# KB4012204: March 2017 security update

KB4012204, released March 14, 2017, fixes 11 CVEs across 11 products. 3 of them are being exploited (CVE-2017-0037); 3 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

- Web page: https://patchblox.com/security/fix/microsoft/kb4012204
- Platform: Microsoft
- Released: Mar 14, 2017
- Priority: Patch now (Closes CVE-2017-0037, exploited (CISA KEV))
- CVEs: 11, exploited: 3, on CISA KEV: 3
- Vendor advisory: https://support.microsoft.com/help/4012204

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [Internet Explorer 10 on Windows Server 2012](https://patchblox.com/security/data/product/microsoft/internet-explorer-10-on-windows-server-2012.md) |  |  |
| [Internet Explorer 11 on Windows 7 for 32-bit Systems Service Pack 1](https://patchblox.com/security/data/product/microsoft/internet-explorer-11-on-windows-7-for-32-bit-systems-service-pack-1.md) |  |  |
| [Internet Explorer 11 on Windows 7 for x64-based Systems Service Pack 1](https://patchblox.com/security/data/product/microsoft/internet-explorer-11-on-windows-7-for-x64-based-systems-service-pack-1.md) |  |  |
| [Internet Explorer 11 on Windows 8.1 for 32-bit systems](https://patchblox.com/security/data/product/microsoft/internet-explorer-11-on-windows-8.1-for-32-bit-systems.md) |  |  |
| [Internet Explorer 11 on Windows 8.1 for x64-based systems](https://patchblox.com/security/data/product/microsoft/internet-explorer-11-on-windows-8.1-for-x64-based-systems.md) |  |  |
| [Internet Explorer 11 on Windows Server 2008 R2 for x64-based Systems Service Pack 1](https://patchblox.com/security/data/product/microsoft/internet-explorer-11-on-windows-server-2008-r2-for-x64-based-systems-service-pack-1.md) |  |  |
| [Internet Explorer 11 on Windows Server 2012 R2](https://patchblox.com/security/data/product/microsoft/internet-explorer-11-on-windows-server-2012-r2.md) |  |  |
| [Internet Explorer 9 on Windows Server 2008 for 32-bit Systems Service Pack 2](https://patchblox.com/security/data/product/microsoft/internet-explorer-9-on-windows-server-2008-for-32-bit-systems-service-pack-2.md) |  |  |
| [Internet Explorer 9 on Windows Server 2008 for x64-based Systems Service Pack 2](https://patchblox.com/security/data/product/microsoft/internet-explorer-9-on-windows-server-2008-for-x64-based-systems-service-pack-2.md) |  |  |
| [Internet Explorer 9 on Windows Vista Service Pack 2](https://patchblox.com/security/data/product/microsoft/internet-explorer-9-on-windows-vista-service-pack-2.md) |  |  |
| [Internet Explorer 9 on Windows Vista x64 Edition Service Pack 2](https://patchblox.com/security/data/product/microsoft/internet-explorer-9-on-windows-vista-x64-edition-service-pack-2.md) |  |  |

## CVEs this fix closes

| CVE | Priority | Component | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2017-0037](https://patchblox.com/security/data/cve/CVE-2017-0037.md) | Patch now | Microsoft Browsers | 6.4 | 0.8039 | CISA KEV, Disclosed |
| [CVE-2017-0059](https://patchblox.com/security/data/cve/CVE-2017-0059.md) | Patch now | Internet Explorer | 2.4 | 0.6197 | CISA KEV |
| [CVE-2017-0149](https://patchblox.com/security/data/cve/CVE-2017-0149.md) | Patch now | Internet Explorer | 6.4 | 0.2849 | CISA KEV |
| [CVE-2017-0130](https://patchblox.com/security/data/cve/CVE-2017-0130.md) | Urgent | Internet Explorer | 7.5 | 0.2122 | More likely |
| [CVE-2017-0040](https://patchblox.com/security/data/cve/CVE-2017-0040.md) | Urgent | Internet Explorer | 6.4 | 0.1358 | Disclosed |
| [CVE-2017-0018](https://patchblox.com/security/data/cve/CVE-2017-0018.md) | Urgent | Internet Explorer | 6.4 | 0.1335 | More likely |
| [CVE-2017-0008](https://patchblox.com/security/data/cve/CVE-2017-0008.md) | Routine | Internet Explorer | 4.3 | 0.3932 | Disclosed |
| [CVE-2017-0049](https://patchblox.com/security/data/cve/CVE-2017-0049.md) | Routine | Internet Explorer | 2.4 | 0.3892 |  |
| [CVE-2017-0009](https://patchblox.com/security/data/cve/CVE-2017-0009.md) | Routine | Internet Explorer | 2.4 | 0.3646 |  |
| [CVE-2017-0033](https://patchblox.com/security/data/cve/CVE-2017-0033.md) | Routine | Microsoft Browsers | 2.4 | 0.0915 | Disclosed |
| [CVE-2017-0012](https://patchblox.com/security/data/cve/CVE-2017-0012.md) | Routine | Microsoft Browsers | 4.3 | 0.0858 | Disclosed |

---

Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo