VulnerabilitycriticalExploited in the wild

Microsoft Patch Tuesday

Cisco TalosMar 14, 2017 · 21:26 UTC (Mar 14, 2017)6 min read2 · 1 read

Read at blog.talosintelligence.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2017-0149 CVE-2017-0012 CVE-2017-0037 CVE-2017-0034

Tags: cve-2017-0149 cve-2017-0012 cve-2017-0037 cve-2017-0034 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2017-0034 +1 related CVE CVE-2017-0012	A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory	7.5 group max	13%		Mar 17, 2017
CVE-2017-0037	Type Confusion RCE in Microsoft Internet Explorer and Edge	8.1	80%	KEVPoC ×5	Feb 26, 2017 KEV Mar 28, 2022
CVE-2017-0149	Memory Corruption RCE in Microsoft Internet Explorer	8.8	28%	KEV	Mar 17, 2017 KEV May 24, 2022

From the original article

6 min read at blog.talosintelligence.com

Following a sparse February patch Tuesday, today’s March release brings a bumper crop of fixed vulnerabilities: 17 bulletins covering 140 different vulnerabilities, 47 of which are rated as critical. The critical vulnerabilities affect Internet Explorer, Edge, Hyper-V, Windows PDF Library, Microsoft SMB Server, Uniscribe, Microsoft Graphics Component, Adobe Flash Player and Microsoft Windows.

Cisco Talos

blog.talosintelligence.com

Read the full article at Cisco Talos

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.