Microsoft · Out-of-band update · July 16, 2018

KB4345419: July 2018 cumulative update for Windows 10 1703

KB4345419, released July 16, 2018, fixes 27 CVEs across 12 products. None of them is reported as exploited. Patch Radar priority: Urgent. The product is no longer supported.

Urgent1 publicly disclosedUnsupported product
CVEs closed
27
10 rated Critical
Exploited
0
None reported
Exploitation more likely
15
Vendor assessment
Highest EPSS
0.7073
99th percentile

Priority of the 27 CVEs

Patch now 0 Urgent 15 High 6 Routine 6

Applies to

ProductBuild after install
Internet Explorer 11 on Windows 10 Version 1703 for 32-bit Systems15063.1209
Internet Explorer 11 on Windows 10 Version 1703 for x64-based Systems15063.1209
Microsoft .NET Framework 3.5 on Windows 10 Version 1703 for 32-bit Systems15063.1209
Microsoft .NET Framework 3.5 on Windows 10 Version 1703 for x64-based Systems15063.1209
Microsoft .NET Framework 4.7.2 on Windows 10 Version 1703 for 32-bit Systems15063.1209
Microsoft .NET Framework 4.7.2 on Windows 10 Version 1703 for x64-based Systems15063.1209
Microsoft .NET Framework 4.7/4.7.1/4.7.2 on Windows 10 Version 1703 for 32-bit Systems15063.1209
Microsoft .NET Framework 4.7/4.7.1/4.7.2 on Windows 10 Version 1703 for x64-based Systems15063.1209
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1703 for 32-bit Systems15063.1209
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1703 for x64-based Systems15063.1209
Windows 10 Version 1703 for 32-bit Systems15063.1209
Windows 10 Version 1703 for x64-based Systems15063.1209

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Urgent CVE-2018-8279 Microsoft Scripting Engine Remote Code Execution 4.2 0.7073 More likely
Urgent CVE-2018-8288 Microsoft Scripting Engine Remote Code Execution 4.2 0.6922 More likely
Urgent CVE-2018-8291 Microsoft Scripting Engine Remote Code Execution 4.2 0.6922 More likely
Urgent CVE-2018-8274 Microsoft Edge Remote Code Execution 4.2 0.2099 More likely
Urgent CVE-2018-8275 Microsoft Scripting Engine Remote Code Execution 4.2 0.2099 More likely
Urgent CVE-2018-8280 Microsoft Scripting Engine Remote Code Execution 4.2 0.2099 More likely
Urgent CVE-2018-8286 Microsoft Scripting Engine Remote Code Execution 4.2 0.2099 More likely
Urgent CVE-2018-8290 Microsoft Scripting Engine Remote Code Execution 4.2 0.2099 More likely
Urgent CVE-2018-8125 Microsoft Scripting Engine Remote Code Execution 4.2 0.2036 More likely
Urgent CVE-2018-8242 Microsoft Scripting Engine Remote Code Execution 6.4 0.1930 More likely
Urgent CVE-2018-8296 Microsoft Scripting Engine Remote Code Execution 7.5 0.1705 More likely
Urgent CVE-2018-8287 Microsoft Scripting Engine Remote Code Execution 7.5 0.1633 More likely
Urgent CVE-2018-0949 Internet Explorer Security Feature Bypass 2.4 0.1203 More likely
Urgent CVE-2018-8324 Microsoft Edge Information Disclosure 4.3 0.1025 More likely
Urgent CVE-2018-8313 Microsoft Windows Elevation of Privilege 7.8 0.0131 DisclosedMore likely
High CVE-2018-8284 .NET Framework Remote Code Execution n/a 0.4599 Exploitation Less Likely
High CVE-2018-8260 .NET Framework Remote Code Execution n/a 0.1595 Exploitation Unlikely
High CVE-2018-8206 Microsoft Windows Denial of Service 7.5 0.1181 Exploitation Less Likely
High CVE-2018-8282 Windows Kernel Denial of Service 8.8 0.0131 Exploitation Unlikely
High CVE-2018-8202 .NET Framework Elevation of Privilege n/a 0.0131 Exploitation Less Likely
High CVE-2018-8356 .NET Framework Security Feature Bypass n/a 0.0075 Exploitation Unlikely
Routine CVE-2018-8304 Microsoft Windows DNS Denial of Service 5.9 0.1292 N/A
Routine CVE-2018-8276 Microsoft Scripting Engine Security Feature Bypass 4.3 0.0577 Exploitation Less Likely
Routine CVE-2018-8308 Microsoft Windows Elevation of Privilege 6.6 0.0394 Exploitation Less Likely
Routine CVE-2018-8307 Microsoft WordPad Security Feature Bypass 5.3 0.0382 Exploitation Less Likely
Showing 1 to 25 of 27 1Next