Patch Tuesday, June 2017
Microsoft's monthly security release, Tuesday, June 13, 2017. Includes CVEs published within two days either side; Adobe and SAP ride the same day.
2 CVEs · 1 critical · 2 exploited · 2 with public exploit code
Microsoft only. Adobe and SAP are below. Exploited first, then public exploit code, then highest CVSS.
Microsoft
2 CVEs · 1 critical · 2 exploited · 2 with public exploit code
- 9.8CriticalJun 15, 2017Microsoft Windows Code / command injectionCVE-2017-8543Microsoft Windows allows an attacker to take control of the affected system when Windows Search fails to handle objects in memory.Exploited74% likelyExploit code
- 8.8HighJun 15, 2017Microsoft Windows Code / command injectionCVE-2017-8464Windows Shell in multiple versions of Microsoft Windows allows local users or remote attackers to execute arbitrary code via a crafted .LNK fileExploited90% likelyExploit codeExploit-DB · Metasploit
Adobe
No tracked Adobe CVEs in this window.
SAP
No tracked SAP CVEs in this window.
The release date follows Microsoft's usual schedule (second Tuesday). Chips show what Watch Floor knows: CISA KEV listing, public exploit code and published detection rules.