Vulnerabilitycritical
Microsoft Patch Tuesday
- CVEs
- CVE-2017-0290CVE-2017-0221CVE-2017-0222CVE-2017-0224CVE-2017-0227CVE-2017-0228CVE-2017-0229CVE-2017-0235CVE-2017-0236CVE-2017-0240CVE-2017-0266CVE-2017-0272CVE-2017-0277CVE-2017-0278CVE-2017-0279CVE-2017-0064CVE-2017-0077CVE-2017-0171CVE-2017-0175CVE-2017-0190CVE-2017-0212CVE-2017-0213CVE-2017-0214CVE-2017-0220CVE-2017-0226CVE-2017-0230CVE-2017-0231CVE-2017-0233CVE-2017-0234CVE-2017-0238CVE-2017-0241CVE-2017-0242CVE-2017-0244CVE-2017-0245CVE-2017-0246CVE-2017-0248CVE-2017-0254CVE-2017-0255CVE-2017-0258CVE-2017-0259CVE-2017-0261CVE-2017-0262CVE-2017-0263CVE-2017-0264CVE-2017-0265CVE-2017-0267CVE-2017-0268CVE-2017-0269CVE-2017-0270CVE-2017-0271CVE-2017-0273CVE-2017-0274CVE-2017-0275CVE-2017-0276CVE-2017-0280CVE-2017-0281
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2017-0222+2 related CVEs | Memory Corruption RCE in Microsoft Internet Explorer | 8.8 group max | 30% | KEV | KEV |
| CVE-2017-0272 | The Microsoft Server Message Block 1.0 (SMBv1) server on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and… | 8.1 group max | 17% | ||
| CVE-2017-0171 | Windows DNS Server allows a denial of service vulnerability when Microsoft Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 Gold and R2, and Windows… | 5.9 | 4% | ||
CVE-2017-0244+4 related CVEs | The kernel in Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows locally authenticated attackers to gain privileges via a crafted application, or in… | 6.7 group max | 2% | ||
| CVE-2017-0213 | Local Privilege Escalation in Microsoft Windows COM Aggregate Marshaler | 7.3 | 84% | KEVRansomwarePoC | KEV |
| CVE-2017-0233 | An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppContainer sandbox in the browser, aka… | 8.3 group max | 3% | ||
| CVE-2017-0248 | Microsoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allow an attacker to bypass Enhanced Security Usage taggings when they present a… | 7.5 | 6% | ||
CVE-2017-0262+3 related CVEs | Memory Corruption RCE in Microsoft Office 2010, 2013, and 2016 | 7.8 | 81% | KEV | KEV |
| CVE-2017-0255 | Microsoft SharePoint Foundation 2013 SP1 allows an elevation of privilege vulnerability when it does not properly sanitize a specially crafted web request, aka… | 5.4 | 2% | ||
| CVE-2017-0263 | Win32k Use-After-Free Local Privilege Escalation in Windows 7 through Server 2016 | 7.8 | 10% | KEVPoC ×2 | KEV |
CVE-2017-0265+1 related CVE | Microsoft PowerPoint for Mac 2011 allows a remote code execution vulnerability when the software fails to properly handle objects in memory, aka "Microsoft… | 7.8 | 19% | ||
| CVE-2017-0290 | The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1… | 7.8 | 81% | PoC ×2 |
From the original article
6 min read at blog.talosintelligence.com
Today, Microsoft has release their monthly set of security updates designed to address vulnerabilities. This month's release addresses 56 vulnerabilities with 15 of them rated critical and 41 rated important. Impacted products include .
blog.talosintelligence.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.