Microsoft · Security update · September 11, 2018

KB4457138: September 2018 cumulative update for Windows 10 1703

KB4457138, released September 11, 2018, fixes 39 CVEs across 10 products. One of them is being exploited (CVE-2018-8440); 1 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now1 on CISA KEVKnown ransomware use3 publicly disclosedUnsupported product
CVEs closed
39
13 rated Critical
Exploited
1
CVE-2018-8440
Exploitation more likely
20
Vendor assessment
Highest EPSS
0.6902
99th percentile

Priority of the 39 CVEs

Patch now 1 Urgent 24 High 3 Routine 11

Applies to

ProductBuild after install
Internet Explorer 11 on Windows 10 Version 1703 for 32-bit Systems15063.1324
Internet Explorer 11 on Windows 10 Version 1703 for x64-based Systems15063.1324
Microsoft .NET Framework 3.5 on Windows 10 Version 1703 for 32-bit Systems15063.1324
Microsoft .NET Framework 3.5 on Windows 10 Version 1703 for x64-based Systems15063.1324
Microsoft .NET Framework 4.7/4.7.1/4.7.2 on Windows 10 Version 1703 for 32-bit Systems15063.1324
Microsoft .NET Framework 4.7/4.7.1/4.7.2 on Windows 10 Version 1703 for x64-based Systems15063.1324
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1703 for 32-bit Systems15063.1324
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1703 for x64-based Systems15063.1324
Windows 10 Version 1703 for 32-bit Systems15063.1324
Windows 10 Version 1703 for x64-based Systems15063.1324

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2018-8440 Microsoft Windows Elevation of Privilege 7.8 0.1853 KEVRansomwareDisclosedExploited
Urgent CVE-2018-8466 Microsoft Scripting Engine Remote Code Execution 4.2 0.6902 More likely
Urgent CVE-2018-8467 Microsoft Scripting Engine Remote Code Execution 4.2 0.6902 More likely
Urgent CVE-2018-8420 Microsoft XML Core Services Remote Code Execution 7.5 0.4890 More likely
Urgent CVE-2018-8464 Microsoft Edge (HTML-based) Remote Code Execution 4.2 0.4258 More likely
Urgent CVE-2018-8421 .NET Framework Remote Code Execution n/a 0.2908 Exploitation Less Likely
Urgent CVE-2018-8332 Microsoft Graphics Component Remote Code Execution 8.8 0.1907 Exploitation Less Likely
Urgent CVE-2018-8475 Microsoft Graphics Component Remote Code Execution 8.8 0.1586 DisclosedMore likely
Urgent CVE-2018-8469 Microsoft Edge (HTML-based) Elevation of Privilege 4.3 0.1542 More likely
Urgent CVE-2018-8354 Microsoft Scripting Engine Remote Code Execution 4.2 0.1495 More likely
Urgent CVE-2018-8456 Microsoft Scripting Engine Remote Code Execution 4.2 0.1495 More likely
Urgent CVE-2018-8367 Microsoft Scripting Engine Remote Code Execution 4.2 0.1494 More likely
Urgent CVE-2018-8465 Microsoft Scripting Engine Remote Code Execution 4.2 0.1463 More likely
Urgent CVE-2018-8457 Microsoft Scripting Engine Remote Code Execution 4.2 0.1308 DisclosedMore likely
Urgent CVE-2018-8447 Internet Explorer Remote Code Execution 6.4 0.1290 More likely
Urgent CVE-2018-8468 Windows Shell Elevation of Privilege 4.3 0.1177 More likely
Urgent CVE-2018-8452 Microsoft Scripting Engine Information Disclosure 4.3 0.0559 More likely
Urgent CVE-2018-0965 Windows Hyper-V Remote Code Execution 7.6 0.0505 Exploitation Less Likely
Urgent CVE-2018-8439 Windows Hyper-V Remote Code Execution 7.6 0.0431 Exploitation Less Likely
Urgent CVE-2018-8410 Microsoft Windows Elevation of Privilege 7.0 0.0398 More likely
Urgent CVE-2018-8425 Microsoft Edge (HTML-based) Spoofing 5.3 0.0349 More likely
Urgent CVE-2018-8470 Internet Explorer Security Feature Bypass 4.3 0.0327 More likely
Urgent CVE-2018-8449 Device Guard Security Feature Bypass 5.3 0.0311 More likely
Urgent CVE-2018-8442 Windows Kernel Information Disclosure 4.7 0.0278 More likely
Urgent CVE-2018-8462 Microsoft Graphics Component Elevation of Privilege 7.0 0.0119 More likely
Showing 1 to 25 of 39 1Next