Microsoft · Security update · December 11, 2018

KB4471318: December 2018 security update

KB4471318, released December 11, 2018, fixes 13 CVEs across 8 products. 2 of them are being exploited (CVE-2018-8639); 2 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now2 on CISA KEVKnown ransomware useUnsupported product
CVEs closed
13
None rated Critical
Exploited
2
CVE-2018-8639
Exploitation more likely
8
Vendor assessment
Highest EPSS
0.6849
99th percentile

Priority of the 13 CVEs

Patch now 2 Urgent 8 High 0 Routine 3

Applies to

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2018-8639 Microsoft Graphics Component Information Disclosure 7.0 0.2235 KEVRansomwareExploited
Patch now CVE-2018-8611 Windows Kernel Elevation of Privilege 7.0 0.0420 KEVExploited
Urgent CVE-2018-8631 Internet Explorer Remote Code Execution 6.4 0.6849 More likely
Urgent CVE-2018-8619 Internet Explorer Remote Code Execution 6.4 0.4484 More likely
Urgent CVE-2018-8625 Microsoft Scripting Engine Remote Code Execution 6.4 0.4376 More likely
Urgent CVE-2018-8643 Microsoft Scripting Engine Remote Code Execution 6.4 0.0991 More likely
Urgent CVE-2018-8596 Microsoft Graphics Component Information Disclosure 4.7 0.0707 More likely
Urgent CVE-2018-8595 Microsoft Graphics Component Information Disclosure 4.7 0.0692 More likely
Urgent CVE-2018-8477 Windows Kernel Information Disclosure 3.3 0.0180 More likely
Urgent CVE-2018-8641 Windows Kernel-Mode Drivers Elevation of Privilege 7.0 0.0112 More likely
Routine CVE-2018-8514 Microsoft Windows DNS Information Disclosure 3.3 0.0189 Exploitation Less Likely
Routine CVE-2018-8621 Windows Kernel Information Disclosure 4.7 0.0184 N/A
Routine CVE-2018-8622 Windows Kernel Information Disclosure 4.7 0.0184 N/A
Showing 1 to 13 of 13 1