MS17-007: Cumulative Security Update for Microsoft Edge (4013071)

high Nessus Plugin ID 97730


The remote host has a web browser installed that is affected by multiple vulnerabilities.


The version of Microsoft Edge installed on the remote Windows host is missing Cumulative Security Update 4013071. It is, therefore, affected by multiple vulnerabilities, including remote code execution vulnerabilities. An unauthenticated, remote attacker can exploit these vulnerabilities by convincing a user to visit a specially crafted website, resulting in the execution of arbitrary code in the context of the current user.

Note that in order to be fully protected from CVE-2017-0071, Microsoft recommends the July 2017 security updates to be installed.


Microsoft has released a set of patches for Windows 10 and Windows Server 2016.

See Also

Plugin Details

Severity: High

ID: 97730

File Name: smb_nt_ms17-007.nasl

Version: 1.16

Type: local

Agent: windows

Published: 3/14/2017

Updated: 3/29/2022

Risk Information


Risk Factor: Critical

Score: 9.2


Risk Factor: High

Base Score: 7.6

Temporal Score: 6.6

Vector: AV:N/AC:H/Au:N/C:C/I:C/A:C

Temporal Vector: E:H/RL:OF/RC:C

CVSS Score Source: CVE-2017-0151


Risk Factor: High

Base Score: 7.5

Temporal Score: 7.2

Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Temporal Vector: E:H/RL:O/RC:C

Vulnerability Information

CPE: cpe:/o:microsoft:windows, cpe:/a:microsoft:edge

Required KB Items: SMB/MS_Bulletin_Checks/Possible

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 3/14/2017

Vulnerability Publication Date: 3/14/2017

CISA Known Exploited Dates: 4/18/2022

Reference Information

CVE: CVE-2017-0009, CVE-2017-0010, CVE-2017-0011, CVE-2017-0012, CVE-2017-0015, CVE-2017-0017, CVE-2017-0023, CVE-2017-0032, CVE-2017-0033, CVE-2017-0034, CVE-2017-0035, CVE-2017-0037, CVE-2017-0065, CVE-2017-0066, CVE-2017-0067, CVE-2017-0068, CVE-2017-0069, CVE-2017-0070, CVE-2017-0071, CVE-2017-0094, CVE-2017-0131, CVE-2017-0132, CVE-2017-0133, CVE-2017-0134, CVE-2017-0135, CVE-2017-0136, CVE-2017-0137, CVE-2017-0138, CVE-2017-0140, CVE-2017-0141, CVE-2017-0150, CVE-2017-0151

BID: 96059, 96064, 96075, 96077, 96078, 96079, 96080, 96082, 96085, 96087, 96088, 96648, 96649, 96650, 96653, 96655, 96656, 96662, 96671, 96681, 96682, 96683, 96684, 96685, 96686, 96687, 96688, 96689, 96690, 96725, 96727, 96786

MSFT: MS17-007

MSKB: 4025338, 4025344, 4025339, 4025342