Microsoft · Security update · September 12, 2017

KB3213658: September 2017 security update

KB3213658, released September 12, 2017, fixes 2 CVEs in Office Online Server. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
2
None rated Critical
Exploited
0
None reported
Exploitation more likely
1
Vendor assessment
Highest EPSS
0.2212
97th percentile

Priority of the 2 CVEs

Patch now 0 Urgent 1 High 1 Routine 0

Applies to

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Urgent CVE-2017-8743 Microsoft Office Remote Code Execution n/a 0.2212 More likely
High CVE-2017-8631 Microsoft Office Remote Code Execution n/a 0.1699 Exploitation Less Likely
Showing 1 to 2 of 2 1