Microsoft · Security update · May 9, 2017

KB4018466: May 2017 security update

KB4018466, released May 9, 2017, fixes 14 CVEs across 5 products. None of them is reported as exploited. Patch Radar priority: Urgent. The product is no longer supported.

UrgentUnsupported product
CVEs closed
14
4 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Microsoft's assessment
Highest EPSS
0.1712
97th percentile

Priority of the 14 CVEs

Patch now 0 Urgent 4 High 10 Routine 0

Applies to

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Urgent CVE-2017-0272 Windows SMB ServerRemote Code Execution8.1 0.1712 Exploitation Less Likely
Urgent CVE-2017-0277 Windows SMB ServerRemote Code Execution7.0 0.1085 Exploitation Less Likely
Urgent CVE-2017-0278 Windows SMB ServerRemote Code Execution7.0 0.1085 Exploitation Less Likely
Urgent CVE-2017-0279 Windows SMB ServerRemote Code Execution7.0 0.1085 Exploitation Less Likely
High CVE-2017-0271 Windows SMB ServerInformation Disclosure7.0 0.1327 Exploitation Less Likely
High CVE-2017-0267 Windows SMB ServerInformation Disclosure7.0 0.1268 Exploitation Less Likely
High CVE-2017-0275 Windows SMB ServerInformation Disclosure7.0 0.0761 Exploitation Less Likely
High CVE-2017-0268 Windows SMB ServerInformation Disclosure7.0 0.0724 Exploitation Less Likely
High CVE-2017-0270 Windows SMB ServerInformation Disclosure7.0 0.0724 Exploitation Less Likely
High CVE-2017-0276 Windows SMB ServerInformation Disclosure7.0 0.0724 Exploitation Less Likely
High CVE-2017-0280 Windows SMB ServerDenial of Service7.0 0.0717 Exploitation Less Likely
High CVE-2017-0274 Windows SMB ServerInformation Disclosure7.0 0.0704 Exploitation Less Likely
High CVE-2017-0269 Windows SMB ServerDenial of Service7.0 0.0647 Exploitation Less Likely
High CVE-2017-0273 Windows SMB ServerDenial of Service8.1 0.0609 Exploitation Less Likely
Showing 1 to 14 of 14 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.