Microsoft · Security update · September 12, 2017

KB4038782: September 2017 cumulative update for Windows 10 1607

KB4038782, released September 12, 2017, fixes 59 CVEs across 18 products. One of them is being exploited (CVE-2017-8759); 1 on CISA KEV. Patch Radar priority: Patch now.

Patch now1 on CISA KEV3 publicly disclosed
CVEs closed
59
20 rated Critical
Exploited
1
CVE-2017-8759
Exploitation more likely
20
Vendor assessment
Highest EPSS
0.8870
99th percentile

Priority of the 59 CVEs

Patch now 1 Urgent 26 High 11 Routine 21

Applies to

ProductBuild after install
Internet Explorer 11 on Windows 10 Version 1607 for 32-bit Systems14393.1715
Internet Explorer 11 on Windows 10 Version 1607 for x64-based Systems14393.1715
Internet Explorer 11 on Windows Server 201614393.1715
Microsoft .NET Framework 3.5 on Windows 10 Version 1607 for 32-bit Systems14393.1715
Microsoft .NET Framework 3.5 on Windows 10 Version 1607 for x64-based Systems14393.1715
Microsoft .NET Framework 3.5 on Windows Server 201614393.1715
Microsoft .NET Framework 3.5 on Windows Server 2016 (Server Core installation)14393.1715
Microsoft .NET Framework 4.6.2/4.7 on Windows 10 Version 1607 for 32-bit Systems14393.1715
Microsoft .NET Framework 4.6.2/4.7 on Windows 10 Version 1607 for x64-based Systems14393.1715
Microsoft .NET Framework 4.6.2/4.7 on Windows Server 201614393.1715
Microsoft .NET Framework 4.6.2/4.7 on Windows Server 2016 (Server Core installation)14393.1715
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for 32-bit Systems14393.1715
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for x64-based Systems14393.1715
Microsoft Edge (EdgeHTML-based) on Windows Server 201614393.1715
Windows 10 Version 1607 for 32-bit Systems14393.1715
Windows 10 Version 1607 for x64-based Systems14393.1715
Windows Server 201614393.1715
Windows Server 2016 (Server Core installation)14393.1715

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2017-8759 .NET Framework Remote Code Execution n/a 0.8870 KEVExploited
Urgent CVE-2017-8755 Microsoft Edge Remote Code Execution 4.2 0.7127 More likely
Urgent CVE-2017-11764 Microsoft Scripting Engine Remote Code Execution 4.2 0.6444 More likely
Urgent CVE-2017-8734 Microsoft Edge Remote Code Execution 4.2 0.5254 More likely
Urgent CVE-2017-8731 Microsoft Edge Remote Code Execution 4.2 0.5155 More likely
Urgent CVE-2017-8682 Microsoft Graphics Component Remote Code Execution 8.4 0.4977 N/A
Urgent CVE-2016-3238 Windows Print Spooler Components Remote Code Execution 8.8 0.3362 Exploitation Less Likely
Urgent CVE-2017-8686 Windows DHCP Server Remote Code Execution 9.8 0.2750 Exploitation Less Likely
Urgent CVE-2017-8728 Microsoft Windows PDF Remote Code Execution 4.2 0.2153 Exploitation Less Likely
Urgent CVE-2017-8737 Microsoft Windows PDF Remote Code Execution 2.6 0.2153 None reported
Urgent CVE-2017-8757 Microsoft Edge Remote Code Execution 4.2 0.1642 More likely
Urgent CVE-2017-8741 Microsoft Scripting Engine Remote Code Execution 4.2 0.1192 More likely
Urgent CVE-2017-8748 Microsoft Scripting Engine Remote Code Execution 4.2 0.1177 More likely
Urgent CVE-2017-0161 Windows NetBIOS Remote Code Execution 8.1 0.1123 Exploitation Unlikely
Urgent CVE-2017-8747 Internet Explorer Remote Code Execution 6.4 0.1080 More likely
Urgent CVE-2017-8749 Internet Explorer Remote Code Execution 6.4 0.1080 More likely
Urgent CVE-2017-8660 Microsoft Scripting Engine Remote Code Execution 4.2 0.1014 More likely
Urgent CVE-2017-8750 Microsoft Browsers Remote Code Execution 7.5 0.0896 More likely
Urgent CVE-2017-8752 Microsoft Scripting Engine Remote Code Execution 4.2 0.0889 More likely
Urgent CVE-2017-8738 Microsoft Scripting Engine Remote Code Execution 4.2 0.0872 More likely
Urgent CVE-2017-8753 Microsoft Scripting Engine Remote Code Execution 4.2 0.0872 More likely
Urgent CVE-2017-8756 Microsoft Edge Remote Code Execution 4.2 0.0872 More likely
Urgent CVE-2017-11766 Microsoft Edge Remote Code Execution 4.2 0.0864 More likely
Urgent CVE-2017-8649 Microsoft Scripting Engine Remote Code Execution 4.2 0.0860 More likely
Urgent CVE-2017-8643 Microsoft Edge Information Disclosure 2.4 0.0584 More likely
Showing 1 to 25 of 59 1Next