE-2018-0949 Internet Explorer Security Feature Bypass 2.4 0.1203 More likely
Urgent CVE-2018-8313 Microsoft Windows Elevation of Privilege 7.8 0.0131 DisclosedMore likely
High CVE-2018-8206 Microsoft Windows Denial of Service 7.5 0.1181 Exploitation Less Likely
High CVE-2018-8282 Windows Kernel Denial of Service 8.8 0.0131 Exploitation Unlikely
Routine CVE-2018-8304 Microsoft Windows DNS Denial of Service 5.9 0.1292 N/A
Routine CVE-2018-8314 Windows Shell Elevation of Privilege 4.3 0.0417 DisclosedN/A
Routine CVE-2018-8308 Microsoft Windows Elevation of Privilege 6.6 0.0394 Exploitation Less Likely
Routine CVE-2018-8307 Microsoft WordPad Security Feature Bypass 5.3 0.0382 Exploitation Less Likely
Routine CVE-2018-8309 Microsoft Windows Denial of Service 5.5 0.0171 Exploitation Less Likely
Showing 1 to 14 of 14 1