Microsoft Security Updates Coverage

SonicWall has analyzed and addressed August 2017 Microsoft Security Updates. A list of issues reported, along with SonicWall coverage information are as follows:

• CVE-2017-0174 Windows NetBIOS Denial of Service Vulnerability
  There are no known exploits in the wild.

• CVE-2017-0250 Microsoft JET Database Engine Remote Code Execution Vulnerability
  Anti-Spyware:1541 Malformed-File mdb.MP.1

• CVE-2017-0293 Windows PDF Remote Code Execution Vulnerability
  There are no known exploits in the wild.

• CVE-2017-8503 Microsoft Edge Elevation of Privilege Vulnerability
  There are no known exploits in the wild.

• CVE-2017-8516 Microsoft SQL Server Analysis Services Information Disclosure Vulnerability
  There are no known exploits in the wild.

• CVE-2017-8591 Windows IME Remote Code Execution Vulnerability
  There are no known exploits in the wild.

• CVE-2017-8593 Win32k Elevation of Privilege Vulnerability
  There are no known exploits in the wild.

• CVE-2017-8620 Windows Search Remote Code Execution Vulnerability
  There are no known exploits in the wild.

• CVE-2017-8622 Windows Subsystem for Linux Elevation of Privilege Vulnerability
  There are no known exploits in the wild.

• CVE-2017-8623 Windows Hyper-V Denial of Service Vulnerability
  There are no known exploits in the wild.

• CVE-2017-8624 Windows CLFS Elevation of Privilege Vulnerability
  There are no known exploits in the wild.

• CVE-2017-8625 Internet Explorer Security Feature Bypass Vulnerability
  There are no known exploits in the wild.

• CVE-2017-8627 Windows Subsystem for Linux Denial of Service Vulnerability
  There are no known exploits in the wild.

• CVE-2017-8633 Windows Error Reporting Elevation of Privilege Vulnerability
  There are no known exploits in the wild.

• CVE-2017-8634 Scripting Engine Memory Corruption Vulnerability
  There are no known exploits in the wild.

• CVE-2017-8635 Scripting Engine Memory Corruption Vulnerability
  There are no known exploits in the wild.

• CVE-2017-8636 Scripting Engine Memory Corruption Vulnerability
  There are no known exploits in the wild.

• CVE-2017-8637 Scripting Engine Security Feature Bypass Vulnerability
  There are no known exploits in the wild.

• CVE-2017-8638 Scripting Engine Memory Corruption Vulnerability
  There are no known exploits in the wild.

• CVE-2017-8639 Scripting Engine Memory Corruption Vulnerability
  There are no known exploits in the wild.

• CVE-2017-8640 Scripting Engine Memory Corruption Vulnerability
  There are no known exploits in the wild.

• CVE-2017-8641 Scripting Engine Memory Corruption Vulnerability
  There are no known exploits in the wild.

• CVE-2017-8642 Microsoft Edge Elevation of Privilege Vulnerability
  There are no known exploits in the wild.

• CVE-2017-8644 Microsoft Edge Information Disclosure Vulnerability
  There are no known exploits in the wild.

• CVE-2017-8645 Scripting Engine Memory Corruption Vulnerability
  There are no known exploits in the wild.

• CVE-2017-8646 Scripting Engine Memory Corruption Vulnerability
  There are no known exploits in the wild.

• CVE-2017-8647 Scripting Engine Memory Corruption Vulnerability
  There are no known exploits in the wild.

• CVE-2017-8650 Microsoft Edge Security Feature Bypass Vulnerability
  There are no known exploits in the wild.

• CVE-2017-8651 Internet Explorer Memory Corruption Vulnerability
  There are no known exploits in the wild.

• CVE-2017-8652 Microsoft Edge Information Disclosure Vulnerability
  There are no known exploits in the wild.

• CVE-2017-8653 Microsoft Browser Memory Corruption Vulnerability
  There are no known exploits in the wild.

• CVE-2017-8654 Microsoft Office SharePoint XSS Vulnerability
  There are no known exploits in the wild.

• CVE-2017-8655 Scripting Engine Memory Corruption Vulnerability
  There are no known exploits in the wild.

• CVE-2017-8656 Scripting Engine Memory Corruption Vulnerability
  There are no known exploits in the wild.

• CVE-2017-8657 Scripting Engine Memory Corruption Vulnerability
  There are no known exploits in the wild.

• CVE-2017-8659 Scripting Engine Information Disclosure Vulnerability
  There are no known exploits in the wild.

• CVE-2017-8661 Microsoft Edge Memory Corruption Vulnerability
  There are no known exploits in the wild.

• CVE-2017-8662 Microsoft Edge Information Disclosure Vulnerability
  There are no known exploits in the wild.

• CVE-2017-8664 Windows Hyper-V Remote Code Execution Vulnerability
  There are no known exploits in the wild.

• CVE-2017-8666 Win32k Information Disclosure Vulnerability
  There are no known exploits in the wild.

• CVE-2017-8668 Volume Manager Extension Driver Information Disclosure Vulnerability
  There are no known exploits in the wild.

• CVE-2017-8669 Microsoft Browser Memory Corruption Vulnerability
  There are no known exploits in the wild.

• CVE-2017-8670 Scripting Engine Memory Corruption Vulnerability
  There are no known exploits in the wild.

• CVE-2017-8671 Scripting Engine Memory Corruption Vulnerability
  There are no known exploits in the wild.

• CVE-2017-8672 Scripting Engine Memory Corruption Vulnerability
  There are no known exploits in the wild.

• CVE-2017-8673 Windows Remote Desktop Protocol Denial of Service Vulnerability
  There are no known exploits in the wild.

• CVE-2017-8674 Scripting Engine Memory Corruption Vulnerability
  There are no known exploits in the wild.

• CVE-2017-8691 Express Compressed Fonts Remote Code Execution Vulnerability
  There are no known exploits in the wild.

Security News

The SonicWall Capture Labs Threat Research Team gathers, analyzes and vets cross-vector threat information from the SonicWall Capture Threat network, consisting of global devices and resources, including more than 1 million security sensors in nearly 200 countries and territories. The research team identifies, analyzes, and mitigates critical vulnerabilities and malware daily through in-depth research, which drives protection for all SonicWall customers. In addition to safeguarding networks globally, the research team supports the larger threat intelligence community by releasing weekly deep technical analyses of the most critical threats to small businesses, providing critical knowledge that defenders need to protect their networks.