Skip to main content

Microsoft Monthly Security Update (Mar 2017)

Last Update Date: 15 Mar 2017 11:13 Release Date: 15 Mar 2017 3545 Views

RISK: Extremely High Risk

TYPE: Operating Systems - Windows OS

TYPE: Windows OS

Microsoft has released monthly security update for their products:

 

Vulnerable ProductSeverityImpactsNotesDetails (including CVE)
Internet ExplorerExtremely Critical Extremely CriticalRemote Code Execution
Information Disclosure
Security Restriction Bypass
Elevation of Privilege
Exploits in the wildMS17-006
EdgeExtremely Critical Extremely CriticalRemote Code Execution
Information Disclosure
Security Restriction Bypass
Spoofing
Exploits in the wildMS17-007
Windows (Diagnostic Graphics Component)Extremely Critical Extremely CriticalElevation of Privilege
Information Disclosure
Remote Code Execution
Exploits in the wildMS17-013
WindowsHighly Critical Highly CriticalElevation of Privilege
Denial of Service
Elevation of Privilege
Security Restriction Bypass
Information Disclosure
Publicly disclosedMS17-012
OfficeHighly Critical Highly CriticalInformation Disclosure
Denial of Service
Remote Code Execution
Publicly disclosedMS17-014
Windows (Kernel)Highly Critical Highly CriticalElevation of PrivilegePublicly disclosedMS17-017
Windows (Hyper-V)Moderately Critical Moderately CriticalRemote Code Execution
Denial of Service
 MS17-008
Windows (PDF Library)Moderately Critical Moderately CriticalRemote Code Execution MS17-009
Windows (SMB Server)Moderately Critical Moderately CriticalRemote Code Execution
Information Disclosure
 MS17-010
Windows UniscribeModerately Critical Moderately CriticalElevation of Privilege MS17-011
Exchange Outlook Web AccessModerately Critical Moderately CriticalElevation of Privilege MS17-015
Internet Information Services (IIS)Moderately Critical Moderately CriticalElevation of Privilege MS17-016
Windows (Kernel-Mode Drivers)Moderately Critical Moderately CriticalElevation of Privilege MS17-018
Active Directory Federation Services (ADFS)Moderately Critical Moderately CriticalInformation Disclosure MS17-019
Windows DVD MakerModerately Critical Moderately CriticalSecurity Restriction Bypass MS17-020
Windows (DirectShow)Moderately Critical Moderately CriticalInformation Disclosure MS17-021
Windows (XML Core Services)Moderately Critical Moderately CriticalInformation DisclosureScattered exploitedMS17-022

 

Number of 'Extremely Critical' product(s): 3

Number of 'Highly Critical' product(s): 3

Number of 'Moderately Critical' product(s): 11

Evaluation of overall 'Criticality Level': Extremely Critical


Impact

  • Denial of Service
  • Elevation of Privilege
  • Remote Code Execution
  • Security Restriction Bypass
  • Information Disclosure
  • Spoofing

System / Technologies affected

  • Edge
  • Office 2007, 2010, 2013, 2013 RT, 2016
  • Office for Mac 2011, 2016
  • Sharepoint Server 2007, 2010, 2013
  • Office Web Apps 2010, 2013
  • Windows Vista, 7, 8.1, 10
  • Windows Server 2008, 2008 R2, 2012, 2012 R2
  • Microsoft Internet Information Services
  • Windows DVD Maker

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

  • The vendor has issued security updates for the products. Please refer to 'Details' column in the above table for details of individual product update or run software update.

Vulnerability Identifier


Source


Related Link