Microsoft · Security update · October 9, 2018
KB4462923: October 2018 security update
KB4462923, released October 9, 2018, fixes 16 CVEs across 8 products. One of them is being exploited (CVE-2018-8453); 1 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.
Patch now1 on CISA KEVKnown ransomware use1 publicly disclosedUnsupported product
CVEs closed
16
4 rated Critical
Exploited
1
CVE-2018-8453
Exploitation more likely
6
Vendor assessment
Highest EPSS
0.7004
99th percentile
Priority of the 16 CVEs
Patch now 1
Urgent 8
High 1
Routine 6
Applies to
CVEs this fix closes
| Priority | CVE | Component | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Patch now | CVE-2018-8453 | Microsoft Graphics Component | Elevation of Privilege | 7.0 | 0.7004 | KEVRansomwareExploited |
| Urgent | CVE-2018-8413 | Windows Shell | Remote Code Execution | 5.0 | 0.4625 | More likely |
| Urgent | CVE-2018-8494 | Microsoft XML Core Services | Remote Code Execution | 7.5 | 0.2209 | Exploitation Less Likely |
| Urgent | CVE-2018-8460 | Internet Explorer | Remote Code Execution | 7.5 | 0.2067 | More likely |
| Urgent | CVE-2018-8491 | Internet Explorer | Remote Code Execution | 7.5 | 0.1279 | More likely |
| Urgent | CVE-2018-8489 | Windows Hyper-V | Remote Code Execution | 7.6 | 0.0440 | Exploitation Less Likely |
| Urgent | CVE-2018-8411 | Microsoft Windows | Elevation of Privilege | 7.0 | 0.0307 | More likely |
| Urgent | CVE-2018-8333 | Microsoft Windows | Elevation of Privilege | 7.0 | 0.0187 | More likely |
| Urgent | CVE-2018-8486 | Microsoft Graphics Component | Information Disclosure | 4.7 | 0.0175 | More likely |
| High | CVE-2018-8423 | Microsoft JET Database Engine | Remote Code Execution | 7.8 | 0.3215 | DisclosedExploitation Less Likely |
| Routine | CVE-2018-8432 | Microsoft Office | Remote Code Execution | 5.0 | 0.1955 | Exploitation Less Likely |
| Routine | CVE-2018-8472 | Microsoft Graphics Component | Information Disclosure | 4.7 | 0.1887 | Exploitation Less Likely |
| Routine | CVE-2018-8481 | Windows Media Player | Information Disclosure | 3.5 | 0.0500 | Exploitation Less Likely |
| Routine | CVE-2018-8482 | Windows Media Player | Information Disclosure | 3.5 | 0.0500 | Exploitation Less Likely |
| Routine | CVE-2018-8320 | Microsoft Windows DNS | Security Feature Bypass | 4.3 | 0.0465 | Exploitation Less Likely |
| Routine | CVE-2018-8330 | Windows Kernel | Information Disclosure | 4.7 | 0.0254 | Exploitation Less Likely |
Showing 1 to 16 of 16
1