Microsoft · Security update · July 11, 2017

KB4025336: July 2017 security update

KB4025336, released July 11, 2017, fixes 29 CVEs across 9 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent2 publicly disclosed
CVEs closed
29
5 rated Critical
Exploited
0
None reported
Exploitation more likely
18
Vendor assessment
Highest EPSS
0.5808
99th percentile

Priority of the 29 CVEs

Patch now 0 Urgent 18 High 3 Routine 8

Applies to

Product
Internet Explorer 11 on Windows 8.1 for 32-bit systems
Internet Explorer 11 on Windows 8.1 for x64-based systems
Internet Explorer 11 on Windows RT 8.1
Internet Explorer 11 on Windows Server 2012 R2
Windows 8.1 for 32-bit systems
Windows 8.1 for x64-based systems
Windows RT 8.1
Windows Server 2012 R2
Windows Server 2012 R2 (Server Core installation)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Urgent CVE-2017-8618 Internet Explorer Remote Code Execution 6.4 0.5808 More likely
Urgent CVE-2017-8594 Internet Explorer Remote Code Execution 7.5 0.5037 More likely
Urgent CVE-2017-8589 Microsoft Windows Remote Code Execution n/a 0.2616 More likely
Urgent CVE-2017-8463 Windows Shell Remote Code Execution 6.3 0.2050 More likely
Urgent CVE-2017-8565 Microsoft PowerShell Remote Code Execution 7.5 0.1864 More likely
Urgent CVE-2017-8588 Microsoft WordPad Remote Code Execution 6.7 0.1721 More likely
Urgent CVE-2017-8606 Microsoft Scripting Engine Remote Code Execution 4.2 0.0939 More likely
Urgent CVE-2017-8607 Microsoft Scripting Engine Remote Code Execution 4.2 0.0939 More likely
Urgent CVE-2017-8563 Microsoft Windows Elevation of Privilege 7.5 0.0718 More likely
Urgent CVE-2017-8578 Microsoft Graphics Component Elevation of Privilege 7.0 0.0647 More likely
Urgent CVE-2017-8486 Windows Kernel-Mode Drivers Information Disclosure 4.7 0.0221 More likely
Urgent CVE-2017-8577 Microsoft Graphics Component Elevation of Privilege 7.0 0.0101 More likely
Urgent CVE-2017-8556 Microsoft Graphics Component Elevation of Privilege 7.0 0.0100 More likely
Urgent CVE-2017-8573 Microsoft Graphics Component Elevation of Privilege 7.0 0.0100 More likely
Urgent CVE-2017-8580 Microsoft Graphics Component Elevation of Privilege 7.0 0.0100 More likely
Urgent CVE-2017-8581 Windows Kernel-Mode Drivers Elevation of Privilege 7.0 0.0099 More likely
Urgent CVE-2017-8467 Windows Kernel-Mode Drivers Elevation of Privilege 7.0 0.0098 More likely
Urgent CVE-2017-8590 Microsoft Windows Elevation of Privilege 8.8 0.0097 More likely
High CVE-2017-8495 Kerberos Security Feature Bypass 7.5 0.0462 None reported
High CVE-2017-8562 Microsoft Windows Elevation of Privilege 7.0 0.0094 Exploitation Less Likely
High CVE-2017-8561 Windows Kernel Elevation of Privilege 7.0 0.0084 Exploitation Less Likely
Routine CVE-2017-8608 Microsoft Scripting Engine Remote Code Execution 6.4 0.0939 Exploitation Less Likely
Routine CVE-2017-8582 ASP .NET Information Disclosure 5.9 0.0829 Exploitation Unlikely
Routine CVE-2017-8592 Internet Explorer Security Feature Bypass 5.4 0.0802 Exploitation Unlikely
Routine CVE-2017-0170 Microsoft Windows Information Disclosure 5.5 0.0667 Exploitation Unlikely
Showing 1 to 25 of 29 1Next