Microsoft · Security update · March 14, 2017

KB4012212: March 2017 security update

KB4012212, released March 14, 2017, fixes 67 CVEs across 10 products. 10 of them are being exploited (CVE-2017-0147); 10 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now10 on CISA KEVKnown ransomware use4 publicly disclosedUnsupported product
CVEs closed
67
18 rated Critical
Exploited
10
CVE-2017-0147
Exploitation more likely
5
Vendor assessment
Highest EPSS
0.9969
99th percentile

Priority of the 67 CVEs

Patch now 10 Urgent 17 High 2 Routine 38

Applies to

Product
Microsoft XML Core Services 3.0 on Windows 7 for 32-bit Systems Service Pack 1
Microsoft XML Core Services 3.0 on Windows 7 for x64-based Systems Service Pack 1
Microsoft XML Core Services 3.0 on Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1
Microsoft XML Core Services 3.0 on Windows Server 2008 R2 for x64-based Systems Service Pack 1
Microsoft XML Core Services 3.0 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)
Windows 7 for 32-bit Systems Service Pack 1
Windows 7 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2017-0147 Windows SMB Server Information Disclosure 8.1 0.9969 KEVRansomwareExploited
Patch now CVE-2017-0148 Windows SMB Server Remote Code Execution 8.1 0.9937 KEVRansomwareExploited
Patch now CVE-2017-0144 Windows SMB Server Remote Code Execution 8.1 0.9923 KEVRansomwareExploited
Patch now CVE-2017-0143 Windows SMB Server Remote Code Execution 8.1 0.9331 KEVRansomwareExploited
Patch now CVE-2017-0146 Windows SMB Server Remote Code Execution 8.1 0.8986 KEVRansomwareExploited
Patch now CVE-2017-0145 Windows SMB Server Remote Code Execution 8.1 0.8985 KEVRansomwareExploited
Patch now CVE-2017-0101 Microsoft Windows Elevation of Privilege 6.3 0.5748 KEVRansomwareExploited
Patch now CVE-2017-0022 Microsoft XML Information Disclosure 4.3 0.1807 KEVExploited
Patch now CVE-2017-0005 Microsoft Graphics Component Elevation of Privilege 7.0 0.1102 KEVExploited
Patch now CVE-2017-0001 Microsoft Graphics Component Elevation of Privilege 7.8 0.0311 KEVExploited
Urgent CVE-2017-0089 Microsoft Uniscribe Remote Code Execution 8.8 0.5827 N/A
Urgent CVE-2017-0108 Microsoft Graphics Component Remote Code Execution 8.8 0.5047 None reported
Urgent CVE-2017-0072 Microsoft Uniscribe Remote Code Execution 8.8 0.4348 N/A
Urgent CVE-2017-0083 Microsoft Uniscribe Remote Code Execution 8.8 0.4348 N/A
Urgent CVE-2017-0086 Microsoft Uniscribe Remote Code Execution 8.8 0.4348 N/A
Urgent CVE-2017-0087 Microsoft Uniscribe Remote Code Execution 8.8 0.4348 N/A
Urgent CVE-2017-0090 Microsoft Uniscribe Remote Code Execution 8.8 0.4348 N/A
Urgent CVE-2017-0088 Microsoft Uniscribe Remote Code Execution 8.8 0.4280 N/A
Urgent CVE-2017-0130 Internet Explorer Remote Code Execution 7.5 0.2122 More likely
Urgent CVE-2017-0014 Microsoft Graphics Component Remote Code Execution 6.4 0.1759 DisclosedExploitation Less Likely
Urgent CVE-2017-0104 Microsoft Windows Remote Code Execution 8.1 0.1382 Exploitation Unlikely
Urgent CVE-2017-0075 Windows Hyper-V Remote Code Execution 7.6 0.1283 Exploitation Less Likely
Urgent CVE-2017-0109 Windows Hyper-V Remote Code Execution 7.6 0.0433 Exploitation Unlikely
Urgent CVE-2017-0047 Microsoft Graphics Component Elevation of Privilege 7.8 0.0186 More likely
Urgent CVE-2017-0025 Microsoft Graphics Component Elevation of Privilege 7.8 0.0184 More likely
Showing 1 to 25 of 67 1Next