Microsoft · Security update · June 13, 2017

KB4022727: June 2017 cumulative update for Windows 10 1507

KB4022727, released June 13, 2017, fixes 64 CVEs across 6 products. 2 of them are being exploited (CVE-2017-8464); 2 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now2 on CISA KEV2 publicly disclosedUnsupported product
CVEs closed
64
12 rated Critical
Exploited
2
CVE-2017-8464
Exploitation more likely
15
Vendor assessment
Highest EPSS
0.9003
99th percentile

Priority of the 64 CVEs

Patch now 2 Urgent 20 High 5 Routine 37

Applies to

ProductBuild after install
Internet Explorer 11 on Windows 10 for 32-bit Systems10240.17443
Internet Explorer 11 on Windows 10 for x64-based Systems10240.17443
Microsoft Edge (EdgeHTML-based) on Windows 10 for 32-bit Systems10240.17443
Microsoft Edge (EdgeHTML-based) on Windows 10 for x64-based Systems10240.17443
Windows 10 for 32-bit Systems10240.17443
Windows 10 for x64-based Systems10240.17443

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2017-8464 Windows Shell Remote Code Execution 7.5 0.9003 KEVExploited
Patch now CVE-2017-8543 Microsoft Windows Remote Code Execution 8.1 0.7416 KEVExploited
Urgent CVE-2017-8548 Microsoft Scripting Engine Remote Code Execution 4.2 0.6759 More likely
Urgent CVE-2017-0283 Microsoft Uniscribe Remote Code Execution 8.8 0.3902 Exploitation Less Likely
Urgent CVE-2017-0292 Microsoft Windows PDF Remote Code Execution 3.6 0.2424 Exploitation Less Likely
Urgent CVE-2017-0291 Microsoft Windows PDF Remote Code Execution 3.6 0.2050 Exploitation Less Likely
Urgent CVE-2017-8527 Microsoft Graphics Component Remote Code Execution 8.8 0.1902 Exploitation Less Likely
Urgent CVE-2017-0294 Microsoft Windows Remote Code Execution 8.0 0.1738 Exploitation Less Likely
Urgent CVE-2016-3326 Microsoft Browsers Information Disclosure 2.4 0.1585 More likely
Urgent CVE-2017-8518 Microsoft Scripting Engine Remote Code Execution 4.2 0.1021 More likely
Urgent CVE-2017-8524 Microsoft Scripting Engine Remote Code Execution 4.2 0.0979 More likely
Urgent CVE-2017-8522 Microsoft Scripting Engine Remote Code Execution 7.5 0.0822 More likely
Urgent CVE-2017-8517 Microsoft Scripting Engine Remote Code Execution 6.4 0.0822 More likely
Urgent CVE-2017-8549 Microsoft Scripting Engine Remote Code Execution 4.2 0.0569 More likely
Urgent CVE-2017-8465 Windows Kernel-Mode Drivers Elevation of Privilege 7.0 0.0234 More likely
Urgent CVE-2017-8554 Microsoft Graphics Component Information Disclosure 4.7 0.0202 More likely
Urgent CVE-2017-0298 Windows COM Information Disclosure 6.6 0.0190 More likely
Urgent CVE-2017-8530 Microsoft Edge Security Feature Bypass 5.4 0.0165 DisclosedMore likely
Urgent CVE-2017-8523 Microsoft Edge Security Feature Bypass 4.3 0.0150 DisclosedMore likely
Urgent CVE-2017-0296 Microsoft Windows Elevation of Privilege 7.0 0.0132 More likely
Urgent CVE-2017-8468 Windows Kernel-Mode Drivers Elevation of Privilege 7.0 0.0126 More likely
Urgent CVE-2017-8466 Microsoft Graphics Component Elevation of Privilege 7.0 0.0108 More likely
High CVE-2017-0297 Windows Kernel Elevation of Privilege 7.0 0.0373 Exploitation Less Likely
High CVE-2017-8494 Microsoft Windows Elevation of Privilege 7.0 0.0195 Exploitation Less Likely
High CVE-2017-8576 Microsoft Graphics Component Elevation of Privilege 7.0 0.0125 None reported
Showing 1 to 25 of 64 1Next