Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in

Microsoft Windows Multiple Vulnerabilities (KB4022715)

🗓️ 14 Jun 2017 00:00:00Reported by Copyright (C) 2017 Greenbone AGType 
openvas
 openvas🔗 plugins.openvas.org👁 566 Views

Microsoft Windows Multiple Vulnerabilities KB4022715, critical security update missing, multiple flaws in Microsoft browsers, Windows kernel, Secure Kernel Mode, GDI component, and scripting engines

Related
Refs
Code
ReporterTitlePublishedViews
Family
zdt
zdt		Microsoft Windows - win32k!NtGdiMakeFontDir Kernel Stack Memory Disclosure Exploit
28 Jun 201700:00
–zdt
zdt
zdt		Microsoft Windows - nt!NtQueryInformationProcess (ProcessVmCounters) Kernel Stack Memory Disclosure
28 Jun 201700:00
–zdt
zdt
zdt		Microsoft Windows - nt!NtQueryInformationJobObject (BasicLimitInformation, ExtendedLimitInformation)
28 Jun 201700:00
–zdt
zdt
zdt		Microsoft Windows - win32k!NtGdiGetRealizationInfo Kernel Stack Memory Disclosure Exploit
28 Jun 201700:00
–zdt
zdt
zdt		Microsoft Windows - win32k!NtGdiGetOutlineTextMetricsInternalW Kernel Stack Memory Disclosure Exploi
28 Jun 201700:00
–zdt
zdt
zdt		Microsoft Windows - win32k!NtGdiExtGetObjectW Kernel Stack Memory Disclosure Exploit
28 Jun 201700:00
–zdt
zdt
zdt		Microsoft Edge - CssParser::RecordProperty Type Confusion Exploit
28 Jun 201700:00
–zdt
zdt
zdt		Microsoft Windows - nt!NtQueryInformationWorkerFactory (WorkerFactoryBasicInformation) Kernel Stack
28 Jun 201700:00
–zdt
zdt
zdt		Microsoft Windows - Kernel ATMFD.DLL Out-of-Bounds Read due to Malformed Name INDEX in the CFF Table
28 Jun 201700:00
–zdt
zdt
zdt		Microsoft Windows - nt!NtQueryInformationResourceManager (information class 0) Kernel Stack Memory D
28 Jun 201700:00
–zdt
Rows per page
# SPDX-FileCopyrightText: 2017 Greenbone AG
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only

if(description)
{
  script_oid("1.3.6.1.4.1.25623.1.0.810903");
  script_version("2026-04-28T06:28:06+0000");
  script_xref(name:"CISA", value:"Known Exploited Vulnerability (KEV) catalog");
  script_xref(name:"URL", value:"https://www.cisa.gov/known-exploited-vulnerabilities-catalog");
  script_cve_id("CVE-2017-8470", "CVE-2017-8471", "CVE-2017-8522", "CVE-2017-8523",
                "CVE-2017-8524", "CVE-2017-0215", "CVE-2017-0216", "CVE-2017-0218",
                "CVE-2017-0219", "CVE-2017-0282", "CVE-2017-8475", "CVE-2017-8476",
                "CVE-2017-8529", "CVE-2017-8530", "CVE-2017-8531", "CVE-2017-0283",
                "CVE-2017-8477", "CVE-2017-8478", "CVE-2017-8532", "CVE-2017-8533",
                "CVE-2017-0284", "CVE-2017-0285", "CVE-2017-8479", "CVE-2017-8480",
                "CVE-2017-8481", "CVE-2017-8543", "CVE-2017-0287", "CVE-2017-0288",
                "CVE-2017-8482", "CVE-2017-8483", "CVE-2017-8544", "CVE-2017-8547",
                "CVE-2017-8548", "CVE-2017-8549", "CVE-2017-0289", "CVE-2017-0291",
                "CVE-2017-0292", "CVE-2017-8484", "CVE-2017-8485", "CVE-2017-8553",
                "CVE-2017-0294", "CVE-2017-0295", "CVE-2017-0296", "CVE-2017-8489",
                "CVE-2017-0297", "CVE-2017-0298", "CVE-2017-8490", "CVE-2017-8491",
                "CVE-2017-8492", "CVE-2017-0299", "CVE-2017-0300", "CVE-2017-8460",
                "CVE-2017-8493", "CVE-2017-8494", "CVE-2017-8496", "CVE-2017-8497",
                "CVE-2017-8498", "CVE-2017-8504", "CVE-2017-8462", "CVE-2017-8464",
                "CVE-2017-8465", "CVE-2017-8466", "CVE-2017-8468", "CVE-2017-8515",
                "CVE-2017-8517", "CVE-2017-0173", "CVE-2017-0193", "CVE-2017-8473",
                "CVE-2017-8474", "CVE-2017-8527", "CVE-2017-8554", "CVE-2017-8575",
                "CVE-2017-8576", "CVE-2017-8518");
  script_tag(name:"cvss_base", value:"10.0");
  script_tag(name:"cvss_base_vector", value:"AV:N/AC:L/Au:N/C:C/I:C/A:C");
  script_tag(name:"last_modification", value:"2026-04-28 06:28:06 +0000 (Tue, 28 Apr 2026)");
  script_tag(name:"severity_vector", value:"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H");
  script_tag(name:"severity_origin", value:"NVD");
  script_tag(name:"severity_date", value:"2025-04-04 20:28:18 +0000 (Fri, 04 Apr 2025)");
  script_tag(name:"creation_date", value:"2017-06-14 08:44:33 +0530 (Wed, 14 Jun 2017)");
  script_name("Microsoft Windows Multiple Vulnerabilities (KB4022715)");

  script_tag(name:"summary", value:"This host is missing a critical security
  update according to Microsoft KB4022715");

  script_tag(name:"vuldetect", value:"Checks if a vulnerable version is present on the target host.");

  script_tag(name:"insight", value:"Multiple flaws exist due to:

  - The way JavaScript engines render when handling objects in memory in
    Microsoft browsers.

  - The way the Microsoft Edge JavaScript scripting engine handles objects
    in memory.

  - Windows kernel improperly initializes objects in memory.

  - Windows improperly handles objects in memory.

  - Windows Search improperly handles objects in memory.

  - Windows Secure Kernel Mode fails to properly handle objects in memory.

  - Microsoft Edge Fetch API incorrectly handles a filtered response type.

  - Windows GDI component improperly discloses the contents of its memory.

  - Microsoft scripting engines do not properly handle objects in memory.

  - Microsoft Edge improperly accesses objects in memory.

    For more information please check the Reference URL.");

  script_tag(name:"impact", value:"Successful exploitation will allow
  attackers to execute arbitrary code in the context of the current user,
  obtain sensitive information to further compromise the user's system and to
  bypass security.");

  script_tag(name:"affected", value:"- Microsoft Windows 10 Version 1607 x32/x64

  - Microsoft Windows Server 2016");

  script_tag(name:"solution", value:"The vendor has released updates. Please see the references for more information.");

  script_tag(name:"solution_type", value:"VendorFix");
  script_tag(name:"qod_type", value:"executable_version");
  script_xref(name:"URL", value:"https://support.microsoft.com/en-us/help/4022715");
  script_xref(name:"URL", value:"http://www.securityfocus.com/bid/98848");
  script_xref(name:"URL", value:"http://www.securityfocus.com/bid/98849");
  script_xref(name:"URL", value:"http://www.securityfocus.com/bid/98926");
  script_xref(name:"URL", value:"http://www.securityfocus.com/bid/98928");
  script_xref(name:"URL", value:"http://www.securityfocus.com/bid/98930");
  script_xref(name:"URL", value:"http://www.securityfocus.com/bid/98879");
  script_xref(name:"URL", value:"http://www.securityfocus.com/bid/98896");
  script_xref(name:"URL", value:"http://www.securityfocus.com/bid/98897");
  script_xref(name:"URL", value:"http://www.securityfocus.com/bid/98898");
  script_xref(name:"URL", value:"http://www.securityfocus.com/bid/98885");
  script_xref(name:"URL", value:"http://www.securityfocus.com/bid/98853");
  script_xref(name:"URL", value:"http://www.securityfocus.com/bid/98903");
  script_xref(name:"URL", value:"http://www.securityfocus.com/bid/98953");
  script_xref(name:"URL", value:"http://www.securityfocus.com/bid/98863");
  script_xref(name:"URL", value:"http://www.securityfocus.com/bid/98819");
  script_xref(name:"URL", value:"http://www.securityfocus.com/bid/98920");
  script_xref(name:"URL", value:"http://www.securityfocus.com/bid/98854");
  script_xref(name:"URL", value:"http://www.securityfocus.com/bid/98845");
  script_xref(name:"URL", value:"http://www.securityfocus.com/bid/98820");
  script_xref(name:"URL", value:"http://www.securityfocus.com/bid/98821");
  script_xref(name:"URL", value:"http://www.securityfocus.com/bid/98918");
  script_xref(name:"URL", value:"http://www.securityfocus.com/bid/98914");
  script_xref(name:"URL", value:"http://www.securityfocus.com/bid/98856");
  script_xref(name:"URL", value:"http://www.securityfocus.com/bid/98857");
  script_xref(name:"URL", value:"http://www.securityfocus.com/bid/98862");
  script_xref(name:"URL", value:"http://www.securityfocus.com/bid/98824");
  script_xref(name:"URL", value:"http://www.securityfocus.com/bid/98922");
  script_xref(name:"URL", value:"http://www.securityfocus.com/bid/98923");
  script_xref(name:"URL", value:"http://www.securityfocus.com/bid/98858");
  script_xref(name:"URL", value:"http://www.securityfocus.com/bid/98859");
  script_xref(name:"URL", value:"http://www.securityfocus.com/bid/98826");
  script_xref(name:"URL", value:"http://www.securityfocus.com/bid/98932");
  script_xref(name:"URL", value:"http://www.securityfocus.com/bid/98954");
  script_xref(name:"URL", value:"http://www.securityfocus.com/bid/98955");
  script_xref(name:"URL", value:"http://www.securityfocus.com/bid/98929");
  script_xref(name:"URL", value:"http://www.securityfocus.com/bid/98835");
  script_xref(name:"URL", value:"http://www.securityfocus.com/bid/98836");
  script_xref(name:"URL", value:"http://www.securityfocus.com/bid/98847");
  script_xref(name:"URL", value:"http://www.securityfocus.com/bid/98860");
  script_xref(name:"URL", value:"http://www.securityfocus.com/bid/98940");
  script_xref(name:"URL", value:"http://www.securityfocus.com/bid/98837");
  script_xref(name:"URL", value:"http://www.securityfocus.com/bid/98904");
  script_xref(name:"URL", value:"http://www.securityfocus.com/bid/98839");
  script_xref(name:"URL", value:"http://www.securityfocus.com/bid/98865");
  script_xref(name:"URL", value:"http://www.securityfocus.com/bid/98840");
  script_xref(name:"URL", value:"http://www.securityfocus.com/bid/98867");
  script_xref(name:"URL", value:"http://www.securityfocus.com/bid/98869");
  script_xref(name:"URL", value:"http://www.securityfocus.com/bid/98870");
  script_xref(name:"URL", value:"http://www.securityfocus.com/bid/98884");
  script_xref(name:"URL", value:"http://www.securityfocus.com/bid/98901");
  script_xref(name:"URL", value:"http://www.securityfocus.com/bid/98887");
  script_xref(name:"URL", value:"http://www.securityfocus.com/bid/98850");
  script_xref(name:"URL", value:"http://www.securityfocus.com/bid/98855");
  script_xref(name:"URL", value:"http://www.securityfocus.com/bid/98880");
  script_xref(name:"URL", value:"http://www.securityfocus.com/bid/98882");
  script_xref(name:"URL", value:"http://www.securityfocus.com/bid/98886");
  script_xref(name:"URL", value:"http://www.securityfocus.com/bid/98892");
  script_xref(name:"URL", value:"http://www.securityfocus.com/bid/98900");
  script_xref(name:"URL", value:"http://www.securityfocus.com/bid/98818");
  script_xref(name:"URL", value:"http://www.securityfocus.com/bid/98843");
  script_xref(name:"URL", value:"http://www.securityfocus.com/bid/98844");
  script_xref(name:"URL", value:"http://www.securityfocus.com/bid/98846");
  script_xref(name:"URL", value:"http://www.securityfocus.com/bid/98833");
  script_xref(name:"URL", value:"http://www.securityfocus.com/bid/98895");
  script_xref(name:"URL", value:"http://www.securityfocus.com/bid/98873");
  script_xref(name:"URL", value:"http://www.securityfocus.com/bid/98878");
  script_xref(name:"URL", value:"http://www.securityfocus.com/bid/98852");
  script_xref(name:"URL", value:"http://www.securityfocus.com/bid/98902");
  script_xref(name:"URL", value:"http://www.securityfocus.com/bid/98933");
  script_category(ACT_GATHER_INFO);
  script_copyright("Copyright (C) 2017 Greenbone AG");
  script_family("Windows : Microsoft Bulletins");
  script_dependencies("smb_reg_service_pack.nasl");
  script_require_ports(139, 445);
  script_mandatory_keys("SMB/WindowsVersion");
  exit(0);
}

include("smb_nt.inc");
include("secpod_reg.inc");
include("version_func.inc");
include("secpod_smb_func.inc");

if(hotfix_check_sp(win10:1, win10x64:1, win2016:1) <= 0){
  exit(0);
}

sysPath = smb_get_system32root();
if(!sysPath ){
  exit(0);
}

edgeVer = fetch_file_version(sysPath:sysPath, file_name:"Edgehtml.dll");
if(!edgeVer){
  exit(0);
}

if(version_in_range(version:edgeVer, test_version:"11.0.14393.0", test_version2:"11.0.14393.1355"))
{
  report = 'File checked:     ' + sysPath + "\Edgehtml.dll" + '\n' +
           'File version:     ' + edgeVer  + '\n' +
           'Vulnerable range: 11.0.14393.0 - 11.0.14393.1355\n' ;
  security_message(data:report);
  exit(0);
}
exit(0);

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
28 Apr 2026 00:00Current
6.5Medium risk
Vulners AI Score6.5
CVSS 210
CVSS 38.8
CVSS 3.19.8
EPSS0.90026
SSVC
microsoft windowskb4022715security updateflawsmicrosoft browserswindows kernelsecure kernel modegdi componentscripting engines
566