Microsoft · Security update · March 14, 2017
KB4012215: March 2017 security update
KB4012215, released March 14, 2017, fixes 75 CVEs across 13 products. 12 of them are being exploited (CVE-2017-0147); 12 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.
Patch now12 on CISA KEVKnown ransomware use7 publicly disclosedUnsupported product
CVEs closed
75
18 rated Critical
Exploited
12
CVE-2017-0147
Exploitation more likely
7
Microsoft's assessment
Highest EPSS
0.9969
99th percentile
Priority of the 75 CVEs
Patch now 12
Urgent 19
High 2
Routine 42
Applies to
CVEs this fix closes
| Priority | CVE | Component | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Patch now | CVE-2017-0147 | Windows SMB Server | Information Disclosure | 8.1 | 0.9969 | KEVRansomwareExploited |
| Patch now | CVE-2017-0148 | Windows SMB Server | Remote Code Execution | 8.1 | 0.9937 | KEVRansomwareExploited |
| Patch now | CVE-2017-0144 | Windows SMB Server | Remote Code Execution | 8.1 | 0.9923 | KEVRansomwareExploited |
| Patch now | CVE-2017-0143 | Windows SMB Server | Remote Code Execution | 8.1 | 0.9331 | KEVRansomwareExploited |
| Patch now | CVE-2017-0146 | Windows SMB Server | Remote Code Execution | 8.1 | 0.8986 | KEVRansomwareExploited |
| Patch now | CVE-2017-0145 | Windows SMB Server | Remote Code Execution | 8.1 | 0.8985 | KEVRansomwareExploited |
| Patch now | CVE-2017-0059 | Internet Explorer | Information Disclosure | 2.4 | 0.6197 | KEVExploited |
| Patch now | CVE-2017-0101 | Microsoft Windows | Elevation of Privilege | 6.3 | 0.5748 | KEVRansomwareExploited |
| Patch now | CVE-2017-0149 | Internet Explorer | Remote Code Execution | 6.4 | 0.2849 | KEVExploited |
| Patch now | CVE-2017-0022 | Microsoft XML | Information Disclosure | 4.3 | 0.1807 | KEVExploited |
| Patch now | CVE-2017-0005 | Microsoft Graphics Component | Elevation of Privilege | 7.0 | 0.1102 | KEVExploited |
| Patch now | CVE-2017-0001 | Microsoft Graphics Component | Elevation of Privilege | 7.8 | 0.0311 | KEVExploited |
| Urgent | CVE-2017-0089 | Microsoft Uniscribe | Remote Code Execution | 8.8 | 0.5827 | N/A |
| Urgent | CVE-2017-0108 | Microsoft Graphics Component | Remote Code Execution | 8.8 | 0.5047 | None reported |
| Urgent | CVE-2017-0072 | Microsoft Uniscribe | Remote Code Execution | 8.8 | 0.4348 | N/A |
| Urgent | CVE-2017-0083 | Microsoft Uniscribe | Remote Code Execution | 8.8 | 0.4348 | N/A |
| Urgent | CVE-2017-0086 | Microsoft Uniscribe | Remote Code Execution | 8.8 | 0.4348 | N/A |
| Urgent | CVE-2017-0087 | Microsoft Uniscribe | Remote Code Execution | 8.8 | 0.4348 | N/A |
| Urgent | CVE-2017-0090 | Microsoft Uniscribe | Remote Code Execution | 8.8 | 0.4348 | N/A |
| Urgent | CVE-2017-0088 | Microsoft Uniscribe | Remote Code Execution | 8.8 | 0.4280 | N/A |
| Urgent | CVE-2017-0130 | Internet Explorer | Remote Code Execution | 7.5 | 0.2122 | More likely |
| Urgent | CVE-2017-0014 | Microsoft Graphics Component | Remote Code Execution | 6.4 | 0.1759 | DisclosedExploitation Less Likely |
| Urgent | CVE-2017-0104 | Microsoft Windows | Remote Code Execution | 8.1 | 0.1382 | Exploitation Unlikely |
| Urgent | CVE-2017-0040 | Internet Explorer | Remote Code Execution | 6.4 | 0.1358 | DisclosedMore likely |
| Urgent | CVE-2017-0018 | Internet Explorer | Remote Code Execution | 6.4 | 0.1335 | More likely |
Showing 1 to 25 of 75
1Next
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.