Microsoft · Security update · July 11, 2017

KB4025331: July 2017 security update

KB4025331, released July 11, 2017, fixes 27 CVEs across 3 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent1 publicly disclosed
CVEs closed
27
4 rated Critical
Exploited
0
None reported
Exploitation more likely
17
Vendor assessment
Highest EPSS
0.5808
99th percentile

Priority of the 27 CVEs

Patch now 0 Urgent 17 High 3 Routine 7

Applies to

Product
Internet Explorer 10 on Windows Server 2012
Windows Server 2012
Windows Server 2012 (Server Core installation)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Urgent CVE-2017-8618 Internet Explorer Remote Code Execution 6.4 0.5808 More likely
Urgent CVE-2017-8589 Microsoft Windows Remote Code Execution n/a 0.2616 More likely
Urgent CVE-2017-8463 Windows Shell Remote Code Execution 6.3 0.2050 More likely
Urgent CVE-2017-8565 Microsoft PowerShell Remote Code Execution 7.5 0.1864 More likely
Urgent CVE-2017-8588 Microsoft WordPad Remote Code Execution 6.7 0.1721 More likely
Urgent CVE-2017-8606 Microsoft Scripting Engine Remote Code Execution 4.2 0.0939 More likely
Urgent CVE-2017-8607 Microsoft Scripting Engine Remote Code Execution 4.2 0.0939 More likely
Urgent CVE-2017-8563 Microsoft Windows Elevation of Privilege 7.5 0.0718 More likely
Urgent CVE-2017-8578 Microsoft Graphics Component Elevation of Privilege 7.0 0.0647 More likely
Urgent CVE-2017-8486 Windows Kernel-Mode Drivers Information Disclosure 4.7 0.0221 More likely
Urgent CVE-2017-8577 Microsoft Graphics Component Elevation of Privilege 7.0 0.0101 More likely
Urgent CVE-2017-8556 Microsoft Graphics Component Elevation of Privilege 7.0 0.0100 More likely
Urgent CVE-2017-8573 Microsoft Graphics Component Elevation of Privilege 7.0 0.0100 More likely
Urgent CVE-2017-8580 Microsoft Graphics Component Elevation of Privilege 7.0 0.0100 More likely
Urgent CVE-2017-8581 Windows Kernel-Mode Drivers Elevation of Privilege 7.0 0.0099 More likely
Urgent CVE-2017-8467 Windows Kernel-Mode Drivers Elevation of Privilege 7.0 0.0098 More likely
Urgent CVE-2017-8590 Microsoft Windows Elevation of Privilege 8.8 0.0097 More likely
High CVE-2017-8495 Kerberos Security Feature Bypass 7.5 0.0462 None reported
High CVE-2017-8562 Microsoft Windows Elevation of Privilege 7.0 0.0094 Exploitation Less Likely
High CVE-2017-8561 Windows Kernel Elevation of Privilege 7.0 0.0084 Exploitation Less Likely
Routine CVE-2017-8608 Microsoft Scripting Engine Remote Code Execution 6.4 0.0939 Exploitation Less Likely
Routine CVE-2017-8582 ASP .NET Information Disclosure 5.9 0.0829 Exploitation Unlikely
Routine CVE-2017-8592 Internet Explorer Security Feature Bypass 5.4 0.0802 Exploitation Unlikely
Routine CVE-2017-0170 Microsoft Windows Information Disclosure 5.5 0.0667 Exploitation Unlikely
Routine CVE-2017-8587 Microsoft NTFS Denial of Service 6.5 0.0595 DisclosedExploitation Unlikely
Showing 1 to 25 of 27 1Next