Microsoft Patch Tuesday August 2017, (Tue, Aug 8th)

When Microsoft changed its update process a few months ago, we were initially no longer able to quickly produce our usual assessment of Microsofts patches. Finally, I think we have a way to get at least some of it back, and this is our first take on it. Please let me know if I should change anything. I know a few people wrote scripts to parse the table. I would recommend that you use Microsofts own API to do so in the future. The layout of the table may change and screen-scraping is never a good idea.

What do the fields mean:

  • Description: Microsoft text-align:center”>Important Windows Subsystem for Linux Denial of Service Vulnerability text-align:center”>Yes/No ?/? text-align:center”>Critical Windows Subsystem for Linux Elevation of Privilege Vulnerability text-align:center”>No/No ?/? text-align:center”>No/No More Likely/More Likely text-align:center”>No/No More Likely/More Likely text-align:center”>No/No ?/? text-align:center”>No/No ?/? text-align:center”>No/No ?/? text-align:center”>No/No ?/? text-align:center”>No/No ?/? text-align:center”>No/No ?/? text-align:center”>No/No More Likely/More Likely text-align:center”>No/No ?/? text-align:center”>No/No ?/? text-align:center”>No/No ?/? text-align:center”>No/No ?/? text-align:center”>No/No ?/? text-align:center”>No/No ?/? text-align:center”>No/No ?/? text-align:center”>No/No More Likely/More Likely text-align:center”>No/No ?/? Microsoft Edge Information Disclosure Vulnerability text-align:center”>No/No ?/? text-align:center”>No/No ?/? text-align:center”>No/No ?/? text-align:center”>Critical Internet Explorer Memory Corruption Vulnerability text-align:center”>No/No ?/?


    Johannes B. Ullrich, Ph.D. , Dean of Research, SANS Technology Institute
    STI|Twitter|

    (c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.