Microsoft · Security update · December 12, 2017

KB4053581: December 2017 cumulative update for Windows 10 1507

KB4053581, released December 12, 2017, fixes 19 CVEs across 6 products. None of them is reported as exploited. Patch Radar priority: Urgent. The product is no longer supported.

UrgentUnsupported product
CVEs closed
19
7 rated Critical
Exploited
0
None reported
Exploitation more likely
16
Vendor assessment
Highest EPSS
0.6473
99th percentile

Priority of the 19 CVEs

Patch now 0 Urgent 16 High 1 Routine 2

Applies to

ProductBuild after install
Internet Explorer 11 on Windows 10 for 32-bit Systems10240.17709
Internet Explorer 11 on Windows 10 for x64-based Systems10240.17709
Microsoft Edge (EdgeHTML-based) on Windows 10 for 32-bit Systems10240.17709
Microsoft Edge (EdgeHTML-based) on Windows 10 for x64-based Systems10240.17709
Windows 10 for 32-bit Systems10240.17709
Windows 10 for x64-based Systems10240.17709

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Urgent CVE-2017-11907 Microsoft Scripting Engine Remote Code Execution 6.4 0.6473 More likely
Urgent CVE-2017-11918 Microsoft Scripting Engine Remote Code Execution 4.2 0.6265 More likely
Urgent CVE-2017-11890 Microsoft Scripting Engine Remote Code Execution 6.4 0.5005 More likely
Urgent CVE-2017-11903 Microsoft Scripting Engine Remote Code Execution 6.4 0.4683 More likely
Urgent CVE-2017-11906 Microsoft Scripting Engine Information Disclosure 2.4 0.2512 More likely
Urgent CVE-2017-11913 Microsoft Scripting Engine Remote Code Execution 7.5 0.0864 More likely
Urgent CVE-2017-11886 Microsoft Scripting Engine Remote Code Execution 6.4 0.0864 More likely
Urgent CVE-2017-11889 Microsoft Scripting Engine Remote Code Execution 4.2 0.0864 More likely
Urgent CVE-2017-11910 Microsoft Scripting Engine Remote Code Execution 4.2 0.0864 More likely
Urgent CVE-2017-11888 Microsoft Edge (HTML-based) Remote Code Execution 4.2 0.0848 More likely
Urgent CVE-2017-11894 Microsoft Scripting Engine Remote Code Execution 4.2 0.0847 More likely
Urgent CVE-2017-11895 Microsoft Scripting Engine Remote Code Execution 4.2 0.0847 More likely
Urgent CVE-2017-11912 Microsoft Scripting Engine Remote Code Execution 4.2 0.0847 More likely
Urgent CVE-2017-11901 Microsoft Scripting Engine Remote Code Execution 6.4 0.0791 More likely
Urgent CVE-2017-11919 Microsoft Scripting Engine Information Disclosure 4.2 0.0642 More likely
Urgent CVE-2017-11887 Microsoft Scripting Engine Information Disclosure 2.4 0.0642 More likely
High CVE-2017-11899 Device Guard Security Feature Bypass 7.5 0.0584 Exploitation Less Likely
Routine CVE-2017-11885 Microsoft Windows Remote Code Execution 6.6 0.4552 Exploitation Less Likely
Routine CVE-2017-11930 Microsoft Scripting Engine Remote Code Execution 4.2 0.0864 Exploitation Unlikely
Showing 1 to 19 of 19 1