Microsoft · Security update · November 14, 2017
KB4048952: November 2017 cumulative update for Windows 10 1511
KB4048952, released November 14, 2017, fixes 31 CVEs across 6 products. None of them is reported as exploited. Patch Radar priority: Urgent. The product is no longer supported.
Urgent2 publicly disclosedUnsupported product
CVEs closed
31
12 rated Critical
Exploited
0
None reported
Exploitation more likely
23
Vendor assessment
Highest EPSS
0.6980
99th percentile
Priority of the 31 CVEs
Patch now 0
Urgent 23
High 0
Routine 8
Applies to
CVEs this fix closes
| Priority | CVE | Component | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Urgent | CVE-2017-11873 | Microsoft Scripting Engine | Remote Code Execution | 4.2 | 0.6980 | More likely |
| Urgent | CVE-2017-11839 | Microsoft Scripting Engine | Remote Code Execution | 4.2 | 0.6236 | More likely |
| Urgent | CVE-2017-11840 | Microsoft Scripting Engine | Remote Code Execution | 4.2 | 0.5964 | More likely |
| Urgent | CVE-2017-11841 | Microsoft Scripting Engine | Remote Code Execution | 4.2 | 0.5964 | More likely |
| Urgent | CVE-2017-11855 | Internet Explorer | Remote Code Execution | 6.4 | 0.4856 | More likely |
| Urgent | CVE-2017-11853 | Windows Kernel-Mode Drivers | Information Disclosure | 4.7 | 0.1098 | More likely |
| Urgent | CVE-2017-11869 | Microsoft Scripting Engine | Remote Code Execution | 6.4 | 0.0983 | More likely |
| Urgent | CVE-2017-11837 | Microsoft Scripting Engine | Remote Code Execution | 4.2 | 0.0855 | More likely |
| Urgent | CVE-2017-11838 | Microsoft Scripting Engine | Remote Code Execution | 4.2 | 0.0855 | More likely |
| Urgent | CVE-2017-11843 | Microsoft Scripting Engine | Remote Code Execution | 4.2 | 0.0847 | More likely |
| Urgent | CVE-2017-11858 | Microsoft Scripting Engine | Remote Code Execution | 4.2 | 0.0836 | More likely |
| Urgent | CVE-2017-11836 | Microsoft Scripting Engine | Remote Code Execution | 4.2 | 0.0798 | More likely |
| Urgent | CVE-2017-11866 | Microsoft Scripting Engine | Remote Code Execution | 4.2 | 0.0798 | More likely |
| Urgent | CVE-2017-11846 | Microsoft Scripting Engine | Remote Code Execution | 4.2 | 0.0770 | More likely |
| Urgent | CVE-2017-11827 | Microsoft Browsers | Remote Code Execution | 6.4 | 0.0760 | DisclosedMore likely |
| Urgent | CVE-2017-11847 | Windows Kernel | Elevation of Privilege | 7.0 | 0.0646 | More likely |
| Urgent | CVE-2017-11856 | Internet Explorer | Remote Code Execution | 7.5 | 0.0563 | More likely |
| Urgent | CVE-2017-11791 | Microsoft Scripting Engine | Information Disclosure | 4.3 | 0.0549 | More likely |
| Urgent | CVE-2017-11831 | Windows Kernel | Information Disclosure | 4.7 | 0.0333 | More likely |
| Urgent | CVE-2017-11850 | Microsoft Graphics Component | Information Disclosure | 4.7 | 0.0286 | More likely |
| Urgent | CVE-2017-11842 | Windows Kernel-Mode Drivers | Information Disclosure | 4.7 | 0.0218 | More likely |
| Urgent | CVE-2017-11849 | Windows Kernel-Mode Drivers | Information Disclosure | 4.7 | 0.0218 | More likely |
| Urgent | CVE-2017-11851 | Microsoft Graphics Component | Information Disclosure | 4.7 | 0.0209 | More likely |
| Routine | CVE-2017-11834 | Microsoft Scripting Engine | Information Disclosure | 4.2 | 0.1273 | Exploitation Unlikely |
| Routine | CVE-2017-11788 | Microsoft Windows Search Component | Denial of Service | 5.9 | 0.0793 | Exploitation Unlikely |
Showing 1 to 25 of 31
1Next