Microsoft · Security update · June 13, 2017

KB4022725: June 2017 cumulative update for Windows 10 1703

KB4022725, released June 13, 2017, fixes 62 CVEs across 6 products. One of them is being exploited (CVE-2017-8464); 1 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now1 on CISA KEV3 publicly disclosedUnsupported product
CVEs closed
62
13 rated Critical
Exploited
1
CVE-2017-8464
Exploitation more likely
15
Vendor assessment
Highest EPSS
0.9003
99th percentile

Priority of the 62 CVEs

Patch now 1 Urgent 21 High 3 Routine 37

Applies to

Product
Internet Explorer 11 on Windows 10 Version 1703 for 32-bit Systems
Internet Explorer 11 on Windows 10 Version 1703 for x64-based Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1703 for 32-bit Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1703 for x64-based Systems
Windows 10 Version 1703 for 32-bit Systems
Windows 10 Version 1703 for x64-based Systems

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2017-8464 Windows Shell Remote Code Execution 7.5 0.9003 KEVExploited
Urgent CVE-2017-8548 Microsoft Scripting Engine Remote Code Execution 4.2 0.6759 More likely
Urgent CVE-2017-0283 Microsoft Uniscribe Remote Code Execution 8.8 0.3902 Exploitation Less Likely
Urgent CVE-2017-0292 Microsoft Windows PDF Remote Code Execution 3.6 0.2424 Exploitation Less Likely
Urgent CVE-2017-0291 Microsoft Windows PDF Remote Code Execution 3.6 0.2050 Exploitation Less Likely
Urgent CVE-2017-8527 Microsoft Graphics Component Remote Code Execution 8.8 0.1902 Exploitation Less Likely
Urgent CVE-2017-0294 Microsoft Windows Remote Code Execution 8.0 0.1738 Exploitation Less Likely
Urgent CVE-2017-8518 Microsoft Scripting Engine Remote Code Execution 4.2 0.1021 More likely
Urgent CVE-2017-8524 Microsoft Scripting Engine Remote Code Execution 4.2 0.0979 More likely
Urgent CVE-2017-8499 Microsoft Scripting Engine Remote Code Execution 4.2 0.0860 More likely
Urgent CVE-2017-8520 Microsoft Scripting Engine Remote Code Execution 4.2 0.0860 Exploitation Less Likely
Urgent CVE-2017-8522 Microsoft Scripting Engine Remote Code Execution 7.5 0.0822 More likely
Urgent CVE-2017-8517 Microsoft Scripting Engine Remote Code Execution 6.4 0.0822 More likely
Urgent CVE-2017-8521 Microsoft Scripting Engine Remote Code Execution 4.2 0.0623 More likely
Urgent CVE-2017-8549 Microsoft Scripting Engine Remote Code Execution 4.2 0.0569 More likely
Urgent CVE-2017-8465 Windows Kernel-Mode Drivers Elevation of Privilege 7.0 0.0234 More likely
Urgent CVE-2017-8554 Microsoft Graphics Component Information Disclosure 4.7 0.0202 More likely
Urgent CVE-2017-0298 Windows COM Information Disclosure 6.6 0.0190 More likely
Urgent CVE-2017-8530 Microsoft Edge Security Feature Bypass 5.4 0.0165 DisclosedMore likely
Urgent CVE-2017-8523 Microsoft Edge Security Feature Bypass 4.3 0.0150 DisclosedMore likely
Urgent CVE-2017-0296 Microsoft Windows Elevation of Privilege 7.0 0.0132 More likely
Urgent CVE-2017-0295 Microsoft Windows Tampering 4.8 0.0124 More likely
High CVE-2017-0297 Windows Kernel Elevation of Privilege 7.0 0.0373 Exploitation Less Likely
High CVE-2017-8576 Microsoft Graphics Component Elevation of Privilege 7.0 0.0125 None reported
High CVE-2017-8579 Microsoft Graphics Component Elevation of Privilege 7.0 0.0116 None reported
Showing 1 to 25 of 62 1Next