Microsoft · Security update · September 12, 2017

KB4038777: September 2017 security update

KB4038777, released September 12, 2017, fixes 33 CVEs across 8 products. None of them is reported as exploited. Patch Radar priority: Urgent. The product is no longer supported.

UrgentUnsupported product
CVEs closed
33
6 rated Critical
Exploited
0
None reported
Exploitation more likely
6
Vendor assessment
Highest EPSS
0.4977
98th percentile

Priority of the 33 CVEs

Patch now 0 Urgent 10 High 4 Routine 19

Applies to

Product
Internet Explorer 11 on Windows 7 for 32-bit Systems Service Pack 1
Internet Explorer 11 on Windows 7 for x64-based Systems Service Pack 1
Internet Explorer 11 on Windows Server 2008 R2 for x64-based Systems Service Pack 1
Windows 7 for 32-bit Systems Service Pack 1
Windows 7 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Urgent CVE-2017-8682 Microsoft Graphics Component Remote Code Execution 8.4 0.4977 N/A
Urgent CVE-2016-3238 Windows Print Spooler Components Remote Code Execution 8.8 0.3362 Exploitation Less Likely
Urgent CVE-2017-8696 Microsoft Graphics Component Remote Code Execution 7.5 0.1426 Exploitation Less Likely
Urgent CVE-2017-8741 Microsoft Scripting Engine Remote Code Execution 4.2 0.1192 More likely
Urgent CVE-2017-8748 Microsoft Scripting Engine Remote Code Execution 4.2 0.1177 More likely
Urgent CVE-2017-0161 Windows NetBIOS Remote Code Execution 8.1 0.1123 Exploitation Unlikely
Urgent CVE-2017-8747 Internet Explorer Remote Code Execution 6.4 0.1080 More likely
Urgent CVE-2017-8749 Internet Explorer Remote Code Execution 6.4 0.1080 More likely
Urgent CVE-2017-8750 Microsoft Browsers Remote Code Execution 7.5 0.0896 More likely
Urgent CVE-2017-8675 Windows Kernel-Mode Drivers Elevation of Privilege 7.0 0.0156 More likely
High CVE-2017-8695 Microsoft Graphics Component Information Disclosure 7.5 0.0964 Exploitation Less Likely
High CVE-2017-8707 Windows Hyper-V Information Disclosure 7.2 0.0242 Exploitation Less Likely
High CVE-2017-8628 Microsoft Bluetooth Driver Spoofing 8.1 0.0231 Exploitation Less Likely
High CVE-2017-8720 Microsoft Graphics Component Elevation of Privilege 7.8 0.0164 Exploitation Less Likely
Routine CVE-2017-8683 Microsoft Graphics Component Information Disclosure 5.5 0.2255 Exploitation Less Likely
Routine CVE-2017-8699 Microsoft Windows Remote Code Execution 6.4 0.2130 Exploitation Less Likely
Routine CVE-2017-8529 Microsoft Browsers Information Disclosure 4.3 0.1420 Exploitation Less Likely
Routine CVE-2017-8676 Microsoft Graphics Component Information Disclosure 3.3 0.1404 Exploitation Less Likely
Routine CVE-2017-8710 Microsoft Windows Information Disclosure 4.4 0.1044 Exploitation Less Likely
Routine CVE-2017-8736 Microsoft Browsers Information Disclosure 2.4 0.0844 Exploitation Unlikely
Routine CVE-2017-8733 Internet Explorer Spoofing 2.4 0.0516 Exploitation Unlikely
Routine CVE-2017-8684 Microsoft Graphics Component Information Disclosure 5.5 0.0427 Exploitation Less Likely
Routine CVE-2017-8678 Windows Kernel-Mode Drivers Information Disclosure 5.5 0.0423 Exploitation Less Likely
Routine CVE-2017-8680 Windows Kernel-Mode Drivers Information Disclosure 5.5 0.0423 Exploitation Less Likely
Routine CVE-2017-8681 Windows Kernel-Mode Drivers Information Disclosure 5.5 0.0423 Exploitation Less Likely
Showing 1 to 25 of 33 1Next