MS17-007: Cumulative Security Update for Microsoft Edge (4013071)
High Nessus Plugin ID 97730
SynopsisThe remote host has a web browser installed that is affected by multiple vulnerabilities.
DescriptionThe version of Microsoft Edge installed on the remote Windows host is missing Cumulative Security Update 4013071. It is, therefore, affected by multiple vulnerabilities, including remote code execution vulnerabilities. An unauthenticated, remote attacker can exploit these vulnerabilities by convincing a user to visit a specially crafted website, resulting in the execution of arbitrary code in the context of the current user.
Note that in order to be fully protected from CVE-2017-0071, Microsoft recommends the July 2017 security updates to be installed.
SolutionMicrosoft has released a set of patches for Windows 10 and Windows Server 2016.