Microsoft · Security update · December 12, 2017

KB4053578: December 2017 cumulative update for Windows 10 1511

KB4053578, released December 12, 2017, fixes 25 CVEs across 6 products. None of them is reported as exploited. Patch Radar priority: Urgent. The product is no longer supported.

UrgentUnsupported product
CVEs closed
25
12 rated Critical
Exploited
0
None reported
Exploitation more likely
21
Vendor assessment
Highest EPSS
0.6849
99th percentile

Priority of the 25 CVEs

Patch now 0 Urgent 21 High 1 Routine 3

Applies to

ProductBuild after install
Internet Explorer 11 on Windows 10 Version 1511 for 32-bit Systems10586.1295
Internet Explorer 11 on Windows 10 Version 1511 for x64-based Systems10586.1295
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1511 for 32-bit Systems10586.1295
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1511 for x64-based Systems10586.1295
Windows 10 Version 1511 for 32-bit Systems10586.1295
Windows 10 Version 1511 for x64-based Systems10586.1295

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Urgent CVE-2017-11893 Microsoft Scripting Engine Remote Code Execution 4.2 0.6849 More likely
Urgent CVE-2017-11909 Microsoft Scripting Engine Remote Code Execution 4.2 0.6546 More likely
Urgent CVE-2017-11911 Microsoft Scripting Engine Remote Code Execution 4.2 0.6546 More likely
Urgent CVE-2017-11907 Microsoft Scripting Engine Remote Code Execution 6.4 0.6473 More likely
Urgent CVE-2017-11914 Microsoft Scripting Engine Remote Code Execution 4.2 0.6265 More likely
Urgent CVE-2017-11918 Microsoft Scripting Engine Remote Code Execution 4.2 0.6265 More likely
Urgent CVE-2017-11890 Microsoft Scripting Engine Remote Code Execution 6.4 0.5005 More likely
Urgent CVE-2017-11903 Microsoft Scripting Engine Remote Code Execution 6.4 0.4683 More likely
Urgent CVE-2017-11906 Microsoft Scripting Engine Information Disclosure 2.4 0.2512 More likely
Urgent CVE-2017-11913 Microsoft Scripting Engine Remote Code Execution 7.5 0.0864 More likely
Urgent CVE-2017-11886 Microsoft Scripting Engine Remote Code Execution 6.4 0.0864 More likely
Urgent CVE-2017-11889 Microsoft Scripting Engine Remote Code Execution 4.2 0.0864 More likely
Urgent CVE-2017-11905 Microsoft Scripting Engine Remote Code Execution 4.2 0.0864 More likely
Urgent CVE-2017-11910 Microsoft Scripting Engine Remote Code Execution 4.2 0.0864 More likely
Urgent CVE-2017-11888 Microsoft Edge (HTML-based) Remote Code Execution 4.2 0.0848 More likely
Urgent CVE-2017-11894 Microsoft Scripting Engine Remote Code Execution 4.2 0.0847 More likely
Urgent CVE-2017-11895 Microsoft Scripting Engine Remote Code Execution 4.2 0.0847 More likely
Urgent CVE-2017-11912 Microsoft Scripting Engine Remote Code Execution 4.2 0.0847 More likely
Urgent CVE-2017-11901 Microsoft Scripting Engine Remote Code Execution 6.4 0.0791 More likely
Urgent CVE-2017-11919 Microsoft Scripting Engine Information Disclosure 4.2 0.0642 More likely
Urgent CVE-2017-11887 Microsoft Scripting Engine Information Disclosure 2.4 0.0642 More likely
High CVE-2017-11899 Device Guard Security Feature Bypass 7.5 0.0584 Exploitation Less Likely
Routine CVE-2017-11885 Microsoft Windows Remote Code Execution 6.6 0.4552 Exploitation Less Likely
Routine CVE-2017-11927 Microsoft Windows Information Disclosure 4.3 0.0962 Exploitation Less Likely
Routine CVE-2017-11930 Microsoft Scripting Engine Remote Code Execution 4.2 0.0864 Exploitation Unlikely
Showing 1 to 25 of 25 1