March 2017 Security Updates Security Update secure@microsoft.com The Microsoft Security Response Center (MSRC) identifies, monitors, resolves, and responds to security incidents and Microsoft software security vulnerabilities. For more information, see http://www.microsoft.com/security/msrc. 2017-Mar 2017-Mar Final 1.0 9 2025-10-01T23:10:59 March 2017 Security Updates 2017-03-14T07:00:00 2025-10-01T23:10:59 <p>The March security release consists of security updates for the following software:</p> <ul> <li>Internet Explorer</li> <li>Microsoft Edge</li> <li>Microsoft Windows</li> <li>Microsoft Office and Microsoft Office Services and Web Apps</li> <li>Lync and Skype for Business</li> <li>Silverlight</li> <li>Adobe Flash Player</li> </ul> <p>Please note the following information regarding the security updates:</p> <ul> <li>Beginning with the October 2016 release, Microsoft is changing the update servicing model for Windows 7, Windows Server 2008 R2, Windows 8.1, Windows Server 2012, and Windows Server 2012 R2. For more information, please see this Microsoft Technet article, <a href="https://blogs.technet.microsoft.com/windowsitpro/2016/08/15/further-simplifying-servicing-model-for-windows-7-and-windows-8-1/">Further simplifying servicing models forWindows 7 and Windows 8.1</a>.</li> <li>Windows 10 updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows 10, in addition to non-security updates. The updates are available via the <a href="http://catalog.update.microsoft.com/v7/site/Home.aspx">Microsoft Update Catalog</a>.</li> <li>Starting in March 2017, a delta package will be available on the Microsoft Update Catalog for Windows 10 version 1607 and newer. This delta package contains just the delta changes between the previous month and the current release.</li> <li>Updates for Windows RT 8.1 and Microsoft Office RT software are only available via <a href="http://go.microsoft.com/fwlink/?LinkId=21130">Windows Update</a>.</li> <li>In addition to security changes for the vulnerabilities, updates include defense-in-depth updates to help improve security-related features.</li> </ul> <p><strong>Note</strong> As a reminder, the <a href="https://portal.msrc.microsoft.com/en-us/security-guidance">Security Updates Guide</a> will be replacing security bulletins. Please see our blog post, <a href="https://blogs.technet.microsoft.com/msrc/2016/11/08/furthering-our-commitment-to-security-updates/">Furthering our commitment to security updates</a>, for more details.</p> <p><strong>Known Issues</strong></p> <ul> <li><a href="http://support.microsoft.com/kb/3178690">3178690</a></li> <li><a href="https://support.microsoft.com/en-us/help/4013429">4013429</a></li> <li><a href="https://support.microsoft.com/en-us/help/4015438/">4015438</a></li> <li><a href="https://support.microsoft.com/en-us/help/4013198/windows-10-update-kb4013198">4013198</a></li> <li><a href="https://support.microsoft.com/en-us/help/4012606/windows-10-update-kb4012606">4012606</a></li> </ul> The information provided in the Microsoft Knowledge Base is provided "as is" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply. Microsoft Office 2010 Service Pack 2 (32-bit editions) Microsoft Office 2010 Service Pack 2 (64-bit editions) Microsoft Office Compatibility Pack Service Pack 3 Microsoft Office Word Viewer Microsoft Word 2007 Service Pack 3 Microsoft Word 2010 Service Pack 2 (32-bit editions) Microsoft Word 2010 Service Pack 2 (64-bit editions) Microsoft Word 2013 RT Service Pack 1 Microsoft Word 2013 Service Pack 1 (32-bit editions) Microsoft Word 2013 Service Pack 1 (64-bit editions) Microsoft Word 2016 (32-bit edition) Microsoft Word 2016 (64-bit edition) Microsoft Excel 2007 Service Pack 3 Microsoft Excel Viewer 2007 Service Pack 3 Excel Services on Microsoft SharePoint Server 2007 Service Pack 3 (32-bit editions) Excel Services on Microsoft SharePoint Server 2007 Service Pack 3 (64-bit edition) Bad Microsoft Excel 2016 (32-bit edition) Microsoft Office Web Apps Server 2013 Service Pack 1 Microsoft Excel 2010 Service Pack 2 (32-bit editions) Microsoft Excel 2010 Service Pack 2 (64-bit editions) Microsoft Excel 2013 RT Service Pack 1 Microsoft Excel 2013 Service Pack 1 (32-bit editions) Microsoft Excel 2013 Service Pack 1 (64-bit editions) Microsoft Excel 2016 (64-bit edition) Microsoft Excel 2016 for Mac Microsoft Excel for Mac 2011 Excel Services on Microsoft SharePoint Server 2013 Service Pack 1 Excel Services on Microsoft Sharepoint Server 2010 Service Pack 2 Bad Microsoft Office 2016 for Mac Microsoft Office Web Apps Server 2010 Service Pack 2 Microsoft Word for Mac 2011 Word Automation Services on Microsoft SharePoint Server 2010 Service Pack 2 Microsoft Lync 2010 (32-bit) Microsoft Lync 2010 (64-bit) Microsoft Lync 2010 Attendee (admin level install) Microsoft Lync 2010 Attendee (user level install) Microsoft Lync 2013 Service Pack 1 (32-bit) Microsoft Lync 2013 Service Pack 1 (64-bit) Microsoft Lync Basic 2013 Service Pack 1 (32-bit) Microsoft Lync Basic 2013 Service Pack 1 (64-bit) Skype for Business 2016 (32-bit) Skype for Business 2016 (64-bit) Skype for Business 2016 Basic (32-bit) Skype for Business 2016 Basic (64-bit) Microsoft Office 2007 Service Pack 3 Microsoft Live Meeting 2007 Console Microsoft Live Meeting 2007 Add-in Microsoft SharePoint Foundation 2013 Service Pack 1 Microsoft Lync for Mac 2011 Windows 10 for 32-bit Systems Windows 10 for x64-based Systems Windows 10 Version 1511 for 32-bit Systems Windows 10 Version 1511 for x64-based Systems Windows 10 Version 1607 for 32-bit Systems Windows 10 Version 1607 for x64-based Systems Windows 8.1 for 32-bit systems Windows 8.1 for x64-based systems Windows RT 8.1 Windows Server 2016 Windows Server 2016 (Server Core installation) Windows Vista Service Pack 2 Windows Vista x64 Edition Service Pack 2 Windows 7 for 32-bit Systems Service Pack 1 Windows 7 for x64-based Systems Service Pack 1 Windows Server 2008 for 32-bit Systems Service Pack 2 Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) Windows Server 2008 for Itanium-Based Systems Service Pack 2 Windows Server 2008 for x64-based Systems Service Pack 2 Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1 Windows Server 2008 R2 for x64-based Systems Service Pack 1 Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) Windows Server 2012 Windows Server 2012 (Server Core installation) Windows Server 2012 R2 Windows Server 2012 R2 (Server Core installation) Internet Explorer 9 on Windows Vista x64 Edition Service Pack 2 Internet Explorer 9 on Windows Vista Service Pack 2 Internet Explorer 9 on Windows Server 2008 for 32-bit Systems Service Pack 2 Internet Explorer 9 on Windows Server 2008 for x64-based Systems Service Pack 2 Internet Explorer 10 on Windows Server 2012 Internet Explorer 11 on Windows 8.1 for 32-bit systems Internet Explorer 11 on Windows 8.1 for x64-based systems Internet Explorer 11 on Windows Server 2012 R2 Internet Explorer 11 on Windows RT 8.1 Internet Explorer 11 on Windows 7 for 32-bit Systems Service Pack 1 Internet Explorer 11 on Windows 7 for x64-based Systems Service Pack 1 Internet Explorer 11 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 Internet Explorer 11 on Windows 10 for 32-bit Systems Internet Explorer 11 on Windows 10 for x64-based Systems Internet Explorer 11 on Windows 10 Version 1511 for 32-bit Systems Internet Explorer 11 on Windows 10 Version 1511 for x64-based Systems Internet Explorer 11 on Windows 10 Version 1607 for 32-bit Systems Internet Explorer 11 on Windows 10 Version 1607 for x64-based Systems Internet Explorer 11 on Windows Server 2016 Microsoft Edge (EdgeHTML-based) on Windows 10 for 32-bit Systems Microsoft Edge (EdgeHTML-based) on Windows 10 for x64-based Systems Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1511 for 32-bit Systems Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1511 for x64-based Systems Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for 32-bit Systems Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for x64-based Systems Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1703 for 32-bit Systems Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1703 for x64-based Systems Microsoft XML Core Services 3.0 on Windows Server 2012 R2 Microsoft XML Core Services 3.0 on Windows Server 2012 R2 (Server Core installation) Microsoft XML Core Services 3.0 on Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) Microsoft XML Core Services 3.0 on Windows 8.1 for 32-bit systems Microsoft XML Core Services 3.0 on Windows 8.1 for x64-based systems Microsoft XML Core Services 3.0 on Windows RT 8.1 Microsoft XML Core Services 3.0 on Windows 10 for 32-bit Systems Microsoft XML Core Services 3.0 on Windows 10 for x64-based Systems Microsoft XML Core Services 3.0 on Windows 10 Version 1511 for 32-bit Systems Microsoft XML Core Services 3.0 on Windows 10 Version 1511 for x64-based Systems Microsoft XML Core Services 3.0 on Windows 10 Version 1607 for 32-bit Systems Microsoft XML Core Services 3.0 on Windows 10 Version 1607 for x64-based Systems Microsoft XML Core Services 3.0 on Windows Server 2016 Microsoft XML Core Services 3.0 on Windows Server 2016 (Server Core installation) Microsoft XML Core Services 3.0 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 Microsoft XML Core Services 3.0 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) Microsoft XML Core Services 3.0 on Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1 Microsoft XML Core Services 3.0 on Windows 7 for 32-bit Systems Service Pack 1 Microsoft XML Core Services 3.0 on Windows 7 for x64-based Systems Service Pack 1 Microsoft XML Core Services 3.0 on Windows Server 2012 Microsoft XML Core Services 3.0 on Windows Server 2012 (Server Core installation) Microsoft XML Core Services 3.0 on Windows Server 2008 for x64-based Systems Service Pack 2 Microsoft XML Core Services 3.0 on Windows Server 2008 for 32-bit Systems Service Pack 2 Microsoft XML Core Services 3.0 on Windows Vista x64 Edition Service Pack 2 Microsoft XML Core Services 3.0 on Windows Server 2008 for Itanium-Based Systems Service Pack 2 Microsoft XML Core Services 3.0 on Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) Microsoft XML Core Services 3.0 on Windows Vista Service Pack 2 Microsoft Silverlight 5 Developer Runtime when installed on Microsoft Windows (32-bit) Microsoft Silverlight 5 Developer Runtime when installed on Microsoft Windows (x64-based) Microsoft Silverlight 5 when installed on Microsoft Windows (32-bit) Microsoft Silverlight 5 when installed on Microsoft Windows (x64-based) Microsoft Exchange Server 2013 Service Pack 1 Microsoft Exchange Server 2013 Cumulative Update 14 Microsoft Exchange Server 2016 Cumulative Update 3 Adobe Flash Player on Windows 8.1 for 32-bit systems Adobe Flash Player on Windows 8.1 for x64-based systems Adobe Flash Player on Windows RT 8.1 Adobe Flash Player on Windows Server 2012 R2 Adobe Flash Player on Windows 10 for x64-based Systems Adobe Flash Player on Windows 10 for 32-bit Systems Adobe Flash Player on Windows 10 Version 1511 for 32-bit Systems Adobe Flash Player on Windows 10 Version 1511 for x64-based Systems Adobe Flash Player on Windows 10 Version 1607 for 32-bit Systems Adobe Flash Player on Windows 10 Version 1607 for x64-based Systems Adobe Flash Player on Windows Server 2016 Adobe Flash Player on Windows Server 2012 Microsoft Word for Mac 2011 Microsoft Excel for Mac 2011 Windows 7 for 32-bit Systems Service Pack 1 Windows 7 for x64-based Systems Service Pack 1 Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1 Windows Server 2008 R2 for x64-based Systems Service Pack 1 Microsoft Lync 2010 (32-bit) Microsoft Silverlight 5 when installed on Microsoft Windows (x64-based) Microsoft Lync for Mac 2011 Microsoft Office 2007 Service Pack 3 Microsoft Excel 2007 Service Pack 3 Microsoft Word 2007 Service Pack 3 Microsoft Lync 2010 Attendee (admin level install) Microsoft Excel Viewer 2007 Service Pack 3 Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) Microsoft Live Meeting 2007 Console Microsoft Lync 2010 Attendee (user level install) Microsoft Lync 2010 (64-bit) Internet Explorer 9 on Windows Vista Service Pack 2 Internet Explorer 9 on Windows Server 2008 for 32-bit Systems Service Pack 2 Internet Explorer 9 on Windows Vista x64 Edition Service Pack 2 Internet Explorer 9 on Windows Server 2008 for x64-based Systems Service Pack 2 Windows Server 2012 Windows Server 2012 (Server Core installation) Adobe Flash Player on Windows Server 2012 Adobe Flash Player on Windows 8.1 for 32-bit systems Adobe Flash Player on Windows 8.1 for x64-based systems Adobe Flash Player on Windows Server 2012 R2 Adobe Flash Player on Windows RT 8.1 Adobe Flash Player on Windows 10 for 32-bit Systems Adobe Flash Player on Windows 10 for x64-based Systems Adobe Flash Player on Windows 10 Version 1511 for x64-based Systems Adobe Flash Player on Windows 10 Version 1511 for 32-bit Systems Adobe Flash Player on Windows Server 2016 Adobe Flash Player on Windows 10 Version 1607 for 32-bit Systems Adobe Flash Player on Windows 10 Version 1607 for x64-based Systems Microsoft Silverlight 5 when installed on Microsoft Windows (32-bit) Microsoft Silverlight 5 Developer Runtime when installed on Microsoft Windows (x64-based) Microsoft Silverlight 5 Developer Runtime when installed on Microsoft Windows (32-bit) Windows 8.1 for 32-bit systems Windows 8.1 for x64-based systems Windows Server 2012 R2 Windows RT 8.1 Internet Explorer 11 on Windows 7 for 32-bit Systems Service Pack 1 Internet Explorer 11 on Windows 7 for x64-based Systems Service Pack 1 Internet Explorer 11 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 Internet Explorer 11 on Windows 8.1 for 32-bit systems Internet Explorer 11 on Windows 8.1 for x64-based systems Internet Explorer 11 on Windows Server 2012 R2 Internet Explorer 11 on Windows RT 8.1 Internet Explorer 11 on Windows 10 for 32-bit Systems Internet Explorer 11 on Windows 10 for x64-based Systems Internet Explorer 11 on Windows 10 Version 1511 for x64-based Systems Internet Explorer 11 on Windows 10 Version 1511 for 32-bit Systems Internet Explorer 11 on Windows Server 2016 Internet Explorer 11 on Windows 10 Version 1607 for 32-bit Systems Internet Explorer 11 on Windows 10 Version 1607 for x64-based Systems Microsoft Excel 2010 Service Pack 2 (32-bit editions) Microsoft Excel 2010 Service Pack 2 (64-bit editions) Microsoft Word 2010 Service Pack 2 (32-bit editions) Microsoft Word 2010 Service Pack 2 (64-bit editions) Microsoft Office 2010 Service Pack 2 (32-bit editions) Microsoft Office 2010 Service Pack 2 (64-bit editions) Windows Server 2012 R2 (Server Core installation) Internet Explorer 10 on Windows Server 2012 Microsoft Word 2013 Service Pack 1 (32-bit editions) Microsoft Word 2013 Service Pack 1 (64-bit editions) Microsoft Word 2013 RT Service Pack 1 Microsoft Office Web Apps Server 2013 Service Pack 1 Microsoft SharePoint Foundation 2013 Service Pack 1 Microsoft Lync 2013 Service Pack 1 (32-bit) Microsoft Lync Basic 2013 Service Pack 1 (32-bit) Microsoft Lync 2013 Service Pack 1 (64-bit) Microsoft Lync Basic 2013 Service Pack 1 (64-bit) Microsoft Office Web Apps Server 2010 Service Pack 2 Microsoft Exchange Server 2013 Service Pack 1 Microsoft Excel 2013 Service Pack 1 (32-bit editions) Microsoft Excel 2013 Service Pack 1 (64-bit editions) Microsoft Excel 2013 RT Service Pack 1 Microsoft Excel 2016 for Mac Microsoft Edge (EdgeHTML-based) on Windows 10 for 32-bit Systems Microsoft Edge (EdgeHTML-based) on Windows 10 for x64-based Systems Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1511 for x64-based Systems Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1511 for 32-bit Systems Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for 32-bit Systems Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for x64-based Systems Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1703 for 32-bit Systems Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1703 for x64-based Systems Windows 10 for 32-bit Systems Microsoft Office 2016 for Mac Windows 10 for x64-based Systems Microsoft Excel 2016 (32-bit edition) Microsoft Excel 2016 (64-bit edition) Microsoft Word 2016 (32-bit edition) Microsoft Word 2016 (64-bit edition) Skype for Business 2016 (32-bit) Skype for Business 2016 (64-bit) Skype for Business 2016 Basic (32-bit) Skype for Business 2016 Basic (64-bit) Windows 10 Version 1511 for x64-based Systems Windows 10 Version 1511 for 32-bit Systems Windows Server 2016 Windows 10 Version 1607 for 32-bit Systems Windows 10 Version 1607 for x64-based Systems Windows Server 2016 (Server Core installation) Microsoft Exchange Server 2013 Cumulative Update 14 Microsoft Exchange Server 2016 Cumulative Update 3 Microsoft Live Meeting 2007 Add-in Microsoft Office Word Viewer cm1 squashfs-tools 4.3-26 on CBL Mariner 1.0 cbl2 squashfs-tools 4.5-1 on CBL Mariner 2.0 cm1 qemu-kvm 4.2.0-13 on CBL Mariner 1.0 cbl2 openslp 2.0.0-26 on CBL Mariner 2.0 cbl2 libplist 2.1.0-4 on CBL Mariner 2.0 azl3 zziplib 0.13.74-1 on Azure Linux 3.0 azl3 zziplib 0.13.74-1 on Azure Linux 3.0 cbl2 audiofile 0.3.6-27 on CBL Mariner 2.0 Windows Vista Service Pack 2 Microsoft Office Compatibility Pack Service Pack 3 Microsoft XML Core Services 3.0 on Windows 7 for 32-bit Systems Service Pack 1 Microsoft XML Core Services 3.0 on Windows 7 for x64-based Systems Service Pack 1 Microsoft XML Core Services 3.0 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) Microsoft XML Core Services 3.0 on Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1 Microsoft XML Core Services 3.0 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 Microsoft XML Core Services 3.0 on Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) Microsoft XML Core Services 3.0 on Windows Server 2012 Microsoft XML Core Services 3.0 on Windows Server 2012 (Server Core installation) Microsoft XML Core Services 3.0 on Windows 8.1 for 32-bit systems Microsoft XML Core Services 3.0 on Windows 8.1 for x64-based systems Microsoft XML Core Services 3.0 on Windows Server 2012 R2 Microsoft XML Core Services 3.0 on Windows RT 8.1 Microsoft XML Core Services 3.0 on Windows Server 2012 R2 (Server Core installation) Microsoft XML Core Services 3.0 on Windows 10 for 32-bit Systems Microsoft XML Core Services 3.0 on Windows 10 for x64-based Systems Microsoft XML Core Services 3.0 on Windows 10 Version 1511 for x64-based Systems Microsoft XML Core Services 3.0 on Windows 10 Version 1511 for 32-bit Systems Microsoft XML Core Services 3.0 on Windows Server 2016 Microsoft XML Core Services 3.0 on Windows 10 Version 1607 for 32-bit Systems Microsoft XML Core Services 3.0 on Windows 10 Version 1607 for x64-based Systems Microsoft XML Core Services 3.0 on Windows Server 2016 (Server Core installation) Microsoft XML Core Services 3.0 on Windows Vista Service Pack 2 Microsoft XML Core Services 3.0 on Windows Server 2008 for Itanium-Based Systems Service Pack 2 Microsoft XML Core Services 3.0 on Windows Server 2008 for 32-bit Systems Service Pack 2 Microsoft XML Core Services 3.0 on Windows Vista x64 Edition Service Pack 2 Microsoft XML Core Services 3.0 on Windows Server 2008 for x64-based Systems Service Pack 2 Microsoft XML Core Services 3.0 on Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) Excel Services on Microsoft SharePoint Server 2007 Service Pack 3 (32-bit editions) Excel Services on Microsoft SharePoint Server 2013 Service Pack 1 Excel Services on Microsoft SharePoint Server 2007 Service Pack 3 (64-bit edition) Bad Excel Services on Microsoft Sharepoint Server 2010 Service Pack 2 Bad Windows Server 2008 for Itanium-Based Systems Service Pack 2 Windows Server 2008 for 32-bit Systems Service Pack 2 Windows Vista x64 Edition Service Pack 2 Windows Server 2008 for x64-based Systems Service Pack 2 Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) Word Automation Services on Microsoft SharePoint Server 2010 Service Pack 2 Integer overflow in hw/virtio/virtio-crypto.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (QEMU process crash) or possibly execute arbitrary code on the host via a crafted virtio-crypto request which triggers a heap-based buffer overflow. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner redhat Yes CVE-2017-5931 Integer Overflow or Wraparound 16843-16820 16843-16820 Important 16843-16820 8.8 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H 16843-16820 CBL-Mariner Releases 16843-16820 No Security Update 4.2.0-13 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 16843-16820 CBL-Mariner Releases 1.0 2020-09-25T00:00:00 <p>Information published.</p> The _xrealloc function in xlsp_xmalloc.c in OpenSLP 2.0.0 allows remote attackers to cause a denial of service <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner mitre Yes CVE-2016-4912 NULL Pointer Dereference 16874-16823 16874-16823 Important 16874-16823 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 16874-16823 CBL-Mariner Releases 16874-16823 No Security Update 2.0.0-26 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 16874-16823 CBL-Mariner Releases 1.0 2025-10-01T23:10:54 <p>Information published.</p> The plist_free_data function libplist allows attackers to cause a denial of service <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner mitre Yes CVE-2017-5836 Double Free 16913-16823 16913-16823 Important 16913-16823 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 16913-16823 CBL-Mariner Releases 16913-16823 No Security Update 2.1.0-4 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 16913-16823 CBL-Mariner Releases 1.0 2025-10-01T23:10:56 <p>Information published.</p> Heap-based buffer overflow in audiofile allows remote attackers to have unspecified impact <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner mitre Yes CVE-2017-6828 Improper Restriction of Operations within the Bounds of a Memory Buffer 16916-16823 16916-16823 Important 16916-16823 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 16916-16823 CBL-Mariner Releases 16916-16823 No Security Update 0.3.6-27 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 16916-16823 CBL-Mariner Releases 1.0 2025-10-01T23:10:57 <p>Information published.</p> The decodeSample function in IMA.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (crash) via a crafted file. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner mitre Yes CVE-2017-6829 Out-of-bounds Read 16916-16823 16916-16823 Moderate 16916-16823 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 16916-16823 CBL-Mariner Releases 16916-16823 No Security Update 0.3.6-27 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 16916-16823 CBL-Mariner Releases 1.0 2025-10-01T23:10:57 <p>Information published.</p> Heap-based buffer overflow in the decodeBlock in MSADPCM.cpp in Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0, 0.2.7 allows remote attackers to cause a denial of service (crash) via a crafted file. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner mitre Yes CVE-2017-6832 Improper Restriction of Operations within the Bounds of a Memory Buffer 16916-16823 16916-16823 Moderate 16916-16823 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 16916-16823 CBL-Mariner Releases 16916-16823 No Security Update 0.3.6-27 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 16916-16823 CBL-Mariner Releases 1.0 2025-10-01T23:10:58 <p>Information published.</p> Vulnerability in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner mitre Yes CVE-2017-6833 Divide By Zero 16916-16823 16916-16823 Moderate 16916-16823 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 16916-16823 CBL-Mariner Releases 16916-16823 No Security Update 0.3.6-27 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 16916-16823 CBL-Mariner Releases 1.0 2025-10-01T23:10:58 <p>Information published.</p> Heap-based buffer overflow in the Expand3To4Module::run function in libaudiofile/modules/SimpleModule.h in Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0 allows remote attackers to cause a denial of service (crash) via a crafted file. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner mitre Yes CVE-2017-6836 Improper Restriction of Operations within the Bounds of a Memory Buffer 16916-16823 16916-16823 Moderate 16916-16823 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 16916-16823 CBL-Mariner Releases 16916-16823 No Security Update 0.3.6-27 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 16916-16823 CBL-Mariner Releases 1.0 2025-10-01T23:10:59 <p>Information published.</p> WAVE.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner mitre Yes CVE-2017-6837 16916-16823 16916-16823 Moderate 16916-16823 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 16916-16823 CBL-Mariner Releases 16916-16823 No Security Update 0.3.6-27 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 16916-16823 CBL-Mariner Releases 1.0 2025-10-01T23:10:59 <p>Information published.</p> Integer overflow in the read_fragment_table_4 function in unsquash-4.c in Squashfs and sasquatch allows remote attackers to cause a denial of service (application crash) via a crafted input which triggers a stack-based buffer overflow. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner mitre Yes CVE-2015-4645 Integer Overflow or Wraparound 16835-16820 16836-16823 16835-16820 16836-16823 Moderate 16835-16820 Moderate 16836-16823 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 16835-16820 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 16836-16823 CBL-Mariner Releases 16835-16820 No Security Update 4.3-26 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 16835-16820 CBL-Mariner Releases CBL-Mariner Releases 16836-16823 No Security Update 4.5-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 16836-16823 CBL-Mariner Releases 1.0 2021-07-30T00:00:00 <p>Information published.</p> 1.1 2021-12-16T00:00:00 <p>Added squashfs-tools to CBL-Mariner 2.0</p> The parse_dict_node function in bplist.c in libplist allows attackers to cause a denial of service <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner mitre Yes CVE-2017-5834 Out-of-bounds Read 16913-16823 16913-16823 Moderate 16913-16823 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 16913-16823 CBL-Mariner Releases 16913-16823 No Security Update 2.1.0-4 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 16913-16823 CBL-Mariner Releases 1.0 2025-10-01T23:10:56 <p>Information published.</p> libplist allows attackers to cause a denial of service (large memory allocation and crash) via vectors involving an offset size of zero. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner mitre Yes CVE-2017-5835 Allocation of Resources Without Limits or Throttling 16913-16823 16913-16823 Important 16913-16823 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 16913-16823 CBL-Mariner Releases 16913-16823 No Security Update 2.1.0-4 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 16913-16823 CBL-Mariner Releases 1.0 2025-10-01T23:10:56 <p>Information published.</p> Heap-based buffer overflow in the __zzip_get32 function in fetch.c in zziplib 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.58, 0.13.57, 0.13.56 allows remote attackers to cause a denial of service (crash) via a crafted ZIP file. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner mitre Yes CVE-2017-5974 Improper Restriction of Operations within the Bounds of a Memory Buffer 16914-17084 16914-16817 16914-17084 16914-16817 Moderate 16914-17084 Moderate 16914-16817 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 16914-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 16914-16817 CBL-Mariner Releases 16914-17084 16914-16817 No Security Update 0.13.74-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 16914-17084 16914-16817 CBL-Mariner Releases 1.0 2025-05-15T00:00:00 <p>Information published.</p> Heap-based buffer overflow in audiofile allows remote attackers to have unspecified impact via a crafted audio file <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner mitre Yes CVE-2017-6827 Improper Restriction of Operations within the Bounds of a Memory Buffer 16916-16823 16916-16823 Important 16916-16823 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 16916-16823 CBL-Mariner Releases 16916-16823 No Security Update 0.3.6-27 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 16916-16823 CBL-Mariner Releases 1.0 2025-10-01T23:10:56 <p>Information published.</p> Heap-based buffer overflow in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner mitre Yes CVE-2017-6830 Improper Restriction of Operations within the Bounds of a Memory Buffer 16916-16823 16916-16823 Moderate 16916-16823 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 16916-16823 CBL-Mariner Releases 16916-16823 No Security Update 0.3.6-27 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 16916-16823 CBL-Mariner Releases 1.0 2025-10-01T23:10:57 <p>Information published.</p> Heap-based buffer overflow in the decodeBlockWAVE function in IMA.cpp in Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0 and 0.2.7 allows remote attackers to cause a denial of service (crash) via a crafted file. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner mitre Yes CVE-2017-6831 Improper Restriction of Operations within the Bounds of a Memory Buffer 16916-16823 16916-16823 Moderate 16916-16823 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 16916-16823 CBL-Mariner Releases 16916-16823 No Security Update 0.3.6-27 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 16916-16823 CBL-Mariner Releases 1.0 2025-10-01T23:10:57 <p>Information published.</p> Heap-based buffer overflow in the ulaw2linear_buf function in G711.cpp in Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0, 0.2.7 allows remote attackers to cause a denial of service (crash) via a crafted file. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner mitre Yes CVE-2017-6834 Improper Restriction of Operations within the Bounds of a Memory Buffer 16916-16823 16916-16823 Moderate 16916-16823 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 16916-16823 CBL-Mariner Releases 16916-16823 No Security Update 0.3.6-27 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 16916-16823 CBL-Mariner Releases 1.0 2025-10-01T23:10:58 <p>Information published.</p> Vulnerability in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service via a crafted file. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner mitre Yes CVE-2017-6835 Divide By Zero 16916-16823 16916-16823 Moderate 16916-16823 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 16916-16823 CBL-Mariner Releases 16916-16823 No Security Update 0.3.6-27 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 16916-16823 CBL-Mariner Releases 1.0 2025-10-01T23:10:58 <p>Information published.</p> Integer overflow in sfcommands/sfconvert.c in Audio File Library <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner mitre Yes CVE-2017-6838 16916-16823 16916-16823 Moderate 16916-16823 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 16916-16823 CBL-Mariner Releases 16916-16823 No Security Update 0.3.6-27 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 16916-16823 CBL-Mariner Releases 1.0 2025-10-01T23:10:59 <p>Information published.</p> Integer overflow in modules/MSADPCM.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (crash) via a crafted file. <p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p> <p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p> Mariner mitre Yes CVE-2017-6839 Integer Overflow or Wraparound 16916-16823 16916-16823 Moderate 16916-16823 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 16916-16823 CBL-Mariner Releases 16916-16823 No Security Update 0.3.6-27 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 16916-16823 CBL-Mariner Releases 1.0 2025-10-01T23:10:59 <p>Information published.</p> Microsoft Office Memory Corruption Vulnerability <p>A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an attacker could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.</p> <p>Exploitation of the vulnerability requires that a user open a specially crafted file with an affected version of Microsoft Office software. In an email attack scenario, an attacker could exploit the vulnerability by sending the specially crafted file to the user and convincing the user to open the file. In a web-based attack scenario, an attacker could host a website (or leverage a compromised website that accepts or hosts user-provided content) that contains a specially crafted file designed to exploit the vulnerability. An attacker would have no way to force users to visit the website. Instead, an attacker would have to convince users to click a link, typically by way of an enticement in an email or instant message, and then convince them to open the specially crafted file.</p> <p>Note that the Preview Pane is not an attack vector for this vulnerability.</p> <p>The security update addresses the vulnerability by correcting how Office handles objects in memory.</p> Microsoft Office Microsoft Yes CVE-2017-0053 10521 10522 4497 1160 10162 10513 10514 10606 10604 10605 10746 10747 Remote Code Execution 10521 Remote Code Execution 10522 Remote Code Execution 4497 Remote Code Execution 1160 Remote Code Execution 10162 Remote Code Execution 10513 Remote Code Execution 10514 Remote Code Execution 10606 Remote Code Execution 10604 Remote Code Execution 10605 Remote Code Execution 10746 Remote Code Execution 10747 Important 10521 Important 10522 Important 4497 Important 1160 Important 10162 Important 10513 Important 10514 Important 10606 Important 10604 Important 10605 Important 10746 Important 10747 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A 3178686 https://www.microsoft.com/download/details.aspx?familyid=c6996886-1bfd-4cc8-b103-d7e898a8a229 3128032 10521 Maybe Security Update https://support.microsoft.com/kb/3178686 10521 3178686 3178686 https://www.microsoft.com/download/details.aspx?familyid=a0294339-8f6c-4c9f-aa73-c44788ce244b 3128032 10522 Maybe Security Update https://support.microsoft.com/kb/3178686 10522 3178686 3178682 https://www.microsoft.com/download/details.aspx?familyid=2a28280c-146c-42bf-9a9d-23a27469dd93 3128024 4497 Maybe Security Update https://support.microsoft.com/kb/3178682 4497 3178682 3178694 https://www.microsoft.com/download/details.aspx?familyid=eb818a6c-4d7a-4ca0-a4fe-48c39d604600 3128044 1160 Maybe Security Update https://support.microsoft.com/kb/3178694 1160 3178694 3178683 https://www.microsoft.com/download/details.aspx?familyid=7f0820b8-d862-41c4-9809-08dde15448e5 3128025 10162 Maybe Security Update https://support.microsoft.com/kb/3178683 10162 3178683 3178687 https://www.microsoft.com/download/details.aspx?familyid=e99f2cb7-2dd3-4aab-8199-8cce5e5f8982 3141542 10513 Maybe Security Update https://support.microsoft.com/kb/3178687 10513 3178687 3178687 https://www.microsoft.com/download/details.aspx?familyid=27ae1a64-f022-409c-adcc-87b935653a42 3141542 10514 Maybe Security Update https://support.microsoft.com/kb/3178687 10514 3178687 3172464 3127932 10606 Maybe Security Update https://support.microsoft.com/help/3172464 10606 3172464 3172464 https://www.microsoft.com/download/details.aspx?familyid=f1cf3298-745e-440e-a4d3-168f0c42cdb4 3127932 10604 Maybe Security Update https://support.microsoft.com/kb/3172464 10604 3172464 3172464 https://www.microsoft.com/download/details.aspx?familyid=19d33053-5b7c-46c0-8fa2-1d31edd09943 3127932 10605 Maybe Security Update https://support.microsoft.com/kb/3172464 10605 3172464 3178674 https://www.microsoft.com/download/details.aspx?familyid=9e27d598-d965-4935-bdb2-a1e11d987547 3128057 10746 Maybe Security Update https://support.microsoft.com/kb/3178674 10746 3178674 3178674 https://www.microsoft.com/download/details.aspx?familyid=aaf5192a-8e40-4674-a73b-1aa912c93c1c 3128057 10747 Maybe Security Update https://support.microsoft.com/kb/3178674 10747 3178674 Haifei Li of <a href="http://www.intelsecurity.com/">Intel Security</a> 1.0 2017-03-14T07:00:00 <p>Information published.</p> Microsoft Office Memory Corruption Vulnerability <p>A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an attacker could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.</p> <p>Exploitation of the vulnerability requires that a user open a specially crafted file with an affected version of Microsoft Office software. In an email attack scenario, an attacker could exploit the vulnerability by sending the specially crafted file to the user and convincing the user to open the file. In a web-based attack scenario, an attacker could host a website (or leverage a compromised website that accepts or hosts user-provided content) that contains a specially crafted file designed to exploit the vulnerability. An attacker would have no way to force users to visit the website. Instead, an attacker would have to convince users to click a link, typically by way of an enticement in an email or instant message, and then convince them to open the specially crafted file.</p> <p>Note that the Preview Pane is not an attack vector for this vulnerability.</p> <p>The security update addresses the vulnerability by correcting how Office handles objects in memory.</p> <p><strong>I am being offered this update for software that is not specifically indicated as being affected in the Affected Software and Vulnerability Severity Ratings table. Why am I being offered this update?</strong></p> <p>When updates address vulnerable code that exists in a component that is shared between multiple Microsoft Office products or shared between multiple versions of the same Microsoft Office product, the update is considered to be applicable to all supported products and versions that contain the vulnerable component.</p> <p>For example, when an update applies to Microsoft Office 2007 products, only Microsoft Office 2007 may be specifically listed in the Affected Software table. However, the update could apply to Microsoft Word 2007, Microsoft Excel 2007, Microsoft Visio 2007, Microsoft Compatibility Pack, Microsoft Excel Viewer, or any other Microsoft Office 2007 product that is not specifically listed in the Affected Software table. Furthermore, when an update applies to Microsoft Office 2010 products, only Microsoft Office 2010 may be specifically listed in the Affected Software table. However, the update could apply to Microsoft Word 2010, Microsoft Excel 2010, Microsoft Visio 2010, Microsoft Visio Viewer, or any other Microsoft Office 2010 product that is not specifically listed in the Affected Software table.</p> <p>For more information on this behavior and recommended actions, see <a href="https://support.microsoft.com/kb/830335">Microsoft Knowledge Base Article 830335</a>. For a list of Microsoft Office products that an update may apply to, refer to the Microsoft Knowledge Base Article associated with the specific update.</p> Microsoft Office Microsoft Yes CVE-2017-0006 10152 10279 4497 9171-10308 9171-999007 Remote Code Execution 10152 Remote Code Execution 10279 Remote Code Execution 4497 Remote Code Execution 9171-10308 Remote Code Execution 9171-999007 Important 10152 Important 10279 Important 4497 Important 9171-10308 Important 9171-999007 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A;Older Software Release:Exploitation More Likely;DOS:N/A 3178676 https://www.microsoft.com/download/details.aspx?familyid=ca65ab31-a60f-4926-9411-bf1650919ab1 3128019 10152 Maybe Security Update https://support.microsoft.com/kb/3178676 10152 3178676 3178680 https://www.microsoft.com/download/details.aspx?familyid=79e5a329-a688-4c1e-894e-f9ce942c52bb 3128023 10279 Maybe Security Update https://support.microsoft.com/kb/3178680 10279 3178680 3178677 https://www.microsoft.com/download/details.aspx?familyid=9b518a8c-5c77-4e35-bbd4-096715d127d7 3128022 4497 Maybe Security Update https://support.microsoft.com/kb/3178677 4497 3178677 3178678 https://www.microsoft.com/download/details.aspx?familyid=684a6d69-a0ec-4b1a-83e3-650097e98330 3127892 9171-10308 Maybe Security Update https://support.microsoft.com/kb/3178678 9171-10308 3178678 3178678 https://www.microsoft.com/download/details.aspx?familyid=1ebeb74e-9b06-4442-a1a6-b39731bb7878 3127892 9171-999007 Maybe Security Update https://support.microsoft.com/kb/3178678 9171-999007 3178678 Yangkang & Liyadong & Wanglu of <a href="http://www.360.cn/">360 QEX Team</a> 1.0 2017-03-14T07:00:00 <p>Information published.</p> Microsoft Office Memory Corruption Vulnerability <p>A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an attacker could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.</p> <p>Exploitation of the vulnerability requires that a user open a specially crafted file with an affected version of Microsoft Office software. In an email attack scenario, an attacker could exploit the vulnerability by sending the specially crafted file to the user and convincing the user to open the file. In a web-based attack scenario, an attacker could host a website (or leverage a compromised website that accepts or hosts user-provided content) that contains a specially crafted file designed to exploit the vulnerability. An attacker would have no way to force users to visit the website. Instead, an attacker would have to convince users to click a link, typically by way of an enticement in an email or instant message, and then convince them to open the specially crafted file.</p> <p>Note that the Preview Pane is not an attack vector for this vulnerability.</p> <p>The security update addresses the vulnerability by correcting how Office handles objects in memory.</p> <p><strong>I am being offered this update for software that is not specifically indicated as being affected in the Affected Software and Vulnerability Severity Ratings table. Why am I being offered this update?</strong></p> <p>When updates address vulnerable code that exists in a component that is shared between multiple Microsoft Office products or shared between multiple versions of the same Microsoft Office product, the update is considered to be applicable to all supported products and versions that contain the vulnerable component.</p> <p>For example, when an update applies to Microsoft Office 2007 products, only Microsoft Office 2007 may be specifically listed in the Affected Software table. However, the update could apply to Microsoft Word 2007, Microsoft Excel 2007, Microsoft Visio 2007, Microsoft Compatibility Pack, Microsoft Excel Viewer, or any other Microsoft Office 2007 product that is not specifically listed in the Affected Software table. Furthermore, when an update applies to Microsoft Office 2010 products, only Microsoft Office 2010 may be specifically listed in the Affected Software table. However, the update could apply to Microsoft Word 2010, Microsoft Excel 2010, Microsoft Visio 2010, Microsoft Visio Viewer, or any other Microsoft Office 2010 product that is not specifically listed in the Affected Software table.</p> <p>For more information on this behavior and recommended actions, see <a href="https://support.microsoft.com/kb/830335">Microsoft Knowledge Base Article 830335</a>. For a list of Microsoft Office products that an update may apply to, refer to the Microsoft Knowledge Base Article associated with the specific update.</p> Microsoft Office Microsoft Yes CVE-2017-0052 10279 4497 10152 9171-10308 9171-999007 Remote Code Execution 10279 Remote Code Execution 4497 Remote Code Execution 10152 Remote Code Execution 9171-10308 Remote Code Execution 9171-999007 Important 10279 Important 4497 Important 10152 Important 9171-10308 Important 9171-999007 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A;Older Software Release:Exploitation More Likely;DOS:N/A 3178680 https://www.microsoft.com/download/details.aspx?familyid=79e5a329-a688-4c1e-894e-f9ce942c52bb 3128023 10279 Maybe Security Update https://support.microsoft.com/kb/3178680 10279 3178680 3178677 https://www.microsoft.com/download/details.aspx?familyid=9b518a8c-5c77-4e35-bbd4-096715d127d7 3128022 4497 Maybe Security Update https://support.microsoft.com/kb/3178677 4497 3178677 3178676 https://www.microsoft.com/download/details.aspx?familyid=ca65ab31-a60f-4926-9411-bf1650919ab1 3128019 10152 Maybe Security Update https://support.microsoft.com/kb/3178676 10152 3178676 3178678 https://www.microsoft.com/download/details.aspx?familyid=684a6d69-a0ec-4b1a-83e3-650097e98330 3127892 9171-10308 Maybe Security Update https://support.microsoft.com/kb/3178678 9171-10308 3178678 3178678 https://www.microsoft.com/download/details.aspx?familyid=1ebeb74e-9b06-4442-a1a6-b39731bb7878 3127892 9171-999007 Maybe Security Update https://support.microsoft.com/kb/3178678 9171-999007 3178678 Yangkang & Liyadong & Wanglu of <a href="http://www.360.cn/">360 QEX Team</a> 1.0 2017-03-14T07:00:00 <p>Information published.</p> Microsoft IIS Server XSS Elevation of Privilege Vulnerability <p>An elevation of privilege vulnerability exists when Microsoft IIS Server fails to properly sanitize a specially crafted request. An attacker who successfully exploited this vulnerability could then perform cross-site scripting attacks on affected systems and run script in the security context of the current user. These attacks could allow the attacker to read content that the attacker is not authorized to read, use the victim's identity to take actions on behalf of the victim, and inject malicious content in the victim’s browser.</p> <p>For this vulnerability to be exploited, a user must click a specially crafted URL.</p> <p>In an email attack scenario, an attacker could exploit the vulnerability by sending an email message containing the specially crafted URL to the user and by convincing the user to click on the specially crafted URL.</p> <p>In a web-based attack scenario, an attacker would have to host a website that contains a specially crafted URL. In addition, compromised websites and websites that accept or host user-provided content could contain specially crafted content that could exploit this vulnerability. An attacker would have no way to force users to visit a specially crafted website. Instead, an attacker would have to convince users to visit the website, typically by getting them to click a link in an email or instant message that directs them to the affected website by way of a specially crafted URL.</p> <p>The security update addresses the vulnerability by correcting how Microsoft IIS Server sanitizes web requests.</p> Windows IIS Microsoft Yes CVE-2017-0055 10729 10735 10789 10788 10852 10853 10047 10048 10481 10482 10484 9312 10287 9311 9318 9344 10050 10051 10049 10378 10379 10483 10543 10816 10855 4393 9316 Elevation of Privilege 10729 Elevation of Privilege 10735 Elevation of Privilege 10789 Elevation of Privilege 10788 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10047 Elevation of Privilege 10048 Elevation of Privilege 10481 Elevation of Privilege 10482 Elevation of Privilege 10484 Elevation of Privilege 9312 Elevation of Privilege 10287 Elevation of Privilege 9311 Elevation of Privilege 9318 Elevation of Privilege 9344 Elevation of Privilege 10050 Elevation of Privilege 10051 Elevation of Privilege 10049 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 4393 Elevation of Privilege 9316 Important 10729 Important 10735 Important 10789 Important 10788 Important 10852 Important 10853 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 9312 Important 10287 Important 9311 Important 9318 Important 9344 Important 10050 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Important 10816 Important 10855 Important 4393 Important 9316 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A 6.1 5.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:P/RL:O/RC:C 10729 6.1 5.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:P/RL:O/RC:C 10735 6.1 5.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:P/RL:O/RC:C 10789 6.1 5.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:P/RL:O/RC:C 10788 6.1 5.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:P/RL:O/RC:C 10852 6.1 5.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:P/RL:O/RC:C 10853 6.1 5.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:P/RL:O/RC:C 10047 6.1 5.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:P/RL:O/RC:C 10048 6.1 5.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:P/RL:O/RC:C 10481 6.1 5.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:P/RL:O/RC:C 10482 6.1 5.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:P/RL:O/RC:C 10484 6.1 5.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:P/RL:O/RC:C 9312 6.1 5.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:P/RL:O/RC:C 10287 6.1 5.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:P/RL:O/RC:C 9311 6.1 5.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:P/RL:O/RC:C 9318 6.1 5.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:P/RL:O/RC:C 9344 6.1 5.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:P/RL:O/RC:C 10050 6.1 5.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:P/RL:O/RC:C 10051 6.1 5.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:P/RL:O/RC:C 10049 6.1 5.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:P/RL:O/RC:C 10378 6.1 5.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:P/RL:O/RC:C 10379 6.1 5.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:P/RL:O/RC:C 10483 6.1 5.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:P/RL:O/RC:C 10543 6.1 5.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:P/RL:O/RC:C 10816 6.1 5.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:P/RL:O/RC:C 10855 6.1 5.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:P/RL:O/RC:C 4393 6.1 5.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:P/RL:O/RC:C 9316 4012606 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012606 3210720 10729 10735 Yes Security Update https://support.microsoft.com/en-us/kb/4012606 10729 10735 4012606 4013198 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013198 3210721 10789 10788 Yes Security Update https://support.microsoft.com/en-us/kb/4013198 10789 10788 4013198 4013429 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013429 3213986 10852 10853 10816 10855 Yes Security Update https://support.microsoft.com/en-us/kb/4013429 10852 10853 10816 10855 4013429 4012215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012215 3212646 10047 10048 10050 10051 10049 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012215 10047 10048 10050 10051 10049 4012215 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10047 10050 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;custerr.dll;vmswitch.sys;msxml3.dll;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10047 10050 4012212 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10048 10051 10049 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10048 10051 10049 4012212 4012216 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012216 3205401 10481 10482 10483 10543 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012216 10481 10482 10483 10543 4012216 4012213 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012213 10481 10482 10483 10543 msxpspcl6.dll;msxpsps.dll;hvax64.exe;hvix64.exe;srv.sys;quartz.dll;n/a;win32k.sys;gdiplus.dll;gdi32.dll;icm32.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;dnsapi.dll;msxml3.dll;custerr.dll;vmswitch.sys;dnsrslvr.dll;mrxsmb20.sys;mrxsmb.sys;dxgkrnl.sys;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012213 10481 10482 10483 10543 4012213 4012216 3205401 10484 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012216 10484 4012216 4012373 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012373 9312 10287 9311 9318 9344 4393 9316 custerr.dll 0001-01-01T00:00:00 Yes Security Update https://support.microsoft.com/en-us/kb/4012373 9312 10287 9311 9318 9344 4393 9316 4012373 4012217 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012217 3205409 10378 10379 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012217 10378 10379 4012217 4012214 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012214 MS16-110, 3187754 10378 10379 n/a;msxpspcl6.dll;msxpsps.dll;srv.sys;win32k.sys;gdiplus.dll;gdi32.dll;icm32.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dxgkrnl.sys 0001-01-01T00:00:00 Security Only https://support.microsoft.com/en-us/help/4012214 10378 10379 4012214 David Fernandez of <a href="https://www.sidertia.com">Sidertia Solutions</a> 1.0 2017-03-14T07:00:00 <p>Information published.</p> Windows GDI Elevation of Privilege Vulnerability <p>An elevation of privilege vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p> <p>To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system.</p> <p>The update addresses the vulnerability by correcting how GDI handles objects in memory and by preventing instances of unintended user-mode privilege elevation.</p> <p><strong>Does this release contain any additional security-related changes to functionality?</strong> Yes. In addition to the security updates that address the vulnerabilities described in this bulletin, Microsoft is releasing an update that replaces certain third party libraries which were used by Windows 8.1, Windows Server 2012, Windows Server 2012 R2, Windows Server 2016, and all versions of Windows 10. This update provides the same functionality in a more secure and reliable way.</p> Microsoft Graphics Component Microsoft Yes CVE-2017-0001 10287 10855 10729 10735 10789 10788 10852 10853 10047 10048 10481 10482 10484 9312 9311 9318 9344 10050 10051 10049 10378 10379 10483 10543 10816 4393 9316 Elevation of Privilege 10287 Elevation of Privilege 10855 Elevation of Privilege 10729 Elevation of Privilege 10735 Elevation of Privilege 10789 Elevation of Privilege 10788 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10047 Elevation of Privilege 10048 Elevation of Privilege 10481 Elevation of Privilege 10482 Elevation of Privilege 10484 Elevation of Privilege 9312 Elevation of Privilege 9311 Elevation of Privilege 9318 Elevation of Privilege 9344 Elevation of Privilege 10050 Elevation of Privilege 10051 Elevation of Privilege 10049 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 10816 Elevation of Privilege 4393 Elevation of Privilege 9316 Important 10287 Important 10855 Important 10729 Important 10735 Important 10789 Important 10788 Important 10852 Important 10853 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 9312 Important 9311 Important 9318 Important 9344 Important 10050 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Important 10816 Important 4393 Important 9316 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10287 7.8 7.0 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10729 7.8 7.0 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10735 7.8 7.0 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10789 7.8 7.0 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10788 7.8 7.0 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10852 7.8 7.0 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10853 7.8 7.0 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10047 7.8 7.0 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10048 7.8 7.0 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10481 7.8 7.0 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10482 7.8 7.0 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10484 7.8 7.0 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9312 7.8 7.0 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9311 7.8 7.0 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9318 7.8 7.0 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9344 7.8 7.0 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10050 7.8 7.0 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10051 7.8 7.0 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10049 7.8 7.0 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10378 7.8 7.0 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10379 7.8 7.0 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10483 7.8 7.0 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10543 7.8 7.0 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10816 7.8 7.0 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 4393 7.8 7.0 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9316 4012497 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012497 3204723 10287 9312 9311 9318 9344 4393 9316 win32k.sys 0001-01-01T00:00:00 Yes Security Update https://support.microsoft.com/en-us/kb/4012497 10287 9312 9311 9318 9344 4393 9316 4012497 4013429 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013429 3213986 10855 10852 10853 10816 Yes Security Update https://support.microsoft.com/en-us/kb/4013429 10855 10852 10853 10816 4013429 4012606 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012606 3210720 10729 10735 Yes Security Update https://support.microsoft.com/en-us/kb/4012606 10729 10735 4012606 4013198 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013198 3210721 10789 10788 Yes Security Update https://support.microsoft.com/en-us/kb/4013198 10789 10788 4013198 4012215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012215 3212646 10047 10050 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012215 10047 10050 4012215 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10047 10050 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;custerr.dll;vmswitch.sys;msxml3.dll;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10047 10050 4012212 4012215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012215 3212646 10048 10051 10049 Monthly Rollup https://support.microsoft.com/en-us/help/4012215 10048 10051 10049 4012215 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10048 10051 10049 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10048 10051 10049 4012212 4012216 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012216 3205401 10481 10482 10483 10543 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012216 10481 10482 10483 10543 4012216 4012213 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012213 10481 10482 10483 10543 msxpspcl6.dll;msxpsps.dll;hvax64.exe;hvix64.exe;srv.sys;quartz.dll;n/a;win32k.sys;gdiplus.dll;gdi32.dll;icm32.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;dnsapi.dll;msxml3.dll;custerr.dll;vmswitch.sys;dnsrslvr.dll;mrxsmb20.sys;mrxsmb.sys;dxgkrnl.sys;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012213 10481 10482 10483 10543 4012213 4012216 4014077 10484 Monthly Rollup https://support.microsoft.com/en-us/help/4012216 10484 4012216 4012217 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012217 3205409 10378 10379 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012217 10378 10379 4012217 4012214 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012214 MS16-110, 3187754 10378 10379 n/a;msxpspcl6.dll;msxpsps.dll;srv.sys;win32k.sys;gdiplus.dll;gdi32.dll;icm32.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dxgkrnl.sys 0001-01-01T00:00:00 Security Only https://support.microsoft.com/en-us/help/4012214 10378 10379 4012214 Peter Hlavaty (<a href="https://twitter.com/zer0mem">@zer0mem</a>), KeenLab, <a href="http://keenlab.tencent.com/en/">Tencent</a> 1.0 2017-03-14T07:00:00 <p>Information published.</p> Windows GDI Elevation of Privilege Vulnerability <p>An elevation of privilege vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p> <p>To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system.</p> <p>The update addresses the vulnerability by correcting how GDI handles objects in memory and by preventing instances of unintended user-mode privilege elevation.</p> <p><strong>Does this release contain any additional security-related changes to functionality?</strong> Yes. In addition to the security updates that address the vulnerabilities described in this bulletin, Microsoft is releasing an update that replaces certain third party libraries which were used by Windows 8.1, Windows Server 2012, Windows Server 2012 R2, Windows Server 2016, and all versions of Windows 10. This update provides the same functionality in a more secure and reliable way.</p> Microsoft Graphics Component Microsoft Yes CVE-2017-0005 10816 10855 10729 10735 10789 10788 10852 10853 10047 10048 10481 10482 10484 9312 10287 9311 9318 9344 10050 10051 10049 10378 10379 10483 10543 4393 9316 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10729 Elevation of Privilege 10735 Elevation of Privilege 10789 Elevation of Privilege 10788 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10047 Elevation of Privilege 10048 Elevation of Privilege 10481 Elevation of Privilege 10482 Elevation of Privilege 10484 Elevation of Privilege 9312 Elevation of Privilege 10287 Elevation of Privilege 9311 Elevation of Privilege 9318 Elevation of Privilege 9344 Elevation of Privilege 10050 Elevation of Privilege 10051 Elevation of Privilege 10049 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 4393 Elevation of Privilege 9316 Important 10816 Important 10855 Important 10729 Important 10735 Important 10789 Important 10788 Important 10852 Important 10853 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 9312 Important 10287 Important 9311 Important 9318 Important 9344 Important 10050 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Important 4393 Important 9316 Publicly Disclosed:No;Exploited:Yes;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation Detected;DOS:N/A 7.0 6.3 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10816 7.0 6.3 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10855 7.0 6.3 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10729 7.0 6.3 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10735 7.0 6.3 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10789 7.0 6.3 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10788 7.0 6.3 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10852 7.0 6.3 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10853 7.0 6.3 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10047 7.0 6.3 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10048 7.0 6.3 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10481 7.0 6.3 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10482 7.0 6.3 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10484 7.0 6.3 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9312 7.0 6.3 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10287 7.0 6.3 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9311 7.0 6.3 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9318 7.0 6.3 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9344 7.0 6.3 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10050 7.0 6.3 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10051 7.0 6.3 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10049 7.0 6.3 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10378 7.0 6.3 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10379 7.0 6.3 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10483 7.0 6.3 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10543 7.0 6.3 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 4393 7.0 6.3 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9316 4013429 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013429 3213986 10816 10855 10852 10853 Yes Security Update https://support.microsoft.com/en-us/kb/4013429 10816 10855 10852 10853 4013429 4012606 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012606 3210720 10729 10735 Yes Security Update https://support.microsoft.com/en-us/kb/4012606 10729 10735 4012606 4013198 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013198 3210721 10789 10788 Yes Security Update https://support.microsoft.com/en-us/kb/4013198 10789 10788 4013198 4012215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012215 3212646 10047 10048 10050 10051 10049 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012215 10047 10048 10050 10051 10049 4012215 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10047 10050 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;custerr.dll;vmswitch.sys;msxml3.dll;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10047 10050 4012212 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10048 10051 10049 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10048 10051 10049 4012212 4012216 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012216 3205401 10481 10482 10483 10543 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012216 10481 10482 10483 10543 4012216 4012213 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012213 10481 10482 10483 10543 msxpspcl6.dll;msxpsps.dll;hvax64.exe;hvix64.exe;srv.sys;quartz.dll;n/a;win32k.sys;gdiplus.dll;gdi32.dll;icm32.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;dnsapi.dll;msxml3.dll;custerr.dll;vmswitch.sys;dnsrslvr.dll;mrxsmb20.sys;mrxsmb.sys;dxgkrnl.sys;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012213 10481 10482 10483 10543 4012213 4012216 3205401 10484 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012216 10484 4012216 4012497 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012497 3204723 9312 10287 9311 9318 9344 4393 9316 win32k.sys 0001-01-01T00:00:00 Yes Security Update https://support.microsoft.com/en-us/kb/4012497 9312 10287 9311 9318 9344 4393 9316 4012497 4012217 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012217 3205409 10378 10379 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012217 10378 10379 4012217 4012214 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012214 MS16-110, 3187754 10378 10379 n/a;msxpspcl6.dll;msxpsps.dll;srv.sys;win32k.sys;gdiplus.dll;gdi32.dll;icm32.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dxgkrnl.sys 0001-01-01T00:00:00 Security Only https://support.microsoft.com/en-us/help/4012214 10378 10379 4012214 Lockheed Martin Computer Incident Response Team 1.0 2017-03-14T07:00:00 <p>Information published.</p> Device Guard Security Feature Bypass Vulnerability <p>A security feature bypass exists when Device Guard does not properly validate certain elements of a signed PowerShell script. An attacker who successfully exploited this vulnerability could modify the contents of a PowerShell script without invalidating the signature associated with the file. Because Device Guard relies on the signature to determine the script is non-malicious, Device Guard could then allow a malicious script to execute.</p> <p>In an attack scenario, an attacker could modify the contents of a PowerShell script without invalidating the signature associated with the file.</p> <p>The update addresses the vulnerability by correcting how Device Guard validates certain elements of signed PowerShell scripts.</p> Microsoft PowerShell Microsoft Yes CVE-2017-0007 10816 10855 10729 10735 10789 10788 10852 10853 Security Feature Bypass 10816 Security Feature Bypass 10855 Security Feature Bypass 10729 Security Feature Bypass 10735 Security Feature Bypass 10789 Security Feature Bypass 10788 Security Feature Bypass 10852 Security Feature Bypass 10853 Important 10816 Important 10855 Important 10729 Important 10735 Important 10789 Important 10788 Important 10852 Important 10853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A 5.5 5.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:P/RL:O/RC:C 10816 5.5 5.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:P/RL:O/RC:C 10855 5.5 5.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:P/RL:O/RC:C 10729 5.5 5.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:P/RL:O/RC:C 10735 5.5 5.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:P/RL:O/RC:C 10789 5.5 5.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:P/RL:O/RC:C 10788 5.5 5.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:P/RL:O/RC:C 10852 5.5 5.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:P/RL:O/RC:C 10853 4013429 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013429 3213986 10816 10855 10852 10853 Yes Security Update https://support.microsoft.com/en-us/kb/4013429 10816 10855 10852 10853 4013429 4012606 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012606 3210720 10729 10735 Yes Security Update https://support.microsoft.com/en-us/kb/4012606 10729 10735 4012606 4013198 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013198 3210721 10789 10788 Yes Security Update https://support.microsoft.com/en-us/kb/4013198 10789 10788 4013198 Matt Nelson (<a href="https://twitter.com/enigma0x3">@enigma0x3</a>) 1.0 2017-03-14T07:00:00 <p>Information published.</p> Microsoft Browser Information Disclosure Vulnerability <p>An information disclosure vulnerability exists when affected Microsoft browsers improperly handle objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system.</p> <p>To exploit the vulnerability, in a web-based attack scenario, an attacker could host a website that is used to attempt to exploit the vulnerability. In addition, compromised websites and websites that accept or host user-provided content could contain specially crafted content that could exploit the vulnerability. However, in all cases an attacker would have no way to force a user to view the attacker-controlled content. Instead, an attacker would have to convince a user to take action. For example, an attacker could trick a user into clicking a link that takes the user to the attacker's site.</p> <p>The security update addresses the vulnerability by modifying how Microsoft browsers handle objects in memory.</p> <p><strong>In addition to installing this update are there any further steps I need to carry out to be protected from any of the vulnerabilities discussed in this bulletin?</strong> Yes. For Vista and Windows Server 2008 operating systems installing the 3214281 cumulative update by itself does not fully protect against CVE-2017-0008 — you must also install security update 3218362 in MS17-005 to be fully protected from the vulnerability.</p> Internet Explorer Microsoft Yes CVE-2017-0008 4393 9316 9312 9318 10555-10378 10486-10481 10486-10482 10486-10483 10486-10484 10486-10047 10486-10048 10486-10051 10486-10729 10486-10735 10486-10789 10486-10788 10486-10852 10486-10853 10336-9316 10336-4393 10336-9312 10336-9318 10486-10816 Information Disclosure 4393 Information Disclosure 9316 Information Disclosure 9312 Information Disclosure 9318 Information Disclosure 10555-10378 Information Disclosure 10486-10481 Information Disclosure 10486-10482 Information Disclosure 10486-10483 Information Disclosure 10486-10484 Information Disclosure 10486-10047 Information Disclosure 10486-10048 Information Disclosure 10486-10051 Information Disclosure 10486-10729 Information Disclosure 10486-10735 Information Disclosure 10486-10789 Information Disclosure 10486-10788 Information Disclosure 10486-10852 Information Disclosure 10486-10853 Information Disclosure 10336-9316 Information Disclosure 10336-4393 Information Disclosure 10336-9312 Information Disclosure 10336-9318 Information Disclosure 10486-10816 Important 4393 Important 9316 Important 9312 Important 9318 Low 10555-10378 Important 10486-10481 Important 10486-10482 Low 10486-10483 Important 10486-10484 Important 10486-10047 Important 10486-10048 Low 10486-10051 Important 10486-10729 Important 10486-10735 Important 10486-10789 Important 10486-10788 Important 10486-10852 Important 10486-10853 Important 10336-9316 Important 10336-4393 Low 10336-9312 Low 10336-9318 Low 10486-10816 Publicly Disclosed:Yes;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O 4393 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O 9316 2.4 2.2 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O 9312 2.4 2.2 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O 9318 2.4 2.2 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O 10555-10378 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O 10486-10481 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O 10486-10482 2.4 2.2 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O 10486-10483 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O 10486-10484 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O 10486-10047 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O 10486-10048 2.4 2.2 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O 10486-10051 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O 10486-10729 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O 10486-10735 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O 10486-10789 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O 10486-10788 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O 10486-10852 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O 10486-10853 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O 10336-9316 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O 10336-4393 2.4 2.2 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O 10336-9312 2.4 2.2 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O 10336-9318 2.4 2.2 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O 10486-10816 3218362 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3218362 3193515 4393 9316 9312 9318 Yes Security Update https://support.microsoft.com/en-us/kb/3218362 4393 9316 9312 9318 3218362 4012217 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012217 3205409 10555-10378 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012217 10555-10378 4012217 4012204 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012204 3203621 10555-10378 10486-10481 10486-10482 10486-10483 10486-10047 10486-10048 10486-10051 10336-9316 10336-4393 10336-9312 10336-9318 Yes IE Cumulative https://support.microsoft.com/en-us/help/4012204 10555-10378 10486-10481 10486-10482 10486-10483 10486-10047 10486-10048 10486-10051 10336-9316 10336-4393 10336-9312 10336-9318 4012204 4012216 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012216 3205401 10486-10481 10486-10482 10486-10483 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012216 10486-10481 10486-10482 10486-10483 4012216 4012216 3205401 10486-10484 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012216 10486-10484 4012216 4012215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012215 3212646 10486-10047 10486-10048 10486-10051 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012215 10486-10047 10486-10048 10486-10051 4012215 4012606 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012606 3210720 10486-10729 10486-10735 Yes Security Update https://support.microsoft.com/en-us/kb/4012606 10486-10729 10486-10735 4012606 4013198 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013198 3210721 10486-10789 10486-10788 Yes Security Update https://support.microsoft.com/en-us/kb/4013198 10486-10789 10486-10788 4013198 4013429 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013429 3213986 10486-10852 10486-10853 10486-10816 Yes Security Update https://support.microsoft.com/en-us/kb/4013429 10486-10852 10486-10853 10486-10816 4013429 1.0 2017-03-14T07:00:00 <p>Information published.</p> Microsoft Browser Information Disclosure Vulnerability <p>An information disclosure vulnerability exists when affected Microsoft browsers improperly handle objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system.</p> <p>To exploit the vulnerability, in a web-based attack scenario, an attacker could host a website that is used to attempt to exploit the vulnerability. In addition, compromised websites and websites that accept or host user-provided content could contain specially crafted content that could exploit the vulnerability. However, in all cases an attacker would have no way to force a user to view the attacker-controlled content. Instead, an attacker would have to convince a user to take action. For example, an attacker could trick a user into clicking a link that takes the user to the attacker's site.</p> <p>The security update addresses the vulnerability by modifying how Microsoft browsers handle objects in memory.</p> Internet Explorer Microsoft Yes CVE-2017-0009 10555-10378 10486-10481 10486-10482 10486-10483 10486-10484 10486-10047 10486-10048 10486-10051 10486-10729 10486-10735 10486-10789 10486-10788 10486-10852 10486-10853 10336-9316 10336-4393 10336-9312 10336-9318 10724-10729 10724-10735 10724-10789 10724-10788 10724-10852 10724-10853 Information Disclosure 10555-10378 Information Disclosure 10486-10481 Information Disclosure 10486-10482 Information Disclosure 10486-10483 Information Disclosure 10486-10484 Information Disclosure 10486-10047 Information Disclosure 10486-10048 Information Disclosure 10486-10051 Information Disclosure 10486-10729 Information Disclosure 10486-10735 Information Disclosure 10486-10789 Information Disclosure 10486-10788 Information Disclosure 10486-10852 Information Disclosure 10486-10853 Information Disclosure 10336-9316 Information Disclosure 10336-4393 Information Disclosure 10336-9312 Information Disclosure 10336-9318 Information Disclosure 10724-10729 Information Disclosure 10724-10735 Information Disclosure 10724-10789 Information Disclosure 10724-10788 Information Disclosure 10724-10852 Information Disclosure 10724-10853 Low 10555-10378 Important 10486-10481 Important 10486-10482 Low 10486-10483 Important 10486-10484 Important 10486-10047 Important 10486-10048 Low 10486-10051 Important 10486-10729 Important 10486-10735 Important 10486-10789 Important 10486-10788 Important 10486-10852 Important 10486-10853 Important 10336-9316 Important 10336-4393 Low 10336-9312 Low 10336-9318 Important 10724-10729 Important 10724-10735 Important 10724-10789 Important 10724-10788 Important 10724-10852 Important 10724-10853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A 2.4 2.2 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O 10555-10378 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O 10486-10481 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O 10486-10482 2.4 2.2 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O 10486-10483 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O 10486-10484 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O 10486-10047 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O 10486-10048 2.4 2.2 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O 10486-10051 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O 10486-10729 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O 10486-10735 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O 10486-10789 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O 10486-10788 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O 10486-10852 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O 10486-10853 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O 10336-9316 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O 10336-4393 2.4 2.2 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O 10336-9312 2.4 2.2 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O 10336-9318 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10724-10729 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10724-10735 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10724-10789 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10724-10788 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10724-10852 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10724-10853 4012217 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012217 3205409 10555-10378 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012217 10555-10378 4012217 4012204 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012204 3203621 10555-10378 10486-10481 10486-10482 10486-10483 10486-10047 10486-10048 10486-10051 10336-9316 10336-4393 10336-9312 10336-9318 Yes IE Cumulative https://support.microsoft.com/en-us/help/4012204 10555-10378 10486-10481 10486-10482 10486-10483 10486-10047 10486-10048 10486-10051 10336-9316 10336-4393 10336-9312 10336-9318 4012204 4012216 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012216 3205401 10486-10481 10486-10482 10486-10483 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012216 10486-10481 10486-10482 10486-10483 4012216 4012216 3205401 10486-10484 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012216 10486-10484 4012216 4012215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012215 3212646 10486-10047 10486-10048 10486-10051 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012215 10486-10047 10486-10048 10486-10051 4012215 4012606 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012606 3210720 10486-10729 10486-10735 10724-10729 10724-10735 Yes Security Update https://support.microsoft.com/en-us/kb/4012606 10486-10729 10486-10735 10724-10729 10724-10735 4012606 4013198 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013198 3210721 10486-10789 10486-10788 10724-10789 10724-10788 Yes Security Update https://support.microsoft.com/en-us/kb/4013198 10486-10789 10486-10788 10724-10789 10724-10788 4013198 4013429 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013429 3213986 10486-10852 10486-10853 10724-10852 10724-10853 Yes Security Update https://support.microsoft.com/en-us/kb/4013429 10486-10852 10486-10853 10724-10852 10724-10853 4013429 Scott Bell of Security-Assessment.com 1.0 2017-03-14T07:00:00 <p>Information published.</p> Scripting Engine Memory Corruption Vulnerability <p>A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p> <p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Internet Explorer and then convince a user to view the website. An attacker could also embed an ActiveX control marked &quot;safe for initialization&quot; in an application or Microsoft Office document that hosts the IE rendering engine. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p> <p>The security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.</p> Microsoft Browsers Microsoft Yes CVE-2017-0010 10724-10729 10724-10735 10724-10789 10724-10788 10724-10852 10724-10853 Remote Code Execution 10724-10729 Remote Code Execution 10724-10735 Remote Code Execution 10724-10789 Remote Code Execution 10724-10788 Remote Code Execution 10724-10852 Remote Code Execution 10724-10853 Critical 10724-10729 Critical 10724-10735 Critical 10724-10789 Critical 10724-10788 Critical 10724-10852 Critical 10724-10853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A;DOS:N/A 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10729 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10735 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10789 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10788 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10852 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10853 4012606 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012606 3210720 10724-10729 10724-10735 Yes Security Update https://support.microsoft.com/en-us/kb/4012606 10724-10729 10724-10735 4012606 4013198 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013198 3210721 10724-10789 10724-10788 Yes Security Update https://support.microsoft.com/en-us/kb/4013198 10724-10789 10724-10788 4013198 4013429 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013429 3213986 10724-10852 10724-10853 Yes Security Update https://support.microsoft.com/en-us/kb/4013429 10724-10852 10724-10853 4013429 Zhang Hanming of <a href="http://www.360.cn/">Qihoo 360 Vulcan Team</a> Dhanesh Kizhakkinan of <a href="https://www.fireeye.com/">FireEye Inc</a> 1.0 2017-03-14T07:00:00 <p>Information published.</p> Windows Uniscribe Information Disclosure Vulnerability <p>An information disclosure vulnerability exists when Windows Uniscribe improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.</p> <p>There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document or by convincing a user to visit an untrusted webpage.</p> <p>The update addresses the vulnerability by correcting how Windows Uniscribe handles objects in memory.</p> Windows Uniscribe Microsoft Yes CVE-2017-0111 10047 10048 9312 10287 9311 9318 9344 10050 10051 10049 4393 9316 Information Disclosure 10047 Information Disclosure 10048 Information Disclosure 9312 Information Disclosure 10287 Information Disclosure 9311 Information Disclosure 9318 Information Disclosure 9344 Information Disclosure 10050 Information Disclosure 10051 Information Disclosure 10049 Information Disclosure 4393 Information Disclosure 9316 Important 10047 Important 10048 Important 9312 Important 10287 Important 9311 Important 9318 Important 9344 Important 10050 Important 10051 Important 10049 Important 4393 Important 9316 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A;Older Software Release:Exploitation Unlikely;DOS:N/A 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10047 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10048 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9312 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10287 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9311 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9318 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9344 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10050 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10051 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10049 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 4393 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9316 4012215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012215 3212646 10047 10048 10050 10051 10049 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012215 10047 10048 10050 10051 10049 4012215 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10047 10050 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;custerr.dll;vmswitch.sys;msxml3.dll;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10047 10050 4012212 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10048 10051 10049 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10048 10051 10049 4012212 4012583 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012583 3196348 9312 10287 9311 9318 9344 4393 9316 gdiplus.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll 0001-01-01T00:00:00 Yes Security Update https://support.microsoft.com/en-us/kb/4012583 9312 10287 9311 9318 9344 4393 9316 4012583 Mateusz Jurczyk of <a href="http://www.google.com/">Google Project Zero</a> 1.0 2017-03-14T07:00:00 <p>Information published.</p> Microsoft Browser Information Disclosure Vulnerability <p>An information disclosure vulnerability exists when affected Microsoft browsers improperly handle objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system.</p> <p>To exploit the vulnerability, in a web-based attack scenario, an attacker could host a website that is used to attempt to exploit the vulnerability. In addition, compromised websites and websites that accept or host user-provided content could contain specially crafted content that could exploit the vulnerability. However, in all cases an attacker would have no way to force a user to view the attacker-controlled content. Instead, an attacker would have to convince a user to take action. For example, an attacker could trick a user into clicking a link that takes the user to the attacker's site.</p> <p>The security update addresses the vulnerability by modifying how Microsoft browsers handle objects in memory.</p> Microsoft Edge (HTML-based) Microsoft Yes CVE-2017-0011 10724-10729 10724-10735 10724-10789 10724-10788 10724-10852 10724-10853 Information Disclosure 10724-10729 Information Disclosure 10724-10735 Information Disclosure 10724-10789 Information Disclosure 10724-10788 Information Disclosure 10724-10852 Information Disclosure 10724-10853 Important 10724-10729 Important 10724-10735 Important 10724-10789 Important 10724-10788 Important 10724-10852 Important 10724-10853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:N/A;DOS:N/A 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O 10724-10729 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O 10724-10735 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O 10724-10789 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O 10724-10788 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O 10724-10852 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O 10724-10853 4012606 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012606 3210720 10724-10729 10724-10735 Yes Security Update https://support.microsoft.com/en-us/kb/4012606 10724-10729 10724-10735 4012606 4013198 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013198 3210721 10724-10789 10724-10788 Yes Security Update https://support.microsoft.com/en-us/kb/4013198 10724-10789 10724-10788 4013198 4013429 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013429 3213986 10724-10852 10724-10853 Yes Security Update https://support.microsoft.com/en-us/kb/4013429 10724-10852 10724-10853 4013429 Suto, working with <a href="http://www.zerodayinitiative.com/">Trend Micro's Zero Day Initiative (ZDI)</a> 1.0 2017-03-14T07:00:00 <p>Information published.</p> Microsoft Browser Spoofing Vulnerability <p>A spoofing vulnerability exists when Microsoft browsers do not properly parse HTTP content. An attacker who successfully exploited this vulnerability could trick a user by redirecting the user to a specially crafted website. The specially crafted website could either spoof content or serve as a pivot to chain an attack with other vulnerabilities in web services.</p> <p>To exploit the vulnerability, the user must click a specially crafted URL. In an email attack scenario, an attacker could send an email message containing the specially crafted URL to the user in an attempt to convince the user to click it.</p> <p>In a web-based attack scenario, an attacker could host a specially crafted website designed to appear as a legitimate website to the user. However, the attacker would have no way to force the user to visit the specially crafted website. The attacker would have to convince the user to visit the specially crafted website, typically by way of enticement in an email or instant message, and then convince the user to interact with content on the website.</p> <p>The update addresses the vulnerability by correcting how Microsoft browsers parse HTTP responses.</p> Microsoft Browsers Microsoft Yes CVE-2017-0012 10724-10729 10724-10735 10724-10789 10724-10788 10724-10852 10724-10853 10486-10481 10486-10482 10486-10483 10486-10484 10486-10047 10486-10048 10486-10051 10486-10729 10486-10735 10486-10789 10486-10788 10486-10852 10486-10853 10486-10816 Spoofing 10724-10729 Spoofing 10724-10735 Spoofing 10724-10789 Spoofing 10724-10788 Spoofing 10724-10852 Spoofing 10724-10853 Spoofing 10486-10481 Spoofing 10486-10482 Spoofing 10486-10483 Spoofing 10486-10484 Spoofing 10486-10047 Spoofing 10486-10048 Spoofing 10486-10051 Spoofing 10486-10729 Spoofing 10486-10735 Spoofing 10486-10789 Spoofing 10486-10788 Spoofing 10486-10852 Spoofing 10486-10853 Spoofing 10486-10816 Important 10724-10729 Important 10724-10735 Important 10724-10789 Important 10724-10788 Important 10724-10852 Important 10724-10853 Important 10486-10481 Important 10486-10482 Low 10486-10483 Important 10486-10484 Important 10486-10047 Important 10486-10048 Low 10486-10051 Important 10486-10729 Important 10486-10735 Important 10486-10789 Important 10486-10788 Important 10486-10852 Important 10486-10853 Low 10486-10816 Publicly Disclosed:Yes;Exploited:No;Latest Software Release:Exploitation Unlikely;Older Software Release:N/A;DOS:N/A 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10724-10729 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10724-10735 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10724-10789 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10724-10788 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10724-10852 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10724-10853 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10486-10481 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10486-10482 2.4 2.2 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10486-10483 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10486-10484 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10486-10047 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10486-10048 2.4 2.2 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10486-10051 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10486-10729 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10486-10735 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10486-10789 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10486-10788 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10486-10852 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10486-10853 2.4 2.2 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10486-10816 4012606 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012606 3210720 10724-10729 10724-10735 10486-10729 10486-10735 Yes Security Update https://support.microsoft.com/en-us/kb/4012606 10724-10729 10724-10735 10486-10729 10486-10735 4012606 4013198 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013198 3210721 10724-10789 10724-10788 10486-10789 10486-10788 Yes Security Update https://support.microsoft.com/en-us/kb/4013198 10724-10789 10724-10788 10486-10789 10486-10788 4013198 4013429 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013429 3213986 10724-10852 10724-10853 10486-10852 10486-10853 10486-10816 Yes Security Update https://support.microsoft.com/en-us/kb/4013429 10724-10852 10724-10853 10486-10852 10486-10853 10486-10816 4013429 4012216 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012216 3205401 10486-10481 10486-10482 10486-10483 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012216 10486-10481 10486-10482 10486-10483 4012216 4012204 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012204 3203621 10486-10481 10486-10482 10486-10483 10486-10047 10486-10048 10486-10051 Yes IE Cumulative https://support.microsoft.com/en-us/kb/4012204 10486-10481 10486-10482 10486-10483 10486-10047 10486-10048 10486-10051 4012204 4012216 3205401 10486-10484 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012216 10486-10484 4012216 4012215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012215 3212646 10486-10047 10486-10048 10486-10051 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012215 10486-10047 10486-10048 10486-10051 4012215 Zhang Lin, <a href=http://xsseng.com>http://xsseng.com</a> 1.0 2017-03-14T07:00:00 <p>Information published.</p> Windows Graphics Component Remote Code Execution Vulnerability <p>A remote code execution vulnerability exists due to the way the Windows Graphics Component handles objects in memory. An attacker who successfully exploited the vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.</p> <p>There are multiple ways an attacker could exploit the vulnerability:</p> <ul> <li>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit this vulnerability and then convince a user to view the website. An attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically by getting them to click a link in an email message or in an Instant Messenger message that takes users to the attacker's website, or by opening an attachment sent through email.</li> <li>In a file sharing attack scenario, an attacker could provide a specially crafted document file that is designed to exploit the vulnerability, and then convince a user to open the document file.</li> </ul> <p>Note that for affected Microsoft Office products, the Preview Pane is an attack vector.</p> <p>The security update addresses the vulnerability by correcting how the Windows Graphics Component handles objects in the memory.</p> <p><strong>There are multiple update packages available for some of the affected software. Do I need to install all the updates listed in the Affected Software table for the software?</strong> Yes. Customers should apply all updates offered for the software installed on their systems. If multiple updates apply, they can be installed in any order.</p> <p><strong>Do I need to install these security updates in a particular sequence?</strong> No. Multiple updates for a given system can be applied in any sequence.</p> <p><strong>I am running Office 2010, which is listed as affected software. Why am I not being offered the update?</strong> The update is not applicable to Office 2010 on Windows Vista and later versions of Windows because the vulnerable code is not present.</p> <p><strong>I am being offered this update for software that is not specifically indicated as being affected in the Affected Software and Vulnerability Severity Ratings table. Why am I being offered this update?</strong> When updates address vulnerable code that exists in a component that is shared between multiple Microsoft Office products or shared between multiple versions of the same Microsoft Office product, the update is considered to be applicable to all supported products and versions that contain the vulnerable component.</p> <p>For example, when an update applies to Microsoft Office 2007 products, only Microsoft Office 2007 may be specifically listed in the Affected Software table. However, the update could apply to Microsoft Word 2007, Microsoft Excel 2007, Microsoft Visio 2007, Microsoft Compatibility Pack, Microsoft Excel Viewer, or any other Microsoft Office 2007 product that is not specifically listed in the Affected Software table. Furthermore, when an update applies to Microsoft Office 2010 products, only Microsoft Office 2010 may be specifically listed in the Affected Software table. However, the update could apply to Microsoft Word 2010, Microsoft Excel 2010, Microsoft Visio 2010, Microsoft Visio Viewer, or any other Microsoft Office 2010 product that is not specifically listed in the Affected Software table.</p> <p>For more information on this behavior and recommended actions, see <a href="https://support.microsoft.com/kb/830335">Microsoft Knowledge Base Article 830335</a>. For a list of Microsoft Office products an update may apply to, refer to the Microsoft Knowledge Base Article associated with the specific update.</p> <p><strong>Does this release contain any additional security-related changes to functionality?</strong> Yes. In addition to the security updates that address the vulnerabilities described in this bulletin, Microsoft is releasing an update that replaces certain third party libraries which were used by Windows 8.1, Windows Server 2012, Windows Server 2012 R2, Windows Server 2016, and all versions of Windows 10. This update provides the same functionality in a more secure and reliable way.</p> Microsoft Graphics Component Microsoft Yes CVE-2017-0014 10816 10855 10729 10735 10789 10788 10852 10853 10047 10048 10481 10482 10484 10050 10051 10049 10378 10379 10483 10543 10521 10522 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10729 Remote Code Execution 10735 Remote Code Execution 10789 Remote Code Execution 10788 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10047 Remote Code Execution 10048 Remote Code Execution 10481 Remote Code Execution 10482 Remote Code Execution 10484 Remote Code Execution 10050 Remote Code Execution 10051 Remote Code Execution 10049 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 10521 Remote Code Execution 10522 Critical 10816 Critical 10855 Critical 10729 Critical 10735 Critical 10789 Critical 10788 Critical 10852 Critical 10853 Critical 10047 Critical 10048 Critical 10481 Critical 10482 Critical 10484 Critical 10050 Critical 10051 Critical 10049 Critical 10378 Critical 10379 Critical 10483 Critical 10543 Critical 10521 Critical 10522 Publicly Disclosed:Yes;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation More Likely;DOS:N/A 6.4 5.8 CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O 10816 6.4 5.8 CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O 10855 7.5 6.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O 10729 7.5 6.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O 10735 7.5 6.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O 10789 7.5 6.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O 10788 7.5 6.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O 10852 7.5 6.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O 10853 7.5 6.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O 10047 7.5 6.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O 10048 7.5 6.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O 10481 7.5 6.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O 10482 7.5 6.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O 10484 6.4 5.8 CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O 10050 6.4 5.8 CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O 10051 6.4 5.8 CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O 10049 6.4 5.8 CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O 10378 6.4 5.8 CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O 10379 6.4 5.8 CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O 10483 6.4 5.8 CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O 10543 4013429 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013429 3213986 10816 10855 10852 10853 Yes Security Update https://support.microsoft.com/en-us/kb/4013429 10816 10855 10852 10853 4013429 4012606 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012606 3210720 10729 10735 Yes Security Update https://support.microsoft.com/en-us/kb/4012606 10729 10735 4012606 4013198 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013198 3210721 10789 10788 Yes Security Update https://support.microsoft.com/en-us/kb/4013198 10789 10788 4013198 4012215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012215 3212646 10047 10048 10050 10051 10049 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012215 10047 10048 10050 10051 10049 4012215 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10047 10050 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;custerr.dll;vmswitch.sys;msxml3.dll;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10047 10050 4012212 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10048 10051 10049 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10048 10051 10049 4012212 4012216 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012216 3205401 10481 10482 10483 10543 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012216 10481 10482 10483 10543 4012216 4012213 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012213 10481 10482 10483 10543 msxpspcl6.dll;msxpsps.dll;hvax64.exe;hvix64.exe;srv.sys;quartz.dll;n/a;win32k.sys;gdiplus.dll;gdi32.dll;icm32.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;dnsapi.dll;msxml3.dll;custerr.dll;vmswitch.sys;dnsrslvr.dll;mrxsmb20.sys;mrxsmb.sys;dxgkrnl.sys;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012213 10481 10482 10483 10543 4012213 4012216 3205401 10484 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012216 10484 4012216 4012217 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012217 3205409 10378 10379 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012217 10378 10379 4012217 4012214 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012214 MS16-110, 3187754 10378 10379 n/a;msxpspcl6.dll;msxpsps.dll;srv.sys;win32k.sys;gdiplus.dll;gdi32.dll;icm32.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dxgkrnl.sys 0001-01-01T00:00:00 Security Only https://support.microsoft.com/en-us/help/4012214 10378 10379 4012214 3178688 https://www.microsoft.com/download/details.aspx?familyid=06da473b-3988-404b-a4e7-d3699be50817 2889841 10521 Maybe Security Update https://support.microsoft.com/kb/3178688 10521 3178688 3178688 https://www.microsoft.com/download/details.aspx?familyid=758fdde4-0f67-49e3-9732-220f340e94ce 2889841 10522 Maybe Security Update https://support.microsoft.com/kb/3178688 10522 3178688 Hossein Lotfi, <a href="http://www.flexerasoftware.com/enterprise/company/about/secunia-research/">Secunia Research at Flexera Software</a> 1.0 2017-03-14T07:00:00 <p>Information published.</p> Scripting Engine Memory Corruption Vulnerability <p>A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p> <p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Internet Explorer and then convince a user to view the website. An attacker could also embed an ActiveX control marked &quot;safe for initialization&quot; in an application or Microsoft Office document that hosts the IE rendering engine. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p> <p>The security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.</p> Microsoft Browsers Microsoft Yes CVE-2017-0141 10724-10729 10724-10735 10724-10789 10724-10788 10724-10852 10724-10853 Remote Code Execution 10724-10729 Remote Code Execution 10724-10735 Remote Code Execution 10724-10789 Remote Code Execution 10724-10788 Remote Code Execution 10724-10852 Remote Code Execution 10724-10853 Critical 10724-10729 Critical 10724-10735 Critical 10724-10789 Critical 10724-10788 Critical 10724-10852 Critical 10724-10853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A;DOS:N/A 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10729 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10735 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10789 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10788 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10852 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10853 4012606 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012606 3210720 10724-10729 10724-10735 Yes Security Update https://support.microsoft.com/en-us/kb/4012606 10724-10729 10724-10735 4012606 4013198 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013198 3210721 10724-10789 10724-10788 Yes Security Update https://support.microsoft.com/en-us/kb/4013198 10724-10789 10724-10788 4013198 4013429 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013429 3213986 10724-10852 10724-10853 Yes Security Update https://support.microsoft.com/en-us/kb/4013429 10724-10852 10724-10853 4013429 Semmle Inc 1.0 2017-03-14T07:00:00 <p>Information published.</p> Windows Uniscribe Information Disclosure Vulnerability <p>An information disclosure vulnerability exists when Windows Uniscribe improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.</p> <p>There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document or by convincing a user to visit an untrusted webpage.</p> <p>The update addresses the vulnerability by correcting how Windows Uniscribe handles objects in memory.</p> Windows Uniscribe Microsoft Yes CVE-2017-0128 10047 10048 9312 10287 9311 9318 9344 10050 10051 10049 4393 9316 Information Disclosure 10047 Information Disclosure 10048 Information Disclosure 9312 Information Disclosure 10287 Information Disclosure 9311 Information Disclosure 9318 Information Disclosure 9344 Information Disclosure 10050 Information Disclosure 10051 Information Disclosure 10049 Information Disclosure 4393 Information Disclosure 9316 Important 10047 Important 10048 Important 9312 Important 10287 Important 9311 Important 9318 Important 9344 Important 10050 Important 10051 Important 10049 Important 4393 Important 9316 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A;Older Software Release:Exploitation Unlikely;DOS:N/A 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10047 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10048 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9312 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10287 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9311 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9318 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9344 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10050 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10051 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10049 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 4393 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9316 4012215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012215 3212646 10047 10048 10050 10051 10049 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012215 10047 10048 10050 10051 10049 4012215 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10047 10050 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;custerr.dll;vmswitch.sys;msxml3.dll;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10047 10050 4012212 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10048 10051 10049 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10048 10051 10049 4012212 4012583 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012583 3196348 9312 10287 9311 9318 9344 4393 9316 gdiplus.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll 0001-01-01T00:00:00 Yes Security Update https://support.microsoft.com/en-us/kb/4012583 9312 10287 9311 9318 9344 4393 9316 4012583 Mateusz Jurczyk of <a href="http://www.google.com/">Google Project Zero</a> 1.0 2017-03-14T07:00:00 <p>Information published.</p> Windows Uniscribe Information Disclosure Vulnerability <p>An information disclosure vulnerability exists when Windows Uniscribe improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.</p> <p>There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document or by convincing a user to visit an untrusted webpage.</p> <p>The update addresses the vulnerability by correcting how Windows Uniscribe handles objects in memory.</p> Windows Uniscribe Microsoft Yes CVE-2017-0127 10047 10048 9312 10287 9311 9318 9344 10050 10051 10049 4393 9316 Information Disclosure 10047 Information Disclosure 10048 Information Disclosure 9312 Information Disclosure 10287 Information Disclosure 9311 Information Disclosure 9318 Information Disclosure 9344 Information Disclosure 10050 Information Disclosure 10051 Information Disclosure 10049 Information Disclosure 4393 Information Disclosure 9316 Important 10047 Important 10048 Important 9312 Important 10287 Important 9311 Important 9318 Important 9344 Important 10050 Important 10051 Important 10049 Important 4393 Important 9316 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A;Older Software Release:Exploitation Unlikely;DOS:N/A 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10047 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10048 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9312 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10287 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9311 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9318 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9344 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10050 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10051 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10049 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 4393 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9316 4012215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012215 3212646 10047 10048 10050 10051 10049 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012215 10047 10048 10050 10051 10049 4012215 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10047 10050 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;custerr.dll;vmswitch.sys;msxml3.dll;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10047 10050 4012212 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10048 10051 10049 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10048 10051 10049 4012212 4012583 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012583 3196348 9312 10287 9311 9318 9344 4393 9316 gdiplus.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll 0001-01-01T00:00:00 Yes Security Update https://support.microsoft.com/en-us/kb/4012583 9312 10287 9311 9318 9344 4393 9316 4012583 Mateusz Jurczyk of <a href="http://www.google.com/">Google Project Zero</a> 1.0 2017-03-14T07:00:00 <p>Information published.</p> Windows Uniscribe Information Disclosure Vulnerability <p>An information disclosure vulnerability exists when Windows Uniscribe improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.</p> <p>There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document or by convincing a user to visit an untrusted webpage.</p> <p>The update addresses the vulnerability by correcting how Windows Uniscribe handles objects in memory.</p> Windows Uniscribe Microsoft Yes CVE-2017-0126 9312 10287 9311 9318 9344 10050 10051 10049 4393 9316 10047 10048 Information Disclosure 9312 Information Disclosure 10287 Information Disclosure 9311 Information Disclosure 9318 Information Disclosure 9344 Information Disclosure 10050 Information Disclosure 10051 Information Disclosure 10049 Information Disclosure 4393 Information Disclosure 9316 Information Disclosure 10047 Information Disclosure 10048 Important 9312 Important 10287 Important 9311 Important 9318 Important 9344 Important 10050 Important 10051 Important 10049 Important 4393 Important 9316 Important 10047 Important 10048 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A;Older Software Release:Exploitation Unlikely;DOS:N/A 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9312 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10287 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9311 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9318 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9344 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10050 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10051 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10049 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 4393 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9316 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10047 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10048 4012583 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012583 3196348 9312 10287 9311 9318 9344 4393 9316 gdiplus.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll 0001-01-01T00:00:00 Yes Security Update https://support.microsoft.com/en-us/kb/4012583 9312 10287 9311 9318 9344 4393 9316 4012583 4012215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012215 3212646 10050 10051 10049 10047 10048 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012215 10050 10051 10049 10047 10048 4012215 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10050 10047 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;custerr.dll;vmswitch.sys;msxml3.dll;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10050 10047 4012212 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10051 10049 10048 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10051 10049 10048 4012212 Mateusz Jurczyk of <a href="http://www.google.com/">Google Project Zero</a> 1.0 2017-03-14T07:00:00 <p>Information published.</p> Microsoft Edge Security Feature Bypass Vulnerability <p>A security feature bypass vulnerability exists when Microsoft Edge improperly handles requests of different origins. The vulnerability allows Microsoft Edge to bypass Same-Origin Policy (SOP) restrictions, and to allow requests that should otherwise be ignored. An attacker who successfully exploited the vulnerability could force the browser to send data that would otherwise be restricted.</p> <p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft Edge and then convince a user to view the website. The attacker could also take advantage of compromised websites, and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p> <p>The security update addresses the vulnerability by modifying how affected Microsoft Edge handles different-origin requests.</p> Microsoft Edge (HTML-based) Microsoft Yes CVE-2017-0140 10724-10852 10724-10853 Security Feature Bypass 10724-10852 Security Feature Bypass 10724-10853 Important 10724-10852 Important 10724-10853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:N/A;DOS:N/A 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10852 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10853 4013429 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013429 3213986 10724-10852 10724-10853 Yes Security Update https://support.microsoft.com/en-us/kb/4013429 10724-10852 10724-10853 4013429 Yorick Koster of <a href="https://securify.nl/">Securify B.V.</a> 1.0 2017-03-14T07:00:00 <p>Information published.</p> Scripting Engine Memory Corruption Vulnerability <p>A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p> <p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Internet Explorer and then convince a user to view the website. An attacker could also embed an ActiveX control marked &quot;safe for initialization&quot; in an application or Microsoft Office document that hosts the IE rendering engine. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p> <p>The security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.</p> Microsoft Browsers Microsoft Yes CVE-2017-0138 10724-10729 10724-10735 10724-10789 10724-10788 10724-10852 10724-10853 Remote Code Execution 10724-10729 Remote Code Execution 10724-10735 Remote Code Execution 10724-10789 Remote Code Execution 10724-10788 Remote Code Execution 10724-10852 Remote Code Execution 10724-10853 Critical 10724-10729 Critical 10724-10735 Critical 10724-10789 Critical 10724-10788 Critical 10724-10852 Critical 10724-10853 Publicly Disclosed:Yes;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:N/A;DOS:N/A 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10729 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10735 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10789 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10788 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10852 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10853 4012606 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012606 3210720 10724-10729 10724-10735 Yes Security Update https://support.microsoft.com/en-us/kb/4012606 10724-10729 10724-10735 4012606 4013198 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013198 3210721 10724-10789 10724-10788 Yes Security Update https://support.microsoft.com/en-us/kb/4013198 10724-10789 10724-10788 4013198 4013429 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013429 3213986 10724-10852 10724-10853 Yes Security Update https://support.microsoft.com/en-us/kb/4013429 10724-10852 10724-10853 4013429 Scott Bell of Security-Assessment.com 1.0 2017-03-14T07:00:00 <p>Information published.</p> Scripting Engine Memory Corruption Vulnerability <p>A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p> <p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Internet Explorer and then convince a user to view the website. An attacker could also embed an ActiveX control marked &quot;safe for initialization&quot; in an application or Microsoft Office document that hosts the IE rendering engine. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p> <p>The security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.</p> Microsoft Edge (HTML-based) Microsoft Yes CVE-2017-0137 10724-10729 10724-10735 10724-10789 10724-10788 10724-10852 10724-10853 Remote Code Execution 10724-10729 Remote Code Execution 10724-10735 Remote Code Execution 10724-10789 Remote Code Execution 10724-10788 Remote Code Execution 10724-10852 Remote Code Execution 10724-10853 Critical 10724-10729 Critical 10724-10735 Critical 10724-10789 Critical 10724-10788 Critical 10724-10852 Critical 10724-10853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A;DOS:N/A 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10729 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10735 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10789 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10788 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10852 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10853 4012606 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012606 3210720 10724-10729 10724-10735 Yes Security Update https://support.microsoft.com/en-us/kb/4012606 10724-10729 10724-10735 4012606 4013198 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013198 3210721 10724-10789 10724-10788 Yes Security Update https://support.microsoft.com/en-us/kb/4013198 10724-10789 10724-10788 4013198 4013429 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013429 3213986 10724-10852 10724-10853 Yes Security Update https://support.microsoft.com/en-us/kb/4013429 10724-10852 10724-10853 4013429 Nicolas Joly of MSRCE UK 1.0 2017-03-14T07:00:00 <p>Information published.</p> Scripting Engine Memory Corruption Vulnerability <p>A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p> <p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Internet Explorer and then convince a user to view the website. An attacker could also embed an ActiveX control marked &quot;safe for initialization&quot; in an application or Microsoft Office document that hosts the IE rendering engine. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p> <p>The security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.</p> Microsoft Edge (HTML-based) Microsoft Yes CVE-2017-0136 10724-10852 10724-10853 Remote Code Execution 10724-10852 Remote Code Execution 10724-10853 Critical 10724-10852 Critical 10724-10853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A;DOS:N/A 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10852 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10853 4013429 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013429 3213986 10724-10852 10724-10853 Yes Security Update https://support.microsoft.com/en-us/kb/4013429 10724-10852 10724-10853 4013429 Michael Holman, Microsoft Chakra Core Team 1.0 2017-03-14T07:00:00 <p>Information published.</p> Microsoft Edge Security Feature Bypass Vulnerability <p>A security feature bypass vulnerability exists when Microsoft Edge improperly handles requests of different origins. The vulnerability allows Microsoft Edge to bypass Same-Origin Policy (SOP) restrictions, and to allow requests that should otherwise be ignored. An attacker who successfully exploited the vulnerability could force the browser to send data that would otherwise be restricted.</p> <p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft Edge and then convince a user to view the website. The attacker could also take advantage of compromised websites, and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p> <p>The security update addresses the vulnerability by modifying how affected Microsoft Edge handles different-origin requests.</p> Microsoft Edge (HTML-based) Microsoft Yes CVE-2017-0135 10724-10729 10724-10735 10724-10789 10724-10788 10724-10852 10724-10853 Security Feature Bypass 10724-10729 Security Feature Bypass 10724-10735 Security Feature Bypass 10724-10789 Security Feature Bypass 10724-10788 Security Feature Bypass 10724-10852 Security Feature Bypass 10724-10853 Moderate 10724-10729 Moderate 10724-10735 Moderate 10724-10789 Moderate 10724-10788 Moderate 10724-10852 Moderate 10724-10853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely;Older Software Release:N/A;DOS:N/A 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10729 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10735 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10789 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10788 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10852 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10853 4012606 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012606 3210720 10724-10729 10724-10735 Yes Security Update https://support.microsoft.com/en-us/kb/4012606 10724-10729 10724-10735 4012606 4013198 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013198 3210721 10724-10789 10724-10788 Yes Security Update https://support.microsoft.com/en-us/kb/4013198 10724-10789 10724-10788 4013198 4013429 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013429 3213986 10724-10852 10724-10853 Yes Security Update https://support.microsoft.com/en-us/kb/4013429 10724-10852 10724-10853 4013429 Xiaoyin Liu (<a href="https://twitter.com/general_nfs">@general_nfs</a>) 1.0 2017-03-14T07:00:00 <p>Information published.</p> Microsoft Edge Memory Corruption Vulnerability <p>A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory. The vulnerability could corrupt memory in such a way that enables an attacker to execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p> <p>An attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft Edge, and then convince a user to view the website. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements by adding specially crafted content that could exploit the vulnerability. In all cases, however, an attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically by way of enticement in an email or Instant Messenger message, or by getting them to open an attachment sent through email.</p> <p>The security update addresses the vulnerability by modifying how Microsoft Edge handles objects in memory.</p> Microsoft Edge (HTML-based) Microsoft Yes CVE-2017-0134 10724-10729 10724-10735 10724-10789 10724-10788 10724-10852 10724-10853 Remote Code Execution 10724-10729 Remote Code Execution 10724-10735 Remote Code Execution 10724-10789 Remote Code Execution 10724-10788 Remote Code Execution 10724-10852 Remote Code Execution 10724-10853 Critical 10724-10729 Critical 10724-10735 Critical 10724-10789 Critical 10724-10788 Critical 10724-10852 Critical 10724-10853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A;DOS:N/A 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10729 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10735 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10789 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10788 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10852 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10853 4012606 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012606 3210720 10724-10729 10724-10735 Yes Security Update https://support.microsoft.com/en-us/kb/4012606 10724-10729 10724-10735 4012606 4013198 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013198 3210721 10724-10789 10724-10788 Yes Security Update https://support.microsoft.com/en-us/kb/4013198 10724-10789 10724-10788 4013198 4013429 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013429 3213986 10724-10852 10724-10853 Yes Security Update https://support.microsoft.com/en-us/kb/4013429 10724-10852 10724-10853 4013429 Jordan Rabet, Microsoft Offensive Security Research Team 1.0 2017-03-14T07:00:00 <p>Information published.</p> Scripting Engine Memory Corruption Vulnerability <p>A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p> <p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Internet Explorer and then convince a user to view the website. An attacker could also embed an ActiveX control marked &quot;safe for initialization&quot; in an application or Microsoft Office document that hosts the IE rendering engine. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p> <p>The security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.</p> Microsoft Browsers Microsoft Yes CVE-2017-0133 10724-10789 10724-10788 10724-10852 10724-10853 Remote Code Execution 10724-10789 Remote Code Execution 10724-10788 Remote Code Execution 10724-10852 Remote Code Execution 10724-10853 Critical 10724-10789 Critical 10724-10788 Critical 10724-10852 Critical 10724-10853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A;DOS:N/A 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10789 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10788 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10852 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10853 4013198 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013198 3210721 10724-10789 10724-10788 Yes Security Update https://support.microsoft.com/en-us/kb/4013198 10724-10789 10724-10788 4013198 4013429 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013429 3213986 10724-10852 10724-10853 Yes Security Update https://support.microsoft.com/en-us/kb/4013429 10724-10852 10724-10853 4013429 Dhanesh Kizhakkinan of <a href="https://www.fireeye.com/">FireEye, Inc.</a> 1.0 2017-03-14T07:00:00 <p>Information published.</p> Scripting Engine Memory Corruption Vulnerability <p>A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p> <p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Internet Explorer and then convince a user to view the website. An attacker could also embed an ActiveX control marked &quot;safe for initialization&quot; in an application or Microsoft Office document that hosts the IE rendering engine. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p> <p>The security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.</p> Microsoft Edge (HTML-based) Microsoft Yes CVE-2017-0132 10724-10729 10724-10735 10724-10789 10724-10788 10724-10852 10724-10853 Remote Code Execution 10724-10729 Remote Code Execution 10724-10735 Remote Code Execution 10724-10789 Remote Code Execution 10724-10788 Remote Code Execution 10724-10852 Remote Code Execution 10724-10853 Critical 10724-10729 Critical 10724-10735 Critical 10724-10789 Critical 10724-10788 Critical 10724-10852 Critical 10724-10853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A;DOS:N/A 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10729 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10735 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10789 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10788 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10852 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10853 4012606 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012606 3210720 10724-10729 10724-10735 Yes Security Update https://support.microsoft.com/en-us/kb/4012606 10724-10729 10724-10735 4012606 4013198 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013198 3210721 10724-10789 10724-10788 Yes Security Update https://support.microsoft.com/en-us/kb/4013198 10724-10789 10724-10788 4013198 4013429 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013429 3213986 10724-10852 10724-10853 Yes Security Update https://support.microsoft.com/en-us/kb/4013429 10724-10852 10724-10853 4013429 Microsoft ChakraCore Team 1.0 2017-03-14T07:00:00 <p>Information published.</p> Scripting Engine Information Disclosure Vulnerability <p>An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Microsoft Edge. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.</p> <p>In a web-based attack scenario, an attacker could host a website in an attempt to exploit the vulnerability. In addition, compromised websites and websites that accept or host user-provided content could contain specially crafted content that could exploit the vulnerability. However, in all cases an attacker would have no way to force a user to view the attacker-controlled content. Instead, an attacker would have to convince a user to take action. For example, an attacker could trick a user into clicking a link that takes the user to the attacker's site.</p> <p>The security update addresses the vulnerability by changing how the scripting engine handles objects in memory.</p> Microsoft Edge (HTML-based) Microsoft Yes CVE-2017-0131 10724-10729 10724-10735 10724-10789 10724-10788 10724-10852 10724-10853 Remote Code Execution 10724-10729 Remote Code Execution 10724-10735 Remote Code Execution 10724-10789 Remote Code Execution 10724-10788 Remote Code Execution 10724-10852 Remote Code Execution 10724-10853 Important 10724-10729 Important 10724-10735 Important 10724-10789 Important 10724-10788 Important 10724-10852 Important 10724-10853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:N/A;DOS:N/A 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10729 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10735 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10789 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10788 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10852 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10853 4012606 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012606 3210720 10724-10729 10724-10735 Yes Security Update https://support.microsoft.com/en-us/kb/4012606 10724-10729 10724-10735 4012606 4013198 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013198 3210721 10724-10789 10724-10788 Yes Security Update https://support.microsoft.com/en-us/kb/4013198 10724-10789 10724-10788 4013198 4013429 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013429 3213986 10724-10852 10724-10853 Yes Security Update https://support.microsoft.com/en-us/kb/4013429 10724-10852 10724-10853 4013429 Dhanesh Kizhakkinan of <a href="https://www.fireeye.com/">FireEye, Inc.</a> 1.0 2017-03-14T07:00:00 <p>Information published.</p> Scripting Engine Memory Corruption Vulnerability <p>A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p> <p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Internet Explorer and then convince a user to view the website. An attacker could also embed an ActiveX control marked &quot;safe for initialization&quot; in an application or Microsoft Office document that hosts the IE rendering engine. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p> <p>The security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.</p> Internet Explorer Microsoft Yes CVE-2017-0130 10047 10048 10050 10051 10555-10378 10486-10481 10486-10482 10486-10483 10486-10484 10486-10729 10486-10735 10486-10789 10486-10788 10486-10852 10486-10853 10336-9316 10336-9312 10336-9318 10486-10816 Remote Code Execution 10047 Remote Code Execution 10048 Remote Code Execution 10050 Remote Code Execution 10051 Remote Code Execution 10555-10378 Remote Code Execution 10486-10481 Remote Code Execution 10486-10482 Remote Code Execution 10486-10483 Remote Code Execution 10486-10484 Remote Code Execution 10486-10729 Remote Code Execution 10486-10735 Remote Code Execution 10486-10789 Remote Code Execution 10486-10788 Remote Code Execution 10486-10852 Remote Code Execution 10486-10853 Remote Code Execution 10336-9316 Remote Code Execution 10336-9312 Remote Code Execution 10336-9318 Remote Code Execution 10486-10816 Critical 10047 Critical 10048 Critical 10050 Critical 10051 Moderate 10555-10378 Critical 10486-10481 Critical 10486-10482 Important 10486-10483 Critical 10486-10484 Critical 10486-10729 Critical 10486-10735 Critical 10486-10789 Critical 10486-10788 Critical 10486-10852 Critical 10486-10853 Critical 10336-9316 Moderate 10336-9312 Moderate 10336-9318 Critical 10486-10816 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A 7.5 6.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O 10047 7.5 6.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O 10048 7.5 6.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O 10050 7.5 6.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O 10051 6.4 5.8 CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10555-10378 7.5 6.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O 10486-10481 7.5 6.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O 10486-10482 6.4 5.8 CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10486-10483 7.5 6.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O 10486-10484 7.5 6.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O 10486-10729 7.5 6.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O 10486-10735 7.5 6.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O 10486-10789 7.5 6.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O 10486-10788 7.5 6.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O 10486-10852 7.5 6.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O 10486-10853 7.5 6.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O 10336-9316 6.4 5.8 CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10336-9312 6.4 5.8 CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10336-9318 6.4 5.8 CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10486-10816 4012215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012215 3212646 10047 10048 10050 10051 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012215 10047 10048 10050 10051 4012215 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10047 10050 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;custerr.dll;vmswitch.sys;msxml3.dll;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10047 10050 4012212 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10048 10051 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10048 10051 4012212 4012217 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012217 3205409 10555-10378 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012217 10555-10378 4012217 4012204 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012204 3203621 10555-10378 10486-10481 10486-10482 10486-10483 10336-9316 10336-9312 10336-9318 Yes IE Cumulative https://support.microsoft.com/en-us/kb/4012204 10555-10378 10486-10481 10486-10482 10486-10483 10336-9316 10336-9312 10336-9318 4012204 4012216 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012216 3205401 10486-10481 10486-10482 10486-10483 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012216 10486-10481 10486-10482 10486-10483 4012216 4012216 4014077 10486-10484 Monthly Rollup https://support.microsoft.com/en-us/help/4012216 10486-10484 4012216 4012606 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012606 3210720 10486-10729 10486-10735 Yes Security Update https://support.microsoft.com/en-us/kb/4012606 10486-10729 10486-10735 4012606 4013198 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013198 3210721 10486-10789 10486-10788 Yes Security Update https://support.microsoft.com/en-us/kb/4013198 10486-10789 10486-10788 4013198 4013429 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013429 3213986 10486-10852 10486-10853 10486-10816 Yes Security Update https://support.microsoft.com/en-us/kb/4013429 10486-10852 10486-10853 10486-10816 4013429 Scott Bell of Security-Assessment.com 1.0 2017-03-14T07:00:00 <p>Information published.</p> Windows Uniscribe Information Disclosure Vulnerability <p>An information disclosure vulnerability exists when Windows Uniscribe improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.</p> <p>There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document or by convincing a user to visit an untrusted webpage.</p> <p>The update addresses the vulnerability by correcting how Windows Uniscribe handles objects in memory.</p> Windows Uniscribe Microsoft Yes CVE-2017-0125 10047 10048 9312 10287 9311 9318 9344 10050 10051 10049 4393 9316 Information Disclosure 10047 Information Disclosure 10048 Information Disclosure 9312 Information Disclosure 10287 Information Disclosure 9311 Information Disclosure 9318 Information Disclosure 9344 Information Disclosure 10050 Information Disclosure 10051 Information Disclosure 10049 Information Disclosure 4393 Information Disclosure 9316 Important 10047 Important 10048 Important 9312 Important 10287 Important 9311 Important 9318 Important 9344 Important 10050 Important 10051 Important 10049 Important 4393 Important 9316 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A;Older Software Release:Exploitation Unlikely;DOS:N/A 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10047 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10048 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9312 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10287 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9311 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9318 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9344 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10050 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10051 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10049 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 4393 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9316 4012215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012215 3212646 10047 10048 10050 10051 10049 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012215 10047 10048 10050 10051 10049 4012215 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10047 10050 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;custerr.dll;vmswitch.sys;msxml3.dll;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10047 10050 4012212 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10048 10051 10049 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10048 10051 10049 4012212 4012583 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012583 3196348 9312 10287 9311 9318 9344 4393 9316 gdiplus.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll 0001-01-01T00:00:00 Yes Security Update https://support.microsoft.com/en-us/kb/4012583 9312 10287 9311 9318 9344 4393 9316 4012583 Mateusz Jurczyk of <a href="http://www.google.com/">Google Project Zero</a> 1.0 2017-03-14T07:00:00 <p>Information published.</p> Windows Uniscribe Information Disclosure Vulnerability <p>An information disclosure vulnerability exists when Windows Uniscribe improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.</p> <p>There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document or by convincing a user to visit an untrusted webpage.</p> <p>The update addresses the vulnerability by correcting how Windows Uniscribe handles objects in memory.</p> Windows Uniscribe Microsoft Yes CVE-2017-0124 10047 10048 9312 10287 9311 9318 9344 10050 10051 10049 4393 9316 Information Disclosure 10047 Information Disclosure 10048 Information Disclosure 9312 Information Disclosure 10287 Information Disclosure 9311 Information Disclosure 9318 Information Disclosure 9344 Information Disclosure 10050 Information Disclosure 10051 Information Disclosure 10049 Information Disclosure 4393 Information Disclosure 9316 Important 10047 Important 10048 Important 9312 Important 10287 Important 9311 Important 9318 Important 9344 Important 10050 Important 10051 Important 10049 Important 4393 Important 9316 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A;Older Software Release:Exploitation Unlikely;DOS:N/A 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10047 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10048 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9312 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10287 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9311 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9318 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9344 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10050 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10051 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10049 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 4393 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9316 4012215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012215 3212646 10047 10048 10050 10051 10049 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012215 10047 10048 10050 10051 10049 4012215 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10047 10050 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;custerr.dll;vmswitch.sys;msxml3.dll;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10047 10050 4012212 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10048 10051 10049 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10048 10051 10049 4012212 4012583 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012583 3196348 9312 10287 9311 9318 9344 4393 9316 gdiplus.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll 0001-01-01T00:00:00 Yes Security Update https://support.microsoft.com/en-us/kb/4012583 9312 10287 9311 9318 9344 4393 9316 4012583 Mateusz Jurczyk of <a href="http://www.google.com/">Google Project Zero</a> 1.0 2017-03-14T07:00:00 <p>Information published.</p> Windows Uniscribe Information Disclosure Vulnerability <p>An information disclosure vulnerability exists when Windows Uniscribe improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.</p> <p>There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document or by convincing a user to visit an untrusted webpage.</p> <p>The update addresses the vulnerability by correcting how Windows Uniscribe handles objects in memory.</p> Windows Uniscribe Microsoft Yes CVE-2017-0123 10047 10048 9312 10287 9311 9318 9344 10050 10051 10049 4393 9316 Information Disclosure 10047 Information Disclosure 10048 Information Disclosure 9312 Information Disclosure 10287 Information Disclosure 9311 Information Disclosure 9318 Information Disclosure 9344 Information Disclosure 10050 Information Disclosure 10051 Information Disclosure 10049 Information Disclosure 4393 Information Disclosure 9316 Important 10047 Important 10048 Important 9312 Important 10287 Important 9311 Important 9318 Important 9344 Important 10050 Important 10051 Important 10049 Important 4393 Important 9316 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A;Older Software Release:Exploitation Unlikely;DOS:N/A 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10047 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10048 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9312 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10287 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9311 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9318 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9344 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10050 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10051 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10049 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 4393 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9316 4012215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012215 3212646 10047 10048 10050 10051 10049 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012215 10047 10048 10050 10051 10049 4012215 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10047 10050 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;custerr.dll;vmswitch.sys;msxml3.dll;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10047 10050 4012212 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10048 10051 10049 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10048 10051 10049 4012212 4012583 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012583 3196348 9312 10287 9311 9318 9344 4393 9316 gdiplus.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll 0001-01-01T00:00:00 Yes Security Update https://support.microsoft.com/en-us/kb/4012583 9312 10287 9311 9318 9344 4393 9316 4012583 Mateusz Jurczyk of <a href="http://www.google.com/">Google Project Zero</a> 1.0 2017-03-14T07:00:00 <p>Information published.</p> Windows Uniscribe Information Disclosure Vulnerability <p>An information disclosure vulnerability exists when Windows Uniscribe improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.</p> <p>There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document or by convincing a user to visit an untrusted webpage.</p> <p>The update addresses the vulnerability by correcting how Windows Uniscribe handles objects in memory.</p> Windows Uniscribe Microsoft Yes CVE-2017-0122 10047 10048 9312 10287 9311 9318 9344 10050 10051 10049 4393 9316 Information Disclosure 10047 Information Disclosure 10048 Information Disclosure 9312 Information Disclosure 10287 Information Disclosure 9311 Information Disclosure 9318 Information Disclosure 9344 Information Disclosure 10050 Information Disclosure 10051 Information Disclosure 10049 Information Disclosure 4393 Information Disclosure 9316 Important 10047 Important 10048 Important 9312 Important 10287 Important 9311 Important 9318 Important 9344 Important 10050 Important 10051 Important 10049 Important 4393 Important 9316 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A;Older Software Release:Exploitation Unlikely;DOS:N/A 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10047 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10048 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9312 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10287 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9311 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9318 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9344 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10050 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10051 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10049 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 4393 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9316 4012215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012215 3212646 10047 10048 10050 10051 10049 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012215 10047 10048 10050 10051 10049 4012215 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10047 10050 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;custerr.dll;vmswitch.sys;msxml3.dll;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10047 10050 4012212 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10048 10051 10049 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10048 10051 10049 4012212 4012583 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012583 3196348 9312 10287 9311 9318 9344 4393 9316 gdiplus.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll 0001-01-01T00:00:00 Yes Security Update https://support.microsoft.com/en-us/kb/4012583 9312 10287 9311 9318 9344 4393 9316 4012583 Mateusz Jurczyk of <a href="http://www.google.com/">Google Project Zero</a> 1.0 2017-03-14T07:00:00 <p>Information published.</p> Windows Uniscribe Information Disclosure Vulnerability <p>An information disclosure vulnerability exists when Windows Uniscribe improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.</p> <p>There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document or by convincing a user to visit an untrusted webpage.</p> <p>The update addresses the vulnerability by correcting how Windows Uniscribe handles objects in memory.</p> Windows Uniscribe Microsoft Yes CVE-2017-0121 10729 10735 10789 10788 10852 10853 10047 10048 10481 10482 10484 9312 10287 9311 9318 9344 10050 10051 10049 10378 10379 10483 10543 4393 9316 10816 10855 Information Disclosure 10729 Information Disclosure 10735 Information Disclosure 10789 Information Disclosure 10788 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10047 Information Disclosure 10048 Information Disclosure 10481 Information Disclosure 10482 Information Disclosure 10484 Information Disclosure 9312 Information Disclosure 10287 Information Disclosure 9311 Information Disclosure 9318 Information Disclosure 9344 Information Disclosure 10050 Information Disclosure 10051 Information Disclosure 10049 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 4393 Information Disclosure 9316 Information Disclosure 10816 Information Disclosure 10855 Important 10729 Important 10735 Important 10789 Important 10788 Important 10852 Important 10853 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 9312 Important 10287 Important 9311 Important 9318 Important 9344 Important 10050 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Important 4393 Important 9316 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10729 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10735 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10789 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10788 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10852 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10853 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10047 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10048 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10481 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10482 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10484 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9312 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10287 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9311 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9318 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9344 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10050 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10051 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10049 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10378 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10379 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10483 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10543 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 4393 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9316 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10816 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10855 4012606 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012606 3210720 10729 10735 Yes Security Update https://support.microsoft.com/en-us/kb/4012606 10729 10735 4012606 4013198 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013198 3210721 10789 10788 Yes Security Update https://support.microsoft.com/en-us/kb/4013198 10789 10788 4013198 4013429 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013429 3213986 10852 10853 10816 10855 Yes Security Update https://support.microsoft.com/en-us/kb/4013429 10852 10853 10816 10855 4013429 4012215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012215 3212646 10047 10048 10050 10051 10049 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012215 10047 10048 10050 10051 10049 4012215 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10047 10050 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;custerr.dll;vmswitch.sys;msxml3.dll;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10047 10050 4012212 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10048 10051 10049 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10048 10051 10049 4012212 4012216 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012216 3205401 10481 10482 10483 10543 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012216 10481 10482 10483 10543 4012216 4012213 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012213 10481 10482 10483 10543 msxpspcl6.dll;msxpsps.dll;hvax64.exe;hvix64.exe;srv.sys;quartz.dll;n/a;win32k.sys;gdiplus.dll;gdi32.dll;icm32.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;dnsapi.dll;msxml3.dll;custerr.dll;vmswitch.sys;dnsrslvr.dll;mrxsmb20.sys;mrxsmb.sys;dxgkrnl.sys;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012213 10481 10482 10483 10543 4012213 4012216 3205401 10484 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012216 10484 4012216 4012583 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012583 3196348 9312 10287 9311 9318 9344 4393 9316 gdiplus.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll 0001-01-01T00:00:00 Yes Security Update https://support.microsoft.com/en-us/kb/4012583 9312 10287 9311 9318 9344 4393 9316 4012583 4012217 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012217 3205409 10378 10379 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012217 10378 10379 4012217 4012214 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012214 MS16-110, 3187754 10378 10379 n/a;msxpspcl6.dll;msxpsps.dll;srv.sys;win32k.sys;gdiplus.dll;gdi32.dll;icm32.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dxgkrnl.sys 0001-01-01T00:00:00 Security Only https://support.microsoft.com/en-us/help/4012214 10378 10379 4012214 Mateusz Jurczyk of <a href="http://www.google.com/">Google Project Zero</a> 1.0 2017-03-14T07:00:00 <p>Information published.</p> Windows Uniscribe Information Disclosure Vulnerability <p>An information disclosure vulnerability exists when Windows Uniscribe improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.</p> <p>There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document or by convincing a user to visit an untrusted webpage.</p> <p>The update addresses the vulnerability by correcting how Windows Uniscribe handles objects in memory.</p> Windows Uniscribe Microsoft Yes CVE-2017-0120 10047 10048 9312 10287 9311 9318 9344 10050 10051 10049 4393 9316 Information Disclosure 10047 Information Disclosure 10048 Information Disclosure 9312 Information Disclosure 10287 Information Disclosure 9311 Information Disclosure 9318 Information Disclosure 9344 Information Disclosure 10050 Information Disclosure 10051 Information Disclosure 10049 Information Disclosure 4393 Information Disclosure 9316 Important 10047 Important 10048 Important 9312 Important 10287 Important 9311 Important 9318 Important 9344 Important 10050 Important 10051 Important 10049 Important 4393 Important 9316 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A;Older Software Release:Exploitation Unlikely;DOS:N/A 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10047 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10048 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9312 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10287 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9311 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9318 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9344 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10050 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10051 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10049 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 4393 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9316 4012215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012215 3212646 10047 10048 10050 10051 10049 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012215 10047 10048 10050 10051 10049 4012215 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10047 10050 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;custerr.dll;vmswitch.sys;msxml3.dll;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10047 10050 4012212 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10048 10051 10049 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10048 10051 10049 4012212 4012583 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012583 3196348 9312 10287 9311 9318 9344 4393 9316 gdiplus.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll 0001-01-01T00:00:00 Yes Security Update https://support.microsoft.com/en-us/kb/4012583 9312 10287 9311 9318 9344 4393 9316 4012583 Mateusz Jurczyk of <a href="http://www.google.com/">Google Project Zero</a> 1.0 2017-03-14T07:00:00 <p>Information published.</p> Windows Uniscribe Information Disclosure Vulnerability <p>An information disclosure vulnerability exists when Windows Uniscribe improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.</p> <p>There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document or by convincing a user to visit an untrusted webpage.</p> <p>The update addresses the vulnerability by correcting how Windows Uniscribe handles objects in memory.</p> Windows Uniscribe Microsoft Yes CVE-2017-0119 10047 10048 9312 10287 9311 9318 9344 10050 10051 10049 4393 9316 Information Disclosure 10047 Information Disclosure 10048 Information Disclosure 9312 Information Disclosure 10287 Information Disclosure 9311 Information Disclosure 9318 Information Disclosure 9344 Information Disclosure 10050 Information Disclosure 10051 Information Disclosure 10049 Information Disclosure 4393 Information Disclosure 9316 Important 10047 Important 10048 Important 9312 Important 10287 Important 9311 Important 9318 Important 9344 Important 10050 Important 10051 Important 10049 Important 4393 Important 9316 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A;Older Software Release:Exploitation Unlikely;DOS:N/A 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10047 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10048 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9312 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10287 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9311 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9318 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9344 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10050 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10051 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10049 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 4393 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9316 4012215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012215 3212646 10047 10048 10050 10051 10049 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012215 10047 10048 10050 10051 10049 4012215 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10047 10050 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;custerr.dll;vmswitch.sys;msxml3.dll;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10047 10050 4012212 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10048 10051 10049 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10048 10051 10049 4012212 4012583 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012583 3196348 9312 10287 9311 9318 9344 4393 9316 gdiplus.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll 0001-01-01T00:00:00 Yes Security Update https://support.microsoft.com/en-us/kb/4012583 9312 10287 9311 9318 9344 4393 9316 4012583 Mateusz Jurczyk of <a href="http://www.google.com/">Google Project Zero</a> 1.0 2017-03-14T07:00:00 <p>Information published.</p> Windows Uniscribe Information Disclosure Vulnerability <p>An information disclosure vulnerability exists when Windows Uniscribe improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.</p> <p>There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document or by convincing a user to visit an untrusted webpage.</p> <p>The update addresses the vulnerability by correcting how Windows Uniscribe handles objects in memory.</p> Windows Uniscribe Microsoft Yes CVE-2017-0118 10047 10048 10729 10735 10789 10788 10852 10853 10481 10482 10484 10378 10379 10483 10543 10816 10855 Information Disclosure 10047 Information Disclosure 10048 Information Disclosure 10729 Information Disclosure 10735 Information Disclosure 10789 Information Disclosure 10788 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10481 Information Disclosure 10482 Information Disclosure 10484 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 10816 Information Disclosure 10855 Important 10047 Important 10048 Important 10729 Important 10735 Important 10789 Important 10788 Important 10852 Important 10853 Important 10481 Important 10482 Important 10484 Important 10378 Important 10379 Important 10483 Important 10543 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely;Older Software Release:Exploitation Unlikely;DOS:N/A 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10047 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10048 4.4 4.0 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10729 4.4 4.0 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10735 4.4 4.0 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10789 4.4 4.0 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10788 4.4 4.0 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10852 4.4 4.0 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10853 4.4 4.0 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10481 4.4 4.0 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10482 4.4 4.0 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10484 4.4 4.0 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10378 4.4 4.0 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10379 4.4 4.0 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10483 4.4 4.0 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10543 4.4 4.0 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10816 4.4 4.0 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10855 4012215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012215 3212646 10047 10048 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012215 10047 10048 4012215 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10047 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;custerr.dll;vmswitch.sys;msxml3.dll;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10047 4012212 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10048 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10048 4012212 4012606 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012606 3210720 10729 10735 Yes Security Update https://support.microsoft.com/en-us/kb/4012606 10729 10735 4012606 4013198 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013198 3210721 10789 10788 Yes Security Update https://support.microsoft.com/en-us/kb/4013198 10789 10788 4013198 4013429 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013429 3213986 10852 10853 10816 10855 Yes Security Update https://support.microsoft.com/en-us/kb/4013429 10852 10853 10816 10855 4013429 4012216 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012216 3205401 10481 10482 10483 10543 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012216 10481 10482 10483 10543 4012216 4012213 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012213 10481 10482 10483 10543 msxpspcl6.dll;msxpsps.dll;hvax64.exe;hvix64.exe;srv.sys;quartz.dll;n/a;win32k.sys;gdiplus.dll;gdi32.dll;icm32.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;dnsapi.dll;msxml3.dll;custerr.dll;vmswitch.sys;dnsrslvr.dll;mrxsmb20.sys;mrxsmb.sys;dxgkrnl.sys;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012213 10481 10482 10483 10543 4012213 4012216 3205401 10484 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012216 10484 4012216 4012217 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012217 3205409 10378 10379 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012217 10378 10379 4012217 4012214 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012214 MS16-110, 3187754 10378 10379 n/a;msxpspcl6.dll;msxpsps.dll;srv.sys;win32k.sys;gdiplus.dll;gdi32.dll;icm32.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dxgkrnl.sys 0001-01-01T00:00:00 Security Only https://support.microsoft.com/en-us/help/4012214 10378 10379 4012214 Mateusz Jurczyk of <a href="http://www.google.com/">Google Project Zero</a> 1.0 2017-03-14T07:00:00 <p>Information published.</p> Windows Uniscribe Information Disclosure Vulnerability <p>An information disclosure vulnerability exists when Windows Uniscribe improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.</p> <p>There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document or by convincing a user to visit an untrusted webpage.</p> <p>The update addresses the vulnerability by correcting how Windows Uniscribe handles objects in memory.</p> Windows Uniscribe Microsoft Yes CVE-2017-0117 10047 10048 9312 10287 9311 9318 9344 10050 10051 10049 4393 9316 Information Disclosure 10047 Information Disclosure 10048 Information Disclosure 9312 Information Disclosure 10287 Information Disclosure 9311 Information Disclosure 9318 Information Disclosure 9344 Information Disclosure 10050 Information Disclosure 10051 Information Disclosure 10049 Information Disclosure 4393 Information Disclosure 9316 Important 10047 Important 10048 Important 9312 Important 10287 Important 9311 Important 9318 Important 9344 Important 10050 Important 10051 Important 10049 Important 4393 Important 9316 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A;Older Software Release:Exploitation Unlikely;DOS:N/A 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10047 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10048 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9312 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10287 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9311 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9318 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9344 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10050 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10051 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10049 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 4393 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9316 4012215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012215 3212646 10047 10048 10050 10051 10049 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012215 10047 10048 10050 10051 10049 4012215 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10047 10050 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;custerr.dll;vmswitch.sys;msxml3.dll;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10047 10050 4012212 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10048 10051 10049 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10048 10051 10049 4012212 4012583 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012583 3196348 9312 10287 9311 9318 9344 4393 9316 gdiplus.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll 0001-01-01T00:00:00 Yes Security Update https://support.microsoft.com/en-us/kb/4012583 9312 10287 9311 9318 9344 4393 9316 4012583 Mateusz Jurczyk of <a href="http://www.google.com/">Google Project Zero</a> 1.0 2017-03-14T07:00:00 <p>Information published.</p> Windows Uniscribe Information Disclosure Vulnerability <p>An information disclosure vulnerability exists when Windows Uniscribe improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.</p> <p>There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document or by convincing a user to visit an untrusted webpage.</p> <p>The update addresses the vulnerability by correcting how Windows Uniscribe handles objects in memory.</p> Windows Uniscribe Microsoft Yes CVE-2017-0116 10047 10048 9312 10287 9311 9318 9344 10050 10051 10049 4393 9316 Information Disclosure 10047 Information Disclosure 10048 Information Disclosure 9312 Information Disclosure 10287 Information Disclosure 9311 Information Disclosure 9318 Information Disclosure 9344 Information Disclosure 10050 Information Disclosure 10051 Information Disclosure 10049 Information Disclosure 4393 Information Disclosure 9316 Important 10047 Important 10048 Important 9312 Important 10287 Important 9311 Important 9318 Important 9344 Important 10050 Important 10051 Important 10049 Important 4393 Important 9316 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A;Older Software Release:Exploitation Unlikely;DOS:N/A 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10047 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10048 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9312 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10287 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9311 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9318 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9344 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10050 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10051 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10049 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 4393 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9316 4012215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012215 3212646 10047 10048 10050 10051 10049 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012215 10047 10048 10050 10051 10049 4012215 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10047 10050 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;custerr.dll;vmswitch.sys;msxml3.dll;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10047 10050 4012212 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10048 10051 10049 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10048 10051 10049 4012212 4012583 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012583 3196348 9312 10287 9311 9318 9344 4393 9316 gdiplus.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll 0001-01-01T00:00:00 Yes Security Update https://support.microsoft.com/en-us/kb/4012583 9312 10287 9311 9318 9344 4393 9316 4012583 Mateusz Jurczyk of <a href="http://www.google.com/">Google Project Zero</a> 1.0 2017-03-14T07:00:00 <p>Information published.</p> Windows Uniscribe Information Disclosure Vulnerability <p>An information disclosure vulnerability exists when Windows Uniscribe improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.</p> <p>There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document or by convincing a user to visit an untrusted webpage.</p> <p>The update addresses the vulnerability by correcting how Windows Uniscribe handles objects in memory.</p> Windows Uniscribe Microsoft Yes CVE-2017-0115 10047 10048 9312 10287 9311 9318 9344 10050 10051 10049 4393 9316 Information Disclosure 10047 Information Disclosure 10048 Information Disclosure 9312 Information Disclosure 10287 Information Disclosure 9311 Information Disclosure 9318 Information Disclosure 9344 Information Disclosure 10050 Information Disclosure 10051 Information Disclosure 10049 Information Disclosure 4393 Information Disclosure 9316 Important 10047 Important 10048 Important 9312 Important 10287 Important 9311 Important 9318 Important 9344 Important 10050 Important 10051 Important 10049 Important 4393 Important 9316 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A;Older Software Release:Exploitation Unlikely;DOS:N/A 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10047 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10048 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9312 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10287 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9311 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9318 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9344 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10050 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10051 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10049 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 4393 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9316 4012215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012215 3212646 10047 10048 10050 10051 10049 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012215 10047 10048 10050 10051 10049 4012215 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10047 10050 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;custerr.dll;vmswitch.sys;msxml3.dll;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10047 10050 4012212 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10048 10051 10049 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10048 10051 10049 4012212 4012583 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012583 3196348 9312 10287 9311 9318 9344 4393 9316 gdiplus.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll 0001-01-01T00:00:00 Yes Security Update https://support.microsoft.com/en-us/kb/4012583 9312 10287 9311 9318 9344 4393 9316 4012583 Mateusz Jurczyk of <a href="http://www.google.com/">Google Project Zero</a> 1.0 2017-03-14T07:00:00 <p>Information published.</p> Windows Uniscribe Information Disclosure Vulnerability <p>An information disclosure vulnerability exists when Windows Uniscribe improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.</p> <p>There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document or by convincing a user to visit an untrusted webpage.</p> <p>The update addresses the vulnerability by correcting how Windows Uniscribe handles objects in memory.</p> Windows Uniscribe Microsoft Yes CVE-2017-0114 10047 10048 9312 10287 9311 9318 9344 10050 10051 10049 4393 9316 Information Disclosure 10047 Information Disclosure 10048 Information Disclosure 9312 Information Disclosure 10287 Information Disclosure 9311 Information Disclosure 9318 Information Disclosure 9344 Information Disclosure 10050 Information Disclosure 10051 Information Disclosure 10049 Information Disclosure 4393 Information Disclosure 9316 Important 10047 Important 10048 Important 9312 Important 10287 Important 9311 Important 9318 Important 9344 Important 10050 Important 10051 Important 10049 Important 4393 Important 9316 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A;Older Software Release:Exploitation Unlikely;DOS:N/A 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10047 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10048 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9312 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10287 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9311 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9318 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9344 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10050 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10051 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10049 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 4393 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9316 4012215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012215 3212646 10047 10048 10050 10051 10049 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012215 10047 10048 10050 10051 10049 4012215 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10047 10050 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;custerr.dll;vmswitch.sys;msxml3.dll;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10047 10050 4012212 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10048 10051 10049 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10048 10051 10049 4012212 4012583 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012583 3196348 9312 10287 9311 9318 9344 4393 9316 gdiplus.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll 0001-01-01T00:00:00 Yes Security Update https://support.microsoft.com/en-us/kb/4012583 9312 10287 9311 9318 9344 4393 9316 4012583 Mateusz Jurczyk of <a href="http://www.google.com/">Google Project Zero</a> 1.0 2017-03-14T07:00:00 <p>Information published.</p> Windows Uniscribe Information Disclosure Vulnerability <p>An information disclosure vulnerability exists when Windows Uniscribe improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.</p> <p>There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document or by convincing a user to visit an untrusted webpage.</p> <p>The update addresses the vulnerability by correcting how Windows Uniscribe handles objects in memory.</p> Windows Uniscribe Microsoft Yes CVE-2017-0113 10047 10048 9312 10287 9311 9318 9344 10050 10051 10049 4393 9316 Information Disclosure 10047 Information Disclosure 10048 Information Disclosure 9312 Information Disclosure 10287 Information Disclosure 9311 Information Disclosure 9318 Information Disclosure 9344 Information Disclosure 10050 Information Disclosure 10051 Information Disclosure 10049 Information Disclosure 4393 Information Disclosure 9316 Important 10047 Important 10048 Important 9312 Important 10287 Important 9311 Important 9318 Important 9344 Important 10050 Important 10051 Important 10049 Important 4393 Important 9316 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A;Older Software Release:Exploitation Unlikely;DOS:N/A 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10047 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10048 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9312 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10287 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9311 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9318 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9344 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10050 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10051 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10049 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 4393 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9316 4012215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012215 3212646 10047 10048 10050 10051 10049 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012215 10047 10048 10050 10051 10049 4012215 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10047 10050 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;custerr.dll;vmswitch.sys;msxml3.dll;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10047 10050 4012212 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10048 10051 10049 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10048 10051 10049 4012212 4012583 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012583 3196348 9312 10287 9311 9318 9344 4393 9316 gdiplus.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll 0001-01-01T00:00:00 Yes Security Update https://support.microsoft.com/en-us/kb/4012583 9312 10287 9311 9318 9344 4393 9316 4012583 Mateusz Jurczyk of <a href="http://www.google.com/">Google Project Zero</a> 1.0 2017-03-14T07:00:00 <p>Information published.</p> Windows Uniscribe Information Disclosure Vulnerability <p>An information disclosure vulnerability exists when Windows Uniscribe improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.</p> <p>There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document or by convincing a user to visit an untrusted webpage.</p> <p>The update addresses the vulnerability by correcting how Windows Uniscribe handles objects in memory.</p> Windows Uniscribe Microsoft Yes CVE-2017-0112 10047 10048 9312 10287 9311 9318 9344 10050 10051 10049 4393 9316 Information Disclosure 10047 Information Disclosure 10048 Information Disclosure 9312 Information Disclosure 10287 Information Disclosure 9311 Information Disclosure 9318 Information Disclosure 9344 Information Disclosure 10050 Information Disclosure 10051 Information Disclosure 10049 Information Disclosure 4393 Information Disclosure 9316 Important 10047 Important 10048 Important 9312 Important 10287 Important 9311 Important 9318 Important 9344 Important 10050 Important 10051 Important 10049 Important 4393 Important 9316 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A;Older Software Release:Exploitation Unlikely;DOS:N/A 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10047 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10048 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9312 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10287 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9311 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9318 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9344 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10050 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10051 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10049 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 4393 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9316 4012215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012215 3212646 10047 10048 10050 10051 10049 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012215 10047 10048 10050 10051 10049 4012215 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10047 10050 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;custerr.dll;vmswitch.sys;msxml3.dll;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10047 10050 4012212 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10048 10051 10049 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10048 10051 10049 4012212 4012583 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012583 3196348 9312 10287 9311 9318 9344 4393 9316 gdiplus.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll 0001-01-01T00:00:00 Yes Security Update https://support.microsoft.com/en-us/kb/4012583 9312 10287 9311 9318 9344 4393 9316 4012583 Mateusz Jurczyk of <a href="http://www.google.com/">Google Project Zero</a> 1.0 2017-03-14T07:00:00 <p>Information published.</p> Scripting Engine Memory Corruption Vulnerability <p>A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p> <p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Internet Explorer and then convince a user to view the website. An attacker could also embed an ActiveX control marked &quot;safe for initialization&quot; in an application or Microsoft Office document that hosts the IE rendering engine. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p> <p>The security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.</p> Microsoft Browsers Microsoft Yes CVE-2017-0015 10724-10729 10724-10735 10724-10789 10724-10788 Remote Code Execution 10724-10729 Remote Code Execution 10724-10735 Remote Code Execution 10724-10789 Remote Code Execution 10724-10788 Critical 10724-10729 Critical 10724-10735 Critical 10724-10789 Critical 10724-10788 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A;DOS:N/A 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10729 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10735 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10789 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10788 4012606 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012606 3210720 10724-10729 10724-10735 Yes Security Update https://support.microsoft.com/en-us/kb/4012606 10724-10729 10724-10735 4012606 4013198 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013198 3210721 10724-10789 10724-10788 Yes Security Update https://support.microsoft.com/en-us/kb/4013198 10724-10789 10724-10788 4013198 <a href="www.weibo.com/babyboaes">Qixun Zhao</a> of <a href="http://www.360.cn/">Qihoo 360 Skyeye Labs</a> Lokihart, working with <a href="http://powerofcommunity.net/">POC</a>/<a href="http://pwnfest.org/">PwnFest</a> Simon Zuckerbraun, working with <a href="http://www.zerodayinitiative.com/"> Trend Micro's Zero Day Initiative</a> 1.0 2017-03-14T07:00:00 <p>Information published.</p> Windows Denial of Service Vulnerability <p>A denial of service vulnerability exists in implementations of the Microsoft Server Message Block 2.0 and 3.0 (SMBv2/SMBv3) client. The vulnerability is due to improper handling of certain requests sent by a malicious SMB server to the client. An attacker who successfully exploited this vulnerability could cause the affected system to stop responding until it is manually restarted.</p> <p>To exploit the vulnerability, an attacker could use various methods such as redirectors, injected HTML header links, etc., which could cause the SMB client to connect to a malicious SMB server.</p> <p>The security update addresses the vulnerability by correcting how the Microsoft SMBv2/SMBv3 Client handles specially crafted requests.</p> Windows SMB Server Microsoft Yes CVE-2017-0016 10816 10855 10729 10735 10789 10788 10852 10853 10481 10482 10484 10483 10543 Denial of Service 10816 Denial of Service 10855 Denial of Service 10729 Denial of Service 10735 Denial of Service 10789 Denial of Service 10788 Denial of Service 10852 Denial of Service 10853 Denial of Service 10481 Denial of Service 10482 Denial of Service 10484 Denial of Service 10483 Denial of Service 10543 Important 10816 Important 10855 Important 10729 Important 10735 Important 10789 Important 10788 Important 10852 Important 10853 Important 10481 Important 10482 Important 10484 Important 10483 Important 10543 Publicly Disclosed:Yes;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A 5.3 4.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C 10816 5.3 4.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C 10855 5.3 4.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C 10729 5.3 4.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C 10735 5.3 4.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C 10789 5.3 4.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C 10788 5.3 4.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C 10852 5.3 4.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C 10853 5.3 4.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C 10481 5.3 4.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C 10482 5.3 4.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C 10484 5.3 4.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C 10483 5.3 4.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C 10543 4013429 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013429 3213986 10816 10855 10852 10853 Yes Security Update https://support.microsoft.com/en-us/kb/4013429 10816 10855 10852 10853 4013429 4012606 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012606 3210720 10729 10735 Yes Security Update https://support.microsoft.com/en-us/kb/4012606 10729 10735 4012606 4013198 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013198 3210721 10789 10788 Yes Security Update https://support.microsoft.com/en-us/kb/4013198 10789 10788 4013198 4012216 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012216 3205401 10481 10482 10483 10543 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012216 10481 10482 10483 10543 4012216 4012213 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012213 10481 10482 10483 10543 msxpspcl6.dll;msxpsps.dll;hvax64.exe;hvix64.exe;srv.sys;quartz.dll;n/a;win32k.sys;gdiplus.dll;gdi32.dll;icm32.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;dnsapi.dll;msxml3.dll;custerr.dll;vmswitch.sys;dnsrslvr.dll;mrxsmb20.sys;mrxsmb.sys;dxgkrnl.sys;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012213 10481 10482 10483 10543 4012213 4012216 3205401 10484 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012216 10484 4012216 1.0 2017-03-14T07:00:00 <p>Information published.</p> Microsoft Browser Information Disclosure Vulnerability <p>An information disclosure vulnerability exists when affected Microsoft browsers improperly handle objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system.</p> <p>To exploit the vulnerability, in a web-based attack scenario, an attacker could host a website that is used to attempt to exploit the vulnerability. In addition, compromised websites and websites that accept or host user-provided content could contain specially crafted content that could exploit the vulnerability. However, in all cases an attacker would have no way to force a user to view the attacker-controlled content. Instead, an attacker would have to convince a user to take action. For example, an attacker could trick a user into clicking a link that takes the user to the attacker's site.</p> <p>The security update addresses the vulnerability by modifying how Microsoft browsers handle objects in memory.</p> Microsoft Edge (HTML-based) Microsoft Yes CVE-2017-0017 10724-10729 10724-10735 10724-10789 10724-10788 10724-10852 10724-10853 Information Disclosure 10724-10729 Information Disclosure 10724-10735 Information Disclosure 10724-10789 Information Disclosure 10724-10788 Information Disclosure 10724-10852 Information Disclosure 10724-10853 Important 10724-10729 Important 10724-10735 Important 10724-10789 Important 10724-10788 Important 10724-10852 Important 10724-10853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:N/A;DOS:N/A 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10724-10729 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10724-10735 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10724-10789 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10724-10788 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10724-10852 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10724-10853 4012606 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012606 3210720 10724-10729 10724-10735 Yes Security Update https://support.microsoft.com/en-us/kb/4012606 10724-10729 10724-10735 4012606 4013198 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013198 3210721 10724-10789 10724-10788 Yes Security Update https://support.microsoft.com/en-us/kb/4013198 10724-10789 10724-10788 4013198 4013429 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013429 3213986 10724-10852 10724-10853 Yes Security Update https://support.microsoft.com/en-us/kb/4013429 10724-10852 10724-10853 4013429 Mario Heiderich of <a href="https://cure53.de/">Cure53</a> Masato Kinugawa of <a href="https://cure53.de/">Cure53</a> 1.0 2017-03-14T07:00:00 <p>Information published.</p> Microsoft Browser Memory Corruption Vulnerability <p>A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory. The vulnerability could corrupt memory in a way that could allow an attacker to execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, the attacker could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p> <p>An attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft browsers, and then convince a user to view the website. The attacker could also take advantage of compromised websites, or websites that accept or host user-provided content or advertisements, by adding specially crafted content that could exploit the vulnerability. In all cases, however, an attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically via an enticement in email or instant message, or by getting them to open an email attachment.</p> <p>The security update addresses the vulnerability by modifying how Microsoft browsers handle objects in memory.</p> <p><strong>I am running Internet Explorer on Windows Server 2008, Windows Server 2008 R2, Windows Server 2012, or Windows Server 2012 R2. Does this mitigate these vulnerabilities?</strong> Yes. By default, Internet Explorer on Windows Server 2008, Windows Server 2008 R2, Windows Server 2012, and Windows Server 2012 R2 runs in a restricted mode that is known as Enhanced Security Configuration. Enhanced Security Configuration is a group of preconfigured settings in Internet Explorer that can reduce the likelihood of a user or administrator downloading and running specially crafted web content on a server. This is a mitigating factor for websites that you have not added to the Internet Explorer Trusted sites zone.</p> <p><strong>Can EMET help mitigate attacks that attempt to exploit these vulnerabilities?</strong> Yes. The Enhanced Mitigation Experience Toolkit (EMET) enables users to manage security mitigation technologies that help make it more difficult for attackers to exploit memory corruption vulnerabilities in a given piece of software. EMET can help mitigate attacks that attempt to exploit these vulnerabilities in Internet Explorer on systems where EMET is installed and configured to work with Internet Explorer.</p> <p>For more information about EMET, see the <a href="https://technet.microsoft.com/security/jj653751">Enhanced Mitigation Experience Toolkit</a>.</p> Internet Explorer Microsoft Yes CVE-2017-0018 10486-10816 10555-10378 10486-10481 10486-10482 10486-10483 10486-10484 10486-10047 10486-10048 10486-10051 10486-10729 10486-10735 10486-10789 10486-10788 10486-10852 10486-10853 Remote Code Execution 10486-10816 Remote Code Execution 10555-10378 Remote Code Execution 10486-10481 Remote Code Execution 10486-10482 Remote Code Execution 10486-10483 Remote Code Execution 10486-10484 Remote Code Execution 10486-10047 Remote Code Execution 10486-10048 Remote Code Execution 10486-10051 Remote Code Execution 10486-10729 Remote Code Execution 10486-10735 Remote Code Execution 10486-10789 Remote Code Execution 10486-10788 Remote Code Execution 10486-10852 Remote Code Execution 10486-10853 Moderate 10486-10816 Moderate 10555-10378 Critical 10486-10481 Critical 10486-10482 Moderate 10486-10483 Critical 10486-10484 Critical 10486-10047 Critical 10486-10048 Moderate 10486-10051 Critical 10486-10729 Critical 10486-10735 Critical 10486-10789 Critical 10486-10788 Critical 10486-10852 Critical 10486-10853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A 6.4 5.8 CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10486-10816 6.4 5.8 CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10555-10378 7.5 6.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10486-10481 7.5 6.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10486-10482 6.4 5.8 CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10486-10483 7.5 6.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10486-10484 7.5 6.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10486-10047 7.5 6.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10486-10048 6.4 5.8 CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10486-10051 7.5 6.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10486-10729 7.5 6.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10486-10735 7.5 6.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10486-10789 7.5 6.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10486-10788 7.5 6.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10486-10852 7.5 6.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10486-10853 4013429 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013429 3213986 10486-10816 10486-10852 10486-10853 Yes Security Update https://support.microsoft.com/en-us/kb/4013429 10486-10816 10486-10852 10486-10853 4013429 4012217 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012217 3205409 10555-10378 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012217 10555-10378 4012217 4012204 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012204 3203621 10555-10378 10486-10481 10486-10482 10486-10483 10486-10047 10486-10048 10486-10051 Yes IE Cumulative https://support.microsoft.com/en-us/help/4012204 10555-10378 10486-10481 10486-10482 10486-10483 10486-10047 10486-10048 10486-10051 4012204 4012216 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012216 3205401 10486-10481 10486-10482 10486-10483 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012216 10486-10481 10486-10482 10486-10483 4012216 4012216 3205401 10486-10484 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012216 10486-10484 4012216 4012215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012215 3212646 10486-10047 10486-10048 10486-10051 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012215 10486-10047 10486-10048 10486-10051 4012215 4012606 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012606 3210720 10486-10729 10486-10735 Yes Security Update https://support.microsoft.com/en-us/kb/4012606 10486-10729 10486-10735 4012606 4013198 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013198 3210721 10486-10789 10486-10788 Yes Security Update https://support.microsoft.com/en-us/kb/4013198 10486-10789 10486-10788 4013198 Kai Song (<a href="http://exp-sky.org/">exp-sky</a>) of <a href="http://www.tencent.com/">Tencent's Xuanwu Lab</a>, working with <a href="http://www.zerodayinitiative.com/">Trend Micro's Zero Day Initiative (ZDI)</a> 1.0 2017-03-14T07:00:00 <p>Information published.</p> Microsoft Office Memory Corruption Vulnerability <p>A remote code execution vulnerability exists in Microsoft Office software when the Office software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an attacker could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.</p> <p>Exploitation of the vulnerability requires that a user open a specially crafted file with an affected version of Microsoft Office software. In an email attack scenario, an attacker could exploit the vulnerability by sending the specially crafted file to the user and convincing the user to open the file. In a web-based attack scenario, an attacker could host a website (or leverage a compromised website that accepts or hosts user-provided content) that contains a specially crafted file designed to exploit the vulnerability. An attacker would have no way to force users to visit the website. Instead, an attacker would have to convince users to click a link, typically by way of an enticement in an email or instant message, and then convince them to open the specially crafted file.</p> <p>Note that where severity is indicated as Critical in the Affected Products table, the Preview Pane is an attack vector.</p> <p>The security update addresses the vulnerability by correcting how Office handles objects in memory.</p> Microsoft Office Microsoft Yes CVE-2017-0019 10746 10747 Remote Code Execution 10746 Remote Code Execution 10747 Important 10746 Important 10747 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A;DOS:N/A 3178674 https://www.microsoft.com/download/details.aspx?familyid=9e27d598-d965-4935-bdb2-a1e11d987547 3128057 10746 Maybe Security Update https://support.microsoft.com/kb/3178674 10746 3178674 3178674 https://www.microsoft.com/download/details.aspx?familyid=aaf5192a-8e40-4674-a73b-1aa912c93c1c 3128057 10747 Maybe Security Update https://support.microsoft.com/kb/3178674 10747 3178674 <p><strong>Use Microsoft Office File Block policy to prevent Office from opening RTF documents from unknown or untrusted sources</strong> <strong>Warning</strong> If you use Registry Editor incorrectly, you may cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that you can solve problems that result from using Registry Editor incorrectly. Use Registry Editor at your own risk.</p> <p><strong>For Office 2016</strong></p> <ol> <li>Run regedit.exe as Administrator and navigate to the following subkey: <code>[HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Security\FileBlock] </code></li> <li>Set the <strong>RtfFiles</strong> DWORD value to <strong>2</strong>.</li> <li>Set the OpenInProtectedView DWORD value to <strong>0</strong>.</li> </ol> <p><strong>Impact of Workaround.</strong> Users who have configured the File Block policy and have not configured a special “exempt directory” as discussed in <a href="https://support.microsoft.com/kb/922849">Microsoft Knowledge Base Article 922849</a> will be unable to open documents saved in the RTF format.</p> <p><strong>How to undo the workaround.</strong> <strong>For Office 2016</strong></p> <ol> <li>Run regedit.exe as Administrator and navigate to the following subkey: <code>[HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Word\Security\FileBlock] </code></li> <li>Set the <strong>RtfFiles</strong> DWORD value to <strong>0</strong>.</li> <li>Set the OpenInProtectedView DWORD value to <strong>0</strong>.</li> </ol> Steven Vittitoe of <a href="http://www.google.com/">Google Project Zero</a> Tony Loi of <a href="http://www.fortiguard.com/">Fortinet's FortiGuard Labs</a> 1.0 2017-03-14T07:00:00 <p>Information published.</p> Microsoft Office Memory Corruption Vulnerability <p>A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an attacker could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.</p> <p>Exploitation of the vulnerability requires that a user open a specially crafted file with an affected version of Microsoft Office software. In an email attack scenario, an attacker could exploit the vulnerability by sending the specially crafted file to the user and convincing the user to open the file. In a web-based attack scenario, an attacker could host a website (or leverage a compromised website that accepts or hosts user-provided content) that contains a specially crafted file designed to exploit the vulnerability. An attacker would have no way to force users to visit the website. Instead, an attacker would have to convince users to click a link, typically by way of an enticement in an email or instant message, and then convince them to open the specially crafted file.</p> <p>Note that the Preview Pane is not an attack vector for this vulnerability.</p> <p>The security update addresses the vulnerability by correcting how Office handles objects in memory.</p> <p><strong>I am being offered this update for software that is not specifically indicated as being affected in the Affected Software and Vulnerability Severity Ratings table. Why am I being offered this update?</strong></p> <p>When updates address vulnerable code that exists in a component that is shared between multiple Microsoft Office products or shared between multiple versions of the same Microsoft Office product, the update is considered to be applicable to all supported products and versions that contain the vulnerable component.</p> <p>For example, when an update applies to Microsoft Office 2007 products, only Microsoft Office 2007 may be specifically listed in the Affected Software table. However, the update could apply to Microsoft Word 2007, Microsoft Excel 2007, Microsoft Visio 2007, Microsoft Compatibility Pack, Microsoft Excel Viewer, or any other Microsoft Office 2007 product that is not specifically listed in the Affected Software table. Furthermore, when an update applies to Microsoft Office 2010 products, only Microsoft Office 2010 may be specifically listed in the Affected Software table. However, the update could apply to Microsoft Word 2010, Microsoft Excel 2010, Microsoft Visio 2010, Microsoft Visio Viewer, or any other Microsoft Office 2010 product that is not specifically listed in the Affected Software table.</p> <p>For more information on this behavior and recommended actions, see <a href="https://support.microsoft.com/kb/830335">Microsoft Knowledge Base Article 830335</a>. For a list of Microsoft Office products that an update may apply to, refer to the Microsoft Knowledge Base Article associated with the specific update.</p> Microsoft Office Microsoft Yes CVE-2017-0020 10739 10611 10489 10490 10656 10654 10655 10740 10672 Remote Code Execution 10739 Remote Code Execution 10611 Remote Code Execution 10489 Remote Code Execution 10490 Remote Code Execution 10656 Remote Code Execution 10654 Remote Code Execution 10655 Remote Code Execution 10740 Remote Code Execution 10672 Important 10739 Important 10611 Important 10489 Important 10490 Important 10656 Important 10654 Important 10655 Important 10740 Important 10672 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A 3178673 https://www.microsoft.com/download/details.aspx?familyid=ce452e9c-4666-4e23-a746-da2158821037 3128016 10739 Maybe Security Update https://support.microsoft.com/kb/3178673 10739 3178673 3172457 https://www.microsoft.com/download/details.aspx?familyid=be198e70-6f15-4ee9-8c89-119d832136cc 3127929 10611 Maybe Security Update https://support.microsoft.com/kb/3172457 10611 3172457 3178690 https://www.microsoft.com/download/details.aspx?familyid=12a90368-374d-4eb9-af38-fd6da8f0dafe 3128037 10489 Maybe Security Update https://support.microsoft.com/kb/3178690 10489 3178690 3178690 https://www.microsoft.com/download/details.aspx?familyid=3eeb2635-7f9e-4263-a329-38b2a99f8b7e 3128037 10490 Maybe Security Update https://support.microsoft.com/kb/3178690 10490 3178690 3172542 3128008 10656 Maybe Security Update https://support.microsoft.com/kb/3172542 10656 3172542 3172542 https://www.microsoft.com/download/details.aspx?familyid=f446ebcd-e843-410e-a3eb-41bd459d1194 3128008 10654 Maybe Security Update https://support.microsoft.com/kb/3172542 10654 3172542 3172542 https://www.microsoft.com/download/details.aspx?familyid=cc71b295-7c5c-42d4-a020-aabd1f1ba528 3128008 10655 Maybe Security Update https://support.microsoft.com/kb/3172542 10655 3172542 3178673 https://www.microsoft.com/download/details.aspx?familyid=ad35e53b-2ea8-4ff9-894e-39b813f4bcdc 3128016 10740 Maybe Security Update https://support.microsoft.com/kb/3178673 10740 3178673 Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 10672 No Security Update https://go.microsoft.com/fwlink/p/?linkid=831049 10672 Release Notes Qiang Liu, <a href="http://www.mcafee.com">McAfee</a> 1.0 2017-03-14T07:00:00 <p>Information published.</p> Hyper-V vSMB Remote Code Execution Vulnerability <p>A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate vSMB packet data. An attacker who successfully exploited these vulnerabilities could execute arbitrary code on a target operating system.</p> <p>To exploit these vulnerabilities, an attacker running inside a virtual machine could run a specially crafted application that could cause the Hyper-V host operating system to execute arbitrary code.</p> <p>The update addresses the vulnerabilities by correcting how Windows Hyper-V validates vSMB packet data.</p> Windows SMB Server Microsoft Yes CVE-2017-0021 10816 10855 10852 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10852 Remote Code Execution 10853 Critical 10816 Critical 10855 Critical 10852 Critical 10853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:N/A;DOS:N/A 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10816 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10855 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10852 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10853 4013429 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013429 3213986 10816 10855 10852 10853 Yes Security Update https://support.microsoft.com/en-us/kb/4013429 10816 10855 10852 10853 4013429 <p>The following <a href="https://technet.microsoft.com/library/security/dn848375.aspx#Mitigation">mitigating factors</a> might be helpful in your situation:</p> <ul> <li>Customers who have not enabled the Hyper-V role are not affected.</li> </ul> Jordan Rabet, Microsoft Offensive Security Research Team Saruhan Karademir 1.0 2017-03-14T07:00:00 <p>Information published.</p> Microsoft XML Core Services Information Disclosure Vulnerability <p>An information vulnerability exists when <a href="https://technet.microsoft.com/en-us/library/security/dn8">Microsoft XML Core Services (MSXML)</a> improperly handles objects in memory. Successful exploitation of the vulnerability could allow the attacker to test for the presence of files on disk.</p> <p>To exploit the vulnerability, an attacker could host a specially-crafted website that is designed to invoke MSXML through Internet Explorer. However, an attacker would have no way to force a user to visit such a website. Instead, an attacker would typically have to convince a user to either click a link in an email message or a link in an Instant Messenger request that would then take the user to the website.</p> <p>The update addresses the vulnerability by changing the way MSXML handles objects in memory.</p> <p>Some versions of MSXML are included with Microsoft Windows; others are installed with non-operating system software from Microsoft or third-party providers. Some are also available as separate downloads. The following table shows which versions of MSXML are included with Windows and which are installed with the installation of additional Microsoft or third-party software.</p> <table> <thead> <tr> <th>Operating System</th> <th>MSXML 3.0</th> </tr> </thead> <tbody> <tr> <td>Windows Vista</td> <td>Shipped with operating system</td> </tr> <tr> <td>Windows Server 2008</td> <td>Shipped with operating system</td> </tr> <tr> <td>Windows 7</td> <td>Shipped with operating system</td> </tr> <tr> <td>Windows Server 2008 R2</td> <td>Shipped with operating system</td> </tr> <tr> <td>Windows 8.1</td> <td>Shipped with operating system</td> </tr> <tr> <td>Windows Server 2012 and Windows Server 2012 R2</td> <td>Shipped with operating system</td> </tr> <tr> <td>Window10 (all releases)</td> <td>Shipped with operating system</td> </tr> <tr> <td>Windows Server 2016</td> <td>Shipped with operating system</td> </tr> </tbody> </table> Microsoft XML Microsoft Yes CVE-2017-0022 10481 10482 10049 10378 10379 10483 10543 7177-10483 7177-10543 7177-10287 7177-10481 7177-10482 7177-10484 7177-10729 7177-10735 7177-10789 7177-10788 7177-10852 7177-10853 7177-10816 7177-10855 7177-10051 7177-10049 7177-10050 7177-10047 7177-10048 7177-10378 7177-10379 7177-9318 7177-9312 7177-9316 7177-9311 7177-9344 7177-4393 Information Disclosure 10481 Information Disclosure 10482 Information Disclosure 10049 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 7177-10483 Information Disclosure 7177-10543 Information Disclosure 7177-10287 Information Disclosure 7177-10481 Information Disclosure 7177-10482 Information Disclosure 7177-10484 Information Disclosure 7177-10729 Information Disclosure 7177-10735 Information Disclosure 7177-10789 Information Disclosure 7177-10788 Information Disclosure 7177-10852 Information Disclosure 7177-10853 Information Disclosure 7177-10816 Information Disclosure 7177-10855 Information Disclosure 7177-10051 Information Disclosure 7177-10049 Information Disclosure 7177-10050 Information Disclosure 7177-10047 Information Disclosure 7177-10048 Information Disclosure 7177-10378 Information Disclosure 7177-10379 Information Disclosure 7177-9318 Information Disclosure 7177-9312 Information Disclosure 7177-9316 Information Disclosure 7177-9311 Information Disclosure 7177-9344 Information Disclosure 7177-4393 Important 10481 Important 10482 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Important 7177-10483 Important 7177-10543 Important 7177-10287 Important 7177-10481 Important 7177-10482 Important 7177-10484 Important 7177-10729 Important 7177-10735 Important 7177-10789 Important 7177-10788 Important 7177-10852 Important 7177-10853 Important 7177-10816 Important 7177-10855 Important 7177-10051 Important 7177-10049 Important 7177-10050 Important 7177-10047 Important 7177-10048 Important 7177-10378 Important 7177-10379 Important 7177-9318 Important 7177-9312 Important 7177-9316 Important 7177-9311 Important 7177-9344 Important 7177-4393 Publicly Disclosed:No;Exploited:Yes;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A 4.3 4.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C 10481 4.3 4.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C 10482 4.3 4.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C 10049 4.3 4.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C 10378 4.3 4.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C 10379 4.3 4.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C 10483 4.3 4.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:H/RL:O/RC:C 10543 4012216 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012216 3205401 10481 10482 10483 10543 7177-10483 7177-10543 7177-10481 7177-10482 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012216 10481 10482 10483 10543 7177-10483 7177-10543 7177-10481 7177-10482 4012216 4012213 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012213 10481 10482 10483 10543 7177-10483 7177-10543 7177-10481 7177-10482 msxpspcl6.dll;msxpsps.dll;hvax64.exe;hvix64.exe;srv.sys;quartz.dll;n/a;win32k.sys;gdiplus.dll;gdi32.dll;icm32.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;dnsapi.dll;msxml3.dll;custerr.dll;vmswitch.sys;dnsrslvr.dll;mrxsmb20.sys;mrxsmb.sys;dxgkrnl.sys;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012213 10481 10482 10483 10543 7177-10483 7177-10543 7177-10481 7177-10482 4012213 4012215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012215 3212646 10049 7177-10051 7177-10049 7177-10050 7177-10047 7177-10048 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012215 10049 7177-10051 7177-10049 7177-10050 7177-10047 7177-10048 4012215 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10049 7177-10051 7177-10049 7177-10048 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10049 7177-10051 7177-10049 7177-10048 4012212 4012217 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012217 3205409 10378 10379 7177-10378 7177-10379 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012217 10378 10379 7177-10378 7177-10379 4012217 4012214 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012214 MS16-110, 3187754 10378 10379 7177-10378 7177-10379 n/a;msxpspcl6.dll;msxpsps.dll;srv.sys;win32k.sys;gdiplus.dll;gdi32.dll;icm32.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dxgkrnl.sys 0001-01-01T00:00:00 Security Only https://support.microsoft.com/en-us/help/4012214 10378 10379 7177-10378 7177-10379 4012214 3216916 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3216916 3146963 7177-10287 7177-9318 7177-9312 7177-9316 7177-9311 7177-9344 7177-4393 msxml3.dll 0001-01-01T00:00:00 Yes Security Update https://support.microsoft.com/en-us/kb/3216916 7177-10287 7177-9318 7177-9312 7177-9316 7177-9311 7177-9344 7177-4393 3216916 4012216 3205401 7177-10484 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012216 7177-10484 4012216 4012606 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012606 3210720 7177-10729 7177-10735 Yes Security Update https://support.microsoft.com/en-us/kb/4012606 7177-10729 7177-10735 4012606 4013198 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013198 3210721 7177-10789 7177-10788 Yes Security Update https://support.microsoft.com/en-us/kb/4013198 7177-10789 7177-10788 4013198 4013429 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013429 3213986 7177-10852 7177-10853 7177-10816 7177-10855 Yes Security Update https://support.microsoft.com/en-us/kb/4013429 7177-10852 7177-10853 7177-10816 7177-10855 4013429 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 7177-10050 7177-10047 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;custerr.dll;vmswitch.sys;msxml3.dll;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 7177-10050 7177-10047 4012212 Will Matcalf of <a href="https://www.proofpoint.com/">Proofpoint</a> Kafeine of <a href="https://www.proofpoint.com/">Proofpoint</a> Joseph C Chen, <a href="http://www.trendmicro.com/">Trend Micro</a> Brooks Li, <a href="http://www.trendmicro.com/">Trend Micro</a> 1.0 2017-03-14T07:00:00 <p>Information published.</p> 1.1 2017-04-14T07:00:00 <p>CVE-2017-0022 revised to update the Exploitability Index to 0 - Exploitation Detected. This is an informational change only.</p> Windows PDF Remote Code Execution Vulnerability <p>A remote code execution vulnerability exists when Microsoft Windows PDF Library improperly handles objects in memory. The vulnerability could corrupt memory in a way that enables an attacker to execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p> <p>To exploit the vulnerability on Windows 10 systems with Microsoft Edge set as the default browser, an attacker could host a specially crafted website that contains malicious PDF content and then convince users to view the website. The attacker could also take advantage of compromised websites, or websites that accept or host user-provided content or advertisements, by adding specially crafted PDF content to such sites. Only Windows 10 systems with Microsoft Edge set as the default browser can be compromised simply by viewing a website. The browsers for all other affected operating systems do not automatically render PDF content, so an attacker would have no way to force users to view attacker-controlled content. Instead, an attacker would have to convince users to open a specially crafted PDF document, typically by way of an enticement in an email or instant message or by way of an email attachment.</p> <p>The update addresses the vulnerability by modifying how affected systems handle objects in memory.</p> Microsoft Windows PDF Microsoft Yes CVE-2017-0023 10481 10482 10378 10483 10484 10724-10729 10724-10735 10724-10789 10724-10788 10724-10852 10724-10853 Remote Code Execution 10481 Remote Code Execution 10482 Remote Code Execution 10378 Remote Code Execution 10483 Remote Code Execution 10484 Remote Code Execution 10724-10729 Remote Code Execution 10724-10735 Remote Code Execution 10724-10789 Remote Code Execution 10724-10788 Remote Code Execution 10724-10852 Remote Code Execution 10724-10853 Critical 10481 Critical 10482 Critical 10378 Critical 10483 Critical 10484 Critical 10724-10729 Critical 10724-10735 Critical 10724-10789 Critical 10724-10788 Critical 10724-10852 Critical 10724-10853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10481 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10482 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10378 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10483 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10484 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10729 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10735 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10789 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10788 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10852 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10853 4012216 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012216 3205401 10481 10482 10483 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012216 10481 10482 10483 4012216 4012213 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012213 10481 10482 10483 msxpspcl6.dll;msxpsps.dll;hvax64.exe;hvix64.exe;srv.sys;quartz.dll;n/a;win32k.sys;gdiplus.dll;gdi32.dll;icm32.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;dnsapi.dll;msxml3.dll;custerr.dll;vmswitch.sys;dnsrslvr.dll;mrxsmb20.sys;mrxsmb.sys;dxgkrnl.sys;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012213 10481 10482 10483 4012213 4012217 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012217 3205409 10378 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012217 10378 4012217 4012214 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012214 MS16-110, 3187754 10378 n/a;msxpspcl6.dll;msxpsps.dll;srv.sys;win32k.sys;gdiplus.dll;gdi32.dll;icm32.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dxgkrnl.sys 0001-01-01T00:00:00 Security Only https://support.microsoft.com/en-us/help/4012214 10378 4012214 4012216 3205401 10484 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012216 10484 4012216 4012606 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012606 3210720 10724-10729 10724-10735 Yes Security Update https://support.microsoft.com/en-us/kb/4012606 10724-10729 10724-10735 4012606 4013198 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013198 3210721 10724-10789 10724-10788 Yes Security Update https://support.microsoft.com/en-us/kb/4013198 10724-10789 10724-10788 4013198 4013429 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013429 3213986 10724-10852 10724-10853 Yes Security Update https://support.microsoft.com/en-us/kb/4013429 10724-10852 10724-10853 4013429 Henry Li (zenhumany) of <a href="http://www.trendmicro.com/">Trend Micro</a> 1.0 2017-03-14T07:00:00 <p>Information published.</p> Win32k Elevation of Privilege Vulnerability <p>An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p> <p>To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system.</p> <p>The update addresses this vulnerability by correcting how the Windows kernel-mode driver handles objects in memory.</p> Windows Kernel-Mode Drivers Microsoft Yes CVE-2017-0024 10816 10852 10853 Elevation of Privilege 10816 Elevation of Privilege 10852 Elevation of Privilege 10853 Important 10816 Important 10852 Important 10853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A;DOS:N/A 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10816 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10852 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10853 4013429 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013429 3213986 10816 10852 10853 Yes Security Update https://support.microsoft.com/en-us/kb/4013429 10816 10852 10853 4013429 <a href="http://weibo.com/pgboy1988">pgboy</a> and <a href="http://weibo.com/2641521260">zhong_sf</a> of <a href="http://www.360.cn/">Qihoo 360 Vulcan Team</a> working with POC/PwnFest 1.0 2017-03-14T07:00:00 <p>Information published.</p> Windows GDI Elevation of Privilege Vulnerability <p>An elevation of privilege vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p> <p>To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system.</p> <p>The update addresses the vulnerability by correcting how GDI handles objects in memory and by preventing instances of unintended user-mode privilege elevation.</p> <p><strong>Does this release contain any additional security-related changes to functionality?</strong> Yes. In addition to the security updates that address the vulnerabilities described in this bulletin, Microsoft is releasing an update that replaces certain third party libraries which were used by Windows 8.1, Windows Server 2012, Windows Server 2012 R2, Windows Server 2016, and all versions of Windows 10. This update provides the same functionality in a more secure and reliable way.</p> Microsoft Graphics Component Microsoft Yes CVE-2017-0025 10816 10855 10729 10735 10789 10788 10852 10853 10047 10048 10481 10482 10484 9312 10287 9311 9318 9344 10050 10051 10049 10378 10379 10483 10543 4393 9316 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10729 Elevation of Privilege 10735 Elevation of Privilege 10789 Elevation of Privilege 10788 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10047 Elevation of Privilege 10048 Elevation of Privilege 10481 Elevation of Privilege 10482 Elevation of Privilege 10484 Elevation of Privilege 9312 Elevation of Privilege 10287 Elevation of Privilege 9311 Elevation of Privilege 9318 Elevation of Privilege 9344 Elevation of Privilege 10050 Elevation of Privilege 10051 Elevation of Privilege 10049 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 4393 Elevation of Privilege 9316 Important 10816 Important 10855 Important 10729 Important 10735 Important 10789 Important 10788 Important 10852 Important 10853 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 9312 Important 10287 Important 9311 Important 9318 Important 9344 Important 10050 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Important 4393 Important 9316 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10816 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10855 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10729 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10735 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10789 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10788 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10852 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10853 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10047 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10048 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10481 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10482 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10484 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9312 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10287 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9311 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9318 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9344 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10050 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10051 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10049 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10378 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10379 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10483 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10543 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 4393 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9316 4013429 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013429 3213986 10816 10855 10852 10853 Yes Security Update https://support.microsoft.com/en-us/kb/4013429 10816 10855 10852 10853 4013429 4012606 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012606 3210720 10729 10735 Yes Security Update https://support.microsoft.com/en-us/kb/4012606 10729 10735 4012606 4013198 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013198 3210721 10789 10788 Yes Security Update https://support.microsoft.com/en-us/kb/4013198 10789 10788 4013198 4012215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012215 3212646 10047 10048 10050 10051 10049 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012215 10047 10048 10050 10051 10049 4012215 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10047 10050 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;custerr.dll;vmswitch.sys;msxml3.dll;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10047 10050 4012212 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10048 10051 10049 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10048 10051 10049 4012212 4012216 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012216 3205401 10481 10482 10483 10543 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012216 10481 10482 10483 10543 4012216 4012213 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012213 10481 10482 10483 10543 msxpspcl6.dll;msxpsps.dll;hvax64.exe;hvix64.exe;srv.sys;quartz.dll;n/a;win32k.sys;gdiplus.dll;gdi32.dll;icm32.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;dnsapi.dll;msxml3.dll;custerr.dll;vmswitch.sys;dnsrslvr.dll;mrxsmb20.sys;mrxsmb.sys;dxgkrnl.sys;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012213 10481 10482 10483 10543 4012213 4012216 3205401 10484 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012216 10484 4012216 4012497 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012497 3204723 9312 10287 9311 9318 9344 4393 9316 win32k.sys 0001-01-01T00:00:00 Yes Security Update https://support.microsoft.com/en-us/kb/4012497 9312 10287 9311 9318 9344 4393 9316 4012497 4012217 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012217 3205409 10378 10379 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012217 10378 10379 4012217 4012214 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012214 MS16-110, 3187754 10378 10379 n/a;msxpspcl6.dll;msxpsps.dll;srv.sys;win32k.sys;gdiplus.dll;gdi32.dll;icm32.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dxgkrnl.sys 0001-01-01T00:00:00 Security Only https://support.microsoft.com/en-us/help/4012214 10378 10379 4012214 Lokihart, working with <a href="http://powerofcommunity.net/">POC</a>/<a href="http://pwnfest.org/">PwnFest</a> 1.0 2017-03-14T07:00:00 <p>Information published.</p> Win32k Elevation of Privilege Vulnerability <p>An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p> <p>To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system.</p> <p>The update addresses this vulnerability by correcting how the Windows kernel-mode driver handles objects in memory.</p> Windows Kernel-Mode Drivers Microsoft Yes CVE-2017-0026 10816 10729 10735 10789 10788 10852 10853 Elevation of Privilege 10816 Elevation of Privilege 10729 Elevation of Privilege 10735 Elevation of Privilege 10789 Elevation of Privilege 10788 Elevation of Privilege 10852 Elevation of Privilege 10853 Important 10816 Important 10729 Important 10735 Important 10789 Important 10788 Important 10852 Important 10853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10816 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10729 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10735 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10789 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10788 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10852 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10853 4013429 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013429 3213986 10816 10852 10853 Yes Security Update https://support.microsoft.com/en-us/kb/4013429 10816 10852 10853 4013429 4012606 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012606 3210720 10729 10735 Yes Security Update https://support.microsoft.com/en-us/kb/4012606 10729 10735 4012606 4013198 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013198 3210721 10789 10788 Yes Security Update https://support.microsoft.com/en-us/kb/4013198 10789 10788 4013198 <a href="http://weibo.com/pgboy1988">pgboy</a> and <a href="http://weibo.com/2641521260">zhong_sf</a> of <a href="http://www.360.cn/">Qihoo 360 Vulcan Team</a> 1.0 2017-03-14T07:00:00 <p>Information published.</p> Microsoft Excel Information Disclosure Vulnerability <p>An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory. An attacker who exploited the vulnerability could use the information to compromise the user’s computer or data.</p> <p>To exploit the vulnerability, an attacker could craft a special document file and then convince the user to open it. An attacker must know the memory address location where the object was created.</p> <p>The update addresses the vulnerability by changing the way certain Excel functions handle objects in memory.</p> <p><strong>I am being offered this update for software that is not specifically indicated as being affected in the Affected Software and Vulnerability Severity Ratings table. Why am I being offered this update?</strong></p> <p>When updates address vulnerable code that exists in a component that is shared between multiple Microsoft Office products or shared between multiple versions of the same Microsoft Office product, the update is considered to be applicable to all supported products and versions that contain the vulnerable component.</p> <p>For example, when an update applies to Microsoft Office 2007 products, only Microsoft Office 2007 may be specifically listed in the Affected Software table. However, the update could apply to Microsoft Word 2007, Microsoft Excel 2007, Microsoft Visio 2007, Microsoft Compatibility Pack, Microsoft Excel Viewer, or any other Microsoft Office 2007 product that is not specifically listed in the Affected Software table. Furthermore, when an update applies to Microsoft Office 2010 products, only Microsoft Office 2010 may be specifically listed in the Affected Software table. However, the update could apply to Microsoft Word 2010, Microsoft Excel 2010, Microsoft Visio 2010, Microsoft Visio Viewer, or any other Microsoft Office 2010 product that is not specifically listed in the Affected Software table.</p> <p>For more information on this behavior and recommended actions, see <a href="https://support.microsoft.com/kb/830335">Microsoft Knowledge Base Article 830335</a>. For a list of Microsoft Office products that an update may apply to, refer to the Microsoft Knowledge Base Article associated with the specific update.</p> Microsoft Office Microsoft Yes CVE-2017-0027 4497 10739 10152 10489 10490 10656 10654 10655 10740 10672 10027 9171-10607 9171-999008 Information Disclosure 4497 Information Disclosure 10739 Information Disclosure 10152 Information Disclosure 10489 Information Disclosure 10490 Information Disclosure 10656 Information Disclosure 10654 Information Disclosure 10655 Information Disclosure 10740 Information Disclosure 10672 Information Disclosure 10027 Information Disclosure 9171-10607 Information Disclosure 9171-999008 Important 4497 Important 10739 Important 10152 Important 10489 Important 10490 Important 10656 Important 10654 Important 10655 Important 10740 Important 10672 Important 10027 Important 9171-10607 Important 9171-999008 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A 3178677 https://www.microsoft.com/download/details.aspx?familyid=9b518a8c-5c77-4e35-bbd4-096715d127d7 3128022 4497 Maybe Security Update https://support.microsoft.com/kb/3178677 4497 3178677 3178673 https://www.microsoft.com/download/details.aspx?familyid=ce452e9c-4666-4e23-a746-da2158821037 3128016 10739 Maybe Security Update https://support.microsoft.com/kb/3178673 10739 3178673 3178676 https://www.microsoft.com/download/details.aspx?familyid=ca65ab31-a60f-4926-9411-bf1650919ab1 3128019 10152 Maybe Security Update https://support.microsoft.com/kb/3178676 10152 3178676 3178690 https://www.microsoft.com/download/details.aspx?familyid=12a90368-374d-4eb9-af38-fd6da8f0dafe 3128037 10489 Maybe Security Update https://support.microsoft.com/kb/3178690 10489 3178690 3178690 https://www.microsoft.com/download/details.aspx?familyid=3eeb2635-7f9e-4263-a329-38b2a99f8b7e 3128037 10490 Maybe Security Update https://support.microsoft.com/kb/3178690 10490 3178690 3172542 3128008 10656 Maybe Security Update https://support.microsoft.com/kb/3172542 10656 3172542 3172542 https://www.microsoft.com/download/details.aspx?familyid=f446ebcd-e843-410e-a3eb-41bd459d1194 3128008 10654 Maybe Security Update https://support.microsoft.com/kb/3172542 10654 3172542 3172542 https://www.microsoft.com/download/details.aspx?familyid=cc71b295-7c5c-42d4-a020-aabd1f1ba528 3128008 10655 Maybe Security Update https://support.microsoft.com/kb/3172542 10655 3172542 3178673 https://www.microsoft.com/download/details.aspx?familyid=ad35e53b-2ea8-4ff9-894e-39b813f4bcdc 3128016 10740 Maybe Security Update https://support.microsoft.com/kb/3178673 10740 3178673 Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 10672 No Security Update https://go.microsoft.com/fwlink/p/?linkid=831049 10672 Release Notes 3198809 http://go.microsoft.com/fwlink/?LinkId=837729 3198808 10027 Maybe Security Update https://support.microsoft.com/help/3198809 10027 3198809 3172431 https://www.microsoft.com/download/details.aspx?familyid=7082c78b-51d9-42f3-a23b-1c51126802c6 3115169 9171-10607 Maybe Security Update https://support.microsoft.com/kb/3172431 9171-10607 3172431 3178685 https://www.microsoft.com/download/details.aspx?familyid=f4ae53ac-28ba-44fb-9a06-d14cf4d1b52b 3128029 9171-999008 Maybe Security Update https://support.microsoft.com/kb/3178685 9171-999008 3178685 Jaanus Kääp of <a href="http://www.clarifiedsecurity.com/">Clarified Security</a> 1.0 2017-03-14T07:00:00 <p>Information published.</p> 2.0 2017-04-11T07:00:00 <p>To comprehensively address CVE-2017-0027 for Office for Mac 2011 only, Microsoft is releasing security update 3212218. Microsoft recommends that customers running Office for Mac 2011 install update 3212218 to be fully protected from this vulnerability. See Microsoft Knowledge Base Article 3212218 for more information.</p> Microsoft Office Denial of Service Vulnerability <p>A denial of service vulnerability exists when a specially crafted file is opened in Microsoft Office. An attacker who successfully exploited the vulnerability could cause Office to stop responding. Note that the denial of service would not allow an attacker to execute code or to elevate the attacker's user rights.</p> <p>For an attack to be successful, this vulnerability requires that a user open a specially crafted file with an affected version of Microsoft Office. In an email attack scenario, an attacker could exploit the vulnerability by sending a specially crafted file to the user and by convincing the user to open the file.</p> <p>The security update addresses the vulnerability by correcting how Microsoft Office handles objects in memory.</p> <p><strong>I have Microsoft Word 2010 installed. Why am I not being offered the 3178686 update?</strong> The 3178686 update only applies to systems running specific configurations of Microsoft Office 2010. Some configurations will not be offered the update. I am being offered this update for software that is not specifically indicated as being affected in the Affected Software and Vulnerability Severity Ratings table. Why am I being offered this update?</p> <p><strong>When updates address vulnerable code that exists in a component that is shared between multiple Microsoft Office products or shared between multiple versions of the same Microsoft Office product, the update is considered to be applicable to all supported products and versions that contain the vulnerable component.</strong> For example, when an update applies to Microsoft Office 2007 products, only Microsoft Office 2007 may be specifically listed in the Affected Software table. However, the update could apply to Microsoft Word 2007, Microsoft Excel 2007, Microsoft Visio 2007, Microsoft Compatibility Pack, Microsoft Excel Viewer, or any other Microsoft Office 2007 product that is not specifically listed in the Affected Software table. Furthermore, when an update applies to Microsoft Office 2010 products, only Microsoft Office 2010 may be specifically listed in the Affected Software table. However, the update could apply to Microsoft Word 2010, Microsoft Excel 2010, Microsoft Visio 2010, Microsoft Visio Viewer, or any other Microsoft Office 2010 product that is not specifically listed in the Affected Software table.</p> <p>For more information on this behavior and recommended actions, see <a href="https://support.microsoft.com/kb/830335">Microsoft Knowledge Base Article 830335</a>. For a list of Microsoft Office products that an update may apply to, refer to the Microsoft Knowledge Base Article associated with the specific update.</p> Microsoft Office Microsoft Yes CVE-2017-0029 10513 10514 10606 10604 10605 10746 10747 10521 10522 10734 Denial of Service 10513 Denial of Service 10514 Denial of Service 10606 Denial of Service 10604 Denial of Service 10605 Denial of Service 10746 Denial of Service 10747 Denial of Service 10521 Denial of Service 10522 Denial of Service 10734 Important 10513 Important 10514 Important 10606 Important 10604 Important 10605 Important 10746 Important 10747 Important 10521 Important 10522 Important 10734 Publicly Disclosed:Yes;Exploited:No;Latest Software Release:Exploitation Unlikely;Older Software Release:Exploitation Unlikely;DOS:N/A 3178687 https://www.microsoft.com/download/details.aspx?familyid=e99f2cb7-2dd3-4aab-8199-8cce5e5f8982 3141542 10513 Maybe Security Update https://support.microsoft.com/kb/3178687 10513 3178687 3178687 https://www.microsoft.com/download/details.aspx?familyid=27ae1a64-f022-409c-adcc-87b935653a42 3141542 10514 Maybe Security Update https://support.microsoft.com/kb/3178687 10514 3178687 3172464 3127932 10606 Maybe Security Update https://support.microsoft.com/help/3172464 10606 3172464 3172464 https://www.microsoft.com/download/details.aspx?familyid=f1cf3298-745e-440e-a4d3-168f0c42cdb4 3127932 10604 Maybe Security Update https://support.microsoft.com/kb/3172464 10604 3172464 3172464 https://www.microsoft.com/download/details.aspx?familyid=19d33053-5b7c-46c0-8fa2-1d31edd09943 3127932 10605 Maybe Security Update https://support.microsoft.com/kb/3172464 10605 3172464 3178674 https://www.microsoft.com/download/details.aspx?familyid=9e27d598-d965-4935-bdb2-a1e11d987547 3128057 10746 Maybe Security Update https://support.microsoft.com/kb/3178674 10746 3178674 3178674 https://www.microsoft.com/download/details.aspx?familyid=aaf5192a-8e40-4674-a73b-1aa912c93c1c 3128057 10747 Maybe Security Update https://support.microsoft.com/kb/3178674 10747 3178674 3178686 https://www.microsoft.com/download/details.aspx?familyid=c6996886-1bfd-4cc8-b103-d7e898a8a229 3128032 10521 Maybe Security Update https://support.microsoft.com/kb/3178686 10521 3178686 3178686 https://www.microsoft.com/download/details.aspx?familyid=a0294339-8f6c-4c9f-aa73-c44788ce244b 3128032 10522 Maybe Security Update https://support.microsoft.com/kb/3178686 10522 3178686 Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 10734 No Security Update https://go.microsoft.com/fwlink/p/?linkid=831049 10734 Release Notes David Wind of <a href="https://www.xsec.at/">XSEC infosec GmbH</a> 1.0 2017-03-14T07:00:00 <p>Information published.</p> Microsoft Office Memory Corruption Vulnerability <p>A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an attacker could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.</p> <p>Exploitation of the vulnerability requires that a user open a specially crafted file with an affected version of Microsoft Office software. In an email attack scenario, an attacker could exploit the vulnerability by sending the specially crafted file to the user and convincing the user to open the file. In a web-based attack scenario, an attacker could host a website (or leverage a compromised website that accepts or hosts user-provided content) that contains a specially crafted file designed to exploit the vulnerability. An attacker would have no way to force users to visit the website. Instead, an attacker would have to convince users to click a link, typically by way of an enticement in an email or instant message, and then convince them to open the specially crafted file.</p> <p>Note that the Preview Pane is not an attack vector for this vulnerability.</p> <p>The security update addresses the vulnerability by correcting how Office handles objects in memory.</p> <p><strong>I have Microsoft Word 2010 installed. Why am I not being offered the 3178686 update?</strong> The 3178686 update only applies to systems running specific configurations of Microsoft Office 2010. Some configurations will not be offered the update. I am being offered this update for software that is not specifically indicated as being affected in the Affected Software and Vulnerability Severity Ratings table. Why am I being offered this update?</p> <p><strong>When updates address vulnerable code that exists in a component that is shared between multiple Microsoft Office products or shared between multiple versions of the same Microsoft Office product, the update is considered to be applicable to all supported products and versions that contain the vulnerable component.</strong> For example, when an update applies to Microsoft Office 2007 products, only Microsoft Office 2007 may be specifically listed in the Affected Software table. However, the update could apply to Microsoft Word 2007, Microsoft Excel 2007, Microsoft Visio 2007, Microsoft Compatibility Pack, Microsoft Excel Viewer, or any other Microsoft Office 2007 product that is not specifically listed in the Affected Software table. Furthermore, when an update applies to Microsoft Office 2010 products, only Microsoft Office 2010 may be specifically listed in the Affected Software table. However, the update could apply to Microsoft Word 2010, Microsoft Excel 2010, Microsoft Visio 2010, Microsoft Visio Viewer, or any other Microsoft Office 2010 product that is not specifically listed in the Affected Software table.</p> <p>For more information on this behavior and recommended actions, see <a href="https://support.microsoft.com/kb/830335">Microsoft Knowledge Base Article 830335</a>. For a list of Microsoft Office products that an update may apply to, refer to the Microsoft Knowledge Base Article associated with the specific update.</p> Microsoft Office Microsoft Yes CVE-2017-0030 4497 10521 10522 10649 10162 10513 10514 10025 9432-10495 Remote Code Execution 4497 Remote Code Execution 10521 Remote Code Execution 10522 Remote Code Execution 10649 Remote Code Execution 10162 Remote Code Execution 10513 Remote Code Execution 10514 Remote Code Execution 10025 Remote Code Execution 9432-10495 Important 4497 Important 10521 Important 10522 Important 10649 Important 10162 Important 10513 Important 10514 Important 10025 Important 9432-10495 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A;Older Software Release:Exploitation Less Likely;DOS:N/A 3178682 https://www.microsoft.com/download/details.aspx?familyid=2a28280c-146c-42bf-9a9d-23a27469dd93 3128024 4497 Maybe Security Update https://support.microsoft.com/kb/3178682 4497 3178682 3178686 https://www.microsoft.com/download/details.aspx?familyid=c6996886-1bfd-4cc8-b103-d7e898a8a229 3128032 10521 Maybe Security Update https://support.microsoft.com/kb/3178686 10521 3178686 3178686 https://www.microsoft.com/download/details.aspx?familyid=a0294339-8f6c-4c9f-aa73-c44788ce244b 3128032 10522 Maybe Security Update https://support.microsoft.com/kb/3178686 10522 3178686 3178689 https://www.microsoft.com/download/details.aspx?familyid=6cfa7ba7-03cc-43e4-9728-ed8b79566046 3128035 10649 Maybe Security Update https://support.microsoft.com/kb/3178689 10649 3178689 3178683 https://www.microsoft.com/download/details.aspx?familyid=7f0820b8-d862-41c4-9809-08dde15448e5 3128025 10162 Maybe Security Update https://support.microsoft.com/kb/3178683 10162 3178683 3178687 https://www.microsoft.com/download/details.aspx?familyid=e99f2cb7-2dd3-4aab-8199-8cce5e5f8982 3141542 10513 Maybe Security Update https://support.microsoft.com/kb/3178687 10513 3178687 3178687 https://www.microsoft.com/download/details.aspx?familyid=27ae1a64-f022-409c-adcc-87b935653a42 3141542 10514 Maybe Security Update https://support.microsoft.com/kb/3178687 10514 3178687 3198809 http://go.microsoft.com/fwlink/?LinkId=837729 3198808 10025 Maybe Security Update https://support.microsoft.com/help/3198808 10025 3198809 3178684 https://www.microsoft.com/download/details.aspx?familyid=eacae4f8-1593-42bc-8443-3717eddec51c 3128026 9432-10495 Maybe Security Update https://support.microsoft.com/kb/3178684 9432-10495 3178684 <a href="https://twitter.com/j00sean">@j00sean</a> 1.0 2017-03-14T07:00:00 <p>Information published.</p> Microsoft Office Memory Corruption Vulnerability <p>A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an attacker could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.</p> <p>Exploitation of the vulnerability requires that a user open a specially crafted file with an affected version of Microsoft Office software. In an email attack scenario, an attacker could exploit the vulnerability by sending the specially crafted file to the user and convincing the user to open the file. In a web-based attack scenario, an attacker could host a website (or leverage a compromised website that accepts or hosts user-provided content) that contains a specially crafted file designed to exploit the vulnerability. An attacker would have no way to force users to visit the website. Instead, an attacker would have to convince users to click a link, typically by way of an enticement in an email or instant message, and then convince them to open the specially crafted file.</p> <p>Note that the Preview Pane is not an attack vector for this vulnerability.</p> <p>The security update addresses the vulnerability by correcting how Office handles objects in memory.</p> <p><strong>I have Microsoft Word 2010 installed. Why am I not being offered the 3178686 update?</strong> The 3178686 update only applies to systems running specific configurations of Microsoft Office 2010. Some configurations will not be offered the update. I am being offered this update for software that is not specifically indicated as being affected in the Affected Software and Vulnerability Severity Ratings table. Why am I being offered this update?</p> <p><strong>When updates address vulnerable code that exists in a component that is shared between multiple Microsoft Office products or shared between multiple versions of the same Microsoft Office product, the update is considered to be applicable to all supported products and versions that contain the vulnerable component.</strong> For example, when an update applies to Microsoft Office 2007 products, only Microsoft Office 2007 may be specifically listed in the Affected Software table. However, the update could apply to Microsoft Word 2007, Microsoft Excel 2007, Microsoft Visio 2007, Microsoft Compatibility Pack, Microsoft Excel Viewer, or any other Microsoft Office 2007 product that is not specifically listed in the Affected Software table. Furthermore, when an update applies to Microsoft Office 2010 products, only Microsoft Office 2010 may be specifically listed in the Affected Software table. However, the update could apply to Microsoft Word 2010, Microsoft Excel 2010, Microsoft Visio 2010, Microsoft Visio Viewer, or any other Microsoft Office 2010 product that is not specifically listed in the Affected Software table.</p> <p>For more information on this behavior and recommended actions, see <a href="https://support.microsoft.com/kb/830335">Microsoft Knowledge Base Article 830335</a>. For a list of Microsoft Office products that an update may apply to, refer to the Microsoft Knowledge Base Article associated with the specific update.</p> Microsoft Office Microsoft Yes CVE-2017-0031 4497 10521 10522 10162 10513 10514 10025 Remote Code Execution 4497 Remote Code Execution 10521 Remote Code Execution 10522 Remote Code Execution 10162 Remote Code Execution 10513 Remote Code Execution 10514 Remote Code Execution 10025 Important 4497 Important 10521 Important 10522 Important 10162 Important 10513 Important 10514 Important 10025 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A;Older Software Release:Exploitation More Likely;DOS:N/A 3178682 https://www.microsoft.com/download/details.aspx?familyid=2a28280c-146c-42bf-9a9d-23a27469dd93 3128024 4497 Maybe Security Update https://support.microsoft.com/kb/3178682 4497 3178682 3178686 https://www.microsoft.com/download/details.aspx?familyid=c6996886-1bfd-4cc8-b103-d7e898a8a229 3128032 10521 Maybe Security Update https://support.microsoft.com/kb/3178686 10521 3178686 3178686 https://www.microsoft.com/download/details.aspx?familyid=a0294339-8f6c-4c9f-aa73-c44788ce244b 3128032 10522 Maybe Security Update https://support.microsoft.com/kb/3178686 10522 3178686 3178683 https://www.microsoft.com/download/details.aspx?familyid=7f0820b8-d862-41c4-9809-08dde15448e5 3128025 10162 Maybe Security Update https://support.microsoft.com/kb/3178683 10162 3178683 3178687 https://www.microsoft.com/download/details.aspx?familyid=e99f2cb7-2dd3-4aab-8199-8cce5e5f8982 3141542 10513 Maybe Security Update https://support.microsoft.com/kb/3178687 10513 3178687 3178687 https://www.microsoft.com/download/details.aspx?familyid=27ae1a64-f022-409c-adcc-87b935653a42 3141542 10514 Maybe Security Update https://support.microsoft.com/kb/3178687 10514 3178687 3198809 http://go.microsoft.com/fwlink/?LinkId=837729 3198808 10025 Maybe Security Update https://support.microsoft.com/help/3198808 10025 3198809 <a href="https://twitter.com/j00sean">@j00sean</a> 1.0 2017-03-14T07:00:00 <p>Information published.</p> Scripting Engine Memory Corruption Vulnerability <p>A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p> <p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Internet Explorer and then convince a user to view the website. An attacker could also embed an ActiveX control marked &quot;safe for initialization&quot; in an application or Microsoft Office document that hosts the IE rendering engine. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p> <p>The security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.</p> Microsoft Edge (HTML-based) Microsoft Yes CVE-2017-0032 10724-10729 10724-10735 10724-10789 10724-10788 10724-10852 10724-10853 Remote Code Execution 10724-10729 Remote Code Execution 10724-10735 Remote Code Execution 10724-10789 Remote Code Execution 10724-10788 Remote Code Execution 10724-10852 Remote Code Execution 10724-10853 Critical 10724-10729 Critical 10724-10735 Critical 10724-10789 Critical 10724-10788 Critical 10724-10852 Critical 10724-10853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A;DOS:N/A 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10729 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10735 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10789 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10788 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10852 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10853 4012606 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012606 3210720 10724-10729 10724-10735 Yes Security Update https://support.microsoft.com/en-us/kb/4012606 10724-10729 10724-10735 4012606 4013198 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013198 3210721 10724-10789 10724-10788 Yes Security Update https://support.microsoft.com/en-us/kb/4013198 10724-10789 10724-10788 4013198 4013429 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013429 3213986 10724-10852 10724-10853 Yes Security Update https://support.microsoft.com/en-us/kb/4013429 10724-10852 10724-10853 4013429 Anonymous, working with <a href="http://www.zerodayinitiative.com/"> Trend Micro's Zero Day Initiative</a> Hao Linan of <a href="http://www.360.cn/">Qihoo 360 Vulcan Team</a> <a href="www.weibo.com/babyboaes">Qixun Zhao</a> of <a href="http://www.360.cn/">Qihoo 360 Skyeye Labs</a> 1.0 2017-03-14T07:00:00 <p>Information published.</p> Microsoft Browser Spoofing Vulnerability <p>A spoofing vulnerability exists when Microsoft browsers do not properly parse HTTP content. An attacker who successfully exploited this vulnerability could trick a user by redirecting the user to a specially crafted website. The specially crafted website could either spoof content or serve as a pivot to chain an attack with other vulnerabilities in web services.</p> <p>To exploit the vulnerability, the user must click a specially crafted URL. In an email attack scenario, an attacker could send an email message containing the specially crafted URL to the user in an attempt to convince the user to click it.</p> <p>In a web-based attack scenario, an attacker could host a specially crafted website designed to appear as a legitimate website to the user. However, the attacker would have no way to force the user to visit the specially crafted website. The attacker would have to convince the user to visit the specially crafted website, typically by way of enticement in an email or instant message, and then convince the user to interact with content on the website.</p> <p>The update addresses the vulnerability by correcting how Microsoft browsers parse HTTP responses.</p> Microsoft Browsers Microsoft Yes CVE-2017-0033 10486-10816 10724-10729 10724-10735 10724-10789 10724-10788 10724-10852 10724-10853 10486-10481 10486-10482 10486-10483 10486-10484 10486-10729 10486-10735 10486-10789 10486-10788 10486-10852 10486-10853 Spoofing 10486-10816 Spoofing 10724-10729 Spoofing 10724-10735 Spoofing 10724-10789 Spoofing 10724-10788 Spoofing 10724-10852 Spoofing 10724-10853 Spoofing 10486-10481 Spoofing 10486-10482 Spoofing 10486-10483 Spoofing 10486-10484 Spoofing 10486-10729 Spoofing 10486-10735 Spoofing 10486-10789 Spoofing 10486-10788 Spoofing 10486-10852 Spoofing 10486-10853 Important 10486-10816 Important 10724-10729 Important 10724-10735 Important 10724-10789 Important 10724-10788 Important 10724-10852 Important 10724-10853 Important 10486-10481 Important 10486-10482 Low 10486-10483 Important 10486-10484 Important 10486-10729 Important 10486-10735 Important 10486-10789 Important 10486-10788 Important 10486-10852 Important 10486-10853 Publicly Disclosed:Yes;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:N/A;DOS:N/A 2.4 2.2 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10486-10816 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10724-10729 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10724-10735 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10724-10789 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10724-10788 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10724-10852 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10724-10853 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10486-10481 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10486-10482 2.4 2.2 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10486-10483 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10486-10484 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10486-10729 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10486-10735 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10486-10789 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10486-10788 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10486-10852 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10486-10853 4013429 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013429 3213986 10486-10816 10724-10852 10724-10853 10486-10852 10486-10853 Yes Security Update https://support.microsoft.com/en-us/kb/4013429 10486-10816 10724-10852 10724-10853 10486-10852 10486-10853 4013429 4012606 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012606 3210720 10724-10729 10724-10735 10486-10729 10486-10735 Yes Security Update https://support.microsoft.com/en-us/kb/4012606 10724-10729 10724-10735 10486-10729 10486-10735 4012606 4013198 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013198 3210721 10724-10789 10724-10788 10486-10789 10486-10788 Yes Security Update https://support.microsoft.com/en-us/kb/4013198 10724-10789 10724-10788 10486-10789 10486-10788 4013198 4012216 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012216 3205401 10486-10481 10486-10482 10486-10483 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012216 10486-10481 10486-10482 10486-10483 4012216 4012204 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012204 3203621 10486-10481 10486-10482 10486-10483 Yes IE Cumulative https://support.microsoft.com/en-us/kb/4012204 10486-10481 10486-10482 10486-10483 4012204 4012216 3205401 10486-10484 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012216 10486-10484 4012216 1.0 2017-03-14T07:00:00 <p>Information published.</p> Scripting Engine Memory Corruption Vulnerability <p>A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p> <p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Internet Explorer and then convince a user to view the website. An attacker could also embed an ActiveX control marked &quot;safe for initialization&quot; in an application or Microsoft Office document that hosts the IE rendering engine. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p> <p>The security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.</p> Microsoft Edge (HTML-based) Microsoft Yes CVE-2017-0034 10724-10852 10724-10853 Remote Code Execution 10724-10852 Remote Code Execution 10724-10853 Critical 10724-10852 Critical 10724-10853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A;DOS:N/A 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10852 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10853 4013429 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013429 3213986 10724-10852 10724-10853 Yes Security Update https://support.microsoft.com/en-us/kb/4013429 10724-10852 10724-10853 4013429 Zhong Zhaochen (<a href="https://twitter.com/asnine">@asnine</a>) of <a href="http://neusoft.com/">Neusoft</a> 1.0 2017-03-14T07:00:00 <p>Information published.</p> Scripting Engine Memory Corruption Vulnerability <p>A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p> <p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Internet Explorer and then convince a user to view the website. An attacker could also embed an ActiveX control marked &quot;safe for initialization&quot; in an application or Microsoft Office document that hosts the IE rendering engine. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p> <p>The security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.</p> Microsoft Edge (HTML-based) Microsoft Yes CVE-2017-0035 10724-10729 10724-10735 10724-10789 10724-10788 10724-10852 10724-10853 Remote Code Execution 10724-10729 Remote Code Execution 10724-10735 Remote Code Execution 10724-10789 Remote Code Execution 10724-10788 Remote Code Execution 10724-10852 Remote Code Execution 10724-10853 Critical 10724-10729 Critical 10724-10735 Critical 10724-10789 Critical 10724-10788 Critical 10724-10852 Critical 10724-10853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A;DOS:N/A 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10729 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10735 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10789 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10788 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10852 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10853 4012606 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012606 3210720 10724-10729 10724-10735 Yes Security Update https://support.microsoft.com/en-us/kb/4012606 10724-10729 10724-10735 4012606 4013198 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013198 3210721 10724-10789 10724-10788 Yes Security Update https://support.microsoft.com/en-us/kb/4013198 10724-10789 10724-10788 4013198 4013429 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013429 3213986 10724-10852 10724-10853 Yes Security Update https://support.microsoft.com/en-us/kb/4013429 10724-10852 10724-10853 4013429 Dhanesh Kizhakkinan of <a href="https://www.fireeye.com">FireEye Inc</a> 1.0 2017-03-14T07:00:00 <p>Information published.</p> Microsoft Browser Memory Corruption Vulnerability <p>A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory. The vulnerability could corrupt memory in a way that could allow an attacker to execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, the attacker could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p> <p>An attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft browsers, and then convince a user to view the website. The attacker could also take advantage of compromised websites, or websites that accept or host user-provided content or advertisements, by adding specially crafted content that could exploit the vulnerability. In all cases, however, an attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically via an enticement in email or instant message, or by getting them to open an email attachment.</p> <p>The security update addresses the vulnerability by modifying how Microsoft browsers handle objects in memory.</p> Microsoft Browsers Microsoft Yes CVE-2017-0037 10486-10816 10555-10378 10486-10481 10486-10482 10486-10483 10486-10484 10486-10729 10486-10735 10486-10789 10486-10788 10486-10852 10486-10853 10724-10729 10724-10735 10724-10789 10724-10788 10724-10852 10724-10853 Remote Code Execution 10486-10816 Remote Code Execution 10555-10378 Remote Code Execution 10486-10481 Remote Code Execution 10486-10482 Remote Code Execution 10486-10483 Remote Code Execution 10486-10484 Remote Code Execution 10486-10729 Remote Code Execution 10486-10735 Remote Code Execution 10486-10789 Remote Code Execution 10486-10788 Remote Code Execution 10486-10852 Remote Code Execution 10486-10853 Remote Code Execution 10724-10729 Remote Code Execution 10724-10735 Remote Code Execution 10724-10789 Remote Code Execution 10724-10788 Remote Code Execution 10724-10852 Remote Code Execution 10724-10853 Moderate 10486-10816 Moderate 10555-10378 Critical 10486-10481 Critical 10486-10482 Moderate 10486-10483 Critical 10486-10484 Critical 10486-10729 Critical 10486-10735 Critical 10486-10789 Critical 10486-10788 Critical 10486-10852 Critical 10486-10853 Critical 10724-10729 Critical 10724-10735 Critical 10724-10789 Critical 10724-10788 Critical 10724-10852 Critical 10724-10853 Publicly Disclosed:Yes;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A 6.4 5.8 CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O 10486-10816 6.4 5.8 CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O 10555-10378 7.5 6.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10486-10481 7.5 6.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10486-10482 6.4 5.8 CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O 10486-10483 7.5 6.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10486-10484 7.5 6.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10486-10729 7.5 6.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10486-10735 7.5 6.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10486-10789 7.5 6.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10486-10788 7.5 6.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10486-10852 7.5 6.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10486-10853 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O 10724-10729 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O 10724-10735 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O 10724-10789 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O 10724-10788 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O 10724-10852 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O 10724-10853 4013429 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013429 3213986 10486-10816 10486-10852 10486-10853 10724-10852 10724-10853 Yes Security Update https://support.microsoft.com/en-us/kb/4013429 10486-10816 10486-10852 10486-10853 10724-10852 10724-10853 4013429 4012217 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012217 3205409 10555-10378 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012217 10555-10378 4012217 4012204 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012204 3203621 10555-10378 10486-10481 10486-10482 10486-10483 Yes IE Cumulative https://support.microsoft.com/en-us/help/4012204 10555-10378 10486-10481 10486-10482 10486-10483 4012204 4012216 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012216 3205401 10486-10481 10486-10482 10486-10483 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012216 10486-10481 10486-10482 10486-10483 4012216 4012216 3205401 10486-10484 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012216 10486-10484 4012216 4012606 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012606 3210720 10486-10729 10486-10735 10724-10729 10724-10735 Yes Security Update https://support.microsoft.com/en-us/kb/4012606 10486-10729 10486-10735 10724-10729 10724-10735 4012606 4013198 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013198 3210721 10486-10789 10486-10788 10724-10789 10724-10788 Yes Security Update https://support.microsoft.com/en-us/kb/4013198 10486-10789 10486-10788 10724-10789 10724-10788 4013198 Ivan Fratric, working with <a href="http://www.google.com/">Google Project Zero</a> 1.0 2017-03-14T07:00:00 <p>Information published.</p> Windows GDI Information Disclosure Vulnerability <p>A Win32k information disclosure vulnerability exists when the Windows GDI component improperly discloses kernel memory addresses. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.</p> <p>To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application. The vulnerability would not allow an attacker to execute code or to elevate user rights directly, but it could be used to obtain information that could be used to try to further compromise the affected system.</p> <p>The security update addresses the vulnerability by correcting how the Windows GDI component handles objects in memory.</p> <p><strong>Does this release contain any additional security-related changes to functionality?</strong> Yes. In addition to the security updates that address the vulnerabilities described in this bulletin, Microsoft is releasing an update that replaces certain third party libraries which were used by Windows 8.1, Windows Server 2012, Windows Server 2012 R2, Windows Server 2016, and all versions of Windows 10. This update provides the same functionality in a more secure and reliable way.</p> Microsoft Graphics Component Microsoft Yes CVE-2017-0038 10816 10855 10729 10735 10789 10788 10852 10853 10047 10048 10481 10482 10484 9312 10287 9311 9318 9344 10050 10051 10049 10378 10379 10483 10543 4393 9316 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10729 Information Disclosure 10735 Information Disclosure 10789 Information Disclosure 10788 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10047 Information Disclosure 10048 Information Disclosure 10481 Information Disclosure 10482 Information Disclosure 10484 Information Disclosure 9312 Information Disclosure 10287 Information Disclosure 9311 Information Disclosure 9318 Information Disclosure 9344 Information Disclosure 10050 Information Disclosure 10051 Information Disclosure 10049 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 4393 Information Disclosure 9316 Important 10816 Important 10855 Important 10729 Important 10735 Important 10789 Important 10788 Important 10852 Important 10853 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 9312 Important 10287 Important 9311 Important 9318 Important 9344 Important 10050 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Important 4393 Important 9316 Publicly Disclosed:Yes;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10816 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10855 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10729 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10735 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10789 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10788 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10852 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10853 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10047 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10048 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10481 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10482 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10484 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9312 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10287 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9311 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9318 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9344 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10050 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10051 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10049 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10378 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10379 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10483 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10543 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 4393 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9316 4013429 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013429 3213986 10816 10855 10852 10853 Yes Security Update https://support.microsoft.com/en-us/kb/4013429 10816 10855 10852 10853 4013429 4012606 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012606 3210720 10729 10735 Yes Security Update https://support.microsoft.com/en-us/kb/4012606 10729 10735 4012606 4013198 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013198 3210721 10789 10788 Yes Security Update https://support.microsoft.com/en-us/kb/4013198 10789 10788 4013198 4012215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012215 3212646 10047 10048 10050 10051 10049 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012215 10047 10048 10050 10051 10049 4012215 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10047 10050 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;custerr.dll;vmswitch.sys;msxml3.dll;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10047 10050 4012212 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10048 10051 10049 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10048 10051 10049 4012212 4012216 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012216 3205401 10481 10482 10483 10543 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012216 10481 10482 10483 10543 4012216 4012213 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012213 10481 10482 10483 10543 msxpspcl6.dll;msxpsps.dll;hvax64.exe;hvix64.exe;srv.sys;quartz.dll;n/a;win32k.sys;gdiplus.dll;gdi32.dll;icm32.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;dnsapi.dll;msxml3.dll;custerr.dll;vmswitch.sys;dnsrslvr.dll;mrxsmb20.sys;mrxsmb.sys;dxgkrnl.sys;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012213 10481 10482 10483 10543 4012213 4012216 3205401 10484 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012216 10484 4012216 4017018 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4017018 9312 10287 9311 9318 9344 4393 9316 Yes Security Update https://support.microsoft.com/help/4017018 9312 10287 9311 9318 9344 4393 9316 4017018 4012217 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012217 3205409 10378 10379 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012217 10378 10379 4012217 4012214 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012214 MS16-110, 3187754 10378 10379 n/a;msxpspcl6.dll;msxpsps.dll;srv.sys;win32k.sys;gdiplus.dll;gdi32.dll;icm32.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dxgkrnl.sys 0001-01-01T00:00:00 Security Only https://support.microsoft.com/en-us/help/4012214 10378 10379 4012214 Mateusz Jurczyk of <a href="http://www.google.com/">Google Project Zero</a> 2.0 2017-04-11T07:00:00 <p>Information revised to announce the release of update 4017018 for Windows Vista and Windows Server 2008. The update replaces update 4012583 for CVE-2017-0038 only, to comprehensively address the vulnerability. Microsoft recommends that customers running the affected software install the security update to be fully protected from the vulnerability described in this bulletin. See Microsoft Knowledge Base Article 4017018 for more information.</p> 1.0 2017-03-14T07:00:00 <p>Information published.</p> 2.1 2017-04-18T07:00:00 <p>Affected software updated with new package information.</p> 3.0 2017-05-09T07:00:00 <p>Microsoft has re-released security update 4017018 for affected editions of Windows Server 2008. The re-release has been re-classified as a security update. Microsoft recommends that customers should install update 4017018 to be fully protected from CVE-2017-0038. Customers who have already installed the update do not need to take any further action.</p> Windows DLL Loading Remote Code Execution Vulnerability <p>A remote code execution vulnerability exists when Windows improperly validates input before loading dynamic link library (DLL) files. An attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.</p> <p>To exploit the vulnerability, an attacker must first gain access to the local system and have the ability to execute a malicious application.</p> <p>The security update addresses the vulnerability by correcting how Windows validates input before loading DLL files.</p> Windows DLL Loading Microsoft Yes CVE-2017-0039 10047 10048 9312 10287 9311 9318 9344 10050 10051 10049 4393 9316 Remote Code Execution 10047 Remote Code Execution 10048 Remote Code Execution 9312 Remote Code Execution 10287 Remote Code Execution 9311 Remote Code Execution 9318 Remote Code Execution 9344 Remote Code Execution 10050 Remote Code Execution 10051 Remote Code Execution 10049 Remote Code Execution 4393 Remote Code Execution 9316 Important 10047 Important 10048 Important 9312 Important 10287 Important 9311 Important 9318 Important 9344 Important 10050 Important 10051 Important 10049 Important 4393 Important 9316 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A;Older Software Release:Exploitation Less Likely;DOS:N/A 7.8 7.2 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10047 7.8 7.2 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10048 7.8 7.2 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 9312 7.8 7.2 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10287 7.8 7.2 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 9311 7.8 7.2 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 9318 7.8 7.2 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 9344 7.8 7.2 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10050 7.8 7.2 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10051 7.8 7.2 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10049 7.8 7.2 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 4393 7.8 7.2 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 9316 4012215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012215 3212646 10047 10048 10050 10051 10049 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012215 10047 10048 10050 10051 10049 4012215 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10047 10050 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;custerr.dll;vmswitch.sys;msxml3.dll;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10047 10050 4012212 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10048 10051 10049 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10048 10051 10049 4012212 3217587 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3217587 9312 10287 9311 9318 9344 4393 9316 lang;imjppdmg.exe 0001-01-01T00:00:00 Yes Security Update https://support.microsoft.com/en-us/kb/3217587 9312 10287 9311 9318 9344 4393 9316 3217587 lywang of <a href="http://xlab.tencent.com/cn/">Tencent Xuanwu Lab</a> 1.0 2017-03-14T07:00:00 <p>Information published.</p> Scripting Engine Memory Corruption Vulnerability <p>A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p> <p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Internet Explorer and then convince a user to view the website. An attacker could also embed an ActiveX control marked &quot;safe for initialization&quot; in an application or Microsoft Office document that hosts the IE rendering engine. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p> <p>The security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.</p> Internet Explorer Microsoft Yes CVE-2017-0040 10486-10816 10555-10378 10486-10481 10486-10482 10486-10483 10486-10484 10486-10047 10486-10048 10486-10051 10486-10729 10486-10735 10486-10789 10486-10788 10486-10852 10486-10853 10336-9316 10336-4393 10336-9312 10336-9318 Remote Code Execution 10486-10816 Remote Code Execution 10555-10378 Remote Code Execution 10486-10481 Remote Code Execution 10486-10482 Remote Code Execution 10486-10483 Remote Code Execution 10486-10484 Remote Code Execution 10486-10047 Remote Code Execution 10486-10048 Remote Code Execution 10486-10051 Remote Code Execution 10486-10729 Remote Code Execution 10486-10735 Remote Code Execution 10486-10789 Remote Code Execution 10486-10788 Remote Code Execution 10486-10852 Remote Code Execution 10486-10853 Remote Code Execution 10336-9316 Remote Code Execution 10336-4393 Remote Code Execution 10336-9312 Remote Code Execution 10336-9318 Moderate 10486-10816 Moderate 10555-10378 Critical 10486-10481 Critical 10486-10482 Moderate 10486-10483 Critical 10486-10484 Critical 10486-10047 Critical 10486-10048 Moderate 10486-10051 Critical 10486-10729 Critical 10486-10735 Critical 10486-10789 Critical 10486-10788 Critical 10486-10852 Critical 10486-10853 Critical 10336-9316 Critical 10336-4393 Moderate 10336-9312 Moderate 10336-9318 Publicly Disclosed:Yes;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A 6.4 5.8 CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10486-10816 6.4 5.8 CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10555-10378 7.5 6.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10486-10481 7.5 6.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10486-10482 6.4 5.8 CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10486-10483 7.5 6.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10486-10484 7.5 6.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10486-10047 7.5 6.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10486-10048 6.4 5.8 CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10486-10051 7.5 6.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10486-10729 7.5 6.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10486-10735 7.5 6.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10486-10789 7.5 6.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10486-10788 7.5 6.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10486-10852 7.5 6.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10486-10853 7.5 6.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10336-9316 7.5 6.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10336-4393 6.4 5.8 CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10336-9312 6.4 5.8 CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10336-9318 4013429 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013429 3213986 10486-10816 10486-10852 10486-10853 Yes Security Update https://support.microsoft.com/en-us/kb/4013429 10486-10816 10486-10852 10486-10853 4013429 4012217 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012217 3205409 10555-10378 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012217 10555-10378 4012217 4012204 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012204 3203621 10555-10378 10486-10481 10486-10482 10486-10483 10486-10047 10486-10048 10486-10051 10336-9316 10336-4393 10336-9312 10336-9318 Yes IE Cumulative https://support.microsoft.com/en-us/help/4012204 10555-10378 10486-10481 10486-10482 10486-10483 10486-10047 10486-10048 10486-10051 10336-9316 10336-4393 10336-9312 10336-9318 4012204 4012216 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012216 3205401 10486-10481 10486-10482 10486-10483 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012216 10486-10481 10486-10482 10486-10483 4012216 4012216 3205401 10486-10484 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012216 10486-10484 4012216 4012215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012215 3212646 10486-10047 10486-10048 10486-10051 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012215 10486-10047 10486-10048 10486-10051 4012215 4012606 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012606 3210720 10486-10729 10486-10735 Yes Security Update https://support.microsoft.com/en-us/kb/4012606 10486-10729 10486-10735 4012606 4013198 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013198 3210721 10486-10789 10486-10788 Yes Security Update https://support.microsoft.com/en-us/kb/4013198 10486-10789 10486-10788 4013198 Scott Bell of Security-Assessment.com 1.0 2017-03-14T07:00:00 <p>Information published.</p> Windows DirectShow Information Disclosure Vulnerability <p>An information disclosure vulnerability exists in the way Windows DirectShow handles objects in memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise a target system.</p> <p>In a web-based attack scenario, an attacker could host a website used to attempt to exploit the vulnerability. Additionally, compromised websites and websites that accept or host user-provided content could contain specially crafted content that could be used to exploit the vulnerability. However, in all cases, an attacker would have no way to force users to view attacker-controlled content. Instead, an attacker would have to convince users to take action. For example, an attacker could trick users into clicking a link that takes them to the attacker's site.</p> <p>The security update addresses the vulnerability by correcting how Windows DirectShow handles objects in memory.</p> Windows DirectShow Microsoft Yes CVE-2017-0042 10789 10788 10047 10048 10481 10482 10484 9312 9311 9318 10050 10051 10483 4393 9316 10729 10735 10852 10853 10816 10378 Information Disclosure 10789 Information Disclosure 10788 Information Disclosure 10047 Information Disclosure 10048 Information Disclosure 10481 Information Disclosure 10482 Information Disclosure 10484 Information Disclosure 9312 Information Disclosure 9311 Information Disclosure 9318 Information Disclosure 10050 Information Disclosure 10051 Information Disclosure 10483 Information Disclosure 4393 Information Disclosure 9316 Information Disclosure 10729 Information Disclosure 10735 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10378 Important 10789 Important 10788 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 9312 Important 9311 Important 9318 Important 10050 Important 10051 Important 10483 Important 4393 Important 9316 Important 10729 Important 10735 Important 10852 Important 10853 Important 10816 Important 10378 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A 3.7 3.4 CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10789 3.7 3.4 CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10788 3.7 3.4 CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10047 3.7 3.4 CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10048 3.7 3.4 CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10481 3.7 3.4 CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10482 3.7 3.4 CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10484 3.7 3.4 CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9312 3.7 3.4 CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9311 3.7 3.4 CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9318 3.7 3.4 CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10050 3.7 3.4 CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10051 3.7 3.4 CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10483 3.7 3.4 CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 4393 3.7 3.4 CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9316 3.7 3.4 CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10729 3.7 3.4 CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10735 3.7 3.4 CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10852 3.7 3.4 CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10853 3.7 3.4 CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10816 3.7 3.4 CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10378 4013198 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013198 3210721 10789 10788 Yes Security Update https://support.microsoft.com/en-us/kb/4013198 10789 10788 4013198 4012215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012215 3212646 10047 10048 10050 10051 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012215 10047 10048 10050 10051 4012215 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10047 10050 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;custerr.dll;vmswitch.sys;msxml3.dll;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10047 10050 4012212 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10048 10051 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10048 10051 4012212 4012216 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012216 3205401 10481 10482 10483 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012216 10481 10482 10483 4012216 4012213 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012213 10481 10482 10483 msxpspcl6.dll;msxpsps.dll;hvax64.exe;hvix64.exe;srv.sys;quartz.dll;n/a;win32k.sys;gdiplus.dll;gdi32.dll;icm32.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;dnsapi.dll;msxml3.dll;custerr.dll;vmswitch.sys;dnsrslvr.dll;mrxsmb20.sys;mrxsmb.sys;dxgkrnl.sys;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012213 10481 10482 10483 4012213 4012216 3205401 10484 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012216 10484 4012216 3214051 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3214051 9312 9311 9318 4393 9316 quartz.dll 0001-01-01T00:00:00 Yes Security Update https://support.microsoft.com/en-us/kb/3214051 9312 9311 9318 4393 9316 3214051 4012606 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012606 3210720 10729 10735 Yes Security Update https://support.microsoft.com/en-us/kb/4012606 10729 10735 4012606 4013429 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013429 3213986 10852 10853 10816 Yes Security Update https://support.microsoft.com/en-us/kb/4013429 10852 10853 10816 4013429 4015551 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015551 4012217 10378 Yes Monthly Rollup https://support.microsoft.com/help/4015551 10378 4015551 4015548 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4015548 10378 ntdsai.dll;combase.dll;ole32.dll;wordpad.exe;win32k.sys;msado15.dll;quartz.dll;mfmjpegdec.dll;storvsp.sys;vmswitch.sys;vpcivsp.sys;basicrender.sys;atmfd.dll 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/help/4015548 10378 4015548 Abdulrahman Alqabandi (<a href="https://twitter.com/Qab">@qab</a>) 1.0 2017-03-14T07:00:00 <p>Information published.</p> 2.0 2017-04-11T07:00:00 <p>Information revised to announce that the security updates that apply to CVE-2017-0042 for Windows Server 2012 are now available. Customers running Windows Server 2012 should install update 4015548 (Security Only) or 4015551 (Monthly Rollup) to be fully protected from this vulnerability. Customers running other versions of Microsoft Windows do not need to take any further action.</p> Microsoft Active Directory Federation Services Information Disclosure <p>An information disclosure vulnerability exists when Windows Active Directory Federation Services (ADFS) honors XML External Entities. An authenticated attacker who successfully exploited this vulnerability would be able to read sensitive information about the target system.</p> <p>To exploit this condition, an authenticated attacker would need to send a specially crafted request to the ADFS service. Note that the information disclosure vulnerability by itself would not be sufficient for an attacker to compromise a system. However, an attacker could combine this vulnerability with additional vulnerabilities to further exploit the system.</p> <p>The update addresses the vulnerability by causing ADFS to ignore these malicious entities.</p> Windows Active Directory Microsoft Yes CVE-2017-0043 10816 10855 9312 9311 9318 10050 10051 10378 10379 10483 10543 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 9312 Information Disclosure 9311 Information Disclosure 9318 Information Disclosure 10050 Information Disclosure 10051 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 10816 Important 10855 Important 9312 Important 9311 Important 9318 Important 10050 Important 10051 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely;Older Software Release:Exploitation Unlikely;DOS:N/A 4.8 4.3 CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 10816 4.8 4.3 CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 10855 4.8 4.3 CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 9312 4.8 4.3 CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 9311 4.8 4.3 CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 9318 4.8 4.3 CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 10050 4.8 4.3 CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 10051 4.8 4.3 CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 10378 4.8 4.3 CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 10379 4.8 4.3 CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 10483 4.8 4.3 CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 10543 4013429 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013429 3213986 10816 10855 Yes Security Update https://support.microsoft.com/en-us/kb/4013429 10816 10855 4013429 3217882 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3217882 9312 9311 9318 Yes Security Update https://support.microsoft.com/kb/3217882 9312 9311 9318 3217882 4012215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012215 3212646 10050 10051 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012215 10050 10051 4012215 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10050 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;custerr.dll;vmswitch.sys;msxml3.dll;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10050 4012212 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10051 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10051 4012212 4012217 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012217 3205409 10378 10379 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012217 10378 10379 4012217 4012214 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012214 MS16-110, 3187754 10378 10379 n/a;msxpspcl6.dll;msxpsps.dll;srv.sys;win32k.sys;gdiplus.dll;gdi32.dll;icm32.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dxgkrnl.sys 0001-01-01T00:00:00 Security Only https://support.microsoft.com/en-us/help/4012214 10378 10379 4012214 4012216 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012216 3205401 10483 10543 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012216 10483 10543 4012216 4012213 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012213 10483 10543 msxpspcl6.dll;msxpsps.dll;hvax64.exe;hvix64.exe;srv.sys;quartz.dll;n/a;win32k.sys;gdiplus.dll;gdi32.dll;icm32.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;dnsapi.dll;msxml3.dll;custerr.dll;vmswitch.sys;dnsrslvr.dll;mrxsmb20.sys;mrxsmb.sys;dxgkrnl.sys;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012213 10483 10543 4012213 1.0 2017-03-14T07:00:00 <p>Information published.</p> Windows GDI Elevation of Privilege Vulnerability <p>An elevation of privilege vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p> <p>To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system.</p> <p>The update addresses the vulnerability by correcting how GDI handles objects in memory and by preventing instances of unintended user-mode privilege elevation.</p> <p><strong>Does this release contain any additional security-related changes to functionality?</strong> Yes. In addition to the security updates that address the vulnerabilities described in this bulletin, Microsoft is releasing an update that replaces certain third party libraries which were used by Windows 8.1, Windows Server 2012, Windows Server 2012 R2, Windows Server 2016, and all versions of Windows 10. This update provides the same functionality in a more secure and reliable way.</p> Microsoft Graphics Component Microsoft Yes CVE-2017-0047 10816 10729 10735 10789 10788 10852 10853 10047 10048 10481 10482 10484 9312 10287 9311 9318 9344 10050 10051 10049 10378 10379 10483 10543 10855 4393 9316 Elevation of Privilege 10816 Elevation of Privilege 10729 Elevation of Privilege 10735 Elevation of Privilege 10789 Elevation of Privilege 10788 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10047 Elevation of Privilege 10048 Elevation of Privilege 10481 Elevation of Privilege 10482 Elevation of Privilege 10484 Elevation of Privilege 9312 Elevation of Privilege 10287 Elevation of Privilege 9311 Elevation of Privilege 9318 Elevation of Privilege 9344 Elevation of Privilege 10050 Elevation of Privilege 10051 Elevation of Privilege 10049 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 10855 Elevation of Privilege 4393 Elevation of Privilege 9316 Important 10816 Important 10729 Important 10735 Important 10789 Important 10788 Important 10852 Important 10853 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 9312 Important 10287 Important 9311 Important 9318 Important 9344 Important 10050 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Important 10855 Important 4393 Important 9316 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10816 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10729 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10735 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10789 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10788 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10852 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10853 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10047 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10048 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10481 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10482 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10484 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9312 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10287 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9311 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9318 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9344 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10050 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10051 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10049 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10378 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10379 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10483 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10543 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 4393 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9316 4013429 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013429 3213986 10816 10852 10853 10855 Yes Security Update https://support.microsoft.com/en-us/kb/4013429 10816 10852 10853 10855 4013429 4012606 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012606 3210720 10729 10735 Yes Security Update https://support.microsoft.com/en-us/kb/4012606 10729 10735 4012606 4013198 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013198 3210721 10789 10788 Yes Security Update https://support.microsoft.com/en-us/kb/4013198 10789 10788 4013198 4012215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012215 3212646 10047 10048 10050 10051 10049 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012215 10047 10048 10050 10051 10049 4012215 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10047 10050 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;custerr.dll;vmswitch.sys;msxml3.dll;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10047 10050 4012212 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10048 10051 10049 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10048 10051 10049 4012212 4012216 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012216 3205401 10481 10482 10483 10543 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012216 10481 10482 10483 10543 4012216 4012213 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012213 10481 10482 10483 10543 msxpspcl6.dll;msxpsps.dll;hvax64.exe;hvix64.exe;srv.sys;quartz.dll;n/a;win32k.sys;gdiplus.dll;gdi32.dll;icm32.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;dnsapi.dll;msxml3.dll;custerr.dll;vmswitch.sys;dnsrslvr.dll;mrxsmb20.sys;mrxsmb.sys;dxgkrnl.sys;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012213 10481 10482 10483 10543 4012213 4012216 3205401 10484 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012216 10484 4012216 4012497 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012497 3204723 9312 10287 9311 9318 9344 4393 9316 win32k.sys 0001-01-01T00:00:00 Yes Security Update https://support.microsoft.com/en-us/kb/4012497 9312 10287 9311 9318 9344 4393 9316 4012497 4012217 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012217 3205409 10378 10379 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012217 10378 10379 4012217 4012214 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012214 MS16-110, 3187754 10378 10379 n/a;msxpspcl6.dll;msxpsps.dll;srv.sys;win32k.sys;gdiplus.dll;gdi32.dll;icm32.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dxgkrnl.sys 0001-01-01T00:00:00 Security Only https://support.microsoft.com/en-us/help/4012214 10378 10379 4012214 bee13oy of CloverSec Labs, working with <a href="http://www.zerodayinitiative.com/">Trend Micro’s Zero Day Initiative (ZDI)</a> 1.0 2017-03-14T07:00:00 <p>Information published.</p> Windows Elevation of Privilege Vulnerability <p>An elevation of privilege vulnerability exists in the way that the Windows Kernel API enforces permissions. An attacker who successfully exploited the vulnerability could impersonate processes, interject cross-process communication, or interrupt system functionality.</p> <p>To exploit the vulnerability, a locally authenticated attacker could run a specially crafted application.</p> <p>The security update addresses the vulnerability by helping to ensure that the Windows Kernel API properly enforces permissions.</p> Windows Kernel Microsoft Yes CVE-2017-0050 9312 9311 9318 9344 10729 10735 10789 10788 10852 10853 10047 10048 10481 10482 10484 10287 10050 10051 10049 10378 10379 10483 10543 10816 10855 4393 9316 Elevation of Privilege 9312 Elevation of Privilege 9311 Elevation of Privilege 9318 Elevation of Privilege 9344 Elevation of Privilege 10729 Elevation of Privilege 10735 Elevation of Privilege 10789 Elevation of Privilege 10788 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10047 Elevation of Privilege 10048 Elevation of Privilege 10481 Elevation of Privilege 10482 Elevation of Privilege 10484 Elevation of Privilege 10287 Elevation of Privilege 10050 Elevation of Privilege 10051 Elevation of Privilege 10049 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 4393 Elevation of Privilege 9316 Important 9312 Important 9311 Important 9318 Important 9344 Important 10729 Important 10735 Important 10789 Important 10788 Important 10852 Important 10853 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 10287 Important 10050 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Important 10816 Important 10855 Important 4393 Important 9316 Publicly Disclosed:Yes;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A 7.1 6.5 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:P/RL:T/RC:C 9312 7.1 6.5 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:P/RL:T/RC:C 9311 7.1 6.5 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:P/RL:T/RC:C 9318 7.1 6.5 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:P/RL:T/RC:C 9344 7.1 6.5 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:P/RL:T/RC:C 10729 7.1 6.5 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:P/RL:T/RC:C 10735 7.1 6.5 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:P/RL:T/RC:C 10789 7.1 6.5 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:P/RL:T/RC:C 10788 7.1 6.5 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:P/RL:T/RC:C 10852 7.1 6.5 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:P/RL:T/RC:C 10853 7.1 6.5 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:P/RL:T/RC:C 10047 7.1 6.5 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:P/RL:T/RC:C 10048 7.1 6.5 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:P/RL:T/RC:C 10481 7.1 6.5 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:P/RL:T/RC:C 10482 7.1 6.5 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:P/RL:T/RC:C 10484 7.1 6.5 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:P/RL:T/RC:C 10287 7.1 6.5 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:P/RL:T/RC:C 10050 7.1 6.5 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:P/RL:T/RC:C 10051 7.1 6.5 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:P/RL:T/RC:C 10049 7.1 6.5 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:P/RL:T/RC:C 10378 7.1 6.5 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:P/RL:T/RC:C 10379 7.1 6.5 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:P/RL:T/RC:C 10483 7.1 6.5 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:P/RL:T/RC:C 10543 7.1 6.5 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:P/RL:T/RC:C 10816 7.1 6.5 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:P/RL:T/RC:C 10855 7.1 6.5 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:P/RL:T/RC:C 4393 7.1 6.5 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:P/RL:T/RC:C 9316 4011981 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4011981 9312 9311 9318 9344 10287 4393 9316 ntkrnlmp.exe;ntkrpamp.exe 0001-01-01T00:00:00 Yes Security Update https://support.microsoft.com/en-us/kb/4011981 9312 9311 9318 9344 10287 4393 9316 4011981 4012606 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012606 3210720 10729 10735 Yes Security Update https://support.microsoft.com/en-us/kb/4012606 10729 10735 4012606 4013198 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013198 3210721 10789 10788 Yes Security Update https://support.microsoft.com/en-us/kb/4013198 10789 10788 4013198 4013429 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013429 3213986 10852 10853 10816 10855 Yes Security Update https://support.microsoft.com/en-us/kb/4013429 10852 10853 10816 10855 4013429 4012215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012215 3212646 10047 10048 10050 10051 10049 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012215 10047 10048 10050 10051 10049 4012215 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10047 10050 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;custerr.dll;vmswitch.sys;msxml3.dll;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10047 10050 4012212 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10048 10051 10049 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10048 10051 10049 4012212 4012216 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012216 3205401 10481 10482 10483 10543 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012216 10481 10482 10483 10543 4012216 4012213 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012213 10481 10482 10483 10543 msxpspcl6.dll;msxpsps.dll;hvax64.exe;hvix64.exe;srv.sys;quartz.dll;n/a;win32k.sys;gdiplus.dll;gdi32.dll;icm32.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;dnsapi.dll;msxml3.dll;custerr.dll;vmswitch.sys;dnsrslvr.dll;mrxsmb20.sys;mrxsmb.sys;dxgkrnl.sys;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012213 10481 10482 10483 10543 4012213 4012216 3205401 10484 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012216 10484 4012216 4012217 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012217 3205409 10378 10379 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012217 10378 10379 4012217 4012214 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012214 MS16-110, 3187754 10378 10379 n/a;msxpspcl6.dll;msxpsps.dll;srv.sys;win32k.sys;gdiplus.dll;gdi32.dll;icm32.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dxgkrnl.sys 0001-01-01T00:00:00 Security Only https://support.microsoft.com/en-us/help/4012214 10378 10379 4012214 1.0 2017-03-14T07:00:00 <p>Information published.</p> Hyper-V Denial of Service Vulnerability <p>A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a privileged user on a guest operating system. To exploit the vulnerability, an attacker who already has a privileged account on a guest operating system, running as a virtual machine, could run a specially crafted application that causes a host machine to crash.</p> <p>To exploit the vulnerability, an attacker who already has a privileged account on a guest operating system, running as a virtual machine, could run a specially crafted application.</p> <p>The security update addresses the vulnerability by preventing out-of-bound memory access.</p> Windows Hyper-V Microsoft Yes CVE-2017-0051 10816 10855 10853 Denial of Service 10816 Denial of Service 10855 Denial of Service 10853 Important 10816 Important 10855 Important 10853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely;Older Software Release:N/A;DOS:N/A 5.4 4.9 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C 10816 5.4 4.9 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C 10855 5.4 4.9 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C 10853 4013429 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013429 3213986 10816 10855 10853 Yes Security Update https://support.microsoft.com/en-us/kb/4013429 10816 10855 10853 4013429 <p>The following <a href="https://technet.microsoft.com/library/security/dn848375.aspx#Mitigation">mitigating factors</a> might be helpful in your situation:</p> <ul> <li>Customers who have not enabled the Hyper-V role are not affected.</li> </ul> Peter Hlavaty (<a href="https://twitter.com/zer0mem">@zer0mem</a>), KeenLab, <a href="http://keenlab.tencent.com/en/">Tencent</a> 1.0 2017-03-14T07:00:00 <p>Information published.</p> Microsoft Browser Information Disclosure Vulnerability <p>An information disclosure vulnerability exists when affected Microsoft browsers improperly handle objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system.</p> <p>To exploit the vulnerability, in a web-based attack scenario, an attacker could host a website that is used to attempt to exploit the vulnerability. In addition, compromised websites and websites that accept or host user-provided content could contain specially crafted content that could exploit the vulnerability. However, in all cases an attacker would have no way to force a user to view the attacker-controlled content. Instead, an attacker would have to convince a user to take action. For example, an attacker could trick a user into clicking a link that takes the user to the attacker's site.</p> <p>The security update addresses the vulnerability by modifying how Microsoft browsers handle objects in memory.</p> Internet Explorer Microsoft Yes CVE-2017-0059 10555-10378 10486-10481 10486-10482 10486-10483 10486-10484 10486-10047 10486-10048 10486-10051 10486-10729 10486-10735 10486-10789 10486-10788 10486-10852 10486-10853 10336-9316 10336-4393 10336-9312 10336-9318 10486-10816 Information Disclosure 10555-10378 Information Disclosure 10486-10481 Information Disclosure 10486-10482 Information Disclosure 10486-10483 Information Disclosure 10486-10484 Information Disclosure 10486-10047 Information Disclosure 10486-10048 Information Disclosure 10486-10051 Information Disclosure 10486-10729 Information Disclosure 10486-10735 Information Disclosure 10486-10789 Information Disclosure 10486-10788 Information Disclosure 10486-10852 Information Disclosure 10486-10853 Information Disclosure 10336-9316 Information Disclosure 10336-4393 Information Disclosure 10336-9312 Information Disclosure 10336-9318 Information Disclosure 10486-10816 Low 10555-10378 Important 10486-10481 Important 10486-10482 Low 10486-10483 Important 10486-10484 Important 10486-10047 Important 10486-10048 Low 10486-10051 Important 10486-10729 Important 10486-10735 Important 10486-10789 Important 10486-10788 Important 10486-10852 Important 10486-10853 Important 10336-9316 Important 10336-4393 Low 10336-9312 Low 10336-9318 Low 10486-10816 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A 2.4 2.2 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10555-10378 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10486-10481 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10486-10482 2.4 2.2 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10486-10483 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10486-10484 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10486-10047 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10486-10048 2.4 2.2 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10486-10051 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10486-10729 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10486-10735 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10486-10789 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10486-10788 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10486-10852 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10486-10853 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10336-9316 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10336-4393 2.4 2.2 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10336-9312 2.4 2.2 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10336-9318 2.4 2.2 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10486-10816 4012217 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012217 3205409 10555-10378 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012217 10555-10378 4012217 4012204 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012204 3203621 10555-10378 10486-10481 10486-10482 10486-10483 10486-10047 10486-10048 10486-10051 10336-9316 10336-4393 10336-9312 10336-9318 Yes IE Cumulative https://support.microsoft.com/en-us/help/4012204 10555-10378 10486-10481 10486-10482 10486-10483 10486-10047 10486-10048 10486-10051 10336-9316 10336-4393 10336-9312 10336-9318 4012204 4012216 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012216 3205401 10486-10481 10486-10482 10486-10483 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012216 10486-10481 10486-10482 10486-10483 4012216 4012216 3205401 10486-10484 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012216 10486-10484 4012216 4012215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012215 3212646 10486-10047 10486-10048 10486-10051 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012215 10486-10047 10486-10048 10486-10051 4012215 4012606 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012606 3210720 10486-10729 10486-10735 Yes Security Update https://support.microsoft.com/en-us/kb/4012606 10486-10729 10486-10735 4012606 4013198 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013198 3210721 10486-10789 10486-10788 Yes Security Update https://support.microsoft.com/en-us/kb/4013198 10486-10789 10486-10788 4013198 4013429 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013429 3213986 10486-10852 10486-10853 10486-10816 Yes Security Update https://support.microsoft.com/en-us/kb/4013429 10486-10852 10486-10853 10486-10816 4013429 Ivan Fratric of <a href="http://www.google.com/">Google Project Zero</a> 1.0 2017-03-14T07:00:00 <p>Information published.</p> Windows GDI Information Disclosure Vulnerability <p>An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, allowing an attacker to retrieve information from a targeted system. By itself, the information disclosure does not allow arbitrary code execution; however, it could allow arbitrary code to be run if the attacker uses it in combination with another vulnerability.</p> <p>To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application.</p> <p>The security update addresses the vulnerability by correcting how GDI handles memory addresses.</p> <p><strong>There are multiple update packages available for some of the affected software. Do I need to install all the updates listed in the Affected Software table for the software?</strong> Yes. Customers should apply all updates offered for the software installed on their systems. If multiple updates apply, they can be installed in any order.</p> <p><strong>Do I need to install these security updates in a particular sequence?</strong> No. Multiple updates for a given system can be applied in any sequence.</p> <p><strong>I am running Office 2010, which is listed as affected software. Why am I not being offered the update?</strong> The update, KB3127958 (Ogl.dll), is not applicable to Office 2010 on Windows Vista and later versions of Windows because the vulnerable code is not present.</p> <p><strong>I am being offered this update for software that is not specifically indicated as being affected in the Affected Software and Vulnerability Severity Ratings table. Why am I being offered this update?</strong> When updates address vulnerable code that exists in a component that is shared between multiple Microsoft Office products or shared between multiple versions of the same Microsoft Office product, the update is considered to be applicable to all supported products and versions that contain the vulnerable component.</p> <p>For example, when an update applies to Microsoft Office 2007 products, only Microsoft Office 2007 may be specifically listed in the Affected Software table. However, the update could apply to Microsoft Word 2007, Microsoft Excel 2007, Microsoft Visio 2007, Microsoft Compatibility Pack, Microsoft Excel Viewer, or any other Microsoft Office 2007 product that is not specifically listed in the Affected Software table. Furthermore, when an update applies to Microsoft Office 2010 products, only Microsoft Office 2010 may be specifically listed in the Affected Software table. However, the update could apply to Microsoft Word 2010, Microsoft Excel 2010, Microsoft Visio 2010, Microsoft Visio Viewer, or any other Microsoft Office 2010 product that is not specifically listed in the Affected Software table.</p> <p>For more information on this behavior and recommended actions, see <a href="https://support.microsoft.com/kb/830335">Microsoft Knowledge Base Article 830335</a>. For a list of Microsoft Office products an update may apply to, refer to the Microsoft Knowledge Base Article associated with the specific update.</p> <p><strong>Are there any prerequisites for any of the updates offered in this bulletin for affected editions of Microsoft Lync 2013 (Skype for Business)?</strong> Yes. Customers running affected editions of Microsoft Lync 2013 (Skype for Business) must first install the 2965218 update for Office 2013 released in April, 2015, and then the 3039779 security update released in May, 2015. For more information about these two prerequisite updates, see:</p> <p><a href="https://support.microsoft.com/en-us/kb/2965218">Knowledge Base Article 2965218</a> <a href="https://support.microsoft.com/en-us/kb/3039779">Knowledge Base Article 3039779</a></p> <p><strong>Why is the Lync 2010 Attendee (user level install) update only available from the Microsoft Download Center?</strong> Microsoft is releasing the update for Lync 2010 Attendee (user level install) to the<a href="http://go.microsoft.com/fwlink/?LinkId=21129"> Microsoft Download Center</a> only. Because the user level installation of Lync 2010 Attendee is handled through a Lync session, distribution methods such as automatic updating are not appropriate for this type of installation scenario.</p> <p><strong>Does this release contain any additional security-related changes to functionality?</strong> Yes. In addition to the security updates that address the vulnerabilities described in this bulletin, Microsoft is releasing an update that replaces certain third party libraries which were used by Windows 8.1, Windows Server 2012, Windows Server 2012 R2, Windows Server 2016, and all versions of Windows 10. This update provides the same functionality in a more secure and reliable way.</p> Microsoft Graphics Component Microsoft Yes CVE-2017-0060 10729 10735 10789 10788 10852 10853 10047 10048 10481 10482 10484 9312 10287 9311 9318 9344 10050 10051 10049 10378 10379 10483 10543 4393 9316 10522 10069 10303 10268 10295 10628 10630 10629 10631 10770 10771 10772 10773 10150 10521 1160 10816 10855 10290 10956 Information Disclosure 10729 Information Disclosure 10735 Information Disclosure 10789 Information Disclosure 10788 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10047 Information Disclosure 10048 Information Disclosure 10481 Information Disclosure 10482 Information Disclosure 10484 Information Disclosure 9312 Information Disclosure 10287 Information Disclosure 9311 Information Disclosure 9318 Information Disclosure 9344 Information Disclosure 10050 Information Disclosure 10051 Information Disclosure 10049 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 4393 Information Disclosure 9316 Information Disclosure 10522 Information Disclosure 10069 Information Disclosure 10303 Information Disclosure 10268 Information Disclosure 10295 Information Disclosure 10628 Information Disclosure 10630 Information Disclosure 10629 Information Disclosure 10631 Information Disclosure 10770 Information Disclosure 10771 Information Disclosure 10772 Information Disclosure 10773 Information Disclosure 10150 Information Disclosure 10521 Information Disclosure 1160 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10290 Information Disclosure 10956 Important 10729 Important 10735 Important 10789 Important 10788 Important 10852 Important 10853 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 9312 Important 10287 Important 9311 Important 9318 Important 9344 Important 10050 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Important 4393 Important 9316 Important 10522 Important 10069 Important 10303 Important 10268 Important 10295 Important 10628 Important 10630 Important 10629 Important 10631 Important 10770 Important 10771 Important 10772 Important 10773 Important 10150 Important 10521 Important 1160 Important 10816 Important 10855 Important 10290 Important 10956 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A 4.7 4.2 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 10729 4.7 4.2 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 10735 4.7 4.2 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 10789 4.7 4.2 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 10788 4.7 4.2 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 10852 4.7 4.2 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 10853 4.7 4.2 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 10047 4.7 4.2 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 10048 4.7 4.2 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 10481 4.7 4.2 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 10482 4.7 4.2 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 10484 4.7 4.2 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 9312 4.7 4.2 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 10287 4.7 4.2 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 9311 4.7 4.2 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 9318 4.7 4.2 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 9344 4.7 4.2 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 10050 4.7 4.2 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 10051 4.7 4.2 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 10049 4.7 4.2 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 10378 4.7 4.2 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 10379 4.7 4.2 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 10483 4.7 4.2 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 10543 4.7 4.2 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 4393 4.7 4.2 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 9316 4.7 4.2 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 10816 4.7 4.2 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 10855 4012606 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012606 3210720 10729 10735 Yes Security Update https://support.microsoft.com/en-us/kb/4012606 10729 10735 4012606 4013198 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013198 3210721 10789 10788 Yes Security Update https://support.microsoft.com/en-us/kb/4013198 10789 10788 4013198 4013429 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013429 3213986 10852 10853 10816 10855 Yes Security Update https://support.microsoft.com/en-us/kb/4013429 10852 10853 10816 10855 4013429 4012215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012215 3212646 10047 10048 10050 10051 10049 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012215 10047 10048 10050 10051 10049 4012215 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10047 10050 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;custerr.dll;vmswitch.sys;msxml3.dll;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10047 10050 4012212 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10048 10051 10049 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10048 10051 10049 4012212 4012216 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012216 3205401 10481 10482 10483 10543 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012216 10481 10482 10483 10543 4012216 4012213 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012213 10481 10482 10483 10543 msxpspcl6.dll;msxpsps.dll;hvax64.exe;hvix64.exe;srv.sys;quartz.dll;n/a;win32k.sys;gdiplus.dll;gdi32.dll;icm32.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;dnsapi.dll;msxml3.dll;custerr.dll;vmswitch.sys;dnsrslvr.dll;mrxsmb20.sys;mrxsmb.sys;dxgkrnl.sys;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012213 10481 10482 10483 10543 4012213 4012216 3205401 10484 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012216 10484 4012216 4012583 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012583 3196348 9312 10287 9311 9318 9344 4393 9316 gdiplus.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll 0001-01-01T00:00:00 Yes Security Update https://support.microsoft.com/en-us/kb/4012583 9312 10287 9311 9318 9344 4393 9316 4012583 4012217 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012217 3205409 10378 10379 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012217 10378 10379 4012217 4012214 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012214 MS16-110, 3187754 10378 10379 n/a;msxpspcl6.dll;msxpsps.dll;srv.sys;win32k.sys;gdiplus.dll;gdi32.dll;icm32.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dxgkrnl.sys 0001-01-01T00:00:00 Security Only https://support.microsoft.com/en-us/help/4012214 10378 10379 4012214 3127958 https://www.microsoft.com/download/details.aspx?familyid=6d815c5b-b640-4289-88bf-65333cba0d71 3118317 10522 Maybe Security Update https://support.microsoft.com/kb/3127958 10522 3127958 4010299 https://www.microsoft.com/download/details.aspx?familyid=0074ddc7-a5e0-42b1-a23f-58ac17edbce9 3188397 10069 Maybe Security Update http://support.microsoft.com/help/4010299 10069 4010299 4010299 https://www.microsoft.com/download/details.aspx?familyid=c259af6e-ba1e-4e13-8051-a1ec4b8061e5 3188397 10303 Maybe Security Update http://support.microsoft.com/help/4010299 10303 4010299 4010301 https://www.microsoft.com/download/details.aspx?familyid=b4d7d594-7beb-4a27-b938-8116118ba9d6 3188400 10268 Maybe Security Update http://support.microsoft.com/kb/4010301 10268 4010301 4010300 https://www.microsoft.com/download/details.aspx?familyid=7aeca442-b278-4b3e-a9f1-415269bf5900 3188399 10295 Maybe Security Update http://support.microsoft.com/kb/4010300 10295 4010300 3172539 https://www.microsoft.com/download/details.aspx?familyid=1d1aced6-77f0-4e57-a783-ae1abe716f1a 3118348 10628 10629 Maybe Security Update https://support.microsoft.com/kb/3172539 10628 10629 3172539 3172539 https://www.microsoft.com/download/details.aspx?familyid=6470726a-317c-404e-ab2e-c13e682d0fc0 3118348 10630 10631 Maybe Security Update https://support.microsoft.com/kb/3172539 10630 10631 3172539 3178656 https://www.microsoft.com/download/details.aspx?familyid=251bb98e-1135-4d01-b933-312dcb2e4a51 3118327 10770 10772 Maybe Security Update https://support.microsoft.com/kb/3178656 10770 10772 3178656 3178656 https://www.microsoft.com/download/details.aspx?familyid=f4dec872-7825-4224-b459-eaddc468a6f5 3118327 10771 10773 Maybe Security Update https://support.microsoft.com/kb/3178656 10771 10773 3178656 3127945 https://www.microsoft.com/download/details.aspx?familyid=0fabf185-f9e4-444e-b305-b383e9a9366c 3118301 10150 Maybe Security Update https://support.microsoft.com/kb/3127945 10150 3127945 3127958 https://www.microsoft.com/download/details.aspx?familyid=66f4e74d-6395-469e-ab5c-2bc3e1f01495 3118317 10521 Maybe Security Update https://support.microsoft.com/kb/3127958 10521 3127958 3178693 https://www.microsoft.com/download/details.aspx?familyid=8b13e607-2874-4028-bcca-0e699bcb820a 3118394 1160 Maybe Security Update https://support.microsoft.com/kb/3178693 1160 3178693 4010303 https://support.microsoft.com/help/4010303 3189647 10290 Maybe Security Update http://support.microsoft.com/kb/4010303 10290 4010303 4010304 https://support.microsoft.com/kb/4010304 10956 Maybe Security Update http://support.microsoft.com/kb/4010304 10956 4010304 Mateusz Jurczyk of <a href="http://www.google.com/">Google Project Zero</a> 1.0 2017-03-14T07:00:00 <p>Information published.</p> Microsoft Color Management Information Disclosure Vulnerability <p>An information disclosure vulnerability exists in the way that the Color Management Module (ICM32.dll) handles objects in memory. This vulnerability allows an attacker to retrieve information to bypass usermode ASLR (Address Space Layout Randomization) on a targeted system. By itself, the information disclosure does not allow arbitrary code execution; however, it could allow arbitrary code to be run if the attacker uses it in combination with another vulnerability.</p> <p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability and then convince users to view the website. An attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically by getting them to click a link in an email or Instant Messenger message that takes users to the attacker's website, or by opening an attachment sent through email.</p> <p>The security update addresses the vulnerability by correcting how Color Management Module handles objects in memory.</p> <p><strong>Does this release contain any additional security-related changes to functionality?</strong> Yes. In addition to the security updates that address the vulnerabilities described in this bulletin, Microsoft is releasing an update that replaces certain third party libraries which were used by Windows 8.1, Windows Server 2012, Windows Server 2012 R2, Windows Server 2016, and all versions of Windows 10. This update provides the same functionality in a more secure and reliable way.</p> Microsoft Graphics Component Microsoft Yes CVE-2017-0061 10047 10048 9312 9311 9318 9344 10050 10051 10049 4393 9316 10287 Information Disclosure 10047 Information Disclosure 10048 Information Disclosure 9312 Information Disclosure 9311 Information Disclosure 9318 Information Disclosure 9344 Information Disclosure 10050 Information Disclosure 10051 Information Disclosure 10049 Information Disclosure 4393 Information Disclosure 9316 Information Disclosure 10287 Important 10047 Important 10048 Important 9312 Important 9311 Important 9318 Important 9344 Important 10050 Important 10051 Important 10049 Important 4393 Important 9316 Important 10287 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A;Older Software Release:Exploitation Unlikely;DOS:N/A 4.7 4.2 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 10047 4.7 4.2 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 10048 4.7 4.2 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 9312 4.7 4.2 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 9311 4.7 4.2 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 9318 4.7 4.2 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 9344 4.7 4.2 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 10050 4.7 4.2 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 10051 4.7 4.2 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 10049 4.7 4.2 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 4393 4.7 4.2 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 9316 4012215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012215 3212646 10047 10048 10050 10051 10049 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012215 10047 10048 10050 10051 10049 4012215 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10047 10050 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;custerr.dll;vmswitch.sys;msxml3.dll;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10047 10050 4012212 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10048 10051 10049 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10048 10051 10049 4012212 4012584 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012584 9312 9311 9318 9344 4393 9316 10287 icm32.dll 0001-01-01T00:00:00 Yes Security Update https://support.microsoft.com/en-us/kb/4012584 9312 9311 9318 9344 4393 9316 10287 4012584 Mateusz Jurczyk of <a href="http://www.google.com/">Google Project Zero</a> 1.0 2017-03-14T07:00:00 <p>Information published.</p> Windows GDI Information Disclosure Vulnerability <p>An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, allowing an attacker to retrieve information from a targeted system. By itself, the information disclosure does not allow arbitrary code execution; however, it could allow arbitrary code to be run if the attacker uses it in combination with another vulnerability.</p> <p>To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application.</p> <p>The security update addresses the vulnerability by correcting how GDI handles memory addresses.</p> <p><strong>Does this release contain any additional security-related changes to functionality?</strong> Yes. In addition to the security updates that address the vulnerabilities described in this bulletin, Microsoft is releasing an update that replaces certain third party libraries which were used by Windows 8.1, Windows Server 2012, Windows Server 2012 R2, Windows Server 2016, and all versions of Windows 10. This update provides the same functionality in a more secure and reliable way.</p> Microsoft Graphics Component Microsoft Yes CVE-2017-0062 10729 10735 10789 10788 10852 10853 10047 10048 10481 10482 10484 9312 9311 9318 9344 10050 10051 10049 10378 10379 10483 10543 4393 9316 10287 10816 10855 Information Disclosure 10729 Information Disclosure 10735 Information Disclosure 10789 Information Disclosure 10788 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10047 Information Disclosure 10048 Information Disclosure 10481 Information Disclosure 10482 Information Disclosure 10484 Information Disclosure 9312 Information Disclosure 9311 Information Disclosure 9318 Information Disclosure 9344 Information Disclosure 10050 Information Disclosure 10051 Information Disclosure 10049 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 4393 Information Disclosure 9316 Information Disclosure 10287 Information Disclosure 10816 Information Disclosure 10855 Important 10729 Important 10735 Important 10789 Important 10788 Important 10852 Important 10853 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 9312 Important 9311 Important 9318 Important 9344 Important 10050 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Important 4393 Important 9316 Important 10287 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A 4.7 4.2 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 10729 4.7 4.2 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 10735 4.7 4.2 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 10789 4.7 4.2 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 10788 4.7 4.2 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 10852 4.7 4.2 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 10853 4.7 4.2 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 10047 4.7 4.2 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 10048 4.7 4.2 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 10481 4.7 4.2 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 10482 4.7 4.2 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 10484 4.7 4.2 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 9312 4.7 4.2 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 9311 4.7 4.2 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 9318 4.7 4.2 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 9344 4.7 4.2 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 10050 4.7 4.2 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 10051 4.7 4.2 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 10049 4.7 4.2 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 10378 4.7 4.2 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 10379 4.7 4.2 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 10483 4.7 4.2 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 10543 4.7 4.2 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 4393 4.7 4.2 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 9316 4.7 4.2 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 10816 4.7 4.2 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 10855 4012606 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012606 3210720 10729 10735 Yes Security Update https://support.microsoft.com/en-us/kb/4012606 10729 10735 4012606 4013198 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013198 3210721 10789 10788 Yes Security Update https://support.microsoft.com/en-us/kb/4013198 10789 10788 4013198 4013429 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013429 3213986 10852 10853 10816 10855 Yes Security Update https://support.microsoft.com/en-us/kb/4013429 10852 10853 10816 10855 4013429 4012215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012215 3212646 10047 10048 10050 10051 10049 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012215 10047 10048 10050 10051 10049 4012215 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10047 10050 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;custerr.dll;vmswitch.sys;msxml3.dll;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10047 10050 4012212 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10048 10051 10049 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10048 10051 10049 4012212 4012216 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012216 3205401 10481 10482 10483 10543 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012216 10481 10482 10483 10543 4012216 4012213 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012213 10481 10482 10483 10543 msxpspcl6.dll;msxpsps.dll;hvax64.exe;hvix64.exe;srv.sys;quartz.dll;n/a;win32k.sys;gdiplus.dll;gdi32.dll;icm32.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;dnsapi.dll;msxml3.dll;custerr.dll;vmswitch.sys;dnsrslvr.dll;mrxsmb20.sys;mrxsmb.sys;dxgkrnl.sys;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012213 10481 10482 10483 10543 4012213 4012216 3205401 10484 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012216 10484 4012216 4012583 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012583 3196348 9312 9311 9318 9344 4393 9316 10287 gdiplus.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll 0001-01-01T00:00:00 Yes Security Update https://support.microsoft.com/en-us/kb/4012583 9312 9311 9318 9344 4393 9316 10287 4012583 4012217 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012217 3205409 10378 10379 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012217 10378 10379 4012217 4012214 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012214 MS16-110, 3187754 10378 10379 n/a;msxpspcl6.dll;msxpsps.dll;srv.sys;win32k.sys;gdiplus.dll;gdi32.dll;icm32.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dxgkrnl.sys 0001-01-01T00:00:00 Security Only https://support.microsoft.com/en-us/help/4012214 10378 10379 4012214 Mateusz Jurczyk of <a href="http://www.google.com/">Google Project Zero</a> 1.0 2017-03-14T07:00:00 <p>Information published.</p> Microsoft Color Management Information Disclosure Vulnerability <p>An information disclosure vulnerability exists in the way that the Color Management Module (ICM32.dll) handles objects in memory. This vulnerability allows an attacker to retrieve information to bypass usermode ASLR (Address Space Layout Randomization) on a targeted system. By itself, the information disclosure does not allow arbitrary code execution; however, it could allow arbitrary code to be run if the attacker uses it in combination with another vulnerability.</p> <p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability and then convince users to view the website. An attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically by getting them to click a link in an email or Instant Messenger message that takes users to the attacker's website, or by opening an attachment sent through email.</p> <p>The security update addresses the vulnerability by correcting how Color Management Module handles objects in memory.</p> <p><strong>Does this release contain any additional security-related changes to functionality?</strong> Yes. In addition to the security updates that address the vulnerabilities described in this bulletin, Microsoft is releasing an update that replaces certain third party libraries which were used by Windows 8.1, Windows Server 2012, Windows Server 2012 R2, Windows Server 2016, and all versions of Windows 10. This update provides the same functionality in a more secure and reliable way.</p> Microsoft Graphics Component Microsoft Yes CVE-2017-0063 10729 10735 10789 10788 10852 10853 10047 10048 10481 10482 10484 9312 9311 9318 9344 10050 10051 10049 10483 10543 4393 9316 10287 10816 10855 Information Disclosure 10729 Information Disclosure 10735 Information Disclosure 10789 Information Disclosure 10788 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10047 Information Disclosure 10048 Information Disclosure 10481 Information Disclosure 10482 Information Disclosure 10484 Information Disclosure 9312 Information Disclosure 9311 Information Disclosure 9318 Information Disclosure 9344 Information Disclosure 10050 Information Disclosure 10051 Information Disclosure 10049 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 4393 Information Disclosure 9316 Information Disclosure 10287 Information Disclosure 10816 Information Disclosure 10855 Important 10729 Important 10735 Important 10789 Important 10788 Important 10852 Important 10853 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 9312 Important 9311 Important 9318 Important 9344 Important 10050 Important 10051 Important 10049 Important 10483 Important 10543 Important 4393 Important 9316 Important 10287 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely;Older Software Release:Exploitation Unlikely;DOS:N/A 4.7 4.2 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 10729 4.7 4.2 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 10735 4.7 4.2 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 10789 4.7 4.2 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 10788 4.7 4.2 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 10852 4.7 4.2 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 10853 4.7 4.2 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 10047 4.7 4.2 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 10048 4.7 4.2 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 10481 4.7 4.2 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 10482 4.7 4.2 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 10484 4.7 4.2 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 9312 4.7 4.2 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 9311 4.7 4.2 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 9318 4.7 4.2 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 9344 4.7 4.2 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 10050 4.7 4.2 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 10051 4.7 4.2 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 10049 4.7 4.2 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 10483 4.7 4.2 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 10543 4.7 4.2 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 4393 4.7 4.2 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 9316 4.7 4.2 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 10816 4.7 4.2 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 10855 4012606 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012606 3210720 10729 10735 Yes Security Update https://support.microsoft.com/en-us/kb/4012606 10729 10735 4012606 4013198 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013198 3210721 10789 10788 Yes Security Update https://support.microsoft.com/en-us/kb/4013198 10789 10788 4013198 4013429 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013429 3213986 10852 10853 10816 10855 Yes Security Update https://support.microsoft.com/en-us/kb/4013429 10852 10853 10816 10855 4013429 4012215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012215 3212646 10047 10048 10050 10051 10049 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012215 10047 10048 10050 10051 10049 4012215 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10047 10050 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;custerr.dll;vmswitch.sys;msxml3.dll;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10047 10050 4012212 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10048 10051 10049 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10048 10051 10049 4012212 4012216 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012216 3205401 10481 10482 10483 10543 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012216 10481 10482 10483 10543 4012216 4012213 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012213 10481 10482 10483 10543 msxpspcl6.dll;msxpsps.dll;hvax64.exe;hvix64.exe;srv.sys;quartz.dll;n/a;win32k.sys;gdiplus.dll;gdi32.dll;icm32.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;dnsapi.dll;msxml3.dll;custerr.dll;vmswitch.sys;dnsrslvr.dll;mrxsmb20.sys;mrxsmb.sys;dxgkrnl.sys;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012213 10481 10482 10483 10543 4012213 4012216 3205401 10484 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012216 10484 4012216 4012584 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012584 9312 9311 9318 9344 4393 9316 10287 icm32.dll 0001-01-01T00:00:00 Yes Security Update https://support.microsoft.com/en-us/kb/4012584 9312 9311 9318 9344 4393 9316 10287 4012584 Mateusz Jurczyk of <a href="http://www.google.com/">Google Project Zero</a> 1.0 2017-03-14T07:00:00 <p>Information published.</p> Microsoft Browser Information Disclosure Vulnerability <p>An information disclosure vulnerability exists when affected Microsoft browsers improperly handle objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system.</p> <p>To exploit the vulnerability, in a web-based attack scenario, an attacker could host a website that is used to attempt to exploit the vulnerability. In addition, compromised websites and websites that accept or host user-provided content could contain specially crafted content that could exploit the vulnerability. However, in all cases an attacker would have no way to force a user to view the attacker-controlled content. Instead, an attacker would have to convince a user to take action. For example, an attacker could trick a user into clicking a link that takes the user to the attacker's site.</p> <p>The security update addresses the vulnerability by modifying how Microsoft browsers handle objects in memory.</p> Microsoft Browsers Microsoft Yes CVE-2017-0065 10724-10729 10724-10735 10724-10789 10724-10788 10724-10852 10724-10853 Information Disclosure 10724-10729 Information Disclosure 10724-10735 Information Disclosure 10724-10789 Information Disclosure 10724-10788 Information Disclosure 10724-10852 Information Disclosure 10724-10853 Important 10724-10729 Important 10724-10735 Important 10724-10789 Important 10724-10788 Important 10724-10852 Important 10724-10853 Publicly Disclosed:Yes;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:N/A;DOS:N/A 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10724-10729 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10724-10735 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10724-10789 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10724-10788 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10724-10852 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10724-10853 4012606 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012606 3210720 10724-10729 10724-10735 Yes Security Update https://support.microsoft.com/en-us/kb/4012606 10724-10729 10724-10735 4012606 4013198 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013198 3210721 10724-10789 10724-10788 Yes Security Update https://support.microsoft.com/en-us/kb/4013198 10724-10789 10724-10788 4013198 4013429 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013429 3213986 10724-10852 10724-10853 Yes Security Update https://support.microsoft.com/en-us/kb/4013429 10724-10852 10724-10853 4013429 <a href="https://www.linkedin.com/in/henri-aho-497abab6/">Henri Aho</a> 1.0 2017-03-14T07:00:00 <p>Information published.</p> Microsoft Edge Security Feature Bypass Vulnerability <p>A security feature bypass vulnerability exists when Microsoft Edge improperly handles requests of different origins. The vulnerability allows Microsoft Edge to bypass Same-Origin Policy (SOP) restrictions, and to allow requests that should otherwise be ignored. An attacker who successfully exploited the vulnerability could force the browser to send data that would otherwise be restricted.</p> <p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft Edge and then convince a user to view the website. The attacker could also take advantage of compromised websites, and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p> <p>The security update addresses the vulnerability by modifying how affected Microsoft Edge handles different-origin requests.</p> Microsoft Browsers Microsoft Yes CVE-2017-0066 10724-10729 10724-10735 10724-10789 10724-10788 10724-10852 10724-10853 Security Feature Bypass 10724-10729 Security Feature Bypass 10724-10735 Security Feature Bypass 10724-10789 Security Feature Bypass 10724-10788 Security Feature Bypass 10724-10852 Security Feature Bypass 10724-10853 Important 10724-10729 Important 10724-10735 Important 10724-10789 Important 10724-10788 Important 10724-10852 Important 10724-10853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:N/A;DOS:N/A 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C 10724-10729 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C 10724-10735 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C 10724-10789 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C 10724-10788 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C 10724-10852 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C 10724-10853 4012606 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012606 3210720 10724-10729 10724-10735 Yes Security Update https://support.microsoft.com/en-us/kb/4012606 10724-10729 10724-10735 4012606 4013198 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013198 3210721 10724-10789 10724-10788 Yes Security Update https://support.microsoft.com/en-us/kb/4013198 10724-10789 10724-10788 4013198 4013429 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013429 3213986 10724-10852 10724-10853 Yes Security Update https://support.microsoft.com/en-us/kb/4013429 10724-10852 10724-10853 4013429 Jun Kokatsu (<a href = "https://twitter.com/shhnjk">@shhnjk</a>) 1.0 2017-03-14T07:00:00 <p>Information published.</p> Scripting Engine Memory Corruption Vulnerability <p>A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p> <p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Internet Explorer and then convince a user to view the website. An attacker could also embed an ActiveX control marked &quot;safe for initialization&quot; in an application or Microsoft Office document that hosts the IE rendering engine. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p> <p>The security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.</p> Microsoft Edge (HTML-based) Microsoft Yes CVE-2017-0067 10724-10729 10724-10735 10724-10789 10724-10788 10724-10852 10724-10853 Remote Code Execution 10724-10729 Remote Code Execution 10724-10735 Remote Code Execution 10724-10789 Remote Code Execution 10724-10788 Remote Code Execution 10724-10852 Remote Code Execution 10724-10853 Critical 10724-10729 Critical 10724-10735 Critical 10724-10789 Critical 10724-10788 Critical 10724-10852 Critical 10724-10853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A;DOS:N/A 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10729 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10735 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10789 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10788 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10852 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10853 4012606 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012606 3210720 10724-10729 10724-10735 Yes Security Update https://support.microsoft.com/en-us/kb/4012606 10724-10729 10724-10735 4012606 4013198 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013198 3210721 10724-10789 10724-10788 Yes Security Update https://support.microsoft.com/en-us/kb/4013198 10724-10789 10724-10788 4013198 4013429 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013429 3213986 10724-10852 10724-10853 Yes Security Update https://support.microsoft.com/en-us/kb/4013429 10724-10852 10724-10853 4013429 bee13oy of CloverSec Labs, working with <a href="http://www.zerodayinitiative.com/">Trend Micro's Zero Day Initiative</a> <a href = "https://github.com/nth10sd/">Gary Kwong</a> Henry Li (zenhumany) of <a href="http://www.trendmicro.com/">Trend Micro</a> Dhanesh Kizhakkinan of <a href="https://www.fireeye.com/">FireEye Inc</a> 1.0 2017-03-14T07:00:00 <p>Information published.</p> Microsoft Edge based on Edge HTML Information Disclosure Vulnerability <p>An information disclosure vulnerability exists when Microsoft Edge based on Edge HTML improperly handles objects in memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.</p> <p>To exploit the vulnerability, in a web-based attack scenario, an attacker could host a website in an attempt to exploit the vulnerability. In addition, compromised websites and websites that accept or host user-provided content could contain specially crafted content that could exploit the vulnerability. However, in all cases an attacker would have no way to force a user to view the attacker-controlled content. Instead, an attacker would have to convince a user to take action. For example, an attacker could trick a user into clicking a link that takes the user to the attacker's site.</p> <p>The update addresses the vulnerability by modifying how Microsoft Edge based on Edge HTML handles objects in memory.</p> Microsoft Edge (HTML-based) Microsoft Yes CVE-2017-0068 10724-10729 10724-10735 10724-10789 10724-10788 10724-10852 10724-10853 Information Disclosure 10724-10729 Information Disclosure 10724-10735 Information Disclosure 10724-10789 Information Disclosure 10724-10788 Information Disclosure 10724-10852 Information Disclosure 10724-10853 Important 10724-10729 Important 10724-10735 Important 10724-10789 Important 10724-10788 Important 10724-10852 Important 10724-10853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:N/A;DOS:N/A 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10724-10729 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10724-10735 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10724-10789 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10724-10788 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10724-10852 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10724-10853 4012606 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012606 3210720 10724-10729 10724-10735 Yes Security Update https://support.microsoft.com/en-us/kb/4012606 10724-10729 10724-10735 4012606 4013198 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013198 3210721 10724-10789 10724-10788 Yes Security Update https://support.microsoft.com/en-us/kb/4013198 10724-10789 10724-10788 4013198 4013429 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013429 3213986 10724-10852 10724-10853 Yes Security Update https://support.microsoft.com/en-us/kb/4013429 10724-10852 10724-10853 4013429 Jun Kokatsu (<a href = "https://twitter.com/shhnjk">@shhnjk</a>) 1.0 2017-03-14T07:00:00 <p>Information published.</p> Microsoft Browser Spoofing Vulnerability <p>A spoofing vulnerability exists when Microsoft browsers do not properly parse HTTP content. An attacker who successfully exploited this vulnerability could trick a user by redirecting the user to a specially crafted website. The specially crafted website could either spoof content or serve as a pivot to chain an attack with other vulnerabilities in web services.</p> <p>To exploit the vulnerability, the user must click a specially crafted URL. In an email attack scenario, an attacker could send an email message containing the specially crafted URL to the user in an attempt to convince the user to click it.</p> <p>In a web-based attack scenario, an attacker could host a specially crafted website designed to appear as a legitimate website to the user. However, the attacker would have no way to force the user to visit the specially crafted website. The attacker would have to convince the user to visit the specially crafted website, typically by way of enticement in an email or instant message, and then convince the user to interact with content on the website.</p> <p>The update addresses the vulnerability by correcting how Microsoft browsers parse HTTP responses.</p> Microsoft Edge (HTML-based) Microsoft Yes CVE-2017-0069 10724-10729 10724-10735 10724-10789 10724-10788 10724-10852 10724-10853 Spoofing 10724-10729 Spoofing 10724-10735 Spoofing 10724-10789 Spoofing 10724-10788 Spoofing 10724-10852 Spoofing 10724-10853 Important 10724-10729 Important 10724-10735 Important 10724-10789 Important 10724-10788 Important 10724-10852 Important 10724-10853 Publicly Disclosed:Yes;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:N/A;DOS:N/A 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C 10724-10729 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C 10724-10735 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C 10724-10789 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C 10724-10788 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C 10724-10852 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C 10724-10853 4012606 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012606 3210720 10724-10729 10724-10735 Yes Security Update https://support.microsoft.com/en-us/kb/4012606 10724-10729 10724-10735 4012606 4013198 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013198 3210721 10724-10789 10724-10788 Yes Security Update https://support.microsoft.com/en-us/kb/4013198 10724-10789 10724-10788 4013198 4013429 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013429 3213986 10724-10852 10724-10853 Yes Security Update https://support.microsoft.com/en-us/kb/4013429 10724-10852 10724-10853 4013429 Jun Kokatsu (<a href = "https://twitter.com/shhnjk">@shhnjk</a>) 1.0 2017-03-14T07:00:00 <p>Information published.</p> Scripting Engine Memory Corruption Vulnerability <p>A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p> <p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Internet Explorer and then convince a user to view the website. An attacker could also embed an ActiveX control marked &quot;safe for initialization&quot; in an application or Microsoft Office document that hosts the IE rendering engine. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p> <p>The security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.</p> Microsoft Edge (HTML-based) Microsoft Yes CVE-2017-0070 10724-10729 10724-10735 10724-10789 10724-10788 10724-10852 10724-10853 Remote Code Execution 10724-10729 Remote Code Execution 10724-10735 Remote Code Execution 10724-10789 Remote Code Execution 10724-10788 Remote Code Execution 10724-10852 Remote Code Execution 10724-10853 Critical 10724-10729 Critical 10724-10735 Critical 10724-10789 Critical 10724-10788 Critical 10724-10852 Critical 10724-10853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A;DOS:N/A 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O 10724-10729 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O 10724-10735 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O 10724-10789 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O 10724-10788 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O 10724-10852 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O 10724-10853 4012606 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012606 3210720 10724-10729 10724-10735 Yes Security Update https://support.microsoft.com/en-us/kb/4012606 10724-10729 10724-10735 4012606 4013198 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013198 3210721 10724-10789 10724-10788 Yes Security Update https://support.microsoft.com/en-us/kb/4013198 10724-10789 10724-10788 4013198 4013429 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013429 3213986 10724-10852 10724-10853 Yes Security Update https://support.microsoft.com/en-us/kb/4013429 10724-10852 10724-10853 4013429 Lokihardt of <a href="https://www.google.com/">Google Project Zero</a> 1.0 2017-03-14T07:00:00 <p>Information published.</p> Scripting Engine Memory Corruption Vulnerability <p>A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p> <p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Internet Explorer and then convince a user to view the website. An attacker could also embed an ActiveX control marked &quot;safe for initialization&quot; in an application or Microsoft Office document that hosts the IE rendering engine. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p> <p>The security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.</p> Microsoft Scripting Engine Microsoft Yes CVE-2017-0071 10724-10951 10724-10952 10724-10729 10724-10735 10724-10789 10724-10788 10724-10852 10724-10853 Remote Code Execution 10724-10951 Remote Code Execution 10724-10952 Remote Code Execution 10724-10729 Remote Code Execution 10724-10735 Remote Code Execution 10724-10789 Remote Code Execution 10724-10788 Remote Code Execution 10724-10852 Remote Code Execution 10724-10853 Critical 10724-10951 Critical 10724-10952 Critical 10724-10729 Critical 10724-10735 Critical 10724-10789 Critical 10724-10788 Critical 10724-10852 Critical 10724-10853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A;DOS:N/A 4.2 3.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O 10724-10951 4.2 3.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O 10724-10952 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O 10724-10729 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O 10724-10735 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O 10724-10789 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O 10724-10788 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O 10724-10852 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O 10724-10853 4025342 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4025342 4022725 10724-10951 10724-10952 Yes Security Update https://support.microsoft.com/help/4025342 10724-10951 10724-10952 4025342 4025338 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4025338 4022727 10724-10729 10724-10735 Yes Security Update https://support.microsoft.com/help/4025338 10724-10729 10724-10735 4025338 4025344 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4025344 4022714 10724-10789 10724-10788 Yes Security Update https://support.microsoft.com/help/4025344 10724-10789 10724-10788 4025344 4025339 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4025339 4022715 10724-10852 10724-10853 Yes Security Update https://support.microsoft.com/help/4025339 10724-10852 10724-10853 4025339 Lokihardt of <a href="https://www.google.com/">Google Project Zero</a> 2.0 2017-08-08T07:00:00 <p>To comprehensively address CVE-2017-0071, Microsoft released the July security updates for all versions of Windows 10. Note that Windows 10 for 32-bit Systems, Windows 10 for x64-based Systems, Windows 10 Version 1703 for 32-bit Systems, and Windows 10 Version 1703 for x64-based Systems have been added to the Affected Products table as they are also affected by this vulnerability. Microsoft recommends that customers who have not already done so install the July 2017 security updates to be fully protected from this vulnerability.</p> 1.0 2017-03-14T07:00:00 <p>Information published.</p> Windows Uniscribe Remote Code Execution Vulnerability <p>A remote code execution vulnerability exists due to the way Windows Uniscribe handles objects in memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.</p> <p>There are multiple ways an attacker could exploit this vulnerability:</p> <ul> <li><p>In a web-based attack scenario, an attacker could host a specially crafted website designed to exploit this vulnerability and then convince a user to view the website. An attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically by getting them to click a link in an email or instant message that takes users to the attacker's website, or by opening an attachment sent through email.</p> </li> <li><p>In a file-sharing attack scenario, an attacker could provide a specially crafted document file designed to exploit this vulnerability and then convince a user to open the document file.</p> </li> </ul> <p>The security update addresses the vulnerability by correcting how Windows Uniscribe handles objects in memory.</p> Microsoft Uniscribe Microsoft Yes CVE-2017-0072 10047 10048 9312 10287 9311 9318 9344 10050 10051 10049 4393 9316 Remote Code Execution 10047 Remote Code Execution 10048 Remote Code Execution 9312 Remote Code Execution 10287 Remote Code Execution 9311 Remote Code Execution 9318 Remote Code Execution 9344 Remote Code Execution 10050 Remote Code Execution 10051 Remote Code Execution 10049 Remote Code Execution 4393 Remote Code Execution 9316 Critical 10047 Critical 10048 Critical 9312 Critical 10287 Critical 9311 Critical 9318 Critical 9344 Critical 10050 Critical 10051 Critical 10049 Critical 4393 Critical 9316 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A;Older Software Release:Exploitation Less Likely;DOS:N/A 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10047 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10048 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9312 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10287 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9311 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9318 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9344 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10050 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10051 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10049 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 4393 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9316 4012215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012215 3212646 10047 10048 10050 10051 10049 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012215 10047 10048 10050 10051 10049 4012215 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10047 10050 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;custerr.dll;vmswitch.sys;msxml3.dll;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10047 10050 4012212 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10048 10051 10049 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10048 10051 10049 4012212 4012583 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012583 3196348 9312 10287 9311 9318 9344 4393 9316 gdiplus.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll 0001-01-01T00:00:00 Yes Security Update https://support.microsoft.com/en-us/kb/4012583 9312 10287 9311 9318 9344 4393 9316 4012583 Mateusz Jurczyk of <a href="http://www.google.com/">Google Project Zero</a> 1.0 2017-03-14T07:00:00 <p>Information published.</p> Windows GDI Information Disclosure Vulnerability <p>A Win32k information disclosure vulnerability exists when the Windows GDI component improperly discloses kernel memory addresses. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.</p> <p>To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application. The vulnerability would not allow an attacker to execute code or to elevate user rights directly, but it could be used to obtain information that could be used to try to further compromise the affected system.</p> <p>The security update addresses the vulnerability by correcting how the Windows GDI component handles objects in memory.</p> <p><strong>There are multiple update packages available for some of the affected software. Do I need to install all the updates listed in the Affected Software table for the software?</strong> Yes. Customers should apply all updates offered for the software installed on their systems. If multiple updates apply, they can be installed in any order.</p> <p><strong>Do I need to install these security updates in a particular sequence?</strong> No. Multiple updates for a given system can be applied in any sequence.</p> <p><strong>I am running Office 2010, which is listed as affected software. Why am I not being offered the update?</strong> The update, KB3127958 (Ogl.dll), is not applicable to Office 2010 on Windows Vista and later versions of Windows because the vulnerable code is not present.</p> <p><strong>I am being offered this update for software that is not specifically indicated as being affected in the Affected Software and Vulnerability Severity Ratings table. Why am I being offered this update?</strong> When updates address vulnerable code that exists in a component that is shared between multiple Microsoft Office products or shared between multiple versions of the same Microsoft Office product, the update is considered to be applicable to all supported products and versions that contain the vulnerable component.</p> <p>For example, when an update applies to Microsoft Office 2007 products, only Microsoft Office 2007 may be specifically listed in the Affected Software table. However, the update could apply to Microsoft Word 2007, Microsoft Excel 2007, Microsoft Visio 2007, Microsoft Compatibility Pack, Microsoft Excel Viewer, or any other Microsoft Office 2007 product that is not specifically listed in the Affected Software table. Furthermore, when an update applies to Microsoft Office 2010 products, only Microsoft Office 2010 may be specifically listed in the Affected Software table. However, the update could apply to Microsoft Word 2010, Microsoft Excel 2010, Microsoft Visio 2010, Microsoft Visio Viewer, or any other Microsoft Office 2010 product that is not specifically listed in the Affected Software table.</p> <p>For more information on this behavior and recommended actions, see <a href="https://support.microsoft.com/kb/830335">Microsoft Knowledge Base Article 830335</a>. For a list of Microsoft Office products an update may apply to, refer to the Microsoft Knowledge Base Article associated with the specific update.</p> <p><strong>Are there any prerequisites for any of the updates offered in this bulletin for affected editions of Microsoft Lync 2013 (Skype for Business)?</strong> Yes. Customers running affected editions of Microsoft Lync 2013 (Skype for Business) must first install the 2965218 update for Office 2013 released in April, 2015, and then the 3039779 security update released in May, 2015. For more information about these two prerequisite updates, see:</p> <p><a href="https://support.microsoft.com/en-us/kb/2965218">Knowledge Base Article 2965218</a> <a href="https://support.microsoft.com/en-us/kb/3039779">Knowledge Base Article 3039779</a></p> <p><strong>Why is the Lync 2010 Attendee (user level install) update only available from the Microsoft Download Center?</strong> Microsoft is releasing the update for Lync 2010 Attendee (user level install) to the<a href="http://go.microsoft.com/fwlink/?LinkId=21129"> Microsoft Download Center</a> only. Because the user level installation of Lync 2010 Attendee is handled through a Lync session, distribution methods such as automatic updating are not appropriate for this type of installation scenario.</p> <p><strong>Does this release contain any additional security-related changes to functionality?</strong> Yes. In addition to the security updates that address the vulnerabilities described in this bulletin, Microsoft is releasing an update that replaces certain third party libraries which were used by Windows 8.1, Windows Server 2012, Windows Server 2012 R2, Windows Server 2016, and all versions of Windows 10. This update provides the same functionality in a more secure and reliable way.</p> Microsoft Graphics Component Microsoft Yes CVE-2017-0073 10150 10521 10522 1160 10287 10816 10855 10290 10956 10729 10735 10789 10788 10852 10853 10047 10048 10481 10482 10484 9312 9311 9318 9344 10050 10051 10049 10378 10379 10483 10543 4393 9316 10069 10303 10268 10295 10628 10630 10629 10631 10770 10771 10772 10773 Information Disclosure 10150 Information Disclosure 10521 Information Disclosure 10522 Information Disclosure 1160 Information Disclosure 10287 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10290 Information Disclosure 10956 Information Disclosure 10729 Information Disclosure 10735 Information Disclosure 10789 Information Disclosure 10788 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10047 Information Disclosure 10048 Information Disclosure 10481 Information Disclosure 10482 Information Disclosure 10484 Information Disclosure 9312 Information Disclosure 9311 Information Disclosure 9318 Information Disclosure 9344 Information Disclosure 10050 Information Disclosure 10051 Information Disclosure 10049 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 4393 Information Disclosure 9316 Information Disclosure 10069 Information Disclosure 10303 Information Disclosure 10268 Information Disclosure 10295 Information Disclosure 10628 Information Disclosure 10630 Information Disclosure 10629 Information Disclosure 10631 Information Disclosure 10770 Information Disclosure 10771 Information Disclosure 10772 Information Disclosure 10773 Important 10150 Important 10521 Important 10522 Important 1160 Important 10287 Important 10816 Important 10855 Important 10290 Important 10956 Important 10729 Important 10735 Important 10789 Important 10788 Important 10852 Important 10853 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 9312 Important 9311 Important 9318 Important 9344 Important 10050 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Important 4393 Important 9316 Important 10069 Important 10303 Important 10268 Important 10295 Important 10628 Important 10630 Important 10629 Important 10631 Important 10770 Important 10771 Important 10772 Important 10773 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10816 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10855 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10729 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10735 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10789 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10788 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10852 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10853 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10047 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10048 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10481 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10482 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10484 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9312 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9311 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9318 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9344 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10050 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10051 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10049 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10378 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10379 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10483 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10543 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 4393 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9316 3127945 https://www.microsoft.com/download/details.aspx?familyid=0fabf185-f9e4-444e-b305-b383e9a9366c 3118301 10150 Maybe Security Update https://support.microsoft.com/kb/3127945 10150 3127945 3127958 https://www.microsoft.com/download/details.aspx?familyid=66f4e74d-6395-469e-ab5c-2bc3e1f01495 3118317 10521 Maybe Security Update https://support.microsoft.com/kb/3127958 10521 3127958 3127958 https://www.microsoft.com/download/details.aspx?familyid=6d815c5b-b640-4289-88bf-65333cba0d71 3118317 10522 Maybe Security Update https://support.microsoft.com/kb/3127958 10522 3127958 3178693 https://www.microsoft.com/download/details.aspx?familyid=8b13e607-2874-4028-bcca-0e699bcb820a 3118394 1160 Maybe Security Update https://support.microsoft.com/kb/3178693 1160 3178693 4012583 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012583 3196348 10287 9312 9311 9318 9344 4393 9316 gdiplus.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll 0001-01-01T00:00:00 Yes Security Update https://support.microsoft.com/en-us/kb/4012583 10287 9312 9311 9318 9344 4393 9316 4012583 4013429 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013429 3213986 10816 10855 10852 10853 Yes Security Update https://support.microsoft.com/en-us/kb/4013429 10816 10855 10852 10853 4013429 4010303 https://support.microsoft.com/help/4010303 3189647 10290 Maybe Security Update http://support.microsoft.com/kb/4010303 10290 4010303 4010304 https://support.microsoft.com/kb/4010304 10956 Maybe Security Update http://support.microsoft.com/kb/4010304 10956 4010304 4012606 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012606 3210720 10729 10735 Yes Security Update https://support.microsoft.com/en-us/kb/4012606 10729 10735 4012606 4013198 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013198 3210721 10789 10788 Yes Security Update https://support.microsoft.com/en-us/kb/4013198 10789 10788 4013198 4012215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012215 3212646 10047 10048 10050 10051 10049 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012215 10047 10048 10050 10051 10049 4012215 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10047 10050 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;custerr.dll;vmswitch.sys;msxml3.dll;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10047 10050 4012212 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10048 10051 10049 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10048 10051 10049 4012212 4012216 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012216 3205401 10481 10482 10483 10543 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012216 10481 10482 10483 10543 4012216 4012213 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012213 10481 10482 10483 10543 msxpspcl6.dll;msxpsps.dll;hvax64.exe;hvix64.exe;srv.sys;quartz.dll;n/a;win32k.sys;gdiplus.dll;gdi32.dll;icm32.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;dnsapi.dll;msxml3.dll;custerr.dll;vmswitch.sys;dnsrslvr.dll;mrxsmb20.sys;mrxsmb.sys;dxgkrnl.sys;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012213 10481 10482 10483 10543 4012213 4012216 3205401 10484 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012216 10484 4012216 4012217 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012217 3205409 10378 10379 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012217 10378 10379 4012217 4012214 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012214 MS16-110, 3187754 10378 10379 n/a;msxpspcl6.dll;msxpsps.dll;srv.sys;win32k.sys;gdiplus.dll;gdi32.dll;icm32.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dxgkrnl.sys 0001-01-01T00:00:00 Security Only https://support.microsoft.com/en-us/help/4012214 10378 10379 4012214 4010299 https://www.microsoft.com/download/details.aspx?familyid=0074ddc7-a5e0-42b1-a23f-58ac17edbce9 3188397 10069 Maybe Security Update http://support.microsoft.com/help/4010299 10069 4010299 4010299 https://www.microsoft.com/download/details.aspx?familyid=c259af6e-ba1e-4e13-8051-a1ec4b8061e5 3188397 10303 Maybe Security Update http://support.microsoft.com/help/4010299 10303 4010299 4010301 https://www.microsoft.com/download/details.aspx?familyid=b4d7d594-7beb-4a27-b938-8116118ba9d6 3188400 10268 Maybe Security Update http://support.microsoft.com/kb/4010301 10268 4010301 4010300 https://www.microsoft.com/download/details.aspx?familyid=7aeca442-b278-4b3e-a9f1-415269bf5900 3188399 10295 Maybe Security Update http://support.microsoft.com/kb/4010300 10295 4010300 3172539 https://www.microsoft.com/download/details.aspx?familyid=1d1aced6-77f0-4e57-a783-ae1abe716f1a 3118348 10628 10629 Maybe Security Update https://support.microsoft.com/kb/3172539 10628 10629 3172539 3172539 https://www.microsoft.com/download/details.aspx?familyid=6470726a-317c-404e-ab2e-c13e682d0fc0 3118348 10630 10631 Maybe Security Update https://support.microsoft.com/kb/3172539 10630 10631 3172539 3178656 https://www.microsoft.com/download/details.aspx?familyid=251bb98e-1135-4d01-b933-312dcb2e4a51 3118327 10770 10772 Maybe Security Update https://support.microsoft.com/kb/3178656 10770 10772 3178656 3178656 https://www.microsoft.com/download/details.aspx?familyid=f4dec872-7825-4224-b459-eaddc468a6f5 3118327 10771 10773 Maybe Security Update https://support.microsoft.com/kb/3178656 10771 10773 3178656 Symeon Paraschoudis of <a href="https://sensepost.com">SensePost</a> 1.0 2017-03-14T07:00:00 <p>Information published.</p> Hyper-V Denial of Service Vulnerability <p>A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a privileged user on a guest operating system. To exploit the vulnerability, an attacker who already has a privileged account on a guest operating system, running as a virtual machine, could run a specially crafted application that causes a host machine to crash.</p> <p>To exploit the vulnerability, an attacker who already has a privileged account on a guest operating system, running as a virtual machine, could run a specially crafted application.</p> <p>The security update addresses the vulnerability by preventing out-of-bound memory access.</p> Windows Hyper-V Microsoft Yes CVE-2017-0074 10816 10855 10735 10788 10853 10482 10378 10379 10483 10543 Denial of Service 10816 Denial of Service 10855 Denial of Service 10735 Denial of Service 10788 Denial of Service 10853 Denial of Service 10482 Denial of Service 10378 Denial of Service 10379 Denial of Service 10483 Denial of Service 10543 Important 10816 Important 10855 Important 10735 Important 10788 Important 10853 Important 10482 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely;Older Software Release:Exploitation Unlikely;DOS:N/A 5.4 4.9 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C 10816 5.4 4.9 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C 10855 5.4 4.9 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C 10735 5.4 4.9 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C 10788 5.4 4.9 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C 10853 5.4 4.9 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C 10482 5.4 4.9 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C 10378 5.4 4.9 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C 10379 5.4 4.9 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C 10483 5.4 4.9 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C 10543 4013429 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013429 3213986 10816 10855 10853 Yes Security Update https://support.microsoft.com/en-us/kb/4013429 10816 10855 10853 4013429 4012606 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012606 3210720 10735 Yes Security Update https://support.microsoft.com/en-us/kb/4012606 10735 4012606 4013198 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013198 3210721 10788 Yes Security Update https://support.microsoft.com/en-us/kb/4013198 10788 4013198 4012216 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012216 3205401 10482 10483 10543 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012216 10482 10483 10543 4012216 4012213 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012213 10482 10483 10543 msxpspcl6.dll;msxpsps.dll;hvax64.exe;hvix64.exe;srv.sys;quartz.dll;n/a;win32k.sys;gdiplus.dll;gdi32.dll;icm32.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;dnsapi.dll;msxml3.dll;custerr.dll;vmswitch.sys;dnsrslvr.dll;mrxsmb20.sys;mrxsmb.sys;dxgkrnl.sys;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012213 10482 10483 10543 4012213 4012217 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012217 3205409 10378 10379 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012217 10378 10379 4012217 4012214 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012214 MS16-110, 3187754 10378 10379 n/a;msxpspcl6.dll;msxpsps.dll;srv.sys;win32k.sys;gdiplus.dll;gdi32.dll;icm32.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dxgkrnl.sys 0001-01-01T00:00:00 Security Only https://support.microsoft.com/en-us/help/4012214 10378 10379 4012214 <p>The following <a href="https://technet.microsoft.com/library/security/dn848375.aspx#Mitigation">mitigating factors</a> might be helpful in your situation:</p> <ul> <li>Customers who have not enabled the Hyper-V role are not affected.</li> </ul> Alexander Malysh, Microsoft Network Virtualization Team Sumit Dhoble, Microsoft Network Virtualization Team 1.0 2017-03-14T07:00:00 <p>Information published.</p> Windows Hyper-V Remote Code Execution Vulnerability <p>A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system. To exploit the vulnerability, an attacker could run a specially crafted application on a guest operating system that could cause the Hyper-V host operating system to execute arbitrary code.</p> <p>An attacker who successfully exploited the vulnerability could execute arbitrary code on the host operating system.</p> <p>The security update addresses the vulnerability by correcting how Hyper-V validates guest operating system user input.</p> Windows Hyper-V Microsoft Yes CVE-2017-0075 10816 10855 10735 10788 10853 10048 10482 9318 9344 10051 10049 10483 10543 10378 10379 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10735 Remote Code Execution 10788 Remote Code Execution 10853 Remote Code Execution 10048 Remote Code Execution 10482 Remote Code Execution 9318 Remote Code Execution 9344 Remote Code Execution 10051 Remote Code Execution 10049 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 10378 Remote Code Execution 10379 Critical 10816 Critical 10855 Critical 10735 Critical 10788 Critical 10853 Critical 10048 Critical 10482 Critical 9318 Critical 9344 Critical 10051 Critical 10049 Critical 10483 Critical 10543 Critical 10378 Critical 10379 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A 7.6 6.8 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C 10816 7.6 6.8 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C 10855 7.6 6.8 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C 10735 7.6 6.8 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C 10788 7.6 6.8 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C 10853 7.6 6.8 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C 10048 7.6 6.8 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C 10482 7.6 6.8 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C 9318 7.6 6.8 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C 9344 7.6 6.8 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C 10051 7.6 6.8 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C 10049 7.6 6.8 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C 10483 7.6 6.8 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C 10543 7.6 6.8 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C 10378 7.6 6.8 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C 10379 4013429 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013429 3213986 10816 10855 10853 Yes Security Update https://support.microsoft.com/en-us/kb/4013429 10816 10855 10853 4013429 4012606 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012606 3210720 10735 Yes Security Update https://support.microsoft.com/en-us/kb/4012606 10735 4012606 4013198 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013198 3210721 10788 Yes Security Update https://support.microsoft.com/en-us/kb/4013198 10788 4013198 4012215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012215 3212646 10048 10051 10049 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012215 10048 10051 10049 4012215 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10048 10051 10049 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10048 10051 10049 4012212 4012216 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012216 3205401 10482 10483 10543 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012216 10482 10483 10543 4012216 4012213 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012213 10482 10483 10543 msxpspcl6.dll;msxpsps.dll;hvax64.exe;hvix64.exe;srv.sys;quartz.dll;n/a;win32k.sys;gdiplus.dll;gdi32.dll;icm32.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;dnsapi.dll;msxml3.dll;custerr.dll;vmswitch.sys;dnsrslvr.dll;mrxsmb20.sys;mrxsmb.sys;dxgkrnl.sys;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012213 10482 10483 10543 4012213 3211306 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3211306 9318 9344 vmswitch.sys 0001-01-01T00:00:00 Yes Security Update https://support.microsoft.com/en-us/kb/3211306 9318 9344 3211306 4012217 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012217 3205409 10378 10379 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012217 10378 10379 4012217 4012214 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012214 MS16-110, 3187754 10378 10379 n/a;msxpspcl6.dll;msxpsps.dll;srv.sys;win32k.sys;gdiplus.dll;gdi32.dll;icm32.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dxgkrnl.sys 0001-01-01T00:00:00 Security Only https://support.microsoft.com/en-us/help/4012214 10378 10379 4012214 <p>The following <a href="https://technet.microsoft.com/library/security/dn848375.aspx#Mitigation">mitigating factors</a> might be helpful in your situation:</p> <ul> <li>Customers who have not enabled the Hyper-V role are not affected.</li> </ul> Jordan Rabet, Microsoft Offensive Security Research Team 1.0 2017-03-14T07:00:00 <p>Information published.</p> Hyper-V Denial of Service Vulnerability <p>A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a privileged user on a guest operating system. To exploit the vulnerability, an attacker who already has a privileged account on a guest operating system, running as a virtual machine, could run a specially crafted application that causes a host machine to crash.</p> <p>To exploit the vulnerability, an attacker who already has a privileged account on a guest operating system, running as a virtual machine, could run a specially crafted application.</p> <p>The security update addresses the vulnerability by preventing out-of-bound memory access.</p> Windows Hyper-V Microsoft Yes CVE-2017-0076 10816 10855 10482 9318 9344 10051 10049 10378 10379 10483 10543 10735 10788 10853 10048 Denial of Service 10816 Denial of Service 10855 Denial of Service 10482 Denial of Service 9318 Denial of Service 9344 Denial of Service 10051 Denial of Service 10049 Denial of Service 10378 Denial of Service 10379 Denial of Service 10483 Denial of Service 10543 Denial of Service 10735 Denial of Service 10788 Denial of Service 10853 Denial of Service 10048 Important 10816 Important 10855 Important 10482 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Important 10735 Important 10788 Important 10853 Important 10048 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely;Older Software Release:Exploitation Unlikely;DOS:N/A 2.6 2.4 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:N/E:P/RL:O/RC:C 10816 2.6 2.4 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:N/E:P/RL:O/RC:C 10855 2.6 2.4 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:N/E:P/RL:O/RC:C 10482 2.6 2.4 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:N/E:P/RL:O/RC:C 9318 2.6 2.4 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:N/E:P/RL:O/RC:C 9344 2.6 2.4 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:N/E:P/RL:O/RC:C 10051 2.6 2.4 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:N/E:P/RL:O/RC:C 10049 2.6 2.4 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:N/E:P/RL:O/RC:C 10378 2.6 2.4 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:N/E:P/RL:O/RC:C 10379 2.6 2.4 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:N/E:P/RL:O/RC:C 10483 2.6 2.4 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:N/E:P/RL:O/RC:C 10543 2.6 2.4 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:N/E:P/RL:O/RC:C 10735 2.6 2.4 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:N/E:P/RL:O/RC:C 10788 2.6 2.4 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:N/E:P/RL:O/RC:C 10853 2.6 2.4 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:N/E:P/RL:O/RC:C 10048 4013429 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013429 3213986 10816 10855 10853 Yes Security Update https://support.microsoft.com/en-us/kb/4013429 10816 10855 10853 4013429 4012216 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012216 3205401 10482 10483 10543 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012216 10482 10483 10543 4012216 4012213 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012213 10482 10483 10543 msxpspcl6.dll;msxpsps.dll;hvax64.exe;hvix64.exe;srv.sys;quartz.dll;n/a;win32k.sys;gdiplus.dll;gdi32.dll;icm32.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;dnsapi.dll;msxml3.dll;custerr.dll;vmswitch.sys;dnsrslvr.dll;mrxsmb20.sys;mrxsmb.sys;dxgkrnl.sys;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012213 10482 10483 10543 4012213 3211306 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3211306 9318 9344 vmswitch.sys 0001-01-01T00:00:00 Yes Security Update https://support.microsoft.com/en-us/kb/3211306 9318 9344 3211306 4012215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012215 3212646 10051 10049 10048 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012215 10051 10049 10048 4012215 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10051 10049 10048 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10051 10049 10048 4012212 4012217 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012217 3205409 10378 10379 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012217 10378 10379 4012217 4012214 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012214 MS16-110, 3187754 10378 10379 n/a;msxpspcl6.dll;msxpsps.dll;srv.sys;win32k.sys;gdiplus.dll;gdi32.dll;icm32.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dxgkrnl.sys 0001-01-01T00:00:00 Security Only https://support.microsoft.com/en-us/help/4012214 10378 10379 4012214 4012606 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012606 3210720 10735 Yes Security Update https://support.microsoft.com/en-us/kb/4012606 10735 4012606 4013198 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013198 3210721 10788 Yes Security Update https://support.microsoft.com/en-us/kb/4013198 10788 4013198 <p>The following <a href="https://technet.microsoft.com/library/security/dn848375.aspx#Mitigation">mitigating factors</a> might be helpful in your situation:</p> <ul> <li>Customers who have not enabled the Hyper-V role are not affected.</li> </ul> Joe Bialek, MSRC Vulnerabilities and Mitigations Team 1.0 2017-03-14T07:00:00 <p>Information published.</p> Win32k Elevation of Privilege Vulnerability <p>An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p> <p>To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system.</p> <p>The update addresses this vulnerability by correcting how the Windows kernel-mode driver handles objects in memory.</p> Windows Kernel-Mode Drivers Microsoft Yes CVE-2017-0078 10729 10735 10789 10788 10481 10482 10484 10378 10379 10483 10543 Elevation of Privilege 10729 Elevation of Privilege 10735 Elevation of Privilege 10789 Elevation of Privilege 10788 Elevation of Privilege 10481 Elevation of Privilege 10482 Elevation of Privilege 10484 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 10729 Important 10735 Important 10789 Important 10788 Important 10481 Important 10482 Important 10484 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;DOS:N/A 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10729 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10735 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10789 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10788 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10481 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10482 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10484 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10378 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10379 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10483 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10543 4012606 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012606 3210720 10729 10735 Yes Security Update https://support.microsoft.com/en-us/kb/4012606 10729 10735 4012606 4013198 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013198 3210721 10789 10788 Yes Security Update https://support.microsoft.com/en-us/kb/4013198 10789 10788 4013198 4012216 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012216 3205401 10481 10482 10483 10543 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012216 10481 10482 10483 10543 4012216 4012213 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012213 10481 10482 10483 10543 msxpspcl6.dll;msxpsps.dll;hvax64.exe;hvix64.exe;srv.sys;quartz.dll;n/a;win32k.sys;gdiplus.dll;gdi32.dll;icm32.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;dnsapi.dll;msxml3.dll;custerr.dll;vmswitch.sys;dnsrslvr.dll;mrxsmb20.sys;mrxsmb.sys;dxgkrnl.sys;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012213 10481 10482 10483 10543 4012213 4012216 3205401 10484 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012216 10484 4012216 4012217 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012217 3205409 10378 10379 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012217 10378 10379 4012217 4012214 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012214 MS16-110, 3187754 10378 10379 n/a;msxpspcl6.dll;msxpsps.dll;srv.sys;win32k.sys;gdiplus.dll;gdi32.dll;icm32.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dxgkrnl.sys 0001-01-01T00:00:00 Security Only https://support.microsoft.com/en-us/help/4012214 10378 10379 4012214 <a href="http://weibo.com/pgboy1988">pgboy</a> and <a href="http://weibo.com/2641521260">zhong_sf</a> of <a href="http://www.360.cn/">Qihoo 360 Vulcan Team</a> 1.0 2017-03-14T07:00:00 <p>Information published.</p> Win32k Elevation of Privilege Vulnerability <p>An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p> <p>To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system.</p> <p>The update addresses this vulnerability by correcting how the Windows kernel-mode driver handles objects in memory.</p> Windows Kernel-Mode Drivers Microsoft Yes CVE-2017-0079 10729 10735 10789 10788 10481 10482 10484 10483 Elevation of Privilege 10729 Elevation of Privilege 10735 Elevation of Privilege 10789 Elevation of Privilege 10788 Elevation of Privilege 10481 Elevation of Privilege 10482 Elevation of Privilege 10484 Elevation of Privilege 10483 Important 10729 Important 10735 Important 10789 Important 10788 Important 10481 Important 10482 Important 10484 Important 10483 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10729 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10735 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10789 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10788 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10481 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10482 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10484 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10483 4012606 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012606 3210720 10729 10735 Yes Security Update https://support.microsoft.com/en-us/kb/4012606 10729 10735 4012606 4013198 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013198 3210721 10789 10788 Yes Security Update https://support.microsoft.com/en-us/kb/4013198 10789 10788 4013198 4012216 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012216 3205401 10481 10482 10483 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012216 10481 10482 10483 4012216 4012213 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012213 10481 10482 10483 msxpspcl6.dll;msxpsps.dll;hvax64.exe;hvix64.exe;srv.sys;quartz.dll;n/a;win32k.sys;gdiplus.dll;gdi32.dll;icm32.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;dnsapi.dll;msxml3.dll;custerr.dll;vmswitch.sys;dnsrslvr.dll;mrxsmb20.sys;mrxsmb.sys;dxgkrnl.sys;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012213 10481 10482 10483 4012213 4012216 3205401 10484 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012216 10484 4012216 <a href="http://weibo.com/pgboy1988">pgboy</a> and <a href="http://weibo.com/2641521260">zhong_sf</a> of <a href="http://www.360.com/">Qihoo 360 Vulcan Team</a> 1.0 2017-03-14T07:00:00 <p>Information published.</p> Win32k Elevation of Privilege Vulnerability <p>An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p> <p>To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system.</p> <p>The update addresses this vulnerability by correcting how the Windows kernel-mode driver handles objects in memory.</p> Windows Kernel-Mode Drivers Microsoft Yes CVE-2017-0080 10816 10855 10729 10735 10789 10788 10852 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10729 Elevation of Privilege 10735 Elevation of Privilege 10789 Elevation of Privilege 10788 Elevation of Privilege 10852 Elevation of Privilege 10853 Important 10816 Important 10855 Important 10729 Important 10735 Important 10789 Important 10788 Important 10852 Important 10853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10816 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10855 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10729 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10735 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10789 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10788 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10852 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10853 4013429 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013429 3213986 10816 10855 10852 10853 Yes Security Update https://support.microsoft.com/en-us/kb/4013429 10816 10855 10852 10853 4013429 4012606 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012606 3210720 10729 10735 Yes Security Update https://support.microsoft.com/en-us/kb/4012606 10729 10735 4012606 4013198 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013198 3210721 10789 10788 Yes Security Update https://support.microsoft.com/en-us/kb/4013198 10789 10788 4013198 <a href="http://weibo.com/pgboy1988">pgboy</a> and <a href="http://weibo.com/2641521260">zhong_sf</a> of <a href="http://www.360.cn/">Qihoo 360 Vulcan Team</a> 1.0 2017-03-14T07:00:00 <p>Information published.</p> Win32k Elevation of Privilege Vulnerability <p>An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p> <p>To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system.</p> <p>The update addresses this vulnerability by correcting how the Windows kernel-mode driver handles objects in memory.</p> Windows Kernel-Mode Drivers Microsoft Yes CVE-2017-0081 10816 10855 10729 10735 10789 10788 10852 10853 10481 10482 10484 10378 10379 10483 10543 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10729 Elevation of Privilege 10735 Elevation of Privilege 10789 Elevation of Privilege 10788 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10481 Elevation of Privilege 10482 Elevation of Privilege 10484 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 10816 Important 10855 Important 10729 Important 10735 Important 10789 Important 10788 Important 10852 Important 10853 Important 10481 Important 10482 Important 10484 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10816 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10855 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10729 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10735 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10789 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10788 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10852 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10853 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10481 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10482 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10484 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10378 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10379 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10483 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10543 4013429 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013429 3213986 10816 10855 10852 10853 Yes Security Update https://support.microsoft.com/en-us/kb/4013429 10816 10855 10852 10853 4013429 4012606 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012606 3210720 10729 10735 Yes Security Update https://support.microsoft.com/en-us/kb/4012606 10729 10735 4012606 4013198 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013198 3210721 10789 10788 Yes Security Update https://support.microsoft.com/en-us/kb/4013198 10789 10788 4013198 4012216 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012216 3205401 10481 10482 10483 10543 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012216 10481 10482 10483 10543 4012216 4012213 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012213 10481 10482 10483 10543 msxpspcl6.dll;msxpsps.dll;hvax64.exe;hvix64.exe;srv.sys;quartz.dll;n/a;win32k.sys;gdiplus.dll;gdi32.dll;icm32.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;dnsapi.dll;msxml3.dll;custerr.dll;vmswitch.sys;dnsrslvr.dll;mrxsmb20.sys;mrxsmb.sys;dxgkrnl.sys;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012213 10481 10482 10483 10543 4012213 4012216 3205401 10484 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012216 10484 4012216 4012217 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012217 3205409 10378 10379 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012217 10378 10379 4012217 4012214 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012214 MS16-110, 3187754 10378 10379 n/a;msxpspcl6.dll;msxpsps.dll;srv.sys;win32k.sys;gdiplus.dll;gdi32.dll;icm32.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dxgkrnl.sys 0001-01-01T00:00:00 Security Only https://support.microsoft.com/en-us/help/4012214 10378 10379 4012214 <a href="http://weibo.com/pgboy1988">pgboy</a> and <a href="http://weibo.com/2641521260">zhong_sf</a> of <a href="http://www.360.cn/">Qihoo 360 Vulcan Team</a> 1.0 2017-03-14T07:00:00 <p>Information published.</p> Win32k Elevation of Privilege Vulnerability <p>An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p> <p>To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system.</p> <p>The update addresses this vulnerability by correcting how the Windows kernel-mode driver handles objects in memory.</p> Windows Kernel-Mode Drivers Microsoft Yes CVE-2017-0082 10729 10735 10789 10788 Elevation of Privilege 10729 Elevation of Privilege 10735 Elevation of Privilege 10789 Elevation of Privilege 10788 Important 10729 Important 10735 Important 10789 Important 10788 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A;Older Software Release:Exploitation More Likely;DOS:N/A 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10729 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10735 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10789 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10788 4012606 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012606 3210720 10729 10735 Yes Security Update https://support.microsoft.com/en-us/kb/4012606 10729 10735 4012606 4013198 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013198 3210721 10789 10788 Yes Security Update https://support.microsoft.com/en-us/kb/4013198 10789 10788 4013198 <a href="http://weibo.com/pgboy1988">pgboy</a> and <a href="http://weibo.com/2641521260">zhong_sf</a> of <a href="http://www.360.cn/">Qihoo 360 Vulcan Team</a> 1.0 2017-03-14T07:00:00 <p>Information published.</p> Windows Uniscribe Remote Code Execution Vulnerability <p>A remote code execution vulnerability exists due to the way Windows Uniscribe handles objects in memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.</p> <p>There are multiple ways an attacker could exploit this vulnerability:</p> <ul> <li><p>In a web-based attack scenario, an attacker could host a specially crafted website designed to exploit this vulnerability and then convince a user to view the website. An attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically by getting them to click a link in an email or instant message that takes users to the attacker's website, or by opening an attachment sent through email.</p> </li> <li><p>In a file-sharing attack scenario, an attacker could provide a specially crafted document file designed to exploit this vulnerability and then convince a user to open the document file.</p> </li> </ul> <p>The security update addresses the vulnerability by correcting how Windows Uniscribe handles objects in memory.</p> Microsoft Uniscribe Microsoft Yes CVE-2017-0084 10729 10735 10789 10788 10852 10853 10047 10048 10481 10482 10484 9312 10287 9311 9318 9344 10050 10051 10049 10378 10379 10483 10543 4393 9316 10816 10855 Information Disclosure 10729 Information Disclosure 10735 Information Disclosure 10789 Information Disclosure 10788 Information Disclosure 10852 Information Disclosure 10853 Remote Code Execution 10047 Remote Code Execution 10048 Information Disclosure 10481 Information Disclosure 10482 Information Disclosure 10484 Remote Code Execution 9312 Remote Code Execution 10287 Remote Code Execution 9311 Remote Code Execution 9318 Remote Code Execution 9344 Remote Code Execution 10050 Remote Code Execution 10051 Remote Code Execution 10049 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Remote Code Execution 4393 Remote Code Execution 9316 Information Disclosure 10816 Information Disclosure 10855 Important 10729 Important 10735 Important 10789 Important 10788 Important 10852 Important 10853 Critical 10047 Critical 10048 Important 10481 Important 10482 Important 10484 Critical 9312 Critical 10287 Critical 9311 Critical 9318 Critical 9344 Critical 10050 Critical 10051 Critical 10049 Important 10378 Important 10379 Important 10483 Important 10543 Critical 4393 Critical 9316 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely;Older Software Release:Exploitation Unlikely;DOS:N/A 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10729 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10735 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10789 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10788 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10852 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10853 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10047 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10048 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10481 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10482 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10484 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9312 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10287 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9311 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9318 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9344 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10050 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10051 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10049 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10378 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10379 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10483 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10543 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 4393 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9316 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10816 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10855 4012606 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012606 3210720 10729 10735 Yes Security Update https://support.microsoft.com/en-us/kb/4012606 10729 10735 4012606 4013198 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013198 3210721 10789 10788 Yes Security Update https://support.microsoft.com/en-us/kb/4013198 10789 10788 4013198 4013429 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013429 3213986 10852 10853 10816 10855 Yes Security Update https://support.microsoft.com/en-us/kb/4013429 10852 10853 10816 10855 4013429 4012215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012215 3212646 10047 10048 10050 10051 10049 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012215 10047 10048 10050 10051 10049 4012215 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10047 10050 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;custerr.dll;vmswitch.sys;msxml3.dll;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10047 10050 4012212 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10048 10051 10049 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10048 10051 10049 4012212 4012216 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012216 3205401 10481 10482 10483 10543 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012216 10481 10482 10483 10543 4012216 4012213 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012213 10481 10482 10483 10543 msxpspcl6.dll;msxpsps.dll;hvax64.exe;hvix64.exe;srv.sys;quartz.dll;n/a;win32k.sys;gdiplus.dll;gdi32.dll;icm32.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;dnsapi.dll;msxml3.dll;custerr.dll;vmswitch.sys;dnsrslvr.dll;mrxsmb20.sys;mrxsmb.sys;dxgkrnl.sys;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012213 10481 10482 10483 10543 4012213 4012216 3205401 10484 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012216 10484 4012216 4012583 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012583 3196348 9312 10287 9311 9318 9344 4393 9316 gdiplus.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll 0001-01-01T00:00:00 Yes Security Update https://support.microsoft.com/en-us/kb/4012583 9312 10287 9311 9318 9344 4393 9316 4012583 4012217 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012217 3205409 10378 10379 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012217 10378 10379 4012217 4012214 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012214 MS16-110, 3187754 10378 10379 n/a;msxpspcl6.dll;msxpsps.dll;srv.sys;win32k.sys;gdiplus.dll;gdi32.dll;icm32.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dxgkrnl.sys 0001-01-01T00:00:00 Security Only https://support.microsoft.com/en-us/help/4012214 10378 10379 4012214 Mateusz Jurczyk of <a href="http://www.google.com/">Google Project Zero</a> 1.0 2017-03-14T07:00:00 <p>Information published.</p> Windows Uniscribe Information Disclosure Vulnerability <p>An information disclosure vulnerability exists when Windows Uniscribe improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.</p> <p>There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document or by convincing a user to visit an untrusted webpage.</p> <p>The update addresses the vulnerability by correcting how Windows Uniscribe handles objects in memory.</p> Microsoft Uniscribe Microsoft Yes CVE-2017-0085 10047 10048 9312 10287 9311 9318 9344 10050 10051 10049 4393 9316 Information Disclosure 10047 Information Disclosure 10048 Information Disclosure 9312 Information Disclosure 10287 Information Disclosure 9311 Information Disclosure 9318 Information Disclosure 9344 Information Disclosure 10050 Information Disclosure 10051 Information Disclosure 10049 Information Disclosure 4393 Information Disclosure 9316 Important 10047 Important 10048 Important 9312 Important 10287 Important 9311 Important 9318 Important 9344 Important 10050 Important 10051 Important 10049 Important 4393 Important 9316 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A;Older Software Release:Exploitation Unlikely;DOS:N/A 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10047 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10048 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9312 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10287 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9311 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9318 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9344 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10050 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10051 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10049 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 4393 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9316 4012215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012215 3212646 10047 10048 10050 10051 10049 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012215 10047 10048 10050 10051 10049 4012215 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10047 10050 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;custerr.dll;vmswitch.sys;msxml3.dll;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10047 10050 4012212 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10048 10051 10049 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10048 10051 10049 4012212 4012583 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012583 3196348 9312 10287 9311 9318 9344 4393 9316 gdiplus.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll 0001-01-01T00:00:00 Yes Security Update https://support.microsoft.com/en-us/kb/4012583 9312 10287 9311 9318 9344 4393 9316 4012583 Mateusz Jurczyk of <a href="http://www.google.com/">Google Project Zero</a> 1.0 2017-03-14T07:00:00 <p>Information published.</p> Windows Uniscribe Remote Code Execution Vulnerability <p>A remote code execution vulnerability exists due to the way Windows Uniscribe handles objects in memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.</p> <p>There are multiple ways an attacker could exploit this vulnerability:</p> <ul> <li><p>In a web-based attack scenario, an attacker could host a specially crafted website designed to exploit this vulnerability and then convince a user to view the website. An attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically by getting them to click a link in an email or instant message that takes users to the attacker's website, or by opening an attachment sent through email.</p> </li> <li><p>In a file-sharing attack scenario, an attacker could provide a specially crafted document file designed to exploit this vulnerability and then convince a user to open the document file.</p> </li> </ul> <p>The security update addresses the vulnerability by correcting how Windows Uniscribe handles objects in memory.</p> Microsoft Uniscribe Microsoft Yes CVE-2017-0086 10047 10048 9312 10287 9311 9318 9344 10050 10051 10049 4393 9316 Remote Code Execution 10047 Remote Code Execution 10048 Remote Code Execution 9312 Remote Code Execution 10287 Remote Code Execution 9311 Remote Code Execution 9318 Remote Code Execution 9344 Remote Code Execution 10050 Remote Code Execution 10051 Remote Code Execution 10049 Remote Code Execution 4393 Remote Code Execution 9316 Critical 10047 Critical 10048 Critical 9312 Critical 10287 Critical 9311 Critical 9318 Critical 9344 Critical 10050 Critical 10051 Critical 10049 Critical 4393 Critical 9316 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A;Older Software Release:Exploitation Less Likely;DOS:N/A 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10047 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10048 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9312 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10287 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9311 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9318 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9344 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10050 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10051 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10049 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 4393 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9316 4012215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012215 3212646 10047 10048 10050 10051 10049 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012215 10047 10048 10050 10051 10049 4012215 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10047 10050 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;custerr.dll;vmswitch.sys;msxml3.dll;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10047 10050 4012212 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10048 10051 10049 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10048 10051 10049 4012212 4012583 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012583 3196348 9312 10287 9311 9318 9344 4393 9316 gdiplus.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll 0001-01-01T00:00:00 Yes Security Update https://support.microsoft.com/en-us/kb/4012583 9312 10287 9311 9318 9344 4393 9316 4012583 Mateusz Jurczyk of <a href="http://www.google.com/">Google Project Zero</a> 1.0 2017-03-14T07:00:00 <p>Information published.</p> Windows Uniscribe Remote Code Execution Vulnerability <p>A remote code execution vulnerability exists due to the way Windows Uniscribe handles objects in memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.</p> <p>There are multiple ways an attacker could exploit this vulnerability:</p> <ul> <li><p>In a web-based attack scenario, an attacker could host a specially crafted website designed to exploit this vulnerability and then convince a user to view the website. An attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically by getting them to click a link in an email or instant message that takes users to the attacker's website, or by opening an attachment sent through email.</p> </li> <li><p>In a file-sharing attack scenario, an attacker could provide a specially crafted document file designed to exploit this vulnerability and then convince a user to open the document file.</p> </li> </ul> <p>The security update addresses the vulnerability by correcting how Windows Uniscribe handles objects in memory.</p> Microsoft Uniscribe Microsoft Yes CVE-2017-0087 10047 10048 9312 10287 9311 9318 9344 10050 10051 10049 4393 9316 Remote Code Execution 10047 Remote Code Execution 10048 Remote Code Execution 9312 Remote Code Execution 10287 Remote Code Execution 9311 Remote Code Execution 9318 Remote Code Execution 9344 Remote Code Execution 10050 Remote Code Execution 10051 Remote Code Execution 10049 Remote Code Execution 4393 Remote Code Execution 9316 Critical 10047 Critical 10048 Critical 9312 Critical 10287 Critical 9311 Critical 9318 Critical 9344 Critical 10050 Critical 10051 Critical 10049 Critical 4393 Critical 9316 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A;Older Software Release:Exploitation Less Likely;DOS:N/A 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10047 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10048 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9312 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10287 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9311 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9318 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9344 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10050 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10051 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10049 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 4393 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9316 4012215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012215 3212646 10047 10048 10050 10051 10049 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012215 10047 10048 10050 10051 10049 4012215 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10047 10050 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;custerr.dll;vmswitch.sys;msxml3.dll;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10047 10050 4012212 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10048 10051 10049 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10048 10051 10049 4012212 4012583 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012583 3196348 9312 10287 9311 9318 9344 4393 9316 gdiplus.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll 0001-01-01T00:00:00 Yes Security Update https://support.microsoft.com/en-us/kb/4012583 9312 10287 9311 9318 9344 4393 9316 4012583 Mateusz Jurczyk of <a href="http://www.google.com/">Google Project Zero</a> 1.0 2017-03-14T07:00:00 <p>Information published.</p> Windows Uniscribe Remote Code Execution Vulnerability <p>A remote code execution vulnerability exists due to the way Windows Uniscribe handles objects in memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.</p> <p>There are multiple ways an attacker could exploit this vulnerability:</p> <ul> <li><p>In a web-based attack scenario, an attacker could host a specially crafted website designed to exploit this vulnerability and then convince a user to view the website. An attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically by getting them to click a link in an email or instant message that takes users to the attacker's website, or by opening an attachment sent through email.</p> </li> <li><p>In a file-sharing attack scenario, an attacker could provide a specially crafted document file designed to exploit this vulnerability and then convince a user to open the document file.</p> </li> </ul> <p>The security update addresses the vulnerability by correcting how Windows Uniscribe handles objects in memory.</p> Microsoft Uniscribe Microsoft Yes CVE-2017-0088 10047 10048 9312 10287 9311 9318 9344 10050 10051 10049 4393 9316 Remote Code Execution 10047 Remote Code Execution 10048 Remote Code Execution 9312 Remote Code Execution 10287 Remote Code Execution 9311 Remote Code Execution 9318 Remote Code Execution 9344 Remote Code Execution 10050 Remote Code Execution 10051 Remote Code Execution 10049 Remote Code Execution 4393 Remote Code Execution 9316 Critical 10047 Critical 10048 Critical 9312 Critical 10287 Critical 9311 Critical 9318 Critical 9344 Critical 10050 Critical 10051 Critical 10049 Critical 4393 Critical 9316 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A;Older Software Release:Exploitation Less Likely;DOS:N/A 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10047 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10048 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9312 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10287 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9311 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9318 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9344 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10050 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10051 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10049 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 4393 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9316 4012215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012215 3212646 10047 10048 10050 10051 10049 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012215 10047 10048 10050 10051 10049 4012215 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10047 10050 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;custerr.dll;vmswitch.sys;msxml3.dll;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10047 10050 4012212 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10048 10051 10049 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10048 10051 10049 4012212 4012583 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012583 3196348 9312 10287 9311 9318 9344 4393 9316 gdiplus.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll 0001-01-01T00:00:00 Yes Security Update https://support.microsoft.com/en-us/kb/4012583 9312 10287 9311 9318 9344 4393 9316 4012583 Mateusz Jurczyk of <a href="http://www.google.com/">Google Project Zero</a> 1.0 2017-03-14T07:00:00 <p>Information published.</p> Windows Uniscribe Remote Code Execution Vulnerability <p>A remote code execution vulnerability exists due to the way Windows Uniscribe handles objects in memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.</p> <p>There are multiple ways an attacker could exploit this vulnerability:</p> <ul> <li><p>In a web-based attack scenario, an attacker could host a specially crafted website designed to exploit this vulnerability and then convince a user to view the website. An attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically by getting them to click a link in an email or instant message that takes users to the attacker's website, or by opening an attachment sent through email.</p> </li> <li><p>In a file-sharing attack scenario, an attacker could provide a specially crafted document file designed to exploit this vulnerability and then convince a user to open the document file.</p> </li> </ul> <p>The security update addresses the vulnerability by correcting how Windows Uniscribe handles objects in memory.</p> Microsoft Uniscribe Microsoft Yes CVE-2017-0089 10047 10048 9312 10287 9311 9318 9344 10050 10051 10049 4393 9316 Remote Code Execution 10047 Remote Code Execution 10048 Remote Code Execution 9312 Remote Code Execution 10287 Remote Code Execution 9311 Remote Code Execution 9318 Remote Code Execution 9344 Remote Code Execution 10050 Remote Code Execution 10051 Remote Code Execution 10049 Remote Code Execution 4393 Remote Code Execution 9316 Critical 10047 Critical 10048 Critical 9312 Critical 10287 Critical 9311 Critical 9318 Critical 9344 Critical 10050 Critical 10051 Critical 10049 Critical 4393 Critical 9316 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A;Older Software Release:Exploitation Less Likely;DOS:N/A 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10047 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10048 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9312 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10287 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9311 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9318 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9344 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10050 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10051 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10049 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 4393 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9316 4012215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012215 3212646 10047 10048 10050 10051 10049 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012215 10047 10048 10050 10051 10049 4012215 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10047 10050 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;custerr.dll;vmswitch.sys;msxml3.dll;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10047 10050 4012212 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10048 10051 10049 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10048 10051 10049 4012212 4012583 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012583 3196348 9312 10287 9311 9318 9344 4393 9316 gdiplus.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll 0001-01-01T00:00:00 Yes Security Update https://support.microsoft.com/en-us/kb/4012583 9312 10287 9311 9318 9344 4393 9316 4012583 Mateusz Jurczyk of <a href="http://www.google.com/">Google Project Zero</a> 1.0 2017-03-14T07:00:00 <p>Information published.</p> Windows Uniscribe Remote Code Execution Vulnerability <p>A remote code execution vulnerability exists due to the way Windows Uniscribe handles objects in memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.</p> <p>There are multiple ways an attacker could exploit this vulnerability:</p> <ul> <li><p>In a web-based attack scenario, an attacker could host a specially crafted website designed to exploit this vulnerability and then convince a user to view the website. An attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically by getting them to click a link in an email or instant message that takes users to the attacker's website, or by opening an attachment sent through email.</p> </li> <li><p>In a file-sharing attack scenario, an attacker could provide a specially crafted document file designed to exploit this vulnerability and then convince a user to open the document file.</p> </li> </ul> <p>The security update addresses the vulnerability by correcting how Windows Uniscribe handles objects in memory.</p> Microsoft Uniscribe Microsoft Yes CVE-2017-0090 10047 10048 9312 10287 9311 9318 9344 10050 10051 10049 4393 9316 Remote Code Execution 10047 Remote Code Execution 10048 Remote Code Execution 9312 Remote Code Execution 10287 Remote Code Execution 9311 Remote Code Execution 9318 Remote Code Execution 9344 Remote Code Execution 10050 Remote Code Execution 10051 Remote Code Execution 10049 Remote Code Execution 4393 Remote Code Execution 9316 Critical 10047 Critical 10048 Critical 9312 Critical 10287 Critical 9311 Critical 9318 Critical 9344 Critical 10050 Critical 10051 Critical 10049 Critical 4393 Critical 9316 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A;Older Software Release:Exploitation Less Likely;DOS:N/A 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10047 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10048 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9312 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10287 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9311 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9318 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9344 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10050 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10051 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10049 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 4393 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9316 4012215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012215 3212646 10047 10048 10050 10051 10049 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012215 10047 10048 10050 10051 10049 4012215 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10047 10050 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;custerr.dll;vmswitch.sys;msxml3.dll;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10047 10050 4012212 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10048 10051 10049 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10048 10051 10049 4012212 4012583 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012583 3196348 9312 10287 9311 9318 9344 4393 9316 gdiplus.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll 0001-01-01T00:00:00 Yes Security Update https://support.microsoft.com/en-us/kb/4012583 9312 10287 9311 9318 9344 4393 9316 4012583 Mateusz Jurczyk of <a href="http://www.google.com/">Google Project Zero</a> 1.0 2017-03-14T07:00:00 <p>Information published.</p> Windows Uniscribe Information Disclosure Vulnerability <p>An information disclosure vulnerability exists when Windows Uniscribe improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.</p> <p>There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document or by convincing a user to visit an untrusted webpage.</p> <p>The update addresses the vulnerability by correcting how Windows Uniscribe handles objects in memory.</p> Microsoft Uniscribe Microsoft Yes CVE-2017-0091 10047 10048 9312 10287 9311 9318 9344 10050 10051 10049 4393 9316 Information Disclosure 10047 Information Disclosure 10048 Information Disclosure 9312 Information Disclosure 10287 Information Disclosure 9311 Information Disclosure 9318 Information Disclosure 9344 Information Disclosure 10050 Information Disclosure 10051 Information Disclosure 10049 Information Disclosure 4393 Information Disclosure 9316 Important 10047 Important 10048 Important 9312 Important 10287 Important 9311 Important 9318 Important 9344 Important 10050 Important 10051 Important 10049 Important 4393 Important 9316 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A;Older Software Release:Exploitation Unlikely;DOS:N/A 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10047 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10048 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9312 4.4 4.0 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10287 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9311 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9318 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9344 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10050 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10051 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10049 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 4393 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9316 4012215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012215 3212646 10047 10048 10050 10051 10049 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012215 10047 10048 10050 10051 10049 4012215 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10047 10050 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;custerr.dll;vmswitch.sys;msxml3.dll;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10047 10050 4012212 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10048 10051 10049 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10048 10051 10049 4012212 4012583 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012583 3196348 9312 10287 9311 9318 9344 4393 9316 gdiplus.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll 0001-01-01T00:00:00 Yes Security Update https://support.microsoft.com/en-us/kb/4012583 9312 10287 9311 9318 9344 4393 9316 4012583 Mateusz Jurczyk of <a href="http://www.google.com/">Google Project Zero</a> 1.0 2017-03-14T07:00:00 <p>Information published.</p> Windows Uniscribe Information Disclosure Vulnerability <p>An information disclosure vulnerability exists when Windows Uniscribe improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.</p> <p>There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document or by convincing a user to visit an untrusted webpage.</p> <p>The update addresses the vulnerability by correcting how Windows Uniscribe handles objects in memory.</p> Microsoft Uniscribe Microsoft Yes CVE-2017-0092 10047 10048 9312 10287 9311 9318 9344 10050 10051 10049 4393 9316 Information Disclosure 10047 Information Disclosure 10048 Information Disclosure 9312 Information Disclosure 10287 Information Disclosure 9311 Information Disclosure 9318 Information Disclosure 9344 Information Disclosure 10050 Information Disclosure 10051 Information Disclosure 10049 Information Disclosure 4393 Information Disclosure 9316 Important 10047 Important 10048 Important 9312 Important 10287 Important 9311 Important 9318 Important 9344 Important 10050 Important 10051 Important 10049 Important 4393 Important 9316 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A;Older Software Release:Exploitation Unlikely;DOS:N/A 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10047 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10048 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9312 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10287 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9311 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9318 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9344 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10050 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10051 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10049 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 4393 4.4 4.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 9316 4012215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012215 3212646 10047 10048 10050 10051 10049 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012215 10047 10048 10050 10051 10049 4012215 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10047 10050 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;custerr.dll;vmswitch.sys;msxml3.dll;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10047 10050 4012212 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10048 10051 10049 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10048 10051 10049 4012212 4012583 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012583 3196348 9312 10287 9311 9318 9344 4393 9316 gdiplus.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll 0001-01-01T00:00:00 Yes Security Update https://support.microsoft.com/en-us/kb/4012583 9312 10287 9311 9318 9344 4393 9316 4012583 Mateusz Jurczyk of <a href="http://www.google.com/">Google Project Zero</a> 1.0 2017-03-14T07:00:00 <p>Information published.</p> Scripting Engine Memory Corruption Vulnerability <p>A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p> <p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Internet Explorer and then convince a user to view the website. An attacker could also embed an ActiveX control marked &quot;safe for initialization&quot; in an application or Microsoft Office document that hosts the IE rendering engine. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p> <p>The security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.</p> Microsoft Edge (HTML-based) Microsoft Yes CVE-2017-0094 10724-10729 10724-10735 10724-10789 10724-10788 10724-10852 10724-10853 Remote Code Execution 10724-10729 Remote Code Execution 10724-10735 Remote Code Execution 10724-10789 Remote Code Execution 10724-10788 Remote Code Execution 10724-10852 Remote Code Execution 10724-10853 Critical 10724-10729 Critical 10724-10735 Critical 10724-10789 Critical 10724-10788 Critical 10724-10852 Critical 10724-10853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A;DOS:N/A 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10729 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10735 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10789 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10788 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10852 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10853 4012606 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012606 3210720 10724-10729 10724-10735 Yes Security Update https://support.microsoft.com/en-us/kb/4012606 10724-10729 10724-10735 4012606 4013198 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013198 3210721 10724-10789 10724-10788 Yes Security Update https://support.microsoft.com/en-us/kb/4013198 10724-10789 10724-10788 4013198 4013429 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013429 3213986 10724-10852 10724-10853 Yes Security Update https://support.microsoft.com/en-us/kb/4013429 10724-10852 10724-10853 4013429 bee13oy of CloverSec Labs, working with <a href="http://www.zerodayinitiative.com/"> Trend Micro's Zero Day Initiative</a> 1.0 2017-03-14T07:00:00 <p>Information published.</p> Hyper-V vSMB Remote Code Execution Vulnerability <p>A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate vSMB packet data. An attacker who successfully exploited these vulnerabilities could execute arbitrary code on a target operating system.</p> <p>To exploit these vulnerabilities, an attacker running inside a virtual machine could run a specially crafted application that could cause the Hyper-V host operating system to execute arbitrary code.</p> <p>The update addresses the vulnerabilities by correcting how Windows Hyper-V validates vSMB packet data.</p> Windows Hyper-V Microsoft Yes CVE-2017-0095 10816 10855 10735 10788 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10735 Remote Code Execution 10788 Remote Code Execution 10853 Important 10816 Important 10855 Important 10735 Important 10788 Important 10853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A 7.6 6.8 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C 10816 7.6 6.8 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C 10855 7.6 6.8 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C 10735 7.6 6.8 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C 10788 7.6 6.8 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C 10853 4013429 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013429 3213986 10816 10855 10853 Yes Security Update https://support.microsoft.com/en-us/kb/4013429 10816 10855 10853 4013429 4012606 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012606 3210720 10735 Yes Security Update https://support.microsoft.com/en-us/kb/4012606 10735 4012606 4013198 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013198 3210721 10788 Yes Security Update https://support.microsoft.com/en-us/kb/4013198 10788 4013198 <p>The following <a href="https://technet.microsoft.com/library/security/dn848375.aspx#Mitigation">mitigating factors</a> might be helpful in your situation:</p> <ul> <li>Customers who have not enabled the Hyper-V role are not affected.</li> </ul> Jonathan Bar Or, Windows Defender ATP Research Team 1.0 2017-03-14T07:00:00 <p>Information published.</p> Windows Hyper-V Information Disclosure Vulnerability <p>An information disclosure vulnerability exists when Windows Hyper-V on a host operating system fails to properly validate input from an authenticated user on a guest operating system. To exploit the vulnerability, an attacker on a guest operating system could run a specially crafted application that could cause the Hyper-V host operating system to disclose memory information.</p> <p>An attacker who successfully exploited the vulnerability could gain access to information on the Hyper-V host operating system.</p> <p>The security update addresses the vulnerability by correcting how Hyper-V validates guest operating system user input.</p> Windows Hyper-V Microsoft Yes CVE-2017-0096 10816 10855 10735 10788 10853 10048 10482 9318 9344 10051 10049 10378 10379 10483 10543 9316 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10735 Information Disclosure 10788 Information Disclosure 10853 Information Disclosure 10048 Information Disclosure 10482 Information Disclosure 9318 Information Disclosure 9344 Information Disclosure 10051 Information Disclosure 10049 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 9316 Important 10816 Important 10855 Important 10735 Important 10788 Important 10853 Important 10048 Important 10482 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Important 9316 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely;Older Software Release:Exploitation Unlikely;DOS:N/A 2.6 2.4 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:N/E:P/RL:O/RC:C 10816 2.6 2.4 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:N/E:P/RL:O/RC:C 10855 2.6 2.4 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:N/E:P/RL:O/RC:C 10735 2.6 2.4 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:N/E:P/RL:O/RC:C 10788 2.6 2.4 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:N/E:P/RL:O/RC:C 10853 2.6 2.4 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:N/E:P/RL:O/RC:C 10048 2.6 2.4 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:N/E:P/RL:O/RC:C 10482 2.6 2.4 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:N/E:P/RL:O/RC:C 9318 2.6 2.4 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:N/E:P/RL:O/RC:C 9344 2.6 2.4 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:N/E:P/RL:O/RC:C 10051 2.6 2.4 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:N/E:P/RL:O/RC:C 10049 2.6 2.4 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:N/E:P/RL:O/RC:C 10378 2.6 2.4 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:N/E:P/RL:O/RC:C 10379 2.6 2.4 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:N/E:P/RL:O/RC:C 10483 2.6 2.4 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:N/E:P/RL:O/RC:C 10543 2.6 2.4 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:N/E:P/RL:O/RC:C 9316 4013429 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013429 3213986 10816 10855 10853 Yes Security Update https://support.microsoft.com/en-us/kb/4013429 10816 10855 10853 4013429 4012606 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012606 3210720 10735 Yes Security Update https://support.microsoft.com/en-us/kb/4012606 10735 4012606 4013198 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013198 3210721 10788 Yes Security Update https://support.microsoft.com/en-us/kb/4013198 10788 4013198 4012215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012215 3212646 10048 10051 10049 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012215 10048 10051 10049 4012215 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10048 10051 10049 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10048 10051 10049 4012212 4012216 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012216 3205401 10482 10483 10543 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012216 10482 10483 10543 4012216 4012213 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012213 10482 10483 10543 msxpspcl6.dll;msxpsps.dll;hvax64.exe;hvix64.exe;srv.sys;quartz.dll;n/a;win32k.sys;gdiplus.dll;gdi32.dll;icm32.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;dnsapi.dll;msxml3.dll;custerr.dll;vmswitch.sys;dnsrslvr.dll;mrxsmb20.sys;mrxsmb.sys;dxgkrnl.sys;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012213 10482 10483 10543 4012213 3211306 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3211306 9318 9344 9316 vmswitch.sys 0001-01-01T00:00:00 Yes Security Update https://support.microsoft.com/en-us/kb/3211306 9318 9344 9316 3211306 4012217 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012217 3205409 10378 10379 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012217 10378 10379 4012217 4012214 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012214 MS16-110, 3187754 10378 10379 n/a;msxpspcl6.dll;msxpsps.dll;srv.sys;win32k.sys;gdiplus.dll;gdi32.dll;icm32.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dxgkrnl.sys 0001-01-01T00:00:00 Security Only https://support.microsoft.com/en-us/help/4012214 10378 10379 4012214 <p>The following <a href="https://technet.microsoft.com/library/security/dn848375.aspx#Mitigation">mitigating factors</a> might be helpful in your situation:</p> <ul> <li>Customers who have not enabled the Hyper-V role are not affected.</li> </ul> Jordan Rabet, Microsoft Offensive Security Research Team 1.0 2017-03-14T07:00:00 <p>Information published.</p> Hyper-V Denial of Service Vulnerability <p>A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a privileged user on a guest operating system. To exploit the vulnerability, an attacker who already has a privileged account on a guest operating system, running as a virtual machine, could run a specially crafted application that causes a host machine to crash.</p> <p>To exploit the vulnerability, an attacker who already has a privileged account on a guest operating system, running as a virtual machine, could run a specially crafted application.</p> <p>The security update addresses the vulnerability by preventing out-of-bound memory access.</p> Windows Hyper-V Microsoft Yes CVE-2017-0097 10816 10855 10735 10788 10853 10048 10482 9318 9344 10051 10049 10378 10379 10483 10543 Denial of Service 10816 Denial of Service 10855 Denial of Service 10735 Denial of Service 10788 Denial of Service 10853 Denial of Service 10048 Denial of Service 10482 Denial of Service 9318 Denial of Service 9344 Denial of Service 10051 Denial of Service 10049 Denial of Service 10378 Denial of Service 10379 Denial of Service 10483 Denial of Service 10543 Important 10816 Important 10855 Important 10735 Important 10788 Important 10853 Important 10048 Important 10482 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:Yes;Exploited:No;Latest Software Release:Exploitation Unlikely;Older Software Release:Exploitation Unlikely;DOS:N/A 5.4 4.9 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C 10816 5.4 4.9 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C 10855 5.4 4.9 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C 10735 5.4 4.9 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C 10788 5.4 4.9 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C 10853 5.4 4.9 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C 10048 5.4 4.9 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C 10482 5.4 4.9 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C 9318 5.4 4.9 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C 9344 5.4 4.9 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C 10051 5.4 4.9 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C 10049 5.4 4.9 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C 10378 5.4 4.9 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C 10379 5.4 4.9 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C 10483 5.4 4.9 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C 10543 4013429 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013429 3213986 10816 10855 10853 Yes Security Update https://support.microsoft.com/en-us/kb/4013429 10816 10855 10853 4013429 4012606 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012606 3210720 10735 Yes Security Update https://support.microsoft.com/en-us/kb/4012606 10735 4012606 4013198 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013198 3210721 10788 Yes Security Update https://support.microsoft.com/en-us/kb/4013198 10788 4013198 4012215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012215 3212646 10048 10051 10049 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012215 10048 10051 10049 4012215 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10048 10051 10049 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10048 10051 10049 4012212 4012216 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012216 3205401 10482 10483 10543 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012216 10482 10483 10543 4012216 4012213 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012213 10482 10483 10543 msxpspcl6.dll;msxpsps.dll;hvax64.exe;hvix64.exe;srv.sys;quartz.dll;n/a;win32k.sys;gdiplus.dll;gdi32.dll;icm32.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;dnsapi.dll;msxml3.dll;custerr.dll;vmswitch.sys;dnsrslvr.dll;mrxsmb20.sys;mrxsmb.sys;dxgkrnl.sys;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012213 10482 10483 10543 4012213 3211306 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3211306 9318 9344 vmswitch.sys 0001-01-01T00:00:00 Yes Security Update https://support.microsoft.com/en-us/kb/3211306 9318 9344 3211306 4012217 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012217 3205409 10378 10379 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012217 10378 10379 4012217 4012214 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012214 MS16-110, 3187754 10378 10379 n/a;msxpspcl6.dll;msxpsps.dll;srv.sys;win32k.sys;gdiplus.dll;gdi32.dll;icm32.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dxgkrnl.sys 0001-01-01T00:00:00 Security Only https://support.microsoft.com/en-us/help/4012214 10378 10379 4012214 <p>The following <a href="https://technet.microsoft.com/library/security/dn848375.aspx#Mitigation">mitigating factors</a> might be helpful in your situation:</p> <ul> <li>Customers who have not enabled the Hyper-V role are not affected.</li> </ul> Lakewood Communications MSRC Vulnerabilities and Mitigations Team 1.0 2017-03-14T07:00:00 <p>Information published.</p> Hyper-V Denial of Service Vulnerability <p>A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a privileged user on a guest operating system. To exploit the vulnerability, an attacker who already has a privileged account on a guest operating system, running as a virtual machine, could run a specially crafted application that causes a host machine to crash.</p> <p>To exploit the vulnerability, an attacker who already has a privileged account on a guest operating system, running as a virtual machine, could run a specially crafted application.</p> <p>The security update addresses the vulnerability by preventing out-of-bound memory access.</p> Windows Hyper-V Microsoft Yes CVE-2017-0098 10816 10855 10735 10788 10853 Denial of Service 10816 Denial of Service 10855 Denial of Service 10735 Denial of Service 10788 Denial of Service 10853 Important 10816 Important 10855 Important 10735 Important 10788 Important 10853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely;Older Software Release:Exploitation Unlikely;DOS:N/A 5.4 4.9 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C 10816 5.4 4.9 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C 10855 5.4 4.9 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C 10735 5.4 4.9 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C 10788 5.4 4.9 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C 10853 4013429 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013429 3213986 10816 10855 10853 Yes Security Update https://support.microsoft.com/en-us/kb/4013429 10816 10855 10853 4013429 4012606 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012606 3210720 10735 Yes Security Update https://support.microsoft.com/en-us/kb/4012606 10735 4012606 4013198 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013198 3210721 10788 Yes Security Update https://support.microsoft.com/en-us/kb/4013198 10788 4013198 <p>The following <a href="https://technet.microsoft.com/library/security/dn848375.aspx#Mitigation">mitigating factors</a> might be helpful in your situation:</p> <ul> <li>Customers who have not enabled the Hyper-V role are not affected.</li> </ul> 1.0 2017-03-14T07:00:00 <p>Information published.</p> Hyper-V Denial of Service Vulnerability <p>A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a privileged user on a guest operating system. To exploit the vulnerability, an attacker who already has a privileged account on a guest operating system, running as a virtual machine, could run a specially crafted application that causes a host machine to crash.</p> <p>To exploit the vulnerability, an attacker who already has a privileged account on a guest operating system, running as a virtual machine, could run a specially crafted application.</p> <p>The security update addresses the vulnerability by preventing out-of-bound memory access.</p> Windows Hyper-V Microsoft Yes CVE-2017-0099 10816 10855 10735 10788 10853 10048 10482 9318 9344 10051 10049 10378 10379 10483 10543 Denial of Service 10816 Denial of Service 10855 Denial of Service 10735 Denial of Service 10788 Denial of Service 10853 Denial of Service 10048 Denial of Service 10482 Denial of Service 9318 Denial of Service 9344 Denial of Service 10051 Denial of Service 10049 Denial of Service 10378 Denial of Service 10379 Denial of Service 10483 Denial of Service 10543 Important 10816 Important 10855 Important 10735 Important 10788 Important 10853 Important 10048 Important 10482 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely;Older Software Release:Exploitation Unlikely;DOS:N/A 5.4 4.9 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C 10816 5.4 4.9 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C 10855 5.4 4.9 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C 10735 5.4 4.9 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C 10788 5.4 4.9 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C 10853 5.4 4.9 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C 10048 5.4 4.9 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C 10482 5.4 4.9 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C 9318 5.4 4.9 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C 9344 5.4 4.9 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C 10051 5.4 4.9 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C 10049 5.4 4.9 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C 10378 5.4 4.9 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C 10379 5.4 4.9 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C 10483 5.4 4.9 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C 10543 4013429 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013429 3213986 10816 10855 10853 Yes Security Update https://support.microsoft.com/en-us/kb/4013429 10816 10855 10853 4013429 4012606 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012606 3210720 10735 Yes Security Update https://support.microsoft.com/en-us/kb/4012606 10735 4012606 4013198 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013198 3210721 10788 Yes Security Update https://support.microsoft.com/en-us/kb/4013198 10788 4013198 4012215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012215 3212646 10048 10051 10049 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012215 10048 10051 10049 4012215 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10048 10051 10049 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10048 10051 10049 4012212 4012216 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012216 3205401 10482 10483 10543 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012216 10482 10483 10543 4012216 4012213 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012213 10482 10483 10543 msxpspcl6.dll;msxpsps.dll;hvax64.exe;hvix64.exe;srv.sys;quartz.dll;n/a;win32k.sys;gdiplus.dll;gdi32.dll;icm32.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;dnsapi.dll;msxml3.dll;custerr.dll;vmswitch.sys;dnsrslvr.dll;mrxsmb20.sys;mrxsmb.sys;dxgkrnl.sys;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012213 10482 10483 10543 4012213 3211306 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3211306 9318 9344 vmswitch.sys 0001-01-01T00:00:00 Yes Security Update https://support.microsoft.com/en-us/kb/3211306 9318 9344 3211306 4012217 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012217 3205409 10378 10379 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012217 10378 10379 4012217 4012214 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012214 MS16-110, 3187754 10378 10379 n/a;msxpspcl6.dll;msxpsps.dll;srv.sys;win32k.sys;gdiplus.dll;gdi32.dll;icm32.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dxgkrnl.sys 0001-01-01T00:00:00 Security Only https://support.microsoft.com/en-us/help/4012214 10378 10379 4012214 <p>The following <a href="https://technet.microsoft.com/library/security/dn848375.aspx#Mitigation">mitigating factors</a> might be helpful in your situation:</p> <ul> <li>Customers who have not enabled the Hyper-V role are not affected.</li> </ul> Jordan Rabet, Microsoft Offensive Security Research Team 1.0 2017-03-14T07:00:00 <p>Information published.</p> Windows COM Session Elevation of Privilege Vulnerability <p>An elevation of privilege exists in Windows when a DCOM object in Helppane.exe, configured to run as the interactive user, fails to properly authenticate the client. An attacker who successfully exploited the vulnerability could run arbitrary code in another user's session.</p> <p>To exploit the vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability after another user logged on to the same system via Terminal Services or Fast User Switching.</p> <p>The update addresses the vulnerability by correcting how Helppane.exe authenticates the client.</p> Microsoft Windows Microsoft Yes CVE-2017-0100 10816 10855 10729 10735 10789 10788 10852 10853 10047 10048 10481 10482 10484 10050 10051 10049 10378 10379 10483 10543 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10729 Elevation of Privilege 10735 Elevation of Privilege 10789 Elevation of Privilege 10788 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10047 Elevation of Privilege 10048 Elevation of Privilege 10481 Elevation of Privilege 10482 Elevation of Privilege 10484 Elevation of Privilege 10050 Elevation of Privilege 10051 Elevation of Privilege 10049 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 10816 Important 10855 Important 10729 Important 10735 Important 10789 Important 10788 Important 10852 Important 10853 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 10050 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A 6.6 5.9 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C 10816 6.6 5.9 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C 10855 6.6 5.9 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C 10729 6.6 5.9 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C 10735 6.6 5.9 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C 10789 6.6 5.9 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C 10788 6.6 5.9 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C 10852 6.6 5.9 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C 10853 6.6 5.9 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C 10047 6.6 5.9 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C 10048 6.6 5.9 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C 10481 6.6 5.9 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C 10482 6.6 5.9 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C 10484 6.6 5.9 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C 10050 6.6 5.9 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C 10051 6.6 5.9 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C 10049 6.6 5.9 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C 10378 6.6 5.9 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C 10379 6.6 5.9 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C 10483 6.6 5.9 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C 10543 4013429 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013429 3213986 10816 10855 10852 10853 Yes Security Update https://support.microsoft.com/en-us/kb/4013429 10816 10855 10852 10853 4013429 4012606 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012606 3210720 10729 10735 Yes Security Update https://support.microsoft.com/en-us/kb/4012606 10729 10735 4012606 4013198 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013198 3210721 10789 10788 Yes Security Update https://support.microsoft.com/en-us/kb/4013198 10789 10788 4013198 4012215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012215 3212646 10047 10048 10050 10051 10049 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012215 10047 10048 10050 10051 10049 4012215 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10047 10050 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;custerr.dll;vmswitch.sys;msxml3.dll;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10047 10050 4012212 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10048 10051 10049 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10048 10051 10049 4012212 4012216 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012216 3205401 10481 10482 10483 10543 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012216 10481 10482 10483 10543 4012216 4012213 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012213 10481 10482 10483 10543 msxpspcl6.dll;msxpsps.dll;hvax64.exe;hvix64.exe;srv.sys;quartz.dll;n/a;win32k.sys;gdiplus.dll;gdi32.dll;icm32.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;dnsapi.dll;msxml3.dll;custerr.dll;vmswitch.sys;dnsrslvr.dll;mrxsmb20.sys;mrxsmb.sys;dxgkrnl.sys;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012213 10481 10482 10483 10543 4012213 4012216 3205401 10484 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012216 10484 4012216 4012217 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012217 3205409 10378 10379 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012217 10378 10379 4012217 4012214 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012214 MS16-110, 3187754 10378 10379 n/a;msxpspcl6.dll;msxpsps.dll;srv.sys;win32k.sys;gdiplus.dll;gdi32.dll;icm32.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dxgkrnl.sys 0001-01-01T00:00:00 Security Only https://support.microsoft.com/en-us/help/4012214 10378 10379 4012214 James Forshaw of <a href="https://www.google.com">Google Project Zero</a> 1.0 2017-03-14T07:00:00 <p>Information published.</p> Windows Transaction Manager Elevation of Privilege Vulnerability <p>An elevation of privilege vulnerability exists when the Windows Transaction Manager improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run processes in an elevated context.</p> <p>In a local attack scenario, an attacker could exploit this vulnerability by running a specially crafted application to take control over the affected system.</p> <p>The security update addresses the vulnerability by correcting how the Transaction Manager handles objects in memory.</p> Microsoft Windows Microsoft Yes CVE-2017-0101 10047 9312 10287 9311 9318 9344 4393 9316 Elevation of Privilege 10047 Elevation of Privilege 9312 Elevation of Privilege 10287 Elevation of Privilege 9311 Elevation of Privilege 9318 Elevation of Privilege 9344 Elevation of Privilege 4393 Elevation of Privilege 9316 Important 10047 Important 9312 Important 10287 Important 9311 Important 9318 Important 9344 Important 4393 Important 9316 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A;Older Software Release:Exploitation Less Likely;DOS:N/A 6.3 5.7 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C 10047 6.3 5.7 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C 9312 6.3 5.7 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C 10287 6.3 5.7 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C 9311 6.3 5.7 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C 9318 6.3 5.7 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C 9344 6.3 5.7 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C 4393 6.3 5.7 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C 9316 4012215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012215 3212646 10047 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012215 10047 4012215 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10047 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;custerr.dll;vmswitch.sys;msxml3.dll;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10047 4012212 4011981 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4011981 9312 10287 9311 9318 9344 4393 9316 ntkrnlmp.exe;ntkrpamp.exe 0001-01-01T00:00:00 Yes Security Update https://support.microsoft.com/en-us/kb/4011981 9312 10287 9311 9318 9344 4393 9316 4011981 Peter Hlavaty (<a href="https://twitter.com/zer0mem">@zer0mem</a>), KeenLab, <a href="http://www.tencent.com/">Tencent</a> 1.0 2017-03-14T07:00:00 <p>Information published.</p> Windows Elevation of Privilege Vulnerability <p>An elevation of privilege vulnerability exists when Windows fails to check the length of a buffer prior to copying memory to it. An attacker who successfully exploited the vulnerability could gain elevated privileges on a targeted system.</p> <p>To exploit the vulnerability, an attacker would first need access to the target system and have the ability to copy a file to a shared folder or drive.</p> <p>The security update addresses the vulnerability by correcting the way that Windows validates the buffer lengths.</p> Microsoft Windows Microsoft Yes CVE-2017-0102 10816 10855 10729 10735 10789 10788 10852 10853 10047 10048 10481 10482 10484 9312 10287 9311 9318 9344 10050 10051 10049 10378 10379 10483 10543 4393 9316 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10729 Elevation of Privilege 10735 Elevation of Privilege 10789 Elevation of Privilege 10788 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10047 Elevation of Privilege 10048 Elevation of Privilege 10481 Elevation of Privilege 10482 Elevation of Privilege 10484 Elevation of Privilege 9312 Elevation of Privilege 10287 Elevation of Privilege 9311 Elevation of Privilege 9318 Elevation of Privilege 9344 Elevation of Privilege 10050 Elevation of Privilege 10051 Elevation of Privilege 10049 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 4393 Elevation of Privilege 9316 Important 10816 Important 10855 Important 10729 Important 10735 Important 10789 Important 10788 Important 10852 Important 10853 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 9312 Important 10287 Important 9311 Important 9318 Important 9344 Important 10050 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Important 4393 Important 9316 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A 6.3 5.7 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C 10816 6.3 5.7 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C 10855 6.3 5.7 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C 10729 6.3 5.7 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C 10735 6.3 5.7 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C 10789 6.3 5.7 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C 10788 6.3 5.7 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C 10852 6.3 5.7 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C 10853 6.3 5.7 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C 10047 6.3 5.7 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C 10048 6.3 5.7 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C 10481 6.3 5.7 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C 10482 6.3 5.7 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C 10484 6.3 5.7 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C 9312 6.3 5.7 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C 10287 6.3 5.7 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C 9311 6.3 5.7 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C 9318 6.3 5.7 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C 9344 6.3 5.7 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C 10050 6.3 5.7 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C 10051 6.3 5.7 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C 10049 6.3 5.7 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C 10378 6.3 5.7 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C 10379 6.3 5.7 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C 10483 6.3 5.7 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C 10543 6.3 5.7 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C 4393 6.3 5.7 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C 9316 4013429 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013429 3213986 10816 10855 10852 10853 Yes Security Update https://support.microsoft.com/en-us/kb/4013429 10816 10855 10852 10853 4013429 4012606 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012606 3210720 10729 10735 Yes Security Update https://support.microsoft.com/en-us/kb/4012606 10729 10735 4012606 4013198 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013198 3210721 10789 10788 Yes Security Update https://support.microsoft.com/en-us/kb/4013198 10789 10788 4013198 4012215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012215 3212646 10047 10048 10050 10051 10049 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012215 10047 10048 10050 10051 10049 4012215 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10047 10050 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;custerr.dll;vmswitch.sys;msxml3.dll;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10047 10050 4012212 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10048 10051 10049 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10048 10051 10049 4012212 4012216 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012216 3205401 10481 10482 10483 10543 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012216 10481 10482 10483 10543 4012216 4012213 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012213 10481 10482 10483 10543 msxpspcl6.dll;msxpsps.dll;hvax64.exe;hvix64.exe;srv.sys;quartz.dll;n/a;win32k.sys;gdiplus.dll;gdi32.dll;icm32.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;dnsapi.dll;msxml3.dll;custerr.dll;vmswitch.sys;dnsrslvr.dll;mrxsmb20.sys;mrxsmb.sys;dxgkrnl.sys;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012213 10481 10482 10483 10543 4012213 4012216 3205401 10484 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012216 10484 4012216 4011981 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4011981 9312 10287 9311 9318 9344 4393 9316 ntkrnlmp.exe;ntkrpamp.exe 0001-01-01T00:00:00 Yes Security Update https://support.microsoft.com/en-us/kb/4011981 9312 10287 9311 9318 9344 4393 9316 4011981 4012217 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012217 3205409 10378 10379 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012217 10378 10379 4012217 4012214 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012214 MS16-110, 3187754 10378 10379 n/a;msxpspcl6.dll;msxpsps.dll;srv.sys;win32k.sys;gdiplus.dll;gdi32.dll;icm32.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dxgkrnl.sys 0001-01-01T00:00:00 Security Only https://support.microsoft.com/en-us/help/4012214 10378 10379 4012214 1.0 2017-03-14T07:00:00 <p>Information published.</p> Windows Registry Elevation of Privilege Vulnerability <p>An elevation of privilege vulnerability exists when the Windows Kernel API improperly handles registry objects in memory. An attacker who successfully exploited the vulnerability could gain elevated privileges on a targeted system.</p> <p>A locally authenticated attacker could exploit this vulnerability by running a specially crafted application.</p> <p>The security update addresses the vulnerability by helping to ensure that the Windows Kernel API properly handles objects in memory.</p> Windows Registry Microsoft Yes CVE-2017-0103 10047 10048 9312 10287 9311 9318 9344 10050 10051 10049 10378 10379 4393 9316 Elevation of Privilege 10047 Elevation of Privilege 10048 Elevation of Privilege 9312 Elevation of Privilege 10287 Elevation of Privilege 9311 Elevation of Privilege 9318 Elevation of Privilege 9344 Elevation of Privilege 10050 Elevation of Privilege 10051 Elevation of Privilege 10049 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 4393 Elevation of Privilege 9316 Important 10047 Important 10048 Important 9312 Important 10287 Important 9311 Important 9318 Important 9344 Important 10050 Important 10051 Important 10049 Important 10378 Important 10379 Important 4393 Important 9316 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A;Older Software Release:Exploitation Less Likely;DOS:N/A 6.3 5.7 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C 10047 6.3 5.7 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C 10048 6.3 5.7 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C 9312 6.3 5.7 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C 10287 6.3 5.7 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C 9311 6.3 5.7 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C 9318 6.3 5.7 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C 9344 6.3 5.7 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C 10050 6.3 5.7 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C 10051 6.3 5.7 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C 10049 6.3 5.7 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C 10378 6.3 5.7 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C 10379 6.3 5.7 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C 4393 6.3 5.7 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C 9316 4012215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012215 3212646 10047 10048 10050 10051 10049 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012215 10047 10048 10050 10051 10049 4012215 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10047 10050 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;custerr.dll;vmswitch.sys;msxml3.dll;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10047 10050 4012212 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10048 10051 10049 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10048 10051 10049 4012212 4011981 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4011981 9312 10287 9311 9318 9344 4393 9316 ntkrnlmp.exe;ntkrpamp.exe 0001-01-01T00:00:00 Yes Security Update https://support.microsoft.com/en-us/kb/4011981 9312 10287 9311 9318 9344 4393 9316 4011981 4012217 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012217 3205409 10378 10379 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012217 10378 10379 4012217 4012214 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012214 MS16-110, 3187754 10378 10379 n/a;msxpspcl6.dll;msxpsps.dll;srv.sys;win32k.sys;gdiplus.dll;gdi32.dll;icm32.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dxgkrnl.sys 0001-01-01T00:00:00 Security Only https://support.microsoft.com/en-us/help/4012214 10378 10379 4012214 Mateusz Jurczyk of <a href="http://www.google.com/">Google Project Zero</a> James Forshaw of <a href="http://www.google.com/">Google Project Zero</a> 1.0 2017-03-14T07:00:00 <p>Information published.</p> iSNS Server Memory Corruption Vulnerability <p>A remote code execution vulnerability exists in Windows when the iSNS Server service fails to properly validate input from the client, leading to an integer overflow. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the SYSTEM account.</p> <p>An attacker could exploit the vulnerability by creating a specially crafted application to connect to the iSNS Server and then issue malicious requests to it.</p> <p>The update addresses the vulnerability by modifying how the iSNS Server service parses requests.</p> Microsoft Windows Microsoft Yes CVE-2017-0104 10816 10855 9312 9318 10050 10051 10049 10378 10379 10483 10543 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 9312 Remote Code Execution 9318 Remote Code Execution 10050 Remote Code Execution 10051 Remote Code Execution 10049 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Critical 10816 Critical 10855 Critical 9312 Critical 9318 Critical 10050 Critical 10051 Critical 10049 Critical 10378 Critical 10379 Critical 10483 Critical 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely;Older Software Release:Exploitation Unlikely;DOS:N/A 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10816 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10855 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9312 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9318 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10050 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10051 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10049 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10378 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10379 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10483 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10543 4013429 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013429 3213986 10816 10855 Yes Security Update https://support.microsoft.com/en-us/kb/4013429 10816 10855 4013429 4012021 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012021 9312 9318 Yes Security Update https://support.microsoft.com/en-us/kb/4012021 9312 9318 4012021 4012215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012215 3212646 10050 10051 10049 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012215 10050 10051 10049 4012215 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10050 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;custerr.dll;vmswitch.sys;msxml3.dll;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10050 4012212 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10051 10049 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10051 10049 4012212 4012217 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012217 3205409 10378 10379 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012217 10378 10379 4012217 4012214 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012214 MS16-110, 3187754 10378 10379 n/a;msxpspcl6.dll;msxpsps.dll;srv.sys;win32k.sys;gdiplus.dll;gdi32.dll;icm32.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dxgkrnl.sys 0001-01-01T00:00:00 Security Only https://support.microsoft.com/en-us/help/4012214 10378 10379 4012214 4012216 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012216 3205401 10483 10543 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012216 10483 10543 4012216 4012213 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012213 10483 10543 msxpspcl6.dll;msxpsps.dll;hvax64.exe;hvix64.exe;srv.sys;quartz.dll;n/a;win32k.sys;gdiplus.dll;gdi32.dll;icm32.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;dnsapi.dll;msxml3.dll;custerr.dll;vmswitch.sys;dnsrslvr.dll;mrxsmb20.sys;mrxsmb.sys;dxgkrnl.sys;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012213 10483 10543 4012213 <a href="http://www.fortiguard.com/">Fortinet's FortiGuard Labs</a> 1.0 2017-03-14T07:00:00 <p>Information published.</p> Microsoft Office Information Disclosure Vulnerability <p>An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, which could disclose the contents of memory. An attacker who successfully exploited the vulnerability could view out of bound memory.</p> <p>Exploitation of the vulnerability requires that a user open a specially crafted file with an affected version of Microsoft Office software.</p> <p>The security update addresses the vulnerability by properly initializing the affected variable.</p> <p><strong>I have Microsoft Word 2010 installed. Why am I not being offered the 3178686 update?</strong> The 3178686 update only applies to systems running specific configurations of Microsoft Office 2010. Some configurations will not be offered the update. I am being offered this update for software that is not specifically indicated as being affected in the Affected Software and Vulnerability Severity Ratings table. Why am I being offered this update?</p> <p><strong>When updates address vulnerable code that exists in a component that is shared between multiple Microsoft Office products or shared between multiple versions of the same Microsoft Office product, the update is considered to be applicable to all supported products and versions that contain the vulnerable component.</strong> For example, when an update applies to Microsoft Office 2007 products, only Microsoft Office 2007 may be specifically listed in the Affected Software table. However, the update could apply to Microsoft Word 2007, Microsoft Excel 2007, Microsoft Visio 2007, Microsoft Compatibility Pack, Microsoft Excel Viewer, or any other Microsoft Office 2007 product that is not specifically listed in the Affected Software table. Furthermore, when an update applies to Microsoft Office 2010 products, only Microsoft Office 2010 may be specifically listed in the Affected Software table. However, the update could apply to Microsoft Word 2010, Microsoft Excel 2010, Microsoft Visio 2010, Microsoft Visio Viewer, or any other Microsoft Office 2010 product that is not specifically listed in the Affected Software table.</p> <p>For more information on this behavior and recommended actions, see <a href="https://support.microsoft.com/kb/830335">Microsoft Knowledge Base Article 830335</a>. For a list of Microsoft Office products that an update may apply to, refer to the Microsoft Knowledge Base Article associated with the specific update.</p> Microsoft Office Microsoft Yes CVE-2017-0105 10162 10513 10514 10025 10521 10522 4497 10649 9432-10495 Information Disclosure 10162 Information Disclosure 10513 Information Disclosure 10514 Information Disclosure 10025 Information Disclosure 10521 Information Disclosure 10522 Information Disclosure 4497 Information Disclosure 10649 Information Disclosure 9432-10495 Important 10162 Important 10513 Important 10514 Important 10025 Important 10521 Important 10522 Important 4497 Important 10649 Important 9432-10495 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A;Older Software Release:Exploitation Less Likely;DOS:N/A 3178683 https://www.microsoft.com/download/details.aspx?familyid=7f0820b8-d862-41c4-9809-08dde15448e5 3128025 10162 Maybe Security Update https://support.microsoft.com/kb/3178683 10162 3178683 3178687 https://www.microsoft.com/download/details.aspx?familyid=e99f2cb7-2dd3-4aab-8199-8cce5e5f8982 3141542 10513 Maybe Security Update https://support.microsoft.com/kb/3178687 10513 3178687 3178687 https://www.microsoft.com/download/details.aspx?familyid=27ae1a64-f022-409c-adcc-87b935653a42 3141542 10514 Maybe Security Update https://support.microsoft.com/kb/3178687 10514 3178687 3198809 http://go.microsoft.com/fwlink/?LinkId=837729 3198808 10025 Maybe Security Update https://support.microsoft.com/help/3198808 10025 3198809 3178686 https://www.microsoft.com/download/details.aspx?familyid=c6996886-1bfd-4cc8-b103-d7e898a8a229 3128032 10521 Maybe Security Update https://support.microsoft.com/kb/3178686 10521 3178686 3178686 https://www.microsoft.com/download/details.aspx?familyid=a0294339-8f6c-4c9f-aa73-c44788ce244b 3128032 10522 Maybe Security Update https://support.microsoft.com/kb/3178686 10522 3178686 3178682 https://www.microsoft.com/download/details.aspx?familyid=2a28280c-146c-42bf-9a9d-23a27469dd93 3128024 4497 Maybe Security Update https://support.microsoft.com/kb/3178682 4497 3178682 3178689 https://www.microsoft.com/download/details.aspx?familyid=6cfa7ba7-03cc-43e4-9728-ed8b79566046 3128035 10649 Maybe Security Update https://support.microsoft.com/kb/3178689 10649 3178689 3178684 https://www.microsoft.com/download/details.aspx?familyid=eacae4f8-1593-42bc-8443-3717eddec51c 3128026 9432-10495 Maybe Security Update https://support.microsoft.com/kb/3178684 9432-10495 3178684 <a href="http://www.fortiguard.com/">Fortinet’s FortiGuard Labs</a> 1.0 2017-03-14T07:00:00 <p>Information published.</p> Windows Graphics Component Remote Code Execution Vulnerability <p>A remote code execution vulnerability exists due to the way the Windows Graphics Component handles objects in memory. An attacker who successfully exploited the vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.</p> <p>There are multiple ways an attacker could exploit the vulnerability:</p> <ul> <li>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit this vulnerability and then convince a user to view the website. An attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically by getting them to click a link in an email message or in an Instant Messenger message that takes users to the attacker's website, or by opening an attachment sent through email.</li> <li>In a file sharing attack scenario, an attacker could provide a specially crafted document file that is designed to exploit the vulnerability, and then convince a user to open the document file.</li> </ul> <p>Note that for affected Microsoft Office products, the Preview Pane is an attack vector.</p> <p>The security update addresses the vulnerability by correcting how the Windows Graphics Component handles objects in the memory.</p> <p><strong>There are multiple update packages available for some of the affected software. Do I need to install all the updates listed in the Affected Software table for the software?</strong> Yes. Customers should apply all updates offered for the software installed on their systems. If multiple updates apply, they can be installed in any order.</p> <p><strong>Do I need to install these security updates in a particular sequence?</strong> No. Multiple updates for a given system can be applied in any sequence.</p> <p><strong>I am running Office 2010, which is listed as affected software. Why am I not being offered the update?</strong> The update, KB3127958 (Ogl.dll), is not applicable to Office 2010 on Windows Vista and later versions of Windows because the vulnerable code is not present.</p> <p><strong>I am being offered this update for software that is not specifically indicated as being affected in the Affected Software and Vulnerability Severity Ratings table. Why am I being offered this update?</strong> When updates address vulnerable code that exists in a component that is shared between multiple Microsoft Office products or shared between multiple versions of the same Microsoft Office product, the update is considered to be applicable to all supported products and versions that contain the vulnerable component.</p> <p>For example, when an update applies to Microsoft Office 2007 products, only Microsoft Office 2007 may be specifically listed in the Affected Software table. However, the update could apply to Microsoft Word 2007, Microsoft Excel 2007, Microsoft Visio 2007, Microsoft Compatibility Pack, Microsoft Excel Viewer, or any other Microsoft Office 2007 product that is not specifically listed in the Affected Software table. Furthermore, when an update applies to Microsoft Office 2010 products, only Microsoft Office 2010 may be specifically listed in the Affected Software table. However, the update could apply to Microsoft Word 2010, Microsoft Excel 2010, Microsoft Visio 2010, Microsoft Visio Viewer, or any other Microsoft Office 2010 product that is not specifically listed in the Affected Software table.</p> <p>For more information on this behavior and recommended actions, see <a href="https://support.microsoft.com/kb/830335">Microsoft Knowledge Base Article 830335</a>. For a list of Microsoft Office products an update may apply to, refer to the Microsoft Knowledge Base Article associated with the specific update.</p> <p><strong>Are there any prerequisites for any of the updates offered in this bulletin for affected editions of Microsoft Lync 2013 (Skype for Business)?</strong> Yes. Customers running affected editions of Microsoft Lync 2013 (Skype for Business) must first install the 2965218 update for Office 2013 released in April, 2015, and then the 3039779 security update released in May, 2015. For more information about these two prerequisite updates, see:</p> <p><a href="https://support.microsoft.com/en-us/kb/2965218">Knowledge Base Article 2965218</a> <a href="https://support.microsoft.com/en-us/kb/3039779">Knowledge Base Article 3039779</a></p> <p><strong>Why is the Lync 2010 Attendee (user level install) update only available from the Microsoft Download Center?</strong> Microsoft is releasing the update for Lync 2010 Attendee (user level install) to the<a href="http://go.microsoft.com/fwlink/?LinkId=21129"> Microsoft Download Center</a> only. Because the user level installation of Lync 2010 Attendee is handled through a Lync session, distribution methods such as automatic updating are not appropriate for this type of installation scenario.</p> <p><strong>Does this release contain any additional security-related changes to functionality?</strong> Yes. In addition to the security updates that address the vulnerabilities described in this bulletin, Microsoft is releasing an update that replaces certain third party libraries which were used by Windows 8.1, Windows Server 2012, Windows Server 2012 R2, Windows Server 2016, and all versions of Windows 10. This update provides the same functionality in a more secure and reliable way.</p> Microsoft Graphics Component Microsoft Yes CVE-2017-0108 10521 10522 1160 10047 10048 9312 9311 9318 9344 10050 10051 10049 4393 9316 10453 10452 10451 10099 10069 10303 10268 10295 10628 10630 10629 10631 10770 10771 10772 10773 10287 10150 Remote Code Execution 10521 Remote Code Execution 10522 Remote Code Execution 1160 Remote Code Execution 10047 Remote Code Execution 10048 Remote Code Execution 9312 Remote Code Execution 9311 Remote Code Execution 9318 Remote Code Execution 9344 Remote Code Execution 10050 Remote Code Execution 10051 Remote Code Execution 10049 Remote Code Execution 4393 Remote Code Execution 9316 Remote Code Execution 10453 Remote Code Execution 10452 Remote Code Execution 10451 Remote Code Execution 10099 Remote Code Execution 10069 Remote Code Execution 10303 Remote Code Execution 10268 Remote Code Execution 10295 Remote Code Execution 10628 Remote Code Execution 10630 Remote Code Execution 10629 Remote Code Execution 10631 Remote Code Execution 10770 Remote Code Execution 10771 Remote Code Execution 10772 Remote Code Execution 10773 Remote Code Execution 10287 Remote Code Execution 10150 Critical 10521 Critical 10522 Critical 1160 Critical 10047 Critical 10048 Critical 9312 Critical 9311 Critical 9318 Critical 9344 Critical 10050 Critical 10051 Critical 10049 Critical 4393 Critical 9316 Critical 10453 Critical 10452 Critical 10451 Critical 10099 Critical 10069 Critical 10303 Critical 10268 Critical 10295 Critical 10628 Critical 10630 Critical 10629 Critical 10631 Critical 10770 Critical 10771 Critical 10772 Critical 10773 Critical 10287 Critical 10150 Publicly Disclosed:No;Exploited:No;DOS:N/A 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10047 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10048 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9312 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9311 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9318 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9344 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10050 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10051 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10049 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 4393 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9316 3127958 https://www.microsoft.com/download/details.aspx?familyid=66f4e74d-6395-469e-ab5c-2bc3e1f01495 3118317 10521 Maybe Security Update https://support.microsoft.com/kb/3127958 10521 3127958 3127958 https://www.microsoft.com/download/details.aspx?familyid=6d815c5b-b640-4289-88bf-65333cba0d71 3118317 10522 Maybe Security Update https://support.microsoft.com/kb/3127958 10522 3127958 3178693 https://www.microsoft.com/download/details.aspx?familyid=8b13e607-2874-4028-bcca-0e699bcb820a 3118394 1160 Maybe Security Update https://support.microsoft.com/kb/3178693 1160 3178693 3178653 https://www.microsoft.com/download/details.aspx?familyid=d80b3eef-4ec3-40bf-b529-f09066548320 3127995 1160 Maybe Security Update https://support.microsoft.com/kb/3178653 1160 3178653 4012215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012215 3212646 10047 10048 10050 10051 10049 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012215 10047 10048 10050 10051 10049 4012215 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10047 10050 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;custerr.dll;vmswitch.sys;msxml3.dll;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10047 10050 4012212 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10048 10051 10049 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10048 10051 10049 4012212 4012583 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012583 3196348 9312 9311 9318 9344 4393 9316 10287 gdiplus.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll 0001-01-01T00:00:00 Yes Security Update https://support.microsoft.com/en-us/kb/4012583 9312 9311 9318 9344 4393 9316 10287 4012583 4013867 https://www.microsoft.com/download/details.aspx?familyid=1a0c017a-f6ae-44ad-b700-82015e730646 3193713 10453 10452 10451 10099 Maybe Security Update http://support.microsoft.com/help/4013867 10453 10452 10451 10099 4013867 4010299 https://www.microsoft.com/download/details.aspx?familyid=0074ddc7-a5e0-42b1-a23f-58ac17edbce9 3188397 10069 Maybe Security Update http://support.microsoft.com/help/4010299 10069 4010299 4010299 https://www.microsoft.com/download/details.aspx?familyid=c259af6e-ba1e-4e13-8051-a1ec4b8061e5 3188397 10303 Maybe Security Update http://support.microsoft.com/help/4010299 10303 4010299 4010301 https://www.microsoft.com/download/details.aspx?familyid=b4d7d594-7beb-4a27-b938-8116118ba9d6 3188400 10268 Maybe Security Update http://support.microsoft.com/kb/4010301 10268 4010301 4010300 https://www.microsoft.com/download/details.aspx?familyid=7aeca442-b278-4b3e-a9f1-415269bf5900 3188399 10295 Maybe Security Update http://support.microsoft.com/kb/4010300 10295 4010300 3172539 https://www.microsoft.com/download/details.aspx?familyid=1d1aced6-77f0-4e57-a783-ae1abe716f1a 3118348 10628 10629 Maybe Security Update https://support.microsoft.com/kb/3172539 10628 10629 3172539 3172539 https://www.microsoft.com/download/details.aspx?familyid=6470726a-317c-404e-ab2e-c13e682d0fc0 3118348 10630 10631 Maybe Security Update https://support.microsoft.com/kb/3172539 10630 10631 3172539 3178656 https://www.microsoft.com/download/details.aspx?familyid=251bb98e-1135-4d01-b933-312dcb2e4a51 3118327 10770 10772 Maybe Security Update https://support.microsoft.com/kb/3178656 10770 10772 3178656 3178656 https://www.microsoft.com/download/details.aspx?familyid=f4dec872-7825-4224-b459-eaddc468a6f5 3118327 10771 10773 Maybe Security Update https://support.microsoft.com/kb/3178656 10771 10773 3178656 3141535 https://www.microsoft.com/download/details.aspx?familyid=cecd6d65-3173-4f21-9ca1-959505d01955 2883033 10150 Maybe Security Update https://support.microsoft.com/kb/3141535 10150 3141535 3127945 https://www.microsoft.com/download/details.aspx?familyid=0fabf185-f9e4-444e-b305-b383e9a9366c 3118301 10150 Maybe Security Update https://support.microsoft.com/kb/3127945 10150 3127945 Mateusz Jurczyk of <a href="http://www.google.com/"> Google Project Zero</a> 1.0 2017-03-14T07:00:00 <p>Information published.</p> Windows Hyper-V Remote Code Execution Vulnerability <p>A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system. To exploit the vulnerability, an attacker could run a specially crafted application on a guest operating system that could cause the Hyper-V host operating system to execute arbitrary code.</p> <p>An attacker who successfully exploited the vulnerability could execute arbitrary code on the host operating system.</p> <p>The security update addresses the vulnerability by correcting how Hyper-V validates guest operating system user input.</p> Windows Hyper-V Microsoft Yes CVE-2017-0109 10816 10855 10735 10788 10853 10048 10482 9318 9344 10051 10049 10378 10379 10483 10543 9316 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10735 Remote Code Execution 10788 Remote Code Execution 10853 Remote Code Execution 10048 Remote Code Execution 10482 Remote Code Execution 9318 Remote Code Execution 9344 Remote Code Execution 10051 Remote Code Execution 10049 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 9316 Critical 10816 Critical 10855 Critical 10735 Critical 10788 Critical 10853 Critical 10048 Critical 10482 Critical 9318 Critical 9344 Critical 10051 Critical 10049 Critical 10378 Critical 10379 Critical 10483 Critical 10543 Critical 9316 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely;Older Software Release:Exploitation Unlikely;DOS:N/A 7.6 6.8 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C 10816 7.6 6.8 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C 10855 7.6 6.8 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C 10735 7.6 6.8 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C 10788 7.6 6.8 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C 10853 7.6 6.8 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C 10048 7.6 6.8 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C 10482 7.6 6.8 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C 9318 7.6 6.8 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C 9344 7.6 6.8 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C 10051 7.6 6.8 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C 10049 7.6 6.8 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C 10378 7.6 6.8 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C 10379 7.6 6.8 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C 10483 7.6 6.8 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C 10543 7.6 6.8 CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C 9316 4013429 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013429 3213986 10816 10855 10853 Yes Security Update https://support.microsoft.com/en-us/kb/4013429 10816 10855 10853 4013429 4012606 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012606 3210720 10735 Yes Security Update https://support.microsoft.com/en-us/kb/4012606 10735 4012606 4013198 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013198 3210721 10788 Yes Security Update https://support.microsoft.com/en-us/kb/4013198 10788 4013198 4012215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012215 3212646 10048 10051 10049 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012215 10048 10051 10049 4012215 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10048 10051 10049 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10048 10051 10049 4012212 4012216 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012216 3205401 10482 10483 10543 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012216 10482 10483 10543 4012216 4012213 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012213 10482 10483 10543 msxpspcl6.dll;msxpsps.dll;hvax64.exe;hvix64.exe;srv.sys;quartz.dll;n/a;win32k.sys;gdiplus.dll;gdi32.dll;icm32.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;dnsapi.dll;msxml3.dll;custerr.dll;vmswitch.sys;dnsrslvr.dll;mrxsmb20.sys;mrxsmb.sys;dxgkrnl.sys;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012213 10482 10483 10543 4012213 3211306 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3211306 9318 9344 vmswitch.sys 0001-01-01T00:00:00 Security Update https://support.microsoft.com/en-us/kb/3211306 9318 9344 3211306 4012217 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012217 3205409 10378 10379 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012217 10378 10379 4012217 4012214 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012214 MS16-110, 3187754 10378 10379 n/a;msxpspcl6.dll;msxpsps.dll;srv.sys;win32k.sys;gdiplus.dll;gdi32.dll;icm32.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dxgkrnl.sys 0001-01-01T00:00:00 Security Only https://support.microsoft.com/en-us/help/4012214 10378 10379 4012214 3211306 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3211306 9316 vmswitch.sys 0001-01-01T00:00:00 Yes Security Update https://support.microsoft.com/en-us/kb/3211306 9316 3211306 <p>The following <a href="https://technet.microsoft.com/library/security/dn848375.aspx#Mitigation">mitigating factors</a> might be helpful in your situation:</p> <ul> <li>Customers who have not enabled the Hyper-V role are not affected.</li> </ul> Axel Souchet, MSRC Vulnerabilities and Mitigations Team 1.0 2017-03-14T07:00:00 <p>Information published.</p> Windows DNS Query Information Disclosure Vulnerability <p>An information disclosure vulnerability exists when Windows dnsclient fails to properly handle requests. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.</p> <p>There are multiple ways an attacker could exploit the vulnerability:</p> <ul> <li>If the target is a workstation, the attacker could convince a user to visit an untrusted webpage.</li> <li>If the target is a server, the attacker would have to trick the server into sending a DNS query to a malicious DNS server.</li> </ul> <p>The security update addresses the vulnerability by modifying how Windows dnsclient handles requests.</p> Microsoft Windows DNS Microsoft Yes CVE-2017-0057 10816 10855 10729 10735 10789 10788 10852 10853 10481 10482 10484 10483 10543 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10729 Information Disclosure 10735 Information Disclosure 10789 Information Disclosure 10788 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10481 Information Disclosure 10482 Information Disclosure 10484 Information Disclosure 10483 Information Disclosure 10543 Important 10816 Important 10855 Important 10729 Important 10735 Important 10789 Important 10788 Important 10852 Important 10853 Important 10481 Important 10482 Important 10484 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely;Older Software Release:Exploitation Unlikely;DOS:N/A 3.7 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10816 3.7 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10855 3.7 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10729 3.7 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10735 3.7 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10789 3.7 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10788 3.7 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10852 3.7 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10853 3.7 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10481 3.7 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10482 3.7 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10484 3.7 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10483 3.7 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10543 4013429 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013429 3213986 10816 10855 10852 10853 Yes Security Update https://support.microsoft.com/en-us/kb/4013429 10816 10855 10852 10853 4013429 4012606 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012606 3210720 10729 10735 Yes Security Update https://support.microsoft.com/en-us/kb/4012606 10729 10735 4012606 4013198 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013198 3210721 10789 10788 Yes Security Update https://support.microsoft.com/en-us/kb/4013198 10789 10788 4013198 4012216 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012216 3205401 10481 10482 10483 10543 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012216 10481 10482 10483 10543 4012216 4012213 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012213 10481 10482 10483 10543 msxpspcl6.dll;msxpsps.dll;hvax64.exe;hvix64.exe;srv.sys;quartz.dll;n/a;win32k.sys;gdiplus.dll;gdi32.dll;icm32.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;dnsapi.dll;msxml3.dll;custerr.dll;vmswitch.sys;dnsrslvr.dll;mrxsmb20.sys;mrxsmb.sys;dxgkrnl.sys;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012213 10481 10482 10483 10543 4012213 4012216 3205401 10484 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012216 10484 4012216 Martin Knafve - <a href="http://martinknafve.com/">http://martinknafve.com/</a> 1.0 2017-03-14T07:00:00 <p>Information published.</p> Windows Kernel Elevation of Privilege Vulnerability <p>An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p> <p>To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application to take control of an affected system.</p> <p>The update addresses the vulnerability by correcting how the Windows kernel handles objects in memory.</p> Windows Kernel-Mode Drivers Microsoft Yes CVE-2017-0056 10816 10855 10729 10735 10789 10788 10852 10853 10047 10048 10481 10482 10484 9312 10287 9311 9318 9344 10050 10051 10049 10378 10379 10483 10543 4393 9316 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10729 Elevation of Privilege 10735 Elevation of Privilege 10789 Elevation of Privilege 10788 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10047 Elevation of Privilege 10048 Elevation of Privilege 10481 Elevation of Privilege 10482 Elevation of Privilege 10484 Elevation of Privilege 9312 Elevation of Privilege 10287 Elevation of Privilege 9311 Elevation of Privilege 9318 Elevation of Privilege 9344 Elevation of Privilege 10050 Elevation of Privilege 10051 Elevation of Privilege 10049 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 4393 Elevation of Privilege 9316 Important 10816 Important 10855 Important 10729 Important 10735 Important 10789 Important 10788 Important 10852 Important 10853 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 9312 Important 10287 Important 9311 Important 9318 Important 9344 Important 10050 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Important 4393 Important 9316 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10816 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10855 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10729 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10735 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10789 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10788 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10852 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10853 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10047 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10048 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10481 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10482 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10484 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9312 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10287 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9311 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9318 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9344 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10050 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10051 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10049 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10378 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10379 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10483 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10543 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 4393 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9316 4013429 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013429 3213986 10816 10855 10852 10853 Yes Security Update https://support.microsoft.com/en-us/kb/4013429 10816 10855 10852 10853 4013429 4012606 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012606 3210720 10729 10735 Yes Security Update https://support.microsoft.com/en-us/kb/4012606 10729 10735 4012606 4013198 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013198 3210721 10789 10788 Yes Security Update https://support.microsoft.com/en-us/kb/4013198 10789 10788 4013198 4012215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012215 3212646 10047 10048 10050 10051 10049 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012215 10047 10048 10050 10051 10049 4012215 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10047 10050 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;custerr.dll;vmswitch.sys;msxml3.dll;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10047 10050 4012212 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10048 10051 10049 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10048 10051 10049 4012212 4012216 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012216 3205401 10481 10482 10483 10543 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012216 10481 10482 10483 10543 4012216 4012213 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012213 10481 10482 10483 10543 msxpspcl6.dll;msxpsps.dll;hvax64.exe;hvix64.exe;srv.sys;quartz.dll;n/a;win32k.sys;gdiplus.dll;gdi32.dll;icm32.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;dnsapi.dll;msxml3.dll;custerr.dll;vmswitch.sys;dnsrslvr.dll;mrxsmb20.sys;mrxsmb.sys;dxgkrnl.sys;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012213 10481 10482 10483 10543 4012213 4012216 3205401 10484 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012216 10484 4012216 4012497 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012497 3204723 9312 10287 9311 9318 9344 4393 9316 win32k.sys 0001-01-01T00:00:00 Yes Security Update https://support.microsoft.com/en-us/kb/4012497 9312 10287 9311 9318 9344 4393 9316 4012497 4012217 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012217 3205409 10378 10379 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012217 10378 10379 4012217 4012214 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012214 MS16-110, 3187754 10378 10379 n/a;msxpspcl6.dll;msxpsps.dll;srv.sys;win32k.sys;gdiplus.dll;gdi32.dll;icm32.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dxgkrnl.sys 0001-01-01T00:00:00 Security Only https://support.microsoft.com/en-us/help/4012214 10378 10379 4012214 <a href="http://weibo.com/pgboy1988">pgboy</a> and <a href="http://weibo.com/2641521260">zhong_sf</a> of <a href="http://www.360.cn/">Qihoo 360 Vulcan Team</a> Peter Hlavaty (<a href="https://twitter.com/zer0mem">@zer0mem</a>), KeenLab, <a href="http://www.tencent.com/">Tencent</a> 1.0 2017-03-14T07:00:00 <p>Information published.</p> Microsoft SharePoint Elevation of Privilege Vulnerability <p>An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint server.</p> <p>The attacker who successfully exploited the vulnerability could then perform cross-site scripting attacks on affected systems and run script in the security context of the current user. These attacks could allow the attacker to read content that the attacker is not authorized to read, use the victim's identity to take actions on the SharePoint site on behalf of the user, such as change permissions and delete content, and inject malicious content in the browser of the user.</p> <p>The security update addresses the vulnerability by helping to ensure that SharePoint Server properly sanitizes web requests.</p> Microsoft Office Microsoft Yes CVE-2017-0107 10612 Elevation of Privilege 10612 Important 10612 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A;Older Software Release:Exploitation Less Likely;DOS:N/A 3172540 https://www.microsoft.com/download/details.aspx?familyid=798e531e-ce1f-4eb9-bc94-ce5583c568fc 3115294 10612 Maybe Security Update https://support.microsoft.com/kb/3172540 10612 3172540 Cheah Khai Ee (<a href="https://twitter.com/MercurialSec">@MercurialSec</a>) 1.0 2017-03-14T07:00:00 <p>Information published.</p> Microsoft Exchange Server Elevation of Privilege Vulnerability <p>An elevation of privilege vulnerability exists when Microsoft Exchange Outlook Web Access (OWA) fails to properly handle web requests. An attacker who successfully exploited this vulnerability could perform script/content injection attacks and attempt to trick the user into disclosing sensitive information.</p> <p>To exploit the vulnerability, an attacker could send a specially crafted email message containing a malicious link to a user. Alternatively, an attacker could use a chat client to social engineer a user into clicking the malicious link.</p> <p>The security update addresses the vulnerability by correcting how Microsoft Exchange validates web requests.</p> <p>Note: In order to exploit this vulnerability, a user must click a maliciously crafted link from an attacker.</p> Microsoft Exchange Server Microsoft Yes CVE-2017-0110 10650 10953 10954 Elevation of Privilege 10650 Elevation of Privilege 10953 Elevation of Privilege 10954 Important 10650 Important 10953 Important 10954 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely;Older Software Release:Exploitation Unlikely;DOS:N/A 4012178 https://www.microsoft.com/download/details.aspx?familyid=1dc2c189-2d5d-4f86-9049-aa403af9c143 3184736 10650 Maybe Security Update https://support.microsoft.com/help/4012178 10650 4012178 4012178 https://www.microsoft.com/download/details.aspx?familyid=7d376a06-0941-442b-a57e-37c821398c5c 10953 Maybe Security Update https://support.microsoft.com/help/4012178 10953 4012178 4012178 https://www.microsoft.com/download/details.aspx?familyid=24370e12-50a1-4477-a664-11777eb93520 10954 Maybe Security Update https://support.microsoft.com/help/4012178 10954 4012178 Gabriel Lima (<a href="http://twitter.com/gabrielpato">@gabrielpato</a>) 1.0 2017-03-14T07:00:00 <p>Information published.</p> Windows SMB Remote Code Execution Vulnerability <p>A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 1.0 (SMBv1) server handles certain requests. An attacker who successfully exploited the vulnerability could gain the ability to execute code on the target server.</p> <p>To exploit the vulnerability, in most situations, an authenticated attacker could send a specially crafted packet to a targeted SMBv1 server.</p> <p>The security update addresses the vulnerability by correcting how SMBv1 handles these specially crafted requests.</p> Windows SMB Server Microsoft Yes CVE-2017-0143 10729 10735 10789 10788 10852 10853 10047 10048 10481 10482 10484 9312 9311 9318 9344 10050 10051 10049 10378 10379 10483 10543 4393 9316 10816 10855 Remote Code Execution 10729 Remote Code Execution 10735 Remote Code Execution 10789 Remote Code Execution 10788 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10047 Remote Code Execution 10048 Remote Code Execution 10481 Remote Code Execution 10482 Remote Code Execution 10484 Remote Code Execution 9312 Remote Code Execution 9311 Remote Code Execution 9318 Remote Code Execution 9344 Remote Code Execution 10050 Remote Code Execution 10051 Remote Code Execution 10049 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 4393 Remote Code Execution 9316 Remote Code Execution 10816 Remote Code Execution 10855 Critical 10729 Critical 10735 Critical 10789 Critical 10788 Critical 10852 Critical 10853 Critical 10047 Critical 10048 Critical 10481 Critical 10482 Critical 10484 Critical 9312 Critical 9311 Critical 9318 Critical 9344 Critical 10050 Critical 10051 Critical 10049 Critical 10378 Critical 10379 Critical 10483 Critical 10543 Critical 4393 Critical 9316 Critical 10816 Critical 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10729 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10735 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10789 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10788 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10852 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10853 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10047 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10048 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10481 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10482 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10484 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9312 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9311 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9318 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9344 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10050 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10051 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10049 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10378 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10379 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10483 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10543 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 4393 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9316 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10816 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10855 4012606 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012606 3210720 10729 10735 Yes Security Update https://support.microsoft.com/en-us/kb/4012606 10729 10735 4012606 4013198 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013198 3210721 10789 10788 Yes Security Update https://support.microsoft.com/en-us/kb/4013198 10789 10788 4013198 4013429 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013429 3213986 10852 10853 10816 10855 Yes Security Update https://support.microsoft.com/en-us/kb/4013429 10852 10853 10816 10855 4013429 4012215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012215 3212646 10047 10048 10050 10051 10049 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012215 10047 10048 10050 10051 10049 4012215 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10047 10050 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;custerr.dll;vmswitch.sys;msxml3.dll;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10047 10050 4012212 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10048 10051 10049 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10048 10051 10049 4012212 4012216 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012216 3205401 10481 10482 10483 10543 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012216 10481 10482 10483 10543 4012216 4012213 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012213 10481 10482 10483 10543 msxpspcl6.dll;msxpsps.dll;hvax64.exe;hvix64.exe;srv.sys;quartz.dll;n/a;win32k.sys;gdiplus.dll;gdi32.dll;icm32.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;dnsapi.dll;msxml3.dll;custerr.dll;vmswitch.sys;dnsrslvr.dll;mrxsmb20.sys;mrxsmb.sys;dxgkrnl.sys;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012213 10481 10482 10483 10543 4012213 4012216 3205401 10484 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012216 10484 4012216 4012598 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012598 3177186 9312 9311 9318 9344 4393 9316 srv.sys 0001-01-01T00:00:00 Yes Security Update https://support.microsoft.com/en-us/kb/4012598 9312 9311 9318 9344 4393 9316 4012598 4012217 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012217 3205409 10378 10379 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012217 10378 10379 4012217 4012214 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012214 MS16-110, 3187754 10378 10379 n/a;msxpspcl6.dll;msxpsps.dll;srv.sys;win32k.sys;gdiplus.dll;gdi32.dll;icm32.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dxgkrnl.sys 0001-01-01T00:00:00 Security Only https://support.microsoft.com/en-us/help/4012214 10378 10379 4012214 1.0 2017-03-14T07:00:00 <p>Information published.</p> Windows SMB Remote Code Execution Vulnerability <p>A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 1.0 (SMBv1) server handles certain requests. An attacker who successfully exploited the vulnerability could gain the ability to execute code on the target server.</p> <p>To exploit the vulnerability, in most situations, an authenticated attacker could send a specially crafted packet to a targeted SMBv1 server.</p> <p>The security update addresses the vulnerability by correcting how SMBv1 handles these specially crafted requests.</p> Windows SMB Server Microsoft Yes CVE-2017-0144 9312 9311 9318 9344 10050 10051 10049 10378 10379 10483 10543 10855 4393 9316 10729 10735 10789 10788 10852 10853 10047 10048 10481 10482 10484 10816 Remote Code Execution 9312 Remote Code Execution 9311 Remote Code Execution 9318 Remote Code Execution 9344 Remote Code Execution 10050 Remote Code Execution 10051 Remote Code Execution 10049 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 10855 Remote Code Execution 4393 Remote Code Execution 9316 Remote Code Execution 10729 Remote Code Execution 10735 Remote Code Execution 10789 Remote Code Execution 10788 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10047 Remote Code Execution 10048 Remote Code Execution 10481 Remote Code Execution 10482 Remote Code Execution 10484 Remote Code Execution 10816 Critical 9312 Critical 9311 Critical 9318 Critical 9344 Critical 10050 Critical 10051 Critical 10049 Critical 10378 Critical 10379 Critical 10483 Critical 10543 Critical 10855 Critical 4393 Critical 9316 Critical 10729 Critical 10735 Critical 10789 Critical 10788 Critical 10852 Critical 10853 Critical 10047 Critical 10048 Critical 10481 Critical 10482 Critical 10484 Critical 10816 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9312 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9311 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9318 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9344 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10050 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10051 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10049 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10378 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10379 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10483 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10543 8.1 7.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10855 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 4393 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9316 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10729 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10735 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10789 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10788 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10852 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10853 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10047 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10048 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10481 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10482 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10484 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10816 4012598 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012598 3177186 9312 9311 9318 9344 4393 9316 srv.sys 0001-01-01T00:00:00 Yes Security Update https://support.microsoft.com/en-us/kb/4012598 9312 9311 9318 9344 4393 9316 4012598 4012215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012215 3212646 10050 10051 10049 10047 10048 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012215 10050 10051 10049 10047 10048 4012215 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10050 10047 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;custerr.dll;vmswitch.sys;msxml3.dll;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10050 10047 4012212 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10051 10049 10048 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10051 10049 10048 4012212 4012217 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012217 3205409 10378 10379 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012217 10378 10379 4012217 4012214 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012214 MS16-110, 3187754 10378 10379 n/a;msxpspcl6.dll;msxpsps.dll;srv.sys;win32k.sys;gdiplus.dll;gdi32.dll;icm32.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dxgkrnl.sys 0001-01-01T00:00:00 Security Only https://support.microsoft.com/en-us/help/4012214 10378 10379 4012214 4012216 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012216 3205401 10483 10543 10481 10482 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012216 10483 10543 10481 10482 4012216 4012213 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012213 10483 10543 10481 10482 msxpspcl6.dll;msxpsps.dll;hvax64.exe;hvix64.exe;srv.sys;quartz.dll;n/a;win32k.sys;gdiplus.dll;gdi32.dll;icm32.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;dnsapi.dll;msxml3.dll;custerr.dll;vmswitch.sys;dnsrslvr.dll;mrxsmb20.sys;mrxsmb.sys;dxgkrnl.sys;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012213 10483 10543 10481 10482 4012213 4013429 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013429 3213986 10855 10852 10853 10816 Yes Security Update https://support.microsoft.com/en-us/kb/4013429 10855 10852 10853 10816 4013429 4012606 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012606 3210720 10729 10735 Yes Security Update https://support.microsoft.com/en-us/kb/4012606 10729 10735 4012606 4013198 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013198 3210721 10789 10788 Yes Security Update https://support.microsoft.com/en-us/kb/4013198 10789 10788 4013198 4012216 3205401 10484 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012216 10484 4012216 1.0 2017-03-14T07:00:00 <p>Information published.</p> Windows SMB Remote Code Execution Vulnerability <p>A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 1.0 (SMBv1) server handles certain requests. An attacker who successfully exploited the vulnerability could gain the ability to execute code on the target server.</p> <p>To exploit the vulnerability, in most situations, an authenticated attacker could send a specially crafted packet to a targeted SMBv1 server.</p> <p>The security update addresses the vulnerability by correcting how SMBv1 handles these specially crafted requests.</p> Windows SMB Server Microsoft Yes CVE-2017-0145 10729 10735 10789 10788 10852 10853 10047 10048 10481 10482 10484 9312 10287 9311 9318 9344 10050 10051 10049 10378 10379 10483 10543 10816 10855 4393 9316 Remote Code Execution 10729 Remote Code Execution 10735 Remote Code Execution 10789 Remote Code Execution 10788 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10047 Remote Code Execution 10048 Remote Code Execution 10481 Remote Code Execution 10482 Remote Code Execution 10484 Remote Code Execution 9312 Remote Code Execution 10287 Remote Code Execution 9311 Remote Code Execution 9318 Remote Code Execution 9344 Remote Code Execution 10050 Remote Code Execution 10051 Remote Code Execution 10049 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 4393 Remote Code Execution 9316 Critical 10729 Critical 10735 Critical 10789 Critical 10788 Critical 10852 Critical 10853 Critical 10047 Critical 10048 Critical 10481 Critical 10482 Critical 10484 Critical 9312 Critical 10287 Critical 9311 Critical 9318 Critical 9344 Critical 10050 Critical 10051 Critical 10049 Critical 10378 Critical 10379 Critical 10483 Critical 10543 Critical 10816 Critical 10855 Critical 4393 Critical 9316 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10729 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10735 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10789 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10788 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10852 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10853 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10047 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10048 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10481 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10482 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10484 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9312 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10287 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9311 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9318 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9344 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10050 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10051 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10049 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10378 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10379 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10483 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10543 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10816 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10855 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 4393 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9316 4012606 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012606 3210720 10729 10735 Yes Security Update https://support.microsoft.com/en-us/kb/4012606 10729 10735 4012606 4013198 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013198 3210721 10789 10788 Yes Security Update https://support.microsoft.com/en-us/kb/4013198 10789 10788 4013198 4013429 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013429 3213986 10852 10853 10816 10855 Yes Security Update https://support.microsoft.com/en-us/kb/4013429 10852 10853 10816 10855 4013429 4012215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012215 3212646 10047 10048 10050 10051 10049 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012215 10047 10048 10050 10051 10049 4012215 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10047 10050 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;custerr.dll;vmswitch.sys;msxml3.dll;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10047 10050 4012212 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10048 10051 10049 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10048 10051 10049 4012212 4012216 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012216 3205401 10481 10482 10483 10543 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012216 10481 10482 10483 10543 4012216 4012213 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012213 10481 10482 10483 10543 msxpspcl6.dll;msxpsps.dll;hvax64.exe;hvix64.exe;srv.sys;quartz.dll;n/a;win32k.sys;gdiplus.dll;gdi32.dll;icm32.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;dnsapi.dll;msxml3.dll;custerr.dll;vmswitch.sys;dnsrslvr.dll;mrxsmb20.sys;mrxsmb.sys;dxgkrnl.sys;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012213 10481 10482 10483 10543 4012213 4012216 4014077 10484 Monthly Rollup https://support.microsoft.com/en-us/help/4012216 10484 4012216 4012598 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012598 3177186 9312 10287 9311 9318 9344 4393 9316 srv.sys 0001-01-01T00:00:00 Yes Security Update https://support.microsoft.com/en-us/kb/4012598 9312 10287 9311 9318 9344 4393 9316 4012598 4012217 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012217 3205409 10378 10379 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012217 10378 10379 4012217 4012214 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012214 MS16-110, 3187754 10378 10379 n/a;msxpspcl6.dll;msxpsps.dll;srv.sys;win32k.sys;gdiplus.dll;gdi32.dll;icm32.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dxgkrnl.sys 0001-01-01T00:00:00 Security Only https://support.microsoft.com/en-us/help/4012214 10378 10379 4012214 1.0 2017-03-14T07:00:00 <p>Information published.</p> Windows SMB Remote Code Execution Vulnerability <p>A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 1.0 (SMBv1) server handles certain requests. An attacker who successfully exploited the vulnerability could gain the ability to execute code on the target server.</p> <p>To exploit the vulnerability, in most situations, an authenticated attacker could send a specially crafted packet to a targeted SMBv1 server.</p> <p>The security update addresses the vulnerability by correcting how SMBv1 handles these specially crafted requests.</p> Windows SMB Server Microsoft Yes CVE-2017-0146 10729 10735 10789 10788 10852 10853 10047 10048 10481 10482 10484 9312 9311 9318 9344 10051 10049 10378 10379 10483 10543 4393 9316 10287 10816 10855 Remote Code Execution 10729 Remote Code Execution 10735 Remote Code Execution 10789 Remote Code Execution 10788 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10047 Remote Code Execution 10048 Remote Code Execution 10481 Remote Code Execution 10482 Remote Code Execution 10484 Remote Code Execution 9312 Remote Code Execution 9311 Remote Code Execution 9318 Remote Code Execution 9344 Remote Code Execution 10051 Remote Code Execution 10049 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 4393 Remote Code Execution 9316 Remote Code Execution 10287 Remote Code Execution 10816 Remote Code Execution 10855 Critical 10729 Critical 10735 Critical 10789 Critical 10788 Critical 10852 Critical 10853 Critical 10047 Critical 10048 Critical 10481 Critical 10482 Critical 10484 Critical 9312 Critical 9311 Critical 9318 Critical 9344 Critical 10051 Critical 10049 Critical 10378 Critical 10379 Critical 10483 Critical 10543 Critical 4393 Critical 9316 Critical 10287 Critical 10816 Critical 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10729 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10735 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10789 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10788 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10852 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10853 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10047 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10048 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10481 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10482 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10484 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9312 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9311 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9318 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9344 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10051 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10049 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10378 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10379 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10483 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10543 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 4393 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9316 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10816 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10855 4012606 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012606 3210720 10729 10735 Yes Security Update https://support.microsoft.com/en-us/kb/4012606 10729 10735 4012606 4013198 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013198 3210721 10789 10788 Yes Security Update https://support.microsoft.com/en-us/kb/4013198 10789 10788 4013198 4013429 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013429 3213986 10852 10853 10816 10855 Yes Security Update https://support.microsoft.com/en-us/kb/4013429 10852 10853 10816 10855 4013429 4012215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012215 3212646 10047 10048 10051 10049 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012215 10047 10048 10051 10049 4012215 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10047 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;custerr.dll;vmswitch.sys;msxml3.dll;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10047 4012212 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10048 10051 10049 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10048 10051 10049 4012212 4012216 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012216 3205401 10481 10482 10483 10543 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012216 10481 10482 10483 10543 4012216 4012213 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012213 10481 10482 10483 10543 msxpspcl6.dll;msxpsps.dll;hvax64.exe;hvix64.exe;srv.sys;quartz.dll;n/a;win32k.sys;gdiplus.dll;gdi32.dll;icm32.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;dnsapi.dll;msxml3.dll;custerr.dll;vmswitch.sys;dnsrslvr.dll;mrxsmb20.sys;mrxsmb.sys;dxgkrnl.sys;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012213 10481 10482 10483 10543 4012213 4012216 3205401 10484 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012216 10484 4012216 4012598 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012598 3177186 9312 9311 9318 9344 4393 9316 10287 srv.sys 0001-01-01T00:00:00 Yes Security Update https://support.microsoft.com/en-us/kb/4012598 9312 9311 9318 9344 4393 9316 10287 4012598 4012217 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012217 3205409 10378 10379 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012217 10378 10379 4012217 4012214 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012214 MS16-110, 3187754 10378 10379 n/a;msxpspcl6.dll;msxpsps.dll;srv.sys;win32k.sys;gdiplus.dll;gdi32.dll;icm32.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dxgkrnl.sys 0001-01-01T00:00:00 Security Only https://support.microsoft.com/en-us/help/4012214 10378 10379 4012214 1.0 2017-03-14T07:00:00 <p>Information published.</p> Windows SMB Information Disclosure Vulnerability <p>An information disclosure vulnerability exists in the way that the Microsoft Server Message Block 1.0 (SMBv1) server handles certain requests. An attacker who successfully exploited this vulnerability could craft a special packet, which could lead to information disclosure from the server.</p> <p>To exploit the vulnerability, in most situations, an unauthenticated attacker could send a specially crafted packet to a targeted SMBv1 server.</p> <p>The security update addresses the vulnerability by correcting how SMBv1 handles these specially crafted requests.</p> Windows SMB Server Microsoft Yes CVE-2017-0147 10729 10735 10789 10788 10852 10853 10047 10048 10481 10482 10484 9312 10287 9311 9318 9344 10050 10051 10049 10378 10379 10483 10543 4393 9316 10816 10855 Information Disclosure 10729 Information Disclosure 10735 Information Disclosure 10789 Information Disclosure 10788 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10047 Information Disclosure 10048 Information Disclosure 10481 Information Disclosure 10482 Information Disclosure 10484 Information Disclosure 9312 Information Disclosure 10287 Information Disclosure 9311 Information Disclosure 9318 Information Disclosure 9344 Information Disclosure 10050 Information Disclosure 10051 Information Disclosure 10049 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 4393 Information Disclosure 9316 Information Disclosure 10816 Information Disclosure 10855 Important 10729 Important 10735 Important 10789 Important 10788 Important 10852 Important 10853 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 9312 Important 10287 Important 9311 Important 9318 Important 9344 Important 10050 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Important 4393 Important 9316 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10729 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10735 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10789 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10788 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10852 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10853 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10047 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10048 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10481 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10482 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10484 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9312 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10287 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9311 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9318 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9344 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10050 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10051 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10049 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10378 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10379 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10483 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10543 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 4393 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9316 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10816 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10855 4012606 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012606 3210720 10729 10735 Yes Security Update https://support.microsoft.com/en-us/kb/4012606 10729 10735 4012606 4013198 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013198 3210721 10789 10788 Yes Security Update https://support.microsoft.com/en-us/kb/4013198 10789 10788 4013198 4013429 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013429 3213986 10852 10853 10816 10855 Yes Security Update https://support.microsoft.com/en-us/kb/4013429 10852 10853 10816 10855 4013429 4012215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012215 3212646 10047 10048 10050 10051 10049 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012215 10047 10048 10050 10051 10049 4012215 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10047 10050 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;custerr.dll;vmswitch.sys;msxml3.dll;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10047 10050 4012212 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10048 10051 10049 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10048 10051 10049 4012212 4012216 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012216 3205401 10481 10482 10483 10543 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012216 10481 10482 10483 10543 4012216 4012213 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012213 10481 10482 10483 10543 msxpspcl6.dll;msxpsps.dll;hvax64.exe;hvix64.exe;srv.sys;quartz.dll;n/a;win32k.sys;gdiplus.dll;gdi32.dll;icm32.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;dnsapi.dll;msxml3.dll;custerr.dll;vmswitch.sys;dnsrslvr.dll;mrxsmb20.sys;mrxsmb.sys;dxgkrnl.sys;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012213 10481 10482 10483 10543 4012213 4012216 3205401 10484 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012216 10484 4012216 4012598 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012598 3177186 9312 10287 9311 9318 9344 4393 9316 srv.sys 0001-01-01T00:00:00 Yes Security Update https://support.microsoft.com/en-us/kb/4012598 9312 10287 9311 9318 9344 4393 9316 4012598 4012217 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012217 3205409 10378 10379 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012217 10378 10379 4012217 4012214 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012214 MS16-110, 3187754 10378 10379 n/a;msxpspcl6.dll;msxpsps.dll;srv.sys;win32k.sys;gdiplus.dll;gdi32.dll;icm32.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dxgkrnl.sys 0001-01-01T00:00:00 Security Only https://support.microsoft.com/en-us/help/4012214 10378 10379 4012214 1.0 2017-03-14T07:00:00 <p>Information published.</p> Windows SMB Remote Code Execution Vulnerability <p>A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 1.0 (SMBv1) server handles certain requests. An attacker who successfully exploited the vulnerability could gain the ability to execute code on the target server.</p> <p>To exploit the vulnerability, in most situations, an authenticated attacker could send a specially crafted packet to a targeted SMBv1 server.</p> <p>The security update addresses the vulnerability by correcting how SMBv1 handles these specially crafted requests.</p> Windows SMB Server Microsoft Yes CVE-2017-0148 10729 10735 10789 10788 10852 10853 10047 10048 10481 10482 10484 9312 9311 9318 9344 10050 10051 10049 10378 10379 10483 10543 4393 9316 10287 10816 10855 Remote Code Execution 10729 Remote Code Execution 10735 Remote Code Execution 10789 Remote Code Execution 10788 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10047 Remote Code Execution 10048 Remote Code Execution 10481 Remote Code Execution 10482 Remote Code Execution 10484 Remote Code Execution 9312 Remote Code Execution 9311 Remote Code Execution 9318 Remote Code Execution 9344 Remote Code Execution 10050 Remote Code Execution 10051 Remote Code Execution 10049 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 4393 Remote Code Execution 9316 Remote Code Execution 10287 Remote Code Execution 10816 Remote Code Execution 10855 Critical 10729 Critical 10735 Critical 10789 Critical 10788 Critical 10852 Critical 10853 Critical 10047 Critical 10048 Critical 10481 Critical 10482 Critical 10484 Critical 9312 Critical 9311 Critical 9318 Critical 9344 Critical 10050 Critical 10051 Critical 10049 Critical 10378 Critical 10379 Critical 10483 Critical 10543 Critical 4393 Critical 9316 Critical 10287 Critical 10816 Critical 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10729 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10735 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10789 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10788 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10852 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10853 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10047 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10048 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10481 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10482 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10484 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9312 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9311 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9318 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9344 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10050 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10051 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10049 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10378 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10379 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10483 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10543 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 4393 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9316 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10816 8.1 7.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10855 4012606 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012606 3210720 10729 10735 Yes Security Update https://support.microsoft.com/en-us/kb/4012606 10729 10735 4012606 4013198 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013198 3210721 10789 10788 Yes Security Update https://support.microsoft.com/en-us/kb/4013198 10789 10788 4013198 4013429 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013429 3213986 10852 10853 10816 10855 Yes Security Update https://support.microsoft.com/en-us/kb/4013429 10852 10853 10816 10855 4013429 4012215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012215 3212646 10047 10048 10050 10051 10049 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012215 10047 10048 10050 10051 10049 4012215 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10047 10050 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;custerr.dll;vmswitch.sys;msxml3.dll;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10047 10050 4012212 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10048 10051 10049 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10048 10051 10049 4012212 4012216 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012216 3205401 10481 10482 10483 10543 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012216 10481 10482 10483 10543 4012216 4012213 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012213 10481 10482 10483 10543 msxpspcl6.dll;msxpsps.dll;hvax64.exe;hvix64.exe;srv.sys;quartz.dll;n/a;win32k.sys;gdiplus.dll;gdi32.dll;icm32.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;dnsapi.dll;msxml3.dll;custerr.dll;vmswitch.sys;dnsrslvr.dll;mrxsmb20.sys;mrxsmb.sys;dxgkrnl.sys;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012213 10481 10482 10483 10543 4012213 4012216 3205401 10484 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012216 10484 4012216 4012598 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012598 3177186 9312 9311 9318 9344 4393 9316 10287 srv.sys 0001-01-01T00:00:00 Yes Security Update https://support.microsoft.com/en-us/kb/4012598 9312 9311 9318 9344 4393 9316 10287 4012598 4012217 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012217 3205409 10378 10379 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012217 10378 10379 4012217 4012214 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012214 MS16-110, 3187754 10378 10379 n/a;msxpspcl6.dll;msxpsps.dll;srv.sys;win32k.sys;gdiplus.dll;gdi32.dll;icm32.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dxgkrnl.sys 0001-01-01T00:00:00 Security Only https://support.microsoft.com/en-us/help/4012214 10378 10379 4012214 1.0 2017-03-14T07:00:00 <p>Information published.</p> Microsoft Lync for Mac Certificate Validation Vulnerability <p>A security feature bypass exists when the Lync for Mac 2011 client fails to properly validate certificates. An attacker who successfully exploited this vulnerability could tamper with trusted communications between the server and target client.</p> <p>To exploit the vulnerability, an attacker would need to intercept and tamper with network traffic.</p> <p>The security update addresses the vulnerability by correcting how the Lync for Mac 2011 client validates certificates.</p> Microsoft Office Microsoft Yes CVE-2017-0129 10139 Security Feature Bypass 10139 Important 10139 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A;Older Software Release:Exploitation Unlikely;DOS:N/A 4012487 https://support.microsoft.com/help/4012487 10139 No Security Update https://support.microsoft.com/help/4012487 10139 4012487 Jerry Decime, Hewlett Packard Enterprise 1.0 2017-03-14T07:00:00 <p>Information published.</p> Scripting Engine Memory Corruption Vulnerability <p>A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p> <p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Internet Explorer and then convince a user to view the website. An attacker could also embed an ActiveX control marked &quot;safe for initialization&quot; in an application or Microsoft Office document that hosts the IE rendering engine. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p> <p>The security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.</p> Microsoft Browsers Microsoft Yes CVE-2017-0150 10724-10729 10724-10735 10724-10789 10724-10788 10724-10852 10724-10853 Remote Code Execution 10724-10729 Remote Code Execution 10724-10735 Remote Code Execution 10724-10789 Remote Code Execution 10724-10788 Remote Code Execution 10724-10852 Remote Code Execution 10724-10853 Critical 10724-10729 Critical 10724-10735 Critical 10724-10789 Critical 10724-10788 Critical 10724-10852 Critical 10724-10853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A;DOS:N/A 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O 10724-10729 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O 10724-10735 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O 10724-10789 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O 10724-10788 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O 10724-10852 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O 10724-10853 4012606 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012606 3210720 10724-10729 10724-10735 Yes Security Update https://support.microsoft.com/en-us/kb/4012606 10724-10729 10724-10735 4012606 4013198 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013198 3210721 10724-10789 10724-10788 Yes Security Update https://support.microsoft.com/en-us/kb/4013198 10724-10789 10724-10788 4013198 4013429 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013429 3213986 10724-10852 10724-10853 Yes Security Update https://support.microsoft.com/en-us/kb/4013429 10724-10852 10724-10853 4013429 Microsoft ChakraCore Team 1.0 2017-03-14T07:00:00 <p>Information published.</p> Scripting Engine Memory Corruption Vulnerability <p>A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p> <p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Internet Explorer and then convince a user to view the website. An attacker could also embed an ActiveX control marked &quot;safe for initialization&quot; in an application or Microsoft Office document that hosts the IE rendering engine. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p> <p>The security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.</p> Microsoft Browsers Microsoft Yes CVE-2017-0151 10724-10729 10724-10735 10724-10789 10724-10788 10724-10852 10724-10853 Remote Code Execution 10724-10729 Remote Code Execution 10724-10735 Remote Code Execution 10724-10789 Remote Code Execution 10724-10788 Remote Code Execution 10724-10852 Remote Code Execution 10724-10853 Critical 10724-10729 Critical 10724-10735 Critical 10724-10789 Critical 10724-10788 Critical 10724-10852 Critical 10724-10853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A;DOS:N/A 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O 10724-10729 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O 10724-10735 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O 10724-10789 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O 10724-10788 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O 10724-10852 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O 10724-10853 4012606 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012606 3210720 10724-10729 10724-10735 Yes Security Update https://support.microsoft.com/en-us/kb/4012606 10724-10729 10724-10735 4012606 4013198 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013198 3210721 10724-10789 10724-10788 Yes Security Update https://support.microsoft.com/en-us/kb/4013198 10724-10789 10724-10788 4013198 4013429 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013429 3213986 10724-10852 10724-10853 Yes Security Update https://support.microsoft.com/en-us/kb/4013429 10724-10852 10724-10853 4013429 Microsoft ChakraCore Team 1.0 2017-03-14T07:00:00 <p>Information published.</p> Microsoft Browser Memory Corruption Vulnerability <p>A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory. The vulnerability could corrupt memory in a way that could allow an attacker to execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, the attacker could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p> <p>An attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft browsers, and then convince a user to view the website. The attacker could also take advantage of compromised websites, or websites that accept or host user-provided content or advertisements, by adding specially crafted content that could exploit the vulnerability. In all cases, however, an attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically via an enticement in email or instant message, or by getting them to open an email attachment.</p> <p>The security update addresses the vulnerability by modifying how Microsoft browsers handle objects in memory.</p> Internet Explorer Microsoft Yes CVE-2017-0149 10555-10378 10486-10481 10486-10482 10486-10483 10486-10484 10486-10047 10486-10048 10486-10051 10486-10729 10486-10735 10486-10789 10486-10788 10486-10852 10486-10853 10336-9316 10336-4393 10336-9312 10336-9318 10486-10816 Remote Code Execution 10555-10378 Remote Code Execution 10486-10481 Remote Code Execution 10486-10482 Remote Code Execution 10486-10483 Remote Code Execution 10486-10484 Remote Code Execution 10486-10047 Remote Code Execution 10486-10048 Remote Code Execution 10486-10051 Remote Code Execution 10486-10729 Remote Code Execution 10486-10735 Remote Code Execution 10486-10789 Remote Code Execution 10486-10788 Remote Code Execution 10486-10852 Remote Code Execution 10486-10853 Remote Code Execution 10336-9316 Remote Code Execution 10336-4393 Remote Code Execution 10336-9312 Remote Code Execution 10336-9318 Remote Code Execution 10486-10816 Moderate 10555-10378 Critical 10486-10481 Critical 10486-10482 Moderate 10486-10483 Critical 10486-10484 Critical 10486-10047 Critical 10486-10048 Moderate 10486-10051 Critical 10486-10729 Critical 10486-10735 Critical 10486-10789 Critical 10486-10788 Critical 10486-10852 Critical 10486-10853 Critical 10336-9316 Critical 10336-4393 Moderate 10336-9312 Moderate 10336-9318 Critical 10486-10816 Publicly Disclosed:No;Exploited:Yes;Latest Software Release:Exploitation Detected;Older Software Release:Exploitation Detected;DOS:N/A 6.4 5.8 CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10555-10378 7.5 6.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O 10486-10481 7.5 6.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O 10486-10482 6.4 5.8 CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10486-10483 7.5 6.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O 10486-10484 7.5 6.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O 10486-10047 7.5 6.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O 10486-10048 6.4 5.8 CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10486-10051 7.5 6.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O 10486-10729 7.5 6.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O 10486-10735 7.5 6.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O 10486-10789 7.5 6.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O 10486-10788 7.5 6.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O 10486-10852 7.5 6.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O 10486-10853 7.5 6.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O 10336-9316 7.5 6.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O 10336-4393 6.4 5.8 CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10336-9312 6.4 5.8 CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10336-9318 7.5 6.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O 10486-10816 4012217 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012217 3205409 10555-10378 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012217 10555-10378 4012217 4012204 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012204 3203621 10555-10378 10486-10481 10486-10482 10486-10483 10486-10047 10486-10048 10486-10051 10336-9316 10336-4393 10336-9312 10336-9318 Yes IE Cumulative https://support.microsoft.com/en-us/help/4012204 10555-10378 10486-10481 10486-10482 10486-10483 10486-10047 10486-10048 10486-10051 10336-9316 10336-4393 10336-9312 10336-9318 4012204 4012216 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012216 3205401 10486-10481 10486-10482 10486-10483 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012216 10486-10481 10486-10482 10486-10483 4012216 4012216 3205401 10486-10484 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012216 10486-10484 4012216 4012215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012215 3212646 10486-10047 10486-10048 10486-10051 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012215 10486-10047 10486-10048 10486-10051 4012215 4012606 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012606 3210720 10486-10729 10486-10735 Yes Security Update https://support.microsoft.com/en-us/kb/4012606 10486-10729 10486-10735 4012606 4013198 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013198 3210721 10486-10789 10486-10788 Yes Security Update https://support.microsoft.com/en-us/kb/4013198 10486-10789 10486-10788 4013198 4013429 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013429 3213986 10486-10852 10486-10853 10486-10816 Yes Security Update https://support.microsoft.com/en-us/kb/4013429 10486-10852 10486-10853 10486-10816 4013429 1.0 2017-03-14T07:00:00 <p>Information published.</p> Windows Uniscribe Remote Code Execution Vulnerability <p>A remote code execution vulnerability exists due to the way Windows Uniscribe handles objects in memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.</p> <p>There are multiple ways an attacker could exploit this vulnerability:</p> <ul> <li><p>In a web-based attack scenario, an attacker could host a specially crafted website designed to exploit this vulnerability and then convince a user to view the website. An attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically by getting them to click a link in an email or instant message that takes users to the attacker's website, or by opening an attachment sent through email.</p> </li> <li><p>In a file-sharing attack scenario, an attacker could provide a specially crafted document file designed to exploit this vulnerability and then convince a user to open the document file.</p> </li> </ul> <p>The security update addresses the vulnerability by correcting how Windows Uniscribe handles objects in memory.</p> Microsoft Uniscribe Microsoft Yes CVE-2017-0083 10047 10048 9312 9311 9318 9344 10050 10051 10049 4393 9316 10287 Remote Code Execution 10047 Remote Code Execution 10048 Remote Code Execution 9312 Remote Code Execution 9311 Remote Code Execution 9318 Remote Code Execution 9344 Remote Code Execution 10050 Remote Code Execution 10051 Remote Code Execution 10049 Remote Code Execution 4393 Remote Code Execution 9316 Remote Code Execution 10287 Critical 10047 Critical 10048 Critical 9312 Critical 9311 Critical 9318 Critical 9344 Critical 10050 Critical 10051 Critical 10049 Critical 4393 Critical 9316 Critical 10287 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A;Older Software Release:Exploitation Less Likely;DOS:N/A 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10047 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10048 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9312 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9311 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9318 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9344 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10050 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10051 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10049 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 4393 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9316 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10287 4012215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012215 3212646 10047 10048 10050 10051 10049 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012215 10047 10048 10050 10051 10049 4012215 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10047 10050 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;custerr.dll;vmswitch.sys;msxml3.dll;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10047 10050 4012212 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10048 10051 10049 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10048 10051 10049 4012212 4012583 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012583 3196348 9312 9311 9318 9344 4393 9316 10287 gdiplus.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll 0001-01-01T00:00:00 Yes Security Update https://support.microsoft.com/en-us/kb/4012583 9312 9311 9318 9344 4393 9316 10287 4012583 Mateusz Jurczyk of <a href="http://www.google.com/">Google Project Zero</a> 1.0 2017-03-14T07:00:00 <p>Information published.</p> March 2017 Adobe Flash Security Update <p>This security update addresses the following vulnerabilities, which are described in Adobe Security Bulletin <a href="http://helpx.adobe.com/security/products/flash-player/apsb17-07.html">APSB17-07</a>:</p> <p>CVE-2017-2997, CVE-2017-2998, CVE-2017-2999, CVE-2017-3000, CVE-2017-3001, CVE-2017-3002, CVE-2017-3003</p> <p><strong>How could an attacker exploit these vulnerabilities?</strong> In a web-based attack scenario where the user is using Internet Explorer for the desktop, an attacker could host a specially crafted website that is designed to exploit any of these vulnerabilities through Internet Explorer and then convince a user to view the website. An attacker could also embed an ActiveX control marked &quot;safe for initialization&quot; in an application or Microsoft Office document that hosts the IE rendering engine. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit any of these vulnerabilities. In all cases, however, an attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically by clicking a link in an email message or in an Instant Messenger message that takes users to the attacker's website, or by opening an attachment sent through email.</p> <p>In a web-based attack scenario where the user is using Internet Explorer in the Windows 8-style UI, an attacker would first need to compromise a website already listed in the Compatibility View (CV) list. An attacker could then host a website that contains specially crafted Flash content designed to exploit any of these vulnerabilities through Internet Explorer and then convince a user to view the website. An attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically by clicking a link in an email message or in an Instant Messenger message that takes users to the attacker's website, or by opening an attachment sent through email. For more information about Internet Explorer and the CV List, please see the MSDN Article, Developer Guidance for websites with content for Adobe Flash Player in Windows 8.</p> Adobe Flash Player Microsoft Yes ADV170003 10384-10481 10384-10482 10384-10484 10384-10483 10384-10735 10384-10729 10384-10789 10384-10788 10384-10852 10384-10853 10384-10816 10384-10378 Remote Code Execution 10384-10481 Remote Code Execution 10384-10482 Remote Code Execution 10384-10484 Remote Code Execution 10384-10483 Remote Code Execution 10384-10735 Remote Code Execution 10384-10729 Remote Code Execution 10384-10789 Remote Code Execution 10384-10788 Remote Code Execution 10384-10852 Remote Code Execution 10384-10853 Remote Code Execution 10384-10816 Remote Code Execution 10384-10378 Critical 10384-10481 Critical 10384-10482 Critical 10384-10484 Critical 10384-10483 Critical 10384-10735 Critical 10384-10729 Critical 10384-10789 Critical 10384-10788 Critical 10384-10852 Critical 10384-10853 Critical 10384-10816 Critical 10384-10378 Publicly Disclosed:No;Exploited:No;DOS:N/A 4014329 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4014329 4010250 10384-10481 10384-10482 10384-10483 10384-10735 10384-10729 10384-10789 10384-10788 10384-10852 10384-10853 10384-10816 10384-10378 Yes Security Update https://support.microsoft.com/kb/4014329 10384-10481 10384-10482 10384-10483 10384-10735 10384-10729 10384-10789 10384-10788 10384-10852 10384-10853 10384-10816 10384-10378 4014329 4014329 4010250 10384-10484 Yes Security Update https://support.microsoft.com/kb/4014329 10384-10484 4014329 <p>Workaround refers to a setting or configuration change that would help block known attack vectors before you apply the update.</p> <p><strong>Prevent Adobe Flash Player from running</strong> You can disable attempts to instantiate Adobe Flash Player in Internet Explorer and other applications that honor the kill bit feature, such as Office 2007 and Office 2010, by setting the kill bit for the control in the registry.</p> <p><strong>Warning</strong> If you use Registry Editor incorrectly, you may cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that you can solve problems that result from using Registry Editor incorrectly. Use Registry Editor at your own risk. To set the kill bit for the control in the registry, perform the following steps:</p> <ol> <li><p>Paste the following into a text file and save it with the .reg file extension.</p> <pre><code> Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{D27CDB6E-AE6D-11CF-96B8-444553540000}] &quot;Compatibility Flags&quot;=dword:00000400 [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{D27CDB6E-AE6D-11CF-96B8-444553540000}] &quot;Compatibility Flags&quot;=dword:00000400 </code></pre> </li> <li><p>Double-click the .reg file to apply it to an individual system.</p> <p>You can also apply this workaround across domains by using Group Policy. For more information about Group Policy, see the TechNet article, Group Policy collection.</p> </li> </ol> <p><strong>Note</strong> You must restart Internet Explorer for your changes to take effect. <strong>Impact of workaround</strong>. There is no impact as long as the object is not intended to be used in Internet Explorer. <strong>How to undo the workaround.</strong> Delete the registry keys that were added in implementing this workaround. <strong>Prevent Adobe Flash Player from running in Internet Explorer through Group Policy</strong> <strong>Note</strong> The Group Policy MMC snap-in can be used to set policy for a machine, for an organizational unit, or for an entire domain. For more information about Group Policy, visit the following Microsoft Web sites:</p> <p><a href="https://technet.microsoft.com/library/hh831791">Group Policy Overview</a> <a href="https://technet.microsoft.com/library/cc737816%28v=ws.10%29.aspx">What is Group Policy Object Editor?</a> <a href="https://technet.microsoft.com/library/cc784165%28v=ws.10%29.aspx">Core Group Policy tools and settings</a></p> <p>To disable Adobe Flash Player in Internet Explorer through Group Policy, perform the following steps: <strong>Note</strong> This workaround does not prevent Flash from being invoked from other applications, such as Microsoft Office 2007 or Microsoft Office 2010.</p> <ol> <li>Open the Group Policy Management Console and configure the console to work with the appropriate Group Policy object, such as local machine, OU, or domain GPO.</li> <li>Navigate to the following node: <strong>Administrative Templates -&gt; Windows Components -&gt; Internet Explorer -&gt; Security Features -&gt; Add-on Management</strong></li> <li>Double-click <strong>Turn off Adobe Flash in Internet Explorer and prevent applications from using Internet Explorer technology to instantiate Flash objects</strong>.</li> <li>Change the setting to Enabled.</li> <li>Click <strong>Apply</strong> and then click <strong>OK</strong> to return to the Group Policy Management Console.</li> <li>Refresh Group Policy on all systems or wait for the next scheduled Group Policy refresh interval for the settings to take effect. <strong>Prevent Adobe Flash Player from running in Office 2010 on affected systems</strong> <strong>Note</strong> This workaround does not prevent Adobe Flash Player from running in Internet Explorer. <strong>Warning</strong> If you use Registry Editor incorrectly, you may cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that you can solve problems that result from using Registry Editor incorrectly. Use Registry Editor at your own risk. For detailed steps that you can use to prevent a control from running in Internet Explorer, see Microsoft Knowledge Base Article 240797. Follow the steps in the article to create a Compatibility Flags value in the registry to prevent a COM object from being instantiated in Internet Explorer.</li> </ol> <p>To disable Adobe Flash Player in Office 2010 only, set the kill bit for the ActiveX control for Adobe Flash Player in the registry using the following steps:</p> <ol> <li>Create a text file named Disable_Flash.reg with the following contents:</li> </ol> <pre><code> [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\Common\COM\Compatibility\{D27CDB6E-AE6D-11CF-96B8-444553540000}] &quot;Compatibility Flags&quot;=dword:00000400 </code></pre> <ol start="2"> <li>Double-click the .reg file to apply it to an individual system.</li> <li><strong>Note</strong> You must restart Internet Explorer for your changes to take effect. You can also apply this workaround across domains by using Group Policy. For more information about Group Policy, see the TechNet article, <a href="http://go.microsoft.com/fwlink/?LinkID=215719">Group Policy collection</a>. <strong>Prevent ActiveX controls from running in Office 2007 and Office 2010</strong></li> </ol> <p>To disable all ActiveX controls in Microsoft Office 2007 and Microsoft Office 2010, including Adobe Flash Player in Internet Explorer, perform the following steps:</p> <ol> <li>Click File, click Options, click Trust Center, and then click Trust Center Settings.</li> <li>Click ActiveX Settings in the left-hand pane, and then select Disable all controls without notifications.</li> <li>Click OK to save your settings. <strong>Impact of workaround</strong>. Office documents that use embedded ActiveX controls may not display as intended. <strong>How to undo the workaround</strong>.</li> </ol> <p>To re-enable ActiveX controls in Microsoft Office 2007 and Microsoft Office 2010, perform the following steps:</p> <ol> <li>Click File, click Options, click Trust Center, and then click Trust Center Settings.</li> <li>Click ActiveX Settings in the left-hand pane, and then deselect Disable all controls without notifications.</li> <li>Click OK to save your settings. <strong>Set Internet and Local intranet security zone settings to &quot;High&quot; to block ActiveX Controls and Active Scripting in these zones</strong> You can help protect against exploitation of these vulnerabilities by changing your settings for the Internet security zone to block ActiveX controls and Active Scripting. You can do this by setting your browser security to High.</li> </ol> <p>To raise the browsing security level in Internet Explorer, perform the following steps:</p> <ol> <li>On the Internet Explorer <strong>Tools</strong> menu, click** Internet Option**s.</li> <li>In the <strong>Internet Options</strong> dialog box, click the <strong>Security</strong> tab, and then click <strong>Internet</strong>.</li> <li>Under <strong>Security level for this zone</strong>, move the slider to <strong>High</strong>. This sets the security level for all websites you visit to High.</li> <li>Click <strong>Local intranet</strong>.</li> <li>Under <strong>Security level for this zone</strong>, move the slider to <strong>High</strong>. This sets the security level for all websites you visit to High.</li> <li>Click <strong>OK</strong> to accept the changes and return to Internet Explorer. <strong>Note</strong> If no slider is visible, click <strong>Default Level</strong>, and then move the slider to <strong>High</strong>. <strong>Note</strong> Setting the level to High may cause some websites to work incorrectly. If you have difficulty using a website after you change this setting, and you are sure the site is safe to use, you can add that site to your list of trusted sites. This will allow the site to work correctly even with the security setting set to High. <strong>Impact of workaround</strong>. There are side effects to blocking ActiveX Controls and Active Scripting. Many websites on the Internet or an intranet use ActiveX or Active Scripting to provide additional functionality. For example, an online e-commerce site or banking site may use ActiveX Controls to provide menus, ordering forms, or even account statements. Blocking ActiveX Controls or Active Scripting is a global setting that affects all Internet and intranet sites. If you do not want to block ActiveX Controls or Active Scripting for such sites, use the steps outlined in &quot;Add sites that you trust to the Internet Explorer Trusted sites zone&quot;. <strong>Configure Internet Explorer to prompt before running Active Scripting or to disable Active Scripting in the Internet and Local intranet security zone</strong></li> </ol> <p>You can help protect against exploitation of these vulnerabilities by changing your settings to prompt before running Active Scripting or to disable Active Scripting in the Internet and Local intranet security zone. To do this, perform the following steps:</p> <ol> <li>In Internet Explorer, click <strong>Internet Options</strong> on the <strong>Tools</strong> menu.</li> <li>Click the <strong>Security</strong> tab.</li> <li>Click <strong>Internet</strong>, and then click <strong>Custom Level</strong>.</li> <li>Under <strong>Settings</strong>, in the <strong>Scripting</strong> section, under <strong>Active Scripting</strong>, click <strong>Prompt</strong> or <strong>Disable</strong>, and then click <strong>OK</strong>.</li> <li>Click <strong>Local intranet</strong>, and then click <strong>Custom Level</strong>.</li> <li>Under <strong>Settings</strong>, in the <strong>Scripting</strong> section, under <strong>Active Scripting</strong>, click <strong>Prompt</strong> or <strong>Disable</strong>, and then click <strong>OK</strong>.</li> <li>Click <strong>OK</strong> to return to Internet Explorer, and then click <strong>OK</strong> again. <strong>Note</strong> Disabling Active Scripting in the Internet and Local intranet security zones may cause some websites to work incorrectly. If you have difficulty using a website after you change this setting, and you are sure the site is safe to use, you can add that site to your list of trusted sites. This will allow the site to work correctly. <strong>Impact of workaround</strong>. There are side effects to prompting before running Active Scripting. Many websites that are on the Internet or on an intranet use Active Scripting to provide additional functionality. For example, an online e-commerce site or banking site may use Active Scripting to provide menus, ordering forms, or even account statements. Prompting before running Active Scripting is a global setting that affects all Internet and intranet sites. You will be prompted frequently when you enable this workaround. For each prompt, if you feel you trust the site that you are visiting, click <strong>Yes</strong> to run Active Scripting. If you do not want to be prompted for all these sites, use the steps outlined in &quot;Add sites that you trust to the Internet Explorer Trusted sites zone&quot;. <strong>Add sites that you trust to the Internet Explorer Trusted sites zone</strong> After you set Internet Explorer to require a prompt before it runs ActiveX controls and Active Scripting in the Internet zone and in the Local intranet zone, you can add sites that you trust to the Internet Explorer Trusted sites zone. This will allow you to continue to use trusted websites exactly as you do today, while helping to protect you from this attack on untrusted sites. We recommend that you add only sites that you trust to the Trusted sites zone.</li> </ol> <p>To do this, perform the following steps:</p> <ol> <li>In Internet Explorer, click <strong>Tools</strong>, click <strong>Internet Options</strong>, and then click the <strong>Security</strong> tab.</li> <li>In the <strong>Select a web content zone to specify its current security settings</strong> box, click <strong>Trusted Sites</strong>, and then click <strong>Sites</strong>.</li> <li>If you want to add sites that do not require an encrypted channel, click to clear the <strong>Require server verification (https:) for all sites in this zone</strong> check box.</li> <li>In the <strong>Add this website to the zone</strong> box, type the URL of a site that you trust, and then click <strong>Add</strong>.</li> <li>Repeat these steps for each site that you want to add to the zone.</li> <li>Click <strong>OK</strong> two times to accept the changes and return to Internet Explorer. <strong>Note</strong> Add any sites that you trust not to take malicious action on your system. Two sites in particular that you may want to add are *<strong>.windowsupdate.microsoft.com</strong> and *<strong>.update.microsoft.com</strong>. These are the sites that will host the update, and they require an ActiveX control to install the update.</li> </ol> <p>The following <a href="https://technet.microsoft.com/library/security/dn848375.aspx#Mitigation">mitigating factors</a> may be helpful in your situation:</p> <ul> <li>In a web-based attack scenario where the user is using Internet Explorer for the desktop, an attacker could host a website that contains a webpage that is used to exploit any of these vulnerabilities. In addition, compromised websites and websites that accept or host user-provided content or advertisements could contain specially crafted content that could exploit any of these vulnerabilities. In all cases, however, an attacker would have no way to force users to visit these websites. Instead, an attacker would have to convince users to visit the website, typically by getting them to click a link in an email message or instant message that takes users to the attacker's website.</li> <li>Internet Explorer in the Windows 8-style UI will only play Flash content from sites listed on the Compatibility View (CV) list. This restriction requires an attacker to first compromise a website already listed on the CV list. An attacker could then host specially crafted Flash content designed to exploit any of these vulnerabilities through Internet Explorer and then convince a user to view the website. An attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically by clicking a link in an email message or in an instant message that takes users to the attacker's website, or by opening an attachment sent through email.</li> <li>By default, all supported versions of Microsoft Outlook and Windows Live Mail open HTML email messages in the Restricted sites zone. The Restricted sites zone, which disables scripts and ActiveX controls, helps reduce the risk of an attacker being able to use any of these vulnerabilities to execute malicious code. If a user clicks a link in an email message, the user could still be vulnerable to exploitation of any of these vulnerabilities through the web-based attack scenario.</li> <li>By default, Internet Explorer on Windows Server 2012 and Windows Server 2012 R2 runs in a restricted mode that is known as <a href="https://technet.microsoft.com/library/dd883248.aspx">Enhanced Security Configuration</a>. This mode can help reduce the likelihood of the exploitation of these Adobe Flash Player vulnerabilities in Internet Explorer.</li> </ul> 1.0 2017-03-14T07:00:00 <p>Information published.</p> 1.1 2017-04-12T07:00:00 <p>Changed identifier to reduce confusion with CVE IDs. This is an informational change only.</p> Internet Explorer Elevation of Privilege Vulnerability <p>An elevation of privilege vulnerability exists when Internet Explorer does not properly enforce cross-domain policies, which could allow an attacker to access information from one domain and inject it into another domain.</p> <p>In a web-based attack scenario, an attacker could host a website that is used to attempt to exploit the vulnerability. In addition, compromised websites and websites that accept or host user-provided content could contain specially crafted content that could exploit the vulnerability. In all cases, however, an attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action. For example, an attacker could trick users into clicking a link that takes them to the attacker's site. An attacker who successfully exploited this vulnerability could elevate privileges in affected versions of Internet Explorer.</p> <p>The vulnerability by itself does not allow arbitrary code to be run. However, the vulnerability could be used in conjunction with another vulnerability (for example, a remote code execution vulnerability) that could take advantage of the elevated privileges when running arbitrary code. For example, an attacker could exploit another vulnerability to run arbitrary code through Internet Explorer, but due to the context in which processes are launched by Internet Explorer, the code might be restricted to run at a low integrity level (very limited permissions). However, an attacker could, in turn, exploit this vulnerability to cause the arbitrary code to run at a medium integrity level (permissions of the current user).</p> <p>The update addresses the vulnerability by helping to ensure that cross-domain policies are properly enforced in Internet Explorer.</p> Internet Explorer Microsoft Yes CVE-2017-0154 10486-10789 10486-10788 10486-10852 10486-10853 10486-10816 Information Disclosure 10486-10789 Information Disclosure 10486-10788 Information Disclosure 10486-10852 Information Disclosure 10486-10853 Information Disclosure 10486-10816 Important 10486-10789 Important 10486-10788 Important 10486-10852 Important 10486-10853 Important 10486-10816 Publicly Disclosed:Yes;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A 5.4 4.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10486-10789 5.4 4.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10486-10788 5.4 4.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10486-10852 5.4 4.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10486-10853 3.5 3.2 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10486-10816 4013198 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013198 3210721 10486-10789 10486-10788 Yes Security Update https://support.microsoft.com/en-us/kb/4013198 10486-10789 10486-10788 4013198 4013429 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013429 3213986 10486-10852 10486-10853 10486-10816 Yes Security Update https://support.microsoft.com/en-us/kb/4013429 10486-10852 10486-10853 10486-10816 4013429 1.0 2017-03-14T07:00:00 <p>Information published.</p> Internet Explorer Information Disclosure Vulnerability <p>An information disclosure vulnerability exists when Internet Explorer does not properly handle JavaScript. The vulnerability could allow an attacker to detect specific files on the user's computer.</p> <p>In a web-based attack scenario, an attacker could host a website used to attempt to exploit the vulnerability. In addition, compromised websites and websites that accept or host user-generated content could contain specially crafted content that could exploit the vulnerability. In all cases, however, an attacker would have no way to force a user to view the attacker-controlled content. Instead, an attacker would have to convince users to take action. For example, an attacker could trick users into clicking a link that takes them to the attacker's site.</p> <p>An attacker who successfully exploited the vulnerability could potentially read data that was not intended to be disclosed. Note that the vulnerability would not allow an attacker to execute code or to elevate a user’s rights directly, but the vulnerability could be used to obtain information in an attempt to further compromise the affected system.</p> <p>The security update addresses the vulnerability by helping to restrict what information is returned to Internet Explorer.</p> Internet Explorer Microsoft Yes CVE-2017-0049 10486-10816 10486-10481 10486-10482 10486-10483 10486-10484 10486-10047 10486-10048 10486-10051 10486-10729 10486-10735 10486-10789 10486-10788 10486-10852 10486-10853 Information Disclosure 10486-10816 Information Disclosure 10486-10481 Information Disclosure 10486-10482 Information Disclosure 10486-10483 Information Disclosure 10486-10484 Information Disclosure 10486-10047 Information Disclosure 10486-10048 Information Disclosure 10486-10051 Information Disclosure 10486-10729 Information Disclosure 10486-10735 Information Disclosure 10486-10789 Information Disclosure 10486-10788 Information Disclosure 10486-10852 Information Disclosure 10486-10853 Low 10486-10816 Important 10486-10481 Important 10486-10482 Low 10486-10483 Important 10486-10484 Important 10486-10047 Important 10486-10048 Low 10486-10051 Important 10486-10729 Important 10486-10735 Important 10486-10789 Important 10486-10788 Important 10486-10852 Important 10486-10853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A 2.4 2.2 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10486-10816 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10486-10481 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10486-10482 2.4 2.2 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10486-10483 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10486-10484 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10486-10047 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10486-10048 2.4 2.2 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10486-10051 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10486-10729 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10486-10735 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10486-10789 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10486-10788 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10486-10852 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10486-10853 4013429 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013429 3213986 10486-10816 10486-10852 10486-10853 Yes Security Update https://support.microsoft.com/en-us/kb/4013429 10486-10816 10486-10852 10486-10853 4013429 4012216 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012216 3205401 10486-10481 10486-10482 10486-10483 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012216 10486-10481 10486-10482 10486-10483 4012216 4012204 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012204 3203621 10486-10481 10486-10482 10486-10483 10486-10047 10486-10048 10486-10051 Yes IE Cumulative https://support.microsoft.com/en-us/kb/4012204 10486-10481 10486-10482 10486-10483 10486-10047 10486-10048 10486-10051 4012204 4012216 3205401 10486-10484 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012216 10486-10484 4012216 4012215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012215 3212646 10486-10047 10486-10048 10486-10051 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012215 10486-10047 10486-10048 10486-10051 4012215 4012606 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012606 3210720 10486-10729 10486-10735 Yes Security Update https://support.microsoft.com/en-us/kb/4012606 10486-10729 10486-10735 4012606 4013198 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4013198 3210721 10486-10789 10486-10788 Yes Security Update https://support.microsoft.com/en-us/kb/4013198 10486-10789 10486-10788 4013198 Scott Bell of Security-Assessment.com 1.0 2017-03-14T07:00:00 <p>Information published.</p> Windows DVD Maker XML External Entity Information Disclosure Vulnerability <p>An information disclosure vulnerability exists in Windows when Windows DVD Maker fails to properly parse a specially crafted .msdvd file. An attacker who successfully exploited the vulnerability could obtain information to further compromise a target system.</p> <p>To exploit the vulnerability, an attacker would have to either log on locally to an affected system or convince a locally authenticated user to execute a specially crafted application.</p> <p>The security update addresses the vulnerability by correcting how Windows DVD Maker parses files.</p> Windows DVD Maker Microsoft Yes CVE-2017-0045 10047 10048 4393 9316 Information Disclosure 10047 Information Disclosure 10048 Information Disclosure 4393 Information Disclosure 9316 Important 10047 Important 10048 Important 4393 Important 9316 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A;Older Software Release:Exploitation Unlikely;DOS:N/A 5.6 5.1 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:N/E:P/RL:O/RC:C 10047 5.6 5.1 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:N/E:P/RL:O/RC:C 10048 5.6 5.1 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:N/E:P/RL:O/RC:C 4393 5.6 5.1 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:N/E:P/RL:O/RC:C 9316 4012215 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012215 3212646 10047 10048 Yes Monthly Rollup https://support.microsoft.com/en-us/help/4012215 10047 10048 4012215 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10047 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;custerr.dll;vmswitch.sys;msxml3.dll;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10047 4012212 4012212 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4012212 10048 srv.sys;lang;imjppdmg.exe;quartz.dll;win32k.sys;gdiplus.dll;icm32.dll;gdi32.dll;usp10.dll;dwrite.dll;fntcache.dll;ntkrnlmp.exe;ntkrpamp.exe;msxml3.dll;custerr.dll;vmswitch.sys;dvdmaker.exe;helppane.exe 0001-01-01T00:00:00 Yes Security Only https://support.microsoft.com/en-us/help/4012212 10048 4012212 3205715 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3205715 4393 9316 dvdmaker.exe 0001-01-01T00:00:00 Yes Security Update https://support.microsoft.com/en-us/kb/3205715 4393 9316 3205715 John Page (<a href="http://hyp3rlinx.altervista.org">hyp3rlinx</a>), ApparitionSec 1.0 2017-03-14T07:00:00 <p>Information published.</p> 1.1 2025-05-13T07:00:00 <p>Corrected CVE title. This is an informational change only.</p>