Microsoft · Security update · September 12, 2017

KB4038793: September 2017 security update

KB4038793, released September 12, 2017, fixes 27 CVEs across 4 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
27
6 rated Critical
Exploited
0
None reported
Exploitation more likely
1
Vendor assessment
Highest EPSS
0.4977
98th percentile

Priority of the 27 CVEs

Patch now 0 Urgent 7 High 5 Routine 15

Applies to

Product
Windows 8.1 for 32-bit systems
Windows 8.1 for x64-based systems
Windows Server 2012 R2
Windows Server 2012 R2 (Server Core installation)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Urgent CVE-2017-8682 Microsoft Graphics Component Remote Code Execution 8.4 0.4977 N/A
Urgent CVE-2016-3238 Windows Print Spooler Components Remote Code Execution 8.8 0.3362 Exploitation Less Likely
Urgent CVE-2017-8686 Windows DHCP Server Remote Code Execution 9.8 0.2750 Exploitation Less Likely
Urgent CVE-2017-8728 Microsoft Windows PDF Remote Code Execution 4.2 0.2153 Exploitation Less Likely
Urgent CVE-2017-8737 Microsoft Windows PDF Remote Code Execution 2.6 0.2153 None reported
Urgent CVE-2017-0161 Windows NetBIOS Remote Code Execution 8.1 0.1123 Exploitation Unlikely
Urgent CVE-2017-8675 Windows Kernel-Mode Drivers Elevation of Privilege 7.0 0.0156 More likely
High CVE-2017-8695 Microsoft Graphics Component Information Disclosure 7.5 0.0964 Exploitation Less Likely
High CVE-2017-8714 Windows Hyper-V Remote Code Execution 7.8 0.0377 Exploitation Less Likely
High CVE-2017-8713 Windows Hyper-V Information Disclosure 7.2 0.0348 Exploitation Less Likely
High CVE-2017-8707 Windows Hyper-V Information Disclosure 7.2 0.0242 Exploitation Less Likely
High CVE-2017-8720 Microsoft Graphics Component Elevation of Privilege 7.8 0.0164 Exploitation Less Likely
Routine CVE-2017-8683 Microsoft Graphics Component Information Disclosure 5.5 0.2255 Exploitation Less Likely
Routine CVE-2017-8699 Microsoft Windows Remote Code Execution 6.4 0.2130 Exploitation Less Likely
Routine CVE-2017-8692 Microsoft Uniscribe Remote Code Execution 5.0 0.1691 Exploitation Less Likely
Routine CVE-2017-8676 Microsoft Graphics Component Information Disclosure 3.3 0.1404 Exploitation Less Likely
Routine CVE-2017-8684 Microsoft Graphics Component Information Disclosure 5.5 0.0427 Exploitation Less Likely
Routine CVE-2017-8678 Windows Kernel-Mode Drivers Information Disclosure 5.5 0.0423 Exploitation Less Likely
Routine CVE-2017-8680 Windows Kernel-Mode Drivers Information Disclosure 5.5 0.0423 Exploitation Less Likely
Routine CVE-2017-8681 Windows Kernel-Mode Drivers Information Disclosure 5.5 0.0423 Exploitation Less Likely
Routine CVE-2017-8687 Windows Kernel-Mode Drivers Information Disclosure 5.5 0.0423 Exploitation Less Likely
Routine CVE-2017-8708 Windows Kernel Information Disclosure 4.7 0.0368 Exploitation Less Likely
Routine CVE-2017-8677 Windows Kernel-Mode Drivers Information Disclosure 5.5 0.0366 Exploitation Less Likely
Routine CVE-2017-8679 Windows Kernel Information Disclosure 5.5 0.0366 Exploitation Less Likely
Routine CVE-2017-8688 Microsoft Graphics Component Information Disclosure 5.5 0.0366 Exploitation Less Likely
Showing 1 to 25 of 27 1Next