Microsoft · Security update · May 9, 2017

KB4019214: May 2017 security update

KB4019214, released May 9, 2017, fixes 24 CVEs across 2 products. 2 of them are being exploited (CVE-2017-0213); 2 on CISA KEV. Patch Radar priority: Patch now.

Patch now2 on CISA KEVKnown ransomware use
CVEs closed
24
4 rated Critical
Exploited
2
CVE-2017-0213
Exploitation more likely
2
Vendor assessment
Highest EPSS
0.8426
99th percentile

Priority of the 24 CVEs

Patch now 2 Urgent 6 High 10 Routine 6

Applies to

Product
Windows Server 2012
Windows Server 2012 (Server Core installation)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2017-0213 Windows COM Elevation of Privilege 6.7 0.8426 KEVRansomwareExploited
Patch now CVE-2017-0263 Windows Kernel-Mode Drivers Elevation of Privilege 7.8 0.1003 KEVExploited
Urgent CVE-2017-0272 Windows SMB Server Remote Code Execution 8.1 0.1712 Exploitation Less Likely
Urgent CVE-2017-0277 Windows SMB Server Remote Code Execution 7.0 0.1085 Exploitation Less Likely
Urgent CVE-2017-0278 Windows SMB Server Remote Code Execution 7.0 0.1085 Exploitation Less Likely
Urgent CVE-2017-0279 Windows SMB Server Remote Code Execution 7.0 0.1085 Exploitation Less Likely
Urgent CVE-2017-0214 Windows COM Elevation of Privilege 6.7 0.0346 More likely
Urgent CVE-2017-0077 Microsoft Graphics Component Denial of Service 4.7 0.0154 More likely
High CVE-2017-0271 Windows SMB Server Information Disclosure 7.0 0.1327 Exploitation Less Likely
High CVE-2017-0267 Windows SMB Server Information Disclosure 7.0 0.1268 Exploitation Less Likely
High CVE-2017-0275 Windows SMB Server Information Disclosure 7.0 0.0761 Exploitation Less Likely
High CVE-2017-0268 Windows SMB Server Information Disclosure 7.0 0.0724 Exploitation Less Likely
High CVE-2017-0270 Windows SMB Server Information Disclosure 7.0 0.0724 Exploitation Less Likely
High CVE-2017-0276 Windows SMB Server Information Disclosure 7.0 0.0724 Exploitation Less Likely
High CVE-2017-0280 Windows SMB Server Denial of Service 7.0 0.0717 Exploitation Less Likely
High CVE-2017-0274 Windows SMB Server Information Disclosure 7.0 0.0704 Exploitation Less Likely
High CVE-2017-0269 Windows SMB Server Denial of Service 7.0 0.0647 Exploitation Less Likely
High CVE-2017-0273 Windows SMB Server Denial of Service 8.1 0.0609 Exploitation Less Likely
Routine CVE-2017-0190 Microsoft Graphics Component Information Disclosure 4.2 0.4346 Exploitation Unlikely
Routine CVE-2017-0245 Microsoft Graphics Component Information Disclosure 4.7 0.0770 N/A
Routine CVE-2017-0220 Windows Kernel Information Disclosure 4.7 0.0746 N/A
Routine CVE-2017-0258 Windows Kernel Information Disclosure 4.7 0.0736 Exploitation Less Likely
Routine CVE-2017-0171 Microsoft Windows DNS Denial of Service 5.3 0.0406 Exploitation Unlikely
Routine CVE-2017-0246 Microsoft Graphics Component Denial of Service 4.7 0.0130 Exploitation Unlikely
Showing 1 to 24 of 24 1