Microsoft Issues Patches for Another Four Zero
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2017-0001 | Local Privilege Escalation in Microsoft Windows GDI | 7.8 | 3% | KEV | KEV |
| CVE-2017-0222 | Memory Corruption RCE in Microsoft Internet Explorer | 8.8 | 30% | KEV | KEV |
CVE-2017-0262+1 related CVE | Memory Corruption RCE in Microsoft Office 2010, 2013, and 2016 | 7.8 | 81% | KEV | KEV |
| CVE-2017-0263 | Win32k Use-After-Free Local Privilege Escalation in Windows 7 through Server 2016 | 7.8 | 10% | KEVPoC ×2 | KEV |
CVE-2017-0272+3 related CVEs | The Microsoft Server Message Block 1.0 (SMBv1) server on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and… | 8.1 group max | 17% | ||
| CVE-2017-0290 | The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1… | 7.8 | 81% | PoC ×2 |
From the original article
3 min read at thehackernews.com
As part of this month's Patch Tuesday, Microsoft has released security patches for a total of 55 vulnerabilities across its products, including fixes for four zero-day vulnerabilities being exploited in the wild. Just yesterday, Microsoft released an emergency out-of-band update separately to patch a remote execution bug ( CVE-2017-0290 ) in Microsoft's Antivirus Engine that comes enabled by default on Windows 7, 8.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.