Microsoft · Security update · March 14, 2017

KB4013198: March 2017 cumulative update for Windows 10 1511

KB4013198, released March 14, 2017, fixes 80 CVEs across 8 products. 12 of them are being exploited (CVE-2017-0147); 12 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now12 on CISA KEVKnown ransomware use14 publicly disclosedUnsupported product
CVEs closed
80
25 rated Critical
Exploited
12
CVE-2017-0147
Exploitation more likely
24
Vendor assessment
Highest EPSS
0.9969
99th percentile

Priority of the 80 CVEs

Patch now 12 Urgent 29 High 7 Routine 32

Applies to

ProductBuild after install
Internet Explorer 11 on Windows 10 Version 1511 for 32-bit Systems10586.839
Internet Explorer 11 on Windows 10 Version 1511 for x64-based Systems10586.839
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1511 for 32-bit Systems10586.839
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1511 for x64-based Systems10586.839
Microsoft XML Core Services 3.0 on Windows 10 Version 1511 for 32-bit Systems10586.839
Microsoft XML Core Services 3.0 on Windows 10 Version 1511 for x64-based Systems10586.839
Windows 10 Version 1511 for 32-bit Systems10586.839
Windows 10 Version 1511 for x64-based Systems10586.839

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2017-0147 Windows SMB Server Information Disclosure 8.1 0.9969 KEVRansomwareExploited
Patch now CVE-2017-0148 Windows SMB Server Remote Code Execution 8.1 0.9937 KEVRansomwareExploited
Patch now CVE-2017-0144 Windows SMB Server Remote Code Execution 8.1 0.9923 KEVRansomwareExploited
Patch now CVE-2017-0143 Windows SMB Server Remote Code Execution 8.1 0.9331 KEVRansomwareExploited
Patch now CVE-2017-0146 Windows SMB Server Remote Code Execution 8.1 0.8986 KEVRansomwareExploited
Patch now CVE-2017-0145 Windows SMB Server Remote Code Execution 8.1 0.8985 KEVRansomwareExploited
Patch now CVE-2017-0037 Microsoft Browsers Remote Code Execution 6.4 0.8039 KEVDisclosedExploited
Patch now CVE-2017-0059 Internet Explorer Information Disclosure 2.4 0.6197 KEVExploited
Patch now CVE-2017-0149 Internet Explorer Remote Code Execution 6.4 0.2849 KEVExploited
Patch now CVE-2017-0022 Microsoft XML Information Disclosure 4.3 0.1807 KEVExploited
Patch now CVE-2017-0005 Microsoft Graphics Component Elevation of Privilege 7.0 0.1102 KEVExploited
Patch now CVE-2017-0001 Microsoft Graphics Component Elevation of Privilege 7.8 0.0311 KEVExploited
Urgent CVE-2017-0070 Microsoft Edge (HTML-based) Remote Code Execution 4.2 0.7673 More likely
Urgent CVE-2017-0141 Microsoft Browsers Remote Code Execution 4.2 0.4817 More likely
Urgent CVE-2017-0023 Microsoft Windows PDF Remote Code Execution 4.2 0.3123 Exploitation Less Likely
Urgent CVE-2017-0094 Microsoft Edge (HTML-based) Remote Code Execution 4.2 0.2903 More likely
Urgent CVE-2017-0016 Windows SMB Server Denial of Service 5.3 0.2708 DisclosedMore likely
Urgent CVE-2017-0015 Microsoft Browsers Remote Code Execution 4.2 0.2637 More likely
Urgent CVE-2017-0134 Microsoft Edge (HTML-based) Remote Code Execution 4.2 0.2637 More likely
Urgent CVE-2017-0010 Microsoft Browsers Remote Code Execution 4.2 0.2472 More likely
Urgent CVE-2017-0133 Microsoft Browsers Remote Code Execution 4.2 0.2472 More likely
Urgent CVE-2017-0130 Internet Explorer Remote Code Execution 7.5 0.2122 More likely
Urgent CVE-2017-0014 Microsoft Graphics Component Remote Code Execution 6.4 0.1759 DisclosedExploitation Less Likely
Urgent CVE-2017-0032 Microsoft Edge (HTML-based) Remote Code Execution 4.2 0.1523 More likely
Urgent CVE-2017-0035 Microsoft Edge (HTML-based) Remote Code Execution 4.2 0.1523 More likely
Showing 1 to 25 of 80 1Next