Microsoft · Security update · March 14, 2017

KB4012216: March 2017 security update

KB4012216, released March 14, 2017, fixes 52 CVEs across 14 products. 12 of them are being exploited (CVE-2017-0147); 12 on CISA KEV. Patch Radar priority: Patch now.

Patch now12 on CISA KEVKnown ransomware use10 publicly disclosed
CVEs closed
52
11 rated Critical
Exploited
12
CVE-2017-0147
Exploitation more likely
8
Vendor assessment
Highest EPSS
0.9969
99th percentile

Priority of the 52 CVEs

Patch now 12 Urgent 13 High 4 Routine 23

Applies to

Product
Internet Explorer 11 on Windows 8.1 for 32-bit systems
Internet Explorer 11 on Windows 8.1 for x64-based systems
Internet Explorer 11 on Windows RT 8.1
Internet Explorer 11 on Windows Server 2012 R2
Microsoft XML Core Services 3.0 on Windows 8.1 for 32-bit systems
Microsoft XML Core Services 3.0 on Windows 8.1 for x64-based systems
Microsoft XML Core Services 3.0 on Windows RT 8.1
Microsoft XML Core Services 3.0 on Windows Server 2012 R2
Microsoft XML Core Services 3.0 on Windows Server 2012 R2 (Server Core installation)
Windows 8.1 for 32-bit systems
Windows 8.1 for x64-based systems
Windows RT 8.1
Windows Server 2012 R2
Windows Server 2012 R2 (Server Core installation)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2017-0147 Windows SMB Server Information Disclosure 8.1 0.9969 KEVRansomwareExploited
Patch now CVE-2017-0148 Windows SMB Server Remote Code Execution 8.1 0.9937 KEVRansomwareExploited
Patch now CVE-2017-0144 Windows SMB Server Remote Code Execution 8.1 0.9923 KEVRansomwareExploited
Patch now CVE-2017-0143 Windows SMB Server Remote Code Execution 8.1 0.9331 KEVRansomwareExploited
Patch now CVE-2017-0146 Windows SMB Server Remote Code Execution 8.1 0.8986 KEVRansomwareExploited
Patch now CVE-2017-0145 Windows SMB Server Remote Code Execution 8.1 0.8985 KEVRansomwareExploited
Patch now CVE-2017-0037 Microsoft Browsers Remote Code Execution 6.4 0.8039 KEVDisclosedExploited
Patch now CVE-2017-0059 Internet Explorer Information Disclosure 2.4 0.6197 KEVExploited
Patch now CVE-2017-0149 Internet Explorer Remote Code Execution 6.4 0.2918 KEVExploited
Patch now CVE-2017-0022 Microsoft XML Information Disclosure 4.3 0.1807 KEVExploited
Patch now CVE-2017-0005 Microsoft Graphics Component Elevation of Privilege 7.0 0.1102 KEVExploited
Patch now CVE-2017-0001 Microsoft Graphics Component Elevation of Privilege 7.8 0.0311 KEVExploited
Urgent CVE-2017-0023 Microsoft Windows PDF Remote Code Execution 4.2 0.3402 Exploitation Less Likely
Urgent CVE-2017-0016 Windows SMB Server Denial of Service 5.3 0.2571 DisclosedMore likely
Urgent CVE-2017-0130 Internet Explorer Remote Code Execution 7.5 0.2327 More likely
Urgent CVE-2017-0014 Microsoft Graphics Component Remote Code Execution 6.4 0.1759 DisclosedExploitation Less Likely
Urgent CVE-2017-0104 Microsoft Windows Remote Code Execution 8.1 0.1382 Exploitation Unlikely
Urgent CVE-2017-0018 Internet Explorer Remote Code Execution 6.4 0.1351 More likely
Urgent CVE-2017-0040 Internet Explorer Remote Code Execution 6.4 0.1346 DisclosedMore likely
Urgent CVE-2017-0075 Windows Hyper-V Remote Code Execution 7.6 0.1267 Exploitation Less Likely
Urgent CVE-2017-0109 Windows Hyper-V Remote Code Execution 7.6 0.0454 Exploitation Unlikely
Urgent CVE-2017-0047 Microsoft Graphics Component Elevation of Privilege 7.8 0.0186 More likely
Urgent CVE-2017-0025 Microsoft Graphics Component Elevation of Privilege 7.8 0.0184 More likely
Urgent CVE-2017-0050 Windows Kernel Elevation of Privilege 7.1 0.0147 DisclosedMore likely
Urgent CVE-2017-0056 Windows Kernel-Mode Drivers Elevation of Privilege 7.8 0.0139 More likely
Showing 1 to 25 of 52 1Next