Microsoft · Security update · May 9, 2017

KB4018466: May 2017 security update

KB4018466, released May 9, 2017, fixes 14 CVEs across 5 products. None of them is reported as exploited. Patch Radar priority: Urgent. The product is no longer supported.

UrgentUnsupported product
CVEs closed
14
4 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.1712
97th percentile

Priority of the 14 CVEs

Patch now 0 Urgent 4 High 10 Routine 0

Applies to

Product
Windows Server 2008 for 32-bit Systems Service Pack 2
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)
Windows Server 2008 for Itanium-Based Systems Service Pack 2
Windows Server 2008 for x64-based Systems Service Pack 2
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Urgent CVE-2017-0272 Windows SMB Server Remote Code Execution 8.1 0.1712 Exploitation Less Likely
Urgent CVE-2017-0277 Windows SMB Server Remote Code Execution 7.0 0.1085 Exploitation Less Likely
Urgent CVE-2017-0278 Windows SMB Server Remote Code Execution 7.0 0.1085 Exploitation Less Likely
Urgent CVE-2017-0279 Windows SMB Server Remote Code Execution 7.0 0.1085 Exploitation Less Likely
High CVE-2017-0271 Windows SMB Server Information Disclosure 7.0 0.1327 Exploitation Less Likely
High CVE-2017-0267 Windows SMB Server Information Disclosure 7.0 0.1268 Exploitation Less Likely
High CVE-2017-0275 Windows SMB Server Information Disclosure 7.0 0.0761 Exploitation Less Likely
High CVE-2017-0268 Windows SMB Server Information Disclosure 7.0 0.0724 Exploitation Less Likely
High CVE-2017-0270 Windows SMB Server Information Disclosure 7.0 0.0724 Exploitation Less Likely
High CVE-2017-0276 Windows SMB Server Information Disclosure 7.0 0.0724 Exploitation Less Likely
High CVE-2017-0280 Windows SMB Server Denial of Service 7.0 0.0717 Exploitation Less Likely
High CVE-2017-0274 Windows SMB Server Information Disclosure 7.0 0.0704 Exploitation Less Likely
High CVE-2017-0269 Windows SMB Server Denial of Service 7.0 0.0647 Exploitation Less Likely
High CVE-2017-0273 Windows SMB Server Denial of Service 8.1 0.0609 Exploitation Less Likely
Showing 1 to 14 of 14 1