Microsoft · Security update · March 14, 2017

KB4012598: March 2017 security update

KB4012598, released March 14, 2017, fixes 6 CVEs across 7 products. 6 of them are being exploited (CVE-2017-0147); 6 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now6 on CISA KEVKnown ransomware useUnsupported product
CVEs closed
6
5 rated Critical
Exploited
6
CVE-2017-0147
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.9969
99th percentile

Priority of the 6 CVEs

Patch now 6 Urgent 0 High 0 Routine 0

Applies to

Product
Windows Server 2008 for 32-bit Systems Service Pack 2
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)
Windows Server 2008 for Itanium-Based Systems Service Pack 2
Windows Server 2008 for x64-based Systems Service Pack 2
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)
Windows Vista Service Pack 2
Windows Vista x64 Edition Service Pack 2

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2017-0147 Windows SMB Server Information Disclosure 8.1 0.9969 KEVRansomwareExploited
Patch now CVE-2017-0148 Windows SMB Server Remote Code Execution 8.1 0.9937 KEVRansomwareExploited
Patch now CVE-2017-0144 Windows SMB Server Remote Code Execution 8.1 0.9923 KEVRansomwareExploited
Patch now CVE-2017-0143 Windows SMB Server Remote Code Execution 8.1 0.9331 KEVRansomwareExploited
Patch now CVE-2017-0146 Windows SMB Server Remote Code Execution 8.1 0.8986 KEVRansomwareExploited
Patch now CVE-2017-0145 Windows SMB Server Remote Code Execution 8.1 0.8985 KEVRansomwareExploited
Showing 1 to 6 of 6 1