Microsoft · Security update · April 11, 2017

KB4015551: April 2017 security update

KB4015551, released April 11, 2017, fixes 23 CVEs across 3 products. 3 of them are being exploited (CVE-2017-0199); 3 on CISA KEV. Patch Radar priority: Patch now.

Patch now3 on CISA KEVKnown ransomware use1 publicly disclosed
CVEs closed
23
5 rated Critical
Exploited
3
CVE-2017-0199
Exploitation more likely
2
Vendor assessment
Highest EPSS
0.9950
99th percentile

Priority of the 23 CVEs

Patch now 3 Urgent 5 High 4 Routine 11

Applies to

Product
Internet Explorer 10 on Windows Server 2012
Windows Server 2012
Windows Server 2012 (Server Core installation)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2017-0199 Microsoft Office Remote Code Execution 6.7 0.9950 KEVRansomwareExploited
Patch now CVE-2017-0210 Internet Explorer Elevation of Privilege 3.5 0.2233 KEVDisclosedExploited
Patch now CVE-2016-0162 Internet Explorer Information Disclosure n/a 0.2193 KEVExploited
Urgent CVE-2017-0211 Microsoft Windows Elevation of Privilege 5.0 0.1409 More likely
Urgent CVE-2017-0201 Microsoft Scripting Engine Remote Code Execution 6.4 0.1388 N/A
Urgent CVE-2017-0158 Microsoft Scripting Engine Remote Code Execution 7.5 0.1279 More likely
Urgent CVE-2017-0180 Windows Hyper-V Remote Code Execution 7.6 0.0330 Exploitation Less Likely
Urgent CVE-2017-0163 Windows Hyper-V Remote Code Execution 7.6 0.0315 Exploitation Less Likely
High CVE-2017-0166 Group Policy Elevation of Privilege 8.1 0.0642 Exploitation Less Likely
High CVE-2017-0168 Windows Hyper-V Information Disclosure 7.7 0.0556 N/A
High CVE-2017-0169 Windows Hyper-V Information Disclosure 7.3 0.0156 Exploitation Unlikely
High CVE-2017-0156 Microsoft Graphics Component Elevation of Privilege 7.0 0.0114 Exploitation Unlikely
Routine CVE-2017-0042 Windows DirectShow Information Disclosure 3.7 0.2952 Exploitation Less Likely
Routine CVE-2013-6629 Microsoft Graphics Component Information Disclosure 4.7 0.0973 Exploitation Unlikely
Routine CVE-2017-0192 Microsoft Graphics Component Information Disclosure 4.4 0.0603 Exploitation Less Likely
Routine CVE-2017-0185 Windows Hyper-V Denial of Service 5.8 0.0567 Exploitation Unlikely
Routine CVE-2017-0191 Microsoft Windows Denial of Service 5.8 0.0473 Exploitation Unlikely
Routine CVE-2017-0186 Windows Hyper-V Denial of Service 5.8 0.0456 Exploitation Unlikely
Routine CVE-2017-0182 Windows Hyper-V Denial of Service 5.8 0.0441 Exploitation Unlikely
Routine CVE-2017-0183 Windows Hyper-V Denial of Service 5.8 0.0441 Exploitation Unlikely
Routine CVE-2017-0058 Windows Kernel-Mode Drivers Information Disclosure 4.7 0.0366 Exploitation Unlikely
Routine CVE-2017-0188 Windows Kernel-Mode Drivers Information Disclosure 4.4 0.0298 None reported
Routine CVE-2017-0184 Windows Hyper-V Denial of Service 5.4 0.0168 Exploitation Unlikely
Showing 1 to 23 of 23 1