Microsoft · Security update · September 12, 2017

KB4038783: September 2017 cumulative update for Windows 10 1511

KB4038783, released September 12, 2017, fixes 49 CVEs across 10 products. One of them is being exploited (CVE-2017-8759); 1 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now1 on CISA KEV1 publicly disclosedUnsupported product
CVEs closed
49
16 rated Critical
Exploited
1
CVE-2017-8759
Exploitation more likely
17
Vendor assessment
Highest EPSS
0.8870
99th percentile

Priority of the 49 CVEs

Patch now 1 Urgent 22 High 7 Routine 19

Applies to

ProductBuild after install
Internet Explorer 11 on Windows 10 Version 1511 for 32-bit Systems10586.1106
Internet Explorer 11 on Windows 10 Version 1511 for x64-based Systems10586.1106
Microsoft .NET Framework 3.5 on Windows 10 Version 1511 for 32-bit Systems10586.1106
Microsoft .NET Framework 3.5 on Windows 10 Version 1511 for x64-based Systems10586.1106
Microsoft .NET Framework 4.6.1 on Windows 10 Version 1511 for 32-bit Systems10586.1106
Microsoft .NET Framework 4.6.1 on Windows 10 Version 1511 for x64-based Systems10586.1106
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1511 for 32-bit Systems10586.1106
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1511 for x64-based Systems10586.1106
Windows 10 Version 1511 for 32-bit Systems10586.1106
Windows 10 Version 1511 for x64-based Systems10586.1106

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2017-8759 .NET Framework Remote Code Execution n/a 0.8870 KEVExploited
Urgent CVE-2017-8755 Microsoft Edge Remote Code Execution 4.2 0.7127 More likely
Urgent CVE-2017-8734 Microsoft Edge Remote Code Execution 4.2 0.5254 More likely
Urgent CVE-2017-8682 Microsoft Graphics Component Remote Code Execution 8.4 0.4977 N/A
Urgent CVE-2016-3238 Windows Print Spooler Components Remote Code Execution 8.8 0.3362 Exploitation Less Likely
Urgent CVE-2017-8728 Microsoft Windows PDF Remote Code Execution 4.2 0.2153 Exploitation Less Likely
Urgent CVE-2017-8737 Microsoft Windows PDF Remote Code Execution 2.6 0.2153 None reported
Urgent CVE-2017-8757 Microsoft Edge Remote Code Execution 4.2 0.1642 More likely
Urgent CVE-2017-8741 Microsoft Scripting Engine Remote Code Execution 4.2 0.1192 More likely
Urgent CVE-2017-8748 Microsoft Scripting Engine Remote Code Execution 4.2 0.1177 More likely
Urgent CVE-2017-0161 Windows NetBIOS Remote Code Execution 8.1 0.1123 Exploitation Unlikely
Urgent CVE-2017-8747 Internet Explorer Remote Code Execution 6.4 0.1080 More likely
Urgent CVE-2017-8749 Internet Explorer Remote Code Execution 6.4 0.1080 More likely
Urgent CVE-2017-8660 Microsoft Scripting Engine Remote Code Execution 4.2 0.1014 More likely
Urgent CVE-2017-8750 Microsoft Browsers Remote Code Execution 7.5 0.0896 More likely
Urgent CVE-2017-8752 Microsoft Scripting Engine Remote Code Execution 4.2 0.0889 More likely
Urgent CVE-2017-8738 Microsoft Scripting Engine Remote Code Execution 4.2 0.0872 More likely
Urgent CVE-2017-8753 Microsoft Scripting Engine Remote Code Execution 4.2 0.0872 More likely
Urgent CVE-2017-8756 Microsoft Edge Remote Code Execution 4.2 0.0872 More likely
Urgent CVE-2017-11766 Microsoft Edge Remote Code Execution 4.2 0.0864 More likely
Urgent CVE-2017-8643 Microsoft Edge Information Disclosure 2.4 0.0584 More likely
Urgent CVE-2017-8599 Microsoft Edge Security Feature Bypass 6.5 0.0514 More likely
Urgent CVE-2017-8675 Windows Kernel-Mode Drivers Elevation of Privilege 7.0 0.0156 More likely
High CVE-2017-8695 Microsoft Graphics Component Information Disclosure 7.5 0.0964 Exploitation Less Likely
High CVE-2017-8713 Windows Hyper-V Information Disclosure 7.2 0.0348 Exploitation Less Likely
Showing 1 to 25 of 49 1Next