Lucene search

K
mskbMicrosoftKB4015548
HistoryApr 11, 2017 - 7:00 a.m.

April 11, 2017—KB4015548 (Security-only update)

2017-04-1107:00:00
Microsoft
support.microsoft.com
20

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

7.6 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.975 High

EPSS

Percentile

100.0%

April 11, 2017—KB4015548 (Security-only update)

Improvements and fixes

This security update resolves security vulnerabilities in Scripting Engine, Hyper-V, Win32K, Adobe Type Manager Font Driver, Microsoft Outlook, Graphics component, Lightweight Directory Access Protocol and Windows OLE. For more information about the security vulnerabilities resolved, please refer to the Security Update Guide.

Known issues in this update

Microsoft is not currently aware of any issues with this update.

How to get this update

To get the stand-alone package for this update, go to the Microsoft Update Catalog website.

  • File information
    For a list of the files that are provided in this update, download the file information for update 4015548.
    NoteThe April update (KB4015548) mrxsmb.sys file version number is lesser than March update mrxsmb.sys (KB4012214). This is not an issue as the binary content of mrxsmb.sys is same in both these updates. Update|Mrxsmb.sys Version
    —|—
    March update KB4012214| 6.2.9200.22082
    April update KB4015548| 6.2.9200.22065

More Information

  • The security fixes that are listed in this Security-only Quality Update (KB4015548) are also included in the April 2017 Security Monthly Quality Rollup, KB4015551. Installing either update KB4015548 or KB4015551 installs the security fixes that are listed here.
  • This Security-only Quality Update does not include security fixes for Internet Explorer. In order to obtain the security fixes for Internet Explorer, the Cumulative Security Update for Internet Explorer KB4014661 should also be installed. Note that the Security Monthly Quality Rollup does contain security updates for Internet Explorer.
  • If you use update management processes other than Windows Update, and you automatically approve all security updates classifications for deployment, this April 2017 Security-only Quality Update (KB4015548), April 2017 Security Monthly Quality Rollup KB4015551, and the Cumulative Security Update for Internet Explorer KB4014661 are deployed. We recommend that you review your update deployment rules to make sure the desired updates are deployed.
  • This Security Only Quality Update is not applicable for installation on a computer on which the Security Monthly Quality Rollup or Preview of Monthly Quality Rollup from April 2017 (or a later month) is already installed. This is because those updates contain all of the security fixes that are included in this Security-only Quality Update.

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

7.6 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.975 High

EPSS

Percentile

100.0%