Microsoft · Security update · May 9, 2017

KB4019263: May 2017 security update

KB4019263, released May 9, 2017, fixes 27 CVEs across 5 products. 2 of them are being exploited (CVE-2017-0213); 2 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now2 on CISA KEVKnown ransomware useUnsupported product
CVEs closed
27
4 rated Critical
Exploited
2
CVE-2017-0213
Exploitation more likely
2
Vendor assessment
Highest EPSS
0.8426
99th percentile

Priority of the 27 CVEs

Patch now 2 Urgent 6 High 11 Routine 8

Applies to

Product
Windows 7 for 32-bit Systems Service Pack 1
Windows 7 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2017-0213 Windows COM Elevation of Privilege 6.7 0.8426 KEVRansomwareExploited
Patch now CVE-2017-0263 Windows Kernel-Mode Drivers Elevation of Privilege 7.8 0.1003 KEVExploited
Urgent CVE-2017-0272 Windows SMB Server Remote Code Execution 8.1 0.1712 Exploitation Less Likely
Urgent CVE-2017-0277 Windows SMB Server Remote Code Execution 7.0 0.1085 Exploitation Less Likely
Urgent CVE-2017-0278 Windows SMB Server Remote Code Execution 7.0 0.1085 Exploitation Less Likely
Urgent CVE-2017-0279 Windows SMB Server Remote Code Execution 7.0 0.1085 Exploitation Less Likely
Urgent CVE-2017-0214 Windows COM Elevation of Privilege 6.7 0.0346 More likely
Urgent CVE-2017-0077 Microsoft Graphics Component Denial of Service 4.7 0.0154 More likely
High CVE-2017-0271 Windows SMB Server Information Disclosure 7.0 0.1327 Exploitation Less Likely
High CVE-2017-0267 Windows SMB Server Information Disclosure 7.0 0.1268 Exploitation Less Likely
High CVE-2017-0275 Windows SMB Server Information Disclosure 7.0 0.0761 Exploitation Less Likely
High CVE-2017-0268 Windows SMB Server Information Disclosure 7.0 0.0724 Exploitation Less Likely
High CVE-2017-0270 Windows SMB Server Information Disclosure 7.0 0.0724 Exploitation Less Likely
High CVE-2017-0276 Windows SMB Server Information Disclosure 7.0 0.0724 Exploitation Less Likely
High CVE-2017-0280 Windows SMB Server Denial of Service 7.0 0.0717 Exploitation Less Likely
High CVE-2017-0274 Windows SMB Server Information Disclosure 7.0 0.0704 Exploitation Less Likely
High CVE-2017-0269 Windows SMB Server Denial of Service 7.0 0.0647 Exploitation Less Likely
High CVE-2017-0273 Windows SMB Server Denial of Service 8.1 0.0609 Exploitation Less Likely
High CVE-2017-0244 Microsoft Graphics Component Elevation of Privilege 7.0 0.0200 N/A
Routine CVE-2017-0190 Microsoft Graphics Component Information Disclosure 4.2 0.4346 Exploitation Unlikely
Routine CVE-2017-0242 Microsoft ActiveX Information Disclosure 4.2 0.0794 Exploitation Less Likely
Routine CVE-2017-0245 Microsoft Graphics Component Information Disclosure 4.7 0.0770 N/A
Routine CVE-2017-0220 Windows Kernel Information Disclosure 4.7 0.0746 N/A
Routine CVE-2017-0258 Windows Kernel Information Disclosure 4.7 0.0736 Exploitation Less Likely
Routine CVE-2017-0175 Windows Kernel Information Disclosure 4.7 0.0705 N/A
Showing 1 to 25 of 27 1Next