Microsoft · Security update · September 11, 2018
KB4457984: September 2018 security update
KB4457984, released September 11, 2018, fixes 16 CVEs across 5 products. One of them is being exploited (CVE-2018-8440); 1 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.
Patch now1 on CISA KEVKnown ransomware use2 publicly disclosedUnsupported product
CVEs closed
16
3 rated Critical
Exploited
1
CVE-2018-8440
Exploitation more likely
4
Vendor assessment
Highest EPSS
0.4890
98th percentile
Priority of the 16 CVEs
Patch now 1
Urgent 5
High 2
Routine 8
Applies to
CVEs this fix closes
| Priority | CVE | Component | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Patch now | CVE-2018-8440 | Microsoft Windows | Elevation of Privilege | 7.8 | 0.1853 | KEVRansomwareDisclosedExploited |
| Urgent | CVE-2018-8420 | Microsoft XML Core Services | Remote Code Execution | 7.5 | 0.4890 | More likely |
| Urgent | CVE-2018-8332 | Microsoft Graphics Component | Remote Code Execution | 8.8 | 0.1907 | Exploitation Less Likely |
| Urgent | CVE-2018-8475 | Microsoft Graphics Component | Remote Code Execution | 8.8 | 0.1586 | DisclosedMore likely |
| Urgent | CVE-2018-8468 | Windows Shell | Elevation of Privilege | 4.3 | 0.1177 | More likely |
| Urgent | CVE-2018-8442 | Windows Kernel | Information Disclosure | 4.7 | 0.0278 | More likely |
| High | CVE-2018-8392 | Microsoft JET Database Engine | Remote Code Execution | 7.8 | 0.2276 | Exploitation Less Likely |
| High | CVE-2018-8393 | Microsoft JET Database Engine | Remote Code Execution | 7.8 | 0.2248 | Exploitation Less Likely |
| Routine | CVE-2018-8424 | Microsoft Graphics Component | Information Disclosure | 4.7 | 0.1299 | Exploitation Less Likely |
| Routine | CVE-2018-8434 | Windows Hyper-V | Information Disclosure | 5.4 | 0.0349 | Exploitation Less Likely |
| Routine | CVE-2018-8443 | Windows Kernel | Information Disclosure | 4.7 | 0.0278 | Exploitation Less Likely |
| Routine | CVE-2018-8446 | Windows Kernel | Information Disclosure | 4.7 | 0.0278 | Exploitation Less Likely |
| Routine | CVE-2018-8271 | Microsoft Windows | Information Disclosure | 2.5 | 0.0278 | Exploitation Less Likely |
| Routine | CVE-2018-8336 | Windows Kernel | Information Disclosure | 2.5 | 0.0278 | N/A |
| Routine | CVE-2018-8433 | Microsoft Graphics Component | Information Disclosure | 4.7 | 0.0263 | Exploitation Less Likely |
| Routine | CVE-2018-8419 | Windows Media | Information Disclosure | 4.7 | 0.0168 | Exploitation Less Likely |
Showing 1 to 16 of 16
1