Microsoft · Security update · December 12, 2017

KB4045655: December 2017 security update

KB4045655, released December 12, 2017, fixes 2 CVEs across 4 products. None of them is reported as exploited. Patch Radar priority: High. The product is no longer supported.

HighUnsupported product

CVEs closed

None rated Critical

Exploited

None reported

Exploitation more likely

Microsoft's assessment

Highest EPSS

0.0656

93rd percentile

Priority of the 2 CVEs

Patch now 0
                                Urgent 0
                                High 2
                                Routine 0

Applies to

Product
Microsoft Exchange Server 2013 Cumulative Update 17
Microsoft Exchange Server 2013 Cumulative Update 18
Microsoft Exchange Server 2016 Cumulative Update 6
Microsoft Exchange Server 2016 Cumulative Update 7

CVEs this fix closes

Priority	CVE	Component	Impact	CVSS	EPSS	Exploitation
High	CVE-2017-11761	Microsoft Exchange Server	Information Disclosure	n/a	0.0656	Exploitation Unlikely
High	CVE-2017-11932	Microsoft Exchange Server	Spoofing	n/a	0.0588	Exploitation Less Likely

Released the same day

KB4011576
Microsoft SharePoint Enterprise Server 2016
KB4052303
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation), Windows Server 2008 for Itanium-Based Systems Service Pack 2, Windows Server 2008 for x64-based Systems Service Pack 2 and 1 more
KB4052978
Internet Explorer 10 on Windows Server 2012, Internet Explorer 11 on Windows 7 for 32-bit Systems Service Pack 1, Internet Explorer 11 on Windows 7 for x64-based Systems Service Pack 1 and 6 more
KB4053578
Internet Explorer 11 on Windows 10 Version 1511 for 32-bit Systems, Internet Explorer 11 on Windows 10 Version 1511 for x64-based Systems, Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1511 for 32-bit Systems and 3 more
KB4053579
Internet Explorer 11 on Windows 10 Version 1607 for 32-bit Systems, Internet Explorer 11 on Windows 10 Version 1607 for x64-based Systems, Internet Explorer 11 on Windows Server 2016 and 7 more
KB4053580
Internet Explorer 11 on Windows 10 Version 1703 for 32-bit Systems, Internet Explorer 11 on Windows 10 Version 1703 for x64-based Systems, Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1703 for 32-bit Systems and 3 more
KB4053581
Internet Explorer 11 on Windows 10 for 32-bit Systems, Internet Explorer 11 on Windows 10 for x64-based Systems, Microsoft Edge (EdgeHTML-based) on Windows 10 for 32-bit Systems and 3 more
KB4054517
Internet Explorer 11 on Windows 10 Version 1709 for 32-bit Systems, Internet Explorer 11 on Windows 10 Version 1709 for x64-based Systems, Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1709 for 32-bit Systems and 4 more
KB4054518
Internet Explorer 11 on Windows 7 for 32-bit Systems Service Pack 1, Internet Explorer 11 on Windows 7 for x64-based Systems Service Pack 1, Internet Explorer 11 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 and 5 more
KB4054519
Internet Explorer 11 on Windows 8.1 for 32-bit systems, Internet Explorer 11 on Windows 8.1 for x64-based systems, Internet Explorer 11 on Windows RT 8.1 and 6 more
KB4054520
Internet Explorer 10 on Windows Server 2012, Windows Server 2012, Windows Server 2012 (Server Core installation)
KB4054521
Windows 7 for 32-bit Systems Service Pack 1, Windows 7 for x64-based Systems Service Pack 1, Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1 and 2 more

Vendor advisory

https://support.microsoft.com/help/4045655

For tools and AI agents

This page as data: JSON · Markdown

Which machines still need it?

Patchblox matches the software installed on every machine to the updates that fix its CVEs, and shows which machines still need this one.

Get a demo

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.