Microsoft · Security update · December 11, 2018
KB4471319: December 2018 security update
KB4471319, released December 11, 2018, fixes 8 CVEs across 5 products. 2 of them are being exploited (CVE-2018-8639); 2 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.
Patch now2 on CISA KEVKnown ransomware useUnsupported product
CVEs closed
8
None rated Critical
Exploited
2
CVE-2018-8639
Exploitation more likely
4
Vendor assessment
Highest EPSS
0.2235
97th percentile
Priority of the 8 CVEs
Patch now 2
Urgent 4
High 0
Routine 2
Applies to
CVEs this fix closes
| Priority | CVE | Component | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Patch now | CVE-2018-8639 | Microsoft Graphics Component | Information Disclosure | 7.0 | 0.2235 | KEVRansomwareExploited |
| Patch now | CVE-2018-8611 | Windows Kernel | Elevation of Privilege | 7.0 | 0.0420 | KEVExploited |
| Urgent | CVE-2018-8596 | Microsoft Graphics Component | Information Disclosure | 4.7 | 0.0707 | More likely |
| Urgent | CVE-2018-8595 | Microsoft Graphics Component | Information Disclosure | 4.7 | 0.0692 | More likely |
| Urgent | CVE-2018-8477 | Windows Kernel | Information Disclosure | 3.3 | 0.0180 | More likely |
| Urgent | CVE-2018-8641 | Windows Kernel-Mode Drivers | Elevation of Privilege | 7.0 | 0.0112 | More likely |
| Routine | CVE-2018-8514 | Microsoft Windows DNS | Information Disclosure | 3.3 | 0.0189 | Exploitation Less Likely |
| Routine | CVE-2018-8622 | Windows Kernel | Information Disclosure | 4.7 | 0.0184 | N/A |
Showing 1 to 8 of 8
1