Microsoft · Security update · March 14, 2017

KB4012214: March 2017 security update

KB4012214, released March 14, 2017, fixes 37 CVEs across 4 products. 9 of them are being exploited (CVE-2017-0147); 9 on CISA KEV. Patch Radar priority: Patch now.

Patch now9 on CISA KEVKnown ransomware use4 publicly disclosed
CVEs closed
37
10 rated Critical
Exploited
9
CVE-2017-0147
Exploitation more likely
4
Vendor assessment
Highest EPSS
0.9969
99th percentile

Priority of the 37 CVEs

Patch now 9 Urgent 9 High 3 Routine 16

Applies to

Product
Microsoft XML Core Services 3.0 on Windows Server 2012
Microsoft XML Core Services 3.0 on Windows Server 2012 (Server Core installation)
Windows Server 2012
Windows Server 2012 (Server Core installation)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2017-0147 Windows SMB Server Information Disclosure 8.1 0.9969 KEVRansomwareExploited
Patch now CVE-2017-0148 Windows SMB Server Remote Code Execution 8.1 0.9937 KEVRansomwareExploited
Patch now CVE-2017-0144 Windows SMB Server Remote Code Execution 8.1 0.9923 KEVRansomwareExploited
Patch now CVE-2017-0143 Windows SMB Server Remote Code Execution 8.1 0.9331 KEVRansomwareExploited
Patch now CVE-2017-0146 Windows SMB Server Remote Code Execution 8.1 0.8986 KEVRansomwareExploited
Patch now CVE-2017-0145 Windows SMB Server Remote Code Execution 8.1 0.8985 KEVRansomwareExploited
Patch now CVE-2017-0022 Microsoft XML Information Disclosure 4.3 0.1807 KEVExploited
Patch now CVE-2017-0005 Microsoft Graphics Component Elevation of Privilege 7.0 0.1102 KEVExploited
Patch now CVE-2017-0001 Microsoft Graphics Component Elevation of Privilege 7.8 0.0311 KEVExploited
Urgent CVE-2017-0023 Microsoft Windows PDF Remote Code Execution 4.2 0.3123 Exploitation Less Likely
Urgent CVE-2017-0014 Microsoft Graphics Component Remote Code Execution 6.4 0.1759 DisclosedExploitation Less Likely
Urgent CVE-2017-0104 Microsoft Windows Remote Code Execution 8.1 0.1382 Exploitation Unlikely
Urgent CVE-2017-0075 Windows Hyper-V Remote Code Execution 7.6 0.1283 Exploitation Less Likely
Urgent CVE-2017-0109 Windows Hyper-V Remote Code Execution 7.6 0.0433 Exploitation Unlikely
Urgent CVE-2017-0047 Microsoft Graphics Component Elevation of Privilege 7.8 0.0186 More likely
Urgent CVE-2017-0025 Microsoft Graphics Component Elevation of Privilege 7.8 0.0184 More likely
Urgent CVE-2017-0050 Windows Kernel Elevation of Privilege 7.1 0.0147 DisclosedMore likely
Urgent CVE-2017-0056 Windows Kernel-Mode Drivers Elevation of Privilege 7.8 0.0139 More likely
High CVE-2017-0084 Microsoft Uniscribe Information Disclosure 8.8 0.3766 Exploitation Unlikely
High CVE-2017-0078 Windows Kernel-Mode Drivers Elevation of Privilege 7.8 0.0239 None reported
High CVE-2017-0081 Windows Kernel-Mode Drivers Elevation of Privilege 7.8 0.0239 Exploitation Less Likely
Routine CVE-2017-0038 Microsoft Graphics Component Information Disclosure 4.4 0.8223 DisclosedExploitation Less Likely
Routine CVE-2017-0121 Windows Uniscribe Information Disclosure 4.4 0.4358 Exploitation Less Likely
Routine CVE-2017-0073 Microsoft Graphics Component Information Disclosure 4.4 0.3336 Exploitation Less Likely
Routine CVE-2017-0118 Windows Uniscribe Information Disclosure 4.4 0.2295 Exploitation Unlikely
Showing 1 to 25 of 37 1Next