Microsoft · Security update · May 9, 2017
KB4018556: May 2017 security update
KB4018556, released May 9, 2017, fixes 4 CVEs across 5 products. One of them is being exploited (CVE-2017-0213); 1 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.
Patch now1 on CISA KEVKnown ransomware useUnsupported product
CVEs closed
4
None rated Critical
Exploited
1
CVE-2017-0213
Exploitation more likely
1
Vendor assessment
Highest EPSS
0.8426
99th percentile
Priority of the 4 CVEs
Patch now 1
Urgent 1
High 1
Routine 1
Applies to
CVEs this fix closes
| Priority | CVE | Component | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Patch now | CVE-2017-0213 | Windows COM | Elevation of Privilege | 6.7 | 0.8426 | KEVRansomwareExploited |
| Urgent | CVE-2017-0214 | Windows COM | Elevation of Privilege | 6.7 | 0.0346 | More likely |
| High | CVE-2017-0244 | Microsoft Graphics Component | Elevation of Privilege | 7.0 | 0.0200 | N/A |
| Routine | CVE-2017-0258 | Windows Kernel | Information Disclosure | 4.7 | 0.0736 | Exploitation Less Likely |
Showing 1 to 4 of 4
1