Microsoft · Security update · September 12, 2017

KB4038799: September 2017 security update

KB4038799, released September 12, 2017, fixes 32 CVEs across 3 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
32
7 rated Critical
Exploited
0
None reported
Exploitation more likely
4
Vendor assessment
Highest EPSS
0.4977
98th percentile

Priority of the 32 CVEs

Patch now 0 Urgent 10 High 5 Routine 17

Applies to

Product
Internet Explorer 10 on Windows Server 2012
Windows Server 2012
Windows Server 2012 (Server Core installation)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Urgent CVE-2017-8682 Microsoft Graphics Component Remote Code Execution 8.4 0.4977 N/A
Urgent CVE-2016-3238 Windows Print Spooler Components Remote Code Execution 8.8 0.3362 Exploitation Less Likely
Urgent CVE-2017-8686 Windows DHCP Server Remote Code Execution 9.8 0.2750 Exploitation Less Likely
Urgent CVE-2017-8728 Microsoft Windows PDF Remote Code Execution 4.2 0.2153 Exploitation Less Likely
Urgent CVE-2017-8737 Microsoft Windows PDF Remote Code Execution 2.6 0.2153 None reported
Urgent CVE-2017-8741 Microsoft Scripting Engine Remote Code Execution 4.2 0.1192 More likely
Urgent CVE-2017-0161 Windows NetBIOS Remote Code Execution 8.1 0.1123 Exploitation Unlikely
Urgent CVE-2017-8747 Internet Explorer Remote Code Execution 6.4 0.1080 More likely
Urgent CVE-2017-8749 Internet Explorer Remote Code Execution 6.4 0.1080 More likely
Urgent CVE-2017-8675 Windows Kernel-Mode Drivers Elevation of Privilege 7.0 0.0156 More likely
High CVE-2017-8695 Microsoft Graphics Component Information Disclosure 7.5 0.0964 Exploitation Less Likely
High CVE-2017-8714 Windows Hyper-V Remote Code Execution 7.8 0.0377 Exploitation Less Likely
High CVE-2017-8713 Windows Hyper-V Information Disclosure 7.2 0.0348 Exploitation Less Likely
High CVE-2017-8707 Windows Hyper-V Information Disclosure 7.2 0.0242 Exploitation Less Likely
High CVE-2017-8720 Microsoft Graphics Component Elevation of Privilege 7.8 0.0164 Exploitation Less Likely
Routine CVE-2017-8683 Microsoft Graphics Component Information Disclosure 5.5 0.2255 Exploitation Less Likely
Routine CVE-2017-8699 Microsoft Windows Remote Code Execution 6.4 0.2130 Exploitation Less Likely
Routine CVE-2017-8692 Microsoft Uniscribe Remote Code Execution 5.0 0.1691 Exploitation Less Likely
Routine CVE-2017-8529 Microsoft Browsers Information Disclosure 4.3 0.1420 Exploitation Less Likely
Routine CVE-2017-8676 Microsoft Graphics Component Information Disclosure 3.3 0.1404 Exploitation Less Likely
Routine CVE-2017-8733 Internet Explorer Spoofing 2.4 0.0516 Exploitation Unlikely
Routine CVE-2017-8684 Microsoft Graphics Component Information Disclosure 5.5 0.0427 Exploitation Less Likely
Routine CVE-2017-8678 Windows Kernel-Mode Drivers Information Disclosure 5.5 0.0423 Exploitation Less Likely
Routine CVE-2017-8680 Windows Kernel-Mode Drivers Information Disclosure 5.5 0.0423 Exploitation Less Likely
Routine CVE-2017-8681 Windows Kernel-Mode Drivers Information Disclosure 5.5 0.0423 Exploitation Less Likely
Showing 1 to 25 of 32 1Next