# KB4012217: March 2017 security update KB4012217, released March 14, 2017, fixes 45 CVEs across 5 products. 12 of them are being exploited (CVE-2017-0147); 12 on CISA KEV. Patch Radar priority: Patch now. - Web page: https://patchblox.com/security/fix/microsoft/kb4012217 - Platform: Microsoft - Released: Mar 14, 2017 - Priority: Patch now (Closes CVE-2017-0147, exploited (CISA KEV, ransomware)) - CVEs: 45, exploited: 12, on CISA KEV: 12 - Vendor advisory: https://support.microsoft.com/help/4012217 ## Applies to | Product | Release | Fixed in | |---|---|---| | [Internet Explorer 10 on Windows Server 2012](https://patchblox.com/security/data/product/microsoft/internet-explorer-10-on-windows-server-2012.md) | | | | [Microsoft XML Core Services 3.0 on Windows Server 2012](https://patchblox.com/security/data/product/microsoft/microsoft-xml-core-services-3.0-on-windows-server-2012.md) | | | | [Microsoft XML Core Services 3.0 on Windows Server 2012 (Server Core installation)](https://patchblox.com/security/data/product/microsoft/microsoft-xml-core-services-3.0-on-windows-server-2012-server-core-installation.md) | | | | [Windows Server 2012](https://patchblox.com/security/data/product/microsoft/windows-server-2012.md) | | | | [Windows Server 2012 (Server Core installation)](https://patchblox.com/security/data/product/microsoft/windows-server-2012-server-core-installation.md) | | | ## CVEs this fix closes | CVE | Priority | Component | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2017-0147](https://patchblox.com/security/data/cve/CVE-2017-0147.md) | Patch now | Windows SMB Server | 8.1 | 0.9969 | CISA KEV, Ransomware | | [CVE-2017-0148](https://patchblox.com/security/data/cve/CVE-2017-0148.md) | Patch now | Windows SMB Server | 8.1 | 0.9937 | CISA KEV, Ransomware | | [CVE-2017-0144](https://patchblox.com/security/data/cve/CVE-2017-0144.md) | Patch now | Windows SMB Server | 8.1 | 0.9923 | CISA KEV, Ransomware | | [CVE-2017-0143](https://patchblox.com/security/data/cve/CVE-2017-0143.md) | Patch now | Windows SMB Server | 8.1 | 0.9331 | CISA KEV, Ransomware | | [CVE-2017-0146](https://patchblox.com/security/data/cve/CVE-2017-0146.md) | Patch now | Windows SMB Server | 8.1 | 0.8986 | CISA KEV, Ransomware | | [CVE-2017-0145](https://patchblox.com/security/data/cve/CVE-2017-0145.md) | Patch now | Windows SMB Server | 8.1 | 0.8985 | CISA KEV, Ransomware | | [CVE-2017-0037](https://patchblox.com/security/data/cve/CVE-2017-0037.md) | Patch now | Microsoft Browsers | 6.4 | 0.8039 | CISA KEV, Disclosed | | [CVE-2017-0059](https://patchblox.com/security/data/cve/CVE-2017-0059.md) | Patch now | Internet Explorer | 2.4 | 0.6197 | CISA KEV | | [CVE-2017-0149](https://patchblox.com/security/data/cve/CVE-2017-0149.md) | Patch now | Internet Explorer | 6.4 | 0.2849 | CISA KEV | | [CVE-2017-0022](https://patchblox.com/security/data/cve/CVE-2017-0022.md) | Patch now | Microsoft XML | 4.3 | 0.1807 | CISA KEV | | [CVE-2017-0005](https://patchblox.com/security/data/cve/CVE-2017-0005.md) | Patch now | Microsoft Graphics Component | 7.0 | 0.1102 | CISA KEV | | [CVE-2017-0001](https://patchblox.com/security/data/cve/CVE-2017-0001.md) | Patch now | Microsoft Graphics Component | 7.8 | 0.0311 | CISA KEV | | [CVE-2017-0023](https://patchblox.com/security/data/cve/CVE-2017-0023.md) | Urgent | Microsoft Windows PDF | 4.2 | 0.3123 | | | [CVE-2017-0130](https://patchblox.com/security/data/cve/CVE-2017-0130.md) | Urgent | Internet Explorer | 7.5 | 0.2122 | More likely | | [CVE-2017-0014](https://patchblox.com/security/data/cve/CVE-2017-0014.md) | Urgent | Microsoft Graphics Component | 6.4 | 0.1759 | Disclosed | | [CVE-2017-0104](https://patchblox.com/security/data/cve/CVE-2017-0104.md) | Urgent | Microsoft Windows | 8.1 | 0.1382 | | | [CVE-2017-0040](https://patchblox.com/security/data/cve/CVE-2017-0040.md) | Urgent | Internet Explorer | 6.4 | 0.1358 | Disclosed | | [CVE-2017-0018](https://patchblox.com/security/data/cve/CVE-2017-0018.md) | Urgent | Internet Explorer | 6.4 | 0.1335 | More likely | | [CVE-2017-0075](https://patchblox.com/security/data/cve/CVE-2017-0075.md) | Urgent | Windows Hyper-V | 7.6 | 0.1283 | | | [CVE-2017-0109](https://patchblox.com/security/data/cve/CVE-2017-0109.md) | Urgent | Windows Hyper-V | 7.6 | 0.0433 | | | [CVE-2017-0047](https://patchblox.com/security/data/cve/CVE-2017-0047.md) | Urgent | Microsoft Graphics Component | 7.8 | 0.0186 | More likely | | [CVE-2017-0025](https://patchblox.com/security/data/cve/CVE-2017-0025.md) | Urgent | Microsoft Graphics Component | 7.8 | 0.0184 | More likely | | [CVE-2017-0050](https://patchblox.com/security/data/cve/CVE-2017-0050.md) | Urgent | Windows Kernel | 7.1 | 0.0147 | Disclosed | | [CVE-2017-0056](https://patchblox.com/security/data/cve/CVE-2017-0056.md) | Urgent | Windows Kernel-Mode Drivers | 7.8 | 0.0139 | More likely | | [CVE-2017-0084](https://patchblox.com/security/data/cve/CVE-2017-0084.md) | High | Microsoft Uniscribe | 8.8 | 0.3766 | | | [CVE-2017-0078](https://patchblox.com/security/data/cve/CVE-2017-0078.md) | High | Windows Kernel-Mode Drivers | 7.8 | 0.0239 | | | [CVE-2017-0081](https://patchblox.com/security/data/cve/CVE-2017-0081.md) | High | Windows Kernel-Mode Drivers | 7.8 | 0.0239 | | | [CVE-2017-0038](https://patchblox.com/security/data/cve/CVE-2017-0038.md) | Routine | Microsoft Graphics Component | 4.4 | 0.8223 | Disclosed | | [CVE-2017-0121](https://patchblox.com/security/data/cve/CVE-2017-0121.md) | Routine | Windows Uniscribe | 4.4 | 0.4358 | | | [CVE-2017-0008](https://patchblox.com/security/data/cve/CVE-2017-0008.md) | Routine | Internet Explorer | 4.3 | 0.3932 | Disclosed | | [CVE-2017-0009](https://patchblox.com/security/data/cve/CVE-2017-0009.md) | Routine | Internet Explorer | 2.4 | 0.3646 | | | [CVE-2017-0073](https://patchblox.com/security/data/cve/CVE-2017-0073.md) | Routine | Microsoft Graphics Component | 4.4 | 0.3336 | | | [CVE-2017-0118](https://patchblox.com/security/data/cve/CVE-2017-0118.md) | Routine | Windows Uniscribe | 4.4 | 0.2295 | | | [CVE-2017-0062](https://patchblox.com/security/data/cve/CVE-2017-0062.md) | Routine | Microsoft Graphics Component | 4.7 | 0.1783 | | | [CVE-2017-0055](https://patchblox.com/security/data/cve/CVE-2017-0055.md) | Routine | Windows IIS | 6.1 | 0.1637 | | | [CVE-2017-0060](https://patchblox.com/security/data/cve/CVE-2017-0060.md) | Routine | Microsoft Graphics Component | 4.7 | 0.1594 | | | [CVE-2017-0100](https://patchblox.com/security/data/cve/CVE-2017-0100.md) | Routine | Microsoft Windows | 6.6 | 0.0500 | | | [CVE-2017-0103](https://patchblox.com/security/data/cve/CVE-2017-0103.md) | Routine | Windows Registry | 6.3 | 0.0294 | | | [CVE-2017-0096](https://patchblox.com/security/data/cve/CVE-2017-0096.md) | Routine | Windows Hyper-V | 2.6 | 0.0224 | | | [CVE-2017-0043](https://patchblox.com/security/data/cve/CVE-2017-0043.md) | Routine | Windows Active Directory | 4.8 | 0.0206 | | | [CVE-2017-0076](https://patchblox.com/security/data/cve/CVE-2017-0076.md) | Routine | Windows Hyper-V | 2.6 | 0.0161 | | | [CVE-2017-0099](https://patchblox.com/security/data/cve/CVE-2017-0099.md) | Routine | Windows Hyper-V | 5.4 | 0.0144 | | | [CVE-2017-0074](https://patchblox.com/security/data/cve/CVE-2017-0074.md) | Routine | Windows Hyper-V | 5.4 | 0.0139 | | | [CVE-2017-0097](https://patchblox.com/security/data/cve/CVE-2017-0097.md) | Routine | Windows Hyper-V | 5.4 | 0.0139 | Disclosed | | [CVE-2017-0102](https://patchblox.com/security/data/cve/CVE-2017-0102.md) | Routine | Microsoft Windows | 6.3 | 0.0113 | | --- Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo