Microsoft · Security update · September 11, 2018
KB4457128: September 2018 cumulative update for Windows 10 1803
KB4457128, released September 11, 2018, fixes 47 CVEs across 13 products. One of them is being exploited (CVE-2018-8440); 1 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.
Patch now1 on CISA KEVKnown ransomware use3 publicly disclosedUnsupported product
CVEs closed
47
15 rated Critical
Exploited
1
CVE-2018-8440
Exploitation more likely
24
Vendor assessment
Highest EPSS
0.6902
99th percentile
Priority of the 47 CVEs
Patch now 1
Urgent 28
High 4
Routine 14
Applies to
CVEs this fix closes
| Priority | CVE | Component | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Patch now | CVE-2018-8440 | Microsoft Windows | Elevation of Privilege | 7.8 | 0.1853 | KEVRansomwareDisclosedExploited |
| Urgent | CVE-2018-8466 | Microsoft Scripting Engine | Remote Code Execution | 4.2 | 0.6902 | More likely |
| Urgent | CVE-2018-8467 | Microsoft Scripting Engine | Remote Code Execution | 4.2 | 0.6902 | More likely |
| Urgent | CVE-2018-8420 | Microsoft XML Core Services | Remote Code Execution | 7.5 | 0.4890 | More likely |
| Urgent | CVE-2018-8464 | Microsoft Edge (HTML-based) | Remote Code Execution | 4.2 | 0.4258 | More likely |
| Urgent | CVE-2018-8421 | .NET Framework | Remote Code Execution | n/a | 0.2908 | Exploitation Less Likely |
| Urgent | CVE-2018-8332 | Microsoft Graphics Component | Remote Code Execution | 8.8 | 0.1907 | Exploitation Less Likely |
| Urgent | CVE-2018-8475 | Microsoft Graphics Component | Remote Code Execution | 8.8 | 0.1586 | DisclosedMore likely |
| Urgent | CVE-2018-8463 | Microsoft Edge (HTML-based) | Elevation of Privilege | 4.3 | 0.1542 | More likely |
| Urgent | CVE-2018-8469 | Microsoft Edge (HTML-based) | Elevation of Privilege | 4.3 | 0.1542 | More likely |
| Urgent | CVE-2018-8354 | Microsoft Scripting Engine | Remote Code Execution | 4.2 | 0.1495 | More likely |
| Urgent | CVE-2018-8456 | Microsoft Scripting Engine | Remote Code Execution | 4.2 | 0.1495 | More likely |
| Urgent | CVE-2018-8367 | Microsoft Scripting Engine | Remote Code Execution | 4.2 | 0.1494 | More likely |
| Urgent | CVE-2018-8465 | Microsoft Scripting Engine | Remote Code Execution | 4.2 | 0.1463 | More likely |
| Urgent | CVE-2018-8459 | Microsoft Scripting Engine | Remote Code Execution | 4.2 | 0.1456 | More likely |
| Urgent | CVE-2018-8457 | Microsoft Scripting Engine | Remote Code Execution | 4.2 | 0.1308 | DisclosedMore likely |
| Urgent | CVE-2018-8461 | Internet Explorer | Remote Code Execution | 7.5 | 0.1290 | More likely |
| Urgent | CVE-2018-8447 | Internet Explorer | Remote Code Execution | 6.4 | 0.1290 | More likely |
| Urgent | CVE-2018-8468 | Windows Shell | Elevation of Privilege | 4.3 | 0.1177 | More likely |
| Urgent | CVE-2018-8452 | Microsoft Scripting Engine | Information Disclosure | 4.3 | 0.0559 | More likely |
| Urgent | CVE-2018-0965 | Windows Hyper-V | Remote Code Execution | 7.6 | 0.0505 | Exploitation Less Likely |
| Urgent | CVE-2018-8366 | Microsoft Edge (HTML-based) | Information Disclosure | 4.3 | 0.0505 | More likely |
| Urgent | CVE-2018-8439 | Windows Hyper-V | Remote Code Execution | 7.6 | 0.0431 | Exploitation Less Likely |
| Urgent | CVE-2018-8410 | Microsoft Windows | Elevation of Privilege | 7.0 | 0.0398 | More likely |
| Urgent | CVE-2018-8425 | Microsoft Edge (HTML-based) | Spoofing | 5.3 | 0.0349 | More likely |
Showing 1 to 25 of 47
1Next