Microsoft · Security update · October 10, 2017
KB4011217: October 2017 security update
KB4011217, released October 10, 2017, fixes 4 CVEs in Microsoft SharePoint Enterprise Server 2016. One of them is being exploited (CVE-2017-11826); 1 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.
Patch now1 on CISA KEV2 publicly disclosedUnsupported product
CVEs closed
4
None rated Critical
Exploited
1
CVE-2017-11826
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.8133
99th percentile
Priority of the 4 CVEs
Patch now 1
Urgent 0
High 3
Routine 0
Applies to
CVEs this fix closes
| Priority | CVE | Component | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Patch now | CVE-2017-11826 | Microsoft Office | Remote Code Execution | n/a | 0.8133 | KEVDisclosedExploited |
| High | CVE-2017-11775 | Microsoft Office | Elevation of Privilege | n/a | 0.0227 | Exploitation Less Likely |
| High | CVE-2017-11777 | Microsoft Office | Elevation of Privilege | n/a | 0.0227 | DisclosedExploitation Less Likely |
| High | CVE-2017-11820 | Microsoft Office | Elevation of Privilege | n/a | 0.0227 | Exploitation Less Likely |
Showing 1 to 4 of 4
1