# KB4012212: March 2017 security update KB4012212, released March 14, 2017, fixes 67 CVEs across 10 products. 10 of them are being exploited (CVE-2017-0147); 10 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported. - Web page: https://patchblox.com/security/fix/microsoft/kb4012212 - Platform: Microsoft - Released: Mar 14, 2017 - Priority: Patch now (Closes CVE-2017-0147, exploited (CISA KEV, ransomware)) - CVEs: 67, exploited: 10, on CISA KEV: 10 - Vendor advisory: https://support.microsoft.com/help/4012212 ## Applies to | Product | Release | Fixed in | |---|---|---| | [Microsoft XML Core Services 3.0 on Windows 7 for 32-bit Systems Service Pack 1](https://patchblox.com/security/data/product/microsoft/microsoft-xml-core-services-3.0-on-windows-7-for-32-bit-systems-service-pack-1.md) | | | | [Microsoft XML Core Services 3.0 on Windows 7 for x64-based Systems Service Pack 1](https://patchblox.com/security/data/product/microsoft/microsoft-xml-core-services-3.0-on-windows-7-for-x64-based-systems-service-pack-1.md) | | | | [Microsoft XML Core Services 3.0 on Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1](https://patchblox.com/security/data/product/microsoft/microsoft-xml-core-services-3.0-on-windows-server-2008-r2-for-itanium-based-systems-service-pack-1.md) | | | | [Microsoft XML Core Services 3.0 on Windows Server 2008 R2 for x64-based Systems Service Pack 1](https://patchblox.com/security/data/product/microsoft/microsoft-xml-core-services-3.0-on-windows-server-2008-r2-for-x64-based-systems-service-pack-1.md) | | | | [Microsoft XML Core Services 3.0 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)](https://patchblox.com/security/data/product/microsoft/microsoft-xml-core-services-3.0-on-windows-server-2008-r2-for-x64-based-systems-service-pack-1-server-core-installation.md) | | | | [Windows 7 for 32-bit Systems Service Pack 1](https://patchblox.com/security/data/product/microsoft/windows-7-for-32-bit-systems-service-pack-1.md) | | | | [Windows 7 for x64-based Systems Service Pack 1](https://patchblox.com/security/data/product/microsoft/windows-7-for-x64-based-systems-service-pack-1.md) | | | | [Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1](https://patchblox.com/security/data/product/microsoft/windows-server-2008-r2-for-itanium-based-systems-service-pack-1.md) | | | | [Windows Server 2008 R2 for x64-based Systems Service Pack 1](https://patchblox.com/security/data/product/microsoft/windows-server-2008-r2-for-x64-based-systems-service-pack-1.md) | | | | [Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)](https://patchblox.com/security/data/product/microsoft/windows-server-2008-r2-for-x64-based-systems-service-pack-1-server-core-installation.md) | | | ## CVEs this fix closes | CVE | Priority | Component | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2017-0147](https://patchblox.com/security/data/cve/CVE-2017-0147.md) | Patch now | Windows SMB Server | 8.1 | 0.9969 | CISA KEV, Ransomware | | [CVE-2017-0148](https://patchblox.com/security/data/cve/CVE-2017-0148.md) | Patch now | Windows SMB Server | 8.1 | 0.9937 | CISA KEV, Ransomware | | [CVE-2017-0144](https://patchblox.com/security/data/cve/CVE-2017-0144.md) | Patch now | Windows SMB Server | 8.1 | 0.9923 | CISA KEV, Ransomware | | [CVE-2017-0143](https://patchblox.com/security/data/cve/CVE-2017-0143.md) | Patch now | Windows SMB Server | 8.1 | 0.9331 | CISA KEV, Ransomware | | [CVE-2017-0146](https://patchblox.com/security/data/cve/CVE-2017-0146.md) | Patch now | Windows SMB Server | 8.1 | 0.8986 | CISA KEV, Ransomware | | [CVE-2017-0145](https://patchblox.com/security/data/cve/CVE-2017-0145.md) | Patch now | Windows SMB Server | 8.1 | 0.8985 | CISA KEV, Ransomware | | [CVE-2017-0101](https://patchblox.com/security/data/cve/CVE-2017-0101.md) | Patch now | Microsoft Windows | 6.3 | 0.5748 | CISA KEV, Ransomware | | [CVE-2017-0022](https://patchblox.com/security/data/cve/CVE-2017-0022.md) | Patch now | Microsoft XML | 4.3 | 0.1807 | CISA KEV | | [CVE-2017-0005](https://patchblox.com/security/data/cve/CVE-2017-0005.md) | Patch now | Microsoft Graphics Component | 7.0 | 0.1102 | CISA KEV | | [CVE-2017-0001](https://patchblox.com/security/data/cve/CVE-2017-0001.md) | Patch now | Microsoft Graphics Component | 7.8 | 0.0311 | CISA KEV | | [CVE-2017-0089](https://patchblox.com/security/data/cve/CVE-2017-0089.md) | Urgent | Microsoft Uniscribe | 8.8 | 0.5827 | | | [CVE-2017-0108](https://patchblox.com/security/data/cve/CVE-2017-0108.md) | Urgent | Microsoft Graphics Component | 8.8 | 0.5047 | | | [CVE-2017-0072](https://patchblox.com/security/data/cve/CVE-2017-0072.md) | Urgent | Microsoft Uniscribe | 8.8 | 0.4348 | | | [CVE-2017-0083](https://patchblox.com/security/data/cve/CVE-2017-0083.md) | Urgent | Microsoft Uniscribe | 8.8 | 0.4348 | | | [CVE-2017-0086](https://patchblox.com/security/data/cve/CVE-2017-0086.md) | Urgent | Microsoft Uniscribe | 8.8 | 0.4348 | | | [CVE-2017-0087](https://patchblox.com/security/data/cve/CVE-2017-0087.md) | Urgent | Microsoft Uniscribe | 8.8 | 0.4348 | | | [CVE-2017-0090](https://patchblox.com/security/data/cve/CVE-2017-0090.md) | Urgent | Microsoft Uniscribe | 8.8 | 0.4348 | | | [CVE-2017-0088](https://patchblox.com/security/data/cve/CVE-2017-0088.md) | Urgent | Microsoft Uniscribe | 8.8 | 0.4280 | | | [CVE-2017-0130](https://patchblox.com/security/data/cve/CVE-2017-0130.md) | Urgent | Internet Explorer | 7.5 | 0.2122 | More likely | | [CVE-2017-0014](https://patchblox.com/security/data/cve/CVE-2017-0014.md) | Urgent | Microsoft Graphics Component | 6.4 | 0.1759 | Disclosed | | [CVE-2017-0104](https://patchblox.com/security/data/cve/CVE-2017-0104.md) | Urgent | Microsoft Windows | 8.1 | 0.1382 | | | [CVE-2017-0075](https://patchblox.com/security/data/cve/CVE-2017-0075.md) | Urgent | Windows Hyper-V | 7.6 | 0.1283 | | | [CVE-2017-0109](https://patchblox.com/security/data/cve/CVE-2017-0109.md) | Urgent | Windows Hyper-V | 7.6 | 0.0433 | | | [CVE-2017-0047](https://patchblox.com/security/data/cve/CVE-2017-0047.md) | Urgent | Microsoft Graphics Component | 7.8 | 0.0186 | More likely | | [CVE-2017-0025](https://patchblox.com/security/data/cve/CVE-2017-0025.md) | Urgent | Microsoft Graphics Component | 7.8 | 0.0184 | More likely | | [CVE-2017-0050](https://patchblox.com/security/data/cve/CVE-2017-0050.md) | Urgent | Windows Kernel | 7.1 | 0.0147 | Disclosed | | [CVE-2017-0056](https://patchblox.com/security/data/cve/CVE-2017-0056.md) | Urgent | Windows Kernel-Mode Drivers | 7.8 | 0.0139 | More likely | | [CVE-2017-0084](https://patchblox.com/security/data/cve/CVE-2017-0084.md) | High | Microsoft Uniscribe | 8.8 | 0.3766 | | | [CVE-2017-0039](https://patchblox.com/security/data/cve/CVE-2017-0039.md) | High | Windows DLL Loading | 7.8 | 0.3735 | | | [CVE-2017-0038](https://patchblox.com/security/data/cve/CVE-2017-0038.md) | Routine | Microsoft Graphics Component | 4.4 | 0.8223 | Disclosed | | [CVE-2017-0121](https://patchblox.com/security/data/cve/CVE-2017-0121.md) | Routine | Windows Uniscribe | 4.4 | 0.4358 | | | [CVE-2017-0061](https://patchblox.com/security/data/cve/CVE-2017-0061.md) | Routine | Microsoft Graphics Component | 4.7 | 0.4313 | | | [CVE-2017-0063](https://patchblox.com/security/data/cve/CVE-2017-0063.md) | Routine | Microsoft Graphics Component | 4.7 | 0.3528 | | | [CVE-2017-0073](https://patchblox.com/security/data/cve/CVE-2017-0073.md) | Routine | Microsoft Graphics Component | 4.4 | 0.3336 | | | [CVE-2017-0042](https://patchblox.com/security/data/cve/CVE-2017-0042.md) | Routine | Windows DirectShow | 3.7 | 0.2952 | | | [CVE-2017-0085](https://patchblox.com/security/data/cve/CVE-2017-0085.md) | Routine | Microsoft Uniscribe | 4.4 | 0.2325 | | | [CVE-2017-0091](https://patchblox.com/security/data/cve/CVE-2017-0091.md) | Routine | Microsoft Uniscribe | 4.4 | 0.2325 | | | [CVE-2017-0092](https://patchblox.com/security/data/cve/CVE-2017-0092.md) | Routine | Microsoft Uniscribe | 4.4 | 0.2325 | | | [CVE-2017-0111](https://patchblox.com/security/data/cve/CVE-2017-0111.md) | Routine | Windows Uniscribe | 4.4 | 0.2325 | | | [CVE-2017-0112](https://patchblox.com/security/data/cve/CVE-2017-0112.md) | Routine | Windows Uniscribe | 4.4 | 0.2325 | | | [CVE-2017-0113](https://patchblox.com/security/data/cve/CVE-2017-0113.md) | Routine | Windows Uniscribe | 4.4 | 0.2325 | | | [CVE-2017-0114](https://patchblox.com/security/data/cve/CVE-2017-0114.md) | Routine | Windows Uniscribe | 4.4 | 0.2325 | | | [CVE-2017-0115](https://patchblox.com/security/data/cve/CVE-2017-0115.md) | Routine | Windows Uniscribe | 4.4 | 0.2325 | | | [CVE-2017-0116](https://patchblox.com/security/data/cve/CVE-2017-0116.md) | Routine | Windows Uniscribe | 4.4 | 0.2325 | | | [CVE-2017-0117](https://patchblox.com/security/data/cve/CVE-2017-0117.md) | Routine | Windows Uniscribe | 4.4 | 0.2325 | | | [CVE-2017-0119](https://patchblox.com/security/data/cve/CVE-2017-0119.md) | Routine | Windows Uniscribe | 4.4 | 0.2325 | | | [CVE-2017-0122](https://patchblox.com/security/data/cve/CVE-2017-0122.md) | Routine | Windows Uniscribe | 4.4 | 0.2325 | | | [CVE-2017-0123](https://patchblox.com/security/data/cve/CVE-2017-0123.md) | Routine | Windows Uniscribe | 4.4 | 0.2325 | | | [CVE-2017-0124](https://patchblox.com/security/data/cve/CVE-2017-0124.md) | Routine | Windows Uniscribe | 4.4 | 0.2325 | | | [CVE-2017-0125](https://patchblox.com/security/data/cve/CVE-2017-0125.md) | Routine | Windows Uniscribe | 4.4 | 0.2325 | | | [CVE-2017-0126](https://patchblox.com/security/data/cve/CVE-2017-0126.md) | Routine | Windows Uniscribe | 4.4 | 0.2325 | | | [CVE-2017-0127](https://patchblox.com/security/data/cve/CVE-2017-0127.md) | Routine | Windows Uniscribe | 4.4 | 0.2325 | | | [CVE-2017-0128](https://patchblox.com/security/data/cve/CVE-2017-0128.md) | Routine | Windows Uniscribe | 4.4 | 0.2325 | | | [CVE-2017-0118](https://patchblox.com/security/data/cve/CVE-2017-0118.md) | Routine | Windows Uniscribe | 4.4 | 0.2295 | | | [CVE-2017-0120](https://patchblox.com/security/data/cve/CVE-2017-0120.md) | Routine | Windows Uniscribe | 4.4 | 0.2281 | | | [CVE-2017-0062](https://patchblox.com/security/data/cve/CVE-2017-0062.md) | Routine | Microsoft Graphics Component | 4.7 | 0.1783 | | | [CVE-2017-0055](https://patchblox.com/security/data/cve/CVE-2017-0055.md) | Routine | Windows IIS | 6.1 | 0.1637 | | | [CVE-2017-0060](https://patchblox.com/security/data/cve/CVE-2017-0060.md) | Routine | Microsoft Graphics Component | 4.7 | 0.1594 | | | [CVE-2017-0045](https://patchblox.com/security/data/cve/CVE-2017-0045.md) | Routine | Windows DVD Maker | 5.6 | 0.0658 | | | [CVE-2017-0100](https://patchblox.com/security/data/cve/CVE-2017-0100.md) | Routine | Microsoft Windows | 6.6 | 0.0500 | | | [CVE-2017-0103](https://patchblox.com/security/data/cve/CVE-2017-0103.md) | Routine | Windows Registry | 6.3 | 0.0294 | | | [CVE-2017-0096](https://patchblox.com/security/data/cve/CVE-2017-0096.md) | Routine | Windows Hyper-V | 2.6 | 0.0224 | | | [CVE-2017-0043](https://patchblox.com/security/data/cve/CVE-2017-0043.md) | Routine | Windows Active Directory | 4.8 | 0.0206 | | | [CVE-2017-0076](https://patchblox.com/security/data/cve/CVE-2017-0076.md) | Routine | Windows Hyper-V | 2.6 | 0.0161 | | | [CVE-2017-0099](https://patchblox.com/security/data/cve/CVE-2017-0099.md) | Routine | Windows Hyper-V | 5.4 | 0.0144 | | | [CVE-2017-0097](https://patchblox.com/security/data/cve/CVE-2017-0097.md) | Routine | Windows Hyper-V | 5.4 | 0.0139 | Disclosed | | [CVE-2017-0102](https://patchblox.com/security/data/cve/CVE-2017-0102.md) | Routine | Microsoft Windows | 6.3 | 0.0113 | | --- Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo