Vulnerabilitycritical
Microsoft Patch Tuesday
- CVEs
- CVE-2017-11813CVE-2017-11822CVE-2017-11762CVE-2017-11763CVE-2017-11797CVE-2017-11767CVE-2017-11792CVE-2017-11793CVE-2017-11796CVE-2017-11798CVE-2017-11799CVE-2017-11800CVE-2017-11801CVE-2017-11802CVE-2017-11804CVE-2017-11805CVE-2017-11806CVE-2017-11807CVE-2017-11808CVE-2017-11809CVE-2017-11810CVE-2017-11811CVE-2017-11812CVE-2017-11821CVE-2017-11779CVE-2017-11771CVE-2017-8727CVE-2017-11819CVE-2017-11790CVE-2017-11794CVE-2017-8726CVE-2017-8693CVE-2017-8717CVE-2017-8718CVE-2017-11826CVE-2017-11825CVE-2017-11775CVE-2017-11777CVE-2017-11820CVE-2017-11776CVE-2017-11774
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2017-11771 | The Microsoft Windows Search component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT… | 9.8 group max | 64% | ||
| CVE-2017-11767 | ChakraCore allows an attacker to gain the same user rights as the current user, due to the way that the ChakraCore scripting engine handles objects in memory… | 9.8 | 10% | ||
CVE-2017-11826+2 related CVEs | Memory Corruption RCE in Microsoft Office, Word, SharePoint and Office Web Apps | 7.8 | 82% | KEVPoC ×2 | KEV |
CVE-2017-11775+2 related CVEs | Microsoft SharePoint Enterprise Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an attacker to exploit a cross-site scripting (XSS)… | 5.4 | 2% | ||
| CVE-2017-11776 | Microsoft Outlook 2016 allows an attacker to obtain the email content of a user, due to how Outlook 2016 discloses user email content, aka "Microsoft Outlook… | 7.5 | 9% | ||
CVE-2017-11810+4 related CVEs | Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold… | 7.5 group max | 55% | PoC | |
| CVE-2017-11802 | ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the… | 7.5 | 69% | ||
CVE-2017-11811+4 related CVEs | ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the… | 7.5 group max | 65% | PoC | |
| CVE-2017-11819 | Microsoft Windows 7 SP1 allows an attacker to execute arbitrary code in the context of the current user, due to how Microsoft browsers handle objects in… | 7.5 | 14% |
From the original article
12 min read at blog.talosintelligence.com
Microsoft has released its monthly set of security advisories for vulnerabilities that have been identified and addressed in various products. This month's advisory release addresses 63 new vulnerabilities with 28 of them rated critical and 35 rated important. These vulnerabilities impact Graphics, Edge, Internet Explorer, Office, Sharepoint, Windows Graphic Display Interface, Windows Kernel Mode Drivers, and more.
blog.talosintelligence.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.