Microsoft · Security update · July 10, 2018
KB4345459: July 2018 security update
KB4345459, released July 10, 2018, fixes 13 CVEs across 8 products. None of them is reported as exploited. Patch Radar priority: Urgent. The product is no longer supported.
Urgent1 publicly disclosedUnsupported product
CVEs closed
13
3 rated Critical
Exploited
0
None reported
Exploitation more likely
6
Vendor assessment
Highest EPSS
0.6922
99th percentile
Priority of the 13 CVEs
Patch now 0
Urgent 6
High 2
Routine 5
Applies to
CVEs this fix closes
| Priority | CVE | Component | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Urgent | CVE-2018-8288 | Microsoft Scripting Engine | Remote Code Execution | 4.2 | 0.6922 | More likely |
| Urgent | CVE-2018-8291 | Microsoft Scripting Engine | Remote Code Execution | 4.2 | 0.6922 | More likely |
| Urgent | CVE-2018-8242 | Microsoft Scripting Engine | Remote Code Execution | 6.4 | 0.1930 | More likely |
| Urgent | CVE-2018-8296 | Microsoft Scripting Engine | Remote Code Execution | 7.5 | 0.1705 | More likely |
| Urgent | CVE-2018-8287 | Microsoft Scripting Engine | Remote Code Execution | 7.5 | 0.1633 | More likely |
| Urgent | CVE-2018-0949 | Internet Explorer | Security Feature Bypass | 2.4 | 0.1203 | More likely |
| High | CVE-2018-8206 | Microsoft Windows | Denial of Service | 7.5 | 0.1181 | Exploitation Less Likely |
| High | CVE-2018-8282 | Windows Kernel | Denial of Service | 8.8 | 0.0131 | Exploitation Unlikely |
| Routine | CVE-2018-8304 | Microsoft Windows DNS | Denial of Service | 5.9 | 0.1292 | N/A |
| Routine | CVE-2018-8314 | Windows Shell | Elevation of Privilege | 4.3 | 0.0417 | DisclosedN/A |
| Routine | CVE-2018-8308 | Microsoft Windows | Elevation of Privilege | 6.6 | 0.0394 | Exploitation Less Likely |
| Routine | CVE-2018-8307 | Microsoft WordPad | Security Feature Bypass | 5.3 | 0.0382 | Exploitation Less Likely |
| Routine | CVE-2018-8309 | Microsoft Windows | Denial of Service | 5.5 | 0.0171 | Exploitation Less Likely |
Showing 1 to 13 of 13
1