Microsoft · Security update · May 9, 2017

KB4019204: May 2017 security update

KB4019204, released May 9, 2017, fixes 3 CVEs across 5 products. One of them is being exploited (CVE-2017-0263); 1 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now1 on CISA KEVUnsupported product
CVEs closed
3
None rated Critical
Exploited
1
CVE-2017-0263
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.1003
95th percentile

Priority of the 3 CVEs

Patch now 1 Urgent 0 High 0 Routine 2

Applies to

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2017-0263 Windows Kernel-Mode Drivers Elevation of Privilege 7.8 0.1003 KEVExploited
Routine CVE-2017-0245 Microsoft Graphics Component Information Disclosure 4.7 0.0770 N/A
Routine CVE-2017-0246 Microsoft Graphics Component Denial of Service 4.7 0.0130 Exploitation Unlikely
Showing 1 to 3 of 3 1