Microsoft · Security update · August 14, 2018

KB4343899: August 2018 security update

KB4343899, released August 14, 2018, fixes 15 CVEs across 8 products. None of them is reported as exploited. Patch Radar priority: Urgent. The product is no longer supported.

UrgentUnsupported product
CVEs closed
15
3 rated Critical
Exploited
0
None reported
Exploitation more likely
3
Microsoft's assessment
Highest EPSS
0.6752
99th percentile

Priority of the 15 CVEs

Patch now 0 Urgent 4 High 5 Routine 6

Applies to

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Urgent CVE-2018-8397 Microsoft Graphics ComponentRemote Code Execution8.8 0.6752 N/A
Urgent CVE-2018-8344 Microsoft Graphics ComponentRemote Code Execution7.8 0.2298 More likely
Urgent CVE-2018-8345 Microsoft WindowsRemote Code Execution7.5 0.1490 More likely
Urgent CVE-2018-8404 Windows KernelElevation of Privilege7.0 0.0122 More likely
High CVE-2018-8349 Windows COMRemote Code Execution7.0 0.2340 Exploitation Less Likely
High CVE-2018-8346 Microsoft WindowsRemote Code Execution7.5 0.1997 N/A
High CVE-2018-8342 Windows RNDISElevation of Privilege7.0 0.0129 N/A
High CVE-2018-8343 Windows NDISElevation of Privilege7.0 0.0129 Exploitation Less Likely
High CVE-2018-8339 Windows InstallerElevation of Privilege7.4 0.0116 Exploitation Less Likely
Routine CVE-2018-8316 Internet ExplorerRemote Code Execution6.4 0.1450 Exploitation Less Likely
Routine CVE-2018-8394 Microsoft Graphics ComponentInformation Disclosure4.7 0.0851 Exploitation Less Likely
Routine CVE-2018-8398 Microsoft Graphics ComponentInformation Disclosure4.7 0.0851 Exploitation Less Likely
Routine CVE-2018-8341 Windows KernelInformation Disclosure4.7 0.0285 Exploitation Less Likely
Routine CVE-2018-8396 Microsoft Graphics ComponentInformation Disclosure4.7 0.0264 N/A
Routine CVE-2018-8348 Windows KernelInformation Disclosure4.7 0.0235 Exploitation Less Likely
Showing 1 to 15 of 15 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.