Microsoft · Security update · August 14, 2018

KB4344146: August 2018 security update

KB4344146, released August 14, 2018, fixes 2 CVEs across 4 products. None of them is reported as exploited. Patch Radar priority: High. The product is no longer supported.

HighUnsupported product
CVEs closed
2
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0957
95th percentile

Priority of the 2 CVEs

Patch now 0 Urgent 0 High 2 Routine 0

Applies to

Product
Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows 7 for 32-bit Systems Service Pack 1
Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows 7 for x64-based Systems Service Pack 1
Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2008 R2 for x64-based Systems Service Pack 1
Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
High CVE-2018-8360 .NET Framework Information Disclosure n/a 0.0957 Exploitation Less Likely
High CVE-2018-8202 .NET Framework Elevation of Privilege n/a 0.0131 Exploitation Less Likely
Showing 1 to 2 of 2 1