Microsoft Monthly Patches Address 0-Day Vulnerabilities

The patch addresses vulnerabilities found in internet Explorer and Edge - along with those discovered in Office, .NET Framework, Hyper-V, SMB and the core Windows Environment.

Three vulnerabilities have been identified as 0-day vulnerabilities which have been actively exploited in the wild. These include CVE-2017-0261, CVE-2017-0262, CVE-2017-0263.

CVE-2017-0261 is a remote code execution vulnerability found within Microsoft Office and relates to the way it handles Encapsulated PostScript(EPS). It was seen in a small number of targeted attacks throughout March along with the use of CVE-2017-0001, a privilege escalation vulnerability found within the Graphics Device Interface (GDI) that allowed an attacker to go from initial exploitation to complete system compromise in the same attack.

As well as the three vulnerabilities mentioned above, a further four have been identified as publicly known although no live exploitation has been observed. The four vulnerabilities consist of a critical rated remote code execution vulnerability in the Microsoft JavaScript Scripting Engine and three important vulnerabilities with a security feature bypass in Internet explorer, a spoofing vulnerability within Microsoft browser's Render SmartScreen Filter and an elevation of privilege vulnerability within Microsoft Edge.