August 2016 Security Updates Security Update secure@microsoft.com The Microsoft Security Response Center (MSRC) identifies, monitors, resolves, and responds to security incidents and Microsoft software security vulnerabilities. For more information, see http://www.microsoft.com/security/msrc. 2016-Aug 2016-Aug Final 1.0 10 2017-09-12T07:00:00Z August 2016 Security Updates 2016-08-09T07:00:00Z 2017-09-12T07:00:00Z <p>The August security release consists of security updates for the following software:</p> <ul> <li>Internet Explorer</li> <li>Microsoft Edge</li> <li>Microsoft Windows</li> <li>Microsoft Office and Microsoft Office Services and Web Apps</li> <li>Skype for Business</li> <li>Microsoft Lync</li> </ul> <p>Please note the following information regarding the security updates:</p> <ul> <li>Windows 10 updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows 10, in addition to non-security updates. The updates are available via the <a href="http://catalog.update.microsoft.com/v7/site/Home.aspx">Microsoft Update Catalog</a>.</li> <li>Updates for Windows RT 8.1 and Microsoft Office RT software are only available via <a href="http://go.microsoft.com/fwlink/?LinkId=21130">Windows Update</a>.</li> <li>In addition to security changes for the vulnerabilities, updates include defense-in-depth updates to help improve security-related features <strong>Note</strong> As a reminder, the Security Updates Guide will be replacing security bulletins as of February 2017. Please see our blog post, <a href="https://blogs.technet.microsoft.com/msrc/2016/11/08/furthering-our-commitment-to-security-updates/">Furthering our commitment to security updates</a>, for more details.</li> </ul> <p><strong>Known Issues</strong></p> <ul> <li>Windows, IE: <a href="https://support.microsoft.com/en-us/kb/3176492">3176492</a></li> <li>Windows, IE: <a href="https://support.microsoft.com/en-us/kb/3176493">3176493</a></li> <li>Windows, IE: <a href="https://support.microsoft.com/en-us/kb/3176495">3176495</a></li> <li>Windows: <a href="https://support.microsoft.com/en-us/kb/3177725">3177725</a></li> <li>Windows: <a href="https://support.microsoft.com/kb/3179577">3179577</a></li> <li>Windows: <a href="https://support.microsoft.com/en-us/kb/3167679">3167679</a></li> </ul> The information provided in the Microsoft Knowledge Base is provided "as is" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply. Windows Vista Service Pack 2 Windows Vista x64 Edition Service Pack 2 Windows 10 for 32-bit Systems Windows 10 for x64-based Systems Windows 10 Version 1511 for 32-bit Systems Windows 10 Version 1511 for x64-based Systems Windows 8.1 for 32-bit systems Windows 8.1 for x64-based systems Windows RT 8.1 Windows Server 2012 R2 Windows Server 2012 R2 (Server Core installation) Windows 10 Version 1607 for 32-bit Systems Windows 10 Version 1607 for x64-based Systems Windows Server 2012 (Server Core installation) Windows Server 2012 Windows 7 for 32-bit Systems Service Pack 1 Windows 7 for x64-based Systems Service Pack 1 Windows Server 2008 for 32-bit Systems Service Pack 2 Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) Windows Server 2008 for Itanium-Based Systems Service Pack 2 Windows Server 2008 for x64-based Systems Service Pack 2 Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1 Windows Server 2008 R2 for x64-based Systems Service Pack 1 Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) Internet Explorer 9 on Windows Vista Service Pack 2 Internet Explorer 9 on Windows Vista x64 Edition Service Pack 2 Internet Explorer 9 on Windows Server 2008 for 32-bit Systems Service Pack 2 Internet Explorer 9 on Windows Server 2008 for x64-based Systems Service Pack 2 Internet Explorer 11 on Windows 7 for 32-bit Systems Service Pack 1 Internet Explorer 11 on Windows 7 for x64-based Systems Service Pack 1 Internet Explorer 11 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 Internet Explorer 11 on Windows 8.1 for 32-bit systems Internet Explorer 11 on Windows 8.1 for x64-based systems Internet Explorer 11 on Windows RT 8.1 Internet Explorer 11 on Windows Server 2012 R2 Internet Explorer 11 on Windows 10 for 32-bit Systems Internet Explorer 11 on Windows 10 for x64-based Systems Internet Explorer 11 on Windows 10 Version 1511 for 32-bit Systems Internet Explorer 11 on Windows 10 Version 1511 for x64-based Systems Internet Explorer 11 on Windows 10 Version 1607 for 32-bit Systems Internet Explorer 11 on Windows 10 Version 1607 for x64-based Systems Microsoft Edge (EdgeHTML-based) on Windows 10 for 32-bit Systems Microsoft Edge (EdgeHTML-based) on Windows 10 for x64-based Systems Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1511 for 32-bit Systems Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1511 for x64-based Systems Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for 32-bit Systems Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for x64-based Systems Internet Explorer 10 on Windows Server 2012 Internet Explorer 11 on Windows 10 Version 1703 for 32-bit Systems Internet Explorer 11 on Windows 10 Version 1703 for x64-based Systems Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1703 for 32-bit Systems Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1703 for x64-based Systems Microsoft Live Meeting 2007 Console Microsoft Office Word Viewer Microsoft Office 2007 Service Pack 3 Microsoft Office 2010 Service Pack 2 (32-bit editions) Microsoft Office 2010 Service Pack 2 (64-bit editions) Microsoft Lync 2010 (32-bit) Microsoft Lync 2010 (64-bit) Microsoft Lync 2010 Attendee (admin level install) Microsoft Lync 2010 Attendee (user level install) Microsoft Lync 2013 Service Pack 1 (32-bit) Microsoft Lync 2013 Service Pack 1 (64-bit) Microsoft Lync Basic 2013 Service Pack 1 (32-bit) Microsoft Lync Basic 2013 Service Pack 1 (64-bit) Skype for Business 2016 (32-bit) Skype for Business 2016 (64-bit) Skype for Business 2016 Basic (32-bit) Skype for Business 2016 Basic (64-bit) Microsoft Office 2013 Service Pack 1 (32-bit editions) Microsoft Office 2013 Service Pack 1 (64-bit editions) Microsoft Office 2013 RT Service Pack 1 Microsoft Word 2007 Service Pack 3 Microsoft Word 2016 for Mac Microsoft Word for Mac 2011 Microsoft Word 2010 Service Pack 2 (32-bit editions) Microsoft Word 2010 Service Pack 2 (64-bit editions) Microsoft Word 2013 RT Service Pack 1 Microsoft Word 2013 Service Pack 1 (32-bit editions) Microsoft Word 2013 Service Pack 1 (64-bit editions) Microsoft Word 2016 (32-bit edition) Microsoft Word 2016 (64-bit edition) Microsoft OneNote 2007 Service Pack 3 Microsoft OneNote 2013 Service Pack 1 (32-bit editions) Microsoft OneNote 2013 Service Pack 1 (64-bit editions) Microsoft OneNote 2016 (32-bit edition) Microsoft OneNote 2016 (64-bit edition) Microsoft OneNote for Mac 2016 Microsoft OneNote 2013 RT Service Pack 1 Microsoft OneNote 2010 Service Pack 2 (64-bit editions) Microsoft OneNote 2010 Service Pack 2 (32-bit editions) Microsoft Office 2016 (64-bit edition) Microsoft Office 2016 (32-bit edition) Microsoft Outlook 2007 Service Pack 3 Microsoft Outlook 2010 Service Pack 2 (32-bit editions) Microsoft Outlook 2010 Service Pack 2 (64-bit editions) Microsoft Outlook 2013 Service Pack 1 (32-bit editions) Microsoft Outlook 2013 Service Pack 1 (64-bit editions) Microsoft Outlook 2016 (32-bit edition) Microsoft Outlook 2016 (64-bit edition) Microsoft Word for Mac 2011 Windows 7 for 32-bit Systems Service Pack 1 Windows 7 for x64-based Systems Service Pack 1 Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1 Windows Server 2008 R2 for x64-based Systems Service Pack 1 Microsoft Lync 2010 (32-bit) Microsoft Office 2007 Service Pack 3 Microsoft OneNote 2007 Service Pack 3 Microsoft Outlook 2007 Service Pack 3 Microsoft Word 2007 Service Pack 3 Microsoft Lync 2010 Attendee (admin level install) Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) Microsoft Live Meeting 2007 Console Microsoft Lync 2010 Attendee (user level install) Microsoft Lync 2010 (64-bit) Internet Explorer 9 on Windows Vista Service Pack 2 Internet Explorer 9 on Windows Server 2008 for 32-bit Systems Service Pack 2 Internet Explorer 9 on Windows Vista x64 Edition Service Pack 2 Internet Explorer 9 on Windows Server 2008 for x64-based Systems Service Pack 2 Windows Server 2012 Windows Server 2012 (Server Core installation) Windows 8.1 for 32-bit systems Windows 8.1 for x64-based systems Windows Server 2012 R2 Windows RT 8.1 Internet Explorer 11 on Windows 7 for 32-bit Systems Service Pack 1 Internet Explorer 11 on Windows 7 for x64-based Systems Service Pack 1 Internet Explorer 11 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 Internet Explorer 11 on Windows 8.1 for 32-bit systems Internet Explorer 11 on Windows 8.1 for x64-based systems Internet Explorer 11 on Windows Server 2012 R2 Internet Explorer 11 on Windows RT 8.1 Internet Explorer 11 on Windows 10 for 32-bit Systems Internet Explorer 11 on Windows 10 for x64-based Systems Internet Explorer 11 on Windows 10 Version 1511 for x64-based Systems Internet Explorer 11 on Windows 10 Version 1511 for 32-bit Systems Internet Explorer 11 on Windows 10 Version 1607 for 32-bit Systems Internet Explorer 11 on Windows 10 Version 1607 for x64-based Systems Internet Explorer 11 on Windows 10 Version 1703 for 32-bit Systems Internet Explorer 11 on Windows 10 Version 1703 for x64-based Systems Microsoft Word 2010 Service Pack 2 (32-bit editions) Microsoft Word 2010 Service Pack 2 (64-bit editions) Microsoft Office 2010 Service Pack 2 (32-bit editions) Microsoft Office 2010 Service Pack 2 (64-bit editions) Microsoft Outlook 2010 Service Pack 2 (32-bit editions) Microsoft Outlook 2010 Service Pack 2 (64-bit editions) Windows Server 2012 R2 (Server Core installation) Internet Explorer 10 on Windows Server 2012 Microsoft Office 2013 Service Pack 1 (32-bit editions) Microsoft Office 2013 Service Pack 1 (64-bit editions) Microsoft Office 2013 RT Service Pack 1 Microsoft Word 2013 Service Pack 1 (32-bit editions) Microsoft Word 2013 Service Pack 1 (64-bit editions) Microsoft Word 2013 RT Service Pack 1 Microsoft Lync 2013 Service Pack 1 (32-bit) Microsoft Lync Basic 2013 Service Pack 1 (32-bit) Microsoft Lync 2013 Service Pack 1 (64-bit) Microsoft Lync Basic 2013 Service Pack 1 (64-bit) Microsoft Word 2016 for Mac Microsoft OneNote for Mac 2016 Microsoft Edge (EdgeHTML-based) on Windows 10 for 32-bit Systems Microsoft Edge (EdgeHTML-based) on Windows 10 for x64-based Systems Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1511 for x64-based Systems Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1511 for 32-bit Systems Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for 32-bit Systems Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for x64-based Systems Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1703 for 32-bit Systems Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1703 for x64-based Systems Windows 10 for 32-bit Systems Windows 10 for x64-based Systems Microsoft Word 2016 (32-bit edition) Microsoft Word 2016 (64-bit edition) Microsoft Office 2016 (32-bit edition) Microsoft Office 2016 (64-bit edition) Microsoft OneNote 2016 (32-bit edition) Microsoft OneNote 2016 (64-bit edition) Microsoft Outlook 2016 (32-bit edition) Microsoft Outlook 2016 (64-bit edition) Skype for Business 2016 (32-bit) Skype for Business 2016 (64-bit) Skype for Business 2016 Basic (32-bit) Skype for Business 2016 Basic (64-bit) Windows 10 Version 1511 for x64-based Systems Windows 10 Version 1511 for 32-bit Systems Microsoft OneNote 2010 Service Pack 2 (32-bit editions) Microsoft OneNote 2010 Service Pack 2 (64-bit editions) Microsoft OneNote 2013 Service Pack 1 (32-bit editions) Microsoft OneNote 2013 Service Pack 1 (64-bit editions) Microsoft OneNote 2013 RT Service Pack 1 Microsoft Outlook 2013 Service Pack 1 (32-bit editions) Microsoft Outlook 2013 Service Pack 1 (64-bit editions) Windows 10 Version 1607 for 32-bit Systems Windows 10 Version 1607 for x64-based Systems Microsoft Office Word Viewer Windows Vista Service Pack 2 Windows Server 2008 for Itanium-Based Systems Service Pack 2 Windows Server 2008 for 32-bit Systems Service Pack 2 Windows Vista x64 Edition Service Pack 2 Windows Server 2008 for x64-based Systems Service Pack 2 Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) Kerberos Security Feature Bypass Vulnerability <p>A security feature bypass vulnerability exists in Windows when Kerberos improperly handles a password change request and falls back to NT LAN Manager (<a href="https://technet.microsoft.com/en-us/library/security/dn848375.aspx#NTLM">NTLM</a>) Authentication Protocol as the default authentication protocol.</p> <p>An attacker who successfully exploited this vulnerability could use it to bypass Kerberos authentication. To exploit this vulnerability, an attacker would have to be able to launch a man-in-the-middle (<a href="https://technet.microsoft.com/en-us/library/security/dn848375.aspx#MiTM">MiTM</a>) attack against the traffic passing between a domain controller and the target machine.</p> <p>The update addresses this vulnerability by preventing Kerberos from falling back to NTLM as the default authentication protocol during a domain account password change.</p> Windows Authentication Methods CVE-2016-3237 4393 9316 10729 10735 10789 10788 10047 10048 10481 10482 10484 9312 10287 9311 9318 9344 10050 10051 10049 10483 10543 10852 10853 10379 10378 Security Feature Bypass 4393 Security Feature Bypass 9316 Security Feature Bypass 10729 Security Feature Bypass 10735 Security Feature Bypass 10789 Security Feature Bypass 10788 Security Feature Bypass 10047 Security Feature Bypass 10048 Security Feature Bypass 10481 Security Feature Bypass 10482 Security Feature Bypass 10484 Security Feature Bypass 9312 Security Feature Bypass 10287 Security Feature Bypass 9311 Security Feature Bypass 9318 Security Feature Bypass 9344 Security Feature Bypass 10050 Security Feature Bypass 10051 Security Feature Bypass 10049 Security Feature Bypass 10483 Security Feature Bypass 10543 Security Feature Bypass 10852 Security Feature Bypass 10853 Security Feature Bypass 10379 Security Feature Bypass 10378 Important 4393 Important 9316 Important 10729 Important 10735 Important 10789 Important 10788 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 9312 Important 10287 Important 9311 Important 9318 Important 9344 Important 10050 Important 10051 Important 10049 Important 10483 Important 10543 Important 10852 Important 10853 Important 10379 Important 10378 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 6.4 5.8 CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 4393 6.4 5.8 CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9316 6.4 5.8 CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10729 6.4 5.8 CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10735 6.4 5.8 CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10789 6.4 5.8 CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10788 6.4 5.8 CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10047 6.4 5.8 CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10048 6.4 5.8 CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10481 6.4 5.8 CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10482 6.4 5.8 CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9312 6.4 5.8 CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10287 6.4 5.8 CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9311 6.4 5.8 CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9318 6.4 5.8 CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9344 6.4 5.8 CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10050 6.4 5.8 CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10051 6.4 5.8 CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10049 6.4 5.8 CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10483 6.4 5.8 CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10543 6.4 5.8 CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10852 6.4 5.8 CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10853 3167679 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3167679 3121918 4393 Yes Security Update 3167679 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3167679 3121918 9316 Yes Security Update 3192440 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192440 3185611 10729 Yes Security Update 3192440 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192440 3185611 10735 Yes Security Update 3192441 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192441 3185614 10789 Yes Security Update 3192441 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192441 3185614 10788 Yes Security Update 3185330 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185330 3175024 10047 Yes Monthly Rollup 3192391 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192391 3175024 10047 Yes Security Only 3185330 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185330 3175024 10048 Yes Monthly Rollup 3192391 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192391 3175024 10048 Yes Security Only 3185331 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185331 3185319 10481 Yes Monthly Rollup 3192392 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192392 MS16-016, 3124280; MS16-097, 3178034; MS16-104, 3185319 10481 Security Only 3185331 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185331 3185319 10482 Yes Monthly Rollup 3192392 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192392 MS16-016, 3124280; MS16-097, 3178034; MS16-101, 3167679; MS16-104, 3185319 10482 Security Only 3185331 3185319 10484 Yes Monthly Rollup 3167679 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3167679 3121918 9312 Yes Security Update 3167679 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3167679 3121918 10287 Yes Security Update 3167679 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3167679 3121918 9311 Yes Security Update 3167679 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3167679 3121918 9318 Yes Security Update 3167679 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3167679 3121918 9344 Yes Security Update 3185330 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185330 3175024 10050 Yes Monthly Rollup 3192391 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192391 3175024 10050 Yes Security Only 3185330 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185330 3175024 10051 Yes Monthly Rollup 3192391 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192391 3175024 10051 Yes Security Only 3185330 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185330 3175024 10049 Yes Monthly Rollup 3192391 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192391 3175024 10049 Yes Security Only 3185331 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185331 3185319 10483 Yes Monthly Rollup 3192392 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192392 MS16-016, 3124280; MS16-097, 3178034; MS16-101, 3167679; MS16-104, 3185319 10483 Security Only 3185331 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185331 3185319 10543 Yes Monthly Rollup 3192392 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192392 MS16-016, 3124280; MS16-097, 3178034; MS16-101, 3167679; MS16-104, 3185319 10543 Security Only 3194798 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3194798 3189866 10852 Yes Security Update 3194798 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3194798 3189866 10853 Yes Security Update 3185332 https://www.microsoft.com/downloads/details.aspx?familyid=93b4d5dd-9784-4fb4-9c0c-9171a24efca5 3192393 10379 Yes Monthly Rollup 3192393 https://www.microsoft.com/downloads/details.aspx?familyid=17dc5103-8380-440a-9e5b-a55cdc33388b 3185319 10379 Yes Security Only 3185332 https://www.microsoft.com/downloads/details.aspx?familyid=93b4d5dd-9784-4fb4-9c0c-9171a24efca5 3192393 10378 Yes Monthly Rollup 3192393 https://www.microsoft.com/downloads/details.aspx?familyid=17dc5103-8380-440a-9e5b-a55cdc33388b 3185319 10378 Yes Security Only <a href="https://twitter.com/NabeelAhmedBE">Nabeel Ahmed</a> of <a href="http://www.dimensiondata.com/">Dimension Data</a> 1.0 2016-08-09T07:00:00Z <p>Information published.</p> 1.1 2016-08-10T07:00:00Z <p>Bulletin revised to correct the security impact for CVE-2016-3237 from elevation of privilege to security feature bypass. This is an informational change only. Customers who have already successfully installed the update do not need to take any action.</p> 1.2 2016-09-02T07:00:00Z <p>Bulletin revised to correct the Mitigating Factors section for CVE-2016-3237 — Microsoft has not identified any mitigations for this vulnerability.</p> 2.0 2016-10-11T07:00:00Z <p>To address known issues with the update for CVE-2016-3237, Microsoft re-released security update 3167679 for Windows Vista and Windows Server 2008. Microsoft recommends that customers running this affected software reinstall the update to be fully protected from CVE-2016-3237. See Microsoft Knowledge Base Article 3167679 for more information.</p> Internet Explorer Memory Corruption Vulnerability <p>A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory via the Microsoft Windows Text Services Framework. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, the attacker could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p> <p>An attacker could host a specially crafted website designed to exploit the vulnerability through Internet Explorer, and then convince a user to view the website. The attacker could also take advantage of compromised websites, or websites that accept or host user-provided content or advertisements, by adding specially crafted content that could exploit the vulnerability. In all cases, however, an attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically by an enticement in an email or instant message, or by getting them to open an attachment sent through email.</p> <p>The security update addresses the vulnerability by modifying how the Microsoft Windows Text Services Framework handles objects in memory.</p> Internet Explorer CVE-2016-3288 10486-10047 10486-10048 10486-10051 10486-10481 10486-10482 10486-10484 10486-10483 10486-10729 10486-10735 10486-10789 10486-10788 10486-10852 10486-10853 Remote Code Execution 10486-10047 Remote Code Execution 10486-10048 Remote Code Execution 10486-10051 Remote Code Execution 10486-10481 Remote Code Execution 10486-10482 Remote Code Execution 10486-10484 Remote Code Execution 10486-10483 Remote Code Execution 10486-10729 Remote Code Execution 10486-10735 Remote Code Execution 10486-10789 Remote Code Execution 10486-10788 Remote Code Execution 10486-10852 Remote Code Execution 10486-10853 Critical 10486-10047 Critical 10486-10048 Moderate 10486-10051 Critical 10486-10481 Critical 10486-10482 Critical 10486-10484 Moderate 10486-10483 Critical 10486-10729 Critical 10486-10735 Critical 10486-10789 Critical 10486-10788 Critical 10486-10852 Critical 10486-10853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely 7.1 6.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10486-10481 7.1 6.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10486-10482 6.0 5.4 CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10486-10483 7.1 6.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10486-10729 7.1 6.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10486-10735 7.1 6.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10486-10789 7.1 6.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10486-10788 7.1 6.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10486-10852 7.1 6.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10486-10853 3175443 https://www.microsoft.com/downloads/details.aspx?familyid=693dcdd8-0bc1-4940-817d-72e6769f9919 3170106 10486-10047 Yes Security Update 3175443 https://www.microsoft.com/downloads/details.aspx?familyid=c8f97de6-30ce-40d5-8cb7-ec6166ed59bb 3170106 10486-10048 Yes Security Update 3175443 https://www.microsoft.com/downloads/details.aspx?familyid=c8f97de6-30ce-40d5-8cb7-ec6166ed59bb 3170106 10486-10051 Yes Security Update 3175443 https://www.microsoft.com/downloads/details.aspx?familyid=8c8d3d32-ed7a-4e2e-8c4b-1f1ba81771f6 3170106 10486-10481 Yes Security Update 3175443 https://www.microsoft.com/downloads/details.aspx?familyid=1385662a-0bca-4de8-bb89-fbf7eccc2e2e 3170106 10486-10482 Yes Security Update 3175443 3170106 10486-10484 Yes Security Update 3175443 https://www.microsoft.com/downloads/details.aspx?familyid=1385662a-0bca-4de8-bb89-fbf7eccc2e2e 3170106 10486-10483 Yes Security Update 3176492 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176492 3163912 10486-10729 Yes Security Update 3176492 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176492 3163912 10486-10735 Yes Security Update 3176493 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176493 3172985 10486-10789 Yes Security Update 3176493 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176493 3172985 10486-10788 Yes Security Update 3176495 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176495 10486-10852 Yes Security Update 3176495 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176495 10486-10853 Yes Security Update Ivan Fratric and Martin Barbella, working with <a href="http://www.google.com/">Google Project Zero</a> 1.0 2016-08-09T07:00:00Z <p>Information published.</p> Microsoft Browser Memory Corruption Vulnerability <p>A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory. The vulnerability could corrupt memory in a way that could allow an attacker to execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, the attacker could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p> <p>An attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft browsers, and then convince a user to view the website. The attacker could also take advantage of compromised websites, or websites that accept or host user-provided content or advertisements, by adding specially crafted content that could exploit the vulnerability. In all cases, however, an attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically via an enticement in email or instant message, or by getting them to open an email attachment.</p> <p>The security update addresses the vulnerability by modifying how Microsoft browsers handle objects in memory.</p> Microsoft Browsers CVE-2016-3289 10486-10047 10486-10048 10486-10051 10486-10481 10486-10482 10486-10484 10486-10483 10486-10729 10486-10735 10486-10789 10486-10788 10724-10729 10724-10735 10724-10789 10724-10788 10724-10852 10724-10853 10486-10852 10486-10853 Remote Code Execution 10486-10047 Remote Code Execution 10486-10048 Remote Code Execution 10486-10051 Remote Code Execution 10486-10481 Remote Code Execution 10486-10482 Remote Code Execution 10486-10484 Remote Code Execution 10486-10483 Remote Code Execution 10486-10729 Remote Code Execution 10486-10735 Remote Code Execution 10486-10789 Remote Code Execution 10486-10788 Remote Code Execution 10724-10729 Remote Code Execution 10724-10735 Remote Code Execution 10724-10789 Remote Code Execution 10724-10788 Remote Code Execution 10724-10852 Remote Code Execution 10724-10853 Remote Code Execution 10486-10852 Remote Code Execution 10486-10853 Critical 10486-10047 Critical 10486-10048 Moderate 10486-10051 Critical 10486-10481 Critical 10486-10482 Critical 10486-10484 Moderate 10486-10483 Critical 10486-10729 Critical 10486-10735 Critical 10486-10789 Critical 10486-10788 Critical 10724-10729 Critical 10724-10735 Critical 10724-10789 Critical 10724-10788 Critical 10724-10852 Critical 10724-10853 Critical 10486-10852 Critical 10486-10853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A 7.1 6.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10486-10481 7.1 6.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10486-10482 6.0 5.4 CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10486-10483 7.1 6.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10486-10729 7.1 6.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10486-10735 7.1 6.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10486-10789 7.1 6.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10486-10788 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10729 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10735 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10789 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10788 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10852 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10853 7.1 6.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10486-10852 7.1 6.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10486-10853 3175443 https://www.microsoft.com/downloads/details.aspx?familyid=693dcdd8-0bc1-4940-817d-72e6769f9919 3170106 10486-10047 Yes Security Update 3175443 https://www.microsoft.com/downloads/details.aspx?familyid=c8f97de6-30ce-40d5-8cb7-ec6166ed59bb 3170106 10486-10048 Yes Security Update 3175443 https://www.microsoft.com/downloads/details.aspx?familyid=c8f97de6-30ce-40d5-8cb7-ec6166ed59bb 3170106 10486-10051 Yes Security Update 3175443 https://www.microsoft.com/downloads/details.aspx?familyid=8c8d3d32-ed7a-4e2e-8c4b-1f1ba81771f6 3170106 10486-10481 Yes Security Update 3175443 https://www.microsoft.com/downloads/details.aspx?familyid=1385662a-0bca-4de8-bb89-fbf7eccc2e2e 3170106 10486-10482 Yes Security Update 3175443 3170106 10486-10484 Yes Security Update 3175443 https://www.microsoft.com/downloads/details.aspx?familyid=1385662a-0bca-4de8-bb89-fbf7eccc2e2e 3170106 10486-10483 Yes Security Update 3176492 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176492 3163912 10486-10729 Yes Security Update 3176492 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176492 3163912 10486-10735 Yes Security Update 3176493 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176493 3172985 10486-10789 Yes Security Update 3176493 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176493 3172985 10486-10788 Yes Security Update 3176492 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176492 3163912 10724-10729 Yes Security Update 3176492 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176492 3163912 10724-10735 Yes Security Update 3176493 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176493 3172985 10724-10789 Yes Security Update 3176493 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176493 3172985 10724-10788 Yes Security Update 3176495 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176495 10724-10852 Yes Security Update 3176495 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176495 10724-10853 Yes Security Update 3176495 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176495 10486-10852 Yes Security Update 3176495 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176495 10486-10853 Yes Security Update Zheng Huang of <a href=" http://xteam.baidu.com/">Baidu XLab</a>, working with <a href="http://www.zerodayinitiative.com/">Trend Micro's Zero Day Initiative (ZDI)</a> 1.0 2016-08-09T07:00:00Z <p>Information published.</p> Internet Explorer Memory Corruption Vulnerability <p>A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory via the Microsoft Windows Text Services Framework. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, the attacker could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p> <p>An attacker could host a specially crafted website designed to exploit the vulnerability through Internet Explorer, and then convince a user to view the website. The attacker could also take advantage of compromised websites, or websites that accept or host user-provided content or advertisements, by adding specially crafted content that could exploit the vulnerability. In all cases, however, an attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically by an enticement in an email or instant message, or by getting them to open an attachment sent through email.</p> <p>The security update addresses the vulnerability by modifying how the Microsoft Windows Text Services Framework handles objects in memory.</p> Internet Explorer CVE-2016-3290 10486-10047 10486-10048 10486-10051 10486-10481 10486-10482 10486-10484 10486-10483 10486-10729 10486-10735 10486-10789 10486-10788 10486-10852 10486-10853 Remote Code Execution 10486-10047 Remote Code Execution 10486-10048 Remote Code Execution 10486-10051 Remote Code Execution 10486-10481 Remote Code Execution 10486-10482 Remote Code Execution 10486-10484 Remote Code Execution 10486-10483 Remote Code Execution 10486-10729 Remote Code Execution 10486-10735 Remote Code Execution 10486-10789 Remote Code Execution 10486-10788 Remote Code Execution 10486-10852 Remote Code Execution 10486-10853 Critical 10486-10047 Critical 10486-10048 Moderate 10486-10051 Critical 10486-10481 Critical 10486-10482 Critical 10486-10484 Moderate 10486-10483 Critical 10486-10729 Critical 10486-10735 Critical 10486-10789 Critical 10486-10788 Critical 10486-10852 Critical 10486-10853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely 7.1 6.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10486-10481 7.1 6.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10486-10482 6.0 5.4 CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10486-10483 7.1 6.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10486-10729 7.1 6.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10486-10735 7.1 6.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10486-10789 7.1 6.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10486-10788 7.1 6.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10486-10852 7.1 6.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10486-10853 3175443 https://www.microsoft.com/downloads/details.aspx?familyid=693dcdd8-0bc1-4940-817d-72e6769f9919 3170106 10486-10047 Yes Security Update 3175443 https://www.microsoft.com/downloads/details.aspx?familyid=c8f97de6-30ce-40d5-8cb7-ec6166ed59bb 3170106 10486-10048 Yes Security Update 3175443 https://www.microsoft.com/downloads/details.aspx?familyid=c8f97de6-30ce-40d5-8cb7-ec6166ed59bb 3170106 10486-10051 Yes Security Update 3175443 https://www.microsoft.com/downloads/details.aspx?familyid=8c8d3d32-ed7a-4e2e-8c4b-1f1ba81771f6 3170106 10486-10481 Yes Security Update 3175443 https://www.microsoft.com/downloads/details.aspx?familyid=1385662a-0bca-4de8-bb89-fbf7eccc2e2e 3170106 10486-10482 Yes Security Update 3175443 3170106 10486-10484 Yes Security Update 3175443 https://www.microsoft.com/downloads/details.aspx?familyid=1385662a-0bca-4de8-bb89-fbf7eccc2e2e 3170106 10486-10483 Yes Security Update 3176492 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176492 3163912 10486-10729 Yes Security Update 3176492 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176492 3163912 10486-10735 Yes Security Update 3176493 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176493 3172985 10486-10789 Yes Security Update 3176493 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176493 3172985 10486-10788 Yes Security Update 3176495 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176495 10486-10852 Yes Security Update 3176495 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176495 10486-10853 Yes Security Update Liu Long of <a href="http://www.360.cn/">Qihoo 360</a> 1.0 2016-08-09T07:00:00Z <p>Information published.</p> Microsoft Browser Memory Corruption Vulnerability <p>A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory. The vulnerability could corrupt memory in a way that could allow an attacker to execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, the attacker could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p> <p>An attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft browsers, and then convince a user to view the website. The attacker could also take advantage of compromised websites, or websites that accept or host user-provided content or advertisements, by adding specially crafted content that could exploit the vulnerability. In all cases, however, an attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically via an enticement in email or instant message, or by getting them to open an email attachment.</p> <p>The security update addresses the vulnerability by modifying how Microsoft browsers handle objects in memory.</p> Microsoft Browsers CVE-2016-3293 10336-4393 10336-9316 10486-10047 10486-10048 10486-10051 10555-10378 10486-10481 10486-10482 10486-10484 10486-10483 10486-10729 10486-10735 10486-10789 10486-10788 10724-10729 10724-10735 10724-10789 10724-10788 10336-9312 10336-9318 10724-10852 10724-10853 10486-10852 10486-10853 Remote Code Execution 10336-4393 Remote Code Execution 10336-9316 Remote Code Execution 10486-10047 Remote Code Execution 10486-10048 Remote Code Execution 10486-10051 Remote Code Execution 10555-10378 Remote Code Execution 10486-10481 Remote Code Execution 10486-10482 Remote Code Execution 10486-10484 Remote Code Execution 10486-10483 Remote Code Execution 10486-10729 Remote Code Execution 10486-10735 Remote Code Execution 10486-10789 Remote Code Execution 10486-10788 Remote Code Execution 10724-10729 Remote Code Execution 10724-10735 Remote Code Execution 10724-10789 Remote Code Execution 10724-10788 Remote Code Execution 10336-9312 Remote Code Execution 10336-9318 Remote Code Execution 10724-10852 Remote Code Execution 10724-10853 Remote Code Execution 10486-10852 Remote Code Execution 10486-10853 Critical 10336-4393 Critical 10336-9316 Critical 10486-10047 Critical 10486-10048 Moderate 10486-10051 Moderate 10555-10378 Critical 10486-10481 Critical 10486-10482 Critical 10486-10484 Moderate 10486-10483 Critical 10486-10729 Critical 10486-10735 Critical 10486-10789 Critical 10486-10788 Important 10724-10729 Important 10724-10735 Important 10724-10789 Important 10724-10788 Moderate 10336-9312 Moderate 10336-9318 Important 10724-10852 Important 10724-10853 Critical 10486-10852 Critical 10486-10853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A 7.1 6.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10336-4393 7.1 6.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10336-9316 7.1 6.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10486-10047 7.1 6.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10486-10048 6.0 5.4 CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10486-10051 6.0 5.4 CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10555-10378 7.1 6.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10486-10481 7.1 6.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10486-10482 6.0 5.4 CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10486-10483 7.1 6.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10486-10729 7.1 6.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10486-10735 7.1 6.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10486-10789 7.1 6.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10486-10788 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10729 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10735 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10789 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10788 6.0 5.4 CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10336-9312 6.0 5.4 CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10336-9318 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10852 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10853 7.1 6.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10486-10852 7.1 6.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10486-10853 3175443 https://www.microsoft.com/downloads/details.aspx?familyid=1298b43f-e00f-4b96-8ba7-a866a307d226 3170106 10336-4393 Yes Security Update 3175443 https://www.microsoft.com/downloads/details.aspx?familyid=7aabe7e8-405e-403e-ab8f-2d49ed59af1a 3170106 10336-9316 Yes Security Update 3175443 https://www.microsoft.com/downloads/details.aspx?familyid=693dcdd8-0bc1-4940-817d-72e6769f9919 3170106 10486-10047 Yes Security Update 3175443 https://www.microsoft.com/downloads/details.aspx?familyid=c8f97de6-30ce-40d5-8cb7-ec6166ed59bb 3170106 10486-10048 Yes Security Update 3175443 https://www.microsoft.com/downloads/details.aspx?familyid=c8f97de6-30ce-40d5-8cb7-ec6166ed59bb 3170106 10486-10051 Yes Security Update 3175443 https://www.microsoft.com/downloads/details.aspx?familyid=95af65ca-44a0-4e80-a63c-dc0c1cc8c965 3170106 10555-10378 Yes Security Update 3175443 https://www.microsoft.com/downloads/details.aspx?familyid=8c8d3d32-ed7a-4e2e-8c4b-1f1ba81771f6 3170106 10486-10481 Yes Security Update 3175443 https://www.microsoft.com/downloads/details.aspx?familyid=1385662a-0bca-4de8-bb89-fbf7eccc2e2e 3170106 10486-10482 Yes Security Update 3175443 3170106 10486-10484 Yes Security Update 3175443 https://www.microsoft.com/downloads/details.aspx?familyid=1385662a-0bca-4de8-bb89-fbf7eccc2e2e 3170106 10486-10483 Yes Security Update 3176492 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176492 3163912 10486-10729 Yes Security Update 3176492 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176492 3163912 10486-10735 Yes Security Update 3176493 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176493 3172985 10486-10789 Yes Security Update 3176493 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176493 3172985 10486-10788 Yes Security Update 3176492 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176492 3163912 10724-10729 Yes Security Update 3176492 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176492 3163912 10724-10735 Yes Security Update 3176493 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176493 3172985 10724-10789 Yes Security Update 3176493 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176493 3172985 10724-10788 Yes Security Update 3175443 https://www.microsoft.com/downloads/details.aspx?familyid=1298b43f-e00f-4b96-8ba7-a866a307d226 3170106 10336-9312 Yes Security Update 3175443 https://www.microsoft.com/downloads/details.aspx?familyid=7aabe7e8-405e-403e-ab8f-2d49ed59af1a 3170106 10336-9318 Yes Security Update 3176495 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176495 10724-10852 Yes Security Update 3176495 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176495 10724-10853 Yes Security Update 3176495 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176495 10486-10852 Yes Security Update 3176495 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176495 10486-10853 Yes Security Update Kai Song (<a href="http://exp-sky.org/">exp-sky</a>) of <a href="http://www.tencent.com/">Tencent's Xuanwu Lab</a> 1.0 2016-08-09T07:00:00Z <p>Information published.</p> Scripting Engine Memory Corruption Vulnerability <p>A remote code execution vulnerability exists in the way that Microsoft browser JavaScript engines render content when handling objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user.</p> <p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft browsers and then convince a user to view the website. An attacker could also embed an ActiveX control marked &quot;safe for initialization&quot; in an application or Microsoft Office document that hosts the related rendering engine. The attacker could also take advantage of compromised websites, and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p> <p>An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p> <p>The security update addresses the vulnerability by modifying how Microsoft browser JavaScript scripting engines handle objects in memory.</p> Microsoft Edge CVE-2016-3296 10724-10729 10724-10735 10724-10789 10724-10788 10724-10852 10724-10853 Remote Code Execution 10724-10729 Remote Code Execution 10724-10735 Remote Code Execution 10724-10789 Remote Code Execution 10724-10788 Remote Code Execution 10724-10852 Remote Code Execution 10724-10853 Critical 10724-10729 Critical 10724-10735 Critical 10724-10789 Critical 10724-10788 Critical 10724-10852 Critical 10724-10853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10729 3176492 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176492 3163912 10724-10729 Yes Security Update 3176492 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176492 3163912 10724-10735 Yes Security Update 3176493 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176493 3172985 10724-10789 Yes Security Update 3176493 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176493 3172985 10724-10788 Yes Security Update 3176495 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176495 10724-10852 Yes Security Update 3176495 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176495 10724-10853 Yes Security Update Microsoft ChakraCore Team 1.0 2016-08-09T07:00:00Z <p>Information published.</p> NetLogon Elevation of Privilege Vulnerability <p>An elevation of privilege vulnerability exists when Windows Netlogon improperly establishes a secure communications channel to a domain controller. An attacker who successfully exploited the vulnerability could run a specially crafted application on a domain-joined system.</p> <p>To exploit the vulnerability, an attacker would require access to a domain-joined machine that points to a domain controller running either Windows Server 2012 or Windows Server 2012 R2.</p> <p>The update addresses the vulnerability by modifying how Netlogon handles the establishment of secure channels.</p> Windows Authentication Methods CVE-2016-3300 10481 10482 10484 10378 10379 10483 10543 Elevation of Privilege 10481 Elevation of Privilege 10482 Elevation of Privilege 10484 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 10481 Important 10482 Important 10484 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A;Older Software Release:Exploitation Less Likely 6.8 5.9 CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:R 10481 6.8 5.9 CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:R 10482 6.8 5.9 CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:R 10484 6.8 5.9 CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:R 10378 6.8 5.9 CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:R 10379 6.8 5.9 CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:R 10483 6.8 5.9 CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:R 10543 3177108 https://www.microsoft.com/downloads/details.aspx?familyid=c36cfcce-9a48-46d1-8191-184e2d12c464 3068457 10481 Yes Security Update 3177108 https://www.microsoft.com/downloads/details.aspx?familyid=78bbd98a-a91a-4cc6-b6c1-b34a6d195a52 3068457 10482 Yes Security Update 3177108 3068457 10484 Yes Security Update 3177108 https://www.microsoft.com/downloads/details.aspx?familyid=14a50307-f863-4cc8-a009-480f63861e3a 3068457 10378 Yes Security Update 3177108 https://www.microsoft.com/downloads/details.aspx?familyid=14a50307-f863-4cc8-a009-480f63861e3a 3068457 10379 Yes Security Update 3177108 https://www.microsoft.com/downloads/details.aspx?familyid=78bbd98a-a91a-4cc6-b6c1-b34a6d195a52 3068457 10483 Yes Security Update 3177108 https://www.microsoft.com/downloads/details.aspx?familyid=78bbd98a-a91a-4cc6-b6c1-b34a6d195a52 3068457 10543 Yes Security Update 1.0 2016-08-09T07:00:00Z <p>Information published.</p> Microsoft Graphics Remote Code Execution Vulnerability <p>A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker who successfully exploited the vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.</p> <p>There are multiple ways an attacker could exploit the vulnerability:</p> <ul> <li>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability and then convince users to view the website. An attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically by getting them to click a link in an email or instant message that takes users to the attacker's website, or by opening an attachment sent through email.</li> <li>In a file-sharing attack scenario, an attacker could provide a specially crafted document file designed to exploit the vulnerability and then convince users to open the document file.</li> </ul> <p>The security update addresses the vulnerability by correcting how the Windows font library handles embedded fonts.</p> Microsoft Graphics Component CVE-2016-3301 10729 10735 10789 10788 10047 10048 10481 10482 10484 9312 10287 9311 9318 9344 10050 10051 10049 10378 10379 10483 10543 4393 9316 10852 10853 10290 1160 10150 10521 10522 10069 10303 10268 10295 10628 10630 10629 10631 10770 10771 10772 10773 Remote Code Execution 10729 Remote Code Execution 10735 Remote Code Execution 10789 Remote Code Execution 10788 Remote Code Execution 10047 Remote Code Execution 10048 Remote Code Execution 10481 Remote Code Execution 10482 Remote Code Execution 10484 Remote Code Execution 9312 Remote Code Execution 10287 Remote Code Execution 9311 Remote Code Execution 9318 Remote Code Execution 9344 Remote Code Execution 10050 Remote Code Execution 10051 Remote Code Execution 10049 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 4393 Remote Code Execution 9316 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10290 Remote Code Execution 1160 Remote Code Execution 10150 Remote Code Execution 10521 Remote Code Execution 10522 Remote Code Execution 10069 Remote Code Execution 10303 Remote Code Execution 10268 Remote Code Execution 10295 Remote Code Execution 10628 Remote Code Execution 10630 Remote Code Execution 10629 Remote Code Execution 10631 Remote Code Execution 10770 Remote Code Execution 10771 Remote Code Execution 10772 Remote Code Execution 10773 Critical 10729 Critical 10735 Critical 10789 Critical 10788 Critical 10047 Critical 10048 Critical 10481 Critical 10482 Critical 10484 Critical 9312 Critical 10287 Critical 9311 Critical 9318 Critical 9344 Critical 10050 Critical 10051 Critical 10049 Critical 10378 Critical 10379 Critical 10483 Critical 10543 Critical 4393 Critical 9316 Critical 10852 Critical 10853 Critical 10290 Critical 1160 Critical 10150 Critical 10521 Critical 10522 Critical 10069 Critical 10303 Critical 10268 Critical 10295 Critical 10628 Critical 10630 Critical 10629 Critical 10631 Critical 10770 Critical 10771 Critical 10772 Critical 10773 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10729 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10735 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10789 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10788 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10047 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10048 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10481 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10482 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10484 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9312 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10287 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9311 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9318 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9344 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10050 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10051 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10049 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10378 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10379 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10483 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10543 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 4393 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9316 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10852 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10853 3176492 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176492 3163912 10729 Yes Security Update 3176492 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176492 3163912 10735 Yes Security Update 3176493 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176493 3172985 10789 Yes Security Update 3176493 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176493 3172985 10788 Yes Security Update 3178034 https://www.microsoft.com/downloads/details.aspx?familyid=46d4a3bc-6d94-4394-8a4e-c85c7caadc33 3087135 10047 Yes Security Update 3178034 https://www.microsoft.com/downloads/details.aspx?familyid=d187d61e-7df5-4d96-b041-39e728a2f435 3087135 10048 Yes Security Update 3178034 https://www.microsoft.com/downloads/details.aspx?familyid=1bfa1f0d-7acd-48de-8755-817807284baf 3087135 10481 Yes Security Update 3178034 https://www.microsoft.com/downloads/details.aspx?familyid=cb019915-0256-4d3e-8847-753e7c4a8ca7 3087135 10482 Yes Security Update 3178034 3087135 10484 Yes Security Update 3178034 https://www.microsoft.com/downloads/details.aspx?familyid=3813c064-fd93-43fb-ae29-5e4c47c8032e 3087135 9312 Yes Security Update 3178034 https://www.microsoft.com/downloads/details.aspx?familyid=3813c064-fd93-43fb-ae29-5e4c47c8032e 3087135 10287 Yes Security Update 3178034 https://www.microsoft.com/downloads/details.aspx?familyid=2f37b5bd-255f-4e0c-8794-ebd9c022f207 3087135 9311 Yes Security Update 3178034 https://www.microsoft.com/downloads/details.aspx?familyid=28067856-7e2b-4f92-a1b2-15b1240d5604 3087135 9318 Yes Security Update 3178034 https://www.microsoft.com/downloads/details.aspx?familyid=28067856-7e2b-4f92-a1b2-15b1240d5604 3087135 9344 Yes Security Update 3178034 https://www.microsoft.com/downloads/details.aspx?familyid=05fd8685-a167-4567-9331-7b93931d280f 3087135 10050 Yes Security Update 3178034 https://www.microsoft.com/downloads/details.aspx?familyid=d187d61e-7df5-4d96-b041-39e728a2f435 3087135 10051 Yes Security Update 3178034 https://www.microsoft.com/downloads/details.aspx?familyid=d187d61e-7df5-4d96-b041-39e728a2f435 3087135 10049 Yes Security Update 3178034 https://www.microsoft.com/downloads/details.aspx?familyid=5eba3ea1-070c-4894-bb37-83051aba6419 3087135 10378 Yes Security Update 3178034 https://www.microsoft.com/downloads/details.aspx?familyid=5eba3ea1-070c-4894-bb37-83051aba6419 3087135 10379 Yes Security Update 3178034 https://www.microsoft.com/downloads/details.aspx?familyid=cb019915-0256-4d3e-8847-753e7c4a8ca7 3087135 10483 Yes Security Update 3178034 https://www.microsoft.com/downloads/details.aspx?familyid=cb019915-0256-4d3e-8847-753e7c4a8ca7 3087135 10543 Yes Security Update 3178034 https://www.microsoft.com/downloads/details.aspx?familyid=3813c064-fd93-43fb-ae29-5e4c47c8032e 3087135 4393 Yes Security Update 3178034 https://www.microsoft.com/downloads/details.aspx?familyid=28067856-7e2b-4f92-a1b2-15b1240d5604 3087135 9316 Yes Security Update 3176495 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176495 10852 Yes Security Update 3176495 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176495 10853 Yes Security Update 3174305 https://support.microsoft.com/kb/3174305 3144431 10290 Yes Security Update 3115481 https://www.microsoft.com/downloads/details.aspx?familyid=c6267f01-7c57-4c06-809e-fb84bc9ec62f 3114985 1160 Yes Security Update 3115109 https://www.microsoft.com/downloads/details.aspx?familyid=cac9f192-03f4-4fc2-a11f-aca63b038c21 3114542 10150 Maybe Security Update 3115131 https://www.microsoft.com/downloads/details.aspx?familyid=7ba6799d-f23c-4d63-bbed-3610dd30a39b 3114566 10521 Yes Security Update 3115131 https://www.microsoft.com/downloads/details.aspx?familyid=5add7699-e483-4b87-85ad-cebc6945546f 3114566 10522 Yes Security Update 3174301 https://www.microsoft.com/downloads/details.aspx?familyid=dcff3b76-bfa1-40d1-90a7-df87d30ad436 3144427 10069 Yes Security Update 3174301 https://www.microsoft.com/downloads/details.aspx?familyid=39d80c00-bcf3-44dd-a599-a57594d1d9fb 3144427 10303 Yes Security Update 3174304 https://www.microsoft.com/downloads/details.aspx?familyid=4883aa02-8507-4457-a4d8-9e93bedde3fd 3144429 10268 Yes Security Update 3174302 https://www.microsoft.com/downloads/details.aspx?familyid=ceeb293d-5464-4382-b711-b50c4ad049ce 3144428 10295 Yes Security Update 3115431 https://www.microsoft.com/downloads/details.aspx?familyid=5c89014c-49bb-4661-9eb4-37c20aada825 3114944 10628 Yes Security Update 3115431 https://www.microsoft.com/downloads/details.aspx?familyid=ea30e3ae-5d1f-47c3-95bc-b0e598c59f53 3114944 10630 Yes Security Update 3115431 https://www.microsoft.com/downloads/details.aspx?familyid=5c89014c-49bb-4661-9eb4-37c20aada825 3114944 10629 Yes Security Update 3115431 https://www.microsoft.com/downloads/details.aspx?familyid=ea30e3ae-5d1f-47c3-95bc-b0e598c59f53 3114944 10631 Yes Security Update 3115408 https://www.microsoft.com/downloads/details.aspx?familyid=3d0bb181-5910-416e-8e46-1d9eed82671f 3114960 10770 Yes Security Update 3115408 https://www.microsoft.com/downloads/details.aspx?familyid=d08b645e-3a19-4110-9cb1-2c6fb8715472 3114960 10771 Yes Security Update 3115408 https://www.microsoft.com/downloads/details.aspx?familyid=3d0bb181-5910-416e-8e46-1d9eed82671f 3114960 10772 Yes Security Update 3115408 https://www.microsoft.com/downloads/details.aspx?familyid=d08b645e-3a19-4110-9cb1-2c6fb8715472 3114960 10773 Yes Security Update Mateusz Jurczyk of <a href="http://www.google.com/">Google Project Zero</a> 1.0 2016-08-09T07:00:00Z <p>Information published.</p> Microsoft Graphics Remote Code Execution Vulnerability <p>A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker who successfully exploited the vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.</p> <p>There are multiple ways an attacker could exploit the vulnerability:</p> <ul> <li>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability and then convince users to view the website. An attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically by getting them to click a link in an email or instant message that takes users to the attacker's website, or by opening an attachment sent through email.</li> <li>In a file-sharing attack scenario, an attacker could provide a specially crafted document file designed to exploit the vulnerability and then convince users to open the document file.</li> </ul> <p>The security update addresses the vulnerability by correcting how the Windows font library handles embedded fonts.</p> Microsoft Graphics Component CVE-2016-3303 10047 10048 9312 10287 9311 9318 9344 10050 10051 10049 4393 9316 10770 10772 10628 10629 10631 10150 10521 10771 10773 10069 10303 10295 10268 1160 10630 10290 10522 Remote Code Execution 10047 Remote Code Execution 10048 Remote Code Execution 9312 Remote Code Execution 10287 Remote Code Execution 9311 Remote Code Execution 9318 Remote Code Execution 9344 Remote Code Execution 10050 Remote Code Execution 10051 Remote Code Execution 10049 Remote Code Execution 4393 Remote Code Execution 9316 Remote Code Execution 10770 Remote Code Execution 10772 Remote Code Execution 10628 Remote Code Execution 10629 Remote Code Execution 10631 Remote Code Execution 10150 Remote Code Execution 10521 Remote Code Execution 10771 Remote Code Execution 10773 Remote Code Execution 10069 Remote Code Execution 10303 Remote Code Execution 10295 Remote Code Execution 10268 Remote Code Execution 1160 Remote Code Execution 10630 Remote Code Execution 10290 Remote Code Execution 10522 Critical 10047 Critical 10048 Critical 9312 Critical 10287 Critical 9311 Critical 9318 Critical 9344 Critical 10050 Critical 10051 Critical 10049 Critical 4393 Critical 9316 Critical 10770 Critical 10772 Critical 10628 Critical 10629 Critical 10631 Critical 10150 Critical 10521 Critical 10771 Critical 10773 Critical 10069 Critical 10303 Critical 10295 Critical 10268 Critical 1160 Critical 10630 Critical 10290 Critical 10522 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A;Older Software Release:Exploitation More Likely 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10047 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10048 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9312 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10287 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9311 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9318 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9344 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10050 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10051 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10049 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 4393 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9316 3178034 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3178034 3087135 10047 Yes Security Update 3178034 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3178034 3087135 10048 Yes Security Update 3178034 https://www.microsoft.com/downloads/details.aspx?familyid=3813c064-fd93-43fb-ae29-5e4c47c8032e 3087135 9312 Yes Security Update 3178034 https://www.microsoft.com/downloads/details.aspx?familyid=3813c064-fd93-43fb-ae29-5e4c47c8032e 3087135 10287 Yes Security Update 3178034 https://www.microsoft.com/downloads/details.aspx?familyid=2f37b5bd-255f-4e0c-8794-ebd9c022f207 3087135 9311 Yes Security Update 3178034 https://www.microsoft.com/downloads/details.aspx?familyid=28067856-7e2b-4f92-a1b2-15b1240d5604 3087135 9318 Yes Security Update 3178034 https://www.microsoft.com/downloads/details.aspx?familyid=28067856-7e2b-4f92-a1b2-15b1240d5604 3087135 9344 Yes Security Update 3178034 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3178034 3087135 10050 Yes Security Update 3178034 https://www.microsoft.com/downloads/details.aspx?familyid=d187d61e-7df5-4d96-b041-39e728a2f435 3087135 10051 Yes Security Update 3178034 https://www.microsoft.com/downloads/details.aspx?familyid=d187d61e-7df5-4d96-b041-39e728a2f435 3087135 10049 Yes Security Update 3178034 https://www.microsoft.com/downloads/details.aspx?familyid=3813c064-fd93-43fb-ae29-5e4c47c8032e 3087135 4393 Yes Security Update 3178034 https://www.microsoft.com/downloads/details.aspx?familyid=28067856-7e2b-4f92-a1b2-15b1240d5604 3087135 9316 Yes Security Update 3115408 https://www.microsoft.com/downloads/details.aspx?familyid=3d0bb181-5910-416e-8e46-1d9eed82671f 3114960 10770 Yes Security Update 3115408 https://www.microsoft.com/downloads/details.aspx?familyid=3d0bb181-5910-416e-8e46-1d9eed82671f 3114960 10772 Yes Security Update 3115431 https://www.microsoft.com/downloads/details.aspx?familyid=5c89014c-49bb-4661-9eb4-37c20aada825 3114944 10628 Yes Security Update 3115431 https://www.microsoft.com/downloads/details.aspx?familyid=5c89014c-49bb-4661-9eb4-37c20aada825 3114944 10629 Yes Security Update 3115431 https://www.microsoft.com/downloads/details.aspx?familyid=ea30e3ae-5d1f-47c3-95bc-b0e598c59f53 3114944 10631 Yes Security Update 3115109 https://www.microsoft.com/downloads/details.aspx?familyid=cac9f192-03f4-4fc2-a11f-aca63b038c21 3114542 10150 Maybe Security Update 3115131 https://www.microsoft.com/downloads/details.aspx?familyid=7ba6799d-f23c-4d63-bbed-3610dd30a39b 3114566 10521 Yes Security Update 3115408 https://www.microsoft.com/downloads/details.aspx?familyid=d08b645e-3a19-4110-9cb1-2c6fb8715472 3114960 10771 Yes Security Update 3115408 https://www.microsoft.com/downloads/details.aspx?familyid=d08b645e-3a19-4110-9cb1-2c6fb8715472 3114960 10773 Yes Security Update 3174301 https://www.microsoft.com/downloads/details.aspx?familyid=dcff3b76-bfa1-40d1-90a7-df87d30ad436 3144427 10069 Yes Security Update 3174301 https://www.microsoft.com/downloads/details.aspx?familyid=39d80c00-bcf3-44dd-a599-a57594d1d9fb 3144427 10303 Yes Security Update 3174302 https://www.microsoft.com/downloads/details.aspx?familyid=ceeb293d-5464-4382-b711-b50c4ad049ce 3144428 10295 Yes Security Update 3174304 https://www.microsoft.com/downloads/details.aspx?familyid=4883aa02-8507-4457-a4d8-9e93bedde3fd 3144429 10268 Yes Security Update 3115481 https://www.microsoft.com/downloads/details.aspx?familyid=c6267f01-7c57-4c06-809e-fb84bc9ec62f 3114985 1160 Yes Security Update 3115431 https://www.microsoft.com/downloads/details.aspx?familyid=ea30e3ae-5d1f-47c3-95bc-b0e598c59f53 3114944 10630 Yes Security Update 3174305 https://support.microsoft.com/kb/3174305 3144431 10290 Yes Security Update 3115131 https://www.microsoft.com/downloads/details.aspx?familyid=5add7699-e483-4b87-85ad-cebc6945546f 3114566 10522 Yes Security Update Mateusz Jurczyk of <a href="http://www.google.com/">Google Project Zero</a> 1.0 2016-08-09T07:00:00Z <p>Information published.</p> Microsoft Graphics Remote Code Execution Vulnerability <p>A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker who successfully exploited the vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.</p> <p>There are multiple ways an attacker could exploit the vulnerability:</p> <ul> <li>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability and then convince users to view the website. An attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically by getting them to click a link in an email or instant message that takes users to the attacker's website, or by opening an attachment sent through email.</li> <li>In a file-sharing attack scenario, an attacker could provide a specially crafted document file designed to exploit the vulnerability and then convince users to open the document file.</li> </ul> <p>The security update addresses the vulnerability by correcting how the Windows font library handles embedded fonts.</p> Microsoft Graphics Component CVE-2016-3304 10047 10048 9312 10287 9311 9318 9344 10050 10051 10049 4393 9316 10150 10521 10522 10770 10772 10771 10773 10628 10629 10630 10631 10069 10303 10268 10295 1160 10290 Remote Code Execution 10047 Remote Code Execution 10048 Remote Code Execution 9312 Remote Code Execution 10287 Remote Code Execution 9311 Remote Code Execution 9318 Remote Code Execution 9344 Remote Code Execution 10050 Remote Code Execution 10051 Remote Code Execution 10049 Remote Code Execution 4393 Remote Code Execution 9316 Remote Code Execution 10150 Remote Code Execution 10521 Remote Code Execution 10522 Remote Code Execution 10770 Remote Code Execution 10772 Remote Code Execution 10771 Remote Code Execution 10773 Remote Code Execution 10628 Remote Code Execution 10629 Remote Code Execution 10630 Remote Code Execution 10631 Remote Code Execution 10069 Remote Code Execution 10303 Remote Code Execution 10268 Remote Code Execution 10295 Remote Code Execution 1160 Remote Code Execution 10290 Critical 10047 Critical 10048 Critical 9312 Critical 10287 Critical 9311 Critical 9318 Critical 9344 Critical 10050 Critical 10051 Critical 10049 Critical 4393 Critical 9316 Critical 10150 Critical 10521 Critical 10522 Critical 10770 Critical 10772 Critical 10771 Critical 10773 Critical 10628 Critical 10629 Critical 10630 Critical 10631 Critical 10069 Critical 10303 Critical 10268 Critical 10295 Critical 1160 Critical 10290 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10047 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10048 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9312 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10287 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9311 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9318 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9344 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10050 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10051 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10049 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 4393 8.8 7.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9316 3178034 https://www.microsoft.com/downloads/details.aspx?familyid=46d4a3bc-6d94-4394-8a4e-c85c7caadc33 3087135 10047 Yes Security Update 3178034 https://www.microsoft.com/downloads/details.aspx?familyid=d187d61e-7df5-4d96-b041-39e728a2f435 3087135 10048 Yes Security Update 3178034 https://www.microsoft.com/downloads/details.aspx?familyid=3813c064-fd93-43fb-ae29-5e4c47c8032e 3087135 9312 Yes Security Update 3178034 https://www.microsoft.com/downloads/details.aspx?familyid=3813c064-fd93-43fb-ae29-5e4c47c8032e 3087135 10287 Yes Security Update 3178034 https://www.microsoft.com/downloads/details.aspx?familyid=2f37b5bd-255f-4e0c-8794-ebd9c022f207 3087135 9311 Yes Security Update 3178034 https://www.microsoft.com/downloads/details.aspx?familyid=28067856-7e2b-4f92-a1b2-15b1240d5604 3087135 9318 Yes Security Update 3178034 https://www.microsoft.com/downloads/details.aspx?familyid=28067856-7e2b-4f92-a1b2-15b1240d5604 3087135 9344 Yes Security Update 3178034 https://www.microsoft.com/downloads/details.aspx?familyid=05fd8685-a167-4567-9331-7b93931d280f 3087135 10050 Yes Security Update 3178034 https://www.microsoft.com/downloads/details.aspx?familyid=d187d61e-7df5-4d96-b041-39e728a2f435 3087135 10051 Yes Security Update 3178034 https://www.microsoft.com/downloads/details.aspx?familyid=d187d61e-7df5-4d96-b041-39e728a2f435 3087135 10049 Yes Security Update 3178034 https://www.microsoft.com/downloads/details.aspx?familyid=3813c064-fd93-43fb-ae29-5e4c47c8032e 3087135 4393 Yes Security Update 3178034 https://www.microsoft.com/downloads/details.aspx?familyid=28067856-7e2b-4f92-a1b2-15b1240d5604 3087135 9316 Yes Security Update 3115109 https://www.microsoft.com/downloads/details.aspx?familyid=cac9f192-03f4-4fc2-a11f-aca63b038c21 3114542 10150 Maybe Security Update 3115131 https://www.microsoft.com/downloads/details.aspx?familyid=7ba6799d-f23c-4d63-bbed-3610dd30a39b 3114566 10521 Yes Security Update 3115131 https://www.microsoft.com/downloads/details.aspx?familyid=5add7699-e483-4b87-85ad-cebc6945546f 3114566 10522 Yes Security Update 3115408 https://www.microsoft.com/downloads/details.aspx?familyid=3d0bb181-5910-416e-8e46-1d9eed82671f 3114960 10770 Yes Security Update 3115408 https://www.microsoft.com/downloads/details.aspx?familyid=3d0bb181-5910-416e-8e46-1d9eed82671f 3114960 10772 Yes Security Update 3115408 https://www.microsoft.com/downloads/details.aspx?familyid=d08b645e-3a19-4110-9cb1-2c6fb8715472 3114960 10771 Yes Security Update 3115408 https://www.microsoft.com/downloads/details.aspx?familyid=d08b645e-3a19-4110-9cb1-2c6fb8715472 3114960 10773 Yes Security Update 3115431 https://www.microsoft.com/downloads/details.aspx?familyid=5c89014c-49bb-4661-9eb4-37c20aada825 3114944 10628 Yes Security Update 3115431 https://www.microsoft.com/downloads/details.aspx?familyid=5c89014c-49bb-4661-9eb4-37c20aada825 3114944 10629 Yes Security Update 3115431 https://www.microsoft.com/downloads/details.aspx?familyid=ea30e3ae-5d1f-47c3-95bc-b0e598c59f53 3114944 10630 Yes Security Update 3115431 https://www.microsoft.com/downloads/details.aspx?familyid=ea30e3ae-5d1f-47c3-95bc-b0e598c59f53 3114944 10631 Yes Security Update 3174301 https://www.microsoft.com/downloads/details.aspx?familyid=dcff3b76-bfa1-40d1-90a7-df87d30ad436 3144427 10069 Yes Security Update 3174301 https://www.microsoft.com/downloads/details.aspx?familyid=39d80c00-bcf3-44dd-a599-a57594d1d9fb 3144427 10303 Yes Security Update 3174304 https://www.microsoft.com/downloads/details.aspx?familyid=4883aa02-8507-4457-a4d8-9e93bedde3fd 3144429 10268 Yes Security Update 3174302 https://www.microsoft.com/downloads/details.aspx?familyid=ceeb293d-5464-4382-b711-b50c4ad049ce 3144428 10295 Yes Security Update 3115481 https://www.microsoft.com/downloads/details.aspx?familyid=c6267f01-7c57-4c06-809e-fb84bc9ec62f 3114985 1160 Yes Security Update 3174305 https://support.microsoft.com/kb/3174305 3144431 10290 Yes Security Update Mateusz Jurczyk of <a href="https://www.google.com">Google Project Zero</a> 1.0 2016-08-09T07:00:00Z <p>Information published.</p> Windows Kernel Elevation of Privilege Vulnerability <p>An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p> <p>To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application to take control of an affected system.</p> <p>The update addresses the vulnerability by correcting how the Windows kernel handles objects in memory.</p> Windows Kernel-Mode Drivers CVE-2016-3308 10050 10729 10735 10789 10788 10047 10048 10481 10482 10484 9312 10287 9311 9318 9344 10051 10049 10378 10379 10483 10543 4393 9316 10852 10853 Elevation of Privilege 10050 Elevation of Privilege 10729 Elevation of Privilege 10735 Elevation of Privilege 10789 Elevation of Privilege 10788 Elevation of Privilege 10047 Elevation of Privilege 10048 Elevation of Privilege 10481 Elevation of Privilege 10482 Elevation of Privilege 10484 Elevation of Privilege 9312 Elevation of Privilege 10287 Elevation of Privilege 9311 Elevation of Privilege 9318 Elevation of Privilege 9344 Elevation of Privilege 10051 Elevation of Privilege 10049 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 4393 Elevation of Privilege 9316 Elevation of Privilege 10852 Elevation of Privilege 10853 Important 10050 Important 10729 Important 10735 Important 10789 Important 10788 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 9312 Important 10287 Important 9311 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Important 4393 Important 9316 Important 10852 Important 10853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely 3177725 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3177725 3168965 10050 Yes Security Update 3176492 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176492 3163912 10729 Yes Security Update 3176492 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176492 3163912 10735 Yes Security Update 3176493 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176493 3172985 10789 Yes Security Update 3176493 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176493 3172985 10788 Yes Security Update 3177725 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3177725 3168965 10047 Yes Security Update 3177725 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3177725 3168965 10048 Yes Security Update 3177725 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3177725 3168965 10481 Yes Security Update 3177725 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3177725 3168965 10482 Yes Security Update 3177725 3168965 10484 Yes Security Update 3177725 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3177725 3168965 9312 Yes Security Update 3177725 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3177725 3168965 10287 Yes Security Update 3177725 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3177725 3168965 9311 Yes Security Update 3177725 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3177725 3168965 9318 Yes Security Update 3177725 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3177725 3168965 9344 Yes Security Update 3177725 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3177725 3168965 10051 Yes Security Update 3177725 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3177725 3168965 10049 Yes Security Update 3177725 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3177725 3168965 10378 Yes Security Update 3177725 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3177725 3168965 10379 Yes Security Update 3177725 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3177725 3168965 10483 Yes Security Update 3177725 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3177725 3168965 10543 Yes Security Update 3177725 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3177725 3168965 4393 Yes Security Update 3177725 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3177725 3168965 9316 Yes Security Update 3176495 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176495 10852 Yes Security Update 3176495 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176495 10853 Yes Security Update ZeguangZhao (team509), working with <a href="http://www.zerodayinitiative.com/">Trend Micro’s Zero Day Initiative (ZDI)</a> Peter (Keen), working with <a href="http://www.zerodayinitiative.com/">Trend Micro’s Zero Day Initiative (ZDI)</a> 1.0 2016-08-09T07:00:00Z <p>Information published.</p> Windows Kernel Elevation of Privilege Vulnerability <p>An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p> <p>To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application to take control of an affected system.</p> <p>The update addresses the vulnerability by correcting how the Windows kernel handles objects in memory.</p> Windows Kernel-Mode Drivers CVE-2016-3309 10050 10729 10735 10789 10788 10047 10048 10481 10482 10484 9312 10287 9311 9318 9344 10051 10049 10378 10379 10483 10543 4393 9316 10852 10853 Elevation of Privilege 10050 Elevation of Privilege 10729 Elevation of Privilege 10735 Elevation of Privilege 10789 Elevation of Privilege 10788 Elevation of Privilege 10047 Elevation of Privilege 10048 Elevation of Privilege 10481 Elevation of Privilege 10482 Elevation of Privilege 10484 Elevation of Privilege 9312 Elevation of Privilege 10287 Elevation of Privilege 9311 Elevation of Privilege 9318 Elevation of Privilege 9344 Elevation of Privilege 10051 Elevation of Privilege 10049 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 4393 Elevation of Privilege 9316 Elevation of Privilege 10852 Elevation of Privilege 10853 Important 10050 Important 10729 Important 10735 Important 10789 Important 10788 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 9312 Important 10287 Important 9311 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Important 4393 Important 9316 Important 10852 Important 10853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely 3177725 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3177725 3168965 10050 Yes Security Update 3176492 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176492 3163912 10729 Yes Security Update 3176492 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176492 3163912 10735 Yes Security Update 3176493 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176493 3172985 10789 Yes Security Update 3176493 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176493 3172985 10788 Yes Security Update 3177725 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3177725 3168965 10047 Yes Security Update 3177725 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3177725 3168965 10048 Yes Security Update 3177725 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3177725 3168965 10481 Yes Security Update 3177725 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3177725 3168965 10482 Yes Security Update 3177725 3168965 10484 Yes Security Update 3177725 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3177725 3168965 9312 Yes Security Update 3177725 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3177725 3168965 10287 Yes Security Update 3177725 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3177725 3168965 9311 Yes Security Update 3177725 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3177725 3168965 9318 Yes Security Update 3177725 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3177725 3168965 9344 Yes Security Update 3177725 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3177725 3168965 10051 Yes Security Update 3177725 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3177725 3168965 10049 Yes Security Update 3177725 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3177725 3168965 10378 Yes Security Update 3177725 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3177725 3168965 10379 Yes Security Update 3177725 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3177725 3168965 10483 Yes Security Update 3177725 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3177725 3168965 10543 Yes Security Update 3177725 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3177725 3168965 4393 Yes Security Update 3177725 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3177725 3168965 9316 Yes Security Update 3176495 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176495 10852 Yes Security Update 3176495 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176495 10853 Yes Security Update bee13oy of CloverSec Labs, working with <a href="http://www.zerodayinitiative.com/">Trend Micro’s Zero Day Initiative (ZDI)</a> 1.0 2016-08-09T07:00:00Z <p>Information published.</p> Windows Kernel Elevation of Privilege Vulnerability <p>An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p> <p>To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application to take control of an affected system.</p> <p>The update addresses the vulnerability by correcting how the Windows kernel handles objects in memory.</p> Windows Kernel-Mode Drivers CVE-2016-3310 10729 10735 10789 10788 10047 10048 10481 10482 10484 9312 10287 9311 9318 9344 10050 10051 10049 10378 10379 10483 10543 4393 9316 10852 10853 Elevation of Privilege 10729 Elevation of Privilege 10735 Elevation of Privilege 10789 Elevation of Privilege 10788 Elevation of Privilege 10047 Elevation of Privilege 10048 Elevation of Privilege 10481 Elevation of Privilege 10482 Elevation of Privilege 10484 Elevation of Privilege 9312 Elevation of Privilege 10287 Elevation of Privilege 9311 Elevation of Privilege 9318 Elevation of Privilege 9344 Elevation of Privilege 10050 Elevation of Privilege 10051 Elevation of Privilege 10049 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 4393 Elevation of Privilege 9316 Elevation of Privilege 10852 Elevation of Privilege 10853 Important 10729 Important 10735 Important 10789 Important 10788 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 9312 Important 10287 Important 9311 Important 9318 Important 9344 Important 10050 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Important 4393 Important 9316 Important 10852 Important 10853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely 3176492 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176492 3163912 10729 Yes Security Update 3176492 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176492 3163912 10735 Yes Security Update 3176493 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176493 3172985 10789 Yes Security Update 3176493 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176493 3172985 10788 Yes Security Update 3177725 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3177725 3168965 10047 Yes Security Update 3177725 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3177725 3168965 10048 Yes Security Update 3177725 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3177725 3168965 10481 Yes Security Update 3177725 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3177725 3168965 10482 Yes Security Update 3177725 3168965 10484 Yes Security Update 3177725 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3177725 3168965 9312 Yes Security Update 3177725 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3177725 3168965 10287 Yes Security Update 3177725 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3177725 3168965 9311 Yes Security Update 3177725 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3177725 3168965 9318 Yes Security Update 3177725 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3177725 3168965 9344 Yes Security Update 3177725 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3177725 3168965 10050 Yes Security Update 3177725 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3177725 3168965 10051 Yes Security Update 3177725 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3177725 3168965 10049 Yes Security Update 3177725 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3177725 3168965 10378 Yes Security Update 3177725 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3177725 3168965 10379 Yes Security Update 3177725 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3177725 3168965 10483 Yes Security Update 3177725 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3177725 3168965 10543 Yes Security Update 3177725 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3177725 3168965 4393 Yes Security Update 3177725 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3177725 3168965 9316 Yes Security Update 3176495 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176495 10852 Yes Security Update 3176495 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176495 10853 Yes Security Update Wayne Low of Fortinet’s Fortiguard Labs 1.0 2016-08-09T07:00:00Z <p>Information published.</p> Windows Kernel Elevation of Privilege Vulnerability <p>An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p> <p>To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application to take control of an affected system.</p> <p>The update addresses the vulnerability by correcting how the Windows kernel handles objects in memory.</p> Windows Kernel-Mode Drivers CVE-2016-3311 10050 10729 10735 10789 10788 10047 10048 10481 10482 10484 9312 10287 9311 9318 9344 10051 10049 10378 10379 10483 10543 4393 9316 10852 10853 Elevation of Privilege 10050 Elevation of Privilege 10729 Elevation of Privilege 10735 Elevation of Privilege 10789 Elevation of Privilege 10788 Elevation of Privilege 10047 Elevation of Privilege 10048 Elevation of Privilege 10481 Elevation of Privilege 10482 Elevation of Privilege 10484 Elevation of Privilege 9312 Elevation of Privilege 10287 Elevation of Privilege 9311 Elevation of Privilege 9318 Elevation of Privilege 9344 Elevation of Privilege 10051 Elevation of Privilege 10049 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 4393 Elevation of Privilege 9316 Elevation of Privilege 10852 Elevation of Privilege 10853 Important 10050 Important 10729 Important 10735 Important 10789 Important 10788 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 9312 Important 10287 Important 9311 Important 9318 Important 9344 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Important 4393 Important 9316 Important 10852 Important 10853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely 3177725 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3177725 3168965 10050 Yes Security Update 3176492 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176492 3163912 10729 Yes Security Update 3176492 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176492 3163912 10735 Yes Security Update 3176493 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176493 3172985 10789 Yes Security Update 3176493 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176493 3172985 10788 Yes Security Update 3177725 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3177725 3168965 10047 Yes Security Update 3177725 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3177725 3168965 10048 Yes Security Update 3177725 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3177725 3168965 10481 Yes Security Update 3177725 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3177725 3168965 10482 Yes Security Update 3177725 3168965 10484 Yes Security Update 3177725 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3177725 3168965 9312 Yes Security Update 3177725 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3177725 3168965 10287 Yes Security Update 3177725 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3177725 3168965 9311 Yes Security Update 3177725 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3177725 3168965 9318 Yes Security Update 3177725 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3177725 3168965 9344 Yes Security Update 3177725 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3177725 3168965 10051 Yes Security Update 3177725 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3177725 3168965 10049 Yes Security Update 3177725 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3177725 3168965 10378 Yes Security Update 3177725 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3177725 3168965 10379 Yes Security Update 3177725 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3177725 3168965 10483 Yes Security Update 3177725 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3177725 3168965 10543 Yes Security Update 3177725 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3177725 3168965 4393 Yes Security Update 3177725 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3177725 3168965 9316 Yes Security Update 3176495 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176495 10852 Yes Security Update 3176495 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176495 10853 Yes Security Update <a href="http://weibo.com/pgboy1988">pgboy</a>, <a href="http://weibo.com/2641521260">zhong_sf</a> of <a href="http://www.360.com/">Qihoo 360 Vulcan Team</a>​ 1.0 2016-08-09T07:00:00Z <p>Information published.</p> Universal Outlook Information Disclosure Vulnerability <p>An information disclosure vulnerability exists when Universal Outlook fails to establish a secure connection. An attacker could use this vulnerability to obtain the username and password of a user.</p> <p>The update addresses the vulnerability by preventing Universal Outlook from disclosing usernames and passwords.</p> ActiveSyncProvider CVE-2016-3312 10729 10735 10789 10788 Information Disclosure 10729 Information Disclosure 10735 Information Disclosure 10789 Information Disclosure 10788 Important 10729 Important 10735 Important 10789 Important 10788 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely;Older Software Release:N/A 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10729 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10735 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10789 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10788 3176492 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176492 3163912 10729 Yes Security Update 3176492 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176492 3163912 10735 Yes Security Update 3176493 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176493 3172985 10789 Yes Security Update 3176493 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176493 3172985 10788 Yes Security Update <li><a href="https://www.linkedin.com/in/rshupak">Richard Shupak</a></li> 1.0 2016-08-09T07:00:00Z <p>Information published.</p> Microsoft Office Memory Corruption Vulnerability <p>A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an attacker could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.</p> <p>Exploitation of the vulnerability requires that a user open a specially crafted file with an affected version of Microsoft Office software. In an email attack scenario, an attacker could exploit the vulnerability by sending the specially crafted file to the user and convincing the user to open the file. In a web-based attack scenario, an attacker could host a website (or leverage a compromised website that accepts or hosts user-provided content) that contains a specially crafted file designed to exploit the vulnerability. An attacker would have no way to force users to visit the website. Instead, an attacker would have to convince users to click a link, typically by way of an enticement in an email or instant message, and then convince them to open the specially crafted file.</p> <p>Note that the Preview Pane is not an attack vector for this vulnerability.</p> <p>The security update addresses the vulnerability by correcting how Office handles objects in memory.</p> Microsoft Office CVE-2016-3318 10150 10521 10522 10601 10602 10603 Remote Code Execution 10150 Remote Code Execution 10521 Remote Code Execution 10522 Remote Code Execution 10601 Remote Code Execution 10602 Remote Code Execution 10603 Important 10150 Important 10521 Important 10522 Important 10601 Important 10602 Important 10603 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A;Older Software Release:Exploitation Less Likely 3114442 https://www.microsoft.com/downloads/details.aspx?familyid=902acdc8-7120-451f-a7ea-edb9f890e126 3085620 10150 Maybe Security Update 3114400 https://www.microsoft.com/downloads/details.aspx?familyid=8c515b96-a3ce-475a-b7c0-c4f3006bad30 3085560 10521 Maybe Security Update 3114400 https://www.microsoft.com/downloads/details.aspx?familyid=31080fd7-5cf2-4f7a-99db-0052a3b74b4d 3085560 10522 Maybe Security Update 3114340 https://www.microsoft.com/downloads/details.aspx?familyid=b7db5943-c2aa-4d62-a8ae-08d5d90035d9 3085572 10601 Maybe Security Update 3114340 https://www.microsoft.com/downloads/details.aspx?familyid=fd976312-c7b7-4669-9729-aac6e2dbf2c3 3085572 10602 Maybe Security Update 3114340 3085572 10603 Maybe Security Update Arun Kumar Sharma, working with <a href="http://www.zerodayinitiative.com/">Trend Micro’s Zero Day Initiative (ZDI)</a> 2.0 2016-08-22T07:00:00Z <p>Bulletin revised to announce the availability of the 14.6.7 update for Microsoft Office for Mac 2011 (3179162) and the 15.25 update for Microsoft Office 2016 for Mac (3179163). Customers running affected Mac software should install the appropriate update for their product to be protected from the vulnerabilities discussed in this bulletin. Customers running other Microsoft Office software do not need to take any action. See Microsoft Knowledge Base Article 3179162 and Microsoft Knowledge Base Article 3179163 for more information and download links.</p> 1.0 2016-08-09T07:00:00Z <p>Information published.</p> Microsoft Office Memory Corruption Vulnerability <p>A remote code execution vulnerability exists in Microsoft Office software when the Office software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an attacker could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.</p> <p>Exploitation of the vulnerability requires that a user open a specially crafted file with an affected version of Microsoft Office software. In an email attack scenario, an attacker could exploit the vulnerability by sending the specially crafted file to the user and convincing the user to open the file. In a web-based attack scenario, an attacker could host a website (or leverage a compromised website that accepts or hosts user-provided content) that contains a specially crafted file designed to exploit the vulnerability. An attacker would have no way to force users to visit the website. Instead, an attacker would have to convince users to click a link, typically by way of an enticement in an email or instant message, and then convince them to open the specially crafted file.</p> <p>Note that the Preview Pane is not an attack vector for this vulnerability. The security update addresses the vulnerability by correcting how Office handles objects in memory.</p> Microsoft Office CVE-2016-3317 1160 10521 10522 10162 10670 10025 10513 10514 Remote Code Execution 1160 Remote Code Execution 10521 Remote Code Execution 10522 Remote Code Execution 10162 Remote Code Execution 10670 Remote Code Execution 10025 Remote Code Execution 10513 Remote Code Execution 10514 Important 1160 Important 10521 Important 10522 Important 10162 Important 10670 Important 10025 Important 10513 Important 10514 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A;Older Software Release:Exploitation More Likely 3115480 https://www.microsoft.com/downloads/details.aspx?familyid=cd87f679-d48b-43c3-8633-3000be6d2ed6 3115393 1160 Maybe Security Update 3115468 https://www.microsoft.com/downloads/details.aspx?familyid=7eb4e69c-51d9-4d58-a481-89668b88ae12 3115315 10521 Maybe Security Update 3115468 https://www.microsoft.com/downloads/details.aspx?familyid=547fa1a5-aae9-47fd-b38a-6fa3731f4ce8 3115315 10522 Maybe Security Update 3115465 https://www.microsoft.com/downloads/details.aspx?familyid=af8ed0c8-e9f6-4011-92a7-0cdb2bd202aa 3115311 10162 Maybe Security Update 3179163 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB821976 3170460 10670 Maybe Security Update 3179162 https://www.microsoft.com/downloads/details.aspx?familyid=465a2dca-d446-47a0-a3b6-ccaad921cb73 3170463 10025 Maybe Security Update 3115471 https://www.microsoft.com/downloads/details.aspx?familyid=31e7a33d-6f89-4e8d-99a7-61b73a6d6c46 3115317 10513 Maybe Security Update 3115471 https://www.microsoft.com/downloads/details.aspx?familyid=29fbb772-58a8-4e82-beeb-874b5e671799 3115317 10514 Maybe Security Update Dhanesh Kizhakkinan of <a href="https://www.fireeye.com/">FireEye Inc</a> 1.0 2016-08-09T07:00:00Z <p>Information published.</p> 1.1 2016-08-11T07:00:00Z <p>Bulletin revised to correct the Updates Replaced entries for Microsoft Word Viewer updates 3115479 and 3115480. This is an informational change only. Customers who have already successfully updated their systems do not need to take any action.</p> 2.0 2016-08-22T07:00:00Z <p>Bulletin revised to announce the availability of the 14.6.7 update for Microsoft Office for Mac 2011 (3179162) and the 15.25 update for Microsoft Office 2016 for Mac (3179163). Customers running affected Mac software should install the appropriate update for their product to be protected from the vulnerabilities discussed in this bulletin. Customers running other Microsoft Office software do not need to take any action. See Microsoft Knowledge Base Article 3179162 and Microsoft Knowledge Base Article 3179163 for more information and download links.</p> Microsoft Office Memory Corruption Vulnerability <p>A remote code execution vulnerability exists in Microsoft Office software when the Office software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an attacker could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.</p> <p>Exploitation of the vulnerability requires that a user open a specially crafted file with an affected version of Microsoft Office software. In an email attack scenario, an attacker could exploit the vulnerability by sending the specially crafted file to the user and convincing the user to open the file. In a web-based attack scenario, an attacker could host a website (or leverage a compromised website that accepts or hosts user-provided content) that contains a specially crafted file designed to exploit the vulnerability. An attacker would have no way to force users to visit the website. Instead, an attacker would have to convince users to click a link, typically by way of an enticement in an email or instant message, and then convince them to open the specially crafted file.</p> <p>Note that where severity is indicated as Critical in the Affected Products table, the Preview Pane is an attack vector.</p> <p>The security update addresses the vulnerability by correcting how Office handles objects in memory.</p> Microsoft Office CVE-2016-3316 10606 10604 10605 10746 10747 10670 Remote Code Execution 10606 Remote Code Execution 10604 Remote Code Execution 10605 Remote Code Execution 10746 Remote Code Execution 10747 Remote Code Execution 10670 Critical 10606 Critical 10604 Critical 10605 Critical 10746 Critical 10747 Important 10670 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely 3115449 3115292 10606 Maybe Security Update 3115449 https://www.microsoft.com/downloads/details.aspx?familyid=0cee8257-5079-44d0-9923-dbc8a394557d 3115292 10604 Maybe Security Update 3115449 https://www.microsoft.com/downloads/details.aspx?familyid=d59f1cb6-d861-4ae7-98a4-0666ec3964a8 3115292 10605 Maybe Security Update 3115439 https://www.microsoft.com/downloads/details.aspx?familyid=f51218fb-a6a5-4204-882e-5457a993104c 3115301 10746 Maybe Security Update 3115439 https://www.microsoft.com/downloads/details.aspx?familyid=f51218fb-a6a5-4204-882e-5457a993104c 3115301 10747 Maybe Security Update 3179163 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB821976 3170460 10670 Maybe Security Update Francis Provencher of <a href="https://smsecurity.net/">COSIG</a> 1.0 2016-08-09T07:00:00Z <p>Information published.</p> 2.0 2016-08-22T07:00:00Z <p>Bulletin revised to announce the availability of the 14.6.7 update for Microsoft Office for Mac 2011 (3179162) and the 15.25 update for Microsoft Office 2016 for Mac (3179163). Customers running affected Mac software should install the appropriate update for their product to be protected from the vulnerabilities discussed in this bulletin. Customers running other Microsoft Office software do not need to take any action. See Microsoft Knowledge Base Article 3179162 and Microsoft Knowledge Base Article 3179163 for more information and download links.</p> Microsoft OneNote Information Disclosure Vulnerability <p>An information disclosure vulnerability exists when Microsoft OneNote improperly discloses its memory contents. An attacker who exploited the vulnerability could use the information to compromise the user’s computer or data.</p> <p>To exploit the vulnerability, an attacker could create a specially crafted OneNote file and convince a victim to open it. For an attack to be successful, the attacker must know the specific location of OneNote objects in memory.</p> <p>The update addresses the vulnerability by changing the way certain OneNote functions handle objects in memory.</p> Microsoft Office CVE-2016-3315 10155 10793 10794 10762 10763 10674 10795 10792 10791 Information Disclosure 10155 Information Disclosure 10793 Information Disclosure 10794 Information Disclosure 10762 Information Disclosure 10763 Information Disclosure 10674 Information Disclosure 10795 Information Disclosure 10792 Information Disclosure 10791 Important 10155 Important 10793 Important 10794 Important 10762 Important 10763 Important 10674 Important 10795 Important 10792 Important 10791 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely;Older Software Release:Exploitation Unlikely 3114456 https://www.microsoft.com/downloads/details.aspx?familyid=906af6d4-1c36-412a-a6ec-eb1386ed4039 2889915 10155 Maybe Security Update 3115256 https://www.microsoft.com/downloads/details.aspx?familyid=aeb870c5-ca75-4bc6-bbce-954a988e7fd7 3101371 10793 Maybe Security Update 3115256 https://www.microsoft.com/downloads/details.aspx?familyid=387a83bc-150b-407a-87ba-007784708f7c 3101371 10794 Maybe Security Update 3115419 https://www.microsoft.com/downloads/details.aspx?familyid=b5d46ac7-7448-499b-899e-fd9a7107869c 3114862 10762 Maybe Security Update 3115419 https://www.microsoft.com/downloads/details.aspx?familyid=93533fc8-25f5-455f-82da-ce9ebbf55ae2 3114862 10763 Maybe Security Update 3179163 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB821976 10674 Maybe Security Update 3115256 3101371 10795 Maybe Security Update 3114885 https://www.microsoft.com/downloads/details.aspx?familyid=ee951b38-0c3b-4a9d-9c3a-a69768b60beb 3054978 10792 Maybe Security Update 3114885 https://www.microsoft.com/downloads/details.aspx?familyid=0941fa87-1d93-4265-be17-807b11d01098 3054978 10791 Maybe Security Update dannywei of <a href="http://www.tencent.com">Tencent's Xuanwu Lab</a> 1.0 2016-08-09T07:00:00Z <p>Information published.</p> 2.0 2016-08-22T07:00:00Z <p>Bulletin revised to announce the availability of the 14.6.7 update for Microsoft Office for Mac 2011 (3179162) and the 15.25 update for Microsoft Office 2016 for Mac (3179163). Customers running affected Mac software should install the appropriate update for their product to be protected from the vulnerabilities discussed in this bulletin. Customers running other Microsoft Office software do not need to take any action. See Microsoft Knowledge Base Article 3179162 and Microsoft Knowledge Base Article 3179163 for more information and download links.</p> Microsoft Office Memory Corruption Vulnerability <p>A remote code execution vulnerability exists in Microsoft Office software when the Office software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an attacker could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.</p> <p>Exploitation of the vulnerability requires that a user open a specially crafted file with an affected version of Microsoft Office software. In an email attack scenario, an attacker could exploit the vulnerability by sending the specially crafted file to the user and convincing the user to open the file. In a web-based attack scenario, an attacker could host a website (or leverage a compromised website that accepts or hosts user-provided content) that contains a specially crafted file designed to exploit the vulnerability. An attacker would have no way to force users to visit the website. Instead, an attacker would have to convince users to click a link, typically by way of an enticement in an email or instant message, and then convince them to open the specially crafted file.</p> <p>Note that the Preview Pane is not an attack vector for this vulnerability. The security update addresses the vulnerability by correcting how Office handles objects in memory.</p> Microsoft Office CVE-2016-3313 1160 10150 10521 10522 10601 10602 10603 10754 10753 10670 Remote Code Execution 1160 Remote Code Execution 10150 Remote Code Execution 10521 Remote Code Execution 10522 Remote Code Execution 10601 Remote Code Execution 10602 Remote Code Execution 10603 Remote Code Execution 10754 Remote Code Execution 10753 Remote Code Execution 10670 Important 1160 Important 10150 Important 10521 Important 10522 Important 10601 Important 10602 Important 10603 Important 10754 Important 10753 Important 10670 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 3115479 https://www.microsoft.com/downloads/details.aspx?familyid=c1b3b442-ae5a-457a-8071-c8b5c5de7300 3115187 1160 Maybe Security Update 3114893 https://www.microsoft.com/downloads/details.aspx?familyid=906af6d4-1c36-412a-a6ec-eb1386ed4039 3114742 10150 Maybe Security Update 3114869 https://www.microsoft.com/downloads/details.aspx?familyid=2199d359-7223-4608-bd29-5218b8c483b5 3114553 10521 Maybe Security Update 3114869 https://www.microsoft.com/downloads/details.aspx?familyid=8682d3c5-9ec5-4e8f-9a7c-3b3deb920bea 3114553 10522 Maybe Security Update 3115427 https://www.microsoft.com/downloads/details.aspx?familyid=9d2a0d25-dcfd-4d22-8309-38ff598fe2a3 3115016 10601 Maybe Security Update 3115427 https://www.microsoft.com/downloads/details.aspx?familyid=3eceec85-93a0-4a11-beba-af2d0afa44ac 3115016 10602 Maybe Security Update 3115427 3115016 10603 Maybe Security Update 3115415 https://www.microsoft.com/downloads/details.aspx?familyid=edd3703e-a0b7-40d5-bc58-a661e5174639 3115144 10754 Maybe Security Update 3115415 https://www.microsoft.com/downloads/details.aspx?familyid=fc7d2d64-3bb9-417f-a54b-5f83545cab7d 3115144 10753 Maybe Security Update 3179163 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB821976 3170460 10670 Maybe Security Update Sébastien Morin of <a href=" https://smsecurity.net/">COSIG</a> Jaanus Kaap 1.0 2016-08-09T07:00:00Z <p>Information published.</p> 1.1 2016-08-11T07:00:00Z <p>Bulletin revised to correct the Updates Replaced entries for Microsoft Word Viewer updates 3115479 and 3115480. This is an informational change only. Customers who have already successfully updated their systems do not need to take any action.</p> 2.0 2016-08-22T07:00:00Z <p>Bulletin revised to announce the availability of the 14.6.7 update for Microsoft Office for Mac 2011 (3179162) and the 15.25 update for Microsoft Office 2016 for Mac (3179163). Customers running affected Mac software should install the appropriate update for their product to be protected from the vulnerabilities discussed in this bulletin. Customers running other Microsoft Office software do not need to take any action. See Microsoft Knowledge Base Article 3179162 and Microsoft Knowledge Base Article 3179163 for more information and download links.</p> Windows PDF Remote Code Execution Vulnerability <p>A remote code execution vulnerability exists when Microsoft Windows PDF Library improperly handles objects in memory. The vulnerability could corrupt memory in a way that enables an attacker to execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p> <p>To exploit the vulnerability on Windows 10 systems with Microsoft Edge set as the default browser, an attacker could host a specially crafted website that contains malicious PDF content and then convince users to view the website. The attacker could also take advantage of compromised websites, or websites that accept or host user-provided content or advertisements, by adding specially crafted PDF content to such sites. Only Windows 10 systems with Microsoft Edge set as the default browser can be compromised simply by viewing a website. The browsers for all other affected operating systems do not automatically render PDF content, so an attacker would have no way to force users to view attacker-controlled content. Instead, an attacker would have to convince users to open a specially crafted PDF document, typically by way of an enticement in an email or instant message or by way of an email attachment.</p> <p>The update addresses the vulnerability by modifying how affected systems handle objects in memory.</p> Microsoft Windows PDF CVE-2016-3319 10481 10482 10483 10484 10729 10735 10789 10788 10378 10724-10729 10724-10735 10724-10852 10724-10853 10724-10789 10724-10788 Remote Code Execution 10481 Remote Code Execution 10482 Remote Code Execution 10483 Remote Code Execution 10484 Remote Code Execution 10729 Remote Code Execution 10735 Remote Code Execution 10789 Remote Code Execution 10788 Remote Code Execution 10378 Remote Code Execution 10724-10729 Remote Code Execution 10724-10735 Remote Code Execution 10724-10852 Remote Code Execution 10724-10853 Remote Code Execution 10724-10789 Remote Code Execution 10724-10788 Critical 10481 Critical 10482 Critical 10483 Critical 10484 Critical 10729 Critical 10735 Critical 10789 Critical 10788 Critical 10378 Critical 10724-10729 Critical 10724-10735 Critical 10724-10852 Critical 10724-10853 Critical 10724-10789 Critical 10724-10788 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:N/A 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10729 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10735 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10852 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10853 3175887 https://www.microsoft.com/downloads/details.aspx?familyid=25fee941-366e-4081-bd6a-3f4bc57eefa4 3157569 10481 Maybe Security Update 3175887 https://www.microsoft.com/downloads/details.aspx?familyid=92c2fb12-0804-4f45-ade9-f63ebaff95c2 3157569 10482 Maybe Security Update 3175887 https://www.microsoft.com/downloads/details.aspx?familyid=92c2fb12-0804-4f45-ade9-f63ebaff95c2 3157569 10483 Maybe Security Update 3175887 3157569 10484 Maybe Security Update 3176492 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176492 3163912 10729 Yes Security Update 3176492 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176492 3163912 10735 Yes Security Update 3176493 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176493 3172985 10789 Yes Security Update 3176493 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176493 3172985 10788 Yes Security Update 3175887 https://www.microsoft.com/downloads/details.aspx?familyid=b87f1177-e62e-4689-ab59-e1ea29fbbb9d 3157569 10378 Maybe Security Update 3176492 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176492 3163912 10724-10729 Yes Security Update 3176492 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176492 3163912 10724-10735 Yes Security Update 3176495 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176495 10724-10852 Yes Security Update 3176495 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176495 10724-10853 Yes Security Update 3176493 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176493 3172985 10724-10789 Yes Security Update 3176493 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176493 3172985 10724-10788 Yes Security Update Aleksandar Nikolic of <a href="http://talosintel.com/vulnerability-reports/">Cisco Talos</a> 1.0 2016-08-09T07:00:00Z <p>Information published.</p> 1.1 2016-08-11T07:00:00Z <p>Bulletin revised to remove Windows Server 2012 R2 (Server Core installation) from the affected software table because the Server Core version of Windows Server 2012 R2 is not affected. This is an informational change only. Customers who have already successfully installed the update do not need to take any action.</p> 1.2 2016-08-12T07:00:00Z <p>Bulletin revised to correct the updates replaced for Window 8.1, Windows Server 2012, and Windows Server 2012 R2. Bulletin revised to remove Windows 10 version 1607 from the affected software table because it is not affected. This is an informational change only. Customers who have already successfully installed the update do not need to take any action.</p> Secure Boot Security Feature Bypass Vulnerability <p>A security feature bypass vulnerability exists when Windows Secure Boot improperly loads a boot manager that is affected by the vulnerability. An attacker who successfully exploited this vulnerability could disable code integrity checks, allowing test-signed executables and drivers to be loaded onto a target device. Furthermore, the attacker could bypass Secure Boot Integrity Validation for BitLocker and Device Encryption security features.</p> <p>To exploit the vulnerability, an attacker who has gained administrative privileges or who has physical access to a target device could install an affected boot manager and then install a policy affected by the vulnerability onto a target device.</p> <p>The security update addresses the vulnerability by blacklisting affected boot managers.</p> Secure Boot CVE-2016-3320 10729 10735 10789 10788 10481 10482 10484 10378 10379 10483 10543 Security Feature Bypass 10729 Security Feature Bypass 10735 Security Feature Bypass 10789 Security Feature Bypass 10788 Security Feature Bypass 10481 Security Feature Bypass 10482 Security Feature Bypass 10484 Security Feature Bypass 10378 Security Feature Bypass 10379 Security Feature Bypass 10483 Security Feature Bypass 10543 Important 10729 Important 10735 Important 10789 Important 10788 Important 10481 Important 10482 Important 10484 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 6.6 5.9 CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10729 6.6 5.9 CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10735 6.6 5.9 CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10789 6.6 5.9 CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10788 6.6 5.9 CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10481 6.6 5.9 CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10482 6.6 5.9 CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10484 6.6 5.9 CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10378 6.6 5.9 CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10379 6.6 5.9 CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10483 6.6 5.9 CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10543 3172729 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3172729 10729 No Security Update 3172729 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3172729 10735 No Security Update 3172729 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3172729 10789 No Security Update 3172729 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3172729 10788 No Security Update 3172729 https://www.microsoft.com/downloads/details.aspx?familyid=19c5ba0d-de7b-41af-8db3-76d1ff6f79b2 10481 No Security Update 3172729 https://www.microsoft.com/downloads/details.aspx?familyid=e0aedb91-f808-4ae8-86f4-46015f6b7c0b 10482 No Security Update 3172729 10484 No Security Update 3172729 https://www.microsoft.com/downloads/details.aspx?familyid=224b85dd-5caf-4c9f-852f-88f2542f9a94 10378 No Security Update 3172729 https://www.microsoft.com/downloads/details.aspx?familyid=224b85dd-5caf-4c9f-852f-88f2542f9a94 10379 No Security Update 3172729 https://www.microsoft.com/downloads/details.aspx?familyid=e0aedb91-f808-4ae8-86f4-46015f6b7c0b 10483 No Security Update 3172729 https://www.microsoft.com/downloads/details.aspx?familyid=e0aedb91-f808-4ae8-86f4-46015f6b7c0b 10543 No Security Update <p><strong>Configure BitLocker to use Trusted Platform Module (TPM)+PIN protection</strong> To enable TPM and PIN protector, enable the enhanced protection group policy as follows:</p> <ol> <li>Click Start, click Run, type gpedit.msc, and then click OK to open the Local Group Policy Editor.</li> <li>Under Local Computer Policy, navigate to Administrative Templates&gt;Windows Components&gt;BitLocker Drive Encryption&gt;Operating Systems Drives.</li> <li>In the right-hand pane, double-click Require additional authentication at startup.</li> <li>In the dialog box that appears, click Enabled.</li> <li>Under Options, select Require TPM and Require startup PIN with TPM.</li> <li>Click Apply and exit the Local Group Policy Editor.</li> <li>Open the command prompt with Administrator privileges.</li> <li>Enter the following command: <code>manage-bde -protectors -add c: &amp;lt;OR OS volume letter&amp;gt; -tpmandpin</code></li> <li>When prompted for a PIN, enter a 4 or 6-digit PIN.</li> <li>Restart the system.</li> </ol> <p><strong>Impact of workaround.</strong> The user will be required to enter the PIN every time the computer restarts.</p> <p><strong>How to undo the workaround</strong></p> <ol> <li>Click Start, click Run, type gpedit.msc, and then click OK to open the Local Group Policy Editor.</li> <li>Under Local Computer Policy, navigate to Administrative Templates&gt;Windows Components&gt;BitLocker Drive Encryption&gt;Operating Systems Drives</li> <li>In the right-hand pane, double-click “Require additional authentication at startup”</li> <li>In the dialog box that appears, click Enabled.</li> <li>Under Options, select Allow TPM and Allow startup PIN with TPM.</li> <li>Click Apply and exit the Local Group Policy Editor.</li> <li>Restart the system.</li> </ol> <p><strong>Disable Secure Boot integrity protection of BitLocker</strong> To disable Secure Boot, you must follow each of the steps in order.</p> <ol> <li>Disable BitLocker <ol> <li>Open Control Panel and then click BitLocker Drive Encryption.</li> <li>Click Turn off BitLocker</li> <li>In the BitLocker Drive Encryption dialog box, click Turn off BitLocker.</li> <li>Exit Control Panel.</li> </ol> </li> <li>Disable Secure Boot <ol> <li>Click Start, click Run, type gpedit.msc, and then click OK to open the Local Group Policy Editor.</li> <li>Under Local Computer Policy, navigate to Administrative Templates&gt;Windows Components&gt;BitLocker Drive Encryption&gt;Operating Systems Drives</li> <li>Double-click Allow Secure Boot for integrity validation.</li> <li>In the dialog box that appears, click Disabled.</li> <li>Click Apply and exit the Local Group Policy Editor.</li> </ol> </li> <li>Re-enable BitLocker <ol> <li>Open Control Panel, then click BitLocker Drive Encryption.</li> <li>Click Turn on BitLocker</li> <li>In the BitLocker Drive Encryption dialog box, click Turn on BitLocker.</li> <li>Exit Control Panel.</li> </ol> </li> </ol> <p><strong>Impact of workaround.</strong> Disabling Secure Boot may cause systems to enter BitLocker recovery mode more often when you update firmware versions or BCD settings.</p> <p><strong>How to undo the workaround.</strong></p> <ol> <li>Disable BitLocker <ol> <li>Open Control Panel, then click BitLocker Drive Encryption.</li> <li>Click Turn off BitLocker</li> <li>In the BitLocker Drive Encryption dialog box, click Turn off BitLocker.</li> <li>Exit Control Panel.</li> </ol> </li> <li>Enable Secure Boot <ol> <li>Click Start, click Run, type gpedit.msc, and then click OK to open the Local Group Policy Editor.</li> <li>Under Local Computer Policy, navigate to Administrative Templates&gt;Windows Components&gt;BitLocker Drive Encryption&gt;Operating Systems Drives</li> <li>Double-click Allow Secure Boot for integrity validation.</li> <li>In the dialog box that appears, click Enabled.</li> <li>Click Apply and exit the Local Group Policy Editor.</li> </ol> </li> <li>Re-enable BitLocker <ol> <li>Open Control Panel, then click BitLocker Drive Encryption.</li> <li>Click Turn on BitLocker</li> <li>In the BitLocker Drive Encryption dialog box, click Turn on BitLocker.</li> <li>Exit Control Panel.</li> </ol> </li> </ol> <p>The following <a href="https://technet.microsoft.com/library/security/dn848375.aspx">mitigating factors</a> may be helpful in your situation: To exploit the vulnerability, an attacker must have either administrative privileges or physical access to the target device.</p> 1.0 2016-08-09T07:00:00Z <p>Information published.</p> Internet Explorer Information Disclosure Vulnerability <p>An information disclosure vulnerability exists when Internet Explorer improperly handles page content, which could allow an attacker to detect the existence of specific files on the user's system.</p> <p>To exploit the vulnerability, in a web-based attack scenario, an attacker could host a website that is used to attempt to exploit the vulnerability. In addition, compromised websites and websites that accept or host user-provided content could contain specially crafted content that could exploit the vulnerability. In all cases, however, an attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action. For example, an attacker could trick users into clicking a link that takes them to the attacker's site.</p> <p>The security update addresses the vulnerability by helping to ensure that page content is properly validated in Internet Explorer.</p> Internet Explorer CVE-2016-3321 10486-10047 10486-10048 10486-10051 10555-10378 10486-10481 10486-10482 10486-10484 10486-10483 10486-10729 10486-10735 10486-10789 10486-10788 10486-10852 10486-10853 Information Disclosure 10486-10047 Information Disclosure 10486-10048 Remote Code Execution 10486-10051 Information Disclosure 10555-10378 Information Disclosure 10486-10481 Information Disclosure 10486-10482 Information Disclosure 10486-10484 Information Disclosure 10486-10483 Information Disclosure 10486-10729 Information Disclosure 10486-10735 Information Disclosure 10486-10789 Information Disclosure 10486-10788 Information Disclosure 10486-10852 Information Disclosure 10486-10853 Moderate 10486-10047 Moderate 10486-10048 Low 10486-10051 Low 10555-10378 Moderate 10486-10481 Moderate 10486-10482 Moderate 10486-10484 Low 10486-10483 Moderate 10486-10729 Moderate 10486-10735 Moderate 10486-10789 Moderate 10486-10788 Moderate 10486-10852 Moderate 10486-10853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely 2.6 2.4 CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10555-10378 3.1 2.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10486-10481 3.1 2.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10486-10482 2.6 2.4 CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10486-10483 3.1 2.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10486-10729 3.1 2.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10486-10735 3.1 2.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10486-10789 3.1 2.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10486-10788 3.1 2.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10486-10852 3.1 2.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10486-10853 3175443 https://www.microsoft.com/downloads/details.aspx?familyid=693dcdd8-0bc1-4940-817d-72e6769f9919 3170106 10486-10047 Yes Security Update 3175443 https://www.microsoft.com/downloads/details.aspx?familyid=c8f97de6-30ce-40d5-8cb7-ec6166ed59bb 3170106 10486-10048 Yes Security Update 3175443 https://www.microsoft.com/downloads/details.aspx?familyid=c8f97de6-30ce-40d5-8cb7-ec6166ed59bb 3170106 10486-10051 Yes Security Update 3175443 https://www.microsoft.com/downloads/details.aspx?familyid=95af65ca-44a0-4e80-a63c-dc0c1cc8c965 3170106 10555-10378 Yes Security Update 3175443 https://www.microsoft.com/downloads/details.aspx?familyid=8c8d3d32-ed7a-4e2e-8c4b-1f1ba81771f6 3170106 10486-10481 Yes Security Update 3175443 https://www.microsoft.com/downloads/details.aspx?familyid=1385662a-0bca-4de8-bb89-fbf7eccc2e2e 3170106 10486-10482 Yes Security Update 3175443 3170106 10486-10484 Yes Security Update 3175443 https://www.microsoft.com/downloads/details.aspx?familyid=1385662a-0bca-4de8-bb89-fbf7eccc2e2e 3170106 10486-10483 Yes Security Update 3176492 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176492 3163912 10486-10729 Yes Security Update 3176492 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176492 3163912 10486-10735 Yes Security Update 3176493 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176493 3172985 10486-10789 Yes Security Update 3176493 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176493 3172985 10486-10788 Yes Security Update 3176495 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176495 10486-10852 Yes Security Update 3176495 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176495 10486-10853 Yes Security Update <p>The following <a href="https://technet.microsoft.com/library/security/dn848375.aspx#Mitigation">mitigating factors</a> may be helpful in your situation: An attacker must have valid logon credentials and be able to log on locally to exploit this vulnerability.</p> Yorick Koster of <a href="https://securify.nl/">Securify B.V.</a> 1.0 2016-08-09T07:00:00Z <p>Information published.</p> Microsoft Browser Memory Corruption Vulnerability <p>A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory. The vulnerability could corrupt memory in a way that could allow an attacker to execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, the attacker could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p> <p>An attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft browsers, and then convince a user to view the website. The attacker could also take advantage of compromised websites, or websites that accept or host user-provided content or advertisements, by adding specially crafted content that could exploit the vulnerability. In all cases, however, an attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically via an enticement in email or instant message, or by getting them to open an email attachment.</p> <p>The security update addresses the vulnerability by modifying how Microsoft browsers handle objects in memory.</p> Microsoft Browsers CVE-2016-3322 10486-10047 10486-10048 10486-10051 10486-10481 10486-10482 10486-10484 10486-10483 10486-10729 10486-10735 10486-10789 10486-10788 10724-10729 10724-10735 10724-10789 10724-10788 10724-10852 10724-10853 10486-10852 10486-10853 Remote Code Execution 10486-10047 Remote Code Execution 10486-10048 Remote Code Execution 10486-10051 Remote Code Execution 10486-10481 Remote Code Execution 10486-10482 Remote Code Execution 10486-10484 Remote Code Execution 10486-10483 Remote Code Execution 10486-10729 Remote Code Execution 10486-10735 Remote Code Execution 10486-10789 Remote Code Execution 10486-10788 Remote Code Execution 10724-10729 Remote Code Execution 10724-10735 Remote Code Execution 10724-10789 Remote Code Execution 10724-10788 Remote Code Execution 10724-10852 Remote Code Execution 10724-10853 Remote Code Execution 10486-10852 Remote Code Execution 10486-10853 Critical 10486-10047 Critical 10486-10048 Moderate 10486-10051 Critical 10486-10481 Critical 10486-10482 Critical 10486-10484 Moderate 10486-10483 Critical 10486-10729 Critical 10486-10735 Critical 10486-10789 Critical 10486-10788 Critical 10724-10729 Critical 10724-10735 Critical 10724-10789 Critical 10724-10788 Critical 10724-10852 Critical 10724-10853 Critical 10486-10852 Critical 10486-10853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A 7.1 6.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10486-10481 7.1 6.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10486-10482 6.0 5.4 CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10486-10483 7.1 6.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10486-10729 7.1 6.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10486-10735 7.1 6.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10486-10789 7.1 6.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10486-10788 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10729 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10735 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10789 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10788 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10852 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10853 7.1 6.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10486-10852 7.1 6.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10486-10853 3175443 https://www.microsoft.com/downloads/details.aspx?familyid=693dcdd8-0bc1-4940-817d-72e6769f9919 3170106 10486-10047 Yes Security Update 3175443 https://www.microsoft.com/downloads/details.aspx?familyid=c8f97de6-30ce-40d5-8cb7-ec6166ed59bb 3170106 10486-10048 Yes Security Update 3175443 https://www.microsoft.com/downloads/details.aspx?familyid=693dcdd8-0bc1-4940-817d-72e6769f9919 3170106 10486-10051 Yes Security Update 3175443 https://www.microsoft.com/downloads/details.aspx?familyid=8c8d3d32-ed7a-4e2e-8c4b-1f1ba81771f6 3170106 10486-10481 Yes Security Update 3175443 https://www.microsoft.com/downloads/details.aspx?familyid=1385662a-0bca-4de8-bb89-fbf7eccc2e2e 3170106 10486-10482 Yes Security Update 3175443 3170106 10486-10484 Yes Security Update 3175443 https://www.microsoft.com/downloads/details.aspx?familyid=1385662a-0bca-4de8-bb89-fbf7eccc2e2e 3170106 10486-10483 Yes Security Update 3176492 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176492 3163912 10486-10729 Yes Security Update 3176492 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176492 3163912 10486-10735 Yes Security Update 3176493 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176493 3172985 10486-10789 Yes Security Update 3176493 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176493 3172985 10486-10788 Yes Security Update 3176492 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176492 3163912 10724-10729 Yes Security Update 3176492 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176492 3163912 10724-10735 Yes Security Update 3176493 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176493 3172985 10724-10789 Yes Security Update 3176493 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176493 3172985 10724-10788 Yes Security Update 3176495 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176495 10724-10852 Yes Security Update 3176495 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176495 10724-10853 Yes Security Update 3176495 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176495 10486-10852 Yes Security Update 3176495 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176495 10486-10853 Yes Security Update Zheng Huang of the <a href="http://xteam.baidu.com/">Baidu Security Lab</a>, working with <a href="http://www.zerodayinitiative.com/">Trend Micro’s Zero Day Initiative (ZDI)</a> 1.0 2016-08-09T07:00:00Z <p>Information published.</p> Microsoft Browser Information Disclosure Vulnerability <p>An information disclosure vulnerability exists when affected Microsoft browsers improperly handle objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system.</p> <p>To exploit the vulnerability, in a web-based attack scenario, an attacker could host a website that is used to attempt to exploit the vulnerability. In addition, compromised websites and websites that accept or host user-provided content could contain specially crafted content that could exploit the vulnerability. However, in all cases an attacker would have no way to force a user to view the attacker-controlled content. Instead, an attacker would have to convince a user to take action. For example, an attacker could trick a user into clicking a link that takes the user to the attacker's site.</p> <p>The security update addresses the vulnerability by modifying how Microsoft browsers handle objects in memory.</p> Microsoft Browsers CVE-2016-3326 10555-10378 10336-9312 10336-9318 10486-10951 10486-10952 10486-10729 10486-10735 10486-10789 10486-10788 10486-10852 10486-10853 10486-10047 10486-10048 10486-10481 10486-10482 10486-10484 10486-10051 10486-10483 10724-10951 10724-10952 10724-10729 10724-10735 10724-10789 10724-10788 10724-10852 10724-10853 Information Disclosure 10555-10378 Information Disclosure 10336-9312 Information Disclosure 10336-9318 Information Disclosure 10486-10951 Information Disclosure 10486-10952 Information Disclosure 10486-10729 Information Disclosure 10486-10735 Information Disclosure 10486-10789 Elevation of Privilege 10486-10788 Information Disclosure 10486-10852 Information Disclosure 10486-10853 Information Disclosure 10486-10047 Information Disclosure 10486-10048 Information Disclosure 10486-10481 Information Disclosure 10486-10482 Information Disclosure 10486-10484 Information Disclosure 10486-10051 Information Disclosure 10486-10483 Information Disclosure 10724-10951 Information Disclosure 10724-10952 Information Disclosure 10724-10729 Information Disclosure 10724-10735 Information Disclosure 10724-10789 Information Disclosure 10724-10788 Information Disclosure 10724-10852 Information Disclosure 10724-10853 Low 10555-10378 Low 10336-9312 Low 10336-9318 Important 10486-10951 Important 10486-10952 Important 10486-10729 Important 10486-10735 Important 10486-10789 Important 10486-10788 Important 10486-10852 Important 10486-10853 Important 10486-10047 Important 10486-10048 Important 10486-10481 Important 10486-10482 Important 10486-10484 Low 10486-10051 Low 10486-10483 Important 10724-10951 Important 10724-10952 Important 10724-10729 Important 10724-10735 Important 10724-10789 Important 10724-10788 Important 10724-10852 Important 10724-10853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely 2.4 2.2 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10555-10378 2.4 2.2 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10336-9312 2.4 2.2 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10336-9318 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10486-10951 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10486-10952 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10486-10729 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10486-10735 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10486-10789 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10486-10788 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10486-10852 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10486-10853 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10486-10047 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10486-10048 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10486-10481 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10486-10482 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10486-10484 2.4 2.2 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10486-10051 2.4 2.2 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10486-10483 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10724-10951 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10724-10952 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10724-10729 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10724-10735 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10724-10789 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10724-10788 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10724-10852 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10724-10853 4022724 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4022724 4019216 10555-10378 Yes Monthly Rollup 4021558 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4021558 4018271 10555-10378 Yes IE Cumulative 4021558 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4021558 4018271 10336-9312 Yes IE Cumulative 4021558 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4021558 4018271 10336-9318 Yes IE Cumulative 4038788 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4038788 4034674 10486-10951 Yes Security Update 4038788 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4038788 4034674 10486-10952 Yes Security Update 4022727 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4022727 4019474 10486-10729 Yes Security Update 4022727 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4022727 4019474 10486-10735 Yes Security Update 4022714 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4022714 4019473 10486-10789 Yes Security Update 4022714 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4022714 4019473 10486-10788 Yes Security Update 4022715 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4022715 4019472 10486-10852 Yes Security Update 4022715 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4022715 4019472 10486-10853 Yes Security Update 4022719 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4022719 4019264 10486-10047 Yes Monthly Rollup 4021558 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4021558 4018271 10486-10047 Yes IE Cumulative 4022719 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4022719 4019264 10486-10048 Yes Monthly Rollup 4021558 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4021558 4018271 10486-10048 Yes IE Cumulative 4022726 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4022726 4019215 10486-10481 Yes Monthly Rollup 4021558 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4021558 4018271 10486-10481 Yes IE Cumulative 4022726 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4022726 4019215 10486-10482 Yes Monthly Rollup 4021558 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4021558 4018271 10486-10482 Yes IE Cumulative 4022726 4019215 10486-10484 Yes Monthly Rollup 4022719 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4022719 4019264 10486-10051 Yes Monthly Rollup 4021558 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4021558 4018271 10486-10051 Yes IE Cumulative 4022726 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4022726 4019215 10486-10483 Yes Monthly Rollup 4021558 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4021558 4018271 10486-10483 Yes IE Cumulative 4038788 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4038788 4034674 10724-10951 Yes Security Update 4038788 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4038788 4034674 10724-10952 Yes Security Update 4022727 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4022727 4019474 10724-10729 Yes Security Update 4022727 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4022727 4019474 10724-10735 Yes Security Update 4022714 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4022714 4019473 10724-10789 Yes Security Update 4022714 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4022714 4019473 10724-10788 Yes Security Update 4022715 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4022715 4019472 10724-10852 Yes Security Update 4022715 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4022715 4019472 10724-10853 Yes Security Update Simon Zuckerbraun, working with <a href="http://www.zerodayinitiative.com/">Trend Micro's Zero Day Initiative (ZDI)</a> 2.0 2017-06-13T07:00:00Z <p>To comprehensively address CVE-2016-3326, Microsoft is releasing June security updates for all affected Microsoft browsers. Microsoft recommends that customers running affected Microsoft browsers should install the applicable June security update to be fully protected from this vulnerability. See the applicable Release Notes or Microsoft Knowledge Base article for more information.</p> 3.0 2017-09-12T07:00:00Z <p>Revised the Affected Products table to include Microsoft Edge and Internet Explorer 11 installed on Windows 10 Version 1703 for 32-bit Systems, and Microsoft Edge and Internet Explorer 11 installed on Windows 10 Version 1703 for x64-based Systems because they are affected by CVE-2016-3326. In addition, corrected the Affected Products table to include Microsoft Edge installed on Windows 10, Windows 10 Version 1511, and Windows 10 Version 1607 because they are also affected by this vulnerability. Consumers using Windows 10 are automatically protected. Microsoft recommends that enterprise customers running Microsoft Edge or Internet Explorer on Windows 10 Version 1703 ensure they have update 4038788 installed to be protected from this vulnerability. Customers who are running other versions of Windows 10 and who have installed the August cumulative updates do not need to take any further action.</p> 1.0 2016-08-09T07:00:00Z <p>Information published.</p> Microsoft Browser Information Disclosure Vulnerability <p>An information disclosure vulnerability exists when affected Microsoft browsers improperly handle objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system.</p> <p>To exploit the vulnerability, in a web-based attack scenario, an attacker could host a website that is used to attempt to exploit the vulnerability. In addition, compromised websites and websites that accept or host user-provided content could contain specially crafted content that could exploit the vulnerability. However, in all cases an attacker would have no way to force a user to view the attacker-controlled content. Instead, an attacker would have to convince a user to take action. For example, an attacker could trick a user into clicking a link that takes the user to the attacker's site.</p> <p>The security update addresses the vulnerability by modifying how Microsoft browsers handle objects in memory.</p> Microsoft Browsers CVE-2016-3327 10336-9312 10336-9318 10336-4393 10336-9316 10486-10047 10486-10048 10486-10051 10555-10378 10486-10481 10486-10482 10486-10484 10486-10483 10486-10729 10486-10735 10486-10789 10486-10788 10724-10729 10724-10735 10724-10789 10724-10788 10724-10852 10724-10853 10486-10852 10486-10853 Information Disclosure 10336-9312 Information Disclosure 10336-9318 Information Disclosure 10336-4393 Information Disclosure 10336-9316 Information Disclosure 10486-10047 Information Disclosure 10486-10048 Information Disclosure 10486-10051 Information Disclosure 10555-10378 Information Disclosure 10486-10481 Information Disclosure 10486-10482 Information Disclosure 10486-10484 Information Disclosure 10486-10483 Information Disclosure 10486-10729 Information Disclosure 10486-10735 Information Disclosure 10486-10789 Information Disclosure 10486-10788 Information Disclosure 10724-10729 Information Disclosure 10724-10735 Information Disclosure 10724-10789 Information Disclosure 10724-10788 Information Disclosure 10724-10852 Information Disclosure 10724-10853 Information Disclosure 10486-10852 Information Disclosure 10486-10853 Low 10336-9312 Low 10336-9318 Important 10336-4393 Important 10336-9316 Important 10486-10047 Important 10486-10048 Low 10486-10051 Low 10555-10378 Important 10486-10481 Important 10486-10482 Important 10486-10484 Low 10486-10483 Important 10486-10729 Important 10486-10735 Important 10486-10789 Important 10486-10788 Important 10724-10729 Important 10724-10735 Important 10724-10789 Important 10724-10788 Important 10724-10852 Important 10724-10853 Important 10486-10852 Important 10486-10853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely 6.4 5.8 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10336-9312 6.4 5.8 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10336-9318 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10336-4393 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10336-9316 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10486-10047 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10486-10048 6.4 5.8 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10486-10051 6.4 5.8 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10555-10378 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10486-10481 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10486-10482 6.4 5.8 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10486-10483 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10486-10729 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10486-10735 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10486-10789 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10486-10788 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10724-10729 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10724-10735 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10724-10789 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10724-10788 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10724-10852 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10724-10853 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10486-10852 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10486-10853 3175443 https://www.microsoft.com/downloads/details.aspx?familyid=1298b43f-e00f-4b96-8ba7-a866a307d226 3170106 10336-9312 Yes Security Update 3175443 https://www.microsoft.com/downloads/details.aspx?familyid=7aabe7e8-405e-403e-ab8f-2d49ed59af1a 3170106 10336-9318 Yes Security Update 3175443 https://www.microsoft.com/downloads/details.aspx?familyid=1298b43f-e00f-4b96-8ba7-a866a307d226 3170106 10336-4393 Yes Security Update 3175443 https://www.microsoft.com/downloads/details.aspx?familyid=7aabe7e8-405e-403e-ab8f-2d49ed59af1a 3170106 10336-9316 Yes Security Update 3175443 https://www.microsoft.com/downloads/details.aspx?familyid=693dcdd8-0bc1-4940-817d-72e6769f9919 3170106 10486-10047 Yes Security Update 3175443 https://www.microsoft.com/downloads/details.aspx?familyid=c8f97de6-30ce-40d5-8cb7-ec6166ed59bb 3170106 10486-10048 Yes Security Update 3175443 https://www.microsoft.com/downloads/details.aspx?familyid=c8f97de6-30ce-40d5-8cb7-ec6166ed59bb 3170106 10486-10051 Yes Security Update 3175443 https://www.microsoft.com/downloads/details.aspx?familyid=95af65ca-44a0-4e80-a63c-dc0c1cc8c965 3170106 10555-10378 Yes Security Update 3175443 https://www.microsoft.com/downloads/details.aspx?familyid=8c8d3d32-ed7a-4e2e-8c4b-1f1ba81771f6 3170106 10486-10481 Yes Security Update 3175443 https://www.microsoft.com/downloads/details.aspx?familyid=1385662a-0bca-4de8-bb89-fbf7eccc2e2e 3170106 10486-10482 Yes Security Update 3175443 3170106 10486-10484 Yes Security Update 3175443 https://www.microsoft.com/downloads/details.aspx?familyid=1385662a-0bca-4de8-bb89-fbf7eccc2e2e 3170106 10486-10483 Yes Security Update 3176492 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176492 3163912 10486-10729 Yes Security Update 3176492 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176492 3163912 10486-10735 Yes Security Update 3176493 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176493 3172985 10486-10789 Yes Security Update 3176493 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176493 3172985 10486-10788 Yes Security Update 3176492 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176492 3163912 10724-10729 Yes Security Update 3176492 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176492 3163912 10724-10735 Yes Security Update 3176493 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176493 3172985 10724-10789 Yes Security Update 3176493 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176493 3172985 10724-10788 Yes Security Update 3176495 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176495 10724-10852 Yes Security Update 3176495 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176495 10724-10853 Yes Security Update 3176495 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176495 10486-10852 Yes Security Update 3176495 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176495 10486-10853 Yes Security Update Soroush Dalili of <a href="https://www.nccgroup.trust/">NCC Group</a> 1.0 2016-08-09T07:00:00Z <p>Information published.</p> Microsoft Browser Information Disclosure Vulnerability <p>An information disclosure vulnerability exists when affected Microsoft browsers improperly handle page content, which could allow an attacker to detect the existence of specific files on the user's system.</p> <p>To exploit this vulnerability, in a web-based attack scenario, an attacker could host a website that is used to attempt to exploit the vulnerability. In addition, compromised websites and websites that accept or host user-provided content could contain specially crafted content that could exploit the vulnerability. In all cases, however, an attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action. For example, an attacker could trick users into clicking a link that takes them to the attacker's site.</p> <p>The update addresses the vulnerability by helping to ensure that page content is properly validated in Microsoft browsers.</p> Microsoft Browsers CVE-2016-3329 10336-9312 10336-9318 10336-4393 10336-9316 10486-10047 10486-10048 10486-10051 10555-10378 10486-10481 10486-10482 10486-10484 10486-10483 10486-10729 10486-10735 10486-10789 10486-10788 10724-10729 10724-10735 10724-10789 10724-10788 10724-10852 10724-10853 10486-10852 10486-10853 Information Disclosure 10336-9312 Information Disclosure 10336-9318 Information Disclosure 10336-4393 Information Disclosure 10336-9316 Information Disclosure 10486-10047 Information Disclosure 10486-10048 Information Disclosure 10486-10051 Information Disclosure 10555-10378 Information Disclosure 10486-10481 Information Disclosure 10486-10482 Information Disclosure 10486-10484 Information Disclosure 10486-10483 Information Disclosure 10486-10729 Information Disclosure 10486-10735 Information Disclosure 10486-10789 Information Disclosure 10486-10788 Information Disclosure 10724-10729 Information Disclosure 10724-10735 Information Disclosure 10724-10789 Information Disclosure 10724-10788 Information Disclosure 10724-10852 Information Disclosure 10724-10853 Information Disclosure 10486-10852 Information Disclosure 10486-10853 Low 10336-9312 Low 10336-9318 Moderate 10336-4393 Moderate 10336-9316 Moderate 10486-10047 Moderate 10486-10048 Moderate 10486-10051 Low 10555-10378 Moderate 10486-10481 Moderate 10486-10482 Moderate 10486-10484 Low 10486-10483 Moderate 10486-10729 Moderate 10486-10735 Moderate 10486-10789 Moderate 10486-10788 Moderate 10724-10729 Moderate 10724-10735 Moderate 10724-10789 Moderate 10724-10788 Moderate 10724-10852 Moderate 10724-10853 Moderate 10486-10852 Moderate 10486-10853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely;Older Software Release:Exploitation Unlikely 6.4 5.8 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10336-9312 6.4 5.8 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10336-9318 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10336-4393 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10336-9316 6.4 5.8 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10555-10378 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10486-10481 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10486-10482 6.4 5.8 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10486-10483 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10486-10729 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10486-10735 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10486-10789 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10486-10788 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10724-10729 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10724-10735 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10724-10789 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10724-10788 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10724-10852 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10724-10853 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10486-10852 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10486-10853 3175443 https://www.microsoft.com/downloads/details.aspx?familyid=1298b43f-e00f-4b96-8ba7-a866a307d226 3170106 10336-9312 Yes Security Update 3175443 https://www.microsoft.com/downloads/details.aspx?familyid=7aabe7e8-405e-403e-ab8f-2d49ed59af1a 3170106 10336-9318 Yes Security Update 3175443 https://www.microsoft.com/downloads/details.aspx?familyid=1298b43f-e00f-4b96-8ba7-a866a307d226 3170106 10336-4393 Yes Security Update 3175443 https://www.microsoft.com/downloads/details.aspx?familyid=7aabe7e8-405e-403e-ab8f-2d49ed59af1a 3170106 10336-9316 Yes Security Update 3175443 https://www.microsoft.com/downloads/details.aspx?familyid=693dcdd8-0bc1-4940-817d-72e6769f9919 3170106 10486-10047 Yes Security Update 3175443 https://www.microsoft.com/downloads/details.aspx?familyid=c8f97de6-30ce-40d5-8cb7-ec6166ed59bb 3170106 10486-10048 Yes Security Update 3175443 https://www.microsoft.com/downloads/details.aspx?familyid=c8f97de6-30ce-40d5-8cb7-ec6166ed59bb 3170106 10486-10051 Yes Security Update 3175443 https://www.microsoft.com/downloads/details.aspx?familyid=95af65ca-44a0-4e80-a63c-dc0c1cc8c965 3170106 10555-10378 Yes Security Update 3175443 https://www.microsoft.com/downloads/details.aspx?familyid=8c8d3d32-ed7a-4e2e-8c4b-1f1ba81771f6 3170106 10486-10481 Yes Security Update 3175443 https://www.microsoft.com/downloads/details.aspx?familyid=1385662a-0bca-4de8-bb89-fbf7eccc2e2e 3170106 10486-10482 Yes Security Update 3175443 3170106 10486-10484 Yes Security Update 3175443 https://www.microsoft.com/downloads/details.aspx?familyid=1385662a-0bca-4de8-bb89-fbf7eccc2e2e 3170106 10486-10483 Yes Security Update 3176492 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176492 3163912 10486-10729 Yes Security Update 3176492 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176492 3163912 10486-10735 Yes Security Update 3176493 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176493 3172985 10486-10789 Yes Security Update 3176493 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176493 3172985 10486-10788 Yes Security Update 3176492 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176492 3163912 10724-10729 Yes Security Update 3176492 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176492 3163912 10724-10735 Yes Security Update 3176493 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176493 3172985 10724-10789 Yes Security Update 3176493 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176493 3172985 10724-10788 Yes Security Update 3176495 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176495 10724-10852 Yes Security Update 3176495 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176495 10724-10853 Yes Security Update 3176495 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176495 10486-10852 Yes Security Update 3176495 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176495 10486-10853 Yes Security Update Masato Kinugawa of <a href="https://cure53.de/">Cure53</a> 1.0 2016-08-09T07:00:00Z <p>Information published.</p> Security Feature Enhancement for Microsoft Outlook <p>Microsoft has released an update for Microsoft Outlook. The update adds a security feature enhancement that provides additional information to users when Outlook makes a network connection through a proxy server.</p> Microsoft Office ADV160011 10156 10527 10528 10810 10811 10765 10766 Defense in Depth 10156 Defense in Depth 10527 Defense in Depth 10528 Defense in Depth 10810 Defense in Depth 10811 Defense in Depth 10765 Defense in Depth 10766 None 10156 None 10527 None 10528 None 10810 None 10811 None 10765 None 10766 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely;Older Software Release:Exploitation Unlikely 3114981 https://www.microsoft.com/downloads/details.aspx?familyid=cd6bad90-cba6-43b0-9a0a-2fb5f488a2e2 MS16-029 10156 Maybe Security Update 3115474 https://www.microsoft.com/downloads/details.aspx?familyid=8439f784-4243-4095-a27e-016b0b27d59b MS16-088 10527 Maybe Security Update 3115474 https://www.microsoft.com/downloads/details.aspx?familyid=2485d0ba-2cdf-463c-a5fb-4d9e00857d2d MS16-088 10528 Maybe Security Update 3115452 https://www.microsoft.com/downloads/details.aspx?familyid=03352fa0-12af-4d58-a396-e22eae834700 MS16-099 10810 Maybe Security Update 3115452 https://www.microsoft.com/downloads/details.aspx?familyid=f0a7a230-133e-4609-9697-e7dfea8dbc6e MS16-099 10811 Maybe Security Update 3115440 https://www.microsoft.com/downloads/details.aspx?familyid=f5b283ab-6081-49fd-b20c-434cfe73e64b MS16-099 10765 Maybe Security Update 3115440 https://www.microsoft.com/downloads/details.aspx?familyid=2f0490f8-dc90-45c4-bdde-34bca8895aac MS16-099 10766 Maybe Security Update Jerry Decime of Hewlett Packard Enterprise 1.0 2016-08-09T07:00:00Z <p>Information published.</p> 1.1 2017-06-09T07:00:00Z <p>Changed identifier to reduce confusion with CVE IDs. This is an informational change only.</p>