Microsoft’s October Patch Batch Fixes 62 Flaws
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2017-11776 | Microsoft Outlook 2016 allows an attacker to obtain the email content of a user, due to how Outlook 2016 discloses user email content, aka "Microsoft Outlook… | 7.5 | 9% | ||
CVE-2017-11779+1 related CVE | The Microsoft Windows Domain Name System (DNS) DNSAPI.dll on Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and… | 8.1 group max | 33% | ||
| CVE-2017-11826 | Memory Corruption RCE in Microsoft Office, Word, SharePoint and Office Web Apps | 7.8 | 82% | KEVPoC ×2 | KEV |
From the original article
2 min read at krebsonsecurity.comMicrosoft on Tuesday released software updates to fix at least 62 security vulnerabilities in Windows , Office and other software. Two of those flaws were detailed publicly before yesterday’s patches were released, and one of them is already being exploited in active attacks, so attackers already have a head start.
krebsonsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.