Microsoft · Security update · March 14, 2017

KB4012217: March 2017 security update

KB4012217, released March 14, 2017, fixes 45 CVEs across 5 products. 12 of them are being exploited (CVE-2017-0147); 12 on CISA KEV. Patch Radar priority: Patch now.

Patch now12 on CISA KEVKnown ransomware use7 publicly disclosed
CVEs closed
45
11 rated Critical
Exploited
12
CVE-2017-0147
Exploitation more likely
7
Vendor assessment
Highest EPSS
0.9969
99th percentile

Priority of the 45 CVEs

Patch now 12 Urgent 12 High 3 Routine 18

Applies to

Product
Internet Explorer 10 on Windows Server 2012
Microsoft XML Core Services 3.0 on Windows Server 2012
Microsoft XML Core Services 3.0 on Windows Server 2012 (Server Core installation)
Windows Server 2012
Windows Server 2012 (Server Core installation)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2017-0147 Windows SMB Server Information Disclosure 8.1 0.9969 KEVRansomwareExploited
Patch now CVE-2017-0148 Windows SMB Server Remote Code Execution 8.1 0.9937 KEVRansomwareExploited
Patch now CVE-2017-0144 Windows SMB Server Remote Code Execution 8.1 0.9923 KEVRansomwareExploited
Patch now CVE-2017-0143 Windows SMB Server Remote Code Execution 8.1 0.9331 KEVRansomwareExploited
Patch now CVE-2017-0146 Windows SMB Server Remote Code Execution 8.1 0.8986 KEVRansomwareExploited
Patch now CVE-2017-0145 Windows SMB Server Remote Code Execution 8.1 0.8985 KEVRansomwareExploited
Patch now CVE-2017-0037 Microsoft Browsers Remote Code Execution 6.4 0.8039 KEVDisclosedExploited
Patch now CVE-2017-0059 Internet Explorer Information Disclosure 2.4 0.6197 KEVExploited
Patch now CVE-2017-0149 Internet Explorer Remote Code Execution 6.4 0.2849 KEVExploited
Patch now CVE-2017-0022 Microsoft XML Information Disclosure 4.3 0.1807 KEVExploited
Patch now CVE-2017-0005 Microsoft Graphics Component Elevation of Privilege 7.0 0.1102 KEVExploited
Patch now CVE-2017-0001 Microsoft Graphics Component Elevation of Privilege 7.8 0.0311 KEVExploited
Urgent CVE-2017-0023 Microsoft Windows PDF Remote Code Execution 4.2 0.3123 Exploitation Less Likely
Urgent CVE-2017-0130 Internet Explorer Remote Code Execution 7.5 0.2122 More likely
Urgent CVE-2017-0014 Microsoft Graphics Component Remote Code Execution 6.4 0.1759 DisclosedExploitation Less Likely
Urgent CVE-2017-0104 Microsoft Windows Remote Code Execution 8.1 0.1382 Exploitation Unlikely
Urgent CVE-2017-0040 Internet Explorer Remote Code Execution 6.4 0.1358 DisclosedMore likely
Urgent CVE-2017-0018 Internet Explorer Remote Code Execution 6.4 0.1335 More likely
Urgent CVE-2017-0075 Windows Hyper-V Remote Code Execution 7.6 0.1283 Exploitation Less Likely
Urgent CVE-2017-0109 Windows Hyper-V Remote Code Execution 7.6 0.0433 Exploitation Unlikely
Urgent CVE-2017-0047 Microsoft Graphics Component Elevation of Privilege 7.8 0.0186 More likely
Urgent CVE-2017-0025 Microsoft Graphics Component Elevation of Privilege 7.8 0.0184 More likely
Urgent CVE-2017-0050 Windows Kernel Elevation of Privilege 7.1 0.0147 DisclosedMore likely
Urgent CVE-2017-0056 Windows Kernel-Mode Drivers Elevation of Privilege 7.8 0.0139 More likely
High CVE-2017-0084 Microsoft Uniscribe Information Disclosure 8.8 0.3766 Exploitation Unlikely
Showing 1 to 25 of 45 1Next