Microsoft · Security update · August 14, 2018
KB4343909: August 2018 cumulative update for Windows 10 1803
KB4343909, released August 14, 2018, fixes 44 CVEs across 13 products. 4 of them are being exploited (CVE-2018-8414); 4 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.
Patch now4 on CISA KEVKnown ransomware use2 publicly disclosedUnsupported product
CVEs closed
44
12 rated Critical
Exploited
4
CVE-2018-8414
Exploitation more likely
17
Vendor assessment
Highest EPSS
0.7262
99th percentile
Priority of the 44 CVEs
Patch now 4
Urgent 20
High 7
Routine 13
Applies to
CVEs this fix closes
| Priority | CVE | Component | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Patch now | CVE-2018-8414 | Windows Shell | Remote Code Execution | 4.8 | 0.7262 | KEVDisclosedExploited |
| Patch now | CVE-2018-8373 | Microsoft Scripting Engine | Remote Code Execution | 6.4 | 0.6177 | KEVDisclosedExploited |
| Patch now | CVE-2018-8405 | Microsoft Graphics Component | Elevation of Privilege | 7.0 | 0.0344 | KEVRansomwareExploited |
| Patch now | CVE-2018-8406 | Microsoft Graphics Component | Elevation of Privilege | 7.0 | 0.0344 | KEVRansomwareExploited |
| Urgent | CVE-2018-8355 | Microsoft Scripting Engine | Remote Code Execution | 4.2 | 0.6790 | More likely |
| Urgent | CVE-2018-8353 | Microsoft Scripting Engine | Remote Code Execution | 6.4 | 0.6734 | More likely |
| Urgent | CVE-2018-8389 | Microsoft Scripting Engine | Remote Code Execution | 6.4 | 0.3035 | More likely |
| Urgent | CVE-2018-8266 | Microsoft Scripting Engine | Remote Code Execution | 4.2 | 0.2868 | More likely |
| Urgent | CVE-2018-8372 | Microsoft Scripting Engine | Remote Code Execution | 4.2 | 0.2628 | More likely |
| Urgent | CVE-2018-8344 | Microsoft Graphics Component | Remote Code Execution | 7.8 | 0.2298 | More likely |
| Urgent | CVE-2018-8350 | Microsoft Windows PDF | Remote Code Execution | 4.2 | 0.1977 | Exploitation Less Likely |
| Urgent | CVE-2018-8371 | Microsoft Scripting Engine | Remote Code Execution | 6.4 | 0.1538 | More likely |
| Urgent | CVE-2018-8380 | Microsoft Scripting Engine | Remote Code Execution | 4.2 | 0.1538 | More likely |
| Urgent | CVE-2018-8381 | Microsoft Scripting Engine | Remote Code Execution | 4.2 | 0.1538 | More likely |
| Urgent | CVE-2018-8390 | Microsoft Scripting Engine | Remote Code Execution | 4.2 | 0.1538 | Exploitation Less Likely |
| Urgent | CVE-2018-8385 | Microsoft Scripting Engine | Remote Code Execution | 7.5 | 0.1517 | More likely |
| Urgent | CVE-2018-8345 | Microsoft Windows | Remote Code Execution | 7.5 | 0.1490 | More likely |
| Urgent | CVE-2018-8403 | Microsoft Browsers | Remote Code Execution | 4.2 | 0.1337 | More likely |
| Urgent | CVE-2018-8377 | Microsoft Edge | Remote Code Execution | 4.2 | 0.1018 | Exploitation Less Likely |
| Urgent | CVE-2018-8387 | Microsoft Edge | Remote Code Execution | 4.2 | 0.1018 | More likely |
| Urgent | CVE-2018-8383 | Microsoft Edge | Spoofing | 4.3 | 0.0761 | More likely |
| Urgent | CVE-2018-8401 | Microsoft Graphics Component | Elevation of Privilege | 7.0 | 0.0209 | More likely |
| Urgent | CVE-2018-8347 | Windows Kernel | Elevation of Privilege | 7.0 | 0.0135 | More likely |
| Urgent | CVE-2018-8404 | Windows Kernel | Elevation of Privilege | 7.0 | 0.0122 | More likely |
| High | CVE-2018-8349 | Windows COM | Remote Code Execution | 7.0 | 0.2340 | Exploitation Less Likely |
Showing 1 to 25 of 44
1Next