Microsoft · Security update · June 13, 2017

KB4022719: June 2017 security update

KB4022719, released June 13, 2017, fixes 52 CVEs across 8 products. 2 of them are being exploited (CVE-2017-8464); 2 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now2 on CISA KEV1 publicly disclosedUnsupported product
CVEs closed
52
7 rated Critical
Exploited
2
CVE-2017-8464
Exploitation more likely
6
Vendor assessment
Highest EPSS
0.9003
99th percentile

Priority of the 52 CVEs

Patch now 2 Urgent 10 High 4 Routine 36

Applies to

Product
Internet Explorer 11 on Windows 7 for 32-bit Systems Service Pack 1
Internet Explorer 11 on Windows 7 for x64-based Systems Service Pack 1
Internet Explorer 11 on Windows Server 2008 R2 for x64-based Systems Service Pack 1
Windows 7 for 32-bit Systems Service Pack 1
Windows 7 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2017-8464 Windows Shell Remote Code Execution 7.5 0.9003 KEVExploited
Patch now CVE-2017-8543 Microsoft Windows Remote Code Execution 8.1 0.7416 KEVExploited
Urgent CVE-2017-0283 Microsoft Uniscribe Remote Code Execution 8.8 0.3902 Exploitation Less Likely
Urgent CVE-2017-8528 Microsoft Uniscribe Remote Code Execution 8.8 0.1989 Exploitation Less Likely
Urgent CVE-2017-8527 Microsoft Graphics Component Remote Code Execution 8.8 0.1902 Exploitation Less Likely
Urgent CVE-2017-0294 Microsoft Windows Remote Code Execution 8.0 0.1738 Exploitation Less Likely
Urgent CVE-2016-3326 Microsoft Browsers Information Disclosure 2.4 0.1585 More likely
Urgent CVE-2017-8524 Microsoft Scripting Engine Remote Code Execution 4.2 0.0979 More likely
Urgent CVE-2017-8553 Microsoft Graphics Component Information Disclosure 4.7 0.0254 More likely
Urgent CVE-2017-8554 Microsoft Graphics Component Information Disclosure 4.7 0.0202 More likely
Urgent CVE-2017-0298 Windows COM Information Disclosure 6.6 0.0190 More likely
Urgent CVE-2017-0296 Microsoft Windows Elevation of Privilege 7.0 0.0132 More likely
High CVE-2017-0260 Microsoft Office Remote Code Execution n/a 0.1994 Exploitation Less Likely
High CVE-2017-0167 Windows Kernel-Mode Drivers Information Disclosure 7.3 0.0554 DisclosedExploitation Less Likely
High CVE-2017-0297 Windows Kernel Elevation of Privilege 7.0 0.0373 Exploitation Less Likely
High CVE-2017-0193 Windows Hyper-V Elevation of Privilege 7.8 0.0110 Exploitation Unlikely
Routine CVE-2017-8532 Microsoft Graphics Component Information Disclosure 4.4 0.0715 Exploitation Unlikely
Routine CVE-2017-8531 Microsoft Graphics Component Information Disclosure 4.4 0.0667 Exploitation Less Likely
Routine CVE-2017-8534 Microsoft Uniscribe Information Disclosure 4.4 0.0639 Exploitation Unlikely
Routine CVE-2017-8519 Internet Explorer Remote Code Execution 6.4 0.0612 Exploitation Unlikely
Routine CVE-2017-8547 Internet Explorer Information Disclosure 6.4 0.0612 Exploitation Less Likely
Routine CVE-2017-8477 Windows Kernel-Mode Drivers Information Disclosure 4.7 0.0511 Exploitation Less Likely
Routine CVE-2017-8483 Windows Kernel Information Disclosure 4.7 0.0511 Exploitation Less Likely
Routine CVE-2017-0300 Windows Kernel Information Disclosure 4.7 0.0496 Exploitation Less Likely
Routine CVE-2017-8490 Windows Kernel Information Disclosure 4.7 0.0487 Exploitation Less Likely
Showing 1 to 25 of 52 1Next