Microsoft · Security update · July 11, 2017
KB4025342: July 2017 cumulative update for Windows 10 1703
KB4025342, released July 11, 2017, fixes 44 CVEs across 8 products. One of them is being exploited (CVE-2017-8543); 1 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.
Patch now1 on CISA KEV2 publicly disclosedUnsupported product
CVEs closed
44
14 rated Critical
Exploited
1
CVE-2017-8543
Exploitation more likely
29
Vendor assessment
Highest EPSS
0.7416
99th percentile
Priority of the 44 CVEs
Patch now 1
Urgent 29
High 6
Routine 8
Applies to
CVEs this fix closes
| Priority | CVE | Component | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Patch now | CVE-2017-8543 | Microsoft Windows | Remote Code Execution | 8.1 | 0.7416 | KEVExploited |
| Urgent | CVE-2017-8601 | Microsoft Scripting Engine | Remote Code Execution | 4.2 | 0.6691 | More likely |
| Urgent | CVE-2017-8618 | Internet Explorer | Remote Code Execution | 6.4 | 0.5808 | More likely |
| Urgent | CVE-2017-0071 | Microsoft Scripting Engine | Remote Code Execution | 4.2 | 0.3189 | More likely |
| Urgent | CVE-2017-8589 | Microsoft Windows | Remote Code Execution | n/a | 0.2616 | More likely |
| Urgent | CVE-2017-8463 | Windows Shell | Remote Code Execution | 6.3 | 0.2050 | More likely |
| Urgent | CVE-2017-8565 | Microsoft PowerShell | Remote Code Execution | 7.5 | 0.1864 | More likely |
| Urgent | CVE-2017-8588 | Microsoft WordPad | Remote Code Execution | 6.7 | 0.1721 | More likely |
| Urgent | CVE-2017-8619 | Microsoft Edge | Remote Code Execution | 4.2 | 0.1588 | More likely |
| Urgent | CVE-2017-8617 | Microsoft Edge | Remote Code Execution | 4.2 | 0.1100 | More likely |
| Urgent | CVE-2017-8606 | Microsoft Scripting Engine | Remote Code Execution | 4.2 | 0.0939 | More likely |
| Urgent | CVE-2017-8607 | Microsoft Scripting Engine | Remote Code Execution | 4.2 | 0.0939 | More likely |
| Urgent | CVE-2017-8605 | Microsoft Scripting Engine | Remote Code Execution | 3.1 | 0.0897 | More likely |
| Urgent | CVE-2017-8603 | Microsoft Scripting Engine | Remote Code Execution | 4.2 | 0.0889 | More likely |
| Urgent | CVE-2017-8604 | Microsoft Scripting Engine | Remote Code Execution | 4.2 | 0.0889 | More likely |
| Urgent | CVE-2017-8609 | Microsoft Scripting Engine | Remote Code Execution | 4.2 | 0.0889 | More likely |
| Urgent | CVE-2017-8610 | Microsoft Scripting Engine | Remote Code Execution | 4.2 | 0.0889 | More likely |
| Urgent | CVE-2017-8598 | Microsoft Scripting Engine | Remote Code Execution | 3.1 | 0.0889 | More likely |
| Urgent | CVE-2017-8563 | Microsoft Windows | Elevation of Privilege | 7.5 | 0.0718 | More likely |
| Urgent | CVE-2017-8578 | Microsoft Graphics Component | Elevation of Privilege | 7.0 | 0.0647 | More likely |
| Urgent | CVE-2017-8596 | Microsoft Edge | Remote Code Execution | 4.2 | 0.0623 | More likely |
| Urgent | CVE-2017-8486 | Windows Kernel-Mode Drivers | Information Disclosure | 4.7 | 0.0221 | More likely |
| Urgent | CVE-2017-8577 | Microsoft Graphics Component | Elevation of Privilege | 7.0 | 0.0101 | More likely |
| Urgent | CVE-2017-8556 | Microsoft Graphics Component | Elevation of Privilege | 7.0 | 0.0100 | More likely |
| Urgent | CVE-2017-8573 | Microsoft Graphics Component | Elevation of Privilege | 7.0 | 0.0100 | More likely |
Showing 1 to 25 of 44
1Next