Microsoft · Security update · August 8, 2017

KB4034665: August 2017 security update

KB4034665, released August 8, 2017, fixes 16 CVEs across 3 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent1 publicly disclosed
CVEs closed
16
6 rated Critical
Exploited
0
None reported
Exploitation more likely
9
Vendor assessment
Highest EPSS
0.7212
99th percentile

Priority of the 16 CVEs

Patch now 0 Urgent 11 High 1 Routine 4

Applies to

Product
Internet Explorer 10 on Windows Server 2012
Windows Server 2012
Windows Server 2012 (Server Core installation)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Urgent CVE-2017-8636 Microsoft Scripting Engine Remote Code Execution 4.2 0.7212 More likely
Urgent CVE-2017-8641 Microsoft Scripting Engine Remote Code Execution 4.2 0.7161 More likely
Urgent CVE-2017-8620 Microsoft Windows Search Component Remote Code Execution 8.1 0.5733 More likely
Urgent CVE-2017-8635 Microsoft Scripting Engine Remote Code Execution 4.2 0.5588 More likely
Urgent CVE-2017-0293 Microsoft Windows PDF Remote Code Execution 3.6 0.1442 Exploitation Less Likely
Urgent CVE-2017-8653 Internet Explorer Remote Code Execution 3.1 0.0918 More likely
Urgent CVE-2017-8591 Windows Shell Remote Code Execution 8.8 0.0397 Exploitation Less Likely
Urgent CVE-2017-8633 Microsoft Windows Elevation of Privilege 7.5 0.0389 DisclosedMore likely
Urgent CVE-2017-8666 Windows Kernel-Mode Drivers Information Disclosure 7.0 0.0232 More likely
Urgent CVE-2017-8624 Common Log File System Driver Elevation of Privilege 8.8 0.0130 More likely
Urgent CVE-2017-8593 Windows Kernel-Mode Drivers Elevation of Privilege 7.0 0.0103 More likely
High CVE-2017-8664 Windows Hyper-V Remote Code Execution 7.8 0.0397 Exploitation Less Likely
Routine CVE-2017-8651 Internet Explorer Remote Code Execution 3.1 0.0571 N/A
Routine CVE-2017-0299 Windows Kernel Information Disclosure 4.7 0.0479 Exploitation Less Likely
Routine CVE-2017-0174 Microsoft Windows Denial of Service 6.5 0.0258 Exploitation Less Likely
Routine CVE-2017-8668 Volume Manager Driver Information Disclosure 4.7 0.0243 Exploitation Less Likely
Showing 1 to 16 of 16 1