October 2017 Security Updates
| Description | MSFT Severity | |||
|---|---|---|---|---|
| CVE | Disclosed/Exploited | Exploitability (old/current) | Client Severity | Server Severity |
| Microsoft Office Remote Code Execution Vulnerability | Important | |||
| CVE 2017-11825 | No/No | ?/? | Critical | Important |
| Internet Explorer Memory Corruption Vulnerability | Critical | |||
| CVE 2017-11822 | No/No | More Likely/More Likely | Critical | Critical |
| CVE 2017-11813 | No/No | ?/? | ||
| Windows Subsystem for Linux Denial of Service Vulnerability | Important | |||
| CVE 2017-8703 | Yes/No | ?/? | Important | Important |
| Microsoft Edge Memory Corruption Vulnerability | Important | |||
| CVE 2017-8726 | No/No | ?/? | Important | Important |
| Microsoft Office Memory Corruption Vulnerability | Important | |||
| CVE 2017-11826 | Yes/Yes | More Likely/Detected | Patch Now | Important |
| Scripting Engine Memory Corruption Vulnerability | Critical | |||
| CVE 2017-11821 | No/No | ?/? | Critical | Critical |
| CVE 2017-11792 | No/No | ?/? | ||
| CVE 2017-11793 | No/No | More Likely/More Likely | ||
| CVE 2017-11796 | No/No | ?/? | ||
| CVE 2017-11798 | No/No | ?/? | ||
| CVE 2017-11799 | No/No | ?/? | ||
| CVE 2017-11800 | No/No | ?/? | ||
| CVE 2017-11801 | No/No | ?/? | ||
| CVE 2017-11802 | No/No | ?/? | ||
| CVE 2017-11804 | No/No | ?/? | ||
| CVE 2017-11805 | No/No | ?/? | ||
| CVE 2017-11806 | No/No | ?/? | ||
| CVE 2017-11807 | No/No | ?/? | ||
| CVE 2017-11808 | No/No | ?/? | ||
| CVE 2017-11809 | No/No | ?/? | ||
| CVE 2017-11810 | No/No | More Likely/More Likely | ||
| CVE 2017-11811 | No/No | ?/? | ||
| CVE 2017-11812 | No/No | ?/? | ||
| Microsoft Windows Security Feature Bypass | Important | |||
| CVE 2017-11823 | No/No | More Likely/More Likely | Important | Important |
| Windows SMB Information Disclosure Vulnerability | Important | |||
| CVE 2017-11815 | No/No | ?/? | Important | Important |
| Windows Shell Memory Corruption Vulnerability | Critical | |||
| CVE 2017-8727 | No/No | More Likely/More Likely | Critical | Critical |
| Windows Server 2008 Defense in Depth | ||||
| ADV170016 | No/No | Less Likely/Less Likely | ||
| Windows Information Disclosure Vulnerability | Important | |||
| CVE 2017-11817 | No/No | Less Likely/Less Likely | Important | Important |
| Internet Explorer Information Disclosure Vulnerability | Important | |||
| CVE 2017-11790 | No/No | Less Likely/Less Likely | Important | Important |
| Microsoft Office SharePoint XSS Vulnerability | Important | |||
| CVE 2017-11775 | No/No | Less Likely/Less Likely | N/A | Important |
| CVE 2017-11777 | Yes/No | Less Likely/Less Likely | ||
| CVE 2017-11820 | No/No | Less Likely/Less Likely | ||
| Windows Search Remote Code Execution Vulnerability | Critical | |||
| CVE 2017-11771 | No/No | More Likely/More Likely | Critical | Critical |
| Windows Shell Remote Code Execution Vulnerability | Critical | |||
| CVE 2017-11819 | No/No | ?/? | Critical | Critical |
| Microsoft Outlook Security Feature Bypass Vulnerability | Important | |||
| CVE 2017-11774 | No/No | Less Likely/Less Likely | Important | Important |
| Scripting Engine Information Disclosure Vulnerability | Critical | |||
| CVE 2017-11797 | No/No | ?/? | Critical | Critical |
| Windows SMB Elevation of Privilege Vulnerability | Important | |||
| CVE 2017-11782 | No/No | More Likely/More Likely | Important | Important |
| Windows Security Feature Bypass Vulnerability | Important | |||
| CVE 2017-8715 | No/No | More Likely/More Likely | Important | Important |
| Microsoft Graphics Information Disclosure Vulnerability | Important | |||
| CVE 2017-8693 | No/No | More Likely/More Likely | Important | Important |
| Windows Elevation of Privilege Vulnerability | Important | |||
| CVE 2017-11783 | No/No | More Likely/More Likely | Important | Important |
| Microsoft Search Information Disclosure Vulnerability | Important | |||
| CVE 2017-11772 | No/No | More Likely/More Likely | Important | Important |
| Microsoft Graphics Remote Code Execution Vulnerability | Critical | |||
| CVE 2017-11762 | No/No | More Likely/More Likely | Critical | Critical |
| CVE 2017-11763 | No/No | More Likely/More Likely | ||
| Microsoft Outlook Information Disclosure Vulnerability | Important | |||
| CVE 2017-11776 | No/No | Unlikely/Unlikely | Important | Important |
| Skype for Business Elevation of Privilege Vulnerability | Important | |||
| CVE 2017-11786 | No/No | Unlikely/Unlikely | Important | Important |
| Optional Windows NTLM SSO authentication changes | ||||
| ADV170014 | No/No | Less Likely/Less Likely | ||
| Microsoft Edge Information Disclosure Vulnerability | ||||
| CVE 2017-11794 | No/No | ?/? | ||
| Vulnerability in TPM could allow Security Feature Bypass | Critical | |||
| ADV170012 | No/No | Less Likely/Less Likely | Critical | Critical |
| Windows DNSAPI Remote Code Execution Vulnerability | Critical | |||
| CVE 2017-11779 | No/No | Less Likely/Less Likely | Critical | Critical |
| Win32k Elevation of Privilege Vulnerability | Important | |||
| CVE 2017-8689 | No/No | More Likely/More Likely | Important | Important |
| CVE 2017-8694 | No/No | More Likely/More Likely | ||
| Windows Graphics Component Elevation of Privilege Vulnerability | Important | |||
| CVE 2017-11824 | No/No | ?/? | Important | Important |
| Windows Kernel Information Disclosure Vulnerability | Important | |||
| CVE 2017-11765 | No/No | More Likely/More Likely | Important | Important |
| CVE 2017-11784 | No/No | Less Likely/Less Likely | ||
| CVE 2017-11785 | No/No | Less Likely/Less Likely | ||
| CVE 2017-11814 | No/No | More Likely/More Likely | ||
| Windows Update Delivery Optimization Elevation of Privilege Vulnerability | Important | |||
| CVE 2017-11829 | No/No | Less Likely/Less Likely | Important | Important |
| Windows SMB Remote Code Execution Vulnerability | Important | |||
| CVE 2017-11780 | No/No | More Likely/More Likely | Important | Important |
| Office Defense in Depth Update | None | |||
| ADV170017 | No/No | Less Likely/Less Likely | None | None |
| Windows GDI Information Disclosure Vulnerability | Important | |||
| CVE 2017-11816 | No/No | More Likely/More Likely | Important | Important |
| TRIE Remote Code Execution Vulnerability | Important | |||
| CVE 2017-11769 | No/No | Less Likely/Less Likely | Important | Important |
| Microsoft JET Database Engine Remote Code Execution Vulnerability | Important | |||
| CVE 2017-8717 | No/No | Less Likely/Less Likely | Important | Important |
| CVE 2017-8718 | No/No | Less Likely/Less Likely | ||
| Windows Storage Security Feature Bypass Vulnerability | Important | |||
| CVE 2017-11818 | No/No | Less Likely/Less Likely | Important | Important |
| Windows SMB Denial of Service Vulnerability | Important | |||
| CVE 2017-11781 | No/No | Unlikely/Unlikely | Important | Important |
Keywords:
2 comment(s)
If you have more information or corrections regarding our diary, please share.
