April 2017 Security Updates
Security Update
secure@microsoft.com
The Microsoft Security Response Center (MSRC) identifies, monitors, resolves, and responds to security incidents and Microsoft software security vulnerabilities. For more information, see http://www.microsoft.com/security/msrc.
2017-Apr
2017-Apr
Final
1.0
35
2026-08-12T23:19:24
April 2017 Security Updates
2017-04-11T07:00:00Z
2026-08-12T23:19:24
<p>The April security release consists of security updates for the following software:</p>
<ul>
<li>Internet Explorer</li>
<li>Microsoft Edge</li>
<li>Microsoft Windows</li>
<li>Microsoft Office and Microsoft Office Services and Web Apps</li>
<li>Visual Studio for Mac</li>
<li>.NET Framework</li>
<li>Silverlight</li>
<li>Adobe Flash Player</li>
</ul>
<p>Please note the following information regarding the security updates:</p>
<ul>
<li>Windows 10 updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows 10, in addition to non-security updates. The updates are available via the <a href="http://catalog.update.microsoft.com/v7/site/Home.aspx">Microsoft Update Catalog</a>.</li>
<li>Starting in March 2017, a delta package will be available on the Microsoft Update Catalog for Windows 10 version 1607 and newer. This delta package contains just the delta changes between the previous month and the current release.</li>
<li>Updates for Windows RT 8.1 and Microsoft Office RT software are only available via <a href="http://go.microsoft.com/fwlink/?LinkId=21130">Windows Update</a>.</li>
<li>In addition to security changes for the vulnerabilities, updates include defense-in-depth updates to help improve security-related features.</li>
</ul>
<p><strong>Known Issues</strong></p>
<ul>
<li><a href="https://support.microsoft.com/help/4014561">4014561</a></li>
<li><a href="https://support.microsoft.com/help/4014567">4014567</a></li>
<li><a href="https://support.microsoft.com/help/4014563">4014563</a></li>
<li><a href="https://support.microsoft.com/help/4014565">4014565</a></li>
<li><a href="https://support.microsoft.com/help/4014555">4014555</a></li>
<li><a href="https://support.microsoft.com/help/4014557">4014557</a></li>
<li><a href="https://support.microsoft.com/help/4014559">4014559</a></li>
<li><a href="https://support.microsoft.com/help/4014553">4014553</a></li>
<li><a href="https://support.microsoft.com/help/4014551">4014551</a></li>
<li><a href="https://support.microsoft.com/help/4014548">4014548</a></li>
<li><a href="https://support.microsoft.com/help/4014547">4014547</a></li>
<li><a href="https://support.microsoft.com/help/4014546">4014546</a></li>
<li><a href="https://support.microsoft.com/help/4014545">4014545</a></li>
<li><a href="https://support.microsoft.com/help/4014571">4014571</a></li>
<li><a href="https://support.microsoft.com/help/4014574">4014574</a></li>
<li><a href="https://support.microsoft.com/help/4014572">4014572</a></li>
<li><a href="https://support.microsoft.com/help/4014573">4014573</a></li>
<li><a href="https://support.microsoft.com/help/4014562">4014562</a></li>
<li><a href="https://support.microsoft.com/help/4014564">4014564</a></li>
<li><a href="https://support.microsoft.com/help/4014566">4014566</a></li>
<li><a href="https://support.microsoft.com/help/4014558">4014558</a></li>
<li><a href="https://support.microsoft.com/help/4014556">4014556</a></li>
<li><a href="https://support.microsoft.com/help/4014560">4014560</a></li>
<li><a href="https://support.microsoft.com/help/4014552">4014552</a></li>
<li><a href="https://support.microsoft.com/help/4014550">4014550</a></li>
<li><a href="https://support.microsoft.com/help/4014549">4014549</a></li>
<li><a href="https://support.microsoft.com/help/4014984">4014984</a></li>
<li><a href="https://support.microsoft.com/help/4014983">4014983</a></li>
<li><a href="https://support.microsoft.com/help/4014982">4014982</a></li>
<li><a href="https://support.microsoft.com/help/4014981">4014981</a></li>
<li><a href="https://support.microsoft.com/help/4014988">4014988</a></li>
<li><a href="https://support.microsoft.com/help/4014987">4014987</a></li>
<li><a href="https://support.microsoft.com/help/4014986">4014986</a></li>
<li><a href="https://support.microsoft.com/help/4014985">4014985</a></li>
</ul>
The information provided in the Microsoft Knowledge Base is provided "as is" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.
Windows 10 for 32-bit Systems
Windows 10 for x64-based Systems
Windows 10 Version 1511 for 32-bit Systems
Windows 10 Version 1511 for x64-based Systems
Windows 10 Version 1607 for 32-bit Systems
Windows 10 Version 1607 for x64-based Systems
Windows 8.1 for 32-bit systems
Windows 8.1 for x64-based systems
Windows RT 8.1
Windows Server 2012
Windows Server 2012 (Server Core installation)
Windows Server 2012 R2
Windows Server 2012 R2 (Server Core installation)
Windows Vista Service Pack 2
Windows Vista x64 Edition Service Pack 2
Windows 10 Version 1703 for 32-bit Systems
Windows 10 Version 1703 for x64-based Systems
Windows Server 2016
Windows Server 2016 (Server Core installation)
Windows 7 for 32-bit Systems Service Pack 1
Windows 7 for x64-based Systems Service Pack 1
Windows Server 2008 for 32-bit Systems Service Pack 2
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)
Windows Server 2008 for Itanium-Based Systems Service Pack 2
Windows Server 2008 for x64-based Systems Service Pack 2
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)
Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)
Internet Explorer 9 on Windows Vista x64 Edition Service Pack 2
Internet Explorer 9 on Windows Vista Service Pack 2
Internet Explorer 9 on Windows Server 2008 for 32-bit Systems Service Pack 2
Internet Explorer 9 on Windows Server 2008 for x64-based Systems Service Pack 2
Microsoft Silverlight 5 Developer Runtime when installed on Microsoft Windows (32-bit)
Microsoft Silverlight 5 Developer Runtime when installed on Microsoft Windows (x64-based)
Microsoft Silverlight 5 when installed on Microsoft Windows (32-bit)
Microsoft Silverlight 5 when installed on Microsoft Windows (x64-based)
Mono Framework Version 4.8.1.0
Mono Framework Version 5.0.0.48
Microsoft .NET Framework 3.5.1 on Windows 7 for 32-bit Systems Service Pack 1
Microsoft .NET Framework 3.5.1 on Windows Server 2008 R2 for x64-based Systems Service Pack 1
Microsoft .NET Framework 3.5.1 on Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1
Microsoft .NET Framework 3.5.1 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)
Microsoft .NET Framework 3.5.1 on Windows 7 for x64-based Systems Service Pack 1
Microsoft .NET Framework 4.5.2 on Windows Vista Service Pack 2
Microsoft .NET Framework 4.5.2 on Windows Vista x64 Edition Service Pack 2
Microsoft .NET Framework 4.5.2 on Windows Server 2008 for 32-bit Systems Service Pack 2
Microsoft .NET Framework 4.5.2 on Windows Server 2008 for x64-based Systems Service Pack 2
Microsoft .NET Framework 4.5.2 on Windows 7 for 32-bit Systems Service Pack 1
Microsoft .NET Framework 4.5.2 on Windows 7 for x64-based Systems Service Pack 1
Microsoft .NET Framework 4.5.2 on Windows Server 2008 R2 for x64-based Systems Service Pack 1
Microsoft .NET Framework 4.5.2 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)
Microsoft .NET Framework 4.5.2 on Windows Server 2012
Microsoft .NET Framework 4.5.2 on Windows Server 2012 (Server Core installation)
Microsoft .NET Framework 4.5.2 on Windows 8.1 for 32-bit systems
Microsoft .NET Framework 4.5.2 on Windows 8.1 for x64-based systems
Microsoft .NET Framework 4.5.2 on Windows RT 8.1
Microsoft .NET Framework 4.5.2 on Windows Server 2012 R2
Microsoft .NET Framework 4.5.2 on Windows Server 2012 R2 (Server Core installation)
Microsoft .NET Framework 4.6.2 on Windows RT 8.1
Microsoft .NET Framework 4.6.2 on Windows Server 2012 R2
Microsoft .NET Framework 4.6.2 on Windows Server 2012 R2 (Server Core installation)
Microsoft .NET Framework 4.6.2 on Windows Server 2012
Microsoft .NET Framework 4.6.2 on Windows Server 2012 (Server Core installation)
Microsoft .NET Framework 4.6.2 on Windows 8.1 for x64-based systems
Microsoft .NET Framework 4.6.2 on Windows 7 for 32-bit Systems Service Pack 1
Microsoft .NET Framework 4.6.2 on Windows Server 2008 R2 for x64-based Systems Service Pack 1
Microsoft .NET Framework 4.6.2 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)
Microsoft .NET Framework 4.6.2 on Windows 7 for x64-based Systems Service Pack 1
Microsoft .NET Framework 4.6.2 on Windows 8.1 for 32-bit systems
Microsoft .NET Framework 4.6.2 on Windows 10 Version 1607 for 32-bit Systems
Microsoft .NET Framework 4.6.2 on Windows 10 Version 1607 for x64-based Systems
Microsoft .NET Framework 4.6.2 on Windows Server 2016
Microsoft .NET Framework 4.6.2 on Windows Server 2016 (Server Core installation)
Microsoft .NET Framework 3.5 on Windows 8.1 for 32-bit systems
Microsoft .NET Framework 3.5 on Windows 8.1 for x64-based systems
Microsoft .NET Framework 3.5 on Windows Server 2012 R2
Microsoft .NET Framework 3.5 on Windows Server 2012 R2 (Server Core installation)
Microsoft .NET Framework 4.6 on Windows Vista Service Pack 2
Microsoft .NET Framework 4.6 on Windows Vista x64 Edition Service Pack 2
Microsoft .NET Framework 4.6 on Windows Server 2008 for 32-bit Systems Service Pack 2
Microsoft .NET Framework 4.6 on Windows Server 2008 for x64-based Systems Service Pack 2
Microsoft .NET Framework 4.6 on Windows 10 for 32-bit Systems
Microsoft .NET Framework 4.6 on Windows 10 for x64-based Systems
Microsoft .NET Framework 4.6.1 on Windows 10 Version 1511 for 32-bit Systems
Microsoft .NET Framework 4.6.1 on Windows 10 Version 1511 for x64-based Systems
Microsoft .NET Framework 3.5 on Windows 10 for 32-bit Systems
Microsoft .NET Framework 3.5 on Windows 10 for x64-based Systems
Microsoft .NET Framework 3.5 on Windows 10 Version 1511 for 32-bit Systems
Microsoft .NET Framework 3.5 on Windows 10 Version 1511 for x64-based Systems
Microsoft .NET Framework 3.5 on Windows 10 Version 1607 for 32-bit Systems
Microsoft .NET Framework 3.5 on Windows 10 Version 1607 for x64-based Systems
Microsoft .NET Framework 3.5 on Windows 10 Version 1703 for 32-bit Systems
Microsoft .NET Framework 3.5 on Windows 10 Version 1703 for x64-based Systems
Microsoft .NET Framework 3.5 on Windows Server 2016
Microsoft .NET Framework 3.5 on Windows Server 2016 (Server Core installation)
Microsoft .NET Framework 4.6/4.6.1 on Windows 7 for 32-bit Systems Service Pack 1
Microsoft .NET Framework 4.6/4.6.1 on Windows 7 for x64-based Systems Service Pack 1
Microsoft .NET Framework 4.6/4.6.1 on Windows Server 2008 R2 for x64-based Systems Service Pack 1
Microsoft .NET Framework 4.6/4.6.1 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)
Microsoft .NET Framework 4.6/4.6.1 on Windows Server 2012
Microsoft .NET Framework 4.6/4.6.1 on Windows Server 2012 (Server Core installation)
Microsoft .NET Framework 4.6/4.6.1 on Windows Server 2012 R2
Microsoft .NET Framework 4.6/4.6.1 on Windows Server 2012 R2 (Server Core installation)
Microsoft .NET Framework 4.6/4.6.1 on Windows 8.1 for 32-bit systems
Microsoft .NET Framework 4.6/4.6.1 on Windows 8.1 for x64-based systems
Microsoft .NET Framework 4.6/4.6.1 on Windows RT 8.1
Microsoft .NET Framework 2.0 Service Pack 2 on Windows Server 2008 for Itanium-Based Systems Service Pack 2
Microsoft .NET Framework 2.0 Service Pack 2 on Windows Server 2008 for 32-bit Systems Service Pack 2
Microsoft .NET Framework 2.0 Service Pack 2 on Windows Vista x64 Edition Service Pack 2
Microsoft .NET Framework 2.0 Service Pack 2 on Windows Server 2008 for x64-based Systems Service Pack 2
Microsoft .NET Framework 2.0 Service Pack 2 on Windows Vista Service Pack 2
Microsoft .NET Framework 3.5 on Windows Server 2012 (Server Core installation)
Microsoft .NET Framework 3.5 on Windows Server 2012
Microsoft .NET Framework 4.7 on Windows 10 Version 1703 for 32-bit Systems
Microsoft .NET Framework 4.7 on Windows 10 Version 1703 for x64-based Systems
Microsoft Excel Web App 2010 Service Pack 2
Microsoft Office Web Apps 2010 Service Pack 2
Microsoft Office Web Apps Server 2013 Service Pack 1
Office Online Server
Excel Services on Microsoft Sharepoint Server 2010 Service Pack 2 Bad
Excel Services on Microsoft SharePoint Server 2013 Service Pack 1
Microsoft OneNote 2010 Service Pack 2 (32-bit editions)
Microsoft OneNote 2010 Service Pack 2 (64-bit editions)
Microsoft OneNote 2007 Service Pack 3
Microsoft Office 2007 Service Pack 3
Microsoft Office 2010 Service Pack 2 (32-bit editions)
Microsoft Office 2010 Service Pack 2 (64-bit editions)
Microsoft Office 2013 Service Pack 1 (32-bit editions)
Microsoft Office 2013 Service Pack 1 (64-bit editions)
Microsoft Office 2016 (32-bit edition)
Microsoft Office 2016 (64-bit edition)
Microsoft Outlook for Mac 2011
Microsoft Office 2013 RT Service Pack 1
Microsoft Outlook 2013 Service Pack 1 (32-bit editions)
Microsoft Outlook 2013 Service Pack 1 (64-bit editions)
Microsoft Outlook 2007 Service Pack 3
Microsoft Outlook 2010 Service Pack 2 (32-bit editions)
Microsoft Outlook 2010 Service Pack 2 (64-bit editions)
Microsoft Outlook 2016 (32-bit edition)
Microsoft Outlook 2016 (64-bit edition)
Microsoft Office Compatibility Pack Service Pack 2
Microsoft Excel 2007 Service Pack 3
Microsoft Excel 2010 Service Pack 2 (32-bit editions)
Microsoft Excel 2010 Service Pack 2 (64-bit editions)
Internet Explorer 10 on Windows Server 2012
Internet Explorer 11 on Windows 8.1 for 32-bit systems
Internet Explorer 11 on Windows 8.1 for x64-based systems
Internet Explorer 11 on Windows Server 2012 R2
Internet Explorer 11 on Windows RT 8.1
Internet Explorer 11 on Windows 7 for 32-bit Systems Service Pack 1
Internet Explorer 11 on Windows 7 for x64-based Systems Service Pack 1
Internet Explorer 11 on Windows Server 2008 R2 for x64-based Systems Service Pack 1
Internet Explorer 11 on Windows 10 for 32-bit Systems
Internet Explorer 11 on Windows 10 for x64-based Systems
Internet Explorer 11 on Windows 10 Version 1511 for 32-bit Systems
Internet Explorer 11 on Windows 10 Version 1511 for x64-based Systems
Internet Explorer 11 on Windows 10 Version 1607 for 32-bit Systems
Internet Explorer 11 on Windows 10 Version 1607 for x64-based Systems
Internet Explorer 11 on Windows 10 Version 1703 for 32-bit Systems
Internet Explorer 11 on Windows 10 Version 1703 for x64-based Systems
Internet Explorer 11 on Windows Server 2016
Internet Explorer 11 on Windows Server 2016 (Server Core installation)
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1703 for 32-bit Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1703 for x64-based Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1511 for 32-bit Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1511 for x64-based Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for 32-bit Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for x64-based Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 for 32-bit Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 for x64-based Systems
Adobe Flash Player on Windows 8.1 for 32-bit systems
Adobe Flash Player on Windows 8.1 for x64-based systems
Adobe Flash Player on Windows RT 8.1
Adobe Flash Player on Windows Server 2012 R2
Adobe Flash Player on Windows 10 for x64-based Systems
Adobe Flash Player on Windows 10 for 32-bit Systems
Adobe Flash Player on Windows 10 Version 1511 for 32-bit Systems
Adobe Flash Player on Windows 10 Version 1511 for x64-based Systems
Adobe Flash Player on Windows 10 Version 1607 for 32-bit Systems
Adobe Flash Player on Windows 10 Version 1607 for x64-based Systems
Adobe Flash Player on Windows Server 2016
Adobe Flash Player on Windows Server 2012
Adobe Flash Player on Windows 10 Version 1703 for 32-bit Systems
Adobe Flash Player on Windows 10 Version 1703 for x64-based Systems
Microsoft Outlook for Mac 2011
Windows 7 for 32-bit Systems Service Pack 1
Windows 7 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)
Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems Service Pack 1
Microsoft Silverlight 5 when installed on Microsoft Windows (x64-based)
Microsoft Office 2007 Service Pack 3
Microsoft Excel 2007 Service Pack 3
Microsoft OneNote 2007 Service Pack 3
Microsoft Outlook 2007 Service Pack 3
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)
Internet Explorer 9 on Windows Vista Service Pack 2
Internet Explorer 9 on Windows Server 2008 for 32-bit Systems Service Pack 2
Internet Explorer 9 on Windows Vista x64 Edition Service Pack 2
Internet Explorer 9 on Windows Server 2008 for x64-based Systems Service Pack 2
Windows Server 2012
Windows Server 2012 (Server Core installation)
Adobe Flash Player on Windows Server 2012
Adobe Flash Player on Windows 8.1 for 32-bit systems
Adobe Flash Player on Windows 8.1 for x64-based systems
Adobe Flash Player on Windows Server 2012 R2
Adobe Flash Player on Windows RT 8.1
Adobe Flash Player on Windows 10 for 32-bit Systems
Adobe Flash Player on Windows 10 for x64-based Systems
Adobe Flash Player on Windows 10 Version 1511 for x64-based Systems
Adobe Flash Player on Windows 10 Version 1511 for 32-bit Systems
Adobe Flash Player on Windows Server 2016
Adobe Flash Player on Windows 10 Version 1607 for 32-bit Systems
Adobe Flash Player on Windows 10 Version 1607 for x64-based Systems
Adobe Flash Player on Windows 10 Version 1703 for 32-bit Systems
Adobe Flash Player on Windows 10 Version 1703 for x64-based Systems
Microsoft Silverlight 5 when installed on Microsoft Windows (32-bit)
Microsoft Silverlight 5 Developer Runtime when installed on Microsoft Windows (x64-based)
Microsoft Silverlight 5 Developer Runtime when installed on Microsoft Windows (32-bit)
Windows 8.1 for 32-bit systems
Windows 8.1 for x64-based systems
Windows Server 2012 R2
Windows RT 8.1
Internet Explorer 11 on Windows 7 for 32-bit Systems Service Pack 1
Internet Explorer 11 on Windows 7 for x64-based Systems Service Pack 1
Internet Explorer 11 on Windows Server 2008 R2 for x64-based Systems Service Pack 1
Internet Explorer 11 on Windows 8.1 for 32-bit systems
Internet Explorer 11 on Windows 8.1 for x64-based systems
Internet Explorer 11 on Windows Server 2012 R2
Internet Explorer 11 on Windows RT 8.1
Internet Explorer 11 on Windows 10 for 32-bit Systems
Internet Explorer 11 on Windows 10 for x64-based Systems
Internet Explorer 11 on Windows 10 Version 1511 for x64-based Systems
Internet Explorer 11 on Windows 10 Version 1511 for 32-bit Systems
Internet Explorer 11 on Windows Server 2016
Internet Explorer 11 on Windows 10 Version 1607 for 32-bit Systems
Internet Explorer 11 on Windows 10 Version 1607 for x64-based Systems
Internet Explorer 11 on Windows Server 2016 (Server Core installation)
Internet Explorer 11 on Windows 10 Version 1703 for 32-bit Systems
Internet Explorer 11 on Windows 10 Version 1703 for x64-based Systems
Microsoft Excel 2010 Service Pack 2 (32-bit editions)
Microsoft Excel 2010 Service Pack 2 (64-bit editions)
Microsoft Excel Web App 2010 Service Pack 2
Microsoft Office 2010 Service Pack 2 (32-bit editions)
Microsoft Office 2010 Service Pack 2 (64-bit editions)
Microsoft Office Web Apps 2010 Service Pack 2
Microsoft Outlook 2010 Service Pack 2 (32-bit editions)
Microsoft Outlook 2010 Service Pack 2 (64-bit editions)
Windows Server 2012 R2 (Server Core installation)
Internet Explorer 10 on Windows Server 2012
Microsoft Office 2013 Service Pack 1 (32-bit editions)
Microsoft Office 2013 Service Pack 1 (64-bit editions)
Microsoft Office 2013 RT Service Pack 1
Microsoft Office Web Apps Server 2013 Service Pack 1
Microsoft .NET Framework 4.5.2 on Windows 7 for 32-bit Systems Service Pack 1
Microsoft .NET Framework 4.5.2 on Windows 7 for x64-based Systems Service Pack 1
Microsoft .NET Framework 4.5.2 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)
Microsoft .NET Framework 4.5.2 on Windows Server 2008 R2 for x64-based Systems Service Pack 1
Microsoft .NET Framework 4.5.2 on Windows Server 2012
Microsoft .NET Framework 4.5.2 on Windows Server 2012 (Server Core installation)
Microsoft .NET Framework 4.5.2 on Windows 8.1 for 32-bit systems
Microsoft .NET Framework 4.5.2 on Windows 8.1 for x64-based systems
Microsoft .NET Framework 4.5.2 on Windows Server 2012 R2
Microsoft .NET Framework 4.5.2 on Windows RT 8.1
Microsoft .NET Framework 4.5.2 on Windows Server 2012 R2 (Server Core installation)
Microsoft .NET Framework 4.5.2 on Windows Vista Service Pack 2
Microsoft .NET Framework 4.5.2 on Windows Server 2008 for 32-bit Systems Service Pack 2
Microsoft .NET Framework 4.5.2 on Windows Vista x64 Edition Service Pack 2
Microsoft .NET Framework 4.5.2 on Windows Server 2008 for x64-based Systems Service Pack 2
Microsoft Edge (EdgeHTML-based) on Windows 10 for 32-bit Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 for x64-based Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1511 for x64-based Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1511 for 32-bit Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for 32-bit Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for x64-based Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1703 for 32-bit Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1703 for x64-based Systems
Microsoft .NET Framework 4.6 on Windows 10 for 32-bit Systems
Microsoft .NET Framework 4.6 on Windows 10 for x64-based Systems
Microsoft .NET Framework 4.6 on Windows Vista Service Pack 2
Microsoft .NET Framework 4.6 on Windows Server 2008 for 32-bit Systems Service Pack 2
Microsoft .NET Framework 4.6 on Windows Vista x64 Edition Service Pack 2
Microsoft .NET Framework 4.6 on Windows Server 2008 for x64-based Systems Service Pack 2
Windows 10 for 32-bit Systems
Windows 10 for x64-based Systems
Microsoft Office 2016 (32-bit edition)
Microsoft Office 2016 (64-bit edition)
Microsoft Outlook 2016 (32-bit edition)
Microsoft Outlook 2016 (64-bit edition)
Windows 10 Version 1511 for x64-based Systems
Windows 10 Version 1511 for 32-bit Systems
Microsoft OneNote 2010 Service Pack 2 (32-bit editions)
Microsoft OneNote 2010 Service Pack 2 (64-bit editions)
Microsoft .NET Framework 4.6/4.6.1 on Windows 7 for 32-bit Systems Service Pack 1
Microsoft .NET Framework 4.6/4.6.1 on Windows 7 for x64-based Systems Service Pack 1
Microsoft .NET Framework 4.6/4.6.1 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)
Microsoft .NET Framework 4.6/4.6.1 on Windows Server 2008 R2 for x64-based Systems Service Pack 1
Microsoft .NET Framework 4.6/4.6.1 on Windows Server 2012
Microsoft .NET Framework 4.6/4.6.1 on Windows Server 2012 (Server Core installation)
Microsoft .NET Framework 4.6/4.6.1 on Windows 8.1 for 32-bit systems
Microsoft .NET Framework 4.6/4.6.1 on Windows 8.1 for x64-based systems
Microsoft .NET Framework 4.6/4.6.1 on Windows Server 2012 R2
Microsoft .NET Framework 4.6/4.6.1 on Windows RT 8.1
Microsoft .NET Framework 4.6/4.6.1 on Windows Server 2012 R2 (Server Core installation)
Microsoft .NET Framework 4.6.1 on Windows 10 Version 1511 for x64-based Systems
Microsoft .NET Framework 4.6.1 on Windows 10 Version 1511 for 32-bit Systems
Microsoft Outlook 2013 Service Pack 1 (32-bit editions)
Microsoft Outlook 2013 Service Pack 1 (64-bit editions)
Windows Server 2016
Office Online Server
Windows 10 Version 1607 for 32-bit Systems
Windows 10 Version 1607 for x64-based Systems
Windows Server 2016 (Server Core installation)
Microsoft .NET Framework 4.6.2 on Windows 7 for 32-bit Systems Service Pack 1
Microsoft .NET Framework 4.6.2 on Windows 7 for x64-based Systems Service Pack 1
Microsoft .NET Framework 4.6.2 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)
Microsoft .NET Framework 4.6.2 on Windows Server 2008 R2 for x64-based Systems Service Pack 1
Microsoft .NET Framework 4.6.2 on Windows Server 2012
Microsoft .NET Framework 4.6.2 on Windows Server 2012 (Server Core installation)
Microsoft .NET Framework 4.6.2 on Windows 8.1 for 32-bit systems
Microsoft .NET Framework 4.6.2 on Windows 8.1 for x64-based systems
Microsoft .NET Framework 4.6.2 on Windows Server 2012 R2
Microsoft .NET Framework 4.6.2 on Windows RT 8.1
Microsoft .NET Framework 4.6.2 on Windows Server 2012 R2 (Server Core installation)
Microsoft .NET Framework 4.6.2 on Windows Server 2016
Microsoft .NET Framework 4.6.2 on Windows 10 Version 1607 for 32-bit Systems
Microsoft .NET Framework 4.6.2 on Windows 10 Version 1607 for x64-based Systems
Microsoft .NET Framework 4.6.2 on Windows Server 2016 (Server Core installation)
Windows 10 Version 1703 for 32-bit Systems
Windows 10 Version 1703 for x64-based Systems
Microsoft .NET Framework 4.7 on Windows 10 Version 1703 for 32-bit Systems
Microsoft .NET Framework 4.7 on Windows 10 Version 1703 for x64-based Systems
Mono Framework Version 4.8.1.0
Mono Framework Version 5.0.0.48
cbl2 squashfs-tools 4.5-1 on CBL Mariner 2.0
cm1 squashfs-tools 4.4-1 on CBL Mariner 1.0
cm1 libsndfile 1.0.28-14 on CBL Mariner 1.0
cm1 libsndfile 1.0.31-1 on CBL Mariner 1.0
cm1 libdb 5.3.28-5 on CBL Mariner 1.0
cbl2 libdb 5.3.28-7 on CBL Mariner 2.0
azl3 libdb 5.3.28-7 on Azure Linux 3.0
azl3 libdb 5.3.28-7 on Azure Linux 3.0
cbl2 qemu 6.2.0-24 on CBL-Mariner 2.0
azl3 qemu 8.2.0-16 on Azure Linux 3.0
azl3 libdb 5.3.28-9 on Azure Linux 3.0
Microsoft .NET Framework 3.5 on Windows Server 2012
Microsoft .NET Framework 3.5 on Windows Server 2012 (Server Core installation)
Microsoft .NET Framework 3.5 on Windows 8.1 for 32-bit systems
Microsoft .NET Framework 3.5 on Windows 8.1 for x64-based systems
Microsoft .NET Framework 3.5 on Windows Server 2012 R2
Microsoft .NET Framework 3.5 on Windows Server 2012 R2 (Server Core installation)
Microsoft .NET Framework 3.5 on Windows 10 for 32-bit Systems
Microsoft .NET Framework 3.5 on Windows 10 for x64-based Systems
Microsoft .NET Framework 3.5 on Windows 10 Version 1511 for x64-based Systems
Microsoft .NET Framework 3.5 on Windows 10 Version 1511 for 32-bit Systems
Microsoft .NET Framework 3.5 on Windows Server 2016
Microsoft .NET Framework 3.5 on Windows 10 Version 1607 for 32-bit Systems
Microsoft .NET Framework 3.5 on Windows 10 Version 1607 for x64-based Systems
Microsoft .NET Framework 3.5 on Windows Server 2016 (Server Core installation)
Microsoft .NET Framework 3.5 on Windows 10 Version 1703 for 32-bit Systems
Microsoft .NET Framework 3.5 on Windows 10 Version 1703 for x64-based Systems
Windows Vista Service Pack 2
Excel Services on Microsoft SharePoint Server 2013 Service Pack 1
Excel Services on Microsoft Sharepoint Server 2010 Service Pack 2 Bad
Microsoft .NET Framework 2.0 Service Pack 2 on Windows Vista Service Pack 2
Microsoft .NET Framework 2.0 Service Pack 2 on Windows Server 2008 for Itanium-Based Systems Service Pack 2
Microsoft .NET Framework 2.0 Service Pack 2 on Windows Server 2008 for 32-bit Systems Service Pack 2
Microsoft .NET Framework 2.0 Service Pack 2 on Windows Vista x64 Edition Service Pack 2
Microsoft .NET Framework 2.0 Service Pack 2 on Windows Server 2008 for x64-based Systems Service Pack 2
Microsoft Office Compatibility Pack Service Pack 2
Windows Server 2008 for Itanium-Based Systems Service Pack 2
Windows Server 2008 for 32-bit Systems Service Pack 2
Windows Vista x64 Edition Service Pack 2
Windows Server 2008 for x64-based Systems Service Pack 2
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)
Microsoft .NET Framework 3.5.1 on Windows 7 for 32-bit Systems Service Pack 1
Microsoft .NET Framework 3.5.1 on Windows 7 for x64-based Systems Service Pack 1
Microsoft .NET Framework 3.5.1 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)
Microsoft .NET Framework 3.5.1 on Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1
Microsoft .NET Framework 3.5.1 on Windows Server 2008 R2 for x64-based Systems Service Pack 1
(1) unsquash-1.c (2) unsquash-2.c (3) unsquash-3.c and (4) unsquash-4.c in Squashfs and sasquatch allow remote attackers to cause a denial of service (application crash) via a crafted input.
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
mitre
Yes
CVE-2015-4646
Improper Input Validation
16837-16820
16836-16823
16837-16820
16836-16823
Important
16837-16820
Important
16836-16823
7.5
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
16837-16820
7.5
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
16836-16823
CBL-Mariner Releases
16837-16820
No
Security Update
4.4-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
16837-16820
CBL-Mariner Releases
CBL-Mariner Releases
16836-16823
No
Security Update
4.5-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
16836-16823
CBL-Mariner Releases
1.0
2021-07-30T00:00:00
<p>Information published.</p>
1.1
2021-12-16T00:00:00
<p>Added squashfs-tools to CBL-Mariner 2.0</p>
Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.32. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Data Store executes to compromise Data Store. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Data Store. CVSS 3.0 Base Score 7.0 (Confidentiality Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H).
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
oracle
Yes
CVE-2017-3605
16912-17084
19212-17084
16910-16820
16911-16823
16912-16817
16912-17084
19212-17084
16910-16820
16911-16823
16912-16817
Important
16912-17084
Important
19212-17084
Important
16910-16820
Important
16911-16823
Important
16912-16817
7.0
7.0
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
16912-17084
7.0
7.0
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
19212-17084
7.0
7.0
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
16910-16820
7.0
7.0
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
16911-16823
7.0
7.0
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
16912-16817
CBL-Mariner Releases
16912-17084
19212-17084
16911-16823
16912-16817
No
Security Update
5.3.28-7
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
16912-17084
19212-17084
16911-16823
16912-16817
CBL-Mariner Releases
CBL-Mariner Releases
16910-16820
No
Security Update
5.3.28-5
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
16910-16820
CBL-Mariner Releases
1.0
2021-07-30T00:00:00
<p>Information published.</p>
1.1
2021-12-16T00:00:00
<p>Added libdb to CBL-Mariner 2.0</p>
1.2
2024-06-30T07:00:00
<p>Information published.</p>
1.3
2026-02-19T01:13:52
<p>Information published.</p>
2.0
2026-08-12T21:33:30
<p>Information published.</p>
Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.32. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Data Store executes to compromise Data Store. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Data Store. CVSS 3.0 Base Score 7.0 (Confidentiality Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H).
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
oracle
Yes
CVE-2017-3606
16912-17084
16910-16820
16911-16823
16912-16817
19212-17084
16912-17084
16910-16820
16911-16823
16912-16817
19212-17084
Important
16912-17084
Important
16910-16820
Important
16911-16823
Important
16912-16817
Important
19212-17084
7.0
7.0
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
16912-17084
7.0
7.0
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
16910-16820
7.0
7.0
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
16911-16823
7.0
7.0
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
16912-16817
7.0
7.0
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
19212-17084
CBL-Mariner Releases
16912-17084
16911-16823
16912-16817
19212-17084
No
Security Update
5.3.28-7
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
16912-17084
16911-16823
16912-16817
19212-17084
CBL-Mariner Releases
CBL-Mariner Releases
16910-16820
No
Security Update
5.3.28-5
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
16910-16820
CBL-Mariner Releases
2.0
2026-08-12T21:34:11
<p>Information published.</p>
1.0
2021-07-30T00:00:00
<p>Information published.</p>
1.1
2021-12-16T00:00:00
<p>Added libdb to CBL-Mariner 2.0</p>
1.2
2024-06-30T07:00:00
<p>Information published.</p>
1.3
2026-02-19T01:14:04
<p>Information published.</p>
Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.32. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Data Store executes to compromise Data Store. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Data Store. CVSS 3.0 Base Score 7.0 (Confidentiality Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H).
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
oracle
Yes
CVE-2017-3609
16912-17084
19212-17084
16910-16820
16911-16823
16912-16817
16912-17084
19212-17084
16910-16820
16911-16823
16912-16817
Important
16912-17084
Important
19212-17084
Important
16910-16820
Important
16911-16823
Important
16912-16817
7.0
7.0
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
16912-17084
7.0
7.0
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
19212-17084
7.0
7.0
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
16910-16820
7.0
7.0
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
16911-16823
7.0
7.0
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
16912-16817
CBL-Mariner Releases
16912-17084
19212-17084
16911-16823
16912-16817
No
Security Update
5.3.28-7
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
16912-17084
19212-17084
16911-16823
16912-16817
CBL-Mariner Releases
CBL-Mariner Releases
16910-16820
No
Security Update
5.3.28-5
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
16910-16820
CBL-Mariner Releases
1.3
2026-02-19T01:14:36
<p>Information published.</p>
2.0
2026-08-12T21:36:12
<p>Information published.</p>
1.0
2021-07-30T00:00:00
<p>Information published.</p>
1.1
2021-12-16T00:00:00
<p>Added libdb to CBL-Mariner 2.0</p>
1.2
2024-06-30T07:00:00
<p>Information published.</p>
Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.32. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Data Store executes to compromise Data Store. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Data Store. CVSS 3.0 Base Score 7.0 (Confidentiality Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H).
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
oracle
Yes
CVE-2017-3610
16912-17084
16910-16820
16911-16823
16912-16817
19212-17084
16912-17084
16910-16820
16911-16823
16912-16817
19212-17084
Important
16912-17084
Important
16910-16820
Important
16911-16823
Important
16912-16817
Important
19212-17084
7.0
7.0
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
16912-17084
7.0
7.0
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
16910-16820
7.0
7.0
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
16911-16823
7.0
7.0
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
16912-16817
7.0
7.0
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
19212-17084
CBL-Mariner Releases
16912-17084
16911-16823
16912-16817
19212-17084
No
Security Update
5.3.28-7
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
16912-17084
16911-16823
16912-16817
19212-17084
CBL-Mariner Releases
CBL-Mariner Releases
16910-16820
No
Security Update
5.3.28-5
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
16910-16820
CBL-Mariner Releases
2.0
2026-08-12T21:36:54
<p>Information published.</p>
1.0
2021-07-30T00:00:00
<p>Information published.</p>
1.1
2021-12-16T00:00:00
<p>Added libdb to CBL-Mariner 2.0</p>
1.2
2024-06-30T07:00:00
<p>Information published.</p>
1.3
2026-02-19T01:14:45
<p>Information published.</p>
Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.32. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Data Store executes to compromise Data Store. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Data Store. CVSS 3.0 Base Score 7.0 (Confidentiality Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H).
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
oracle
Yes
CVE-2017-3613
16912-17084
19212-17084
16910-16820
16911-16823
16912-16817
16912-17084
19212-17084
16910-16820
16911-16823
16912-16817
Important
16912-17084
Important
19212-17084
Important
16910-16820
Important
16911-16823
Important
16912-16817
7.0
7.0
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
16912-17084
7.0
7.0
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
19212-17084
7.0
7.0
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
16910-16820
7.0
7.0
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
16911-16823
7.0
7.0
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
16912-16817
CBL-Mariner Releases
16912-17084
19212-17084
16911-16823
16912-16817
No
Security Update
5.3.28-7
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
16912-17084
19212-17084
16911-16823
16912-16817
CBL-Mariner Releases
CBL-Mariner Releases
16910-16820
No
Security Update
5.3.28-5
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
16910-16820
CBL-Mariner Releases
1.3
2026-02-19T01:15:14
<p>Information published.</p>
2.0
2026-08-12T21:38:53
<p>Information published.</p>
1.0
2021-07-30T00:00:00
<p>Information published.</p>
1.1
2021-12-16T00:00:00
<p>Added libdb to CBL-Mariner 2.0</p>
1.2
2024-06-30T07:00:00
<p>Information published.</p>
Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.32. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Data Store executes to compromise Data Store. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Data Store. CVSS 3.0 Base Score 7.0 (Confidentiality Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H).
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
oracle
Yes
CVE-2017-3614
16912-17084
19212-17084
16910-16820
16911-16823
16912-16817
16912-17084
19212-17084
16910-16820
16911-16823
16912-16817
Important
16912-17084
Important
19212-17084
Important
16910-16820
Important
16911-16823
Important
16912-16817
7.0
7.0
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
16912-17084
7.0
7.0
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
19212-17084
7.0
7.0
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
16910-16820
7.0
7.0
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
16911-16823
7.0
7.0
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
16912-16817
CBL-Mariner Releases
16912-17084
19212-17084
16911-16823
16912-16817
No
Security Update
5.3.28-7
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
16912-17084
19212-17084
16911-16823
16912-16817
CBL-Mariner Releases
CBL-Mariner Releases
16910-16820
No
Security Update
5.3.28-5
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
16910-16820
CBL-Mariner Releases
2.0
2026-08-12T21:39:34
<p>Information published.</p>
1.0
2021-07-30T00:00:00
<p>Information published.</p>
1.1
2021-12-16T00:00:00
<p>Added libdb to CBL-Mariner 2.0</p>
1.2
2024-06-30T07:00:00
<p>Information published.</p>
1.3
2026-02-19T01:15:23
<p>Information published.</p>
Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.32. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Data Store executes to compromise Data Store. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Data Store. CVSS 3.0 Base Score 7.0 (Confidentiality Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H).
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
oracle
Yes
CVE-2017-3615
16912-17084
19212-17084
16910-16820
16911-16823
16912-16817
16912-17084
19212-17084
16910-16820
16911-16823
16912-16817
Important
16912-17084
Important
19212-17084
Important
16910-16820
Important
16911-16823
Important
16912-16817
7.0
7.0
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
16912-17084
7.0
7.0
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
19212-17084
7.0
7.0
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
16910-16820
7.0
7.0
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
16911-16823
7.0
7.0
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
16912-16817
CBL-Mariner Releases
16912-17084
19212-17084
16911-16823
16912-16817
No
Security Update
5.3.28-7
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
16912-17084
19212-17084
16911-16823
16912-16817
CBL-Mariner Releases
CBL-Mariner Releases
16910-16820
No
Security Update
5.3.28-5
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
16910-16820
CBL-Mariner Releases
1.3
2026-02-19T01:15:33
<p>Information published.</p>
2.0
2026-08-12T21:40:13
<p>Information published.</p>
1.0
2021-07-30T00:00:00
<p>Information published.</p>
1.1
2021-12-16T00:00:00
<p>Added libdb to CBL-Mariner 2.0</p>
1.2
2024-06-30T07:00:00
<p>Information published.</p>
The flac_buffer_copy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted audio file.
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
mitre
Yes
CVE-2017-8361
Improper Restriction of Operations within the Bounds of a Memory Buffer
16897-16820
16897-16820
Important
16897-16820
8.8
8.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
16897-16820
CBL-Mariner Releases
16897-16820
No
Security Update
1.0.31-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
16897-16820
CBL-Mariner Releases
1.0
2021-01-28T00:00:00
<p>Information published.</p>
The flac_buffer_copy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (invalid read and application crash) via a crafted audio file.
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
mitre
Yes
CVE-2017-8362
Out-of-bounds Read
16897-16820
16897-16820
Moderate
16897-16820
6.5
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
16897-16820
CBL-Mariner Releases
16897-16820
No
Security Update
1.0.31-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
16897-16820
CBL-Mariner Releases
1.0
2021-01-28T00:00:00
<p>Information published.</p>
hw/display/cirrus_vga_rop.h in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (out-of-bounds read and QEMU process crash) via vectors related to copying VGA data via the cirrus_bitblt_rop_fwd_transp_ and cirrus_bitblt_rop_fwd_ functions.
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
mitre
Yes
CVE-2017-7718
Out-of-bounds Read
17459-17084
17093-21692
17459-17084
17093-21692
Moderate
17459-17084
Moderate
17093-21692
5.5
5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
17459-17084
5.5
5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
17093-21692
CBL-Mariner Releases
17459-17084
No
Security Update
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
17459-17084
CBL-Mariner Releases
1.0
2025-09-04T02:42:31
<p>Information published.</p>
1.1
2026-02-18T02:40:27
<p>Information published.</p>
2.0
2026-08-12T23:19:24
<p>Information published.</p>
Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.32. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Data Store executes to compromise Data Store. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Data Store. CVSS 3.0 Base Score 7.0 (Confidentiality Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H).
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
oracle
Yes
CVE-2017-3604
16912-17084
19212-17084
16910-16820
16911-16823
16912-16817
16912-17084
19212-17084
16910-16820
16911-16823
16912-16817
Important
16912-17084
Important
19212-17084
Important
16910-16820
Important
16911-16823
Important
16912-16817
7.0
7.0
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
16912-17084
7.0
7.0
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
19212-17084
7.0
7.0
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
16910-16820
7.0
7.0
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
16911-16823
7.0
7.0
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
16912-16817
CBL-Mariner Releases
16912-17084
19212-17084
16911-16823
16912-16817
No
Security Update
5.3.28-7
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
16912-17084
19212-17084
16911-16823
16912-16817
CBL-Mariner Releases
CBL-Mariner Releases
16910-16820
No
Security Update
5.3.28-5
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
16910-16820
CBL-Mariner Releases
1.3
2026-02-19T01:13:40
<p>Information published.</p>
2.0
2026-08-12T21:32:51
<p>Information published.</p>
1.0
2021-07-30T00:00:00
<p>Information published.</p>
1.1
2021-12-16T00:00:00
<p>Added libdb to CBL-Mariner 2.0</p>
1.2
2024-06-30T07:00:00
<p>Information published.</p>
Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.32. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Data Store executes to compromise Data Store. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Data Store. CVSS 3.0 Base Score 7.0 (Confidentiality Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H).
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
oracle
Yes
CVE-2017-3607
16912-17084
19212-17084
16910-16820
16911-16823
16912-16817
16912-17084
19212-17084
16910-16820
16911-16823
16912-16817
Important
16912-17084
Important
19212-17084
Important
16910-16820
Important
16911-16823
Important
16912-16817
7.0
7.0
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
16912-17084
7.0
7.0
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
19212-17084
7.0
7.0
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
16910-16820
7.0
7.0
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
16911-16823
7.0
7.0
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
16912-16817
CBL-Mariner Releases
16912-17084
19212-17084
16911-16823
16912-16817
No
Security Update
5.3.28-7
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
16912-17084
19212-17084
16911-16823
16912-16817
CBL-Mariner Releases
CBL-Mariner Releases
16910-16820
No
Security Update
5.3.28-5
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
16910-16820
CBL-Mariner Releases
1.3
2026-02-19T01:14:16
<p>Information published.</p>
2.0
2026-08-12T21:34:53
<p>Information published.</p>
1.0
2021-07-30T00:00:00
<p>Information published.</p>
1.1
2021-12-16T00:00:00
<p>Added libdb to CBL-Mariner 2.0</p>
1.2
2024-06-30T07:00:00
<p>Information published.</p>
Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.32. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Data Store executes to compromise Data Store. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Data Store. CVSS 3.0 Base Score 7.0 (Confidentiality Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H).
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
oracle
Yes
CVE-2017-3608
16912-17084
16910-16820
16911-16823
16912-16817
19212-17084
16912-17084
16910-16820
16911-16823
16912-16817
19212-17084
Important
16912-17084
Important
16910-16820
Important
16911-16823
Important
16912-16817
Important
19212-17084
7.0
7.0
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
16912-17084
7.0
7.0
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
16910-16820
7.0
7.0
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
16911-16823
7.0
7.0
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
16912-16817
7.0
7.0
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
19212-17084
CBL-Mariner Releases
16912-17084
16911-16823
16912-16817
19212-17084
No
Security Update
5.3.28-7
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
16912-17084
16911-16823
16912-16817
19212-17084
CBL-Mariner Releases
CBL-Mariner Releases
16910-16820
No
Security Update
5.3.28-5
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
16910-16820
CBL-Mariner Releases
1.0
2021-07-30T00:00:00
<p>Information published.</p>
1.1
2021-12-16T00:00:00
<p>Added libdb to CBL-Mariner 2.0</p>
1.2
2024-06-30T07:00:00
<p>Information published.</p>
1.3
2026-02-19T01:14:26
<p>Information published.</p>
2.0
2026-08-12T21:35:34
<p>Information published.</p>
Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.32. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Data Store executes to compromise Data Store. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Data Store. CVSS 3.0 Base Score 7.0 (Confidentiality Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H).
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
oracle
Yes
CVE-2017-3611
16912-17084
16910-16820
16911-16823
16912-16817
19212-17084
16912-17084
16910-16820
16911-16823
16912-16817
19212-17084
Important
16912-17084
Important
16910-16820
Important
16911-16823
Important
16912-16817
Important
19212-17084
7.0
7.0
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
16912-17084
7.0
7.0
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
16910-16820
7.0
7.0
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
16911-16823
7.0
7.0
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
16912-16817
7.0
7.0
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
19212-17084
CBL-Mariner Releases
16912-17084
16911-16823
16912-16817
19212-17084
No
Security Update
5.3.28-7
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
16912-17084
16911-16823
16912-16817
19212-17084
CBL-Mariner Releases
CBL-Mariner Releases
16910-16820
No
Security Update
5.3.28-5
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
16910-16820
CBL-Mariner Releases
2.0
2026-08-12T21:37:36
<p>Information published.</p>
1.0
2021-07-30T00:00:00
<p>Information published.</p>
1.1
2021-12-16T00:00:00
<p>Added libdb to CBL-Mariner 2.0</p>
1.2
2024-06-30T07:00:00
<p>Information published.</p>
1.3
2026-02-19T01:14:54
<p>Information published.</p>
Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.32. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Data Store executes to compromise Data Store. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Data Store. CVSS 3.0 Base Score 7.0 (Confidentiality Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H).
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
oracle
Yes
CVE-2017-3612
16912-17084
16910-16820
16911-16823
16912-16817
19212-17084
16912-17084
16910-16820
16911-16823
16912-16817
19212-17084
Important
16912-17084
Important
16910-16820
Important
16911-16823
Important
16912-16817
Important
19212-17084
7.0
7.0
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
16912-17084
7.0
7.0
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
16910-16820
7.0
7.0
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
16911-16823
7.0
7.0
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
16912-16817
7.0
7.0
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
19212-17084
CBL-Mariner Releases
16912-17084
16911-16823
16912-16817
19212-17084
No
Security Update
5.3.28-7
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
16912-17084
16911-16823
16912-16817
19212-17084
CBL-Mariner Releases
CBL-Mariner Releases
16910-16820
No
Security Update
5.3.28-5
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
16910-16820
CBL-Mariner Releases
1.3
2026-02-19T01:15:04
<p>Information published.</p>
2.0
2026-08-12T21:38:17
<p>Information published.</p>
1.0
2021-07-30T00:00:00
<p>Information published.</p>
1.1
2021-12-16T00:00:00
<p>Added libdb to CBL-Mariner 2.0</p>
1.2
2024-06-30T07:00:00
<p>Information published.</p>
Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.32. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Data Store executes to compromise Data Store. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Data Store. CVSS 3.0 Base Score 7.0 (Confidentiality Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H).
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
oracle
Yes
CVE-2017-3616
16912-17084
19212-17084
16910-16820
16911-16823
16912-16817
16912-17084
19212-17084
16910-16820
16911-16823
16912-16817
Important
16912-17084
Important
19212-17084
Important
16910-16820
Important
16911-16823
Important
16912-16817
7.0
7.0
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
16912-17084
7.0
7.0
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
19212-17084
7.0
7.0
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
16910-16820
7.0
7.0
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
16911-16823
7.0
7.0
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
16912-16817
CBL-Mariner Releases
16912-17084
19212-17084
16911-16823
16912-16817
No
Security Update
5.3.28-7
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
16912-17084
19212-17084
16911-16823
16912-16817
CBL-Mariner Releases
CBL-Mariner Releases
16910-16820
No
Security Update
5.3.28-5
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
16910-16820
CBL-Mariner Releases
2.0
2026-08-12T21:40:53
<p>Information published.</p>
1.0
2021-07-30T00:00:00
<p>Information published.</p>
1.1
2021-12-16T00:00:00
<p>Added libdb to CBL-Mariner 2.0</p>
1.2
2024-06-30T07:00:00
<p>Information published.</p>
1.3
2026-02-19T01:15:43
<p>Information published.</p>
Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.32. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Data Store executes to compromise Data Store. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Data Store. CVSS 3.0 Base Score 7.0 (Confidentiality Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H).
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
oracle
Yes
CVE-2017-3617
16912-17084
16910-16820
16911-16823
16912-16817
19212-17084
16912-17084
16910-16820
16911-16823
16912-16817
19212-17084
Important
16912-17084
Important
16910-16820
Important
16911-16823
Important
16912-16817
Important
19212-17084
7.0
7.0
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
16912-17084
7.0
7.0
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
16910-16820
7.0
7.0
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
16911-16823
7.0
7.0
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
16912-16817
7.0
7.0
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
19212-17084
CBL-Mariner Releases
16912-17084
16911-16823
16912-16817
19212-17084
No
Security Update
5.3.28-7
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
16912-17084
16911-16823
16912-16817
19212-17084
CBL-Mariner Releases
CBL-Mariner Releases
16910-16820
No
Security Update
5.3.28-5
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
16910-16820
CBL-Mariner Releases
2.0
2026-08-12T21:41:34
<p>Information published.</p>
1.0
2021-07-30T00:00:00
<p>Information published.</p>
1.1
2021-12-16T00:00:00
<p>Added libdb to CBL-Mariner 2.0</p>
1.2
2024-06-30T07:00:00
<p>Information published.</p>
1.3
2026-02-19T01:15:53
<p>Information published.</p>
The flac_buffer_copy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted audio file.
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
mitre
Yes
CVE-2017-8363
Out-of-bounds Read
16897-16820
16897-16820
Moderate
16897-16820
6.5
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
16897-16820
CBL-Mariner Releases
16897-16820
No
Security Update
1.0.31-1
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
16897-16820
CBL-Mariner Releases
1.0
2021-01-28T00:00:00
<p>Information published.</p>
The i2les_array function in pcm.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted audio file.
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
mitre
Yes
CVE-2017-8365
Out-of-bounds Read
16893-16820
16893-16820
Moderate
16893-16820
6.5
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
16893-16820
CBL-Mariner Releases
16893-16820
No
Security Update
1.0.28-14
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
16893-16820
CBL-Mariner Releases
1.0
2021-01-28T00:00:00
<p>Information published.</p>
Scripting Engine Memory Corruption Vulnerability
<p>A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Internet Explorer and then convince a user to view the website. An attacker could also embed an ActiveX control marked "safe for initialization" in an application or Microsoft Office document that hosts the IE rendering engine. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p>
<p>The security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.</p>
Microsoft Scripting Engine
CVE-2017-0158
10729
10735
10789
10788
10852
10853
10047
10048
10481
10482
10484
9312
10287
9311
9318
9344
10050
10051
10049
10378
10379
10483
10543
4393
9316
10951
10952
10816
10855
Remote Code Execution
10729
Remote Code Execution
10735
Remote Code Execution
10789
Remote Code Execution
10788
Remote Code Execution
10852
Remote Code Execution
10853
Remote Code Execution
10047
Remote Code Execution
10048
Remote Code Execution
10481
Remote Code Execution
10482
Remote Code Execution
10484
Remote Code Execution
9312
Remote Code Execution
10287
Remote Code Execution
9311
Remote Code Execution
9318
Remote Code Execution
9344
Remote Code Execution
10050
Remote Code Execution
10051
Remote Code Execution
10049
Remote Code Execution
10378
Remote Code Execution
10379
Remote Code Execution
10483
Remote Code Execution
10543
Remote Code Execution
4393
Remote Code Execution
9316
Remote Code Execution
10951
Remote Code Execution
10952
Remote Code Execution
10816
Remote Code Execution
10855
Critical
10729
Critical
10735
Critical
10789
Critical
10788
Critical
10852
Critical
10853
Critical
10047
Critical
10048
Critical
10481
Critical
10482
Critical
10484
Critical
9312
Critical
10287
Critical
9311
Critical
9318
Critical
9344
Critical
10050
Critical
10051
Critical
10049
Critical
10378
Critical
10379
Critical
10483
Critical
10543
Critical
4393
Critical
9316
Critical
10951
Critical
10952
Critical
10816
Critical
10855
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10729
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10735
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10789
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10788
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10852
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10853
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10481
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10482
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10484
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9312
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9311
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9318
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9344
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10543
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
4393
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9316
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10951
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10952
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10816
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10855
4015221
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015221
4012606
10729
Yes
Security Update
4015221
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015221
4012606
10735
Yes
Security Update
4015219
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015219
4013198
10789
Yes
Security Update
4015219
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015219
4013198
10788
Yes
Security Update
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10852
Yes
Security Update
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10853
Yes
Security Update
4015549
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015549
4012215
10047
Yes
Monthly Rollup
4015546
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015546
10047
Yes
Security Only
4015549
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015549
4012215
10048
Yes
Monthly Rollup
4015546
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015546
10048
Yes
Security Only
4015550
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015550
4012216
10481
Yes
Monthly Rollup
4015547
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015547
10481
Yes
Security Only
4015550
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015550
4012216
10482
Yes
Monthly Rollup
4015547
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015547
10482
Yes
Security Only
4015550
4012216
10484
Yes
Monthly Rollup
4020535
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4020535
9312
Yes
Security Update
4020535
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4020535
10287
Yes
Security Update
4020535
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4020535
9311
Yes
Security Update
4020535
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4020535
9318
Yes
Security Update
4020535
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4020535
9344
Yes
Security Update
4015549
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015549
4012215
10050
Yes
Monthly Rollup
4015546
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015546
10050
Yes
Security Only
4015549
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015549
4012215
10051
Yes
Monthly Rollup
4015546
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015546
10051
Yes
Security Only
4015549
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015549
4012215
10049
Yes
Monthly Rollup
4015546
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015546
10049
Yes
Security Only
4015551
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015551
4012217
10378
Yes
Monthly Rollup
4015548
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015548
10378
Yes
Security Only
4015551
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015551
4012217
10379
Yes
Monthly Rollup
4015548
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015548
10379
Yes
Security Only
4015550
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015550
4012216
10483
Yes
Monthly Rollup
4015547
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015547
10483
Yes
Security Only
4015550
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015550
4012216
10543
Yes
Monthly Rollup
4015547
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015547
10543
Yes
Security Only
4015067
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015067
4393
Yes
Security Update
4015067
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015067
9316
Yes
Security Update
4015583
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015583
10951
Yes
Security Update
4015583
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015583
10952
Yes
Security Update
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10816
Yes
Security Update
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10855
Yes
Security Update
Simon Zuckerbraun working with <a href="http://www.zerodayinitiative.com/">Trend Micro Zero Day Initiative</a>
1.0
2017-04-11T07:00:00Z
<p>Information published.</p>
2.0
2017-05-09T07:00:00Z
<p>Update 4020535 has been released for Windows Server 2008. The update replaces update 4015067 for CVE-2017-0158 only, to comprehensively address the vulnerability. Microsoft recommends that customers running the affected software install the security update to be fully protected from the vulnerability described in this bulletin. See Microsoft Knowledge Base Article 4020535 for more information.</p>
libjpeg Information Disclosure Vulnerability
<p>An information disclosure vulnerability exists within the open-source libjpeg image-processing library where it fails to properly handle objects in memory, allowing an attacker to retrieve information that could lead to an Address Space Layout Randomization (ASLR) bypass. An attacker who successfully exploited this vulnerability could cause information to be disclosed that could allow for bypassing the ASLR security feature that protects users from a broad class of vulnerabilities.</p>
<p>The security feature bypass itself does not allow arbitrary code execution. However, an attacker could use the ASLR bypass vulnerability in conjunction with another vulnerability, such as a remote code execution vulnerability, that could take advantage of the ASLR bypass to run arbitrary code.</p>
<p>To exploit this vulnerability, an attacker could convince a user to run a specially crafted application. The security update addresses the vulnerability by correcting how libjpeg handles objects in memory.</p>
Microsoft Graphics Component
CVE-2013-6629
10729
10735
10789
10788
10852
10853
10047
10048
10481
10482
10484
9312
9311
9318
9344
10050
10051
10049
10378
10379
10483
10543
4393
9316
10453
10452
10451
10099
10816
10855
10951
10952
10960
10961
Information Disclosure
10729
Information Disclosure
10735
Information Disclosure
10789
Information Disclosure
10788
Information Disclosure
10852
Information Disclosure
10853
Information Disclosure
10047
Information Disclosure
10048
Information Disclosure
10481
Information Disclosure
10482
Information Disclosure
10484
Information Disclosure
9312
Information Disclosure
9311
Information Disclosure
9318
Information Disclosure
9344
Information Disclosure
10050
Information Disclosure
10051
Information Disclosure
10049
Information Disclosure
10378
Information Disclosure
10379
Information Disclosure
10483
Information Disclosure
10543
Information Disclosure
4393
Information Disclosure
9316
Information Disclosure
10453
Information Disclosure
10452
Information Disclosure
10451
Information Disclosure
10099
Information Disclosure
10816
Information Disclosure
10855
Information Disclosure
10951
Information Disclosure
10952
Information Disclosure
10960
Information Disclosure
10961
Important
10729
Important
10735
Important
10789
Important
10788
Important
10852
Important
10853
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
9311
Important
9318
Important
9344
Important
10050
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Important
4393
Important
9316
Important
10453
Important
10452
Important
10451
Important
10099
Important
10816
Important
10855
Important
10951
Important
10952
Important
10960
Important
10961
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely;Older Software Release:Exploitation Unlikely
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10729
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10735
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10789
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10788
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10852
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10853
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10047
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10048
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10481
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10482
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10484
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9312
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9311
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9318
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9344
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10050
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10051
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10049
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10378
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10379
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10483
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
10543
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
4393
4.7
4.2
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
9316
2.6
2.4
CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10816
2.6
2.4
CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10855
2.6
2.4
CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10951
2.6
2.4
CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10952
4015221
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015221
4012606
10729
Yes
Security Update
4015221
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015221
4012606
10735
Yes
Security Update
4015219
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015219
4013198
10789
Yes
Security Update
4015219
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015219
4013198
10788
Yes
Security Update
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10852
Yes
Security Update
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10853
Yes
Security Update
4015549
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015549
4012215
10047
Yes
Monthly Rollup
4015546
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015546
10047
Yes
Security Only
4015549
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015549
4012215
10048
Yes
Monthly Rollup
4015546
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015546
10048
Yes
Security Only
4015550
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015550
4012216
10481
Yes
Monthly Rollup
4015547
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015547
10481
Yes
Security Only
4015550
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015550
4012216
10482
Yes
Monthly Rollup
4015547
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015547
10482
Yes
Security Only
4015550
4012216
10484
Yes
Monthly Rollup
4015383
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015383
3178034
9312
Yes
Security Update
4014652
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014652
3214051
9312
Yes
Security Update
4014794
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014794
9312
Yes
Security Update
4015383
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015383
3178034
9311
Yes
Security Update
4014652
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014652
3214051
9311
Yes
Security Update
4014794
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014794
9311
Yes
Security Update
4015383
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015383
3178034
9318
Yes
Security Update
4014652
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014652
3214051
9318
Yes
Security Update
4014794
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014794
9318
Yes
Security Update
4015383
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015383
3178034
9344
Yes
Security Update
4014652
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014652
3214051
9344
Yes
Security Update
4014794
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014794
9344
Yes
Security Update
4015549
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015549
4012215
10050
Yes
Monthly Rollup
4015546
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015546
10050
Yes
Security Only
4015549
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015549
4012215
10051
Yes
Monthly Rollup
4015546
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015546
10051
Yes
Security Only
4015549
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015549
4012215
10049
Yes
Monthly Rollup
4015546
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015546
10049
Yes
Security Only
4015551
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015551
4012217
10378
Yes
Monthly Rollup
4015548
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015548
10378
Yes
Security Only
4015551
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015551
4012217
10379
Yes
Monthly Rollup
4015548
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015548
10379
Yes
Security Only
4015550
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015550
4012216
10483
Yes
Monthly Rollup
4015547
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015547
10483
Yes
Security Only
4015550
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015550
4012216
10543
Yes
Monthly Rollup
4015547
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015547
10543
Yes
Security Only
4015383
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015383
3178034
4393
Yes
Security Update
4014652
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014652
3214051
4393
Yes
Security Update
4014794
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014794
4393
Yes
Security Update
4015383
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015383
3178034
9316
Yes
Security Update
4014652
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014652
3214051
9316
Yes
Security Update
4014794
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014794
9316
Yes
Security Update
4017094
https://www.microsoft.com/downloads/details.aspx?familyid=85a68d98-0244-4e9a-8c81-df6d3281a9eb
4013867
10453
Security Update
4017094
https://www.microsoft.com/downloads/details.aspx?familyid=85a68d98-0244-4e9a-8c81-df6d3281a9eb
4013867
10452
Maybe
Security Update
4017094
https://www.microsoft.com/downloads/details.aspx?familyid=85a68d98-0244-4e9a-8c81-df6d3281a9eb
4013867
10451
Maybe
Security Update
4017094
https://www.microsoft.com/downloads/details.aspx?familyid=85a68d98-0244-4e9a-8c81-df6d3281a9eb
4013867
10099
Maybe
Security Update
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10816
Yes
Security Update
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10855
Yes
Security Update
4015583
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015583
10951
Yes
Security Update
4015583
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015583
10952
Yes
Security Update
4019460
http://www.mono-project.com/docs/about-mono/releases/4.8.0/
10960
Maybe
Security Update
4019460
http://www.mono-project.com/docs/about-mono/releases/4.8.0/
10961
Maybe
Security Update
<a href='http://twitter.com/lcamtuf'>Michal Zalewski</a>
1.0
2017-04-11T07:00:00Z
<p>Information published.</p>
Windows Hyper-V Denial of Service Vulnerability
<p>A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate input from a privileged user on a guest operating system. To exploit the vulnerability, an attacker who already has a privileged account on a guest operating system, running as a virtual machine, could run a specially crafted application that causes a host machine to crash.</p>
<p>To exploit the vulnerability, an attacker who already has a privileged account on a guest operating system, running as a virtual machine, could run a specially crafted application.</p>
<p>The security update addresses the vulnerability by resolving a number of conditions where Hyper-V would fail to prevent a guest operating system from sending malicious requests.</p>
Windows Hyper-V
CVE-2017-0178
10816
10855
10735
10788
10853
10482
10483
10543
Denial of Service
10816
Denial of Service
10855
Denial of Service
10735
Denial of Service
10788
Denial of Service
10853
Denial of Service
10482
Denial of Service
10483
Denial of Service
10543
Important
10816
Important
10855
Important
10735
Important
10788
Important
10853
Important
10482
Important
10483
Important
10543
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely;Older Software Release:Exploitation Unlikely
5.4
4.9
CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10816
5.4
4.9
CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10855
5.4
4.9
CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10735
5.4
4.9
CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10788
5.4
4.9
CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10853
5.4
4.9
CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10482
5.4
4.9
CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10483
5.4
4.9
CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10543
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10816
Yes
Security Update
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10855
Yes
Security Update
4015221
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015221
4012606
10735
Yes
Security Update
4015219
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015219
4013198
10788
Yes
Security Update
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10853
Yes
Security Update
4015550
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015550
4012216
10482
Yes
Monthly Rollup
4015547
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015547
10482
Yes
Security Only
4015550
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015550
4012216
10483
Yes
Monthly Rollup
4015547
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015547
10483
Yes
Security Only
4015550
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015550
4012216
10543
Yes
Monthly Rollup
4015547
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015547
10543
Yes
Security Only
<p>The following <a href="https://technet.microsoft.com/library/security/dn848375.aspx#Mitigation">mitigating factors</a> may be helpful in your situation:
Customers who have not enabled the Hyper-V role are not affected.</p>
1.0
2017-04-11T07:00:00Z
<p>Information published.</p>
Windows Hyper-V Denial of Service Vulnerability
<p>A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate input from a privileged user on a guest operating system. To exploit the vulnerability, an attacker who already has a privileged account on a guest operating system, running as a virtual machine, could run a specially crafted application that causes a host machine to crash.</p>
<p>To exploit the vulnerability, an attacker who already has a privileged account on a guest operating system, running as a virtual machine, could run a specially crafted application.</p>
<p>The security update addresses the vulnerability by resolving a number of conditions where Hyper-V would fail to prevent a guest operating system from sending malicious requests.</p>
Windows Hyper-V
CVE-2017-0179
10952
10816
10855
10735
10788
10853
10482
10483
10543
Denial of Service
10952
Denial of Service
10816
Denial of Service
10855
Denial of Service
10735
Denial of Service
10788
Denial of Service
10853
Denial of Service
10482
Denial of Service
10483
Denial of Service
10543
Important
10952
Important
10816
Important
10855
Important
10735
Important
10788
Important
10853
Important
10482
Important
10483
Important
10543
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely;Older Software Release:Exploitation Unlikely
5.8
5.2
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10952
5.8
5.2
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10816
5.8
5.2
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10855
5.8
5.2
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10735
5.8
5.2
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10788
5.8
5.2
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10853
5.8
5.2
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10482
5.8
5.2
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10483
5.8
5.2
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10543
4015583
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015583
10952
Yes
Security Update
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10816
Yes
Security Update
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10855
Yes
Security Update
4015221
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015221
4012606
10735
Yes
Security Update
4015219
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015219
4013198
10788
Yes
Security Update
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10853
Yes
Security Update
4015550
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015550
4012216
10482
Yes
Monthly Rollup
4015547
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015547
10482
Yes
Security Only
4015550
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015550
4012216
10483
Yes
Monthly Rollup
4015547
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015547
10483
Yes
Security Only
4015550
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015550
4012216
10543
Yes
Monthly Rollup
4015547
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015547
10543
Yes
Security Only
<p>The following <a href="https://technet.microsoft.com/library/security/dn848375.aspx#Mitigation">mitigating factors</a> may be helpful in your situation:
Customers who have not enabled the Hyper-V role are not affected.</p>
1.0
2017-04-11T07:00:00Z
<p>Information published.</p>
Hyper-V Remote Code Execution Vulnerability
<p>A remote code execution vulnerability exists when Windows Hyper-V Network Switch on a host server fails to properly validate input from an authenticated user on a guest operating system. To exploit the vulnerability, an attacker could run a specially crafted application on a guest operating system that could cause the Hyper-V host operating system to execute arbitrary code.</p>
<p>An attacker who successfully exploited the vulnerability could execute arbitrary code on the host operating system.</p>
<p>The security update addresses the vulnerability by correcting how Windows Hyper-V Network Switch validates guest operating system network traffic.</p>
Windows Hyper-V
CVE-2017-0180
10952
10816
10855
10735
10788
10853
10482
9318
9344
10051
10049
10378
10379
10483
10543
Remote Code Execution
10952
Remote Code Execution
10816
Remote Code Execution
10855
Remote Code Execution
10735
Remote Code Execution
10788
Remote Code Execution
10853
Remote Code Execution
10482
Remote Code Execution
9318
Remote Code Execution
9344
Remote Code Execution
10051
Remote Code Execution
10049
Remote Code Execution
10378
Remote Code Execution
10379
Remote Code Execution
10483
Remote Code Execution
10543
Critical
10952
Critical
10816
Critical
10855
Critical
10735
Critical
10788
Critical
10853
Critical
10482
Critical
9318
Critical
9344
Critical
10051
Critical
10049
Critical
10378
Critical
10379
Critical
10483
Critical
10543
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely
7.6
6.8
CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
10952
7.6
6.8
CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
10816
7.6
6.8
CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
10855
7.6
6.8
CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
10735
7.6
6.8
CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
10788
7.6
6.8
CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
10853
7.6
6.8
CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
10482
7.6
6.8
CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
9318
7.6
6.8
CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
9344
7.6
6.8
CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
10051
7.6
6.8
CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
10049
7.6
6.8
CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
10378
7.6
6.8
CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
10379
7.6
6.8
CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
10483
7.6
6.8
CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
10543
4015583
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015583
10952
Yes
Security Update
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10816
Yes
Security Update
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10855
Yes
Security Update
4015221
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015221
4012606
10735
Yes
Security Update
4015219
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015219
4013198
10788
Yes
Security Update
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10853
Yes
Security Update
4015550
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015550
4012216
10482
Yes
Monthly Rollup
4015547
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015547
10482
Yes
Security Only
3211308
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3211308
9318
Yes
Security Update
3211308
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3211308
9344
Yes
Security Update
4015549
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015549
4012215
10051
Yes
Monthly Rollup
4015546
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015546
10051
Yes
Security Only
4015549
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015549
4012215
10049
Yes
Monthly Rollup
4015546
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015546
10049
Yes
Security Only
4015551
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015551
4012217
10378
Yes
Monthly Rollup
4015548
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015548
10378
Yes
Security Only
4015551
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015551
4012217
10379
Yes
Monthly Rollup
4015548
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015548
10379
Yes
Security Only
4015550
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015550
4012216
10483
Yes
Monthly Rollup
4015547
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015547
10483
Yes
Security Only
4015550
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015550
4012216
10543
Yes
Monthly Rollup
4015547
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015547
10543
Yes
Security Only
<p>The following <a href="https://technet.microsoft.com/library/security/dn848375.aspx#Mitigation">mitigating factors</a> may be helpful in your situation:
Customers who have not enabled the Hyper-V role are not affected.</p>
1.0
2017-04-11T07:00:00Z
<p>Information published.</p>
Hyper-V Remote Code Execution Vulnerability
<p>A remote code execution vulnerability exists when Windows Hyper-V Network Switch on a host server fails to properly validate input from an authenticated user on a guest operating system. To exploit the vulnerability, an attacker could run a specially crafted application on a guest operating system that could cause the Hyper-V host operating system to execute arbitrary code.</p>
<p>An attacker who successfully exploited the vulnerability could execute arbitrary code on the host operating system.</p>
<p>The security update addresses the vulnerability by correcting how Windows Hyper-V Network Switch validates guest operating system network traffic.</p>
Windows Hyper-V
CVE-2017-0181
10952
10816
10855
10735
10788
10853
Remote Code Execution
10952
Remote Code Execution
10816
Remote Code Execution
10855
Remote Code Execution
10735
Remote Code Execution
10788
Remote Code Execution
10853
Critical
10952
Critical
10816
Critical
10855
Critical
10735
Critical
10788
Critical
10853
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:N/A
7.6
6.8
CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
10952
7.6
6.8
CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
10816
7.6
6.8
CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
10855
7.6
6.8
CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
10735
7.6
6.8
CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
10788
7.6
6.8
CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
10853
4015583
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015583
10952
Yes
Security Update
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10816
Yes
Security Update
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10855
Yes
Security Update
4015221
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015221
4012606
10735
Yes
Security Update
4015219
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015219
4013198
10788
Yes
Security Update
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10853
Yes
Security Update
<p>The following <a href="https://technet.microsoft.com/library/security/dn848375.aspx#Mitigation">mitigating factors</a> may be helpful in your situation:
Customers who have not enabled the Hyper-V role are not affected.</p>
Adam ‘pi3’ Zabrocki, Microsoft Offensive Security Research Team
1.0
2017-04-11T07:00:00Z
<p>Information published.</p>
Windows Hyper-V Denial of Service Vulnerability
<p>A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a privileged user on a guest operating system. An attacker who successfully exploited the vulnerability could cause the host server to crash.</p>
<p>To exploit the vulnerability, an attacker who already has a privileged account on a guest operating system, running as a virtual machine, could run a specially crafted application that causes a host machine to crash.</p>
<p>The update addresses the vulnerability by modifying how virtual machines access the Hyper-V Network Switch.</p>
Windows Hyper-V
CVE-2017-0182
10952
10816
10855
10735
10788
10853
10482
10051
10049
10378
10379
10483
10543
Denial of Service
10952
Denial of Service
10816
Denial of Service
10855
Denial of Service
10735
Denial of Service
10788
Denial of Service
10853
Denial of Service
10482
Denial of Service
10051
Denial of Service
10049
Denial of Service
10378
Denial of Service
10379
Denial of Service
10483
Denial of Service
10543
Important
10952
Important
10816
Important
10855
Important
10735
Important
10788
Important
10853
Important
10482
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely;Older Software Release:Exploitation Unlikely;DOS:Permanent
5.8
5.2
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10952
5.8
5.2
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10816
5.8
5.2
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10855
5.8
5.2
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10735
5.8
5.2
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10788
5.8
5.2
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10853
5.8
5.2
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10482
5.8
5.2
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10051
5.8
5.2
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10049
5.8
5.2
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10378
5.8
5.2
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10379
5.8
5.2
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10483
5.8
5.2
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10543
4015583
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015583
10952
Yes
Security Update
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10816
Yes
Security Update
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10855
Yes
Security Update
4015221
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015221
4012606
10735
Yes
Security Update
4015219
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015219
4013198
10788
Yes
Security Update
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10853
Yes
Security Update
4015550
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015550
4012216
10482
Yes
Monthly Rollup
4015547
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015547
10482
Yes
Security Only
4015549
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015549
4012215
10051
Yes
Monthly Rollup
4015546
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015546
10051
Yes
Security Only
4015549
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015549
4012215
10049
Yes
Monthly Rollup
4015546
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015546
10049
Yes
Security Only
4015551
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015551
4012217
10378
Yes
Monthly Rollup
4015548
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015548
10378
Yes
Security Only
4015551
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015551
4012217
10379
Yes
Monthly Rollup
4015548
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015548
10379
Yes
Security Only
4015550
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015550
4012216
10483
Yes
Monthly Rollup
4015547
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015547
10483
Yes
Security Only
4015550
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015550
4012216
10543
Yes
Monthly Rollup
4015547
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015547
10543
Yes
Security Only
<p>The following <a href="https://technet.microsoft.com/library/security/dn848375.aspx#Mitigation">mitigating factors</a> may be helpful in your situation:
Customers who have not enabled the Hyper-V role are not affected.</p>
Adam ‘pi3’ Zabrocki, Microsoft Offensive Security Research Team
1.0
2017-04-11T07:00:00Z
<p>Information published.</p>
Windows Hyper-V Denial of Service Vulnerability
<p>A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a privileged user on a guest operating system. An attacker who successfully exploited the vulnerability could cause the host server to crash.</p>
<p>To exploit the vulnerability, an attacker who already has a privileged account on a guest operating system, running as a virtual machine, could run a specially crafted application that causes a host machine to crash.</p>
<p>The update addresses the vulnerability by modifying how virtual machines access the Hyper-V Network Switch.</p>
Windows Hyper-V
CVE-2017-0183
10952
10816
10855
10735
10788
10853
10482
10051
10049
10378
10379
10483
10543
Denial of Service
10952
Denial of Service
10816
Denial of Service
10855
Denial of Service
10735
Denial of Service
10788
Denial of Service
10853
Denial of Service
10482
Denial of Service
10051
Denial of Service
10049
Denial of Service
10378
Denial of Service
10379
Denial of Service
10483
Denial of Service
10543
Important
10952
Important
10816
Important
10855
Important
10735
Important
10788
Important
10853
Important
10482
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely;Older Software Release:Exploitation Unlikely
5.8
5.2
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10952
5.8
5.2
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10816
5.8
5.2
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10855
5.8
5.2
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10735
5.8
5.2
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10788
5.8
5.2
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10853
5.8
5.2
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10482
5.8
5.2
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10051
5.8
5.2
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10049
5.8
5.2
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10378
5.8
5.2
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10379
5.8
5.2
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10483
5.8
5.2
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10543
4015583
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015583
10952
Yes
Security Update
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10816
Yes
Security Update
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10855
Yes
Security Update
4015221
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015221
4012606
10735
Yes
Security Update
4015219
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015219
4013198
10788
Yes
Security Update
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10853
Yes
Security Update
4015550
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015550
4012216
10482
Yes
Monthly Rollup
4015547
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015547
10482
Yes
Security Only
4015549
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015549
4012215
10051
Yes
Monthly Rollup
4015546
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015546
10051
Yes
Security Only
4015549
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015549
4012215
10049
Yes
Monthly Rollup
4015546
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015546
10049
Yes
Security Only
4015551
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015551
4012217
10378
Yes
Monthly Rollup
4015548
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015548
10378
Yes
Security Only
4015551
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015551
4012217
10379
Yes
Monthly Rollup
4015548
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015548
10379
Yes
Security Only
4015550
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015550
4012216
10483
Yes
Monthly Rollup
4015547
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015547
10483
Yes
Security Only
4015550
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015550
4012216
10543
Yes
Monthly Rollup
4015547
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015547
10543
Yes
Security Only
<p>The following <a href="https://technet.microsoft.com/library/security/dn848375.aspx#Mitigation">mitigating factors</a> may be helpful in your situation:
Customers who have not enabled the Hyper-V role are not affected.</p>
1.0
2017-04-11T07:00:00Z
<p>Information published.</p>
Windows Hyper-V Denial of Service Vulnerability
<p>A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate input from a privileged user on a guest operating system. To exploit the vulnerability, an attacker who already has a privileged account on a guest operating system, running as a virtual machine, could run a specially crafted application that causes a host machine to crash.</p>
<p>To exploit the vulnerability, an attacker who already has a privileged account on a guest operating system, running as a virtual machine, could run a specially crafted application.</p>
<p>The security update addresses the vulnerability by resolving a number of conditions where Hyper-V would fail to prevent a guest operating system from sending malicious requests.</p>
Windows Hyper-V
CVE-2017-0184
10952
10816
10855
10735
10788
10853
10482
9318
9344
10051
10049
10378
10379
10483
10543
Denial of Service
10952
Denial of Service
10816
Denial of Service
10855
Denial of Service
10735
Denial of Service
10788
Denial of Service
10853
Denial of Service
10482
Denial of Service
9318
Denial of Service
9344
Denial of Service
10051
Denial of Service
10049
Denial of Service
10378
Denial of Service
10379
Denial of Service
10483
Denial of Service
10543
Important
10952
Important
10816
Important
10855
Important
10735
Important
10788
Important
10853
Important
10482
Important
9318
Important
9344
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely;Older Software Release:Exploitation Unlikely
5.4
4.9
CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10952
5.4
4.9
CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10816
5.4
4.9
CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10855
5.4
4.9
CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10735
5.4
4.9
CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10788
5.4
4.9
CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10853
5.4
4.9
CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10482
5.4
4.9
CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
9318
5.4
4.9
CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
9344
5.4
4.9
CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10051
5.4
4.9
CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10049
5.4
4.9
CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10378
5.4
4.9
CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10379
5.4
4.9
CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10483
5.4
4.9
CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10543
4015583
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015583
10952
Yes
Security Update
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10816
Yes
Security Update
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10855
Yes
Security Update
4015221
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015221
4012606
10735
Yes
Security Update
4015219
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015219
4013198
10788
Yes
Security Update
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10853
Yes
Security Update
4015550
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015550
4012216
10482
Yes
Monthly Rollup
4015547
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015547
10482
Yes
Security Only
3217841
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3217841
9318
Yes
Security Update
3217841
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3217841
9344
Yes
Security Update
4015549
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015549
4012215
10051
Yes
Monthly Rollup
4015546
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015546
10051
Yes
Security Only
4015549
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015549
4012215
10049
Yes
Monthly Rollup
4015546
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015546
10049
Yes
Security Only
4015551
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015551
4012217
10378
Yes
Monthly Rollup
4015548
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015548
10378
Yes
Security Only
4015551
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015551
4012217
10379
Yes
Monthly Rollup
4015548
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015548
10379
Yes
Security Only
4015550
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015550
4012216
10483
Yes
Monthly Rollup
4015547
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015547
10483
Yes
Security Only
4015550
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015550
4012216
10543
Yes
Monthly Rollup
4015547
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015547
10543
Yes
Security Only
<p>The following <a href="https://technet.microsoft.com/library/security/dn848375.aspx#Mitigation">mitigating factors</a> may be helpful in your situation:
Customers who have not enabled the Hyper-V role are not affected.</p>
1.0
2017-04-11T07:00:00Z
<p>Information published.</p>
Windows Hyper-V Denial of Service Vulnerability
<p>A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a privileged user on a guest operating system. An attacker who successfully exploited the vulnerability could cause the host server to crash.</p>
<p>To exploit the vulnerability, an attacker who already has a privileged account on a guest operating system, running as a virtual machine, could run a specially crafted application that causes a host machine to crash.</p>
<p>The update addresses the vulnerability by modifying how virtual machines access the Hyper-V Network Switch.</p>
Windows Hyper-V
CVE-2017-0185
10952
10816
10855
10735
10788
10853
10482
10378
10379
10483
10543
Denial of Service
10952
Denial of Service
10816
Denial of Service
10855
Denial of Service
10735
Denial of Service
10788
Denial of Service
10853
Denial of Service
10482
Denial of Service
10378
Denial of Service
10379
Denial of Service
10483
Denial of Service
10543
Important
10952
Important
10816
Important
10855
Important
10735
Important
10788
Important
10853
Important
10482
Important
10378
Important
10379
Important
10483
Important
10543
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely;Older Software Release:Exploitation Unlikely;DOS:Permanent
5.8
5.2
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10952
5.8
5.2
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10816
5.8
5.2
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10855
5.8
5.2
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10735
5.8
5.2
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10788
5.8
5.2
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10853
5.8
5.2
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10482
5.8
5.2
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10378
5.8
5.2
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10379
5.8
5.2
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10483
5.8
5.2
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10543
4015583
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015583
10952
Yes
Security Update
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10816
Yes
Security Update
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10855
Yes
Security Update
4015221
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015221
4012606
10735
Yes
Security Update
4015219
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015219
4013198
10788
Yes
Security Update
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10853
Yes
Security Update
4015550
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015550
4012216
10482
Yes
Monthly Rollup
4015547
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015547
10482
Yes
Security Only
4015551
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015551
4012217
10378
Yes
Monthly Rollup
4015548
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015548
10378
Yes
Security Only
4015551
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015551
4012217
10379
Yes
Monthly Rollup
4015548
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015548
10379
Yes
Security Only
4015550
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015550
4012216
10483
Yes
Monthly Rollup
4015547
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015547
10483
Yes
Security Only
4015550
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015550
4012216
10543
Yes
Monthly Rollup
4015547
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015547
10543
Yes
Security Only
<p>The following <a href="https://technet.microsoft.com/library/security/dn848375.aspx#Mitigation">mitigating factors</a> may be helpful in your situation:
Customers who have not enabled the Hyper-V role are not affected.</p>
1.0
2017-04-11T07:00:00Z
<p>Information published.</p>
Windows Hyper-V Denial of Service Vulnerability
<p>A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a privileged user on a guest operating system. An attacker who successfully exploited the vulnerability could cause the host server to crash.</p>
<p>To exploit the vulnerability, an attacker who already has a privileged account on a guest operating system, running as a virtual machine, could run a specially crafted application that causes a host machine to crash.</p>
<p>The update addresses the vulnerability by modifying how virtual machines access the Hyper-V Network Switch.</p>
Windows Hyper-V
CVE-2017-0186
10952
10816
10855
10735
10788
10853
10482
10378
10379
10483
10543
Denial of Service
10952
Denial of Service
10816
Denial of Service
10855
Denial of Service
10735
Denial of Service
10788
Denial of Service
10853
Denial of Service
10482
Denial of Service
10378
Denial of Service
10379
Denial of Service
10483
Denial of Service
10543
Important
10952
Important
10816
Important
10855
Important
10735
Important
10788
Important
10853
Important
10482
Important
10378
Important
10379
Important
10483
Important
10543
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely;Older Software Release:Exploitation Unlikely;DOS:Permanent
5.8
5.2
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10952
5.8
5.2
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10816
5.8
5.2
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10855
5.8
5.2
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10735
5.8
5.2
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10788
5.8
5.2
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10853
5.8
5.2
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10482
5.8
5.2
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10378
5.8
5.2
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10379
5.8
5.2
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10483
5.8
5.2
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10543
4015583
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015583
10952
Yes
Security Update
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10816
Yes
Security Update
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10855
Yes
Security Update
4015221
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015221
4012606
10735
Yes
Security Update
4015219
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015219
4013198
10788
Yes
Security Update
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10853
Yes
Security Update
4015550
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015550
4012216
10482
Yes
Monthly Rollup
4015547
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015547
10482
Yes
Security Only
4015551
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015551
4012217
10378
Yes
Monthly Rollup
4015548
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015548
10378
Yes
Security Only
4015551
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015551
4012217
10379
Yes
Monthly Rollup
4015548
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015548
10379
Yes
Security Only
4015550
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015550
4012216
10483
Yes
Monthly Rollup
4015547
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015547
10483
Yes
Security Only
4015550
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015550
4012216
10543
Yes
Monthly Rollup
4015547
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015547
10543
Yes
Security Only
<p>The following <a href="https://technet.microsoft.com/library/security/dn848375.aspx#Mitigation">mitigating factors</a> may be helpful in your situation:
Customers who have not enabled the Hyper-V role are not affected.</p>
Adam ‘pi3’ Zabrocki, Microsoft Offensive Security Research Team
1.0
2017-04-11T07:00:00Z
<p>Information published.</p>
Win32k Information Disclosure Vulnerability
<p>An information disclosure vulnerability exists when the win32k component improperly provides kernel information. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.</p>
<p>To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application.</p>
<p>The security update addresses the vulnerability by correcting how win32k handles objects in memory.</p>
Windows Kernel-Mode Drivers
CVE-2017-0188
10816
10951
10952
10729
10735
10789
10788
10852
10853
10481
10482
10484
10378
10379
10483
10543
10855
Information Disclosure
10816
Information Disclosure
10951
Information Disclosure
10952
Information Disclosure
10729
Information Disclosure
10735
Information Disclosure
10789
Information Disclosure
10788
Information Disclosure
10852
Information Disclosure
10853
Information Disclosure
10481
Information Disclosure
10482
Information Disclosure
10484
Information Disclosure
10378
Information Disclosure
10379
Information Disclosure
10483
Information Disclosure
10543
Information Disclosure
10855
Important
10816
Important
10951
Important
10952
Important
10729
Important
10735
Important
10789
Important
10788
Important
10852
Important
10853
Important
10481
Important
10482
Important
10484
Important
10378
Important
10379
Important
10483
Important
10543
Important
10855
Publicly Disclosed:No;Exploited:No
4.4
4.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10816
4.4
4.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10951
4.4
4.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10952
4.4
4.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10729
4.4
4.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10735
4.4
4.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10789
4.4
4.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10788
4.4
4.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10852
4.4
4.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10853
4.4
4.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10481
4.4
4.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10482
4.4
4.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10484
4.4
4.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10378
4.4
4.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10379
4.4
4.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10483
4.4
4.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10543
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10816
Yes
Security Update
4015583
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015583
10951
Yes
Security Update
4015583
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015583
10952
Yes
Security Update
4015221
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015221
4012606
10729
Yes
Security Update
4015221
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015221
4012606
10735
Yes
Security Update
4015219
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015219
4013198
10789
Yes
Security Update
4015219
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015219
4013198
10788
Yes
Security Update
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10852
Yes
Security Update
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10853
Yes
Security Update
4015550
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015550
4012216
10481
Yes
Monthly Rollup
4015547
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015547
10481
Yes
Security Only
4015550
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015550
4012216
10482
Yes
Monthly Rollup
4015547
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015547
10482
Yes
Security Only
4015550
4012216
10484
Yes
Monthly Rollup
4015551
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015551
4012217
10378
Yes
Monthly Rollup
4015548
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015548
10378
Yes
Security Only
4015551
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015551
4012217
10379
Yes
Monthly Rollup
4015548
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015548
10379
Yes
Security Only
4015550
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015550
4012216
10483
Yes
Monthly Rollup
4015547
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015547
10483
Yes
Security Only
4015550
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015550
4012216
10543
Yes
Monthly Rollup
4015547
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015547
10543
Yes
Security Only
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10855
Yes
Security Update
<a href="http://weibo.com/pgboy1988">pgboy</a> and <a href="http://weibo.com/2641521260">zhong_sf</a> of <a href="http://www.360.cn/">Qihoo 360 Vulcan Team</a>
1.0
2017-04-11T07:00:00Z
<p>Information published.</p>
Win32k Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system.</p>
<p>The update addresses this vulnerability by correcting how the Windows kernel-mode driver handles objects in memory.</p>
Windows Kernel-Mode Drivers
CVE-2017-0189
10951
10952
10816
10729
10735
10789
10788
10852
10853
10855
Elevation of Privilege
10951
Elevation of Privilege
10952
Elevation of Privilege
10816
Elevation of Privilege
10729
Elevation of Privilege
10735
Elevation of Privilege
10789
Elevation of Privilege
10788
Elevation of Privilege
10852
Elevation of Privilege
10853
Elevation of Privilege
10855
Important
10951
Important
10952
Important
10816
Important
10729
Important
10735
Important
10789
Important
10788
Important
10852
Important
10853
Important
10855
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10951
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10952
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10816
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10729
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10735
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10789
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10788
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10852
7.8
7.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10853
4015583
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015583
10951
Yes
Security Update
4015583
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015583
10952
Yes
Security Update
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10816
Yes
Security Update
4015221
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015221
4012606
10729
Yes
Security Update
4015221
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015221
4012606
10735
Yes
Security Update
4015219
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015219
4013198
10789
Yes
Security Update
4015219
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015219
4013198
10788
Yes
Security Update
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10852
Yes
Security Update
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10853
Yes
Security Update
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10855
Yes
Security Update
<a href="http://weibo.com/pgboy1988">pgboy</a> and <a href="http://weibo.com/2641521260">zhong_sf</a> of <a href="http://www.360.cn/">Qihoo 360 Vulcan Team</a>
1.0
2017-04-11T07:00:00Z
<p>Information published.</p>
Windows IPSec Denial of Service Vulnerability
<p>A denial of service vulnerability exists in the way that Windows handles objects in memory. An attacker who successfully exploited the vulnerability could cause a target system to stop responding. Note that the denial of service condition would not allow an attacker to execute code or to elevate user privileges. However, the denial of service condition could prevent authorized users from using system resources.</p>
<p>The security update addresses the vulnerability by correcting how Windows handles objects in memory.</p>
Microsoft Windows
CVE-2017-0191
10816
10855
10951
10952
10729
10735
10789
10788
10852
10853
10047
10048
10481
10482
10484
10050
10051
10049
10378
10379
10483
10543
Denial of Service
10816
Denial of Service
10855
Denial of Service
10951
Denial of Service
10952
Denial of Service
10729
Denial of Service
10735
Denial of Service
10789
Denial of Service
10788
Denial of Service
10852
Denial of Service
10853
Denial of Service
10047
Denial of Service
10048
Denial of Service
10481
Denial of Service
10482
Denial of Service
10484
Denial of Service
10050
Denial of Service
10051
Denial of Service
10049
Denial of Service
10378
Denial of Service
10379
Denial of Service
10483
Denial of Service
10543
Important
10816
Important
10855
Important
10951
Important
10952
Important
10729
Important
10735
Important
10789
Important
10788
Important
10852
Important
10853
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
10050
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely;Older Software Release:Exploitation Unlikely;DOS:Permanent
5.8
5.2
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10816
5.8
5.2
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10855
5.8
5.2
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10951
5.8
5.2
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10952
5.8
5.2
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10729
5.8
5.2
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10735
5.8
5.2
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10789
5.8
5.2
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10788
5.8
5.2
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10852
5.8
5.2
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10853
5.8
5.2
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10047
5.8
5.2
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10048
5.8
5.2
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10481
5.8
5.2
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10482
5.8
5.2
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10484
5.8
5.2
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10050
5.8
5.2
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10051
5.8
5.2
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10049
5.8
5.2
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10378
5.8
5.2
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10379
5.8
5.2
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10483
5.8
5.2
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C
10543
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10816
Yes
Security Update
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10855
Yes
Security Update
4015583
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015583
10951
Yes
Security Update
4015583
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015583
10952
Yes
Security Update
4015221
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015221
4012606
10729
Yes
Security Update
4015221
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015221
4012606
10735
Yes
Security Update
4015219
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015219
4013198
10789
Yes
Security Update
4015219
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015219
4013198
10788
Yes
Security Update
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10852
Yes
Security Update
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10853
Yes
Security Update
4015549
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015549
4012215
10047
Yes
Monthly Rollup
4015546
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015546
10047
Yes
Security Only
4015549
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015549
4012215
10048
Yes
Monthly Rollup
4015546
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015546
10048
Yes
Security Only
4015550
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015550
4012216
10481
Yes
Monthly Rollup
4015547
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015547
10481
Yes
Security Only
4015550
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015550
4012216
10482
Yes
Monthly Rollup
4015547
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015547
10482
Yes
Security Only
4015550
4012216
10484
Yes
Monthly Rollup
4015549
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015549
4012215
10050
Yes
Monthly Rollup
4015546
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015546
10050
Yes
Security Only
4015549
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015549
4012215
10051
Yes
Monthly Rollup
4015546
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015546
10051
Yes
Security Only
4015549
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015549
4012215
10049
Yes
Monthly Rollup
4015546
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015546
10049
Yes
Security Only
4015551
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015551
4012217
10378
Yes
Monthly Rollup
4015548
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015548
10378
Yes
Security Only
4015551
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015551
4012217
10379
Yes
Monthly Rollup
4015548
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015548
10379
Yes
Security Only
4015550
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015550
4012216
10483
Yes
Monthly Rollup
4015547
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015547
10483
Yes
Security Only
4015550
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015550
4012216
10543
Yes
Monthly Rollup
4015547
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015547
10543
Yes
Security Only
Vishal Chauhan, MSRC Vulnerabilities & Mitigations
1.0
2017-04-11T07:00:00Z
<p>Information published.</p>
OpenType Font Driver Information Disclosure Vulnerability
<p>An information disclosure vulnerability exists in Windows Adobe Type Manager Font Driver (ATMFD.dll) when it fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could potentially read data that was not intended to be disclosed. Note that this vulnerability would not allow an attacker to execute code or to elevate their user rights directly, but it could be used to obtain information that could be used to try to further compromise the affected system.</p>
<p>To exploit this vulnerability, an attacker would have to log on to an affected system and open a document containing specially crafted fonts.</p>
<p>The update addresses the vulnerability by correcting how ATMFD.dll handles objects in memory.</p>
Microsoft Graphics Component
CVE-2017-0192
10729
10735
10789
10788
10852
10853
10951
10952
10047
10048
10481
10482
10484
9312
10287
9311
9318
9344
10050
10051
10049
10378
10379
10483
10543
10816
10855
4393
9316
Information Disclosure
10729
Information Disclosure
10735
Information Disclosure
10789
Information Disclosure
10788
Information Disclosure
10852
Information Disclosure
10853
Information Disclosure
10951
Information Disclosure
10952
Information Disclosure
10047
Information Disclosure
10048
Information Disclosure
10481
Information Disclosure
10482
Information Disclosure
10484
Information Disclosure
9312
Information Disclosure
10287
Information Disclosure
9311
Information Disclosure
9318
Information Disclosure
9344
Information Disclosure
10050
Information Disclosure
10051
Information Disclosure
10049
Information Disclosure
10378
Information Disclosure
10379
Information Disclosure
10483
Information Disclosure
10543
Information Disclosure
10816
Information Disclosure
10855
Information Disclosure
4393
Information Disclosure
9316
Important
10729
Important
10735
Important
10789
Important
10788
Important
10852
Important
10853
Important
10951
Important
10952
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9311
Important
9318
Important
9344
Important
10050
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Important
10816
Important
10855
Important
4393
Important
9316
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely
4.4
4.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10729
4.4
4.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10735
4.4
4.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10789
4.4
4.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10788
4.4
4.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10852
4.4
4.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10853
4.4
4.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10951
4.4
4.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10952
4.4
4.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10047
4.4
4.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10048
4.4
4.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10481
4.4
4.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10482
4.4
4.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10484
4.4
4.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
9312
4.4
4.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10287
4.4
4.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
9311
4.4
4.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
9318
4.4
4.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
9344
4.4
4.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10050
4.4
4.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10051
4.4
4.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10049
4.4
4.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10378
4.4
4.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10379
4.4
4.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10483
4.4
4.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10543
4.4
4.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10816
4.4
4.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10855
4.4
4.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
4393
4.4
4.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
9316
4015221
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015221
4012606
10729
Yes
Security Update
4015221
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015221
4012606
10735
Yes
Security Update
4015219
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015219
4013198
10789
Yes
Security Update
4015219
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015219
4013198
10788
Yes
Security Update
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10852
Yes
Security Update
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10853
Yes
Security Update
4015583
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015583
10951
Yes
Security Update
4015583
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015583
10952
Yes
Security Update
4015549
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015549
4012215
10047
Yes
Monthly Rollup
4015546
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015546
10047
Yes
Security Only
4015549
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015549
4012215
10048
Yes
Monthly Rollup
4015546
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015546
10048
Yes
Security Only
4015550
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015550
4012216
10481
Yes
Monthly Rollup
4015547
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015547
10481
Yes
Security Only
4015550
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015550
4012216
10482
Yes
Monthly Rollup
4015547
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015547
10482
Yes
Security Only
4015550
4012216
10484
Yes
Monthly Rollup
4015380
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015380
3203859
9312
Yes
Security Update
4015380
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015380
3203859
10287
Yes
Security Update
4015380
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015380
3203859
9311
Yes
Security Update
4015380
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015380
3203859
9318
Yes
Security Update
4015380
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015380
3203859
9344
Yes
Security Update
4015549
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015549
4012215
10050
Yes
Monthly Rollup
4015546
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015546
10050
Yes
Security Only
4015549
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015549
4012215
10051
Yes
Monthly Rollup
4015546
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015546
10051
Yes
Security Only
4015549
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015549
4012215
10049
Yes
Monthly Rollup
4015546
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015546
10049
Yes
Security Only
4015551
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015551
4012217
10378
Yes
Monthly Rollup
4015548
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015548
10378
Yes
Security Only
4015551
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015551
4012217
10379
Yes
Monthly Rollup
4015548
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015548
10379
Yes
Security Only
4015550
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015550
4012216
10483
Yes
Monthly Rollup
4015547
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015547
10483
Yes
Security Only
4015550
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015550
4012216
10543
Yes
Monthly Rollup
4015547
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015547
10543
Yes
Security Only
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10816
Yes
Security Update
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10855
Yes
Security Update
4015380
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015380
3203859
4393
Yes
Security Update
4015380
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015380
3203859
9316
Yes
Security Update
Hossein Lotfi, Secunia Research at Flexera Software
1.0
2017-04-11T07:00:00Z
<p>Information published.</p>
Microsoft Office XSS Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists when an Office Web Apps server does not properly sanitize a specially crafted request. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Office Web Apps server. The attacker who successfully exploited this vulnerability could then perform cross-site scripting attacks on affected systems and run script in the security context of the current user. These attacks could allow the attacker to read content that the attacker is not authorized to read, use the victim's identity to take actions on the SharePoint site on behalf of the victim, such as change permissions, delete content, steal sensitive information (such as browser cookies), and inject malicious content in the browser of the victim.</p>
<p>For the vulnerability to be exploited, a user must click a specially crafted URL that takes the user to a targeted Office Web App site.</p>
<p>In an email attack scenario, an attacker could exploit the vulnerability by sending an email message containing the specially crafted URL to the user of the targeted Office Web App site and convincing the user to click the specially crafted URL.</p>
<p>In a web-based attack scenario, an attacker would have to host a website that contains a specially crafted URL to the targeted SharePoint Web App site that is used to attempt to exploit the vulnerability. In addition, compromised websites and websites that accept or host user-provided content could contain specially crafted content that could exploit the vulnerability. An attacker would have no way to force users to visit a specially crafted website. Instead, an attacker would have to convince them to visit the website, typically by getting them to click a link in an instant messenger or email message that takes them to the attacker's website, and then convince them to click the specially crafted URL.</p>
<p>The security update addresses the vulnerability by helping to ensure that Office Web AppsServer properly sanitizes web requests.</p>
Microsoft Office
CVE-2017-0195
10516
10525
10611
10836
9171-999008
9171-10607
Elevation of Privilege
10516
Elevation of Privilege
10525
Elevation of Privilege
10611
Elevation of Privilege
10836
Elevation of Privilege
9171-999008
Elevation of Privilege
9171-10607
Important
10516
Important
10525
Important
10611
Important
10836
Important
9171-999008
Important
9171-10607
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
3101522
https://www.microsoft.com/downloads/details.aspx?familyid=0ad23a04-4a3a-4ee0-84ad-15642aa1bbd1
3085595
10516
Maybe
Security Update
3191845
https://www.microsoft.com/downloads/details.aspx?familyid=77bf6188-6e95-4401-9b7c-f0338938b450
3178689
10525
Maybe
Security Update
3178725
https://www.microsoft.com/downloads/details.aspx?familyid=b145b4ba-125a-4c91-9f11-44f8b5d5c311
3172457
10611
Maybe
Security Update
3127895
https://www.microsoft.com/downloads/details.aspx?familyid=d6434a7b-9421-45b5-96ab-5e5466e3b193
3127897
10836
Maybe
Security Update
3191840
https://www.microsoft.com/downloads/details.aspx?familyid=89b6fddc-61c8-4770-8bae-84ccad3260e2
3178685
9171-999008
Maybe
Security Update
3178724
https://www.microsoft.com/downloads/details.aspx?familyid=30083252-79d1-4c5f-9738-0f900d4f4402
3172431
9171-10607
Maybe
Security Update
Ashar Javed (<a href="https://twitter.com/soaj1664ashar">@soaj1664ashar</a>) of <a href=https://www.hyundai-autoever.eu/>Hyundai AutoEver Europe GmbH</a>
1.0
2017-04-11T07:00:00Z
<p>Information published.</p>
Microsoft OneNote Remote Code Execution Vulnerability
<p>A remote code execution vulnerability exists when Microsoft OneNote improperly validates input before loading dynamic link library (DLL) files. An attacker who successfully exploited this vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.</p>
<p>To exploit the vulnerability, an attacker must first convince a user to open a specially crafted OneNote document.</p>
<p>The updates address the vulnerability by correcting how OneNote validates input before loading DLL files.</p>
Microsoft Office
CVE-2017-0197
10791
10792
10155
Remote Code Execution
10791
Remote Code Execution
10792
Remote Code Execution
10155
Important
10791
Important
10792
Important
10155
Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A;Older Software Release:Exploitation Less Likely
2589382
https://www.microsoft.com/downloads/details.aspx?familyid=2798b533-c982-494f-a805-dd7e727a977f
10791
Maybe
Security Update
2589382
https://www.microsoft.com/downloads/details.aspx?familyid=d1856260-728b-42a6-bc17-b0a41b7a6fd9
10792
Maybe
Security Update
3191829
https://www.microsoft.com/downloads/details.aspx?familyid=9a7c0073-5afc-4a49-a8eb-df64f5278e61
10155
Maybe
Security Update
Yorick Koster of <a href="https://securify.nl/">Securify B.V.</a>
Richard Warren of <a href="https://www.nccgroup.trust/us/">NCC Group</a>
1.0
2017-04-11T07:00:00Z
<p>Information published.</p>
Microsoft Office/WordPad Remote Code Execution Vulnerability w/Windows
<p>A remote code execution vulnerability exists in the way that Microsoft Office and WordPad parse specially crafted files. An attacker who successfully exploited this vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>Exploitation of this vulnerability requires that a user open or preview a specially crafted file with an affected version of Microsoft Office or WordPad. In an email attack scenario, an attacker could exploit the vulnerability by sending a specially crafted file to the user and then convincing the user to open the file.</p>
<p>The update addresses the vulnerability by correcting the way that Microsoft Office and WordPad parses specially crafted files, and by enabling API functionality in Windows that Microsoft Office and WordPad will leverage to resolve the identified issue.</p>
Microsoft Office
CVE-2017-0199
10150
10521
10522
10601
10602
10753
10754
10047
10048
9312
9311
9318
9344
10050
10051
10049
10378
10379
4393
9316
10287
Remote Code Execution
10150
Remote Code Execution
10521
Remote Code Execution
10522
Remote Code Execution
10601
Remote Code Execution
10602
Remote Code Execution
10753
Remote Code Execution
10754
Remote Code Execution
10047
Remote Code Execution
10048
Remote Code Execution
9312
Remote Code Execution
9311
Remote Code Execution
9318
Remote Code Execution
9344
Remote Code Execution
10050
Remote Code Execution
10051
Remote Code Execution
10049
Remote Code Execution
10378
Remote Code Execution
10379
Remote Code Execution
4393
Remote Code Execution
9316
Remote Code Execution
10287
Critical
10150
Critical
10521
Critical
10522
Critical
10601
Critical
10602
Critical
10753
Critical
10754
Important
10047
Important
10048
Important
9312
Important
9311
Important
9318
Important
9344
Important
10050
Important
10051
Important
10049
Important
10378
Important
10379
Important
4393
Important
9316
Important
10287
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely
6.7
6.0
CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10047
6.7
6.0
CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10048
6.7
6.0
CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9312
6.7
6.0
CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9311
6.7
6.0
CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9318
6.7
6.0
CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9344
6.7
6.0
CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10050
6.7
6.0
CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10051
6.7
6.0
CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10049
6.7
6.0
CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10378
6.7
6.0
CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10379
6.7
6.0
CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
4393
6.7
6.0
CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9316
3141529
https://www.microsoft.com/downloads/details.aspx?familyid=2277f4e4-4c1c-4104-b4b5-5f32f1e8c2da
3128020
10150
Maybe
Security Update
3141538
https://www.microsoft.com/downloads/details.aspx?familyid=0321799f-eda2-47c7-b565-d87316539029
3118380
10521
Maybe
Security Update
3141538
https://www.microsoft.com/downloads/details.aspx?familyid=309fd6ac-933d-4110-825a-58b34f207df4
3118380
10522
Maybe
Security Update
3178710
https://www.microsoft.com/downloads/details.aspx?familyid=2c7ae47b-31cc-4311-909a-425b3d80026f
3127968
10601
Maybe
Security Update
3178710
https://www.microsoft.com/downloads/details.aspx?familyid=a53d575c-2cfe-40be-9408-deb41cf26573
3127968
10602
Maybe
Security Update
3178703
https://www.microsoft.com/downloads/details.aspx?familyid=b30594c2-2ab1-456f-897b-8f37dad6ba74
10753
Maybe
Security Update
3178703
https://www.microsoft.com/downloads/details.aspx?familyid=86c0bfb3-e6b0-49d9-a667-e97f8ac7787e
10754
Maybe
Security Update
4015549
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015549
4012215
10047
Yes
Monthly Rollup
4015546
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015546
10047
Yes
Security Only
4015549
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015549
4012215
10048
Yes
Monthly Rollup
4015546
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015546
10048
Yes
Security Only
4014793
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014793
4011981
9312
Yes
Security Update
4014793
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014793
4011981
9311
Yes
Security Update
4014793
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014793
4011981
9318
Yes
Security Update
4014793
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014793
4011981
9344
Yes
Security Update
4015549
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015549
4012215
10050
Yes
Monthly Rollup
4015546
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015546
10050
Yes
Security Only
4015549
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015549
4012215
10051
Yes
Monthly Rollup
4015546
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015546
10051
Yes
Security Only
4015549
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015549
4012215
10049
Yes
Monthly Rollup
4015546
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015546
10049
Yes
Security Only
4015551
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015551
4012217
10378
Yes
Monthly Rollup
4015548
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015548
10378
Yes
Security Only
4015551
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015551
4012217
10379
Yes
Monthly Rollup
4015548
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015548
10379
Yes
Security Only
4014793
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014793
4011981
4393
Yes
Security Update
4014793
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014793
4011981
9316
Yes
Security Update
4014793
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014793
4011981
10287
Yes
Security Update
Ryan Hanson (<a href="https://twitter.com/ryhanson">@Ryhanson</a>) of <a href="https://www.optiv.com/">Optiv</a><br>
Microsoft MSRC Vulnerabilities and Mitigations Team<br>Microsoft Office Security Team<br>
Genwei Jiang, FLARE Team, <a href="https://www.fireeye.com/">FireEye Inc</a><br>
Eduardo Braun Prado of <a href="https://www.beyondsecurity.com/ssd.html">SecuriTeam Secure Disclosure (SSD)</a>
1.1
2017-04-21T07:00:00Z
<p>Corrected severity entries for Microsoft Office products. This is an informational change only. Customers who have successfully installed the update do not need to take any further action.</p>
1.0
2017-04-11T07:00:00Z
<p>Information published.</p>
1.2
2017-09-13T07:00:00Z
<p>Added an acknowledgement.</p>
Microsoft Outlook Spoofing Vulnerability
<p>A spoofing vulnerability exists in when Microsoft Outlook for Mac improperly validates HTML tag input. An attacker who successfully tricked the user could gain access to the user's authentication information or login credentials.</p>
<p>In an email attack scenario an attacker could exploit the vulnerability by sending an email with specific HTML tags, that could display a malicious authentication prompt.</p>
<p>The security update addresses the vulnerability by correcting how Outlook for Mac sanitizes HTML tags.</p>
Microsoft Office
CVE-2017-0207
10028
Spoofing
10028
Moderate
10028
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely;Older Software Release:Exploitation Unlikely
3212218
https://www.microsoft.com/downloads/details.aspx?familyid=5d913b8a-1c31-497d-99a6-713992bcc650
3198809
10028
Maybe
Security Update
<a href=http://utkusen.com>Utku Sen</a>, Individual
1.0
2017-04-11T07:00:00Z
<p>Information published.</p>
Defense-in-Depth Update for Microsoft Office
<p>Microsoft has released an update for Microsoft Office that turns off, by default, the Encapsulated PostScript (EPS) Filter in Office as a defense-in-depth measure. Microsoft is aware of limited targeted attacks that could leverage an unpatched vulnerability in the EPS filter and is taking this action to help reduce customer risk until the security update is released.</p>
<p>Microsoft strongly recommends against turning on the EPS filter at this time, however customers who need to turn on the EPS filter can reference <a href="https://support.microsoft.com/en-us/kb/2479871">KB Article 2479871</a>.</p>
Microsoft Office
ADV170005
10753
10754
10521
10522
10603
10601
10602
10753
10754
10521
10522
10603
10601
10602
10753
10754
10521
10522
10603
10601
10602
Publicly Disclosed:No;Exploited:Yes;Latest Software Release:Exploitation Detected;Older Software Release:Exploitation Detected
3178702
https://www.microsoft.com/downloads/details.aspx?familyid=1126e935-1986-4c77-995b-fc546693fb5b
3127986
10753
Maybe
Security Update
3178702
https://www.microsoft.com/downloads/details.aspx?familyid=ab14986b-b878-4e96-ad9e-2c45fdb6bdd5
3127986
10754
Maybe
Security Update
3141538
https://www.microsoft.com/downloads/details.aspx?familyid=0321799f-eda2-47c7-b565-d87316539029
3118380
10521
Maybe
Security Update
3141538
https://www.microsoft.com/downloads/details.aspx?familyid=309fd6ac-933d-4110-825a-58b34f207df4
3118380
10522
Maybe
Security Update
3178710
3127968
10603
Maybe
Security Update
3178710
https://www.microsoft.com/downloads/details.aspx?familyid=2c7ae47b-31cc-4311-909a-425b3d80026f
3127968
10601
Maybe
Security Update
3178710
https://www.microsoft.com/downloads/details.aspx?familyid=a53d575c-2cfe-40be-9408-deb41cf26573
3127968
10602
Maybe
Security Update
<p><strong>The following mitigating factors may be helpful for customers who need to re-enable the EPS filter</strong>
This vulnerability could not be exploited automatically through a Web-based attack scenario. An attacker would have to host a website that contains an Office file containing a specially crafted EPS image that is used to attempt to exploit this vulnerability. An attacker would have no way to force users to visit a malicious website. Instead, an attacker would have to convince them to visit the website, typically by getting them to click a link that takes them to the attacker's site, and then convince the user to open the file in an affected Microsoft Office application.
There is no way for an attacker to force a user to open a specially crafted file in order for the vulnerability to be exploited.</p>
Genwei Jiang of <a href="http://www.fireeye.com/">FireEye, Inc. </a>
1.0
2017-04-11T07:00:00Z
<p>Information published.</p>
1.1
2017-04-12T07:00:00Z
<p>Changed identifier to reduce confusion with CVE IDs. This is an informational change only.</p>
Internet Explorer Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists when Internet Explorer does not properly enforce cross-domain policies, which could allow an attacker to access information from one domain and inject it into another domain.</p>
<p>In a web-based attack scenario, an attacker could host a website that is used to attempt to exploit the vulnerability. In addition, compromised websites and websites that accept or host user-provided content could contain specially crafted content that could exploit the vulnerability. In all cases, however, an attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action. For example, an attacker could trick users into clicking a link that takes them to the attacker's site. An attacker who successfully exploited this vulnerability could elevate privileges in affected versions of Internet Explorer.</p>
<p>The vulnerability by itself does not allow arbitrary code to be run. However, the vulnerability could be used in conjunction with another vulnerability (for example, a remote code execution vulnerability) that could take advantage of the elevated privileges when running arbitrary code. For example, an attacker could exploit another vulnerability to run arbitrary code through Internet Explorer, but due to the context in which processes are launched by Internet Explorer, the code might be restricted to run at a low integrity level (very limited permissions). However, an attacker could, in turn, exploit this vulnerability to cause the arbitrary code to run at a medium integrity level (permissions of the current user).</p>
<p>The update addresses the vulnerability by helping to ensure that cross-domain policies are properly enforced in Internet Explorer.</p>
Internet Explorer
CVE-2017-0210
10555-10378
10486-10481
10486-10482
10486-10483
10486-10484
10486-10047
10486-10048
10486-10051
10486-10729
10486-10735
10486-10789
10486-10788
10486-10852
10486-10853
10486-10951
10486-10952
10486-10816
10486-10855
Elevation of Privilege
10555-10378
Elevation of Privilege
10486-10481
Elevation of Privilege
10486-10482
Elevation of Privilege
10486-10483
Elevation of Privilege
10486-10484
Elevation of Privilege
10486-10047
Elevation of Privilege
10486-10048
Elevation of Privilege
10486-10051
Elevation of Privilege
10486-10729
Elevation of Privilege
10486-10735
Elevation of Privilege
10486-10789
Elevation of Privilege
10486-10788
Elevation of Privilege
10486-10852
Elevation of Privilege
10486-10853
Elevation of Privilege
10486-10951
Elevation of Privilege
10486-10952
Elevation of Privilege
10486-10816
Elevation of Privilege
10486-10855
Important
10555-10378
Important
10486-10481
Important
10486-10482
Important
10486-10483
Important
10486-10484
Important
10486-10047
Important
10486-10048
Important
10486-10051
Important
10486-10729
Important
10486-10735
Important
10486-10789
Important
10486-10788
Important
10486-10852
Important
10486-10853
Important
10486-10951
Important
10486-10952
Important
10486-10816
Important
10486-10855
Publicly Disclosed:Yes;Exploited:Yes;Latest Software Release:Exploitation Detected;Older Software Release:Exploitation Detected
3.5
3.2
CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10555-10378
5.4
4.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10486-10481
5.4
4.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10486-10482
3.5
3.2
CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10486-10483
5.4
4.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10486-10484
5.4
4.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10486-10047
5.4
4.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10486-10048
3.5
3.2
CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10486-10051
5.4
4.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10486-10729
5.4
4.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10486-10735
5.4
4.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10486-10789
5.4
4.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10486-10788
5.4
4.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10486-10852
5.4
4.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10486-10853
5.4
4.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10486-10951
5.4
4.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10486-10952
3.5
3.2
CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10486-10816
3.5
3.2
CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10486-10855
4015551
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015551
4012217
10555-10378
Yes
Monthly Rollup
4014661
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014661
4012204
10555-10378
Yes
IE Cumulative
4015550
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015550
4012216
10486-10481
Yes
Monthly Rollup
4014661
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014661
4012204
10486-10481
Yes
IE Cumulative
4015550
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015550
4012216
10486-10482
Yes
Monthly Rollup
4014661
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014661
4012204
10486-10482
Yes
IE Cumulative
4015550
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015550
4012216
10486-10483
Yes
Monthly Rollup
4014661
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014661
4012204
10486-10483
Yes
IE Cumulative
4015550
4012216
10486-10484
Yes
Monthly Rollup
4015549
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015549
4012215
10486-10047
Yes
Monthly Rollup
4014661
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014661
4012204
10486-10047
Yes
IE Cumulative
4015549
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015549
4012215
10486-10048
Yes
Monthly Rollup
4014661
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014661
4012204
10486-10048
Yes
IE Cumulative
4015549
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015549
4012215
10486-10051
Yes
Monthly Rollup
4014661
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014661
4012204
10486-10051
Yes
IE Cumulative
4015221
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015221
4012606
10486-10729
Yes
Security Update
4015221
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015221
4012606
10486-10735
Yes
Security Update
4015219
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015219
4013198
10486-10789
Yes
Security Update
4015219
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015219
4013198
10486-10788
Yes
Security Update
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10486-10852
Yes
Security Update
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10486-10853
Yes
Security Update
4015583
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015583
10486-10951
Yes
Security Update
4015583
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015583
10486-10952
Yes
Security Update
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10486-10816
Yes
Security Update
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10486-10855
Yes
Security Update
1.0
2017-04-11T07:00:00Z
<p>Information published.</p>
Win32k Information Disclosure Vulnerability
<p>An information disclosure vulnerability exists when the win32k component improperly provides kernel information. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.</p>
<p>To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application.</p>
<p>The security update addresses the vulnerability by correcting how win32k handles objects in memory.</p>
Windows Kernel-Mode Drivers
CVE-2017-0058
10729
10735
10789
10788
10852
10853
10047
10048
10481
10482
10484
9312
9311
9318
9344
10050
10051
10049
10378
10379
10483
10543
4393
9316
10855
10951
10952
10287
10816
Information Disclosure
10729
Information Disclosure
10735
Information Disclosure
10789
Information Disclosure
10788
Information Disclosure
10852
Information Disclosure
10853
Information Disclosure
10047
Information Disclosure
10048
Information Disclosure
10481
Information Disclosure
10482
Information Disclosure
10484
Information Disclosure
9312
Information Disclosure
9311
Information Disclosure
9318
Information Disclosure
9344
Information Disclosure
10050
Information Disclosure
10051
Information Disclosure
10049
Information Disclosure
10378
Information Disclosure
10379
Information Disclosure
10483
Information Disclosure
10543
Information Disclosure
4393
Information Disclosure
9316
Information Disclosure
10855
Information Disclosure
10951
Information Disclosure
10952
Information Disclosure
10287
Information Disclosure
10816
Important
10729
Important
10735
Important
10789
Important
10788
Important
10852
Important
10853
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
9311
Important
9318
Important
9344
Important
10050
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Important
4393
Important
9316
Important
10855
Important
10951
Important
10952
Important
10287
Important
10816
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely;Older Software Release:Exploitation Unlikely
4.7
4.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
10729
4.7
4.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
10735
4.7
4.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
10789
4.7
4.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
10788
4.7
4.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
10852
4.7
4.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
10853
4.7
4.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
10047
4.7
4.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
10048
4.7
4.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
10481
4.7
4.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
10482
4.7
4.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
10484
4.7
4.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
9312
4.7
4.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
9311
4.7
4.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
9318
4.7
4.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
9344
4.7
4.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
10050
4.7
4.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
10051
4.7
4.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
10049
4.7
4.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
10378
4.7
4.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
10379
4.7
4.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
10483
4.7
4.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
10543
4.7
4.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
4393
4.7
4.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
9316
4.7
4.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
10951
4.7
4.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
10952
4.7
4.7
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
10816
4015221
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015221
4012606
10729
Yes
Security Update
4015221
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015221
4012606
10735
Yes
Security Update
4015219
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015219
4013198
10789
Yes
Security Update
4015219
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015219
4013198
10788
Yes
Security Update
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10852
Yes
Security Update
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10853
Yes
Security Update
4015549
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015549
4012215
10047
Yes
Monthly Rollup
4015546
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015546
10047
Yes
Security Only
4015549
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015549
4012215
10048
Yes
Monthly Rollup
4015546
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015546
10048
Yes
Security Only
4015550
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015550
4012216
10481
Yes
Monthly Rollup
4015547
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015547
10481
Yes
Security Only
4015550
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015550
4012216
10482
Yes
Monthly Rollup
4015547
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015547
10482
Yes
Security Only
4015550
4012216
10484
Yes
Monthly Rollup
4015195
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015195
3204723
9312
Yes
Security Update
4015195
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015195
3204723
9311
Yes
Security Update
4015195
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015195
3204723
9318
Yes
Security Update
4015195
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015195
3204723
9344
Yes
Security Update
4015549
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015549
4012215
10050
Yes
Monthly Rollup
4015546
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015546
10050
Yes
Security Only
4015549
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015549
4012215
10051
Yes
Monthly Rollup
4015546
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015546
10051
Yes
Security Only
4015549
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015549
4012215
10049
Yes
Monthly Rollup
4015546
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015546
10049
Yes
Security Only
4015551
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015551
4012217
10378
Yes
Monthly Rollup
4015548
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015548
10378
Yes
Security Only
4015551
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015551
4012217
10379
Yes
Monthly Rollup
4015548
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015548
10379
Yes
Security Only
4015550
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015550
4012216
10483
Yes
Monthly Rollup
4015547
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015547
10483
Yes
Security Only
4015550
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015550
4012216
10543
Yes
Monthly Rollup
4015547
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015547
10543
Yes
Security Only
4015195
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015195
3204723
4393
Yes
Security Update
4015195
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015195
3204723
9316
Yes
Security Update
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10855
Yes
Security Update
4015583
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015583
10951
Yes
Security Update
4015583
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015583
10952
Yes
Security Update
4015195
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015195
3204723
10287
Yes
Security Update
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10816
Yes
Security Update
Mateusz Jurczyk of <a href="http://www.google.com">Google Project Zero</a>
1.0
2017-04-11T07:00:00Z
<p>Information published.</p>
Scripting Engine Memory Corruption Vulnerability
<p>A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge (HTML-based). The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft Edge (HTML-based) and then convince a user to view the website. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p>
<p>The security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.</p>
Microsoft Scripting Engine
CVE-2017-0093
10724-10951
10724-10952
10724-10789
10724-10788
10724-10852
10724-10853
Remote Code Execution
10724-10951
Remote Code Execution
10724-10952
Remote Code Execution
10724-10789
Remote Code Execution
10724-10788
Remote Code Execution
10724-10852
Remote Code Execution
10724-10853
Critical
10724-10951
Critical
10724-10952
Critical
10724-10789
Critical
10724-10788
Critical
10724-10852
Critical
10724-10853
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10951
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10952
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10789
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10788
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10852
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
10724-10853
4015583
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015583
10724-10951
Yes
Security Update
4015583
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015583
10724-10952
Yes
Security Update
4015219
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015219
4013198
10724-10789
Yes
Security Update
4015219
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015219
4013198
10724-10788
Yes
Security Update
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10724-10852
Yes
Security Update
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10724-10853
Yes
Security Update
1.0
2017-04-11T07:00:00Z
<p>Information published.</p>
Microsoft Outlook Remote Code Execution Vulnerability
<p>A remote code execution vulnerability exists in the way that Microsoft Outlook parses specially crafted email messages. An attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>Exploitation of this vulnerability requires that a user open a specially crafted file with an affected version of Microsoft Outlook. In an email attack scenario, an attacker could exploit the vulnerability by sending a specially crafted file to the user and then convincing the user to open the file.</p>
<p>The security update addresses the vulnerability by correcting the way that Microsoft Outlook parses specially crafted email messages.</p>
<p><strong>I am being offered this update for software that is not specifically indicated as being affected in the Affected Software and Vulnerability Severity Ratings table. Why am I being offered this update?</strong></p>
<p>When updates address vulnerable code that exists in a component that is shared between multiple Microsoft Office products or shared between multiple versions of the same Microsoft Office product, the update is considered to be applicable to all supported products and versions that contain the vulnerable component.</p>
<p>For example, when an update applies to Microsoft Office 2007 products, only Microsoft Office 2007 may be specifically listed in the Affected Software table. However, the update could apply to Microsoft Word 2007, Microsoft Excel 2007, Microsoft Visio 2007, Microsoft Compatibility Pack, Microsoft Excel Viewer, or any other Microsoft Office 2007 product that is not specifically listed in the Affected Software table. Furthermore, when an update applies to Microsoft Office 2010 products, only Microsoft Office 2010 may be specifically listed in the Affected Software table. However, the update could apply to Microsoft Word 2010, Microsoft Excel 2010, Microsoft Visio 2010, Microsoft Visio Viewer, or any other Microsoft Office 2010 product that is not specifically listed in the Affected Software table.</p>
<p>For more information on this behavior and recommended actions, see <a href="https://support.microsoft.com/kb/830335">Microsoft Knowledge Base Article 830335</a>. For a list of Microsoft Office products that an update may apply to, refer to the Microsoft Knowledge Base Article associated with the specific update.</p>
Microsoft Office
CVE-2017-0106
10810
10811
10156
10527
10528
10765
10766
Remote Code Execution
10810
Remote Code Execution
10811
Remote Code Execution
10156
Remote Code Execution
10527
Remote Code Execution
10528
Remote Code Execution
10765
Remote Code Execution
10766
Critical
10810
Critical
10811
Critical
10156
Critical
10527
Critical
10528
Critical
10765
Critical
10766
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely
3172519
https://www.microsoft.com/downloads/details.aspx?familyid=52f24b91-8357-4238-ac7b-76c6fc73c26a
3118280
10810
Maybe
Security Update
3172519
https://www.microsoft.com/downloads/details.aspx?familyid=24f7b73f-9427-4ced-9e32-708713ea0679
3118280
10811
Maybe
Security Update
3127890
https://www.microsoft.com/downloads/details.aspx?familyid=e52ec75c-ae3d-4a29-ae70-be70ebca39c4
3118303
10156
Maybe
Security Update
3118388
https://www.microsoft.com/downloads/details.aspx?familyid=45ce94f9-a892-400e-b1fa-090606278303
3118313
10527
Maybe
Security Update
3118388
https://www.microsoft.com/downloads/details.aspx?familyid=efc35d51-f5dc-425e-89c8-06c5b41e6d0a
3118313
10528
Maybe
Security Update
3178664
https://www.microsoft.com/downloads/details.aspx?familyid=84ff6343-8b2c-49c6-8b64-c6c557b01135
3118293
10765
Maybe
Security Update
3178664
https://www.microsoft.com/downloads/details.aspx?familyid=7eea6108-ca57-4d61-8d66-bffcfa9f3531
3118293
10766
Maybe
Security Update
Ryan Hanson (<a href="https://twitter.com/ryhanson">@Ryhanson</a>) of <a href="https://www.optiv.com/">Optiv</a>
1.0
2017-04-11T07:00:00Z
<p>Information published.</p>
Win32k Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system.</p>
<p>The update addresses this vulnerability by correcting how Win32k handles objects in memory.</p>
Microsoft Graphics Component
CVE-2017-0155
10287
10047
10048
9312
9311
9318
9344
10050
10051
10049
4393
9316
Elevation of Privilege
10287
Elevation of Privilege
10047
Elevation of Privilege
10048
Elevation of Privilege
9312
Elevation of Privilege
9311
Elevation of Privilege
9318
Elevation of Privilege
9344
Elevation of Privilege
10050
Elevation of Privilege
10051
Elevation of Privilege
10049
Elevation of Privilege
4393
Elevation of Privilege
9316
Important
10287
Important
10047
Important
10048
Important
9312
Important
9311
Important
9318
Important
9344
Important
10050
Important
10051
Important
10049
Important
4393
Important
9316
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10287
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10047
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10048
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9312
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9311
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9318
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9344
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10050
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10051
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10049
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
4393
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9316
4015195
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015195
3204723
10287
Yes
Security Update
4015549
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015549
4012215
10047
Yes
Monthly Rollup
4015546
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015546
10047
Yes
Security Only
4015549
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015549
4012215
10048
Yes
Monthly Rollup
4015546
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015546
10048
Yes
Security Only
4015195
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015195
3204723
9312
Yes
Security Update
4015195
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015195
3204723
9311
Yes
Security Update
4015195
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015195
3204723
9318
Yes
Security Update
4015195
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015195
3204723
9344
Yes
Security Update
4015549
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015549
4012215
10050
Yes
Monthly Rollup
4015546
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015546
10050
Yes
Security Only
4015549
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015549
4012215
10051
Yes
Monthly Rollup
4015546
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015546
10051
Yes
Security Only
4015549
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015549
4012215
10049
Yes
Monthly Rollup
4015546
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015546
10049
Yes
Security Only
4015195
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015195
3204723
4393
Yes
Security Update
4015195
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015195
3204723
9316
Yes
Security Update
bear13oy of CloverSec Labs working with <a href="http://www.zerodayinitiative.com/">Trend Micro's Zero Day Initiative</a>
1.0
2017-04-11T07:00:00Z
<p>Information published.</p>
Win32k Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system.</p>
<p>The update addresses this vulnerability by correcting how Win32k handles objects in memory.</p>
Microsoft Graphics Component
CVE-2017-0156
10951
10952
10816
10729
10735
10789
10788
10852
10853
10047
10048
10481
10482
10484
10050
10051
10049
10378
10379
10483
10543
10855
Elevation of Privilege
10951
Elevation of Privilege
10952
Elevation of Privilege
10816
Elevation of Privilege
10729
Elevation of Privilege
10735
Elevation of Privilege
10789
Elevation of Privilege
10788
Elevation of Privilege
10852
Elevation of Privilege
10853
Elevation of Privilege
10047
Elevation of Privilege
10048
Elevation of Privilege
10481
Elevation of Privilege
10482
Elevation of Privilege
10484
Elevation of Privilege
10050
Elevation of Privilege
10051
Elevation of Privilege
10049
Elevation of Privilege
10378
Elevation of Privilege
10379
Elevation of Privilege
10483
Elevation of Privilege
10543
Elevation of Privilege
10855
Important
10951
Important
10952
Important
10816
Important
10729
Important
10735
Important
10789
Important
10788
Important
10852
Important
10853
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
10050
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Important
10855
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely;Older Software Release:Exploitation Less Likely;DOS:Permanent
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10951
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10952
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10816
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10729
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10735
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10789
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10788
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10852
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10853
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10047
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10048
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10481
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10482
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10484
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10050
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10051
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10049
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10483
7.0
6.3
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10543
4015583
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015583
10951
Yes
Security Update
4015583
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015583
10952
Yes
Security Update
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10816
Yes
Security Update
4015221
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015221
4012606
10729
Yes
Security Update
4015221
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015221
4012606
10735
Yes
Security Update
4015219
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015219
4013198
10789
Yes
Security Update
4015219
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015219
4013198
10788
Yes
Security Update
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10852
Yes
Security Update
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10853
Yes
Security Update
4015549
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015549
4012215
10047
Yes
Monthly Rollup
4015546
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015546
10047
Yes
Security Only
4015549
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015549
4012215
10048
Yes
Monthly Rollup
4015546
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015546
10048
Yes
Security Only
4015550
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015550
4012216
10481
Yes
Monthly Rollup
4015547
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015547
10481
Yes
Security Only
4015550
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015550
4012216
10482
Yes
Monthly Rollup
4015547
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015547
10482
Yes
Security Only
4015550
4012216
10484
Yes
Monthly Rollup
4015549
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015549
4012215
10050
Yes
Monthly Rollup
4015546
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015546
10050
Yes
Security Only
4015549
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015549
4012215
10051
Yes
Monthly Rollup
4015546
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015546
10051
Yes
Security Only
4015549
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015549
4012215
10049
Yes
Monthly Rollup
4015546
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015546
10049
Yes
Security Only
4015551
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015551
4012217
10378
Yes
Monthly Rollup
4015548
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015548
10378
Yes
Security Only
4015551
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015551
4012217
10379
Yes
Monthly Rollup
4015548
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015548
10379
Yes
Security Only
4015550
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015550
4012216
10483
Yes
Monthly Rollup
4015547
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015547
10483
Yes
Security Only
4015550
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015550
4012216
10543
Yes
Monthly Rollup
4015547
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015547
10543
Yes
Security Only
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10855
Yes
Security Update
<a href="http://weibo.com/pgboy1988">pgboy</a> and <a href="http://weibo.com/2641521260">zhong_sf</a> of Qihoo 360vulcan team
1.0
2017-04-11T07:00:00Z
<p>Information published.</p>
ADFS Security Feature Bypass Vulnerability
<p>A security feature bypass vulnerability exists when ADFS incorrectly treats requests coming from Extranet clients as Intranet requests. To exploit this vulnerability, an attacker could run a specially crafted application and attempt to brute-force an account password. An attacker who successfully exploited this vulnerability could bypass the account lockout protection enforced on Extranet client requests.</p>
<p>This update corrects the security feature’s behavior by correcting how ADFS processes requests.</p>
Windows Hyper-V
CVE-2017-0159
10951
10816
10853
10483
10543
10855
Security Feature Bypass
10951
Security Feature Bypass
10816
Security Feature Bypass
10853
Security Feature Bypass
10483
Security Feature Bypass
10543
Security Feature Bypass
10855
Important
10951
Important
10816
Important
10853
Important
10483
Important
10543
Important
10855
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely;Older Software Release:Exploitation Unlikely
3.7
3.4
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C
10951
3.7
3.4
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C
10816
3.7
3.4
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C
10853
3.7
3.4
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C
10483
3.7
3.4
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C
10543
4015583
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015583
10951
Yes
Security Update
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10816
Yes
Security Update
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10853
Yes
Security Update
4015550
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015550
4012216
10483
Yes
Monthly Rollup
4015547
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015547
10483
Yes
Security Only
4015550
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015550
4012216
10543
Yes
Monthly Rollup
4015547
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015547
10543
Yes
Security Only
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10855
Yes
Security Update
1.0
2017-04-11T07:00:00Z
<p>Information published.</p>
.NET Framework Remote Code Execution Vulnerability
<p>A remote code execution vulnerability exists when Microsoft .NET Framework fails to properly validate input before loading libraries. An attacker who successfully exploited this vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.</p>
<p>To exploit the vulnerability, an attacker would first need to access the local system with the ability to execute a malicious application.</p>
<p>The security update addresses the vulnerability by correcting how .NET validates input on library load.</p>
.NET Framework
CVE-2017-0160
9495-10047
9495-10051
9495-10050
9495-10049
9495-10048
10636-4393
10636-9316
10636-9312
10636-9318
10636-10047
10636-10048
10636-10051
10636-10049
10636-10378
10636-10379
10636-10481
10636-10482
10636-10484
10636-10483
10636-10543
10900-10484
10900-10483
10900-10543
10900-10378
10900-10379
10900-10482
10900-10047
10900-10051
10900-10049
10900-10048
10900-10481
10900-10852
10900-10853
10900-10816
10900-10855
2472-10481
2472-10482
2472-10483
2472-10543
10728-4393
10728-9316
10728-9312
10728-9318
10728-10729
10728-10735
10808-10789
10808-10788
2472-10729
2472-10735
2472-10789
2472-10788
2472-10852
2472-10853
2472-10951
2472-10952
2472-10816
2472-10855
10807-10047
10807-10048
10807-10051
10807-10049
10807-10378
10807-10379
10807-10483
10807-10543
10807-10481
10807-10482
10807-10484
9292-9311
9292-9312
9292-9316
9292-9318
9292-4393
2472-10379
2472-10378
10957-10951
10957-10952
Remote Code Execution
9495-10047
Remote Code Execution
9495-10051
Remote Code Execution
9495-10050
Remote Code Execution
9495-10049
Remote Code Execution
9495-10048
Remote Code Execution
10636-4393
Remote Code Execution
10636-9316
Remote Code Execution
10636-9312
Remote Code Execution
10636-9318
Remote Code Execution
10636-10047
Remote Code Execution
10636-10048
Remote Code Execution
10636-10051
Remote Code Execution
10636-10049
Remote Code Execution
10636-10378
Remote Code Execution
10636-10379
Remote Code Execution
10636-10481
Remote Code Execution
10636-10482
Remote Code Execution
10636-10484
Remote Code Execution
10636-10483
Remote Code Execution
10636-10543
Remote Code Execution
10900-10484
Remote Code Execution
10900-10483
Remote Code Execution
10900-10543
Remote Code Execution
10900-10378
Remote Code Execution
10900-10379
Remote Code Execution
10900-10482
Remote Code Execution
10900-10047
Remote Code Execution
10900-10051
Remote Code Execution
10900-10049
Remote Code Execution
10900-10048
Remote Code Execution
10900-10481
Remote Code Execution
10900-10852
Remote Code Execution
10900-10853
Remote Code Execution
10900-10816
Remote Code Execution
10900-10855
Remote Code Execution
2472-10481
Remote Code Execution
2472-10482
Remote Code Execution
2472-10483
Remote Code Execution
2472-10543
Remote Code Execution
10728-4393
Remote Code Execution
10728-9316
Remote Code Execution
10728-9312
Remote Code Execution
10728-9318
Remote Code Execution
10728-10729
Remote Code Execution
10728-10735
Remote Code Execution
10808-10789
Remote Code Execution
10808-10788
Remote Code Execution
2472-10729
Remote Code Execution
2472-10735
Remote Code Execution
2472-10789
Remote Code Execution
2472-10788
Remote Code Execution
2472-10852
Remote Code Execution
2472-10853
Remote Code Execution
2472-10951
Remote Code Execution
2472-10952
Remote Code Execution
2472-10816
Remote Code Execution
2472-10855
Remote Code Execution
10807-10047
Remote Code Execution
10807-10048
Remote Code Execution
10807-10051
Remote Code Execution
10807-10049
Remote Code Execution
10807-10378
Remote Code Execution
10807-10379
Remote Code Execution
10807-10483
Remote Code Execution
10807-10543
Remote Code Execution
10807-10481
Remote Code Execution
10807-10482
Remote Code Execution
10807-10484
Remote Code Execution
9292-9311
Remote Code Execution
9292-9312
Remote Code Execution
9292-9316
Remote Code Execution
9292-9318
Remote Code Execution
9292-4393
Remote Code Execution
2472-10379
Remote Code Execution
2472-10378
Remote Code Execution
10957-10951
Remote Code Execution
10957-10952
Critical
9495-10047
Critical
9495-10051
Critical
9495-10050
Critical
9495-10049
Critical
9495-10048
Critical
10636-4393
Critical
10636-9316
Critical
10636-9312
Critical
10636-9318
Critical
10636-10047
Critical
10636-10048
Critical
10636-10051
Critical
10636-10049
Critical
10636-10378
Critical
10636-10379
Critical
10636-10481
Critical
10636-10482
Critical
10636-10484
Critical
10636-10483
Critical
10636-10543
Critical
10900-10484
Critical
10900-10483
Critical
10900-10543
Critical
10900-10378
Critical
10900-10379
Critical
10900-10482
Critical
10900-10047
Critical
10900-10051
Critical
10900-10049
Critical
10900-10048
Critical
10900-10481
Critical
10900-10852
Critical
10900-10853
Critical
10900-10816
Critical
10900-10855
Critical
2472-10481
Critical
2472-10482
Critical
2472-10483
Critical
2472-10543
Critical
10728-4393
Critical
10728-9316
Critical
10728-9312
Critical
10728-9318
Critical
10728-10729
Critical
10728-10735
Critical
10808-10789
Critical
10808-10788
Critical
2472-10729
Critical
2472-10735
Critical
2472-10789
Critical
2472-10788
Critical
2472-10852
Critical
2472-10853
Critical
2472-10951
Critical
2472-10952
Critical
2472-10816
Critical
2472-10855
Critical
10807-10047
Critical
10807-10048
Critical
10807-10051
Critical
10807-10049
Critical
10807-10378
Critical
10807-10379
Critical
10807-10483
Critical
10807-10543
Critical
10807-10481
Critical
10807-10482
Critical
10807-10484
Critical
9292-9311
Critical
9292-9312
Critical
9292-9316
Critical
9292-9318
Critical
9292-4393
Critical
2472-10379
Critical
2472-10378
Critical
10957-10951
Critical
10957-10952
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely
4014981
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014981
3205402
9495-10047
Maybe
Monthly Rollup
4014985
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014985
9495-10047
Maybe
Security Only
4014981
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014981
3205402
9495-10051
Maybe
Monthly Rollup
4014985
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014985
9495-10051
Maybe
Security Only
4014981
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014981
3205402
9495-10050
Maybe
Monthly Rollup
4014985
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014985
9495-10050
Maybe
Security Only
4014981
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014981
3205402
9495-10049
Maybe
Monthly Rollup
4014985
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014985
9495-10049
Maybe
Security Only
4014981
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014981
3205402
9495-10048
Maybe
Monthly Rollup
4014985
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014985
9495-10048
Maybe
Security Only
4014984
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014984
10636-4393
Monthly Rollup
4014988
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014988
10636-4393
Security Only
4014984
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014984
10636-9316
Monthly Rollup
4014988
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014988
10636-9316
Security Only
4014984
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014984
10636-9312
Monthly Rollup
4014988
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014988
10636-9312
Security Only
4014984
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014984
10636-9318
Monthly Rollup
4014988
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014988
10636-9318
Security Only
4014981
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014981
3205402
10636-10047
Monthly Rollup
4014985
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014985
10636-10047
Maybe
Security Only
4014981
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014981
3205402
10636-10048
Monthly Rollup
4014985
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014985
10636-10048
Maybe
Security Only
4014981
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014981
3205402
10636-10051
Monthly Rollup
4014985
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014985
10636-10051
Maybe
Security Only
4014981
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014981
3205402
10636-10049
Monthly Rollup
4014985
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014985
10636-10049
Maybe
Security Only
4014982
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014982
3205403
10636-10378
Maybe
Monthly Rollup
4014986
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014986
10636-10378
Maybe
Security Only
4014982
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014982
3205403
10636-10379
Maybe
Monthly Rollup
4014986
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014986
10636-10379
Maybe
Security Only
4014983
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014983
3205404
10636-10481
Maybe
Monthly Rollup
4014987
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014987
10636-10481
Maybe
Security Only
4014983
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014983
3205404
10636-10482
Maybe
Monthly Rollup
4014987
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014987
10636-10482
Maybe
Security Only
4014983
3205404
10636-10484
Maybe
Monthly Rollup
4014987
10636-10484
Maybe
Security Only
4014983
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014983
3205404
10636-10483
Maybe
Monthly Rollup
4014987
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014987
10636-10483
Maybe
Security Only
4014983
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014983
3205404
10636-10543
Maybe
Monthly Rollup
4014987
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014987
10636-10543
Maybe
Security Only
4014983
3205404
10900-10484
Maybe
Monthly Rollup
4014987
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014987
10900-10484
Maybe
Security Only
4014983
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014983
3205404
10900-10483
Maybe
Monthly Rollup
4014987
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014987
10900-10483
Maybe
Security Only
4014983
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014983
3205404
10900-10543
Maybe
Monthly Rollup
4014987
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014987
10900-10543
Maybe
Security Only
4014982
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014982
3205403
10900-10378
Maybe
Monthly Rollup
4014986
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014986
10900-10378
Security Only
4014982
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014982
3205403
10900-10379
Maybe
Monthly Rollup
4014986
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014986
10900-10379
Security Only
4014983
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014983
3205404
10900-10482
Maybe
Monthly Rollup
4014987
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014987
10900-10482
Maybe
Security Only
4014981
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014981
3205402
10900-10047
Maybe
Monthly Rollup
4014985
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014985
10900-10047
Maybe
Security Only
4014981
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014981
3205402
10900-10051
Maybe
Monthly Rollup
4014985
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014985
10900-10051
Maybe
Security Only
4014981
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014981
3205402
10900-10049
Maybe
Monthly Rollup
4014985
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014985
10900-10049
Maybe
Security Only
4014981
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014981
3205402
10900-10048
Maybe
Monthly Rollup
4014985
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014985
10900-10048
Maybe
Security Only
4014983
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014983
3205404
10900-10481
Maybe
Monthly Rollup
4014987
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014987
10900-10481
Maybe
Security Only
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10900-10852
Yes
Security Update
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10900-10853
Yes
Security Update
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10900-10816
Yes
Security Update
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10900-10855
Yes
Security Update
4014983
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014983
3205404
2472-10481
Maybe
Monthly Rollup
4014987
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014987
2472-10481
Maybe
Security Only
4014983
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014983
3205404
2472-10482
Maybe
Monthly Rollup
4014987
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014987
2472-10482
Maybe
Security Only
4014983
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014983
3205404
2472-10483
Maybe
Monthly Rollup
4014987
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014987
2472-10483
Maybe
Security Only
4014983
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014983
3205404
2472-10543
Maybe
Monthly Rollup
4014987
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014987
2472-10543
Maybe
Security Only
4014984
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014984
10728-4393
Maybe
Monthly Rollup
4014988
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014988
10728-4393
Maybe
Security Only
4014984
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014984
10728-9316
Maybe
Monthly Rollup
4014988
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014988
10728-9316
Maybe
Security Only
4014984
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014984
10728-9312
Maybe
Monthly Rollup
4014988
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014988
10728-9312
Maybe
Security Only
4014984
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014984
10728-9318
Maybe
Monthly Rollup
4014988
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014988
10728-9318
Maybe
Security Only
4015221
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015221
4012606
10728-10729
Yes
Security Update
4015221
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015221
4012606
10728-10735
Yes
Security Update
4015219
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015219
4013198
10808-10789
Yes
Security Update
4015219
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015219
4013198
10808-10788
Yes
Security Update
4015221
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015221
4012606
2472-10729
Yes
Security Update
4015221
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015221
4012606
2472-10735
Yes
Security Update
4015219
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015219
4013198
2472-10789
Yes
Security Update
4015219
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015219
4013198
2472-10788
Yes
Security Update
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
2472-10852
Yes
Security Update
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
2472-10853
Yes
Security Update
4015583
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015583
2472-10951
Yes
Security Update
4015583
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015583
2472-10952
Yes
Security Update
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
2472-10816
Yes
Security Update
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
2472-10855
Yes
Security Update
4014981
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014981
3205402
10807-10047
Maybe
Monthly Rollup
4014985
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014985
10807-10047
Maybe
Security Only
4014981
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014981
3205402
10807-10048
Maybe
Monthly Rollup
4014985
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014985
10807-10048
Maybe
Security Only
4014981
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014981
3205402
10807-10051
Maybe
Monthly Rollup
4014985
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014985
10807-10051
Maybe
Security Only
4014981
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014981
3205402
10807-10049
Maybe
Monthly Rollup
4014985
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014985
10807-10049
Maybe
Security Only
4014982
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014982
3205403
10807-10378
Maybe
Monthly Rollup
4014986
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014986
10807-10378
Security Only
4014982
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014982
3205403
10807-10379
Maybe
Monthly Rollup
4014986
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014986
10807-10379
Security Only
4014983
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014983
3205404
10807-10483
Maybe
Monthly Rollup
4014987
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014987
10807-10483
Maybe
Security Only
4014983
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014983
3205404
10807-10543
Maybe
Monthly Rollup
4014987
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014987
10807-10543
Maybe
Security Only
4014983
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014983
3205404
10807-10481
Maybe
Monthly Rollup
4014987
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014987
10807-10481
Maybe
Security Only
4014983
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014983
3205404
10807-10482
Maybe
Monthly Rollup
4014987
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014987
10807-10482
Maybe
Security Only
4014983
3205404
10807-10484
Maybe
Monthly Rollup
4014987
10807-10484
Maybe
Security Only
4014984
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014984
9292-9311
Maybe
Monthly Rollup
4014988
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014988
9292-9311
Maybe
Security Only
4014984
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014984
9292-9312
Monthly Rollup
4014988
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014988
9292-9312
Security Only
4014984
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014984
9292-9316
Monthly Rollup
4014988
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014988
9292-9316
Security Only
4014984
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014984
9292-9318
Monthly Rollup
4014988
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014988
9292-9318
Security Only
4014984
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014984
9292-4393
Monthly Rollup
4014988
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014988
9292-4393
Security Only
4014982
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014982
2472-10379
Monthly Rollup
4014986
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014986
2472-10379
Security Only
4014982
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014982
2472-10378
Monthly Rollup
4014986
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014986
2472-10378
Security Only
4015583
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015583
10957-10951
Yes
Security Update
4015583
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015583
10957-10952
Yes
Security Update
James Forshaw of <a href=http://www.google.com>Google Project Zero</a>
1.0
2017-04-11T07:00:00Z
<p>Information published.</p>
Hyper-V Remote Code Execution Vulnerability
<p>A remote code execution vulnerability exists when Windows Hyper-V Network Switch on a host server fails to properly validate input from an authenticated user on a guest operating system. To exploit the vulnerability, an attacker could run a specially crafted application on a guest operating system that could cause the Hyper-V host operating system to execute arbitrary code.</p>
<p>An attacker who successfully exploited the vulnerability could execute arbitrary code on the host operating system.</p>
<p>The security update addresses the vulnerability by correcting how Windows Hyper-V Network Switch validates guest operating system network traffic.</p>
Windows Hyper-V
CVE-2017-0162
10952
10735
10788
10853
10482
10483
10543
10816
10855
Remote Code Execution
10952
Remote Code Execution
10735
Remote Code Execution
10788
Remote Code Execution
10853
Remote Code Execution
10482
Remote Code Execution
10483
Remote Code Execution
10543
Remote Code Execution
10816
Remote Code Execution
10855
Critical
10952
Critical
10735
Critical
10788
Critical
10853
Critical
10482
Critical
10483
Critical
10543
Critical
10816
Critical
10855
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely
7.6
6.8
CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
10952
7.6
6.8
CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
10735
7.6
6.8
CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
10788
7.6
6.8
CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
10853
7.6
6.8
CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
10482
7.6
6.8
CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
10483
7.6
6.8
CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
10543
7.6
6.8
CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
10816
7.6
6.8
CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
10855
4015583
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015583
10952
Yes
Security Update
4015221
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015221
4012606
10735
Yes
Security Update
4015219
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015219
4013198
10788
Yes
Security Update
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10853
Yes
Security Update
4015550
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015550
4012216
10482
Yes
Monthly Rollup
4015547
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015547
10482
Yes
Security Only
4015550
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015550
4012216
10483
Yes
Monthly Rollup
4015547
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015547
10483
Yes
Security Only
4015550
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015550
4012216
10543
Yes
Monthly Rollup
4015547
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015547
10543
Yes
Security Only
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10816
Yes
Security Update
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10855
Yes
Security Update
<p>The following <a href="https://technet.microsoft.com/library/security/dn848375.aspx#Mitigation">mitigating factors</a> may be helpful in your situation:
Customers who have not enabled the Hyper-V role are not affected.</p>
Felix Wilhelm (ERNW Research GmbH) & Axel Souchet, MSRC Vulnerabilities & Mitigations
1.0
2017-04-11T07:00:00Z
<p>Information published.</p>
Hyper-V Remote Code Execution Vulnerability
<p>A remote code execution vulnerability exists when Windows Hyper-V Network Switch on a host server fails to properly validate input from an authenticated user on a guest operating system. To exploit the vulnerability, an attacker could run a specially crafted application on a guest operating system that could cause the Hyper-V host operating system to execute arbitrary code.</p>
<p>An attacker who successfully exploited the vulnerability could execute arbitrary code on the host operating system.</p>
<p>The security update addresses the vulnerability by correcting how Windows Hyper-V Network Switch validates guest operating system network traffic.</p>
Windows Hyper-V
CVE-2017-0163
10952
10816
10853
10482
9318
9344
10051
10049
10378
10379
10483
10543
10855
10735
10788
Remote Code Execution
10952
Remote Code Execution
10816
Remote Code Execution
10853
Remote Code Execution
10482
Remote Code Execution
9318
Remote Code Execution
9344
Denial of Service
10051
Remote Code Execution
10049
Remote Code Execution
10378
Remote Code Execution
10379
Remote Code Execution
10483
Remote Code Execution
10543
Remote Code Execution
10855
Remote Code Execution
10735
Remote Code Execution
10788
Critical
10952
Critical
10816
Critical
10853
Critical
10482
Critical
9318
Critical
9344
Important
10051
Critical
10049
Critical
10378
Critical
10379
Critical
10483
Critical
10543
Critical
10855
Critical
10735
Critical
10788
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.6
6.8
CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
10952
7.6
6.8
CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
10816
7.6
6.8
CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
10853
7.6
6.8
CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
10482
7.6
6.8
CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
9318
7.6
6.8
CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
9344
7.6
6.8
CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
10051
7.6
6.8
CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
10049
7.6
6.8
CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
10378
7.6
6.8
CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
10379
7.6
6.8
CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
10483
7.6
6.8
CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
10543
7.6
6.8
CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
10735
7.6
6.8
CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C
10788
4015583
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015583
10952
Yes
Security Update
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10816
Yes
Security Update
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10853
Yes
Security Update
4015550
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015550
4012216
10482
Yes
Monthly Rollup
4015547
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015547
10482
Yes
Security Only
3211308
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3211308
9318
Yes
Security Update
3211308
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3211308
9344
Yes
Security Update
4015549
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015549
4012215
10051
Yes
Monthly Rollup
4015546
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015546
10051
Yes
Security Only
4015549
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015549
4012215
10049
Yes
Monthly Rollup
4015546
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015546
10049
Yes
Security Only
4015551
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015551
4012217
10378
Yes
Monthly Rollup
4015548
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015548
10378
Yes
Security Only
4015551
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015551
4012217
10379
Yes
Monthly Rollup
4015548
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015548
10379
Yes
Security Only
4015550
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015550
4012216
10483
Yes
Monthly Rollup
4015547
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015547
10483
Yes
Security Only
4015550
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015550
4012216
10543
Yes
Monthly Rollup
4015547
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015547
10543
Yes
Security Only
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10855
Yes
Security Update
4015221
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015221
4012606
10735
Yes
Security Update
4015219
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015219
4013198
10788
Yes
Security Update
<p>The following <a href="https://technet.microsoft.com/library/security/dn848375.aspx#Mitigation">mitigating factors</a> may be helpful in your situation:
Customers who have not enabled the Hyper-V role are not affected.</p>
Jordan Rabet, Microsoft Offensive Security Research Team
1.0
2017-04-11T07:00:00Z
<p>Information published.</p>
Active Directory Denial of Service Vulnerability
<p>A denial of service vulnerability exists in Active Directory when an authenticated attacker sends malicious search queries. An attacker who successfully exploited this vulnerability could cause the Active Directory service to become nonresponsive.</p>
<p>To exploit this vulnerability, an attacker must have valid credentials. An attacker could exploit this vulnerability by sending malicious search queries, resulting in denial of service.</p>
<p>The update addresses the vulnerability by correcting how search queries are processed.</p>
Active Directory
CVE-2017-0164
10816
10852
10853
10855
Denial of Service
10816
Denial of Service
10852
Denial of Service
10853
Denial of Service
10855
Important
10816
Important
10852
Important
10853
Important
10855
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely;Older Software Release:Exploitation Unlikely;DOS:Permanent
4.4
4.0
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
10816
4.4
4.0
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
10852
4.4
4.0
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
10853
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10816
Yes
Security Update
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10852
Yes
Security Update
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10853
Yes
Security Update
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10855
Yes
Security Update
1.0
2017-04-11T07:00:00Z
<p>Information published.</p>
Windows Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists when Microsoft Windows fails to properly sanitize handles in memory.</p>
<p>An attacker who successfully exploited the vulnerability could run arbitrary code as System. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>To exploit the vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application designed to elevate privileges. The update addresses the vulnerability by correcting how Windows sanitizes handles in memory.</p>
Microsoft Windows
CVE-2017-0165
10729
10735
10789
10788
10481
10482
10484
10483
10543
Elevation of Privilege
10729
Elevation of Privilege
10735
Elevation of Privilege
10789
Elevation of Privilege
10788
Elevation of Privilege
10481
Elevation of Privilege
10482
Elevation of Privilege
10484
Elevation of Privilege
10483
Elevation of Privilege
10543
Important
10729
Important
10735
Important
10789
Important
10788
Important
10481
Important
10482
Important
10484
Important
10483
Important
10543
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely
6.6
5.9
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C
10729
6.6
5.9
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C
10735
6.6
5.9
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C
10789
6.6
5.9
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C
10788
6.6
5.9
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C
10481
6.6
5.9
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C
10482
6.6
5.9
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C
10484
6.6
5.9
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C
10483
6.6
5.9
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C
10543
4015221
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015221
4012606
10729
Yes
Security Update
4015221
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015221
4012606
10735
Yes
Security Update
4015219
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015219
4013198
10789
Yes
Security Update
4015219
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015219
4013198
10788
Yes
Security Update
4015550
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015550
4012216
10481
Yes
Monthly Rollup
4015547
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015547
10481
Yes
Security Only
4015550
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015550
4012216
10482
Yes
Monthly Rollup
4015547
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015547
10482
Yes
Security Only
4015550
4012216
10484
Yes
Monthly Rollup
4015550
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015550
4012216
10483
Yes
Monthly Rollup
4015547
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015547
10483
Yes
Security Only
4015550
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015550
4012216
10543
Yes
Monthly Rollup
4015547
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015547
10543
Yes
Security Only
James Forshaw of <a href="http://www.google.com/">Google Project Zero</a>
1.0
2017-04-11T07:00:00Z
<p>Information published.</p>
LDAP Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists when LDAP request buffer lengths are improperly calculated. In a remote attack scenario, an attacker could exploit this vulnerability by running a specially crafted application to send malicious traffic to a Domain Controller. An attacker who successfully exploited this vulnerability could run processes in an elevated context.</p>
<p>The update addresses the vulnerability by correcting how LDAP request buffer lengths are calculated.</p>
Group Policy
CVE-2017-0166
10729
10735
10789
10788
10852
10853
10047
10048
10481
10482
10484
9312
9311
9318
9344
10050
10051
10049
10378
10379
10483
10543
10816
10855
4393
9316
10951
10952
10287
Elevation of Privilege
10729
Elevation of Privilege
10735
Elevation of Privilege
10789
Elevation of Privilege
10788
Elevation of Privilege
10852
Elevation of Privilege
10853
Elevation of Privilege
10047
Elevation of Privilege
10048
Elevation of Privilege
10481
Elevation of Privilege
10482
Elevation of Privilege
10484
Elevation of Privilege
9312
Elevation of Privilege
9311
Elevation of Privilege
9318
Elevation of Privilege
9344
Elevation of Privilege
10050
Elevation of Privilege
10051
Elevation of Privilege
10049
Elevation of Privilege
10378
Elevation of Privilege
10379
Elevation of Privilege
10483
Elevation of Privilege
10543
Elevation of Privilege
10816
Elevation of Privilege
10855
Elevation of Privilege
4393
Elevation of Privilege
9316
Elevation of Privilege
10951
Elevation of Privilege
10952
Elevation of Privilege
10287
Important
10729
Important
10735
Important
10789
Important
10788
Important
10852
Important
10853
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
9311
Important
9318
Important
9344
Important
10050
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Important
10816
Important
10855
Important
4393
Important
9316
Important
10951
Important
10952
Important
10287
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely
8.1
7.3
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10729
8.1
7.3
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10735
8.1
7.3
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10789
8.1
7.3
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10788
8.1
7.3
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10852
8.1
7.3
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10853
8.1
7.3
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10047
8.1
7.3
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10048
8.1
7.3
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10481
8.1
7.3
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10482
8.1
7.3
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10484
8.1
7.3
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9312
8.1
7.3
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9311
8.1
7.3
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9318
8.1
7.3
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9344
8.1
7.3
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10050
8.1
7.3
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10051
8.1
7.3
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10049
8.1
7.3
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10378
8.1
7.3
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10379
8.1
7.3
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10483
8.1
7.3
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10543
8.1
7.3
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10816
8.1
7.3
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10855
8.1
7.3
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
4393
8.1
7.3
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9316
8.1
7.3
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10951
8.1
7.3
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10952
4015221
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015221
4012606
10729
Yes
Security Update
4015221
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015221
4012606
10735
Yes
Security Update
4015219
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015219
4013198
10789
Yes
Security Update
4015219
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015219
4013198
10788
Yes
Security Update
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10852
Yes
Security Update
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10853
Yes
Security Update
4015549
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015549
4012215
10047
Yes
Monthly Rollup
4015546
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015546
10047
Yes
Security Only
4015549
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015549
4012215
10048
Yes
Monthly Rollup
4015546
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015546
10048
Yes
Security Only
4015550
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015550
4012216
10481
Yes
Monthly Rollup
4015547
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015547
10481
Yes
Security Only
4015550
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015550
4012216
10482
Yes
Monthly Rollup
4015547
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015547
10482
Yes
Security Only
4015550
4012216
10484
Yes
Monthly Rollup
4015068
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015068
3184471
9312
Yes
Security Update
4015068
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015068
3184471
9311
Yes
Security Update
4015068
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015068
3184471
9318
Yes
Security Update
4015068
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015068
3184471
9344
Yes
Security Update
4015549
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015549
4012215
10050
Yes
Monthly Rollup
4015546
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015546
10050
Yes
Security Only
4015549
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015549
4012215
10051
Yes
Monthly Rollup
4015546
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015546
10051
Yes
Security Only
4015549
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015549
4012215
10049
Yes
Monthly Rollup
4015546
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015546
10049
Yes
Security Only
4015551
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015551
4012217
10378
Yes
Monthly Rollup
4015548
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015548
10378
Yes
Security Only
4015551
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015551
4012217
10379
Yes
Monthly Rollup
4015548
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015548
10379
Yes
Security Only
4015550
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015550
4012216
10483
Yes
Monthly Rollup
4015547
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015547
10483
Yes
Security Only
4015550
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015550
4012216
10543
Yes
Monthly Rollup
4015547
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015547
10543
Yes
Security Only
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10816
Yes
Security Update
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10855
Yes
Security Update
4015068
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015068
3184471
4393
Yes
Security Update
4015068
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015068
3184471
9316
Yes
Security Update
4015583
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015583
10951
Yes
Security Update
4015583
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015583
10952
Yes
Security Update
4015068
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015068
3184471
10287
Yes
Security Update
1.0
2017-04-11T07:00:00Z
<p>Information published.</p>
Windows Kernel Information Disclosure Vulnerability
<p>An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system.</p>
<p>To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application. The vulnerability would not allow an attacker to execute code or to elevate user rights directly, but it could be used to obtain information that could be used to try to further compromise the affected system.</p>
<p>The update addresses the vulnerability by correcting how the Windows kernel handles objects in memory.</p>
Windows Kernel-Mode Drivers
CVE-2017-0167
10047
10048
9312
9311
9318
9344
10050
10051
10049
10729
10735
10789
10788
10852
10853
10481
10482
10484
10816
10855
10287
10951
10952
Information Disclosure
10047
Information Disclosure
10048
Information Disclosure
9312
Information Disclosure
9311
Information Disclosure
9318
Information Disclosure
9344
Information Disclosure
10050
Information Disclosure
10051
Information Disclosure
10049
Information Disclosure
10729
Information Disclosure
10735
Information Disclosure
10789
Information Disclosure
10788
Information Disclosure
10852
Information Disclosure
10853
Information Disclosure
10481
Information Disclosure
10482
Information Disclosure
10484
Information Disclosure
10816
Information Disclosure
10855
Information Disclosure
10287
Information Disclosure
10951
Information Disclosure
10952
Important
10047
Important
10048
Important
9312
Important
9311
Important
9318
Important
9344
Important
10050
Important
10051
Important
10049
Important
10729
Important
10735
Important
10789
Important
10788
Important
10852
Important
10853
Important
10481
Important
10482
Important
10484
Important
10816
Important
10855
Important
10287
Important
10951
Important
10952
Publicly Disclosed:Yes;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
7.3
6.6
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10047
7.3
6.6
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10048
7.3
6.6
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9312
7.3
6.6
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9311
7.3
6.6
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9318
7.3
6.6
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9344
7.3
6.6
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10050
7.3
6.6
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10051
7.3
6.6
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10049
7.3
6.6
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10729
7.3
6.6
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10735
7.3
6.6
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10789
7.3
6.6
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10788
7.3
6.6
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10852
7.3
6.6
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10853
7.3
6.6
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10481
7.3
6.6
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10482
7.3
6.6
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10484
7.3
6.6
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10816
7.3
6.6
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10855
7.3
6.6
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10287
7.3
6.6
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10951
7.3
6.6
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10952
4022719
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4022719
4019264
10047
Yes
Monthly Rollup
4022722
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4022722
10047
Yes
Security Only
4022719
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4022719
4019264
10048
Yes
Monthly Rollup
4022722
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4022722
10048
Yes
Security Only
4022887
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4022887
4012497
9312
Yes
Security Update
4022887
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4022887
4012497
9311
Yes
Security Update
4022887
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4022887
4012497
9318
Yes
Security Update
4022887
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4022887
4012497
9344
Yes
Security Update
4022719
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4022719
4019264
10050
Yes
Monthly Rollup
4022722
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4022722
10050
Yes
Security Only
4022719
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4022719
4019264
10051
Yes
Monthly Rollup
4022722
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4022722
10051
Yes
Security Only
4022719
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4022719
4019264
10049
Yes
Monthly Rollup
4022722
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4022722
10049
Yes
Security Only
4015221
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015221
4012606
10729
Yes
Security Update
4015221
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015221
4012606
10735
Yes
Security Update
4015219
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015219
4013198
10789
Yes
Security Update
4015219
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015219
4013198
10788
Yes
Security Update
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10852
Yes
Security Update
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10853
Yes
Security Update
4015550
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015550
4012216
10481
Yes
Monthly Rollup
4015547
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015547
10481
Yes
Security Only
4015550
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015550
4012216
10482
Yes
Monthly Rollup
4015547
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015547
10482
Yes
Security Only
4015550
4012216
10484
Yes
Monthly Rollup
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10816
Yes
Security Update
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10855
Yes
Security Update
4022887
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4022887
4012497
10287
Yes
Security Update
4015583
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015583
10951
Yes
Security Update
4015583
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015583
10952
Yes
Security Update
Mateusz Jurczyk of <a href="http://www.google.com">Google Project Zero</a>
Meysam Firouzi (<a href="https://twitter.com/R00tkitSMM">@R00tkitSMM</a>) & Celil ÜNÜVER (<a href="https://twitter.com/celilunuver">@celilunuver</a>)
1.0
2017-04-11T07:00:00Z
<p>Information published.</p>
2.0
2017-06-13T07:00:00Z
<p>To comprehensively address CVE-2017-0167, Microsoft has released security update 4022887 for supported editions of Windows Server 2008, and Monthly Rollup 4015549 and Security Update 4015546 for supported editions of Windows 7 and Windows Server 2008 R2. Microsoft recommends that customers running any of these affected editions of Windows should install the applicable update to be fully protected from this vulnerability. See <a href="https://support.microsoft.com/help/4013075"> Microsoft Knowledge Base Article 4022887</a>, Microsoft KB4015549 Release Notes, or KB4015546 Release Notes for more information.</p>
2.1
2017-08-23T07:00:00Z
<p>Corrected the Monthly Rollup and Security Update information for Windows 7 and Windows Server 2008 R2 in the Affected Products table to Monthly Rollup 4022719 and Security Update 4022722. Microsoft recommends that customers running supported editions of Windows 7 or Windows Server 2008 R2 install the Monthly Rollup or the Security Update to be fully protected from CVE-2017-0167. Customers who have already successfully installed the updates do not need to take any further action.</p>
Hyper-V Information Disclosure Vulnerability
<p>An information disclosure vulnerability exists when the Windows Hyper-V Network Switch on a host operating system fails to properly validate input from an authenticated user on a guest operating system. To exploit the vulnerability, an attacker on a guest operating system could run a specially crafted application that could cause the Hyper-V host operating system to disclose memory information.</p>
<p>An attacker who successfully exploited the vulnerability could gain access to information on the Hyper-V host operating system.</p>
<p>The security update addresses the vulnerability by correcting how the Windows Hyper-V Network Switch validates guest operating system user input.</p>
Windows Hyper-V
CVE-2017-0168
10482
9318
9344
10051
10049
10378
10379
10483
10543
Information Disclosure
10482
Information Disclosure
9318
Information Disclosure
9344
Information Disclosure
10051
Information Disclosure
10049
Information Disclosure
10378
Information Disclosure
10379
Information Disclosure
10483
Information Disclosure
10543
Important
10482
Important
9318
Important
9344
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A;Older Software Release:Exploitation Unlikely
7.7
6.9
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N/E:P/RL:O/RC:C
10482
7.7
6.9
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N/E:P/RL:O/RC:C
9318
7.7
6.9
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N/E:P/RL:O/RC:C
9344
7.7
6.9
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N/E:P/RL:O/RC:C
10051
7.7
6.9
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N/E:P/RL:O/RC:C
10049
7.7
6.9
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N/E:P/RL:O/RC:C
10378
7.7
6.9
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N/E:P/RL:O/RC:C
10379
7.7
6.9
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N/E:P/RL:O/RC:C
10483
7.7
6.9
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N/E:P/RL:O/RC:C
10543
4015550
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015550
4012216
10482
Yes
Monthly Rollup
4015547
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015547
10482
Yes
Security Only
3211308
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3211308
9318
Yes
Security Update
3211308
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3211308
9344
Yes
Security Update
4015549
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015549
4012215
10051
Yes
Monthly Rollup
4015546
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015546
10051
Yes
Security Only
4015549
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015549
4012215
10049
Yes
Monthly Rollup
4015546
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015546
10049
Yes
Security Only
4015551
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015551
4012217
10378
Yes
Monthly Rollup
4015548
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015548
10378
Yes
Security Only
4015551
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015551
4012217
10379
Yes
Monthly Rollup
4015548
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015548
10379
Yes
Security Only
4015550
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015550
4012216
10483
Yes
Monthly Rollup
4015547
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015547
10483
Yes
Security Only
4015550
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015550
4012216
10543
Yes
Monthly Rollup
4015547
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015547
10543
Yes
Security Only
<p>The following <a href="https://technet.microsoft.com/library/security/dn848375.aspx#Mitigation">mitigating factors</a> may be helpful in your situation:
Customers who have not enabled the Hyper-V role are not affected.</p>
Jordan Rabet, Microsoft Offensive Security Research Team
1.0
2017-04-11T07:00:00Z
<p>Information published.</p>
Windows Hyper-V Information Disclosure Vulnerability
<p>An information disclosure vulnerability exists when Windows Hyper-V on a host operating system fails to properly validate input from an authenticated user on a guest operating system. To exploit the vulnerability, an attacker on a guest operating system could run a specially crafted application that could cause the Hyper-V host operating system to disclose memory information.</p>
<p>An attacker who successfully exploited the vulnerability could gain access to information on the Hyper-V host operating system.</p>
<p>The security update addresses the vulnerability by correcting how Hyper-V validates guest operating system user input.</p>
Windows Hyper-V
CVE-2017-0169
10482
10378
10379
10483
10543
Information Disclosure
10482
Information Disclosure
10378
Information Disclosure
10379
Information Disclosure
10483
Information Disclosure
10543
Important
10482
Important
10378
Important
10379
Important
10483
Important
10543
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely;Older Software Release:Exploitation Unlikely
7.3
6.6
CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N/E:P/RL:O/RC:C
10482
7.3
6.6
CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N/E:P/RL:O/RC:C
10378
7.3
6.6
CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N/E:P/RL:O/RC:C
10379
7.3
6.6
CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N/E:P/RL:O/RC:C
10483
7.3
6.6
CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N/E:P/RL:O/RC:C
10543
4015550
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015550
4012216
10482
Yes
Monthly Rollup
4015547
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015547
10482
Yes
Security Only
4015551
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015551
4012217
10378
Yes
Monthly Rollup
4015548
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015548
10378
Yes
Security Only
4015551
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015551
4012217
10379
Yes
Monthly Rollup
4015548
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015548
10379
Yes
Security Only
4015550
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015550
4012216
10483
Yes
Monthly Rollup
4015547
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015547
10483
Yes
Security Only
4015550
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015550
4012216
10543
Yes
Monthly Rollup
4015547
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015547
10543
Yes
Security Only
<p>The following <a href="https://technet.microsoft.com/library/security/dn848375.aspx#Mitigation">mitigating factors</a> may be helpful in your situation:
Customers who have not enabled the Hyper-V role are not affected.</p>
Jordan Rabet, Microsoft Offensive Security Research Team
1.0
2017-04-11T07:00:00Z
<p>Information published.</p>
Microsoft Excel Information Disclosure Vulnerability
<p>An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory. An attacker who exploited the vulnerability could use the information to compromise the user’s computer or data.</p>
<p>To exploit the vulnerability, an attacker could craft a special document file and then convince the user to open it. An attacker must know the memory address location where the object was created.</p>
<p>The update addresses the vulnerability by changing the way certain Excel functions handle objects in memory.</p>
Microsoft Office
CVE-2017-0194
9307
10152
10489
10490
Information Disclosure
9307
Information Disclosure
10152
Information Disclosure
10489
Information Disclosure
10490
Important
9307
Important
10152
Important
10489
Important
10490
Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A;Older Software Release:Exploitation Less Likely
3191830
https://www.microsoft.com/downloads/details.aspx?familyid=3f23b560-2fdd-4bd5-b0e0-1fcee6cceb16
3178677
9307
Maybe
Security Update
3191827
https://www.microsoft.com/downloads/details.aspx?familyid=2277f4e4-4c1c-4104-b4b5-5f32f1e8c2da
3178676
10152
Maybe
Security Update
3191847
https://www.microsoft.com/downloads/details.aspx?familyid=bca75a82-f236-44d8-98cf-ff0f134bfa10
3178690
10489
Maybe
Security Update
3191847
https://www.microsoft.com/downloads/details.aspx?familyid=21e684ed-9cd7-4a21-b7f2-fb137f6c9582
3178690
10490
Maybe
Security Update
Qiang Liu <a href="http://www.mcafee.com">McAfee</a>
1.0
2017-04-11T07:00:00Z
<p>Information published.</p>
Microsoft Edge Memory Corruption Vulnerability
<p>A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory. The vulnerability could corrupt memory in such a way that enables an attacker to execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>An attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft Edge, and then convince a user to view the website. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements by adding specially crafted content that could exploit the vulnerability. In all cases, however, an attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically by way of enticement in an email or Instant Messenger message, or by getting them to open an attachment sent through email.</p>
<p>The security update addresses the vulnerability by modifying how Microsoft Edge handles objects in memory.</p>
Microsoft Edge
CVE-2017-0200
10724-10852
10724-10853
Remote Code Execution
10724-10852
Remote Code Execution
10724-10853
Critical
10724-10852
Critical
10724-10853
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O
10724-10852
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O
10724-10853
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10724-10852
Yes
Security Update
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10724-10853
Yes
Security Update
SkyLined
1.0
2017-04-11T07:00:00Z
<p>Information published.</p>
Scripting Engine Memory Corruption Vulnerability
<p>A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Internet Explorer and then convince a user to view the website. An attacker could also embed an ActiveX control marked "safe for initialization" in an application or Microsoft Office document that hosts the IE rendering engine. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p>
<p>The security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.</p>
Microsoft Scripting Engine
CVE-2017-0201
10555-10378
10336-9316
10336-4393
10336-9312
10336-9318
Remote Code Execution
10555-10378
Remote Code Execution
10336-9316
Remote Code Execution
10336-4393
Remote Code Execution
10336-9312
Remote Code Execution
10336-9318
Critical
10555-10378
Critical
10336-9316
Critical
10336-4393
Critical
10336-9312
Critical
10336-9318
Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A;Older Software Release:Exploitation More Likely
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10555-10378
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10336-9316
7.5
6.7
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10336-4393
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10336-9312
6.4
5.8
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10336-9318
4015551
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015551
4012217
10555-10378
Yes
Monthly Rollup
4014661
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014661
4012204
10555-10378
Yes
IE Cumulative
4014661
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014661
4012204
10336-9316
Yes
IE Cumulative
4014661
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014661
4012204
10336-4393
Yes
IE Cumulative
4014661
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014661
4012204
10336-9312
Yes
IE Cumulative
4014661
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014661
4012204
10336-9318
Yes
IE Cumulative
Hui Gao of <a href="https://www.paloaltonetworks.com/">Palo Alto Networks</a>
1.0
2017-04-11T07:00:00Z
<p>Information published.</p>
Internet Explorer Memory Corruption Vulnerability
<p>A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, the attacker could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>An attacker could host a specially crafted website designed to exploit the vulnerability through Internet Explorer and then convince a user to view the website. The attacker could also take advantage of compromised websites, or websites that accept or host user-provided content or advertisements, by adding specially crafted content that could exploit the vulnerability. However, in all cases an attacker would have no way to force a user to view the attacker-controlled content. Instead, an attacker would have to convince a user to take action, typically by an enticement in an email or instant message, or by getting the user to open an attachment sent through email.</p>
<p>The security update addresses the vulnerability by modifying how Internet Explorer handles objects in memory.</p>
Internet Explorer
CVE-2017-0202
10486-10816
10486-10484
10486-10047
10486-10048
10486-10051
10486-10729
10486-10735
10486-10789
10486-10788
10486-10852
10486-10853
10486-10481
10486-10482
10486-10483
10486-10951
10486-10952
Remote Code Execution
10486-10816
Remote Code Execution
10486-10484
Remote Code Execution
10486-10047
Remote Code Execution
10486-10048
Remote Code Execution
10486-10051
Remote Code Execution
10486-10729
Remote Code Execution
10486-10735
Remote Code Execution
10486-10789
Remote Code Execution
10486-10788
Remote Code Execution
10486-10852
Remote Code Execution
10486-10853
Remote Code Execution
10486-10481
Remote Code Execution
10486-10482
Remote Code Execution
10486-10483
Remote Code Execution
10486-10951
Remote Code Execution
10486-10952
Critical
10486-10816
Critical
10486-10484
Critical
10486-10047
Critical
10486-10048
Critical
10486-10051
Critical
10486-10729
Critical
10486-10735
Critical
10486-10789
Critical
10486-10788
Critical
10486-10852
Critical
10486-10853
Critical
10486-10481
Critical
10486-10482
Critical
10486-10483
Critical
10486-10951
Critical
10486-10952
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely
6.0
5.4
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C
10486-10816
7.1
6.4
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C
10486-10484
7.1
6.4
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C
10486-10729
7.1
6.4
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C
10486-10735
7.1
6.4
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C
10486-10789
7.1
6.4
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C
10486-10788
7.1
6.4
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C
10486-10852
7.1
6.4
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C
10486-10853
7.1
6.4
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C
10486-10481
7.1
6.4
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C
10486-10482
6.0
5.4
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C
10486-10483
7.1
6.4
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C
10486-10951
7.1
6.4
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C
10486-10952
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10486-10816
Yes
Security Update
4015550
4012216
10486-10484
Yes
Monthly Rollup
4015549
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015549
4012215
10486-10047
Yes
Monthly Rollup
4014661
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014661
4012204
10486-10047
Yes
IE Cumulative
4015549
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015549
4012215
10486-10048
Yes
Monthly Rollup
4014661
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014661
4012204
10486-10048
Yes
IE Cumulative
4015549
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015549
4012215
10486-10051
Yes
Monthly Rollup
4014661
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014661
4012204
10486-10051
Yes
IE Cumulative
4015221
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015221
4012606
10486-10729
Yes
Security Update
4015221
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015221
4012606
10486-10735
Yes
Security Update
4015219
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015219
4013198
10486-10789
Yes
Security Update
4015219
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015219
4013198
10486-10788
Yes
Security Update
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10486-10852
Yes
Security Update
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10486-10853
Yes
Security Update
4015550
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015550
4012216
10486-10481
Yes
Monthly Rollup
4014661
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014661
4012204
10486-10481
Yes
IE Cumulative
4015550
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015550
4012216
10486-10482
Yes
Monthly Rollup
4014661
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014661
4012204
10486-10482
Yes
IE Cumulative
4015550
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015550
4012216
10486-10483
Yes
Monthly Rollup
4014661
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014661
4012204
10486-10483
Yes
IE Cumulative
4015583
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015583
10486-10951
Yes
Security Update
4015583
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015583
10486-10952
Yes
Security Update
Ivan Fratric of <a href="https://www.google.com">Google Project Zero</a>
1.0
2017-04-11T07:00:00Z
<p>Information published.</p>
<p>A vulnerability exists in Microsoft Edge when the Edge Content Security Policy (CSP) fails to properly validate certain specially crafted documents. An attacker could use this vulnerability to trick a user into loading a web page with malicious content.</p>
<p>To exploit the vulnerability, an attacker must either trick a user into loading a web page or visit a website. The web page could also be injected into a compromised website or ad network.</p>
<p>The security update addresses the vulnerability by correcting how the CSP validates documents.</p>
Microsoft Edge
CVE-2017-0203
10724-10951
10724-10952
10724-10729
10724-10735
10724-10789
10724-10788
10724-10852
10724-10853
Security Feature Bypass
10724-10951
Security Feature Bypass
10724-10952
Security Feature Bypass
10724-10729
Security Feature Bypass
10724-10735
Security Feature Bypass
10724-10789
Security Feature Bypass
10724-10788
Security Feature Bypass
10724-10852
Security Feature Bypass
10724-10853
Moderate
10724-10951
Moderate
10724-10952
Moderate
10724-10729
Moderate
10724-10735
Moderate
10724-10789
Moderate
10724-10788
Moderate
10724-10852
Moderate
10724-10853
Publicly Disclosed:Yes;Exploited:No;Latest Software Release:Exploitation Unlikely;Older Software Release:N/A
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10724-10951
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10724-10952
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10724-10729
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10724-10735
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10724-10789
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10724-10788
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10724-10852
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
10724-10853
4015583
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015583
10724-10951
Yes
Security Update
4015583
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015583
10724-10952
Yes
Security Update
4015221
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015221
4012606
10724-10729
Yes
Security Update
4015221
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015221
4012606
10724-10735
Yes
Security Update
4015219
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015219
4013198
10724-10789
Yes
Security Update
4015219
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015219
4013198
10724-10788
Yes
Security Update
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10724-10852
Yes
Security Update
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10724-10853
Yes
Security Update
1.0
2017-04-11T07:00:00Z
<p>Information published.</p>
Microsoft Outlook Security Feature Bypass Vulnerability
<p>A security feature bypass vulnerability exists in Microsoft Outlook software when it improperly handles the parsing of file formats. The security feature bypass by itself does not allow arbitrary code execution. However, to successfully exploit the vulnerability, an attacker would have to use it in conjunction with another vulnerability, such as a remote code execution vulnerability, to take advantage of the security feature bypass vulnerability and run arbitrary code.</p>
<p>To exploit the vulnerability, an attacker would have to convince a user to open a specially crafted file with an affected version of Microsoft Outlook software.</p>
<p>The security update addresses the vulnerability by correcting how Microsoft Outlook handles the parsing of file formats.</p>
Microsoft Office
CVE-2017-0204
10810
10811
10156
10527
10528
10765
10766
Security Feature Bypass
10810
Security Feature Bypass
10811
Security Feature Bypass
10156
Security Feature Bypass
10527
Security Feature Bypass
10528
Security Feature Bypass
10765
Security Feature Bypass
10766
Important
10810
Important
10811
Important
10156
Important
10527
Important
10528
Important
10765
Important
10766
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely
3172519
https://www.microsoft.com/downloads/details.aspx?familyid=52f24b91-8357-4238-ac7b-76c6fc73c26a
3118280
10810
Maybe
Security Update
3172519
https://www.microsoft.com/downloads/details.aspx?familyid=24f7b73f-9427-4ced-9e32-708713ea0679
3118280
10811
Maybe
Security Update
3127890
https://www.microsoft.com/downloads/details.aspx?familyid=e52ec75c-ae3d-4a29-ae70-be70ebca39c4
3118303
10156
Maybe
Security Update
3118388
https://www.microsoft.com/downloads/details.aspx?familyid=45ce94f9-a892-400e-b1fa-090606278303
3118313
10527
Maybe
Security Update
3118388
https://www.microsoft.com/downloads/details.aspx?familyid=efc35d51-f5dc-425e-89c8-06c5b41e6d0a
3118313
10528
Maybe
Security Update
3178664
https://www.microsoft.com/downloads/details.aspx?familyid=84ff6343-8b2c-49c6-8b64-c6c557b01135
3118293
10765
Maybe
Security Update
3178664
https://www.microsoft.com/downloads/details.aspx?familyid=7eea6108-ca57-4d61-8d66-bffcfa9f3531
3118293
10766
Maybe
Security Update
Ryan Hanson (<a href="https://twitter.com/ryhanson">@Ryhanson</a>) of <a href="https://www.optiv.com/">Optiv</a>
1.0
2017-04-11T07:00:00Z
<p>Information published.</p>
Microsoft Edge Memory Corruption Vulnerability
<p>A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory. The vulnerability could corrupt memory in such a way that enables an attacker to execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>An attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft Edge, and then convince a user to view the website. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements by adding specially crafted content that could exploit the vulnerability. In all cases, however, an attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically by way of enticement in an email or Instant Messenger message, or by getting them to open an attachment sent through email.</p>
<p>The security update addresses the vulnerability by modifying how Microsoft Edge handles objects in memory.</p>
Microsoft Edge
CVE-2017-0205
10724-10952
10724-10789
10724-10788
10724-10852
10724-10853
10724-10951
Remote Code Execution
10724-10952
Remote Code Execution
10724-10789
Remote Code Execution
10724-10788
Remote Code Execution
10724-10852
Remote Code Execution
10724-10853
Remote Code Execution
10724-10951
Critical
10724-10952
Critical
10724-10789
Critical
10724-10788
Critical
10724-10852
Critical
10724-10853
Critical
10724-10951
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O
10724-10952
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O
10724-10789
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O
10724-10788
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O
10724-10852
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O
10724-10853
4.2
3.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O
10724-10951
4015583
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015583
10724-10952
Yes
Security Update
4015219
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015219
4013198
10724-10789
Yes
Security Update
4015219
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015219
4013198
10724-10788
Yes
Security Update
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10724-10852
Yes
Security Update
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10724-10853
Yes
Security Update
4015583
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015583
10724-10951
Yes
Security Update
SkyLined
1.0
2017-04-11T07:00:00Z
<p>Information published.</p>
April 2017 Adobe Flash Security Update
<p>This security update addresses the following vulnerabilities, which are described in Adobe Security Bulletin <a href="http://helpx.adobe.com/security/products/flash-player/apsb17-10.html">APSB17-10</a>:
CVE-2017-3058, CVE-2017-3059, CVE-2017-3060, CVE-2017-3061, CVE-2017-3062, CVE-2017-3063, CVE-2017-3064</p>
<p><strong>How could an attacker exploit these vulnerabilities?</strong>
In a web-based attack scenario where the user is using Internet Explorer for the desktop, an attacker could host a specially crafted website that is designed to exploit any of these vulnerabilities through Internet Explorer and then convince a user to view the website. An attacker could also embed an ActiveX control marked "safe for initialization" in an application or Microsoft Office document that hosts the IE rendering engine. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit any of these vulnerabilities. In all cases, however, an attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically by clicking a link in an email message or in an Instant Messenger message that takes users to the attacker's website, or by opening an attachment sent through email.</p>
<p>In a web-based attack scenario where the user is using Internet Explorer in the Windows 8-style UI, an attacker would first need to compromise a website already listed in the Compatibility View (CV) list. An attacker could then host a website that contains specially crafted Flash content designed to exploit any of these vulnerabilities through Internet Explorer and then convince a user to view the website. An attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically by clicking a link in an email message or in an Instant Messenger message that takes users to the attacker's website, or by opening an attachment sent through email. For more information about Internet Explorer and the CV List, please see the MSDN Article, Developer Guidance for websites with content for Adobe Flash Player in Windows 8.</p>
Adobe Flash Player
ADV170004
10384-10481
10384-10482
10384-10484
10384-10483
10384-10735
10384-10729
10384-10789
10384-10788
10384-10852
10384-10853
10384-10816
10384-10378
10384-10951
10384-10952
Remote Code Execution
10384-10481
Remote Code Execution
10384-10482
Remote Code Execution
10384-10484
Remote Code Execution
10384-10483
Remote Code Execution
10384-10735
Remote Code Execution
10384-10729
Remote Code Execution
10384-10789
Remote Code Execution
10384-10788
Remote Code Execution
10384-10852
Remote Code Execution
10384-10853
Remote Code Execution
10384-10816
Remote Code Execution
10384-10378
Remote Code Execution
10384-10951
Remote Code Execution
10384-10952
Critical
10384-10481
Critical
10384-10482
Critical
10384-10484
Critical
10384-10483
Critical
10384-10735
Critical
10384-10729
Critical
10384-10789
Critical
10384-10788
Critical
10384-10852
Critical
10384-10853
Critical
10384-10816
Critical
10384-10378
Critical
10384-10951
Critical
10384-10952
Publicly Disclosed:No;Exploited:No
4018483
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4018483
4014329
10384-10481
Yes
Security Update
4018483
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4018483
4014329
10384-10482
Yes
Security Update
4018483
4014329
10384-10484
Yes
Security Update
4018483
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4018483
4014329
10384-10483
Yes
Security Update
4018483
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4018483
4014329
10384-10735
Yes
Security Update
4018483
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4018483
4014329
10384-10729
Yes
Security Update
4018483
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4018483
4014329
10384-10789
Yes
Security Update
4018483
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4018483
4014329
10384-10788
Yes
Security Update
4018483
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4018483
4014329
10384-10852
Yes
Security Update
4018483
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4018483
4014329
10384-10853
Yes
Security Update
4018483
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4018483
4014329
10384-10816
Yes
Security Update
4018483
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4018483
4014329
10384-10378
Yes
Security Update
4018483
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4018483
4014329
10384-10951
Yes
Security Update
4018483
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4018483
4014329
10384-10952
Yes
Security Update
<p>The following <a href="https://technet.microsoft.com/library/security/dn848375.aspx#Mitigation">mitigating factors</a> may be helpful in your situation:</p>
<ul>
<li>In a web-based attack scenario where the user is using Internet Explorer for the desktop, an attacker could host a website that contains a webpage that is used to exploit any of these vulnerabilities. In addition, compromised websites and websites that accept or host user-provided content or advertisements could contain specially crafted content that could exploit any of these vulnerabilities. In all cases, however, an attacker would have no way to force users to visit these websites. Instead, an attacker would have to convince users to visit the website, typically by getting them to click a link in an email message or instant message that takes users to the attacker's website.</li>
<li>Internet Explorer in the Windows 8-style UI will only play Flash content from sites listed on the Compatibility View (CV) list. This restriction requires an attacker to first compromise a website already listed on the CV list. An attacker could then host specially crafted Flash content designed to exploit any of these vulnerabilities through Internet Explorer and then convince a user to view the website. An attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically by clicking a link in an email message or in an instant message that takes users to the attacker's website, or by opening an attachment sent through email.</li>
<li>By default, all supported versions of Microsoft Outlook and Windows Live Mail open HTML email messages in the Restricted sites zone. The Restricted sites zone, which disables scripts and ActiveX controls, helps reduce the risk of an attacker being able to use any of these vulnerabilities to execute malicious code. If a user clicks a link in an email message, the user could still be vulnerable to exploitation of any of these vulnerabilities through the web-based attack scenario.</li>
<li>By default, Internet Explorer on Windows Server 2012 and Windows Server 2012 R2 runs in a restricted mode that is known as <a href="https://technet.microsoft.com/library/dd883248.aspx">Enhanced Security Configuration</a>. This mode can help reduce the likelihood of the exploitation of these Adobe Flash Player vulnerabilities in Internet Explorer.</li>
</ul>
<p>Workaround refers to a setting or configuration change that would help block known attack vectors before you apply the update.</p>
<p><strong>Prevent Adobe Flash Player from running</strong>
You can disable attempts to instantiate Adobe Flash Player in Internet Explorer and other applications that honor the kill bit feature, such as Office 2007 and Office 2010, by setting the kill bit for the control in the registry.</p>
<p><strong>Warning</strong> If you use Registry Editor incorrectly, you may cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that you can solve problems that result from using Registry Editor incorrectly. Use Registry Editor at your own risk.
To set the kill bit for the control in the registry, perform the following steps:</p>
<ol>
<li><p>Paste the following into a text file and save it with the .reg file extension.</p>
<pre><code> Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{D27CDB6E-AE6D-11CF-96B8-444553540000}]
"Compatibility Flags"=dword:00000400
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{D27CDB6E-AE6D-11CF-96B8-444553540000}]
"Compatibility Flags"=dword:00000400
</code></pre>
</li>
<li><p>Double-click the .reg file to apply it to an individual system.</p>
<p>You can also apply this workaround across domains by using Group Policy. For more information about Group Policy, see the TechNet article, Group Policy collection.</p>
</li>
</ol>
<p><strong>Note</strong> You must restart Internet Explorer for your changes to take effect.
<strong>Impact of workaround</strong>. There is no impact as long as the object is not intended to be used in Internet Explorer.
<strong>How to undo the workaround.</strong> Delete the registry keys that were added in implementing this workaround.
<strong>Prevent Adobe Flash Player from running in Internet Explorer through Group Policy</strong>
<strong>Note</strong> The Group Policy MMC snap-in can be used to set policy for a machine, for an organizational unit, or for an entire domain. For more information about Group Policy, visit the following Microsoft Web sites:</p>
<p><a href="https://technet.microsoft.com/library/hh831791">Group Policy Overview</a>
<a href="https://technet.microsoft.com/library/cc737816%28v=ws.10%29.aspx">What is Group Policy Object Editor?</a>
<a href="https://technet.microsoft.com/library/cc784165%28v=ws.10%29.aspx">Core Group Policy tools and settings</a></p>
<p>To disable Adobe Flash Player in Internet Explorer through Group Policy, perform the following steps:
<strong>Note</strong> This workaround does not prevent Flash from being invoked from other applications, such as Microsoft Office 2007 or Microsoft Office 2010.</p>
<ol>
<li>Open the Group Policy Management Console and configure the console to work with the appropriate Group Policy object, such as local machine, OU, or domain GPO.</li>
<li>Navigate to the following node:
<strong>Administrative Templates -> Windows Components -> Internet Explorer -> Security Features -> Add-on Management</strong></li>
<li>Double-click <strong>Turn off Adobe Flash in Internet Explorer and prevent applications from using Internet Explorer technology to instantiate Flash objects</strong>.</li>
<li>Change the setting to Enabled.</li>
<li>Click <strong>Apply</strong> and then click <strong>OK</strong> to return to the Group Policy Management Console.</li>
<li>Refresh Group Policy on all systems or wait for the next scheduled Group Policy refresh interval for the settings to take effect.
<strong>Prevent Adobe Flash Player from running in Office 2010 on affected systems</strong>
<strong>Note</strong> This workaround does not prevent Adobe Flash Player from running in Internet Explorer.
<strong>Warning</strong> If you use Registry Editor incorrectly, you may cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that you can solve problems that result from using Registry Editor incorrectly. Use Registry Editor at your own risk.
For detailed steps that you can use to prevent a control from running in Internet Explorer, see Microsoft Knowledge Base Article 240797. Follow the steps in the article to create a Compatibility Flags value in the registry to prevent a COM object from being instantiated in Internet Explorer.</li>
</ol>
<p>To disable Adobe Flash Player in Office 2010 only, set the kill bit for the ActiveX control for Adobe Flash Player in the registry using the following steps:</p>
<ol>
<li>Create a text file named Disable_Flash.reg with the following contents:</li>
</ol>
<pre><code> [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\Common\COM\Compatibility\{D27CDB6E-AE6D-11CF-96B8-444553540000}]
"Compatibility Flags"=dword:00000400
</code></pre>
<ol start="2">
<li>Double-click the .reg file to apply it to an individual system.</li>
<li><strong>Note</strong> You must restart Internet Explorer for your changes to take effect.
You can also apply this workaround across domains by using Group Policy. For more information about Group Policy, see the TechNet article, <a href="http://go.microsoft.com/fwlink/?LinkID=215719">Group Policy collection</a>.
<strong>Prevent ActiveX controls from running in Office 2007 and Office 2010</strong></li>
</ol>
<p>To disable all ActiveX controls in Microsoft Office 2007 and Microsoft Office 2010, including Adobe Flash Player in Internet Explorer, perform the following steps:</p>
<ol>
<li>Click File, click Options, click Trust Center, and then click Trust Center Settings.</li>
<li>Click ActiveX Settings in the left-hand pane, and then select Disable all controls without notifications.</li>
<li>Click OK to save your settings.
<strong>Impact of workaround</strong>. Office documents that use embedded ActiveX controls may not display as intended.
<strong>How to undo the workaround</strong>.</li>
</ol>
<p>To re-enable ActiveX controls in Microsoft Office 2007 and Microsoft Office 2010, perform the following steps:</p>
<ol>
<li>Click File, click Options, click Trust Center, and then click Trust Center Settings.</li>
<li>Click ActiveX Settings in the left-hand pane, and then deselect Disable all controls without notifications.</li>
<li>Click OK to save your settings.
<strong>Set Internet and Local intranet security zone settings to "High" to block ActiveX Controls and Active Scripting in these zones</strong>
You can help protect against exploitation of these vulnerabilities by changing your settings for the Internet security zone to block ActiveX controls and Active Scripting. You can do this by setting your browser security to High.</li>
</ol>
<p>To raise the browsing security level in Internet Explorer, perform the following steps:</p>
<ol>
<li>On the Internet Explorer <strong>Tools</strong> menu, click** Internet Option**s.</li>
<li>In the <strong>Internet Options</strong> dialog box, click the <strong>Security</strong> tab, and then click <strong>Internet</strong>.</li>
<li>Under <strong>Security level for this zone</strong>, move the slider to <strong>High</strong>. This sets the security level for all websites you visit to High.</li>
<li>Click <strong>Local intranet</strong>.</li>
<li>Under <strong>Security level for this zone</strong>, move the slider to <strong>High</strong>. This sets the security level for all websites you visit to High.</li>
<li>Click <strong>OK</strong> to accept the changes and return to Internet Explorer.
<strong>Note</strong> If no slider is visible, click <strong>Default Level</strong>, and then move the slider to <strong>High</strong>.
<strong>Note</strong> Setting the level to High may cause some websites to work incorrectly. If you have difficulty using a website after you change this setting, and you are sure the site is safe to use, you can add that site to your list of trusted sites. This will allow the site to work correctly even with the security setting set to High.
<strong>Impact of workaround</strong>. There are side effects to blocking ActiveX Controls and Active Scripting. Many websites on the Internet or an intranet use ActiveX or Active Scripting to provide additional functionality. For example, an online e-commerce site or banking site may use ActiveX Controls to provide menus, ordering forms, or even account statements. Blocking ActiveX Controls or Active Scripting is a global setting that affects all Internet and intranet sites. If you do not want to block ActiveX Controls or Active Scripting for such sites, use the steps outlined in "Add sites that you trust to the Internet Explorer Trusted sites zone".
<strong>Configure Internet Explorer to prompt before running Active Scripting or to disable Active Scripting in the Internet and Local intranet security zone</strong></li>
</ol>
<p>You can help protect against exploitation of these vulnerabilities by changing your settings to prompt before running Active Scripting or to disable Active Scripting in the Internet and Local intranet security zone. To do this, perform the following steps:</p>
<ol>
<li>In Internet Explorer, click <strong>Internet Options</strong> on the <strong>Tools</strong> menu.</li>
<li>Click the <strong>Security</strong> tab.</li>
<li>Click <strong>Internet</strong>, and then click <strong>Custom Level</strong>.</li>
<li>Under <strong>Settings</strong>, in the <strong>Scripting</strong> section, under <strong>Active Scripting</strong>, click <strong>Prompt</strong> or <strong>Disable</strong>, and then click <strong>OK</strong>.</li>
<li>Click <strong>Local intranet</strong>, and then click <strong>Custom Level</strong>.</li>
<li>Under <strong>Settings</strong>, in the <strong>Scripting</strong> section, under <strong>Active Scripting</strong>, click <strong>Prompt</strong> or <strong>Disable</strong>, and then click <strong>OK</strong>.</li>
<li>Click <strong>OK</strong> to return to Internet Explorer, and then click <strong>OK</strong> again.
<strong>Note</strong> Disabling Active Scripting in the Internet and Local intranet security zones may cause some websites to work incorrectly. If you have difficulty using a website after you change this setting, and you are sure the site is safe to use, you can add that site to your list of trusted sites. This will allow the site to work correctly.
<strong>Impact of workaround</strong>. There are side effects to prompting before running Active Scripting. Many websites that are on the Internet or on an intranet use Active Scripting to provide additional functionality. For example, an online e-commerce site or banking site may use Active Scripting to provide menus, ordering forms, or even account statements. Prompting before running Active Scripting is a global setting that affects all Internet and intranet sites. You will be prompted frequently when you enable this workaround. For each prompt, if you feel you trust the site that you are visiting, click <strong>Yes</strong> to run Active Scripting. If you do not want to be prompted for all these sites, use the steps outlined in "Add sites that you trust to the Internet Explorer Trusted sites zone".
<strong>Add sites that you trust to the Internet Explorer Trusted sites zone</strong>
After you set Internet Explorer to require a prompt before it runs ActiveX controls and Active Scripting in the Internet zone and in the Local intranet zone, you can add sites that you trust to the Internet Explorer Trusted sites zone. This will allow you to continue to use trusted websites exactly as you do today, while helping to protect you from this attack on untrusted sites. We recommend that you add only sites that you trust to the Trusted sites zone.</li>
</ol>
<p>To do this, perform the following steps:</p>
<ol>
<li>In Internet Explorer, click <strong>Tools</strong>, click <strong>Internet Options</strong>, and then click the <strong>Security</strong> tab.</li>
<li>In the <strong>Select a web content zone to specify its current security settings</strong> box, click <strong>Trusted Sites</strong>, and then click <strong>Sites</strong>.</li>
<li>If you want to add sites that do not require an encrypted channel, click to clear the <strong>Require server verification (https:) for all sites in this zone</strong> check box.</li>
<li>In the <strong>Add this website to the zone</strong> box, type the URL of a site that you trust, and then click <strong>Add</strong>.</li>
<li>Repeat these steps for each site that you want to add to the zone.</li>
<li>Click <strong>OK</strong> two times to accept the changes and return to Internet Explorer.
<strong>Note</strong> Add any sites that you trust not to take malicious action on your system. Two sites in particular that you may want to add are *<strong>.windowsupdate.microsoft.com</strong> and *<strong>.update.microsoft.com</strong>. These are the sites that will host the update, and they require an ActiveX control to install the update.</li>
</ol>
1.0
2017-04-11T07:00:00Z
<p>Information published.</p>
1.1
2017-04-12T07:00:00Z
<p>Changed identifier to reduce confusion with CVE IDs. This is an informational change only.</p>
Scripting Engine Information Disclosure Vulnerability
<p>An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Microsoft Edge. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.</p>
<p>In a web-based attack scenario, an attacker could host a website in an attempt to exploit the vulnerability. In addition, compromised websites and websites that accept or host user-provided content could contain specially crafted content that could exploit the vulnerability. However, in all cases an attacker would have no way to force a user to view the attacker-controlled content. Instead, an attacker would have to convince a user to take action. For example, an attacker could trick a user into clicking a link that takes the user to the attacker's site.</p>
<p>The security update addresses the vulnerability by changing how the scripting engine handles objects in memory.</p>
Microsoft Scripting Engine
CVE-2017-0208
10724-10729
10724-10735
10724-10789
10724-10788
10724-10852
10724-10853
10724-10952
10724-10951
Information Disclosure
10724-10729
Information Disclosure
10724-10735
Information Disclosure
10724-10789
Information Disclosure
10724-10788
Information Disclosure
10724-10852
Information Disclosure
10724-10853
Information Disclosure
10724-10952
Information Disclosure
10724-10951
Important
10724-10729
Important
10724-10735
Important
10724-10789
Important
10724-10788
Important
10724-10852
Important
10724-10853
Important
10724-10952
Important
10724-10951
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O
10724-10729
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O
10724-10735
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O
10724-10789
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O
10724-10788
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O
10724-10852
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O
10724-10853
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O
10724-10952
4.3
3.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O
10724-10951
4015221
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015221
4012606
10724-10729
Yes
Security Update
4015221
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015221
4012606
10724-10735
Yes
Security Update
4015219
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015219
4013198
10724-10789
Yes
Security Update
4015219
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015219
4013198
10724-10788
Yes
Security Update
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10724-10852
Yes
Security Update
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10724-10853
Yes
Security Update
4015583
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015583
10724-10952
Yes
Security Update
4015583
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015583
10724-10951
Yes
Security Update
bee13oy of CloverSec Labs
1.0
2017-04-11T07:00:00Z
<p>Information published.</p>
Windows OLE Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists in Microsoft Windows OLE when it fails an integrity-level check.</p>
<p>An attacker who successfully exploited the vulnerability could allow an application with limited privileges on an affected system to execute code at a medium integrity level. The vulnerability by itself does not allow arbitrary code to be run, but can be used in conjunction with one or more vulnerabilities (e.g. another elevation of privilege or a remote code execution vulnerability) that could take advantage of the elevated privileges when running.</p>
<p>The update addresses the vulnerability by correcting how Microsoft OLE checks the integrity level of certain processes.</p>
Microsoft Windows
CVE-2017-0211
10729
10735
10789
10788
10852
10853
10481
10482
10484
10483
10543
10951
10952
10816
10378
10379
10855
Elevation of Privilege
10729
Elevation of Privilege
10735
Elevation of Privilege
10789
Elevation of Privilege
10788
Elevation of Privilege
10852
Elevation of Privilege
10853
Elevation of Privilege
10481
Elevation of Privilege
10482
Elevation of Privilege
10484
Elevation of Privilege
10483
Elevation of Privilege
10543
Elevation of Privilege
10951
Elevation of Privilege
10952
Elevation of Privilege
10816
Elevation of Privilege
10378
Elevation of Privilege
10379
Elevation of Privilege
10855
Important
10729
Important
10735
Important
10789
Important
10788
Important
10852
Important
10853
Important
10481
Important
10482
Important
10484
Important
10483
Important
10543
Important
10951
Important
10952
Important
10816
Important
10378
Important
10379
Important
10855
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A
5.0
4.5
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:P/RL:O/RC:C
10729
5.0
4.5
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:P/RL:O/RC:C
10735
5.0
4.5
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:P/RL:O/RC:C
10789
5.0
4.5
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:P/RL:O/RC:C
10788
5.0
4.5
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:P/RL:O/RC:C
10852
5.0
4.5
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:P/RL:O/RC:C
10853
5.0
4.5
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:P/RL:O/RC:C
10481
5.0
4.5
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:P/RL:O/RC:C
10482
5.0
4.5
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:P/RL:O/RC:C
10484
5.0
4.5
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:P/RL:O/RC:C
10483
5.0
4.5
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:P/RL:O/RC:C
10543
5.0
4.5
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:P/RL:O/RC:C
10951
5.0
4.5
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:P/RL:O/RC:C
10952
5.0
4.5
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:P/RL:O/RC:C
10816
4015221
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015221
4012606
10729
Yes
Security Update
4015221
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015221
4012606
10735
Yes
Security Update
4015219
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015219
4013198
10789
Yes
Security Update
4015219
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015219
4013198
10788
Yes
Security Update
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10852
Yes
Security Update
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10853
Yes
Security Update
4015550
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015550
4012216
10481
Yes
Monthly Rollup
4015547
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015547
10481
Yes
Security Only
4015550
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015550
4012216
10482
Yes
Monthly Rollup
4015547
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015547
10482
Yes
Security Only
4015550
4012216
10484
Yes
Monthly Rollup
4015550
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015550
4012216
10483
Yes
Monthly Rollup
4015547
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015547
10483
Yes
Security Only
4015550
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015550
4012216
10543
Yes
Monthly Rollup
4015547
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015547
10543
Yes
Security Only
4015583
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015583
10951
Yes
Security Update
4015583
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015583
10952
Yes
Security Update
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10816
Yes
Security Update
4015551
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015551
4012217
10378
Yes
Monthly Rollup
4015548
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015548
10378
Yes
Security Only
4015551
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015551
4012217
10379
Yes
Monthly Rollup
4015548
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015548
10379
Yes
Security Only
4015217
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015217
4013429
10855
Yes
Security Update
James Forshaw of <a href="http://www.google.com">Google Project Zero</a>
1.0
2017-04-11T07:00:00Z
<p>Information published.</p>