Microsoft · Security update · September 11, 2018
KB4457131: September 2018 cumulative update for Windows 10 1607
KB4457131, released September 11, 2018, fixes 37 CVEs across 18 products. One of them is being exploited (CVE-2018-8440); 1 on CISA KEV. Patch Radar priority: Patch now.
Patch now1 on CISA KEVKnown ransomware use3 publicly disclosed
CVEs closed
37
12 rated Critical
Exploited
1
CVE-2018-8440
Exploitation more likely
19
Vendor assessment
Highest EPSS
0.6902
99th percentile
Priority of the 37 CVEs
Patch now 1
Urgent 23
High 2
Routine 11
Applies to
CVEs this fix closes
| Priority | CVE | Component | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Patch now | CVE-2018-8440 | Microsoft Windows | Elevation of Privilege | 7.8 | 0.1853 | KEVRansomwareDisclosedExploited |
| Urgent | CVE-2018-8466 | Microsoft Scripting Engine | Remote Code Execution | 4.2 | 0.6902 | More likely |
| Urgent | CVE-2018-8467 | Microsoft Scripting Engine | Remote Code Execution | 4.2 | 0.6902 | More likely |
| Urgent | CVE-2018-8420 | Microsoft XML Core Services | Remote Code Execution | 7.5 | 0.4890 | More likely |
| Urgent | CVE-2018-8464 | Microsoft Edge (HTML-based) | Remote Code Execution | 4.2 | 0.4258 | More likely |
| Urgent | CVE-2018-8421 | .NET Framework | Remote Code Execution | n/a | 0.2908 | Exploitation Less Likely |
| Urgent | CVE-2018-8332 | Microsoft Graphics Component | Remote Code Execution | 8.8 | 0.1907 | Exploitation Less Likely |
| Urgent | CVE-2018-8475 | Microsoft Graphics Component | Remote Code Execution | 8.8 | 0.1586 | DisclosedMore likely |
| Urgent | CVE-2018-8469 | Microsoft Edge (HTML-based) | Elevation of Privilege | 4.3 | 0.1542 | More likely |
| Urgent | CVE-2018-8354 | Microsoft Scripting Engine | Remote Code Execution | 4.2 | 0.1495 | More likely |
| Urgent | CVE-2018-8367 | Microsoft Scripting Engine | Remote Code Execution | 4.2 | 0.1494 | More likely |
| Urgent | CVE-2018-8465 | Microsoft Scripting Engine | Remote Code Execution | 4.2 | 0.1463 | More likely |
| Urgent | CVE-2018-8457 | Microsoft Scripting Engine | Remote Code Execution | 4.2 | 0.1308 | DisclosedMore likely |
| Urgent | CVE-2018-8447 | Internet Explorer | Remote Code Execution | 6.4 | 0.1290 | More likely |
| Urgent | CVE-2018-8468 | Windows Shell | Elevation of Privilege | 4.3 | 0.1177 | More likely |
| Urgent | CVE-2018-8452 | Microsoft Scripting Engine | Information Disclosure | 4.3 | 0.0559 | More likely |
| Urgent | CVE-2018-0965 | Windows Hyper-V | Remote Code Execution | 7.6 | 0.0505 | Exploitation Less Likely |
| Urgent | CVE-2018-8439 | Windows Hyper-V | Remote Code Execution | 7.6 | 0.0431 | Exploitation Less Likely |
| Urgent | CVE-2018-8410 | Microsoft Windows | Elevation of Privilege | 7.0 | 0.0398 | More likely |
| Urgent | CVE-2018-8425 | Microsoft Edge (HTML-based) | Spoofing | 5.3 | 0.0349 | More likely |
| Urgent | CVE-2018-8470 | Internet Explorer | Security Feature Bypass | 4.3 | 0.0327 | More likely |
| Urgent | CVE-2018-8449 | Device Guard | Security Feature Bypass | 5.3 | 0.0311 | More likely |
| Urgent | CVE-2018-8442 | Windows Kernel | Information Disclosure | 4.7 | 0.0278 | More likely |
| Urgent | CVE-2018-8462 | Microsoft Graphics Component | Elevation of Privilege | 7.0 | 0.0119 | More likely |
| High | CVE-2018-8392 | Microsoft JET Database Engine | Remote Code Execution | 7.8 | 0.2276 | Exploitation Less Likely |
Showing 1 to 25 of 37
1Next