# KB4013198: March 2017 cumulative update for Windows 10 1511 KB4013198, released March 14, 2017, fixes 80 CVEs across 8 products. 12 of them are being exploited (CVE-2017-0147); 12 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported. - Web page: https://patchblox.com/security/fix/microsoft/kb4013198 - Platform: Microsoft - Released: Mar 14, 2017 - Priority: Patch now (Closes CVE-2017-0147, exploited (CISA KEV, ransomware)) - CVEs: 80, exploited: 12, on CISA KEV: 12 - Vendor advisory: https://support.microsoft.com/help/4013198 ## Applies to | Product | Release | Fixed in | |---|---|---| | [Internet Explorer 11 on Windows 10 Version 1511 for 32-bit Systems](https://patchblox.com/security/data/product/microsoft/internet-explorer-11-on-windows-10-version-1511-for-32-bit-systems.md) | | 10586.839 | | [Internet Explorer 11 on Windows 10 Version 1511 for x64-based Systems](https://patchblox.com/security/data/product/microsoft/internet-explorer-11-on-windows-10-version-1511-for-x64-based-systems.md) | | 10586.839 | | [Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1511 for 32-bit Systems](https://patchblox.com/security/data/product/microsoft/microsoft-edge-edgehtml-based-on-windows-10-version-1511-for-32-bit-systems.md) | | 10586.839 | | [Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1511 for x64-based Systems](https://patchblox.com/security/data/product/microsoft/microsoft-edge-edgehtml-based-on-windows-10-version-1511-for-x64-based-systems.md) | | 10586.839 | | [Microsoft XML Core Services 3.0 on Windows 10 Version 1511 for 32-bit Systems](https://patchblox.com/security/data/product/microsoft/microsoft-xml-core-services-3.0-on-windows-10-version-1511-for-32-bit-systems.md) | | 10586.839 | | [Microsoft XML Core Services 3.0 on Windows 10 Version 1511 for x64-based Systems](https://patchblox.com/security/data/product/microsoft/microsoft-xml-core-services-3.0-on-windows-10-version-1511-for-x64-based-systems.md) | | 10586.839 | | [Windows 10 Version 1511 for 32-bit Systems](https://patchblox.com/security/data/product/microsoft/windows-10-version-1511-for-32-bit-systems.md) | | 10586.839 | | [Windows 10 Version 1511 for x64-based Systems](https://patchblox.com/security/data/product/microsoft/windows-10-version-1511-for-x64-based-systems.md) | | 10586.839 | ## CVEs this fix closes | CVE | Priority | Component | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2017-0147](https://patchblox.com/security/data/cve/CVE-2017-0147.md) | Patch now | Windows SMB Server | 8.1 | 0.9969 | CISA KEV, Ransomware | | [CVE-2017-0148](https://patchblox.com/security/data/cve/CVE-2017-0148.md) | Patch now | Windows SMB Server | 8.1 | 0.9937 | CISA KEV, Ransomware | | [CVE-2017-0144](https://patchblox.com/security/data/cve/CVE-2017-0144.md) | Patch now | Windows SMB Server | 8.1 | 0.9923 | CISA KEV, Ransomware | | [CVE-2017-0143](https://patchblox.com/security/data/cve/CVE-2017-0143.md) | Patch now | Windows SMB Server | 8.1 | 0.9331 | CISA KEV, Ransomware | | [CVE-2017-0146](https://patchblox.com/security/data/cve/CVE-2017-0146.md) | Patch now | Windows SMB Server | 8.1 | 0.8986 | CISA KEV, Ransomware | | [CVE-2017-0145](https://patchblox.com/security/data/cve/CVE-2017-0145.md) | Patch now | Windows SMB Server | 8.1 | 0.8985 | CISA KEV, Ransomware | | [CVE-2017-0037](https://patchblox.com/security/data/cve/CVE-2017-0037.md) | Patch now | Microsoft Browsers | 6.4 | 0.8039 | CISA KEV, Disclosed | | [CVE-2017-0059](https://patchblox.com/security/data/cve/CVE-2017-0059.md) | Patch now | Internet Explorer | 2.4 | 0.6197 | CISA KEV | | [CVE-2017-0149](https://patchblox.com/security/data/cve/CVE-2017-0149.md) | Patch now | Internet Explorer | 6.4 | 0.2849 | CISA KEV | | [CVE-2017-0022](https://patchblox.com/security/data/cve/CVE-2017-0022.md) | Patch now | Microsoft XML | 4.3 | 0.1807 | CISA KEV | | [CVE-2017-0005](https://patchblox.com/security/data/cve/CVE-2017-0005.md) | Patch now | Microsoft Graphics Component | 7.0 | 0.1102 | CISA KEV | | [CVE-2017-0001](https://patchblox.com/security/data/cve/CVE-2017-0001.md) | Patch now | Microsoft Graphics Component | 7.8 | 0.0311 | CISA KEV | | [CVE-2017-0070](https://patchblox.com/security/data/cve/CVE-2017-0070.md) | Urgent | Microsoft Edge (HTML-based) | 4.2 | 0.7673 | More likely | | [CVE-2017-0141](https://patchblox.com/security/data/cve/CVE-2017-0141.md) | Urgent | Microsoft Browsers | 4.2 | 0.4817 | More likely | | [CVE-2017-0023](https://patchblox.com/security/data/cve/CVE-2017-0023.md) | Urgent | Microsoft Windows PDF | 4.2 | 0.3123 | | | [CVE-2017-0094](https://patchblox.com/security/data/cve/CVE-2017-0094.md) | Urgent | Microsoft Edge (HTML-based) | 4.2 | 0.2903 | More likely | | [CVE-2017-0016](https://patchblox.com/security/data/cve/CVE-2017-0016.md) | Urgent | Windows SMB Server | 5.3 | 0.2708 | Disclosed | | [CVE-2017-0015](https://patchblox.com/security/data/cve/CVE-2017-0015.md) | Urgent | Microsoft Browsers | 4.2 | 0.2637 | More likely | | [CVE-2017-0134](https://patchblox.com/security/data/cve/CVE-2017-0134.md) | Urgent | Microsoft Edge (HTML-based) | 4.2 | 0.2637 | More likely | | [CVE-2017-0010](https://patchblox.com/security/data/cve/CVE-2017-0010.md) | Urgent | Microsoft Browsers | 4.2 | 0.2472 | More likely | | [CVE-2017-0133](https://patchblox.com/security/data/cve/CVE-2017-0133.md) | Urgent | Microsoft Browsers | 4.2 | 0.2472 | More likely | | [CVE-2017-0130](https://patchblox.com/security/data/cve/CVE-2017-0130.md) | Urgent | Internet Explorer | 7.5 | 0.2122 | More likely | | [CVE-2017-0014](https://patchblox.com/security/data/cve/CVE-2017-0014.md) | Urgent | Microsoft Graphics Component | 6.4 | 0.1759 | Disclosed | | [CVE-2017-0032](https://patchblox.com/security/data/cve/CVE-2017-0032.md) | Urgent | Microsoft Edge (HTML-based) | 4.2 | 0.1523 | More likely | | [CVE-2017-0035](https://patchblox.com/security/data/cve/CVE-2017-0035.md) | Urgent | Microsoft Edge (HTML-based) | 4.2 | 0.1523 | More likely | | [CVE-2017-0067](https://patchblox.com/security/data/cve/CVE-2017-0067.md) | Urgent | Microsoft Edge (HTML-based) | 4.2 | 0.1523 | More likely | | [CVE-2017-0132](https://patchblox.com/security/data/cve/CVE-2017-0132.md) | Urgent | Microsoft Edge (HTML-based) | 4.2 | 0.1523 | More likely | | [CVE-2017-0137](https://patchblox.com/security/data/cve/CVE-2017-0137.md) | Urgent | Microsoft Edge (HTML-based) | 4.2 | 0.1523 | More likely | | [CVE-2017-0138](https://patchblox.com/security/data/cve/CVE-2017-0138.md) | Urgent | Microsoft Browsers | 4.2 | 0.1523 | Disclosed | | [CVE-2017-0150](https://patchblox.com/security/data/cve/CVE-2017-0150.md) | Urgent | Microsoft Browsers | 4.2 | 0.1523 | More likely | | [CVE-2017-0151](https://patchblox.com/security/data/cve/CVE-2017-0151.md) | Urgent | Microsoft Browsers | 4.2 | 0.1523 | More likely | | [CVE-2017-0040](https://patchblox.com/security/data/cve/CVE-2017-0040.md) | Urgent | Internet Explorer | 6.4 | 0.1358 | Disclosed | | [CVE-2017-0018](https://patchblox.com/security/data/cve/CVE-2017-0018.md) | Urgent | Internet Explorer | 6.4 | 0.1335 | More likely | | [CVE-2017-0075](https://patchblox.com/security/data/cve/CVE-2017-0075.md) | Urgent | Windows Hyper-V | 7.6 | 0.1283 | | | [CVE-2017-0154](https://patchblox.com/security/data/cve/CVE-2017-0154.md) | Urgent | Internet Explorer | 5.4 | 0.1043 | Disclosed | | [CVE-2017-0109](https://patchblox.com/security/data/cve/CVE-2017-0109.md) | Urgent | Windows Hyper-V | 7.6 | 0.0433 | | | [CVE-2017-0026](https://patchblox.com/security/data/cve/CVE-2017-0026.md) | Urgent | Windows Kernel-Mode Drivers | 7.8 | 0.0239 | More likely | | [CVE-2017-0047](https://patchblox.com/security/data/cve/CVE-2017-0047.md) | Urgent | Microsoft Graphics Component | 7.8 | 0.0186 | More likely | | [CVE-2017-0025](https://patchblox.com/security/data/cve/CVE-2017-0025.md) | Urgent | Microsoft Graphics Component | 7.8 | 0.0184 | More likely | | [CVE-2017-0050](https://patchblox.com/security/data/cve/CVE-2017-0050.md) | Urgent | Windows Kernel | 7.1 | 0.0147 | Disclosed | | [CVE-2017-0056](https://patchblox.com/security/data/cve/CVE-2017-0056.md) | Urgent | Windows Kernel-Mode Drivers | 7.8 | 0.0139 | More likely | | [CVE-2017-0084](https://patchblox.com/security/data/cve/CVE-2017-0084.md) | High | Microsoft Uniscribe | 8.8 | 0.3766 | | | [CVE-2017-0095](https://patchblox.com/security/data/cve/CVE-2017-0095.md) | High | Windows Hyper-V | 7.6 | 0.0404 | | | [CVE-2017-0078](https://patchblox.com/security/data/cve/CVE-2017-0078.md) | High | Windows Kernel-Mode Drivers | 7.8 | 0.0239 | | | [CVE-2017-0079](https://patchblox.com/security/data/cve/CVE-2017-0079.md) | High | Windows Kernel-Mode Drivers | 7.8 | 0.0239 | | | [CVE-2017-0080](https://patchblox.com/security/data/cve/CVE-2017-0080.md) | High | Windows Kernel-Mode Drivers | 7.8 | 0.0239 | | | [CVE-2017-0081](https://patchblox.com/security/data/cve/CVE-2017-0081.md) | High | Windows Kernel-Mode Drivers | 7.8 | 0.0239 | | | [CVE-2017-0082](https://patchblox.com/security/data/cve/CVE-2017-0082.md) | High | Windows Kernel-Mode Drivers | 7.8 | 0.0239 | | | [CVE-2017-0038](https://patchblox.com/security/data/cve/CVE-2017-0038.md) | Routine | Microsoft Graphics Component | 4.4 | 0.8223 | Disclosed | | [CVE-2017-0121](https://patchblox.com/security/data/cve/CVE-2017-0121.md) | Routine | Windows Uniscribe | 4.4 | 0.4358 | | | [CVE-2017-0008](https://patchblox.com/security/data/cve/CVE-2017-0008.md) | Routine | Internet Explorer | 4.3 | 0.3932 | Disclosed | | [CVE-2017-0049](https://patchblox.com/security/data/cve/CVE-2017-0049.md) | Routine | Internet Explorer | 2.4 | 0.3892 | | | [CVE-2017-0011](https://patchblox.com/security/data/cve/CVE-2017-0011.md) | Routine | Microsoft Edge (HTML-based) | 4.3 | 0.3677 | | | [CVE-2017-0009](https://patchblox.com/security/data/cve/CVE-2017-0009.md) | Routine | Internet Explorer | 2.4 | 0.3646 | | | [CVE-2017-0017](https://patchblox.com/security/data/cve/CVE-2017-0017.md) | Routine | Microsoft Edge (HTML-based) | 4.3 | 0.3639 | | | [CVE-2017-0063](https://patchblox.com/security/data/cve/CVE-2017-0063.md) | Routine | Microsoft Graphics Component | 4.7 | 0.3528 | | | [CVE-2017-0073](https://patchblox.com/security/data/cve/CVE-2017-0073.md) | Routine | Microsoft Graphics Component | 4.4 | 0.3336 | | | [CVE-2017-0042](https://patchblox.com/security/data/cve/CVE-2017-0042.md) | Routine | Windows DirectShow | 3.7 | 0.2952 | | | [CVE-2017-0065](https://patchblox.com/security/data/cve/CVE-2017-0065.md) | Routine | Microsoft Browsers | 4.3 | 0.2762 | Disclosed | | [CVE-2017-0066](https://patchblox.com/security/data/cve/CVE-2017-0066.md) | Routine | Microsoft Browsers | 4.3 | 0.2654 | | | [CVE-2017-0118](https://patchblox.com/security/data/cve/CVE-2017-0118.md) | Routine | Windows Uniscribe | 4.4 | 0.2295 | | | [CVE-2017-0062](https://patchblox.com/security/data/cve/CVE-2017-0062.md) | Routine | Microsoft Graphics Component | 4.7 | 0.1783 | | | [CVE-2017-0055](https://patchblox.com/security/data/cve/CVE-2017-0055.md) | Routine | Windows IIS | 6.1 | 0.1637 | | | [CVE-2017-0060](https://patchblox.com/security/data/cve/CVE-2017-0060.md) | Routine | Microsoft Graphics Component | 4.7 | 0.1594 | | | [CVE-2017-0068](https://patchblox.com/security/data/cve/CVE-2017-0068.md) | Routine | Microsoft Edge (HTML-based) | 4.3 | 0.1531 | | | [CVE-2017-0131](https://patchblox.com/security/data/cve/CVE-2017-0131.md) | Routine | Microsoft Edge (HTML-based) | 4.2 | 0.1523 | | | [CVE-2017-0057](https://patchblox.com/security/data/cve/CVE-2017-0057.md) | Routine | Microsoft Windows DNS | 3.7 | 0.1407 | | | [CVE-2017-0007](https://patchblox.com/security/data/cve/CVE-2017-0007.md) | Routine | Microsoft PowerShell | 5.5 | 0.1164 | | | [CVE-2017-0033](https://patchblox.com/security/data/cve/CVE-2017-0033.md) | Routine | Microsoft Browsers | 2.4 | 0.0915 | Disclosed | | [CVE-2017-0069](https://patchblox.com/security/data/cve/CVE-2017-0069.md) | Routine | Microsoft Edge (HTML-based) | 4.3 | 0.0865 | Disclosed | | [CVE-2017-0012](https://patchblox.com/security/data/cve/CVE-2017-0012.md) | Routine | Microsoft Browsers | 4.3 | 0.0858 | Disclosed | | [CVE-2017-0135](https://patchblox.com/security/data/cve/CVE-2017-0135.md) | Routine | Microsoft Edge (HTML-based) | 4.2 | 0.0776 | | | [CVE-2017-0100](https://patchblox.com/security/data/cve/CVE-2017-0100.md) | Routine | Microsoft Windows | 6.6 | 0.0500 | | | [CVE-2017-0096](https://patchblox.com/security/data/cve/CVE-2017-0096.md) | Routine | Windows Hyper-V | 2.6 | 0.0224 | | | [CVE-2017-0076](https://patchblox.com/security/data/cve/CVE-2017-0076.md) | Routine | Windows Hyper-V | 2.6 | 0.0161 | | | [CVE-2017-0098](https://patchblox.com/security/data/cve/CVE-2017-0098.md) | Routine | Windows Hyper-V | 5.4 | 0.0159 | | | [CVE-2017-0099](https://patchblox.com/security/data/cve/CVE-2017-0099.md) | Routine | Windows Hyper-V | 5.4 | 0.0144 | | | [CVE-2017-0074](https://patchblox.com/security/data/cve/CVE-2017-0074.md) | Routine | Windows Hyper-V | 5.4 | 0.0139 | | | [CVE-2017-0097](https://patchblox.com/security/data/cve/CVE-2017-0097.md) | Routine | Windows Hyper-V | 5.4 | 0.0139 | Disclosed | | [CVE-2017-0102](https://patchblox.com/security/data/cve/CVE-2017-0102.md) | Routine | Microsoft Windows | 6.3 | 0.0113 | | --- Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo