May 2017 - Microsoft Releases Security Patches

Microsoft addresses several vulnerabilities in its May batch of patches:

• CVE-2017-0290 | Microsoft Malware Protection Engine Remote Code Execution Vulnerability
  Risk Rating: Critical
  
  This vulnerability allows attackers full access to a vulnerable system by exploiting Microsoft Malware Protection Engine's NScript component. It is a remote code execution vulnerability.



• CVE-2017-0158 | Scripting Engine Memory Corruption Vulnerability
  Risk Rating: Critical
  
  This vulnerability in the VBScript engine of specific Windows operating systems exists in the way it handles objects in Internet Explorer memory.



• CVE-2017-0261 | Microsoft Office Remote Code Execution Vulnerability
  Risk Rating: Important
  
  This recmote code execution vulnerability that exists in Microsoft Office in the way it handles malformed graphics image.



• CVE-2017-0262 | Microsoft Office Remote Code Execution Vulnerability
  Risk Rating: Important
  
  This recmote code execution vulnerability that exists in Microsoft Office in the way it handles malformed graphics image.



• CVE-2017-0064 | Internet Explorer Security Feature Bypass Vulnerability
  Risk Rating: Low
  
  This vulnerability exists in the way Internet Explorer allows bypass of Mixed Content warnings when loading unsecure content from HTTPS websites.



• CVE-2017-0222 | Internet Explorer Memory Corruption Vulnerability
  Risk Rating: Moderate
  
  This vulnerability exists in the way Internet Explorer may incorrectly access objects in memory. It is a remote code execution vulnerability.



• CVE-2017-0226 | Internet Explorer Memory Corruption Vulnerability
  Risk Rating: Important
  
  This vulnerability exists in the way Internet Explorer may incorrectly access objects in memory. It is a remote code execution vulnerability.



• CVE-2017-0228 | Scripting Engine Memory Corruption Vulnerability
  Risk Rating: Critical
  
  This remote code execution vulnerability exists in the JavaScript engine's rendering of objects in memory in Microsoft Edge and Internet Explorer 11 browsers. It is a remote code execution vulnerability.



• CVE-2017-0231 | Microsoft Browser Spoofing Vulnerability
  Risk Rating: Important
  
  This vulnerability exists in Internet Explorer 11 and Microsoft Edge browsers. The vulnerability lies in the rendering of SmartScreen Filter.



• CVE-2017-0238 | Scripting Engine Memory Corruption Vulnerability
  Risk Rating: Important
  
  This vulnerability exists in the Microsoft Edge browser's JavaScript scripting engine. The vulnerability lies in the way the engine handles objects in memory.