Microsoft · Security update · June 13, 2017

KB4022715: June 2017 cumulative update for Windows 10 1607

KB4022715, released June 13, 2017, fixes 73 CVEs across 10 products. One of them is being exploited (CVE-2017-8464); 1 on CISA KEV. Patch Radar priority: Patch now.

Patch now1 on CISA KEV3 publicly disclosed
CVEs closed
73
13 rated Critical
Exploited
1
CVE-2017-8464
Exploitation more likely
19
Vendor assessment
Highest EPSS
0.9003
99th percentile

Priority of the 73 CVEs

Patch now 1 Urgent 24 High 5 Routine 43

Applies to

ProductBuild after install
Internet Explorer 11 on Windows 10 Version 1607 for 32-bit Systems14393.1358
Internet Explorer 11 on Windows 10 Version 1607 for x64-based Systems14393.1358
Internet Explorer 11 on Windows Server 201614393.1358
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for 32-bit Systems14393.1358
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for x64-based Systems14393.1358
Microsoft Edge (EdgeHTML-based) on Windows Server 201614393.1358
Windows 10 Version 1607 for 32-bit Systems14393.1358
Windows 10 Version 1607 for x64-based Systems14393.1358
Windows Server 201614393.1358
Windows Server 2016 (Server Core installation)14393.1358

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2017-8464 Windows Shell Remote Code Execution 7.5 0.9003 KEVExploited
Urgent CVE-2017-8548 Microsoft Scripting Engine Remote Code Execution 4.2 0.6759 More likely
Urgent CVE-2017-8496 Microsoft Edge Remote Code Execution 4.2 0.5147 More likely
Urgent CVE-2017-0283 Microsoft Uniscribe Remote Code Execution 8.8 0.3902 Exploitation Less Likely
Urgent CVE-2017-0292 Microsoft Windows PDF Remote Code Execution 3.6 0.2424 Exploitation Less Likely
Urgent CVE-2017-0291 Microsoft Windows PDF Remote Code Execution 3.6 0.2050 Exploitation Less Likely
Urgent CVE-2017-8527 Microsoft Graphics Component Remote Code Execution 8.8 0.1902 Exploitation Less Likely
Urgent CVE-2017-0294 Microsoft Windows Remote Code Execution 8.0 0.1738 Exploitation Less Likely
Urgent CVE-2016-3326 Microsoft Browsers Information Disclosure 2.4 0.1585 More likely
Urgent CVE-2017-8518 Microsoft Scripting Engine Remote Code Execution 4.2 0.1021 More likely
Urgent CVE-2017-8524 Microsoft Scripting Engine Remote Code Execution 4.2 0.0979 More likely
Urgent CVE-2017-8497 Microsoft Edge Remote Code Execution 4.2 0.0833 More likely
Urgent CVE-2017-8522 Microsoft Scripting Engine Remote Code Execution 7.5 0.0822 More likely
Urgent CVE-2017-8517 Microsoft Scripting Engine Remote Code Execution 6.4 0.0822 More likely
Urgent CVE-2017-8549 Microsoft Scripting Engine Remote Code Execution 4.2 0.0569 More likely
Urgent CVE-2017-8553 Microsoft Graphics Component Information Disclosure 4.7 0.0254 More likely
Urgent CVE-2017-8465 Windows Kernel-Mode Drivers Elevation of Privilege 7.0 0.0234 More likely
Urgent CVE-2017-8554 Microsoft Graphics Component Information Disclosure 4.7 0.0202 More likely
Urgent CVE-2017-0298 Windows COM Information Disclosure 6.6 0.0190 More likely
Urgent CVE-2017-8530 Microsoft Edge Security Feature Bypass 5.4 0.0165 DisclosedMore likely
Urgent CVE-2017-8523 Microsoft Edge Security Feature Bypass 4.3 0.0150 DisclosedMore likely
Urgent CVE-2017-0296 Microsoft Windows Elevation of Privilege 7.0 0.0132 More likely
Urgent CVE-2017-8468 Windows Kernel-Mode Drivers Elevation of Privilege 7.0 0.0126 More likely
Urgent CVE-2017-0295 Microsoft Windows Tampering 4.8 0.0124 More likely
Urgent CVE-2017-8466 Microsoft Graphics Component Elevation of Privilege 7.0 0.0108 More likely
Showing 1 to 25 of 73 1Next