Lucene search

K
mskbMicrosoftKB4338420
HistoryJul 10, 2018 - 7:00 a.m.

Description of the Security and Quality Rollup updates for .NET Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, and 4.7.2 for Windows 7 SP1 and Server 2008 R2 SP1, and for .NET Framework 4.6 for Server 2008 (KB 4338420)

2018-07-1007:00:00
Microsoft
support.microsoft.com
11

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7.7 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.218 Low

EPSS

Percentile

96.4%

Description of the Security and Quality Rollup updates for .NET Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, and 4.7.2 for Windows 7 SP1 and Server 2008 R2 SP1, and for .NET Framework 4.6 for Server 2008 (KB 4338420)

Summary

This security update resolves the following vulnerabilities:

  • A “remote code execution” vulnerability exists when .NET Framework does not validate input correctly. An attacker who successfully exploits this vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts that have full user rights. Users whose accounts are configured to have fewer user rights on the system could be less affected than users who have administrative user rights. To exploit the vulnerability, an attacker would have to pass specific input to an application through susceptible .NET Framework methods. This security update addresses the vulnerability by correcting how .NET Framework validates input. To learn more about this vulnerability, see Microsoft Common Vulnerabilities and Exposures CVE-2018-8284.

  • An “elevation of privilege” vulnerability exists in .NET Framework that could allow an attacker to elevate their user rights level. To exploit the vulnerability, an attacker would first have to access the local computer, and then run a malicious program. This update addresses the vulnerability by correcting how .NET Framework enables COM objects. To learn more about this vulnerability, see Microsoft Common Vulnerabilities and Exposures CVE-2018-8202.

  • A “security feature bypass” vulnerability exists when .NET Framework components do not correctly validate certificates. An attacker could present expired certificates when challenged. This security update addresses the vulnerability by making sure that .NET Framework components correctly validate certificates. To learn more about this vulnerability, see Microsoft Common Vulnerabilities and Exposures CVE-2018-8356.
    Important

  • All updates for .NET Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, and 4.7.2 require the d3dcompiler_47.dll update to be installed. We recommend that you install the included d3dcompiler_47.dll update before you apply this update. For more information about the d3dcompiler_47.dll update, see KB 4019990 for Windows 7 SP1 and Windows Server 2008 R2 SP1. Or, see KB 4019478 for Windows Server 2008.

  • If you install a language pack after you install this update, you must reinstall this update. Therefore, we recommend that you install any language packs that you need before you install this update. For more information, see Add language packs to Windows.

Additional information about this security update

For more information about this security update as it relates to Windows 7 SP1 and Windows Server 2008 R2 SP1, see the following article in the Microsoft Knowledge Base:4340556 Security and Quality Rollup updates for .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, and 4.7.2 for Windows 7 SP1 and Server 2008 R2 SP1 (KB 4340556)For more information about this security update as it relates to Windows Server 2008, see the following article in the Microsoft Knowledge Base:[4340559](<https://support.microsoft.com/help/ 4340559>) Security and Quality Rollup updates for .NET Framework 2.0 SP2, 3.0 SP2, 4.5.2, and 4.6 for Windows Server 2008 (KB 4340559)

Known issues

  • After you install any of the July 2018 .NET Framework Security Updates, a COM component fails to load because of “access denied,” “class not registered,” or “internal failure occurred for unknown reasons” errors. The most common failure signature is the following:Exception type: System.UnauthorizedAccessExceptionMessage: Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))For more information about this issue, see the following article in the Microsoft Knowledge Base: 4345913 “Access Denied” errors and applications with COM activation fail after installing July 2018 Security and Quality Rollup updates for .NET FrameworkTo resolve this issue, install the August Security and Quality Rollup KB 4345590.
  • Assume that you run the Azure Active Directory (Azure AD) Connect Health for Sync monitoring agent on a system that has .NET Framework 4.7.2 or the July 2018 updates for .NET Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, or 4.7.2 installed. In this scenario, the system may experience slow performance and high CPU usage.

For more information about this issue, see the following article in the Microsoft Knowledge Base:4457331 Slow performance and high CPU usage in Azure AD Connect Health for Sync monitoring agent on a system that has installed .NET Framework 4.7.2 or the July 2018 updates for .NET Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, or 4.7.2

  • After you install the July 2018 .NET Framework Security and Quality Rollups that apply to .NET Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, and 4.7.2 on Windows 7 Service Pack 1 (SP1), Windows Server 2008 R2 SP1, or Windows Server 2008 SP2, you notice errors in .NET Framework applications.

For more information about this issue, see the following article in the Microsoft Knowledge Base:4463405 Errors occur in applications that combine transaction flow and remote calls after the July 2018 .NET Framework Security and Quality Rollups are installed

How to obtain and install the update

Method 1: Windows Update

This update is available through Windows Update. When you turn on automatic updating, this update will be downloaded and installed automatically. For more information about how to get security updates automatically, see Windows Update: FAQ.

Method 2: Windows Software Update Services (WSUS)

On your WSUS server, follow these steps:

  1. Click Start, clickAdministrative Tools, and then clickMicrosoft Windows Server Update Services 3.0.
  2. Expand ComputerName, and then clickAction.
  3. Click Import Updates.
  4. WSUS opens a browser window in which you may be prompted to install an ActiveX control. You must install the ActiveX control to continue.
  5. After the ActiveX control is installed, you see the Microsoft Update Catalog screen. For Windows 7 SP1 and Windows Server 2008 R2 SP1, type4340556or for Windows Server 2008, type4340559in theSearchbox, and then clickSearch.
  6. Locate the .NET Framework packages that match the operating systems, languages, and processors in your environment. Click Add to add them to your basket.
  7. After you select all the packages that you require, click View Basket.
  8. To import the packages to your WSUS server, click Import.
  9. After the packages are imported, click Close to return to WSUS.
    The updates are now available for installation through WSUS.

Update deployment information

For deployment details for this security update, see the following article in the Microsoft Knowledge Base:20180710 Security update deployment information: July 10, 2018

Update removal information

Note We do not recommend that you remove any security update. To remove this update, use thePrograms and Features item in Control Panel.

Update restart information

This update does not require a system restart after you apply it unless files that are being updated are locked or are being used.

Update replacement information

For Windows 7 SP1 and Server 2008 R2 SP1, this update replaces KB4099633 and KB4291493.For Windows Server 2008 SP2, this update replaces KB4099636 and KB4291501.

File information

File hash

Package name Package hash SHA 1 Package hash SHA 2
NDP46-KB4338420-x64.exe EEFD3A67DBFB754D713963B1B9888A5E75868882 574BAE313E19EB416117C9E3ADF20B0DA86B66D3D0908C1F2B7C865625141A14
NDP46-KB4338420-x86.exe 50F4CE73B0B99D2D50A16256D9E3ECD5DDA0E398 C786F0AD79BCDF04B8B1CFFFBB73EBF68B07E731DF77E02B0664349902DB70C5

__

File attributes for all supported x64-based systems

The English (United States) version of this update installs files that have the attributes that are listed in the following tables. The dates and the times for these files are listed in Coordinated Universal Time (UTC). The dates and the times for these files on your local computer are displayed in your local time together with your current daylight saving time (DST) bias. Additionally, the dates and the times may change when you perform certain operations on the files.File name File version File size Date Time
Aspnet_perf.dll 4.7.3130.0 46,240 14-Jun-2018 19:02
Aspnet_perf.dll 4.7.3130.0 42,656 14-Jun-2018 18:45
aspnet_wp.exe 4.7.3130.0 50,792 14-Jun-2018 19:02
aspnet_wp.exe 4.7.3130.0 46,184 14-Jun-2018 18:45
clr.dll 4.7.3130.0 10,377,344 14-Jun-2018 19:02
clr.dll 4.7.3130.0 7,249,024 14-Jun-2018 18:45
clrjit.dll 4.7.3130.0 1,224,336 14-Jun-2018 19:02
clrjit.dll 4.7.3130.0 522,896 14-Jun-2018 18:45
compatjit.dll 4.7.3130.0 1,259,672 14-Jun-2018 19:02
dfdll.dll 4.7.3130.0 191,624 14-Jun-2018 19:02
dfdll.dll 4.7.3130.0 159,880 14-Jun-2018 18:45
GlobalUserInterface.CompositeFont 186,009 14-Jun-2018 18:45
mscordacwks.dll 4.7.3130.0 1,840,800 14-Jun-2018 19:02
mscordacwks.dll 4.7.3130.0 1,343,136 14-Jun-2018 18:45
mscordbi.dll 4.7.3130.0 1,623,704 14-Jun-2018 19:02
mscordbi.dll 4.7.3130.0 1,170,064 14-Jun-2018 18:45
mscoreei.dll 4.7.3130.0 632,464 14-Jun-2018 19:02
mscoreei.dll 4.7.3130.0 513,176 14-Jun-2018 18:45
mscorlib.dll 4.7.3130.0 5,418,136 14-Jun-2018 19:02
mscorlib.dll 4.7.3130.0 5,638,312 14-Jun-2018 18:45
msvcp120_clr0400.dll 12.0.52519.0 690,008 14-Jun-2018 19:02
msvcp120_clr0400.dll 12.0.52519.0 485,576 14-Jun-2018 18:46
msvcr120_clr0400.dll 12.0.52519.0 993,632 14-Jun-2018 19:02
msvcr120_clr0400.dll 12.0.52519.0 987,840 14-Jun-2018 18:46
VsVersion.dll 14.7.3130.0 19,096 14-Jun-2018 19:02
VsVersion.dll 14.7.3130.0 19,096 14-Jun-2018 18:45
peverify.dll 4.7.3130.0 260,760 14-Jun-2018 19:02
peverify.dll 4.7.3130.0 188,568 14-Jun-2018 18:46
PresentationCore.dll 4.7.3130.0 3,613,368 14-Jun-2018 19:02
PresentationCore.dll 4.7.3130.0 3,636,560 14-Jun-2018 18:45
PresentationFramework.dll 4.7.3130.0 6,235,496 14-Jun-2018 18:45
PresentationFramework-SystemData.dll 4.7.3130.0 24,312 14-Jun-2018 18:45
PresentationHost_v0400.dll 4.7.3130.0 277,712 14-Jun-2018 19:02
PresentationHost_v0400.dll.mui 4.7.3130.0 84,704 14-Jun-2018 19:02
PresentationHost_v0400.dll 4.7.3130.0 214,224 14-Jun-2018 18:45
PresentationHost_v0400.dll.mui 4.7.3130.0 84,704 14-Jun-2018 18:45
PresentationNative_v0400.dll 4.7.3130.0 1,109,712 14-Jun-2018 19:02
PresentationNative_v0400.dll 4.7.3130.0 827,096 14-Jun-2018 18:45
ServiceMonikerSupport.dll 4.7.3130.0 31,456 14-Jun-2018 19:02
ServiceMonikerSupport.dll 4.7.3130.0 29,384 14-Jun-2018 18:46
SMDiagnostics.dll 4.7.3130.0 73,808 14-Jun-2018 18:45
SOS.dll 4.7.3130.0 872,064 14-Jun-2018 19:02
SOS.dll 4.7.3130.0 743,552 14-Jun-2018 18:45
System.Activities.dll 4.7.3130.0 1,532,544 14-Jun-2018 18:45
System.ComponentModel.DataAnnotations.dll 4.7.3130.0 127,200 14-Jun-2018 18:45
System.Core.dll 4.7.3130.0 1,551,944 14-Jun-2018 18:45
System.Data.Entity.dll 4.7.3130.0 4,034,240 14-Jun-2018 18:45
System.DirectoryServices.AccountManagement.dll 4.7.3130.0 296,224 14-Jun-2018 18:45
System.IdentityModel.dll 4.7.3130.0 1,090,176 14-Jun-2018 18:45
System.IdentityModel.Services.dll 4.7.3130.0 198,376 14-Jun-2018 18:46
System.Runtime.Serialization.dll 4.7.3130.0 1,056,456 14-Jun-2018 18:45
System.ServiceModel.Channels.dll 4.7.3130.0 157,928 14-Jun-2018 18:45
System.ServiceModel.Discovery.dll 4.7.3130.0 308,456 14-Jun-2018 18:45
System.ServiceModel.dll 4.7.3130.0 6,321,784 14-Jun-2018 18:45
System.ServiceModel.Internals.dll 4.7.3130.0 260,808 14-Jun-2018 18:45
System.ServiceModel.Routing.dll 4.7.3130.0 130,784 14-Jun-2018 18:45
System.ServiceModel.WasHosting.dll 4.7.3130.0 39,656 14-Jun-2018 18:46
System.Web.ApplicationServices.dll 4.7.3130.0 70,840 14-Jun-2018 18:45
System.Web.Extensions.dll 4.7.3130.0 1,849,472 14-Jun-2018 18:46
System.Workflow.Activities.dll 4.7.3130.0 1,051,360 14-Jun-2018 18:46
System.Workflow.ComponentModel.dll 4.7.3130.0 1,542,384 14-Jun-2018 18:46
System.Workflow.Runtime.dll 4.7.3130.0 498,896 14-Jun-2018 18:46
System.Runtime.Caching.dll 4.7.3130.0 109,776 14-Jun-2018 18:46
System.Data.dll 4.7.3130.0 3,520,672 14-Jun-2018 19:02
System.Data.dll 4.7.3130.0 3,458,720 14-Jun-2018 18:45
System.Data.SqlXml.dll 4.7.3130.0 734,320 14-Jun-2018 18:45
System.Deployment.dll 4.7.3130.0 879,232 14-Jun-2018 18:45
System.DirectoryServices.Protocols.dll 4.7.3130.0 201,424 14-Jun-2018 18:45
System.dll 4.7.3130.0 3,554,856 14-Jun-2018 18:45
System.Drawing.dll 4.7.3130.0 600,664 14-Jun-2018 18:45
System.Management.dll 4.7.3130.0 415,336 14-Jun-2018 18:45
System.Net.Http.dll 4.7.3130.0 204,384 14-Jun-2018 18:45
System.Runtime.Remoting.dll 4.7.3130.0 347,280 14-Jun-2018 18:45
System.Security.dll 4.7.3130.0 325,728 14-Jun-2018 18:45
System.Transactions.dll 4.7.3130.0 310,464 14-Jun-2018 19:02
System.Transactions.dll 4.7.3130.0 307,392 14-Jun-2018 18:45
System.Web.dll 4.7.3130.0 5,398,192 14-Jun-2018 19:02
System.Web.dll 4.7.3130.0 5,416,096 14-Jun-2018 18:46
System.Windows.Controls.Ribbon.dll 4.7.3130.0 742,640 14-Jun-2018 18:45
System.Windows.Forms.dll 4.7.3130.0 5,236,864 14-Jun-2018 18:45
System.Xaml.dll 4.7.3130.0 642,120 14-Jun-2018 18:45
System.XML.dll 4.7.3130.0 2,670,144 14-Jun-2018 18:45
UIAutomationClient.dll 4.7.3130.0 178,008 14-Jun-2018 18:45
UIAutomationClientsideProviders.dll 4.7.3130.0 361,360 14-Jun-2018 18:45
UIAutomationProvider.dll 4.7.3130.0 48,992 14-Jun-2018 18:45
UIAutomationTypes.dll 4.7.3130.0 221,016 14-Jun-2018 18:45
webengine.dll 4.7.3130.0 26,264 14-Jun-2018 19:02
webengine.dll 4.7.3130.0 24,752 14-Jun-2018 18:46
webengine4.dll 4.7.3130.0 667,296 14-Jun-2018 19:02
webengine4.dll 4.7.3130.0 550,040 14-Jun-2018 18:46
WindowsBase.dll 4.7.3130.0 1,292,112 14-Jun-2018 18:45
WMINet_Utils.dll 4.7.3130.0 188,072 14-Jun-2018 19:02
WMINet_Utils.dll 4.7.3130.0 136,360 14-Jun-2018 18:45
WorkflowServiceHostPerformanceCounters.dll 4.7.3130.0 101,136 14-Jun-2018 19:02
WorkflowServiceHostPerformanceCounters.dll 4.7.3130.0 89,384 14-Jun-2018 18:45
WPFFontCache_v0400.exe.mui 4.7.3130.0 19,168 14-Jun-2018 20:14
WPFFontCache_v0400.exe.mui 4.7.3130.0 19,152 14-Jun-2018 18:45
WPFFontCache_v0400.exe 4.7.3130.0 26,728 14-Jun-2018 20:14
WPFFontCache_v0400.exe 4.7.3130.0 25,704 14-Jun-2018 18:45
wpfgfx_v0400.dll 4.7.3130.0 1,764,520 14-Jun-2018 19:02
wpfgfx_v0400.dll 4.7.3130.0 1,345,184 14-Jun-2018 18:45
Placeholder.dll 4.7.3130.0 25,760 14-Jun-2018 19:02
Placeholder.dll 4.7.3130.0 24,736 14-Jun-2018 18:45
PenIMC2_v0400.dll 4.7.3130.0 104,616 14-Jun-2018 19:02
PenIMC2_v0400.dll 4.7.3130.0 86,184 14-Jun-2018 18:45

__

File attributes for all supported x86-based systems

The English (United States) version of this update installs files that have the attributes that are listed in the following tables. The dates and the times for these files are listed in Coordinated Universal Time (UTC). The dates and the times for these files on your local computer are displayed in your local time together with your current daylight saving time (DST) bias. Additionally, the dates and the times may change when you perform certain operations on the files.File name File version File size Date Time
Aspnet_perf.dll 4.7.3130.0 42,656 14-Jun-2018 18:45
aspnet_wp.exe 4.7.3130.0 46,184 14-Jun-2018 18:45
clr.dll 4.7.3130.0 7,249,024 14-Jun-2018 18:45
clrjit.dll 4.7.3130.0 522,896 14-Jun-2018 18:45
dfdll.dll 4.7.3130.0 159,880 14-Jun-2018 18:45
GlobalUserInterface.CompositeFont 186,009 14-Jun-2018 18:45
mscordacwks.dll 4.7.3130.0 1,343,136 14-Jun-2018 18:45
mscordbi.dll 4.7.3130.0 1,170,064 14-Jun-2018 18:45
mscoreei.dll 4.7.3130.0 513,176 14-Jun-2018 18:45
mscorlib.dll 4.7.3130.0 5,638,312 14-Jun-2018 18:45
msvcp120_clr0400.dll 12.0.52519.0 485,576 14-Jun-2018 18:46
msvcr120_clr0400.dll 12.0.52519.0 987,840 14-Jun-2018 18:46
VsVersion.dll 14.7.3130.0 19,096 14-Jun-2018 18:45
peverify.dll 4.7.3130.0 188,568 14-Jun-2018 18:46
PresentationCore.dll 4.7.3130.0 3,636,560 14-Jun-2018 18:45
PresentationFramework.dll 4.7.3130.0 6,235,496 14-Jun-2018 18:45
PresentationFramework-SystemData.dll 4.7.3130.0 24,312 14-Jun-2018 18:45
PresentationHost_v0400.dll 4.7.3130.0 214,224 14-Jun-2018 18:45
PresentationHost_v0400.dll.mui 4.7.3130.0 84,704 14-Jun-2018 18:45
PresentationNative_v0400.dll 4.7.3130.0 827,096 14-Jun-2018 18:45
ServiceMonikerSupport.dll 4.7.3130.0 29,384 14-Jun-2018 18:46
SMDiagnostics.dll 4.7.3130.0 73,808 14-Jun-2018 18:45
SOS.dll 4.7.3130.0 743,552 14-Jun-2018 18:45
System.Activities.dll 4.7.3130.0 1,532,544 14-Jun-2018 18:45
System.ComponentModel.DataAnnotations.dll 4.7.3130.0 127,200 14-Jun-2018 18:45
System.Core.dll 4.7.3130.0 1,551,944 14-Jun-2018 18:45
System.Data.Entity.dll 4.7.3130.0 4,034,240 14-Jun-2018 18:45
System.DirectoryServices.AccountManagement.dll 4.7.3130.0 296,224 14-Jun-2018 18:45
System.IdentityModel.dll 4.7.3130.0 1,090,176 14-Jun-2018 18:45
System.IdentityModel.Services.dll 4.7.3130.0 198,376 14-Jun-2018 18:46
System.Runtime.Serialization.dll 4.7.3130.0 1,056,456 14-Jun-2018 18:45
System.ServiceModel.Channels.dll 4.7.3130.0 157,928 14-Jun-2018 18:45
System.ServiceModel.Discovery.dll 4.7.3130.0 308,456 14-Jun-2018 18:45
System.ServiceModel.dll 4.7.3130.0 6,321,784 14-Jun-2018 18:45
System.ServiceModel.Internals.dll 4.7.3130.0 260,808 14-Jun-2018 18:45
System.ServiceModel.Routing.dll 4.7.3130.0 130,784 14-Jun-2018 18:45
System.ServiceModel.WasHosting.dll 4.7.3130.0 39,656 14-Jun-2018 18:46
System.Web.ApplicationServices.dll 4.7.3130.0 70,840 14-Jun-2018 18:45
System.Web.Extensions.dll 4.7.3130.0 1,849,472 14-Jun-2018 18:46
System.Workflow.Activities.dll 4.7.3130.0 1,051,360 14-Jun-2018 18:46
System.Workflow.ComponentModel.dll 4.7.3130.0 1,542,384 14-Jun-2018 18:46
System.Workflow.Runtime.dll 4.7.3130.0 498,896 14-Jun-2018 18:46
System.Runtime.Caching.dll 4.7.3130.0 109,776 14-Jun-2018 18:46
System.Data.dll 4.7.3130.0 3,458,720 14-Jun-2018 18:45
System.Data.SqlXml.dll 4.7.3130.0 734,320 14-Jun-2018 18:45
System.Deployment.dll 4.7.3130.0 879,232 14-Jun-2018 18:45
System.DirectoryServices.Protocols.dll 4.7.3130.0 201,424 14-Jun-2018 18:45
System.dll 4.7.3130.0 3,554,856 14-Jun-2018 18:45
System.Drawing.dll 4.7.3130.0 600,664 14-Jun-2018 18:45
System.Management.dll 4.7.3130.0 415,336 14-Jun-2018 18:45
System.Net.Http.dll 4.7.3130.0 204,384 14-Jun-2018 18:45
System.Runtime.Remoting.dll 4.7.3130.0 347,280 14-Jun-2018 18:45
System.Security.dll 4.7.3130.0 325,728 14-Jun-2018 18:45
System.Transactions.dll 4.7.3130.0 307,392 14-Jun-2018 18:45
System.Web.dll 4.7.3130.0 5,416,096 14-Jun-2018 18:46
System.Windows.Controls.Ribbon.dll 4.7.3130.0 742,640 14-Jun-2018 18:45
System.Windows.Forms.dll 4.7.3130.0 5,236,864 14-Jun-2018 18:45
System.Xaml.dll 4.7.3130.0 642,120 14-Jun-2018 18:45
System.Xml.dll 4.7.3130.0 2,670,144 14-Jun-2018 18:45
UIAutomationClient.dll 4.7.3130.0 178,008 14-Jun-2018 18:45
UIAutomationClientsideProviders.dll 4.7.3130.0 361,360 14-Jun-2018 18:45
UIAutomationProvider.dll 4.7.3130.0 48,992 14-Jun-2018 18:45
UIAutomationTypes.dll 4.7.3130.0 221,016 14-Jun-2018 18:45
webengine.dll 4.7.3130.0 24,752 14-Jun-2018 18:46
webengine4.dll 4.7.3130.0 550,040 14-Jun-2018 18:46
WindowsBase.dll 4.7.3130.0 1,292,112 14-Jun-2018 18:45
WMINet_Utils.dll 4.7.3130.0 136,360 14-Jun-2018 18:45
WorkflowServiceHostPerformanceCounters.dll 4.7.3130.0 89,384 14-Jun-2018 18:45
WPFFontCache_v0400.exe.mui 4.7.3130.0 19,152 14-Jun-2018 18:45
WPFFontCache_v0400.exe 4.7.3130.0 25,704 14-Jun-2018 18:45
wpfgfx_v0400.dll 4.7.3130.0 1,345,184 14-Jun-2018 18:45
Placeholder.dll 4.7.3130.0 24,736 14-Jun-2018 18:45
PenIMC2_v0400.dll 4.7.3130.0 86,184 14-Jun-2018 18:45

How to obtain help and support for this security update

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7.7 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.218 Low

EPSS

Percentile

96.4%