Microsoft · Security update · October 10, 2017
KB4041676: October 2017 cumulative update for Windows 10 1703
KB4041676, released October 10, 2017, fixes 49 CVEs across 6 products. None of them is reported as exploited. Patch Radar priority: Urgent. The product is no longer supported.
Urgent1 publicly disclosedUnsupported product
CVEs closed
49
20 rated Critical
Exploited
0
None reported
Exploitation more likely
33
Vendor assessment
Highest EPSS
0.6916
99th percentile
Priority of the 49 CVEs
Patch now 0
Urgent 36
High 2
Routine 11
Applies to
CVEs this fix closes
| Priority | CVE | Component | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Urgent | CVE-2017-11802 | Microsoft Scripting Engine | Remote Code Execution | 4.2 | 0.6916 | More likely |
| Urgent | CVE-2017-11809 | Microsoft Scripting Engine | Remote Code Execution | 4.2 | 0.6803 | More likely |
| Urgent | CVE-2017-11811 | Microsoft Scripting Engine | Remote Code Execution | 4.2 | 0.6546 | More likely |
| Urgent | CVE-2017-11799 | Microsoft Scripting Engine | Remote Code Execution | 4.2 | 0.6368 | More likely |
| Urgent | CVE-2017-11810 | Internet Explorer | Remote Code Execution | 6.4 | 0.5482 | More likely |
| Urgent | CVE-2017-11771 | Microsoft Windows Search Component | Remote Code Execution | 8.1 | 0.5193 | More likely |
| Urgent | CVE-2017-11793 | Microsoft Scripting Engine | Remote Code Execution | 3.1 | 0.4956 | More likely |
| Urgent | CVE-2017-11812 | Microsoft Scripting Engine | Remote Code Execution | 4.2 | 0.4726 | More likely |
| Urgent | CVE-2017-11779 | Microsoft Windows DNS | Remote Code Execution | 8.1 | 0.3310 | Exploitation Less Likely |
| Urgent | CVE-2017-0250 | Microsoft JET Database Engine | Remote Code Execution | 7.8 | 0.2366 | Exploitation Unlikely |
| Urgent | CVE-2017-11816 | Microsoft Graphics Component | Information Disclosure | 5.5 | 0.1996 | More likely |
| Urgent | CVE-2017-11762 | Microsoft Graphics Component | Remote Code Execution | 8.1 | 0.1715 | More likely |
| Urgent | CVE-2017-11763 | Microsoft Graphics Component | Remote Code Execution | 8.1 | 0.1715 | More likely |
| Urgent | CVE-2017-11780 | Windows SMB Server | Remote Code Execution | 8.1 | 0.0996 | More likely |
| Urgent | CVE-2017-11792 | Microsoft Scripting Engine | Remote Code Execution | 4.2 | 0.0876 | More likely |
| Urgent | CVE-2017-11796 | Microsoft Scripting Engine | Remote Code Execution | 4.2 | 0.0876 | More likely |
| Urgent | CVE-2017-11798 | Microsoft Scripting Engine | Remote Code Execution | 4.2 | 0.0876 | More likely |
| Urgent | CVE-2017-11804 | Microsoft Scripting Engine | Remote Code Execution | 4.2 | 0.0876 | More likely |
| Urgent | CVE-2017-11805 | Microsoft Scripting Engine | Remote Code Execution | 4.2 | 0.0876 | More likely |
| Urgent | CVE-2017-11806 | Microsoft Scripting Engine | Remote Code Execution | 4.2 | 0.0876 | Exploitation Less Likely |
| Urgent | CVE-2017-11807 | Microsoft Scripting Engine | Remote Code Execution | 4.2 | 0.0876 | More likely |
| Urgent | CVE-2017-11808 | Microsoft Scripting Engine | Remote Code Execution | 4.2 | 0.0876 | More likely |
| Urgent | CVE-2017-11821 | Microsoft Scripting Engine | Remote Code Execution | 4.2 | 0.0876 | More likely |
| Urgent | CVE-2017-11822 | Internet Explorer | Remote Code Execution | 6.4 | 0.0848 | More likely |
| Urgent | CVE-2017-11772 | Microsoft Windows Search Component | Information Disclosure | 5.9 | 0.0830 | More likely |
Showing 1 to 25 of 49
1Next