Lucene search

K
mskbMicrosoftKB4015549
HistoryApr 11, 2017 - 7:00 a.m.

April 11, 2017—KB4015549 (Monthly Rollup)

2017-04-1107:00:00
Microsoft
support.microsoft.com
55

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

7.7 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.975 High

EPSS

Percentile

100.0%

April 11, 2017—KB4015549 (Monthly Rollup)

Improvements and fixes

This security update includes improvements and fixes that were a part of update KB4012218 (released March 21, 2017), and also resolves the following:Security updates to Windows scripting engine, Hyper-V, libjpeg image-processing library, Adobe Type Manager Font Driver, Win32K, Microsoft Outlook, Internet Explorer, Graphics Component, Windows kernel-mode drivers, and Lightweight Directory Access Protocol.For more information about the security vulnerabilities resolved, please refer to the Security Update Guide.

Known issues in this update

Symptom Workaround / Resolution
If the PC uses an AMD Carrizo DDR4 processor, installing this update will block downloading and installing future Windows updates. This issue is resolved by KB4022719.

How to get this update

This update will be downloaded and installed automatically from Windows Update. To get the stand-alone package for this update, go to the Microsoft Update Catalog website.

More Information

  • The security fixes that are listed in the “Summary” section of Security Monthly Quality Rollup 4015549 are also included in April 2017 Security Only Quality Update 4015546, with the exception of security fixes for Internet Explorer, which are instead included in the Cumulative Security Update for Internet Explorer KB4014661. Installing either this March 2017 Security Monthly Quality Rollup or both the March 2017 Security-only Quality update and the Cumulative Security Update for Internet Explorer will install the security fixes that are listed here.
  • This Security Monthly Quality Rollup also includes improvements and fixes from previous monthly rollups. If you use update management processes other than Windows Update and you automatically approve all Security updates classifications for deployment, the April 2017 Security-only Quality Update 4015546, April 2017 Security Monthly Quality Rollup 4015549, and the Cumulative Security Update for Internet Explorer KB4014661 are deployed. We recommend that you review your update deployment rules to make sure that the desired updates are deployed.

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

7.7 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.975 High

EPSS

Percentile

100.0%