Microsoft · Security update · October 10, 2017

KB4042895: October 2017 cumulative update for Windows 10 1507

KB4042895, released October 10, 2017, fixes 42 CVEs across 6 products. None of them is reported as exploited. Patch Radar priority: Urgent. The product is no longer supported.

UrgentUnsupported product
CVEs closed
42
14 rated Critical
Exploited
0
None reported
Exploitation more likely
28
Vendor assessment
Highest EPSS
0.6916
99th percentile

Priority of the 42 CVEs

Patch now 0 Urgent 30 High 2 Routine 10

Applies to

ProductBuild after install
Internet Explorer 11 on Windows 10 for 32-bit Systems10240.17643
Internet Explorer 11 on Windows 10 for x64-based Systems10240.17643
Microsoft Edge (EdgeHTML-based) on Windows 10 for 32-bit Systems10240.17643
Microsoft Edge (EdgeHTML-based) on Windows 10 for x64-based Systems10240.17643
Windows 10 for 32-bit Systems10240.17643
Windows 10 for x64-based Systems10240.17643

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Urgent CVE-2017-11802 Microsoft Scripting Engine Remote Code Execution 4.2 0.6916 More likely
Urgent CVE-2017-11809 Microsoft Scripting Engine Remote Code Execution 4.2 0.6803 More likely
Urgent CVE-2017-11811 Microsoft Scripting Engine Remote Code Execution 4.2 0.6546 More likely
Urgent CVE-2017-11799 Microsoft Scripting Engine Remote Code Execution 4.2 0.6368 More likely
Urgent CVE-2017-11810 Internet Explorer Remote Code Execution 6.4 0.5482 More likely
Urgent CVE-2017-11771 Microsoft Windows Search Component Remote Code Execution 8.1 0.5193 More likely
Urgent CVE-2017-11793 Microsoft Scripting Engine Remote Code Execution 3.1 0.4956 More likely
Urgent CVE-2017-11779 Microsoft Windows DNS Remote Code Execution 8.1 0.3310 Exploitation Less Likely
Urgent CVE-2017-0250 Microsoft JET Database Engine Remote Code Execution 7.8 0.2366 Exploitation Unlikely
Urgent CVE-2017-11816 Microsoft Graphics Component Information Disclosure 5.5 0.1996 More likely
Urgent CVE-2017-11762 Microsoft Graphics Component Remote Code Execution 8.1 0.1715 More likely
Urgent CVE-2017-11763 Microsoft Graphics Component Remote Code Execution 8.1 0.1715 More likely
Urgent CVE-2017-11780 Windows SMB Server Remote Code Execution 8.1 0.0996 More likely
Urgent CVE-2017-11798 Microsoft Scripting Engine Remote Code Execution 4.2 0.0876 More likely
Urgent CVE-2017-11800 Microsoft Scripting Engine Remote Code Execution 4.2 0.0876 More likely
Urgent CVE-2017-11804 Microsoft Scripting Engine Remote Code Execution 4.2 0.0876 More likely
Urgent CVE-2017-11808 Microsoft Scripting Engine Remote Code Execution 4.2 0.0876 More likely
Urgent CVE-2017-11822 Internet Explorer Remote Code Execution 6.4 0.0848 More likely
Urgent CVE-2017-11772 Microsoft Windows Search Component Information Disclosure 5.9 0.0830 More likely
Urgent CVE-2017-8727 Windows Shell Remote Code Execution 7.5 0.0827 More likely
Urgent CVE-2017-8726 Microsoft Edge (HTML-based) Information Disclosure 4.3 0.0719 More likely
Urgent CVE-2017-11791 Microsoft Scripting Engine Information Disclosure 4.3 0.0549 More likely
Urgent CVE-2017-11823 Device Guard Security Feature Bypass 6.3 0.0256 More likely
Urgent CVE-2017-11783 Microsoft Windows Elevation of Privilege 7.0 0.0250 More likely
Urgent CVE-2017-8693 Microsoft Graphics Component Information Disclosure 5.5 0.0238 More likely
Showing 1 to 25 of 42 1Next