Microsoft Patch Tuesday — February 2018
Tuesday, 13 February 2018
- Vulnerabilities
- 50
- Critical
- 0
- High
- 10
- Zero-days
- 0
- Public exploit
- 13
Exploited 0
Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.
None of this release's vulnerabilities is known to be exploited so far.
Public exploit code 13
Not critical and not yet seen exploited, but exploit or proof-of-concept code is public.
- High 7.5 EPSS 55%
- High 7.5 EPSS 65%
- High 7.5 EPSS 65%
- High 7.5 EPSS 65%
- High 7.5 EPSS 68%
-
Unscored
CVE-2018-0821 Public exploit AppContainer in Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability…EPSS 2.3%
-
Unscored
CVE-2018-0822 Public exploit NTFS in Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to …EPSS 2.6%
-
Unscored
CVE-2018-0823 Public exploit The Named Pipe File System in Windows 10 version 1709 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way the Named …EPSS 2.6%
-
Unscored
CVE-2018-0826 Public exploit Windows Storage Services in Windows 10 versions 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privileg…EPSS 3.1%
-
Unscored
CVE-2018-0832 Public exploit The Windows kernel in Windows 8.1 and RT 8.1, Windows Server 2012 R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, versi…EPSS 2.3%
-
Unscored
CVE-2018-0833 Public exploit The Microsoft Server Message Block 2.0 and 3.0 (SMBv2/SMBv3) client in Windows 8.1 and RT 8.1 and Windows Server 2012 R2 allows a denial of service vulnerabili…EPSS 40%
-
Unscored
CVE-2018-0840 Public exploit Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Internet Explorer and…EPSS 53%
-
Unscored
CVE-2018-0866 Public exploit Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511…EPSS 44%
All vulnerabilities 50
High10 ShowHide
- High 7.5 EPSS 55%
- High 7.5 EPSS 65%
- High 7.5 EPSS 65%
- High 7.5 EPSS 65%
- High 7.5 EPSS 68%
- High 7.5 EPSS 15%
- High 7.5 EPSS 15%
- High 7.5 EPSS 15%
- High 7.5 EPSS 15%
- High 7.5 EPSS 18%
Unscored40 ShowHide
-
Unscored
CVE-2018-0821 Public exploit AppContainer in Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability…EPSS 2.3%
-
Unscored
CVE-2018-0822 Public exploit NTFS in Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to …EPSS 2.6%
-
Unscored
CVE-2018-0823 Public exploit The Named Pipe File System in Windows 10 version 1709 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way the Named …EPSS 2.6%
-
Unscored
CVE-2018-0826 Public exploit Windows Storage Services in Windows 10 versions 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privileg…EPSS 3.1%
-
Unscored
CVE-2018-0832 Public exploit The Windows kernel in Windows 8.1 and RT 8.1, Windows Server 2012 R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, versi…EPSS 2.3%
-
Unscored
CVE-2018-0833 Public exploit The Microsoft Server Message Block 2.0 and 3.0 (SMBv2/SMBv3) client in Windows 8.1 and RT 8.1 and Windows Server 2012 R2 allows a denial of service vulnerabili…EPSS 40%
-
Unscored
CVE-2018-0840 Public exploit Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Internet Explorer and…EPSS 53%
-
Unscored
CVE-2018-0866 Public exploit Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511…EPSS 44%
-
Unscored
CVE-2018-0742 The Windows kernel in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 …EPSS 1.2%
-
Unscored
CVE-2018-0755 The Microsoft Windows Embedded OpenType (EOT) font engine in Microsoft Windows 7 SP1 and Windows Server 2008 R2 allows information disclosure, due to how the W…EPSS 2.3%
-
Unscored
CVE-2018-0756 The Windows kernel in Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnera…EPSS 1.2%
-
Unscored
CVE-2018-0757 The Windows kernel in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 …EPSS 1.6%
-
Unscored
CVE-2018-0760 The Microsoft Windows Embedded OpenType (EOT) font engine in Microsoft Windows 7 SP1, Windows Server 2008 R2, and Windows Server 2012 allows information disclo…EPSS 2.3%
-
Unscored
CVE-2018-0761 The Microsoft Windows Embedded OpenType (EOT) font engine in Microsoft Windows 7 SP1 and Windows Server 2008 R2 allows information disclosure, due to how the W…EPSS 2.3%
-
Unscored
CVE-2018-0763 Microsoft Edge in Microsoft Windows 10 1703 and 1709 allows information disclosure, due to how Edge handles objects in memory, aka "Microsoft Edge Information …EPSS 4.7%
-
Unscored
CVE-2018-0771 Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows a security feature bypass, due to how Edge handles different-origin requests,…EPSS 5.8%
-
Unscored
CVE-2018-0809 The Windows kernel in Windows 10, versions 1703 and 1709, and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way object…EPSS 1.2%
-
Unscored
CVE-2018-0810 The Windows kernel in Windows 7 SP1, Windows Server 2008 SP2 and R2, and Windows Server 2012 allows an information disclosure vulnerability due to the way memo…EPSS 1.6%
-
Unscored
CVE-2018-0820 The Windows kernel in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 …EPSS 1.2%
-
Unscored
CVE-2018-0825 StructuredQuery in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and…EPSS 16%
-
Unscored
CVE-2018-0827 Windows Scripting Host (WSH) in Windows 10 versions 1703 and 1709 and Windows Server, version 1709 allows a Device Guard security feature bypass vulnerability …EPSS 1.4%
-
Unscored
CVE-2018-0828 Windows 10 version 1607 and Windows Server 2016 allow an elevation of privilege vulnerability due to how the MultiPoint management account password is stored, …EPSS 1%
-
Unscored
CVE-2018-0829 The Windows kernel in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 …EPSS 2%
-
Unscored
CVE-2018-0830 The Windows kernel in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 …EPSS 2%
-
Unscored
CVE-2018-0831 The Windows kernel in Windows 10 versions 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerabil…EPSS 1.1%
-
Unscored
CVE-2018-0839 Microsoft Edge in Microsoft Windows 10 1703 allows information disclosure, due to how Edge handles objects in memory, aka "Microsoft Edge Information Disclosur…EPSS 5.5%
-
Unscored
CVE-2018-0841 Microsoft Office 2016 Click-to-Run allows a remote code execution vulnerability due to how objects are handled in memory, aka "Office Remote Code Execution Vul…EPSS 20%
-
Unscored
CVE-2018-0842 Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Serv…EPSS 1%
-
Unscored
CVE-2018-0843 The Windows kernel in Windows 10 version 1709 and Windows Server, version 1709 allows an information disclosure vulnerability due to how objects in memory are …EPSS 2.1%
-
Unscored
CVE-2018-0844 The Windows Common Log File System (CLFS) driver in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Wind…EPSS 1.2%
-
Unscored
CVE-2018-0846 The Windows Common Log File System (CLFS) driver in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Wind…EPSS 1.2%
-
Unscored
CVE-2018-0847 Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Windows 10 Gold, 1511…EPSS 5.9%
-
Unscored
CVE-2018-0850 Microsoft Outlook 2007, Microsoft Outlook 2010, Microsoft Outlook 2013, Microsoft Outlook 2016, and Microsoft Office 2016 Click-to-Run allow an elevation of pr…EPSS 5%
-
Unscored
CVE-2018-0851 Microsoft Office 2007 SP2, Microsoft Office Word Viewer, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1 and RT SP1, Microsoft Office 2016, and Microsoft …EPSS 19%
-
Unscored
CVE-2018-0852 Microsoft Outlook 2007 SP3, Microsoft Outlook 2010 SP2, Microsoft Outlook 2013 SP1 and RT SP1, Microsoft Outlook 2016, and Microsoft Office 2016 Click-to-Run (…EPSS 19%
-
Unscored
CVE-2018-0853 Microsoft Office 2010 SP2, Microsoft Office 2013 SP1 and RT SP1, Microsoft Office 2016, and Microsoft Office 2016 Click-to-Run (C2R) allow an information discl…EPSS 12%
-
Unscored
CVE-2018-0855 The Microsoft Windows Embedded OpenType (EOT) font engine in Microsoft Windows 7 SP1 and Windows Server 2008 R2 allows information disclosure, due to how the W…EPSS 5.9%
-
Unscored
CVE-2018-0861 Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles objects in mem…EPSS 15%
-
Unscored
CVE-2018-0864 SharePoint Project Server 2013 and SharePoint Enterprise Server 2016 allow an information disclosure vulnerability due to how web requests are handled, aka "Mi…EPSS 2.6%
-
Unscored
CVE-2018-0869 SharePoint Server 2016 allows an elevation of privilege vulnerability due to how web requests are handled, aka "Microsoft SharePoint Elevation of Privilege Vul…EPSS 2.2%