Microsoft · Security update · December 11, 2018

KB4471324: December 2018 cumulative update for Windows 10 1803

KB4471324, released December 11, 2018, fixes 23 CVEs across 16 products. 2 of them are being exploited (CVE-2018-8639); 2 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now2 on CISA KEVKnown ransomware use1 publicly disclosedUnsupported product
CVEs closed
23
8 rated Critical
Exploited
2
CVE-2018-8639
Exploitation more likely
17
Vendor assessment
Highest EPSS
0.6849
99th percentile

Priority of the 23 CVEs

Patch now 2 Urgent 19 High 1 Routine 1

Applies to

ProductBuild after install
Internet Explorer 11 on Windows 10 Version 1803 for 32-bit Systems17134.471
Internet Explorer 11 on Windows 10 Version 1803 for ARM64-based Systems17134.471
Internet Explorer 11 on Windows 10 Version 1803 for x64-based Systems17134.471
Microsoft .NET Framework 3.5 on Windows 10 Version 1803 for 32-bit Systems17134.471
Microsoft .NET Framework 3.5 on Windows 10 Version 1803 for x64-based Systems17134.471
Microsoft .NET Framework 3.5 on Windows Server, version 1803 (Server Core Installation)17134.471
Microsoft .NET Framework 4.7.2 on Windows 10 Version 1803 for 32-bit Systems17134.471
Microsoft .NET Framework 4.7.2 on Windows 10 Version 1803 for x64-based Systems17134.471
Microsoft .NET Framework 4.7.2 on Windows Server, version 1803 (Server Core Installation)17134.471
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for 32-bit Systems17134.471
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for ARM64-based Systems17134.471
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for x64-based Systems17134.471
Windows 10 Version 1803 for 32-bit Systems17134.471
Windows 10 Version 1803 for ARM64-based Systems17134.471
Windows 10 Version 1803 for x64-based Systems17134.471
Windows Server, version 1803 (Server Core Installation)17134.471

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2018-8639 Microsoft Graphics Component Information Disclosure 7.0 0.2235 KEVRansomwareExploited
Patch now CVE-2018-8611 Windows Kernel Elevation of Privilege 7.0 0.0420 KEVExploited
Urgent CVE-2018-8631 Internet Explorer Remote Code Execution 6.4 0.6849 More likely
Urgent CVE-2018-8617 Microsoft Scripting Engine Remote Code Execution 4.2 0.6248 More likely
Urgent CVE-2018-8619 Internet Explorer Remote Code Execution 6.4 0.4484 More likely
Urgent CVE-2018-8625 Microsoft Scripting Engine Remote Code Execution 6.4 0.4376 More likely
Urgent CVE-2018-8629 Microsoft Scripting Engine Remote Code Execution 4.2 0.2260 More likely
Urgent CVE-2018-8540 .NET Framework Remote Code Execution n/a 0.2158 Exploitation Less Likely
Urgent CVE-2018-8626 Microsoft Windows DNS Remote Code Execution 9.8 0.2124 Exploitation Less Likely
Urgent CVE-2018-8634 Windows Authentication Methods Remote Code Execution 4.2 0.1536 More likely
Urgent CVE-2018-8624 Microsoft Scripting Engine Remote Code Execution 4.2 0.1321 More likely
Urgent CVE-2018-8583 Microsoft Scripting Engine Remote Code Execution 4.2 0.1089 More likely
Urgent CVE-2018-8618 Microsoft Scripting Engine Remote Code Execution 4.2 0.1089 More likely
Urgent CVE-2018-8643 Microsoft Scripting Engine Remote Code Execution 6.4 0.0991 More likely
Urgent CVE-2018-8596 Microsoft Graphics Component Information Disclosure 4.7 0.0707 More likely
Urgent CVE-2018-8595 Microsoft Graphics Component Information Disclosure 4.7 0.0692 More likely
Urgent CVE-2018-8637 Windows Kernel Information Disclosure 4.7 0.0185 More likely
Urgent CVE-2018-8477 Windows Kernel Information Disclosure 3.3 0.0180 More likely
Urgent CVE-2018-8612 Windows Kernel Denial of Service 4.7 0.0142 More likely
Urgent CVE-2018-8641 Windows Kernel-Mode Drivers Elevation of Privilege 7.0 0.0112 More likely
Urgent CVE-2018-8599 Visual Studio Elevation of Privilege 7.0 0.0100 More likely
High CVE-2018-8517 .NET Framework Denial of Service n/a 0.0567 DisclosedExploitation Unlikely
Routine CVE-2018-8514 Microsoft Windows DNS Information Disclosure 3.3 0.0189 Exploitation Less Likely
Showing 1 to 23 of 23 1