Microsoft · Security update · August 14, 2018
KB4343205: August 2018 security update
KB4343205, released August 14, 2018, fixes 10 CVEs across 9 products. One of them is being exploited (CVE-2018-8373); 1 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.
Patch now1 on CISA KEV1 publicly disclosedUnsupported product
CVEs closed
10
3 rated Critical
Exploited
1
CVE-2018-8373
Exploitation more likely
7
Vendor assessment
Highest EPSS
0.6790
99th percentile
Priority of the 10 CVEs
Patch now 1
Urgent 7
High 0
Routine 2
Applies to
CVEs this fix closes
| Priority | CVE | Component | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Patch now | CVE-2018-8373 | Microsoft Scripting Engine | Remote Code Execution | 6.4 | 0.6177 | KEVDisclosedExploited |
| Urgent | CVE-2018-8355 | Microsoft Scripting Engine | Remote Code Execution | 4.2 | 0.6790 | More likely |
| Urgent | CVE-2018-8353 | Microsoft Scripting Engine | Remote Code Execution | 6.4 | 0.6734 | More likely |
| Urgent | CVE-2018-8389 | Microsoft Scripting Engine | Remote Code Execution | 6.4 | 0.3035 | More likely |
| Urgent | CVE-2018-8372 | Microsoft Scripting Engine | Remote Code Execution | 4.2 | 0.2628 | More likely |
| Urgent | CVE-2018-8371 | Microsoft Scripting Engine | Remote Code Execution | 6.4 | 0.1538 | More likely |
| Urgent | CVE-2018-8385 | Microsoft Scripting Engine | Remote Code Execution | 7.5 | 0.1517 | More likely |
| Urgent | CVE-2018-8403 | Microsoft Browsers | Remote Code Execution | 4.2 | 0.1337 | More likely |
| Routine | CVE-2018-8316 | Internet Explorer | Remote Code Execution | 6.4 | 0.1450 | Exploitation Less Likely |
| Routine | CVE-2018-8351 | Microsoft Browsers | Information Disclosure | 4.2 | 0.0839 | Exploitation Less Likely |
Showing 1 to 10 of 10
1