Microsoft · Security update · December 12, 2017

KB4054519: December 2017 security update

KB4054519, released December 12, 2017, fixes 14 CVEs across 9 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
14
3 rated Critical
Exploited
0
None reported
Exploitation more likely
12
Vendor assessment
Highest EPSS
0.6473
99th percentile

Priority of the 14 CVEs

Patch now 0 Urgent 12 High 0 Routine 2

Applies to

Product
Internet Explorer 11 on Windows 8.1 for 32-bit systems
Internet Explorer 11 on Windows 8.1 for x64-based systems
Internet Explorer 11 on Windows RT 8.1
Internet Explorer 11 on Windows Server 2012 R2
Windows 8.1 for 32-bit systems
Windows 8.1 for x64-based systems
Windows RT 8.1
Windows Server 2012 R2
Windows Server 2012 R2 (Server Core installation)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Urgent CVE-2017-11907 Microsoft Scripting Engine Remote Code Execution 6.4 0.6473 More likely
Urgent CVE-2017-11890 Microsoft Scripting Engine Remote Code Execution 6.4 0.5005 More likely
Urgent CVE-2017-11903 Microsoft Scripting Engine Remote Code Execution 6.4 0.4683 More likely
Urgent CVE-2017-11906 Microsoft Scripting Engine Information Disclosure 2.4 0.2512 More likely
Urgent CVE-2017-11913 Microsoft Scripting Engine Remote Code Execution 7.5 0.0864 More likely
Urgent CVE-2017-11886 Microsoft Scripting Engine Remote Code Execution 6.4 0.0864 More likely
Urgent CVE-2017-11894 Microsoft Scripting Engine Remote Code Execution 4.2 0.0847 More likely
Urgent CVE-2017-11895 Microsoft Scripting Engine Remote Code Execution 4.2 0.0847 More likely
Urgent CVE-2017-11912 Microsoft Scripting Engine Remote Code Execution 4.2 0.0847 More likely
Urgent CVE-2017-11901 Microsoft Scripting Engine Remote Code Execution 6.4 0.0791 More likely
Urgent CVE-2017-11919 Microsoft Scripting Engine Information Disclosure 4.2 0.0642 More likely
Urgent CVE-2017-11887 Microsoft Scripting Engine Information Disclosure 2.4 0.0642 More likely
Routine CVE-2017-11885 Microsoft Windows Remote Code Execution 6.6 0.4552 Exploitation Less Likely
Routine CVE-2017-11930 Microsoft Scripting Engine Remote Code Execution 4.2 0.0864 Exploitation Unlikely
Showing 1 to 14 of 14 1