# KB4048957: November 2017 security update KB4048957, released November 14, 2017, fixes 23 CVEs across 8 products. None of them is reported as exploited. Patch Radar priority: Urgent. The product is no longer supported. - Web page: https://patchblox.com/security/fix/microsoft/kb4048957 - Platform: Microsoft - Released: Nov 14, 2017 - Priority: Urgent (Closes CVE-2017-11855, exploitation more likely) - CVEs: 23, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://support.microsoft.com/help/4048957 ## Applies to | Product | Release | Fixed in | |---|---|---| | [Internet Explorer 11 on Windows 7 for 32-bit Systems Service Pack 1](https://patchblox.com/security/data/product/microsoft/internet-explorer-11-on-windows-7-for-32-bit-systems-service-pack-1.md) | | | | [Internet Explorer 11 on Windows 7 for x64-based Systems Service Pack 1](https://patchblox.com/security/data/product/microsoft/internet-explorer-11-on-windows-7-for-x64-based-systems-service-pack-1.md) | | | | [Internet Explorer 11 on Windows Server 2008 R2 for x64-based Systems Service Pack 1](https://patchblox.com/security/data/product/microsoft/internet-explorer-11-on-windows-server-2008-r2-for-x64-based-systems-service-pack-1.md) | | | | [Windows 7 for 32-bit Systems Service Pack 1](https://patchblox.com/security/data/product/microsoft/windows-7-for-32-bit-systems-service-pack-1.md) | | | | [Windows 7 for x64-based Systems Service Pack 1](https://patchblox.com/security/data/product/microsoft/windows-7-for-x64-based-systems-service-pack-1.md) | | | | [Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1](https://patchblox.com/security/data/product/microsoft/windows-server-2008-r2-for-itanium-based-systems-service-pack-1.md) | | | | [Windows Server 2008 R2 for x64-based Systems Service Pack 1](https://patchblox.com/security/data/product/microsoft/windows-server-2008-r2-for-x64-based-systems-service-pack-1.md) | | | | [Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)](https://patchblox.com/security/data/product/microsoft/windows-server-2008-r2-for-x64-based-systems-service-pack-1-server-core-installation.md) | | | ## CVEs this fix closes | CVE | Priority | Component | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2017-11855](https://patchblox.com/security/data/cve/CVE-2017-11855.md) | Urgent | Internet Explorer | 6.4 | 0.4856 | More likely | | [CVE-2017-11853](https://patchblox.com/security/data/cve/CVE-2017-11853.md) | Urgent | Windows Kernel-Mode Drivers | 4.7 | 0.1098 | More likely | | [CVE-2017-11869](https://patchblox.com/security/data/cve/CVE-2017-11869.md) | Urgent | Microsoft Scripting Engine | 6.4 | 0.0983 | More likely | | [CVE-2017-11837](https://patchblox.com/security/data/cve/CVE-2017-11837.md) | Urgent | Microsoft Scripting Engine | 4.2 | 0.0855 | More likely | | [CVE-2017-11838](https://patchblox.com/security/data/cve/CVE-2017-11838.md) | Urgent | Microsoft Scripting Engine | 4.2 | 0.0855 | More likely | | [CVE-2017-11843](https://patchblox.com/security/data/cve/CVE-2017-11843.md) | Urgent | Microsoft Scripting Engine | 4.2 | 0.0847 | More likely | | [CVE-2017-11858](https://patchblox.com/security/data/cve/CVE-2017-11858.md) | Urgent | Microsoft Scripting Engine | 4.2 | 0.0836 | More likely | | [CVE-2017-11846](https://patchblox.com/security/data/cve/CVE-2017-11846.md) | Urgent | Microsoft Scripting Engine | 4.2 | 0.0770 | More likely | | [CVE-2017-11827](https://patchblox.com/security/data/cve/CVE-2017-11827.md) | Urgent | Microsoft Browsers | 6.4 | 0.0760 | Disclosed | | [CVE-2017-11847](https://patchblox.com/security/data/cve/CVE-2017-11847.md) | Urgent | Windows Kernel | 7.0 | 0.0646 | More likely | | [CVE-2017-11856](https://patchblox.com/security/data/cve/CVE-2017-11856.md) | Urgent | Internet Explorer | 7.5 | 0.0563 | More likely | | [CVE-2017-11791](https://patchblox.com/security/data/cve/CVE-2017-11791.md) | Urgent | Microsoft Scripting Engine | 4.3 | 0.0549 | More likely | | [CVE-2017-11831](https://patchblox.com/security/data/cve/CVE-2017-11831.md) | Urgent | Windows Kernel | 4.7 | 0.0333 | More likely | | [CVE-2017-11835](https://patchblox.com/security/data/cve/CVE-2017-11835.md) | Urgent | Microsoft Graphics Component | 4.7 | 0.0238 | More likely | | [CVE-2017-11852](https://patchblox.com/security/data/cve/CVE-2017-11852.md) | Urgent | Microsoft Graphics Component | 4.7 | 0.0220 | More likely | | [CVE-2017-11849](https://patchblox.com/security/data/cve/CVE-2017-11849.md) | Urgent | Windows Kernel-Mode Drivers | 4.7 | 0.0218 | More likely | | [CVE-2017-11832](https://patchblox.com/security/data/cve/CVE-2017-11832.md) | Urgent | Microsoft Graphics Component | 4.7 | 0.0209 | More likely | | [CVE-2017-11851](https://patchblox.com/security/data/cve/CVE-2017-11851.md) | Urgent | Microsoft Graphics Component | 4.7 | 0.0209 | More likely | | [CVE-2017-11834](https://patchblox.com/security/data/cve/CVE-2017-11834.md) | Routine | Microsoft Scripting Engine | 4.2 | 0.1273 | | | [CVE-2017-11788](https://patchblox.com/security/data/cve/CVE-2017-11788.md) | Routine | Microsoft Windows Search Component | 5.9 | 0.0793 | | | [CVE-2017-11848](https://patchblox.com/security/data/cve/CVE-2017-11848.md) | Routine | Internet Explorer | 2.4 | 0.0705 | Disclosed | | [CVE-2017-11768](https://patchblox.com/security/data/cve/CVE-2017-11768.md) | Routine | Windows Media Player | 2.5 | 0.0666 | | | [CVE-2017-11880](https://patchblox.com/security/data/cve/CVE-2017-11880.md) | Routine | Windows Kernel | 4.7 | 0.0218 | | --- Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo