Microsoft · Security update · July 11, 2017

KB4025343: July 2017 security update

KB4025343, released July 11, 2017, fixes 23 CVEs across 2 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent1 publicly disclosed
CVEs closed
23
2 rated Critical
Exploited
0
None reported
Exploitation more likely
14
Vendor assessment
Highest EPSS
0.2616
98th percentile

Priority of the 23 CVEs

Patch now 0 Urgent 14 High 3 Routine 6

Applies to

Product
Windows Server 2012
Windows Server 2012 (Server Core installation)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Urgent CVE-2017-8589 Microsoft Windows Remote Code Execution n/a 0.2616 More likely
Urgent CVE-2017-8463 Windows Shell Remote Code Execution 6.3 0.2050 More likely
Urgent CVE-2017-8565 Microsoft PowerShell Remote Code Execution 7.5 0.1864 More likely
Urgent CVE-2017-8588 Microsoft WordPad Remote Code Execution 6.7 0.1721 More likely
Urgent CVE-2017-8563 Microsoft Windows Elevation of Privilege 7.5 0.0718 More likely
Urgent CVE-2017-8578 Microsoft Graphics Component Elevation of Privilege 7.0 0.0647 More likely
Urgent CVE-2017-8486 Windows Kernel-Mode Drivers Information Disclosure 4.7 0.0221 More likely
Urgent CVE-2017-8577 Microsoft Graphics Component Elevation of Privilege 7.0 0.0101 More likely
Urgent CVE-2017-8556 Microsoft Graphics Component Elevation of Privilege 7.0 0.0100 More likely
Urgent CVE-2017-8573 Microsoft Graphics Component Elevation of Privilege 7.0 0.0100 More likely
Urgent CVE-2017-8580 Microsoft Graphics Component Elevation of Privilege 7.0 0.0100 More likely
Urgent CVE-2017-8581 Windows Kernel-Mode Drivers Elevation of Privilege 7.0 0.0099 More likely
Urgent CVE-2017-8467 Windows Kernel-Mode Drivers Elevation of Privilege 7.0 0.0098 More likely
Urgent CVE-2017-8590 Microsoft Windows Elevation of Privilege 8.8 0.0097 More likely
High CVE-2017-8495 Kerberos Security Feature Bypass 7.5 0.0462 None reported
High CVE-2017-8562 Microsoft Windows Elevation of Privilege 7.0 0.0094 Exploitation Less Likely
High CVE-2017-8561 Windows Kernel Elevation of Privilege 7.0 0.0084 Exploitation Less Likely
Routine CVE-2017-8582 ASP .NET Information Disclosure 5.9 0.0829 Exploitation Unlikely
Routine CVE-2017-8592 Internet Explorer Security Feature Bypass 5.4 0.0802 Exploitation Unlikely
Routine CVE-2017-0170 Microsoft Windows Information Disclosure 5.5 0.0667 Exploitation Unlikely
Routine CVE-2017-8587 Microsoft NTFS Denial of Service 6.5 0.0595 DisclosedExploitation Unlikely
Routine CVE-2017-8564 Windows Kernel Information Disclosure 4.7 0.0302 Exploitation Unlikely
Routine CVE-2017-8557 Microsoft Windows Information Disclosure 5.5 0.0154 Exploitation Less Likely
Showing 1 to 23 of 23 1