Microsoft · Security update · September 12, 2017
KB4036586: September 2017 security update
KB4036586, released September 12, 2017, fixes 8 CVEs across 9 products. None of them is reported as exploited. Patch Radar priority: Urgent. The product is no longer supported.
UrgentUnsupported product
CVEs closed
8
2 rated Critical
Exploited
0
None reported
Exploitation more likely
5
Vendor assessment
Highest EPSS
0.1420
96th percentile
Priority of the 8 CVEs
Patch now 0
Urgent 5
High 0
Routine 3
Applies to
CVEs this fix closes
| Priority | CVE | Component | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Urgent | CVE-2017-8741 | Microsoft Scripting Engine | Remote Code Execution | 4.2 | 0.1192 | More likely |
| Urgent | CVE-2017-8748 | Microsoft Scripting Engine | Remote Code Execution | 4.2 | 0.1177 | More likely |
| Urgent | CVE-2017-8747 | Internet Explorer | Remote Code Execution | 6.4 | 0.1080 | More likely |
| Urgent | CVE-2017-8749 | Internet Explorer | Remote Code Execution | 6.4 | 0.1080 | More likely |
| Urgent | CVE-2017-8750 | Microsoft Browsers | Remote Code Execution | 7.5 | 0.0896 | More likely |
| Routine | CVE-2017-8529 | Microsoft Browsers | Information Disclosure | 4.3 | 0.1420 | Exploitation Less Likely |
| Routine | CVE-2017-8736 | Microsoft Browsers | Information Disclosure | 2.4 | 0.0844 | Exploitation Unlikely |
| Routine | CVE-2017-8733 | Internet Explorer | Spoofing | 2.4 | 0.0516 | Exploitation Unlikely |
Showing 1 to 8 of 8
1