Microsoft · Security update · June 13, 2017

KB4022726: June 2017 security update

KB4022726, released June 13, 2017, fixes 58 CVEs across 9 products. 2 of them are being exploited (CVE-2017-8464); 2 on CISA KEV. Patch Radar priority: Patch now.

Patch now2 on CISA KEV
CVEs closed
58
10 rated Critical
Exploited
2
CVE-2017-8464
Exploitation more likely
11
Vendor assessment
Highest EPSS
0.9003
99th percentile

Priority of the 58 CVEs

Patch now 2 Urgent 17 High 2 Routine 37

Applies to

Product
Internet Explorer 11 on Windows 8.1 for 32-bit systems
Internet Explorer 11 on Windows 8.1 for x64-based systems
Internet Explorer 11 on Windows RT 8.1
Internet Explorer 11 on Windows Server 2012 R2
Windows 8.1 for 32-bit systems
Windows 8.1 for x64-based systems
Windows RT 8.1
Windows Server 2012 R2
Windows Server 2012 R2 (Server Core installation)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2017-8464 Windows Shell Remote Code Execution 7.5 0.9003 KEVExploited
Patch now CVE-2017-8543 Microsoft Windows Remote Code Execution 8.1 0.7416 KEVExploited
Urgent CVE-2017-0283 Microsoft Uniscribe Remote Code Execution 8.8 0.3902 Exploitation Less Likely
Urgent CVE-2017-0292 Microsoft Windows PDF Remote Code Execution 3.6 0.2424 Exploitation Less Likely
Urgent CVE-2017-0291 Microsoft Windows PDF Remote Code Execution 3.6 0.2050 Exploitation Less Likely
Urgent CVE-2017-8528 Microsoft Uniscribe Remote Code Execution 8.8 0.1989 Exploitation Less Likely
Urgent CVE-2017-8527 Microsoft Graphics Component Remote Code Execution 8.8 0.1902 Exploitation Less Likely
Urgent CVE-2017-0294 Microsoft Windows Remote Code Execution 8.0 0.1738 Exploitation Less Likely
Urgent CVE-2016-3326 Microsoft Browsers Information Disclosure 2.4 0.1585 More likely
Urgent CVE-2017-8524 Microsoft Scripting Engine Remote Code Execution 4.2 0.0979 More likely
Urgent CVE-2017-8522 Microsoft Scripting Engine Remote Code Execution 7.5 0.0822 More likely
Urgent CVE-2017-8517 Microsoft Scripting Engine Remote Code Execution 6.4 0.0822 More likely
Urgent CVE-2017-8553 Microsoft Graphics Component Information Disclosure 4.7 0.0254 More likely
Urgent CVE-2017-8465 Windows Kernel-Mode Drivers Elevation of Privilege 7.0 0.0234 More likely
Urgent CVE-2017-8554 Microsoft Graphics Component Information Disclosure 4.7 0.0202 More likely
Urgent CVE-2017-0298 Windows COM Information Disclosure 6.6 0.0190 More likely
Urgent CVE-2017-0296 Microsoft Windows Elevation of Privilege 7.0 0.0132 More likely
Urgent CVE-2017-8468 Windows Kernel-Mode Drivers Elevation of Privilege 7.0 0.0126 More likely
Urgent CVE-2017-8466 Microsoft Graphics Component Elevation of Privilege 7.0 0.0108 More likely
High CVE-2017-0297 Windows Kernel Elevation of Privilege 7.0 0.0373 Exploitation Less Likely
High CVE-2017-0193 Windows Hyper-V Elevation of Privilege 7.8 0.0110 Exploitation Unlikely
Routine CVE-2017-8533 Microsoft Graphics Component Information Disclosure 4.4 0.0780 Exploitation Unlikely
Routine CVE-2017-8532 Microsoft Graphics Component Information Disclosure 4.4 0.0715 Exploitation Unlikely
Routine CVE-2017-8531 Microsoft Graphics Component Information Disclosure 4.4 0.0667 Exploitation Less Likely
Routine CVE-2017-8519 Internet Explorer Remote Code Execution 6.4 0.0612 Exploitation Unlikely
Showing 1 to 25 of 58 1Next