Microsoft · Security update · October 10, 2017

KB4011162: October 2017 security update

KB4011162, released October 10, 2017, fixes 2 CVEs across 2 products. One of them is being exploited (CVE-2017-11774); 1 on CISA KEV. Patch Radar priority: Patch now.

Patch now1 on CISA KEV
CVEs closed
2
None rated Critical
Exploited
1
CVE-2017-11774
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.5963
99th percentile

Priority of the 2 CVEs

Patch now 1 Urgent 0 High 1 Routine 0

Applies to

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2017-11774 Microsoft Office Security Feature Bypass n/a 0.5963 KEVExploited
High CVE-2017-11776 Microsoft Office Information Disclosure n/a 0.0939 Exploitation Unlikely
Showing 1 to 2 of 2 1