Microsoft · Out-of-band update · July 16, 2018

KB4345455: July 2018 cumulative update for Windows 10 1507

KB4345455, released July 16, 2018, fixes 21 CVEs across 10 products. None of them is reported as exploited. Patch Radar priority: Urgent. The product is no longer supported.

Urgent2 publicly disclosedUnsupported product
CVEs closed
21
5 rated Critical
Exploited
0
None reported
Exploitation more likely
10
Vendor assessment
Highest EPSS
0.6922
99th percentile

Priority of the 21 CVEs

Patch now 0 Urgent 10 High 5 Routine 6

Applies to

ProductBuild after install
Internet Explorer 11 on Windows 10 for 32-bit Systems10240.17918
Internet Explorer 11 on Windows 10 for x64-based Systems10240.17918
Microsoft .NET Framework 3.5 on Windows 10 for 32-bit Systems10240.17918
Microsoft .NET Framework 3.5 on Windows 10 for x64-based Systems10240.17918
Microsoft .NET Framework 4.6/4.6.1/4.6.2 on Windows 10 for 32-bit Systems10240.17918
Microsoft .NET Framework 4.6/4.6.1/4.6.2 on Windows 10 for x64-based Systems10240.17918
Microsoft Edge (EdgeHTML-based) on Windows 10 for 32-bit Systems10240.17918
Microsoft Edge (EdgeHTML-based) on Windows 10 for x64-based Systems10240.17918
Windows 10 for 32-bit Systems10240.17918
Windows 10 for x64-based Systems10240.17918

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Urgent CVE-2018-8288 Microsoft Scripting Engine Remote Code Execution 4.2 0.6922 More likely
Urgent CVE-2018-8291 Microsoft Scripting Engine Remote Code Execution 4.2 0.6922 More likely
Urgent CVE-2018-8280 Microsoft Scripting Engine Remote Code Execution 4.2 0.2099 More likely
Urgent CVE-2018-8290 Microsoft Scripting Engine Remote Code Execution 4.2 0.2099 More likely
Urgent CVE-2018-8125 Microsoft Scripting Engine Remote Code Execution 4.2 0.2036 More likely
Urgent CVE-2018-8242 Microsoft Scripting Engine Remote Code Execution 6.4 0.1930 More likely
Urgent CVE-2018-8296 Microsoft Scripting Engine Remote Code Execution 7.5 0.1705 More likely
Urgent CVE-2018-8287 Microsoft Scripting Engine Remote Code Execution 7.5 0.1633 More likely
Urgent CVE-2018-0949 Internet Explorer Security Feature Bypass 2.4 0.1203 More likely
Urgent CVE-2018-8313 Microsoft Windows Elevation of Privilege 7.8 0.0131 DisclosedMore likely
High CVE-2018-8284 .NET Framework Remote Code Execution n/a 0.4599 Exploitation Less Likely
High CVE-2018-8206 Microsoft Windows Denial of Service 7.5 0.1181 Exploitation Less Likely
High CVE-2018-8282 Windows Kernel Denial of Service 8.8 0.0131 Exploitation Unlikely
High CVE-2018-8202 .NET Framework Elevation of Privilege n/a 0.0131 Exploitation Less Likely
High CVE-2018-8356 .NET Framework Security Feature Bypass n/a 0.0075 Exploitation Unlikely
Routine CVE-2018-8304 Microsoft Windows DNS Denial of Service 5.9 0.1292 N/A
Routine CVE-2018-8314 Windows Shell Elevation of Privilege 4.3 0.0417 DisclosedN/A
Routine CVE-2018-8308 Microsoft Windows Elevation of Privilege 6.6 0.0394 Exploitation Less Likely
Routine CVE-2018-8307 Microsoft WordPad Security Feature Bypass 5.3 0.0382 Exploitation Less Likely
Routine CVE-2018-8222 Device Guard Security Feature Bypass 5.3 0.0214 Exploitation Less Likely
Routine CVE-2018-8309 Microsoft Windows Denial of Service 5.5 0.0171 Exploitation Less Likely
Showing 1 to 21 of 21 1