Microsoft · Security update · November 14, 2017

KB4048957: November 2017 security update

KB4048957, released November 14, 2017, fixes 23 CVEs across 8 products. None of them is reported as exploited. Patch Radar priority: Urgent. The product is no longer supported.

Urgent2 publicly disclosedUnsupported product
CVEs closed
23
6 rated Critical
Exploited
0
None reported
Exploitation more likely
18
Vendor assessment
Highest EPSS
0.4856
98th percentile

Priority of the 23 CVEs

Patch now 0 Urgent 18 High 0 Routine 5

Applies to

Product
Internet Explorer 11 on Windows 7 for 32-bit Systems Service Pack 1
Internet Explorer 11 on Windows 7 for x64-based Systems Service Pack 1
Internet Explorer 11 on Windows Server 2008 R2 for x64-based Systems Service Pack 1
Windows 7 for 32-bit Systems Service Pack 1
Windows 7 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Urgent CVE-2017-11855 Internet Explorer Remote Code Execution 6.4 0.4856 More likely
Urgent CVE-2017-11853 Windows Kernel-Mode Drivers Information Disclosure 4.7 0.1098 More likely
Urgent CVE-2017-11869 Microsoft Scripting Engine Remote Code Execution 6.4 0.0983 More likely
Urgent CVE-2017-11837 Microsoft Scripting Engine Remote Code Execution 4.2 0.0855 More likely
Urgent CVE-2017-11838 Microsoft Scripting Engine Remote Code Execution 4.2 0.0855 More likely
Urgent CVE-2017-11843 Microsoft Scripting Engine Remote Code Execution 4.2 0.0847 More likely
Urgent CVE-2017-11858 Microsoft Scripting Engine Remote Code Execution 4.2 0.0836 More likely
Urgent CVE-2017-11846 Microsoft Scripting Engine Remote Code Execution 4.2 0.0770 More likely
Urgent CVE-2017-11827 Microsoft Browsers Remote Code Execution 6.4 0.0760 DisclosedMore likely
Urgent CVE-2017-11847 Windows Kernel Elevation of Privilege 7.0 0.0646 More likely
Urgent CVE-2017-11856 Internet Explorer Remote Code Execution 7.5 0.0563 More likely
Urgent CVE-2017-11791 Microsoft Scripting Engine Information Disclosure 4.3 0.0549 More likely
Urgent CVE-2017-11831 Windows Kernel Information Disclosure 4.7 0.0333 More likely
Urgent CVE-2017-11835 Microsoft Graphics Component Information Disclosure 4.7 0.0238 More likely
Urgent CVE-2017-11852 Microsoft Graphics Component Information Disclosure 4.7 0.0220 More likely
Urgent CVE-2017-11849 Windows Kernel-Mode Drivers Information Disclosure 4.7 0.0218 More likely
Urgent CVE-2017-11832 Microsoft Graphics Component Information Disclosure 4.7 0.0209 More likely
Urgent CVE-2017-11851 Microsoft Graphics Component Information Disclosure 4.7 0.0209 More likely
Routine CVE-2017-11834 Microsoft Scripting Engine Information Disclosure 4.2 0.1273 Exploitation Unlikely
Routine CVE-2017-11788 Microsoft Windows Search Component Denial of Service 5.9 0.0793 Exploitation Unlikely
Routine CVE-2017-11848 Internet Explorer Information Disclosure 2.4 0.0705 DisclosedExploitation Less Likely
Routine CVE-2017-11768 Windows Media Player Information Disclosure 2.5 0.0666 Exploitation Less Likely
Routine CVE-2017-11880 Windows Kernel Information Disclosure 4.7 0.0218 Exploitation Less Likely
Showing 1 to 23 of 23 1