********************************************************************

Title: Microsoft Security Bulletin Releases

Issued: April 11, 2017

********************************************************************

Summary

=======

The following bulletins have undergone a major revision increment.

* MS16-037 – Critical

* MS17-013 – Critical

* MS17-014 – Important

* MS17-021 – Important

* MS16-APR

* MS17-MAR

Bulletin Information:

=====================

MS16-037

– Title: Cumulative Security Update for Internet Explorer (3148531)

– https://technet.microsoft.com/library/security/ms16-037.aspx

– Reason for Revision: Bulletin revised to announce the release

of a new Internet Explorer cumulative update (4014661) for

CVE-2016-0162. The update adds to the original release to

comprehensively address CVE-2016-0162. Microsoft recommends that

customers running the affected software install the security

update to be fully protected from the vulnerability described

in this bulletin. See Microsoft Knowledge Base Article 4014661

for more information.

– Originally posted: April 12, 2016

– Updated: April 11, 2017

– Bulletin Severity Rating: Critical

– Version: 2.0

MS17-013

– Title: Security Update for Microsoft Graphics Component (4013075)

– https://technet.microsoft.com/library/security/ms17-013.aspx

– Reason for Revision: Bulletin revised to announce the release of

update 4017018 for Windows Vista and Windows Server 2008. The

update replaces update 4012583 for CVE-2017-0038 only, to

comprehensively address the vulnerability. Microsoft recommends

that customers running the affected software install the security

update to be fully protected from the vulnerability described in

this bulletin. See Microsoft Knowledge Base Article 4017018 for

more information.

– Originally posted: March 14, 2017

– Updated: April 11, 2017

– Bulletin Severity Rating: Critical

– Version: 2.0

MS17-014

– Title: Security Update for Microsoft Office (4013241)

– https://technet.microsoft.com/library/security/ms17-014.aspx

– Reason for Revision: To comprehensively address CVE-2017-0027 for

Office for Mac 2011 only, Microsoft is releasing security update

3212218. Microsoft recommends that customers running Office for

Mac 2011 install update 3212218 to be fully protected from this

vulnerability. See Microsoft Knowledge Base Article 3212218 for

more information.

– Originally posted: March 14, 2017

– Updated: April 11, 2017

– Bulletin Severity Rating: Important

– Version: 2.0

MS17-021

– Title: Security Update for Windows DirectShow (4010318)

– https://technet.microsoft.com/library/security/ms17-021.aspx

– Reason for Revision: Bulletin revised to announce that the security

updates that apply to CVE-2017-0042 for Windows Server 2012 are now

available. Customers running Windows Server 2012 should install

update 4015548 (Security Only) or 4015551 (Monthly Rollup) to be

fully protected from this vulnerability. Customers running other

versions of Microsoft Windows do not need to take any further

action.

– Originally posted: March 14, 2017

– Updated: April 11, 2017

– Bulletin Severity Rating: Important

– Version: 2.0

MS16-APR

– Title: Microsoft Security Bulletin Summary for April 2016

– https://technet.microsoft.com/library/security/ms16-apr.aspx

– Reason for Revision: V3.0 (April 11, 2016): For MS16-037,

Bulletin Summary revised to announce the release of a new

Internet Explorer cumulative update (4014661) for CVE-2016-0162.

The update adds to the original release to comprehensively address

CVE-2016-0162. Microsoft recommends that customers running the

affected software install the security update to be fully protected

from the vulnerability described in this bulletin. See Microsoft

Knowledge Base Article 4014661 for more information.

– Originally posted: April 12, 2016

– Updated: April 11, 2016

– Bulletin Severity Rating: Not applicable

– Version: 3.0

MS17-MAR

– Title: Microsoft Security Bulletin Summary for March 2017

– https://technet.microsoft.com/library/security/ms17-mar.aspx

– Reason for Revision: V2.0 (April 11, 2016): For MS17-013,

Bulletin Summary revised to announce the release of update 4017018

for Windows Vista and Windows Server 2008. The update replaces

update 4012583 for CVE-2017-0038 only, to comprehensively address

the vulnerability. Microsoft recommends that customers running the

affected software install the security update to be fully protected

from the vulnerability described in this bulletin. See Microsoft

Knowledge Base Article 4017018 for more information.

For MS17-014, to comprehensively address CVE-2017-0027 for Office for

Mac 2011 only, Microsoft is releasing security update 3212218.

Microsoft recommends that customers running Office for Mac 2011

install update 3212218 to be fully protected from this vulnerability.

See Microsoft Knowledge Base Article 3212218 for more information.

For MS17-021, security updates that apply to CVE-2017-0042 for

Windows Server 2012 are now available. Customers running Windows Server

2012

should install update 4015548 (Security Only) or 4015551 (Monthly

Rollup)

to be fully protected from this vulnerability. Customers running other

versions of Microsoft Windows do not need to take any further action.

– Originally posted: March 14, 2017

– Updated: April 11, 2016

– Bulletin Severity Rating: Not applicable

– Version: 2.0

********************************************************************

Microsoft Security Update Summary for April 2017

Issued: April 11, 2017

********************************************************************

This summary lists security updates released for April 2017.

Complete information for the April 2017 security update release can Be found at <https://portal.msrc.microsoft.com/en-us/security-guidance>.

Critical Security Updates

============================

Critical Adobe Flash Player

Critical Internet Explorer 10

Critical Internet Explorer 11

Critical Internet Explorer 9

Critical Microsoft Edge

Critical Microsoft .NET Framework 2.0 Service Pack 2

Critical Microsoft .NET Framework 3.5

Critical Microsoft .NET Framework 3.5.1

Critical Microsoft .NET Framework 4.5.2

Critical Microsoft .NET Framework 4.6

Critical Microsoft .NET Framework 4.6.1

Critical Microsoft .NET Framework 4.6.2

Critical Microsoft .NET Framework 4.6/4.6.1

Critical Microsoft .NET Framework 4.7

Critical Microsoft Office 2007 Service Pack 3

Critical Microsoft Office 2010 Service Pack 2 (32-bit editions)

Critical Microsoft Office 2010 Service Pack 2 (64-bit editions)

Critical Microsoft Office 2013 RT Service Pack 1

Critical Microsoft Office 2013 Service Pack 1 (32-bit editions)

Critical Microsoft Office 2013 Service Pack 1 (64-bit editions)

Critical Microsoft Office 2016 (32-bit edition)

Critical Microsoft Office 2016 (64-bit edition)

Critical Microsoft Outlook 2007 Service Pack 3

Critical Microsoft Outlook 2010 Service Pack 2 (32-bit editions)

Critical Microsoft Outlook 2010 Service Pack 2 (64-bit editions)

Critical Microsoft Outlook 2013 Service Pack 1 (32-bit editions)

Critical Microsoft Outlook 2013 Service Pack 1 (64-bit editions)

Critical Microsoft Outlook 2016 (32-bit edition)

Critical Microsoft Outlook 2016 (64-bit edition)

Critical Microsoft Outlook for Mac 2011

Critical Windows 10 for 32-bit Systems

Critical Windows 10 for x64-based Systems

Critical Windows 10 Version 1511 for 32-bit Systems

Critical Windows 10 Version 1511 for x64-based Systems

Critical Windows 10 Version 1607 for 32-bit Systems

Critical Windows 10 Version 1607 for x64-based Systems

Critical Windows 10 Version 1703 for 32-bit Systems

Critical Windows 10 Version 1703 for x64-based Systems

Critical Windows 7 for 32-bit Systems Service Pack 1

Critical Windows 7 for x64-based Systems Service Pack 1

Critical Windows 8.1 for 32-bit systems

Critical Windows 8.1 for x64-based systems

Critical Windows RT 8.1

Critical Windows Server 2008 for 32-bit Systems Service Pack 2

Critical Windows Server 2008 for 32-bit Systems Service Pack 2

(Server Core installation)

Critical Windows Server 2008 for Itanium-Based Systems Service

Pack 2

Critical Windows Server 2008 for x64-based Systems Service

Pack 2

Critical Windows Server 2008 for x64-based Systems Service

Pack 2 (Server Core installation)

Critical Windows Server 2008 R2 for Itanium-Based Systems

Service Pack 1

Critical Windows Server 2008 R2 for x64-based Systems Service

Pack 1

Critical Windows Server 2008 R2 for x64-based Systems Service

Pack 1 (Server Core installation)

Critical Windows Server 2012

Critical Windows Server 2012 (Server Core installation)

Critical Windows Server 2012 R2

Critical Windows Server 2012 R2 (Server Core installation)

Critical Windows Server 2016

Critical Windows Server 2016 (Server Core installation)

Critical Windows Vista Service Pack 2

Critical Windows Vista x64 Edition Service Pack 2

Important Security Updates

============================

Important Microsoft Excel 2007 Service Pack 3

Important Microsoft Excel 2010 Service Pack 2 (32-bit editions)

Important Microsoft Excel 2010 Service Pack 2 (64-bit editions)

Important Microsoft Excel Web App 2010 Service Pack 2

Important Excel Services

Important Microsoft Office Compatibility Pack Service Pack 2

Important Microsoft Office Web Apps 2010 Service Pack 2

Important Microsoft Office Web Apps Server 2013 Service Pack 1

Important Office Online Server

Important Microsoft OneNote 2007 Service Pack 3

Important Microsoft OneNote 2010 Service Pack 2 (32-bit editions)

Important Microsoft OneNote 2010 Service Pack 2 (64-bit editions)

Important Microsoft Silverlight 5 Developer Runtime when installed

on Microsoft Windows (32-bit)

Important Microsoft Silverlight 5 Developer Runtime when installed

on Microsoft Windows (x64-based)

Important Microsoft Silverlight 5 when installed on Microsoft

Windows (32-bit)

Important Microsoft Silverlight 5 when installed on Microsoft

Windows (x64-based)

Important Mono Framework Version 4.8.1.0

Important Mono Framework Version 5.0.0.48