Microsoft · Security update · September 11, 2018

KB4457140: September 2018 security update

KB4457140, released September 11, 2018, fixes 18 CVEs across 2 products. One of them is being exploited (CVE-2018-8440); 1 on CISA KEV. Patch Radar priority: Patch now.

Patch now1 on CISA KEVKnown ransomware use2 publicly disclosed
CVEs closed
18
3 rated Critical
Exploited
1
CVE-2018-8440
Exploitation more likely
5
Vendor assessment
Highest EPSS
0.4890
98th percentile

Priority of the 18 CVEs

Patch now 1 Urgent 6 High 3 Routine 8

Applies to

Product
Windows Server 2012
Windows Server 2012 (Server Core installation)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2018-8440 Microsoft Windows Elevation of Privilege 7.8 0.1853 KEVRansomwareDisclosedExploited
Urgent CVE-2018-8420 Microsoft XML Core Services Remote Code Execution 7.5 0.4890 More likely
Urgent CVE-2018-8332 Microsoft Graphics Component Remote Code Execution 8.8 0.1907 Exploitation Less Likely
Urgent CVE-2018-8475 Microsoft Graphics Component Remote Code Execution 8.8 0.1586 DisclosedMore likely
Urgent CVE-2018-8468 Windows Shell Elevation of Privilege 4.3 0.1177 More likely
Urgent CVE-2018-8410 Microsoft Windows Elevation of Privilege 7.0 0.0398 More likely
Urgent CVE-2018-8442 Windows Kernel Information Disclosure 4.7 0.0278 More likely
High CVE-2018-8392 Microsoft JET Database Engine Remote Code Execution 7.8 0.2276 Exploitation Less Likely
High CVE-2018-8393 Microsoft JET Database Engine Remote Code Execution 7.8 0.2248 Exploitation Less Likely
High CVE-2018-8444 Windows SMB Server Information Disclosure 7.0 0.0586 N/A
Routine CVE-2018-8424 Microsoft Graphics Component Information Disclosure 4.7 0.1299 Exploitation Less Likely
Routine CVE-2018-8335 Windows SMB Server Denial of Service 4.8 0.0900 Exploitation Less Likely
Routine CVE-2018-8434 Windows Hyper-V Information Disclosure 5.4 0.0349 Exploitation Less Likely
Routine CVE-2018-8443 Windows Kernel Information Disclosure 4.7 0.0278 Exploitation Less Likely
Routine CVE-2018-8446 Windows Kernel Information Disclosure 4.7 0.0278 Exploitation Less Likely
Routine CVE-2018-8271 Microsoft Windows Information Disclosure 2.5 0.0278 Exploitation Less Likely
Routine CVE-2018-8433 Microsoft Graphics Component Information Disclosure 4.7 0.0263 Exploitation Less Likely
Routine CVE-2018-8419 Windows Media Information Disclosure 4.7 0.0168 Exploitation Less Likely
Showing 1 to 18 of 18 1