Microsoft · Security update · March 14, 2017
KB4012204: March 2017 security update
KB4012204, released March 14, 2017, fixes 11 CVEs across 11 products. 3 of them are being exploited (CVE-2017-0037); 3 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.
Patch now3 on CISA KEV5 publicly disclosedUnsupported product
CVEs closed
11
1 rated Critical
Exploited
3
CVE-2017-0037
Exploitation more likely
3
Vendor assessment
Highest EPSS
0.8039
99th percentile
Priority of the 11 CVEs
Patch now 3
Urgent 3
High 0
Routine 5
Applies to
CVEs this fix closes
| Priority | CVE | Component | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Patch now | CVE-2017-0037 | Microsoft Browsers | Remote Code Execution | 6.4 | 0.8039 | KEVDisclosedExploited |
| Patch now | CVE-2017-0059 | Internet Explorer | Information Disclosure | 2.4 | 0.6197 | KEVExploited |
| Patch now | CVE-2017-0149 | Internet Explorer | Remote Code Execution | 6.4 | 0.2849 | KEVExploited |
| Urgent | CVE-2017-0130 | Internet Explorer | Remote Code Execution | 7.5 | 0.2122 | More likely |
| Urgent | CVE-2017-0040 | Internet Explorer | Remote Code Execution | 6.4 | 0.1358 | DisclosedMore likely |
| Urgent | CVE-2017-0018 | Internet Explorer | Remote Code Execution | 6.4 | 0.1335 | More likely |
| Routine | CVE-2017-0008 | Internet Explorer | Information Disclosure | 4.3 | 0.3932 | DisclosedExploitation Less Likely |
| Routine | CVE-2017-0049 | Internet Explorer | Information Disclosure | 2.4 | 0.3892 | Exploitation Less Likely |
| Routine | CVE-2017-0009 | Internet Explorer | Information Disclosure | 2.4 | 0.3646 | Exploitation Less Likely |
| Routine | CVE-2017-0033 | Microsoft Browsers | Spoofing | 2.4 | 0.0915 | DisclosedExploitation Less Likely |
| Routine | CVE-2017-0012 | Microsoft Browsers | Spoofing | 4.3 | 0.0858 | DisclosedExploitation Unlikely |
Showing 1 to 11 of 11
1