October 2016 Security Updates
Security Update
secure@microsoft.com
The Microsoft Security Response Center (MSRC) identifies, monitors, resolves, and responds to security incidents and Microsoft software security vulnerabilities. For more information, see http://www.microsoft.com/security/msrc.
2016-Oct
2016-Oct
Final
1.0
1
2020-09-25T00:00:00
October 2016 Security Updates
2016-10-11T07:00:00Z
2020-09-25T00:00:00
<p>The October security release consists of security updates for the following software:</p>
<ul>
<li>Internet Explorer</li>
<li>Microsoft Edge</li>
<li>Microsoft Windows</li>
<li>Microsoft .NET Framework</li>
<li>Microsoft Office and Microsoft Office Services and Web Apps</li>
<li>Skype for Business and Microsoft Lync</li>
<li>Adobe Flash Player</li>
</ul>
<p>Please note the following information regarding the security updates:</p>
<ul>
<li>Beginning with the October 2016 release, Microsoft is changing the update servicing model for Windows 7, Windows Server 2008 R2, Windows 8.1, Windows Server 2012, and Windows Server 2012 R2. For more information, please see this Microsoft Technet article, <a href="https://blogs.technet.microsoft.com/windowsitpro/2016/08/15/further-simplifying-servicing-model-for-windows-7-and-windows-8-1/">Further simplifying servicing models forWindows 7 and Windows 8.1.</a></li>
<li>Windows 10 updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows 10, in addition to non-security updates. The updates are available via the <a href="http://catalog.update.microsoft.com/v7/site/Home.aspx">Microsoft Update Catalog</a>.</li>
<li>Beginning with the October 2016 release, Microsoft is changing the update servicing model for Microsoft .NET Framework. For more information, please see this Microsoft .NET Blog post, <a href="https://go.microsoft.com/fwlink/?linkid=829975">.NET Framework Monthly Rollups Explained</a>.</li>
<li>Vulnerabilities addressed in the October 2016 security release might also affect Windows Server 2016 Technical Preview 5. To be protected from these vulnerabilities, Microsoft recommends that customers running this operating system apply the current update, which is available from Windows Update.</li>
<li>Updates for Windows RT 8.1 and Microsoft Office RT software are only available via <a href="http://go.microsoft.com/fwlink/?LinkId=21130">Windows Update</a>.</li>
<li>In addition to security changes for the vulnerabilities, updates include defense-in-depth updates to help improve security-related features.</li>
</ul>
<p><strong>Known Issues</strong></p>
<ul>
<li>Windows, IE: <a href="https://support.microsoft.com/en-us/kb/3185614">3185614</a></li>
<li>Windows, IE: <a href="https://support.microsoft.com/en-us/kb/3185611">3185611</a></li>
<li>Windows, IE: <a href="https://support.microsoft.com/en-us/kb/3188966">3188966</a></li>
<li>Windows, IE: <a href="https://support.microsoft.com/en-us/kb/3192392">3192392</a></li>
<li>Windows, IE: <a href="https://support.microsoft.com/en-us/kb/3192393">3192393</a></li>
<li>Windows, IE: <a href="https://support.microsoft.com/en-us/kb/3192391">3192391</a></li>
</ul>
The information provided in the Microsoft Knowledge Base is provided "as is" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.
Windows 10 for 32-bit Systems
Windows 10 for x64-based Systems
Windows 10 Version 1511 for 32-bit Systems
Windows 10 Version 1511 for x64-based Systems
Windows 10 Version 1607 for 32-bit Systems
Windows 10 Version 1607 for x64-based Systems
Windows 8.1 for 32-bit systems
Windows 8.1 for x64-based systems
Windows RT 8.1
Windows Vista Service Pack 2
Windows Vista x64 Edition Service Pack 2
Windows Server 2012
Windows Server 2012 (Server Core installation)
Windows Server 2012 R2
Windows Server 2012 R2 (Server Core installation)
Windows 10 Version 1703 for 32-bit Systems
Windows 10 Version 1703 for x64-based Systems
Windows Server 2016 (Server Core installation)
Windows 7 for 32-bit Systems Service Pack 1
Windows 7 for x64-based Systems Service Pack 1
Internet Explorer 9 on Windows Vista Service Pack 2
Internet Explorer 9 on Windows Server 2008 for 32-bit Systems Service Pack 2
Internet Explorer 9 on Windows Vista x64 Edition Service Pack 2
Internet Explorer 9 on Windows Server 2008 for x64-based Systems Service Pack 2
Windows Server 2008 for 32-bit Systems Service Pack 2
Windows Server 2008 for x64-based Systems Service Pack 2
Windows Server 2008 for Itanium-Based Systems Service Pack 2
Windows Server 2008 R2 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)
Internet Explorer 11 on Windows 7 for 32-bit Systems Service Pack 1
Internet Explorer 11 on Windows 7 for x64-based Systems Service Pack 1
Internet Explorer 11 on Windows Server 2008 R2 for x64-based Systems Service Pack 1
Internet Explorer 10 on Windows Server 2012
Internet Explorer 11 on Windows 8.1 for 32-bit systems
Internet Explorer 11 on Windows 8.1 for x64-based systems
Internet Explorer 11 on Windows Server 2012 R2
Internet Explorer 11 on Windows RT 8.1
Internet Explorer 11 on Windows 10 Version 1511 for x64-based Systems
Internet Explorer 11 on Windows 10 Version 1511 for 32-bit Systems
Internet Explorer 11 on Windows 10 for 32-bit Systems
Internet Explorer 11 on Windows 10 for x64-based Systems
Internet Explorer 11 on Windows 10 Version 1607 for 32-bit Systems
Internet Explorer 11 on Windows 10 Version 1607 for x64-based Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 for 32-bit Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 for x64-based Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1511 for 32-bit Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1511 for x64-based Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for 32-bit Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for x64-based Systems
Microsoft Office 2007 Service Pack 3
Microsoft Office 2010 Service Pack 2 (32-bit editions)
Microsoft Office 2010 Service Pack 2 (64-bit editions)
Microsoft Office Word Viewer
Microsoft Lync 2010 (32-bit)
Microsoft Lync 2010 (64-bit)
Microsoft Lync 2010 Attendee (admin level install)
Microsoft Lync 2010 Attendee (user level install)
Microsoft Lync 2013 Service Pack 1 (32-bit)
Microsoft Lync 2013 Service Pack 1 (64-bit)
Microsoft Lync Basic 2013 Service Pack 1 (32-bit)
Microsoft Lync Basic 2013 Service Pack 1 (64-bit)
Skype for Business 2016 (32-bit)
Skype for Business 2016 (64-bit)
Skype for Business 2016 Basic (32-bit)
Skype for Business 2016 Basic (64-bit)
Microsoft Live Meeting 2007 Console
Microsoft Office Compatibility Pack Service Pack 3
Microsoft Office Web Apps 2010 Service Pack 2
Microsoft Office Web Apps Server 2013 Service Pack 1
Microsoft Office Online Server 2016
Microsoft Word 2007 Service Pack 3
Microsoft Word 2010 Service Pack 2 (32-bit editions)
Microsoft Word 2010 Service Pack 2 (64-bit editions)
Microsoft Word 2013 RT Service Pack 1
Microsoft Word 2013 Service Pack 1 (32-bit editions)
Microsoft Word 2013 Service Pack 1 (64-bit editions)
Microsoft Word 2016 (32-bit edition)
Microsoft Word 2016 (64-bit edition)
Microsoft Word 2016 for Mac
Microsoft Word for Mac 2011
Word Automation Services on Microsoft SharePoint Server 2013 Service Pack 1
Word Automation Services on Microsoft SharePoint Server 2010 Service Pack 2
Microsoft Silverlight 5 Developer Runtime when installed on Apple Mac OS (Intel-based)
Microsoft Silverlight 5 Developer Runtime when installed on Microsoft Windows (32-bit)
Microsoft Silverlight 5 Developer Runtime when installed on Microsoft Windows (x64-based)
Microsoft Silverlight 5 when installed on Apple Mac OS (Intel-based)
Microsoft Silverlight 5 when installed on Microsoft Windows (32-bit)
Microsoft Silverlight 5 when installed on Microsoft Windows (x64-based)
Microsoft .NET Framework 3.0 Service Pack 2 on Windows Vista Service Pack 2
Microsoft .NET Framework 3.0 Service Pack 2 on Windows Server 2008 for x64-based Systems Service Pack 2
Microsoft .NET Framework 3.0 Service Pack 2 on Windows Vista x64 Edition Service Pack 2
Microsoft .NET Framework 3.0 Service Pack 2 on Windows Server 2008 for 32-bit Systems Service Pack 2
Microsoft .NET Framework 3.5 on Windows 8.1 for x64-based systems
Microsoft .NET Framework 3.5 on Windows Server 2012 R2
Microsoft .NET Framework 3.5 on Windows 10 for 32-bit Systems
Microsoft .NET Framework 3.5 on Windows 10 for x64-based Systems
Microsoft .NET Framework 3.5 on Windows 10 Version 1511 for 32-bit Systems
Microsoft .NET Framework 3.5 on Windows 10 Version 1511 for x64-based Systems
Microsoft .NET Framework 3.5 on Windows 10 Version 1607 for 32-bit Systems
Microsoft .NET Framework 3.5 on Windows 10 Version 1607 for x64-based Systems
Microsoft .NET Framework 3.5 on Windows Server 2012 R2 (Server Core installation)
Microsoft .NET Framework 3.5 on Windows 8.1 for 32-bit systems
Microsoft .NET Framework 3.5 on Windows Server 2012 (Server Core installation)
Microsoft .NET Framework 3.5 on Windows Server 2012
Microsoft .NET Framework 3.5.1 on Windows 7 for 32-bit Systems Service Pack 1
Microsoft .NET Framework 3.5.1 on Windows Server 2008 R2 for x64-based Systems Service Pack 1
Microsoft .NET Framework 3.5.1 on Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1
Microsoft .NET Framework 3.5.1 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)
Microsoft .NET Framework 3.5.1 on Windows 7 for x64-based Systems Service Pack 1
Microsoft .NET Framework 4.5.2 on Windows Vista x64 Edition Service Pack 2
Microsoft .NET Framework 4.5.2 on Windows Vista Service Pack 2
Microsoft .NET Framework 4.5.2 on Windows Server 2008 for 32-bit Systems Service Pack 2
Microsoft .NET Framework 4.5.2 on Windows Server 2008 for x64-based Systems Service Pack 2
Microsoft .NET Framework 4.6 on Windows Vista Service Pack 2
Microsoft .NET Framework 4.6 on Windows Vista x64 Edition Service Pack 2
Microsoft .NET Framework 4.6 on Windows Server 2008 for 32-bit Systems Service Pack 2
Microsoft .NET Framework 4.6 on Windows Server 2008 for x64-based Systems Service Pack 2
Adobe Flash Player on Windows RT 8.1
Adobe Flash Player on Windows Server 2012
Adobe Flash Player on Windows 8.1 for 32-bit systems
Adobe Flash Player on Windows 8.1 for x64-based systems
Adobe Flash Player on Windows Server 2012 R2
Adobe Flash Player on Windows 10 for 32-bit Systems
Adobe Flash Player on Windows 10 for x64-based Systems
Adobe Flash Player on Windows 10 Version 1511 for 32-bit Systems
Adobe Flash Player on Windows 10 Version 1511 for x64-based Systems
Adobe Flash Player on Windows 10 Version 1607 for 32-bit Systems
Adobe Flash Player on Windows 10 Version 1607 for x64-based Systems
Microsoft Word for Mac 2011
Windows 7 for 32-bit Systems Service Pack 1
Windows 7 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)
Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems Service Pack 1
Microsoft Lync 2010 (32-bit)
Microsoft Silverlight 5 when installed on Microsoft Windows (x64-based)
Microsoft Silverlight 5 when installed on Apple Mac OS (Intel-based)
Microsoft Office 2007 Service Pack 3
Microsoft Word 2007 Service Pack 3
Microsoft Lync 2010 Attendee (admin level install)
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)
Microsoft Live Meeting 2007 Console
Microsoft Lync 2010 Attendee (user level install)
Microsoft Lync 2010 (64-bit)
Internet Explorer 9 on Windows Vista Service Pack 2
Internet Explorer 9 on Windows Server 2008 for 32-bit Systems Service Pack 2
Internet Explorer 9 on Windows Vista x64 Edition Service Pack 2
Internet Explorer 9 on Windows Server 2008 for x64-based Systems Service Pack 2
Windows Server 2012
Windows Server 2012 (Server Core installation)
Adobe Flash Player on Windows Server 2012
Adobe Flash Player on Windows 8.1 for 32-bit systems
Adobe Flash Player on Windows 8.1 for x64-based systems
Adobe Flash Player on Windows Server 2012 R2
Adobe Flash Player on Windows RT 8.1
Adobe Flash Player on Windows 10 for 32-bit Systems
Adobe Flash Player on Windows 10 for x64-based Systems
Adobe Flash Player on Windows 10 Version 1511 for x64-based Systems
Adobe Flash Player on Windows 10 Version 1511 for 32-bit Systems
Adobe Flash Player on Windows 10 Version 1607 for 32-bit Systems
Adobe Flash Player on Windows 10 Version 1607 for x64-based Systems
Microsoft Silverlight 5 Developer Runtime when installed on Apple Mac OS (Intel-based)
Microsoft Silverlight 5 when installed on Microsoft Windows (32-bit)
Microsoft Silverlight 5 Developer Runtime when installed on Microsoft Windows (x64-based)
Microsoft Silverlight 5 Developer Runtime when installed on Microsoft Windows (32-bit)
Windows 8.1 for 32-bit systems
Windows 8.1 for x64-based systems
Windows Server 2012 R2
Windows RT 8.1
Internet Explorer 11 on Windows 7 for 32-bit Systems Service Pack 1
Internet Explorer 11 on Windows 7 for x64-based Systems Service Pack 1
Internet Explorer 11 on Windows Server 2008 R2 for x64-based Systems Service Pack 1
Internet Explorer 11 on Windows 8.1 for 32-bit systems
Internet Explorer 11 on Windows 8.1 for x64-based systems
Internet Explorer 11 on Windows Server 2012 R2
Internet Explorer 11 on Windows RT 8.1
Internet Explorer 11 on Windows 10 for 32-bit Systems
Internet Explorer 11 on Windows 10 for x64-based Systems
Internet Explorer 11 on Windows 10 Version 1511 for x64-based Systems
Internet Explorer 11 on Windows 10 Version 1511 for 32-bit Systems
Internet Explorer 11 on Windows 10 Version 1607 for 32-bit Systems
Internet Explorer 11 on Windows 10 Version 1607 for x64-based Systems
Microsoft Word 2010 Service Pack 2 (32-bit editions)
Microsoft Word 2010 Service Pack 2 (64-bit editions)
Microsoft Office 2010 Service Pack 2 (32-bit editions)
Microsoft Office 2010 Service Pack 2 (64-bit editions)
Microsoft Office Web Apps 2010 Service Pack 2
Windows Server 2012 R2 (Server Core installation)
Internet Explorer 10 on Windows Server 2012
Microsoft Word 2013 Service Pack 1 (32-bit editions)
Microsoft Word 2013 Service Pack 1 (64-bit editions)
Microsoft Word 2013 RT Service Pack 1
Microsoft Office Web Apps Server 2013 Service Pack 1
Microsoft Lync 2013 Service Pack 1 (32-bit)
Microsoft Lync Basic 2013 Service Pack 1 (32-bit)
Microsoft Lync 2013 Service Pack 1 (64-bit)
Microsoft Lync Basic 2013 Service Pack 1 (64-bit)
Microsoft .NET Framework 4.5.2 on Windows Vista Service Pack 2
Microsoft .NET Framework 4.5.2 on Windows Server 2008 for 32-bit Systems Service Pack 2
Microsoft .NET Framework 4.5.2 on Windows Vista x64 Edition Service Pack 2
Microsoft .NET Framework 4.5.2 on Windows Server 2008 for x64-based Systems Service Pack 2
Microsoft Word 2016 for Mac
Microsoft Edge (EdgeHTML-based) on Windows 10 for 32-bit Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 for x64-based Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1511 for x64-based Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1511 for 32-bit Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for 32-bit Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for x64-based Systems
Microsoft .NET Framework 4.6 on Windows Vista Service Pack 2
Microsoft .NET Framework 4.6 on Windows Server 2008 for 32-bit Systems Service Pack 2
Microsoft .NET Framework 4.6 on Windows Vista x64 Edition Service Pack 2
Microsoft .NET Framework 4.6 on Windows Server 2008 for x64-based Systems Service Pack 2
Windows 10 for 32-bit Systems
Windows 10 for x64-based Systems
Microsoft Word 2016 (32-bit edition)
Microsoft Word 2016 (64-bit edition)
Microsoft Office Online Server 2016
Skype for Business 2016 (32-bit)
Skype for Business 2016 (64-bit)
Skype for Business 2016 Basic (32-bit)
Skype for Business 2016 Basic (64-bit)
Windows 10 Version 1511 for x64-based Systems
Windows 10 Version 1511 for 32-bit Systems
Windows 10 Version 1607 for 32-bit Systems
Windows 10 Version 1607 for x64-based Systems
Windows Server 2016 (Server Core installation)
Windows 10 Version 1703 for 32-bit Systems
Windows 10 Version 1703 for x64-based Systems
Microsoft Office Word Viewer
cm1 qemu-kvm 4.2.0-12 on CBL Mariner 1.0
Microsoft .NET Framework 3.5 on Windows Server 2012
Microsoft .NET Framework 3.5 on Windows Server 2012 (Server Core installation)
Microsoft .NET Framework 3.5 on Windows 8.1 for 32-bit systems
Microsoft .NET Framework 3.5 on Windows 8.1 for x64-based systems
Microsoft .NET Framework 3.5 on Windows Server 2012 R2
Microsoft .NET Framework 3.5 on Windows Server 2012 R2 (Server Core installation)
Microsoft .NET Framework 3.5 on Windows 10 for 32-bit Systems
Microsoft .NET Framework 3.5 on Windows 10 for x64-based Systems
Microsoft .NET Framework 3.5 on Windows 10 Version 1511 for x64-based Systems
Microsoft .NET Framework 3.5 on Windows 10 Version 1511 for 32-bit Systems
Microsoft .NET Framework 3.5 on Windows 10 Version 1607 for 32-bit Systems
Microsoft .NET Framework 3.5 on Windows 10 Version 1607 for x64-based Systems
Windows Vista Service Pack 2
Microsoft Office Compatibility Pack Service Pack 3
Microsoft .NET Framework 3.0 Service Pack 2 on Windows Vista Service Pack 2
Microsoft .NET Framework 3.0 Service Pack 2 on Windows Server 2008 for 32-bit Systems Service Pack 2
Microsoft .NET Framework 3.0 Service Pack 2 on Windows Vista x64 Edition Service Pack 2
Microsoft .NET Framework 3.0 Service Pack 2 on Windows Server 2008 for x64-based Systems Service Pack 2
Windows Server 2008 for Itanium-Based Systems Service Pack 2
Windows Server 2008 for 32-bit Systems Service Pack 2
Windows Vista x64 Edition Service Pack 2
Windows Server 2008 for x64-based Systems Service Pack 2
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)
Word Automation Services on Microsoft SharePoint Server 2010 Service Pack 2
Word Automation Services on Microsoft SharePoint Server 2013 Service Pack 1
Microsoft .NET Framework 3.5.1 on Windows 7 for 32-bit Systems Service Pack 1
Microsoft .NET Framework 3.5.1 on Windows 7 for x64-based Systems Service Pack 1
Microsoft .NET Framework 3.5.1 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)
Microsoft .NET Framework 3.5.1 on Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1
Microsoft .NET Framework 3.5.1 on Windows Server 2008 R2 for x64-based Systems Service Pack 1
Heap-based buffer overflow in the .receive callback of xlnx.xps-ethernetlite in QEMU (aka Quick Emulator) allows attackers to execute arbitrary code on the QEMU host via a large ethlite packet.
<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>
<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>
Mariner
mitre
Yes
CVE-2016-7161
Out-of-bounds Write
16876-16820
16876-16820
Critical
16876-16820
9.8
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
16876-16820
CBL-Mariner Releases
16876-16820
No
Security Update
4.2.0-12
https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade
16876-16820
CBL-Mariner Releases
1.0
2020-09-25T00:00:00
<p>Information published.</p>
Microsoft Video Control Remote Code Execution Vulnerability
<p>A remote code execution vulnerability exists when Microsoft Video Control fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an attacker could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.</p>
<p>To exploit the vulnerability, an attacker would have to convince a user to open either a specially crafted file or application from either a webpage or an email message. The security update addresses the vulnerability by correcting how Microsoft Video Control handles objects in memory.</p>
<p>Note that where the severity is indicated as Critical in the Affected Products table, the Preview Pane is an attack vector.</p>
Microsoft Video Control
CVE-2016-0142
10729
10735
10789
10788
10852
10853
10047
10048
10481
10482
10484
4393
9316
Remote Code Execution
10729
Remote Code Execution
10735
Remote Code Execution
10789
Remote Code Execution
10788
Remote Code Execution
10852
Remote Code Execution
10853
Remote Code Execution
10047
Remote Code Execution
10048
Remote Code Execution
10481
Remote Code Execution
10482
Remote Code Execution
10484
Remote Code Execution
4393
Remote Code Execution
9316
Critical
10729
Critical
10735
Critical
10789
Critical
10788
Critical
10852
Critical
10853
Critical
10047
Critical
10048
Critical
10481
Critical
10482
Critical
10484
Critical
4393
Critical
9316
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely
3192440
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192440
3185611
10729
Yes
Security Update
3192440
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192440
3185611
10735
Yes
Security Update
3192441
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192441
3185614
10789
Yes
Security Update
3192441
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192441
3185614
10788
Yes
Security Update
3194798
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3194798
3189866
10852
Yes
Security Update
3194798
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3194798
3189866
10853
Yes
Security Update
3185330
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185330
3175024
10047
Yes
Monthly Rollup
3192391
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192391
3175024
10047
Yes
Security Only
3185330
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185330
3175024
10048
Yes
Monthly Rollup
3192391
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192391
3175024
10048
Yes
Security Only
3185331
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185331
3185319
10481
Yes
Monthly Rollup
3192392
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192392
MS16-016, 3124280; MS16-097, 3178034; MS16-104, 3185319
10481
Security Only
3185331
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185331
3185319
10482
Yes
Monthly Rollup
3192392
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192392
MS16-016, 3124280; MS16-097, 3178034; MS16-101, 3167679; MS16-104, 3185319
10482
Security Only
3185331
3185319
10484
Yes
Monthly Rollup
3190847
https://www.microsoft.com/downloads/details.aspx?familyid=d215fe06-deab-47da-8fe9-3b9116b5be0f
4393
Yes
Security Update
3190847
https://www.microsoft.com/downloads/details.aspx?familyid=aa29a37e-c841-4ee9-8076-e09cde3af981
9316
Yes
Security Update
1.0
2016-10-11T07:00:00Z
<p>Information published.</p>
2.0
2016-12-13T08:00:00Z
<p>Revised bulletin to announce the following updates have been rereleased with a detection change that addresses a supersedence issue that certain customers experienced when attempting to install the October Security Only updates.
◦ Security Only update 3192391 for all supported releases of Windows 7. For more information, see Microsoft Knowledge Base Article 3192391.
◦ Security Only update 3192392 for Windows 8.1. For more information, see Microsoft Knowledge Base Article 3192392.
These are detection changes only. There were no changes to the update files. Customers who have already successfully installed any of these updates do not need to take any action. For more information, see the Microsoft Knowledge Base article for the respective update.</p>
Microsoft Browser Information Disclosure Vulnerability
<p>An information disclosure vulnerability exists when affected Microsoft scripting engines do not properly handle objects in memory. The vulnerability could allow an attacker to detect specific files on the user's computer. In a web-based attack scenario, an attacker could host a website that is used to attempt to exploit the vulnerability.</p>
<p>In addition, compromised websites and websites that accept or host user-generated content could contain specially crafted content that could exploit the vulnerability. However, in all cases an attacker would have no way to force a user to view the attacker-controlled content. Instead, an attacker would have to convince a user to take action. For example, an attacker could trick a user into clicking a link that takes the user to the attacker's site.</p>
<p>An attacker who successfully exploited the vulnerability could potentially read data that was not intended to be disclosed. Note that the vulnerability would not allow an attacker to either execute code or to elevate a user’s rights directly, but the vulnerability could be used to obtain information in an attempt to further compromise the affected system.</p>
<p>The security update addresses the vulnerability by helping to restrict what information is returned to affected Microsoft browsers.</p>
Microsoft Browsers
CVE-2016-3267
10336-4393
10336-9312
10336-9316
10336-9318
10486-10047
10486-10048
10486-10051
10555-10378
10486-10481
10486-10482
10486-10483
10486-10484
10486-10788
10486-10789
10486-10729
10486-10735
10486-10852
10486-10853
10724-10729
10724-10735
10724-10789
10724-10788
10724-10852
10724-10853
Information Disclosure
10336-4393
Information Disclosure
10336-9312
Information Disclosure
10336-9316
Information Disclosure
10336-9318
Information Disclosure
10486-10047
Information Disclosure
10486-10048
Information Disclosure
10486-10051
Information Disclosure
10555-10378
Information Disclosure
10486-10481
Information Disclosure
10486-10482
Information Disclosure
10486-10483
Information Disclosure
10486-10484
Information Disclosure
10486-10788
Information Disclosure
10486-10789
Information Disclosure
10486-10729
Information Disclosure
10486-10735
Information Disclosure
10486-10852
Information Disclosure
10486-10853
Information Disclosure
10724-10729
Information Disclosure
10724-10735
Information Disclosure
10724-10789
Information Disclosure
10724-10788
Information Disclosure
10724-10852
Information Disclosure
10724-10853
Moderate
10336-4393
Low
10336-9312
Moderate
10336-9316
Low
10336-9318
Moderate
10486-10047
Moderate
10486-10048
Low
10486-10051
Low
10555-10378
Moderate
10486-10481
Moderate
10486-10482
Low
10486-10483
Moderate
10486-10484
Moderate
10486-10788
Moderate
10486-10789
Moderate
10486-10729
Moderate
10486-10735
Moderate
10486-10852
Moderate
10486-10853
Moderate
10724-10729
Moderate
10724-10735
Moderate
10724-10789
Moderate
10724-10788
Moderate
10724-10852
Moderate
10724-10853
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely
3191492
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3191492
3185319
10336-4393
Yes
Security Update
3191492
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3191492
3185319
10336-9312
Yes
Security Update
3191492
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3191492
3185319
10336-9316
Yes
Security Update
3191492
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3191492
3185319
10336-9318
Yes
Security Update
3185330
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185330
3175024
10486-10047
Yes
Monthly Rollup
3192391
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192391
3175024
10486-10047
Yes
Security Only
3185330
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185330
3175024
10486-10048
Yes
Monthly Rollup
3192391
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192391
3175024
10486-10048
Yes
Security Only
3185330
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185330
3175024
10486-10051
Yes
Monthly Rollup
3192391
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192391
3175024
10486-10051
Yes
Security Only
3185332
https://www.microsoft.com/downloads/details.aspx?familyid=93b4d5dd-9784-4fb4-9c0c-9171a24efca5
3192393
10555-10378
Yes
Monthly Rollup
3192393
https://www.microsoft.com/downloads/details.aspx?familyid=17dc5103-8380-440a-9e5b-a55cdc33388b
3185319
10555-10378
Yes
Security Only
3185331
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185331
3185319
10486-10481
Yes
Monthly Rollup
3192392
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192392
MS16-016, 3124280; MS16-097, 3178034; MS16-104, 3185319
10486-10481
Security Only
3185331
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185331
3185319
10486-10482
Yes
Monthly Rollup
3192392
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192392
MS16-016, 3124280; MS16-097, 3178034; MS16-101, 3167679; MS16-104, 3185319
10486-10482
Security Only
3185331
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185331
3185319
10486-10483
Yes
Monthly Rollup
3192392
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192392
MS16-016, 3124280; MS16-097, 3178034; MS16-101, 3167679; MS16-104, 3185319
10486-10483
Security Only
3185331
3185319
10486-10484
Yes
Monthly Rollup
3192441
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192441
3185614
10486-10788
Yes
Security Update
3192441
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192441
3185614
10486-10789
Yes
Security Update
3192440
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192440
3185611
10486-10729
Yes
Security Update
3192440
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192440
3185611
10486-10735
Yes
Security Update
3194798
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3194798
3189866
10486-10852
Yes
Security Update
3194798
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3194798
3189866
10486-10853
Yes
Security Update
3192440
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192440
3185611
10724-10729
Yes
Security Update
3192440
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192440
3185611
10724-10735
Yes
Security Update
3192441
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192441
3185614
10724-10789
Yes
Security Update
3192441
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192441
3185614
10724-10788
Yes
Security Update
3194798
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3194798
3189866
10724-10852
Yes
Security Update
3194798
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3194798
3189866
10724-10853
Yes
Security Update
Wenxiang Qian of <a href="http://browser.qq.com/">Tencent QQBrowser</a>
1.0
2016-10-11T07:00:00Z
<p>Information published.</p>
2.0
2016-12-13T08:00:00Z
<p>Revised bulletin to announce the following updates have been rereleased with a detection change that addresses a supersedence issue that certain customers experienced when attempting to install the October Security Only updates.
◦ Security Only update 3192391 for all supported releases of Windows 7 and Windows Server 2008 R2. For more information, see Microsoft Knowledge Base Article 3192391.
◦ Security Only update 3192393 for Windows Server 2012. For more information, see Microsoft Knowledge Base Article 3192393.
◦ Security Only update 3192392 for Windows 8.1 and Windows Server 2012 R2. For more information, see Microsoft Knowledge Base Article 3192392.
These are detection changes only. There were no changes to the update files. Customers who have already successfully installed any of these updates do not need to take any action. For more information, see the Microsoft Knowledge Base article for the respective update.</p>
Internet Explorer Information Disclosure Vulnerability
<p>An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory.</p>
<p>An attacker who successfully exploited this vulnerability could test for the presence of files on disk. For an attack to be successful, an attacker must persuade a user to open a malicious website.</p>
<p>The security update addresses the vulnerability by changing the way Internet Explorer handles objects in memory.</p>
<p><strong>I am running Internet Explorer on Windows Server 2008, Windows Server 2008 R2, Windows Server 2012, or Windows Server 2012 R2. Does this mitigate these vulnerabilities?</strong>
Yes. By default, Internet Explorer on Windows Server 2008, Windows Server 2008 R2, Windows Server 2012, and Windows Server 2012 R2 runs in a restricted mode that is known as Enhanced Security Configuration. Enhanced Security Configuration is a group of preconfigured settings in Internet Explorer that can reduce the likelihood of a user or administrator downloading and running specially crafted web content on a server. This is a mitigating factor for websites that you have not added to the Internet Explorer Trusted sites zone.</p>
<p><strong>Can EMET help mitigate attacks that attempt to exploit these vulnerabilities?</strong>
Yes. The Enhanced Mitigation Experience Toolkit (EMET) enables users to manage security mitigation technologies that help make it more difficult for attackers to exploit memory corruption vulnerabilities in a given piece of software. EMET can help mitigate attacks that attempt to exploit these vulnerabilities in Internet Explorer on systems where EMET is installed and configured to work with Internet Explorer.</p>
<p>For more information about EMET, see the <a href="https://technet.microsoft.com/security/jj653751">Enhanced Mitigation Experience Toolkit</a>.</p>
Internet Explorer
CVE-2016-3298
4393
9316
9312
9318
9311
10047
10048
10051
10050
10486-10047
10486-10048
10486-10051
10486-10481
10486-10482
10486-10484
10486-10483
10486-10729
10486-10735
10486-10789
10486-10788
10486-10852
10486-10853
10336-4393
10336-9312
10336-9316
10336-9318
10555-10378
Information Disclosure
4393
Information Disclosure
9316
Information Disclosure
9312
Information Disclosure
9318
Information Disclosure
9311
Information Disclosure
10047
Information Disclosure
10048
Information Disclosure
10051
Information Disclosure
10050
Information Disclosure
10486-10047
Information Disclosure
10486-10048
Information Disclosure
10486-10051
Information Disclosure
10486-10481
Information Disclosure
10486-10482
Information Disclosure
10486-10484
Information Disclosure
10486-10483
Information Disclosure
10486-10729
Information Disclosure
10486-10735
Information Disclosure
10486-10789
Information Disclosure
10486-10788
Information Disclosure
10486-10852
Information Disclosure
10486-10853
Information Disclosure
10336-4393
Information Disclosure
10336-9312
Information Disclosure
10336-9316
Information Disclosure
10336-9318
Information Disclosure
10555-10378
Moderate
4393
Moderate
9316
Low
9312
Low
9318
Low
9311
Moderate
10047
Moderate
10048
Low
10051
Low
10050
Moderate
10486-10047
Moderate
10486-10048
Low
10486-10051
Moderate
10486-10481
Moderate
10486-10482
Moderate
10486-10484
Low
10486-10483
Moderate
10486-10729
Moderate
10486-10735
Moderate
10486-10789
Moderate
10486-10788
Moderate
10486-10852
Moderate
10486-10853
Moderate
10336-4393
Low
10336-9312
Moderate
10336-9316
Low
10336-9318
Low
10555-10378
Publicly Disclosed:No;Exploited:Yes;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely
3193515
https://www.microsoft.com/downloads/details.aspx?familyid=edb5aa4c-a8bf-405c-977f-a0e67c17aaa3
4393
Yes
Security Update
3193515
https://www.microsoft.com/downloads/details.aspx?familyid=60ee3508-953c-4c5e-92d8-1de2b1501473
9316
Yes
Security Update
3193515
https://www.microsoft.com/downloads/details.aspx?familyid=edb5aa4c-a8bf-405c-977f-a0e67c17aaa3
9312
Yes
Security Update
3193515
https://www.microsoft.com/downloads/details.aspx?familyid=60ee3508-953c-4c5e-92d8-1de2b1501473
9318
Yes
Security Update
3193515
https://www.microsoft.com/downloads/details.aspx?familyid=9cf5705d-dace-49c1-a29c-eb594418e09a
9311
Yes
Security Update
3185330
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185330
3175024
10047
Yes
Monthly Rollup
3192391
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192391
3175024
10047
Yes
Security Only
3185330
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185330
3175024
10048
Yes
Monthly Rollup
3192391
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192391
3175024
10048
Yes
Security Only
3185330
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185330
3175024
10051
Yes
Monthly Rollup
3192391
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192391
3175024
10051
Yes
Security Only
3185330
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185330
3175024
10050
Yes
Monthly Rollup
3192391
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192391
3175024
10050
Yes
Security Only
3185330
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185330
3175024
10486-10047
Yes
Monthly Rollup
3192391
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192391
3175024
10486-10047
Yes
Security Only
3185330
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185330
3175024
10486-10048
Yes
Monthly Rollup
3192391
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192391
3175024
10486-10048
Yes
Security Only
3185330
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185330
3175024
10486-10051
Yes
Monthly Rollup
3192391
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192391
3175024
10486-10051
Yes
Security Only
3185331
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185331
3185319
10486-10481
Yes
Monthly Rollup
3192392
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192392
MS16-016, 3124280; MS16-097, 3178034; MS16-104, 3185319
10486-10481
Security Only
3185331
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185331
3185319
10486-10482
Yes
Monthly Rollup
3192392
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192392
MS16-016, 3124280; MS16-097, 3178034; MS16-101, 3167679; MS16-104, 3185319
10486-10482
Security Only
3185331
3185319
10486-10484
Yes
Monthly Rollup
3185331
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185331
3185319
10486-10483
Yes
Monthly Rollup
3192392
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192392
MS16-016, 3124280; MS16-097, 3178034; MS16-101, 3167679; MS16-104, 3185319
10486-10483
Security Only
3192440
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192440
3185611
10486-10729
Yes
Security Update
3192440
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192440
3185611
10486-10735
Yes
Security Update
3192441
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192441
3185614
10486-10789
Yes
Security Update
3192441
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192441
3185614
10486-10788
Yes
Security Update
3194798
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3194798
3189866
10486-10852
Yes
Security Update
3194798
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3194798
3189866
10486-10853
Yes
Security Update
3191492
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3191492
3185319
10336-4393
Yes
Security Update
3191492
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3191492
3185319
10336-9312
Yes
Security Update
3191492
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3191492
3185319
10336-9316
Yes
Security Update
3191492
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3191492
3185319
10336-9318
Yes
Security Update
3185332
https://www.microsoft.com/downloads/details.aspx?familyid=93b4d5dd-9784-4fb4-9c0c-9171a24efca5
3192393
10555-10378
Yes
Monthly Rollup
3192393
https://www.microsoft.com/downloads/details.aspx?familyid=17dc5103-8380-440a-9e5b-a55cdc33388b
3185319
10555-10378
Yes
Security Only
Will Metcalf and Kafeine of <a href="https://www.proofpoint.com/">Proofpoint</a>
1.0
2016-10-11T07:00:00Z
<p>Information published.</p>
2.0
2016-12-13T08:00:00Z
<p>Revised bulletin to announce the following updates have been rereleased with a detection change that addresses a supersedence issue that certain customers experienced when attempting to install the October Security Only updates.
◦ Security Only update 3192391 for all supported releases of Windows 7 and Windows Server 2008 R2. For more information, see Microsoft Knowledge Base Article 3192391.
◦ Security Only update 3192393 for Windows Server 2012. For more information, see Microsoft Knowledge Base Article 3192393.
◦ Security Only update 3192392 for Windows 8.1 and Windows Server 2012 R2. For more information, see Microsoft Knowledge Base Article 3192392.
These are detection changes only. There were no changes to the update files. Customers who have already successfully installed any of these updates do not need to take any action. For more information, see the Microsoft Knowledge Base article for the respective update.</p>
Microsoft Browser Memory Corruption Vulnerability
<p>A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory. The vulnerability could corrupt memory in a way that could allow an attacker to execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, the attacker could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>An attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft browsers, and then convince a user to view the website. The attacker could also take advantage of compromised websites, or websites that accept or host user-provided content or advertisements, by adding specially crafted content that could exploit the vulnerability. In all cases, however, an attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically via an enticement in email or instant message, or by getting them to open an email attachment.</p>
<p>The security update addresses the vulnerability by modifying how Microsoft browsers handle objects in memory.</p>
<p><strong>I am running Internet Explorer on Windows Server 2008, Windows Server 2008 R2, Windows Server 2012, or Windows Server 2012 R2. Does this mitigate these vulnerabilities?</strong>
Yes. By default, Internet Explorer on Windows Server 2008, Windows Server 2008 R2, Windows Server 2012, and Windows Server 2012 R2 runs in a restricted mode that is known as Enhanced Security Configuration. Enhanced Security Configuration is a group of preconfigured settings in Internet Explorer that can reduce the likelihood of a user or administrator downloading and running specially crafted web content on a server. This is a mitigating factor for websites that you have not added to the Internet Explorer Trusted sites zone.</p>
<p><strong>Can EMET help mitigate attacks that attempt to exploit these vulnerabilities?</strong>
Yes. The Enhanced Mitigation Experience Toolkit (EMET) enables users to manage security mitigation technologies that help make it more difficult for attackers to exploit memory corruption vulnerabilities in a given piece of software. EMET can help mitigate attacks that attempt to exploit these vulnerabilities in Internet Explorer on systems where EMET is installed and configured to work with Internet Explorer.</p>
<p>For more information about EMET, see the <a href="https://technet.microsoft.com/security/jj653751">Enhanced Mitigation Experience Toolkit</a>.</p>
Microsoft Browsers
CVE-2016-3331
10486-10729
10486-10735
10486-10789
10486-10788
10724-10729
10724-10735
10724-10789
10724-10788
Remote Code Execution
10486-10729
Remote Code Execution
10486-10735
Remote Code Execution
10486-10789
Remote Code Execution
10486-10788
Remote Code Execution
10724-10729
Remote Code Execution
10724-10735
Remote Code Execution
10724-10789
Remote Code Execution
10724-10788
Critical
10486-10729
Critical
10486-10735
Critical
10486-10789
Critical
10486-10788
Critical
10724-10729
Critical
10724-10735
Critical
10724-10789
Critical
10724-10788
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A
7.1
6.4
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C
10486-10729
7.1
6.4
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C
10486-10735
7.1
6.4
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C
10486-10789
7.1
6.4
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C
10486-10788
3192440
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192440
3185611
10486-10729
Yes
Security Update
3192440
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192440
3185611
10486-10735
Yes
Security Update
3192441
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192441
3185614
10486-10789
Yes
Security Update
3192441
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192441
3185614
10486-10788
Yes
Security Update
3192440
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192440
3185611
10724-10729
Yes
Security Update
3192440
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192440
3185611
10724-10735
Yes
Security Update
3192441
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192441
3185614
10724-10789
Yes
Security Update
3192441
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192441
3185614
10724-10788
Yes
Security Update
Zheng Huang of the <a href="http://xteam.baidu.com/">Baidu Security Lab</a>
1.0
2016-10-11T07:00:00Z
<p>Information published.</p>
Windows Transaction Manager Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists when the Windows Transaction Manager improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run processes in an elevated context.</p>
<p>In a local attack scenario, an attacker could exploit this vulnerability by running a specially crafted application to take control over the affected system.</p>
<p>The security update addresses the vulnerability by correcting how the Transaction Manager handles objects in memory.</p>
Windows Kernel-Mode Drivers
CVE-2016-3341
10729
10735
10789
10788
10481
10482
10484
10378
10379
10483
10543
10852
10853
Elevation of Privilege
10729
Elevation of Privilege
10735
Elevation of Privilege
10789
Elevation of Privilege
10788
Elevation of Privilege
10481
Elevation of Privilege
10482
Elevation of Privilege
10484
Elevation of Privilege
10378
Elevation of Privilege
10379
Elevation of Privilege
10483
Elevation of Privilege
10543
Elevation of Privilege
10852
Elevation of Privilege
10853
Important
10729
Important
10735
Important
10789
Important
10788
Important
10481
Important
10482
Important
10484
Important
10378
Important
10379
Important
10483
Important
10543
Important
10852
Important
10853
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely
3192440
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192440
3185611
10729
Yes
Security Update
3192440
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192440
3185611
10735
Yes
Security Update
3192441
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192441
3185614
10789
Yes
Security Update
3192441
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192441
3185614
10788
Yes
Security Update
3185331
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185331
3185319
10481
Yes
Monthly Rollup
3192392
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192392
MS16-016, 3124280; MS16-097, 3178034; MS16-104, 3185319
10481
Security Only
3185331
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185331
3185319
10482
Yes
Monthly Rollup
3192392
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192392
MS16-016, 3124280; MS16-097, 3178034; MS16-101, 3167679; MS16-104, 3185319
10482
Security Only
3185331
3185319
10484
Yes
Monthly Rollup
3185332
https://www.microsoft.com/downloads/details.aspx?familyid=93b4d5dd-9784-4fb4-9c0c-9171a24efca5
3192393
10378
Yes
Monthly Rollup
3192393
https://www.microsoft.com/downloads/details.aspx?familyid=17dc5103-8380-440a-9e5b-a55cdc33388b
3185319
10378
Yes
Security Only
3185332
https://www.microsoft.com/downloads/details.aspx?familyid=93b4d5dd-9784-4fb4-9c0c-9171a24efca5
3192393
10379
Yes
Monthly Rollup
3192393
https://www.microsoft.com/downloads/details.aspx?familyid=17dc5103-8380-440a-9e5b-a55cdc33388b
3185319
10379
Yes
Security Only
3185331
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185331
3185319
10483
Yes
Monthly Rollup
3192392
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192392
MS16-016, 3124280; MS16-097, 3178034; MS16-101, 3167679; MS16-104, 3185319
10483
Security Only
3185331
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185331
3185319
10543
Yes
Monthly Rollup
3192392
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192392
MS16-016, 3124280; MS16-097, 3178034; MS16-101, 3167679; MS16-104, 3185319
10543
Security Only
3194798
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3194798
3189866
10852
Yes
Security Update
3194798
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3194798
3189866
10853
Yes
Security Update
Peter Hlavaty (<a href="https://twitter.com/zer0mem">@zer0mem</a>), KeenLab, <a href="http://www.tencent.com/">Tencent</a>
1.0
2016-10-11T07:00:00Z
<p>Information published.</p>
2.0
2016-12-13T08:00:00Z
<p>Revised bulletin to announce the following updates have been rereleased with a detection change that addresses a supersedence issue that certain customers experienced when attempting to install the October Security Only updates.
◦ Security Only update 3192391 for all supported releases of Windows 7 and Windows Server 2008 R2. For more information, see Microsoft Knowledge Base Article 3192391.
◦ Security Only update 3192393 for Windows Server 2012. For more information, see Microsoft Knowledge Base Article 3192393.
◦ Security Only update 3192392 for Windows 8.1 and Windows Server 2012 R2. For more information, see Microsoft Knowledge Base Article 3192392.
These are detection changes only. There were no changes to the update files. Customers who have already successfully installed any of these updates do not need to take any action. For more information, see the Microsoft Knowledge Base article for the respective update.</p>
Win32k Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system.</p>
<p>The update addresses this vulnerability by correcting how the Windows kernel-mode driver handles objects in memory.</p>
Windows Kernel-Mode Drivers
CVE-2016-3376
10951
10952
10729
10735
10789
10788
10852
10853
10047
10048
10481
10482
10484
9312
10287
9311
9318
9344
10050
10051
10049
10378
10379
10483
10543
4393
9316
Elevation of Privilege
10951
Elevation of Privilege
10952
Elevation of Privilege
10729
Elevation of Privilege
10735
Elevation of Privilege
10789
Elevation of Privilege
10788
Elevation of Privilege
10852
Elevation of Privilege
10853
Elevation of Privilege
10047
Elevation of Privilege
10048
Elevation of Privilege
10481
Elevation of Privilege
10482
Elevation of Privilege
10484
Elevation of Privilege
9312
Elevation of Privilege
10287
Elevation of Privilege
9311
Elevation of Privilege
9318
Elevation of Privilege
9344
Elevation of Privilege
10050
Elevation of Privilege
10051
Elevation of Privilege
10049
Elevation of Privilege
10378
Elevation of Privilege
10379
Elevation of Privilege
10483
Elevation of Privilege
10543
Elevation of Privilege
4393
Elevation of Privilege
9316
Important
10951
Important
10952
Important
10729
Important
10735
Important
10789
Important
10788
Important
10852
Important
10853
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9311
Important
9318
Important
9344
Important
10050
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Important
4393
Important
9316
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely
4038788
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4038788
4034674
10951
Yes
Security Update
4038788
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4038788
4034674
10952
Yes
Security Update
3192440
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192440
3185611
10729
Yes
Security Update
3192440
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192440
3185611
10735
Yes
Security Update
3192441
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192441
3185614
10789
Yes
Security Update
3192441
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192441
3185614
10788
Yes
Security Update
3194798
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3194798
3189866
10852
Yes
Security Update
3194798
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3194798
3189866
10853
Yes
Security Update
3185330
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185330
3175024
10047
Yes
Monthly Rollup
3192391
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192391
3175024
10047
Yes
Security Only
3185330
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185330
3175024
10048
Yes
Monthly Rollup
3192391
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192391
3175024
10048
Yes
Security Only
3185331
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185331
3185319
10481
Yes
Monthly Rollup
3192392
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192392
MS16-016, 3124280; MS16-097, 3178034; MS16-104, 3185319
10481
Security Only
3185331
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185331
3185319
10482
Yes
Monthly Rollup
3192392
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192392
MS16-016, 3124280; MS16-097, 3178034; MS16-101, 3167679; MS16-104, 3185319
10482
Security Only
3185331
3185319
10484
Yes
Monthly Rollup
3191203
https://www.microsoft.com/downloads/details.aspx?familyid=20843ec5-7bc3-4264-9003-bd656f72535e
3177725
9312
Yes
Security Update
3191203
https://www.microsoft.com/downloads/details.aspx?familyid=20843ec5-7bc3-4264-9003-bd656f72535e
3177725
10287
Yes
Security Update
3191203
https://www.microsoft.com/downloads/details.aspx?familyid=10fff467-bfe7-4b31-bec5-b3126a271c88
3177725
9311
Yes
Security Update
3191203
https://www.microsoft.com/downloads/details.aspx?familyid=4da722a9-e219-47a9-8108-2e0b04b5488d
3177725
9318
Yes
Security Update
3191203
https://www.microsoft.com/downloads/details.aspx?familyid=4da722a9-e219-47a9-8108-2e0b04b5488d
3177725
9344
Yes
Security Update
3185330
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185330
3175024
10050
Yes
Monthly Rollup
3192391
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192391
3175024
10050
Yes
Security Only
3185330
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185330
3175024
10051
Yes
Monthly Rollup
3192391
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192391
3175024
10051
Yes
Security Only
3185330
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185330
3175024
10049
Yes
Monthly Rollup
3192391
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192391
3175024
10049
Yes
Security Only
3185332
https://www.microsoft.com/downloads/details.aspx?familyid=93b4d5dd-9784-4fb4-9c0c-9171a24efca5
3192393
10378
Yes
Monthly Rollup
3192393
https://www.microsoft.com/downloads/details.aspx?familyid=17dc5103-8380-440a-9e5b-a55cdc33388b
3185319
10378
Yes
Security Only
3185332
https://www.microsoft.com/downloads/details.aspx?familyid=93b4d5dd-9784-4fb4-9c0c-9171a24efca5
3192393
10379
Yes
Monthly Rollup
3192393
https://www.microsoft.com/downloads/details.aspx?familyid=17dc5103-8380-440a-9e5b-a55cdc33388b
3185319
10379
Yes
Security Only
3185331
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185331
3185319
10483
Yes
Monthly Rollup
3192392
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192392
MS16-016, 3124280; MS16-097, 3178034; MS16-101, 3167679; MS16-104, 3185319
10483
Security Only
3185331
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185331
3185319
10543
Yes
Monthly Rollup
3192392
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192392
MS16-016, 3124280; MS16-097, 3178034; MS16-101, 3167679; MS16-104, 3185319
10543
Security Only
3191203
https://www.microsoft.com/downloads/details.aspx?familyid=20843ec5-7bc3-4264-9003-bd656f72535e
3177725
4393
Yes
Security Update
3191203
https://www.microsoft.com/downloads/details.aspx?familyid=4da722a9-e219-47a9-8108-2e0b04b5488d
3177725
9316
Yes
Security Update
Mateusz Jurczyk of <a href="http://www.google.com/">Google Project Zero</a>
James Forshaw of <a href="http://www.google.com/">Google Project Zero</a>
3.0
2017-09-12T07:00:00Z
<p>Revised the Affected Products table to include Windows 10 Version 1703 for 32-bit Systems and Windows 10 Version 1703 for x64-based Systems because they are affected by CVE-2016-3376. Consumers using Windows 10 are automatically protected. Microsoft recommends that enterprise customers running Windows 10 Version 1703 ensure they have update 4038788 installed to be protected from this vulnerability.</p>
1.0
2016-10-11T07:00:00Z
<p>Information published.</p>
2.0
2016-12-13T08:00:00Z
<p>Revised bulletin to announce the following updates have been rereleased with a detection change that addresses a supersedence issue that certain customers experienced when attempting to install the October Security Only updates.
◦ Security Only update 3192391 for all supported releases of Windows 7 and Windows Server 2008 R2. For more information, see Microsoft Knowledge Base Article 3192391.
◦ Security Only update 3192393 for Windows Server 2012. For more information, see Microsoft Knowledge Base Article 3192393.
◦ Security Only update 3192392 for Windows 8.1 and Windows Server 2012 R2. For more information, see Microsoft Knowledge Base Article 3192392.
These are detection changes only. There were no changes to the update files. Customers who have already successfully installed any of these updates do not need to take any action. For more information, see the Microsoft Knowledge Base article for the respective update.</p>
Scripting Engine Memory Corruption Vulnerability
<p>A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Internet Explorer and then convince a user to view the website. An attacker could also embed an ActiveX control marked "safe for initialization" in an application or Microsoft Office document that hosts the IE rendering engine. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p>
<p>The security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.</p>
<p><strong>I am running Internet Explorer on Windows Server 2008, Windows Server 2008 R2, Windows Server 2012, or Windows Server 2012 R2. Does this mitigate these vulnerabilities?</strong>
Yes. By default, Internet Explorer on Windows Server 2008, Windows Server 2008 R2, Windows Server 2012, and Windows Server 2012 R2 runs in a restricted mode that is known as Enhanced Security Configuration. Enhanced Security Configuration is a group of preconfigured settings in Internet Explorer that can reduce the likelihood of a user or administrator downloading and running specially crafted web content on a server. This is a mitigating factor for websites that you have not added to the Internet Explorer Trusted sites zone.</p>
<p><strong>Can EMET help mitigate attacks that attempt to exploit these vulnerabilities?</strong>
Yes. The Enhanced Mitigation Experience Toolkit (EMET) enables users to manage security mitigation technologies that help make it more difficult for attackers to exploit memory corruption vulnerabilities in a given piece of software. EMET can help mitigate attacks that attempt to exploit these vulnerabilities in Internet Explorer on systems where EMET is installed and configured to work with Internet Explorer.</p>
<p>For more information about EMET, see the <a href="https://technet.microsoft.com/security/jj653751">Enhanced Mitigation Experience Toolkit</a>.</p>
Microsoft Browsers
CVE-2016-3382
10555-10378
10486-10481
10486-10482
10486-10483
10486-10484
10486-10729
10486-10735
10486-10789
10486-10788
10486-10852
10486-10853
10336-9316
10336-4393
10336-9312
10336-9318
10724-10729
10724-10735
10724-10789
10724-10788
10724-10852
10724-10853
Remote Code Execution
10555-10378
Remote Code Execution
10486-10481
Remote Code Execution
10486-10482
Remote Code Execution
10486-10483
Remote Code Execution
10486-10484
Remote Code Execution
10486-10729
Remote Code Execution
10486-10735
Remote Code Execution
10486-10789
Remote Code Execution
10486-10788
Remote Code Execution
10486-10852
Remote Code Execution
10486-10853
Remote Code Execution
10336-9316
Remote Code Execution
10336-4393
Remote Code Execution
10336-9312
Remote Code Execution
10336-9318
Remote Code Execution
10724-10729
Remote Code Execution
10724-10735
Remote Code Execution
10724-10789
Remote Code Execution
10724-10788
Remote Code Execution
10724-10852
Remote Code Execution
10724-10853
Moderate
10555-10378
Critical
10486-10481
Critical
10486-10482
Moderate
10486-10483
Critical
10486-10484
Critical
10486-10729
Critical
10486-10735
Critical
10486-10789
Critical
10486-10788
Critical
10486-10852
Critical
10486-10853
Critical
10336-9316
Critical
10336-4393
Moderate
10336-9312
Moderate
10336-9318
Critical
10724-10729
Critical
10724-10735
Critical
10724-10789
Critical
10724-10788
Critical
10724-10852
Critical
10724-10853
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely
3185332
https://www.microsoft.com/downloads/details.aspx?familyid=93b4d5dd-9784-4fb4-9c0c-9171a24efca5
3192393
10555-10378
Yes
Monthly Rollup
3192393
https://www.microsoft.com/downloads/details.aspx?familyid=17dc5103-8380-440a-9e5b-a55cdc33388b
3185319
10555-10378
Yes
Security Only
3185331
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185331
3185319
10486-10481
Yes
Monthly Rollup
3192392
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192392
MS16-016, 3124280; MS16-097, 3178034; MS16-104, 3185319
10486-10481
Security Only
3185331
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185331
3185319
10486-10482
Yes
Monthly Rollup
3192392
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192392
MS16-016, 3124280; MS16-097, 3178034; MS16-101, 3167679; MS16-104, 3185319
10486-10482
Security Only
3185331
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185331
3185319
10486-10483
Yes
Monthly Rollup
3192392
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192392
MS16-016, 3124280; MS16-097, 3178034; MS16-101, 3167679; MS16-104, 3185319
10486-10483
Security Only
3185331
3185319
10486-10484
Yes
Monthly Rollup
3192440
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192440
3185611
10486-10729
Yes
Security Update
3192440
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192440
3185611
10486-10735
Yes
Security Update
3192441
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192441
3185614
10486-10789
Yes
Security Update
3192441
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192441
3185614
10486-10788
Yes
Security Update
3194798
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3194798
3189866
10486-10852
Yes
Security Update
3194798
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3194798
3189866
10486-10853
Yes
Security Update
3191492
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3191492
3185319
10336-9316
Yes
Security Update
3191492
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3191492
3185319
10336-4393
Yes
Security Update
3191492
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3191492
3185319
10336-9312
Yes
Security Update
3191492
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3191492
3185319
10336-9318
Yes
Security Update
3192440
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192440
3185611
10724-10729
Yes
Security Update
3192440
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192440
3185611
10724-10735
Yes
Security Update
3192441
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192441
3185614
10724-10789
Yes
Security Update
3192441
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192441
3185614
10724-10788
Yes
Security Update
3194798
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3194798
3189866
10724-10852
Yes
Security Update
3194798
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3194798
3189866
10724-10853
Yes
Security Update
Anonymous, working with <a href="http://www.zerodayinitiative.com/">Trend Micro’s Zero Day Initiative (ZDI)</a>
1.0
2016-10-11T07:00:00Z
<p>Information published.</p>
2.0
2016-12-13T08:00:00Z
<p>Revised bulletin to announce the following updates have been rereleased with a detection change that addresses a supersedence issue that certain customers experienced when attempting to install the October Security Only updates.
◦ Security Only update 3192391 for all supported releases of Windows 7 and Windows Server 2008 R2. For more information, see Microsoft Knowledge Base Article 3192391.
◦ Security Only update 3192393 for Windows Server 2012. For more information, see Microsoft Knowledge Base Article 3192393.
◦ Security Only update 3192392 for Windows 8.1 and Windows Server 2012 R2. For more information, see Microsoft Knowledge Base Article 3192392.
These are detection changes only. There were no changes to the update files. Customers who have already successfully installed any of these updates do not need to take any action. For more information, see the Microsoft Knowledge Base article for the respective update.</p>
Microsoft Browser Memory Corruption Vulnerability
<p>A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory. The vulnerability could corrupt memory in a way that could allow an attacker to execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, the attacker could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>An attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft browsers, and then convince a user to view the website. The attacker could also take advantage of compromised websites, or websites that accept or host user-provided content or advertisements, by adding specially crafted content that could exploit the vulnerability. In all cases, however, an attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically via an enticement in email or instant message, or by getting them to open an email attachment.</p>
<p>The security update addresses the vulnerability by modifying how Microsoft browsers handle objects in memory.</p>
<p><strong>I am running Internet Explorer on Windows Server 2008, Windows Server 2008 R2, Windows Server 2012, or Windows Server 2012 R2. Does this mitigate these vulnerabilities?</strong>
Yes. By default, Internet Explorer on Windows Server 2008, Windows Server 2008 R2, Windows Server 2012, and Windows Server 2012 R2 runs in a restricted mode that is known as Enhanced Security Configuration. Enhanced Security Configuration is a group of preconfigured settings in Internet Explorer that can reduce the likelihood of a user or administrator downloading and running specially crafted web content on a server. This is a mitigating factor for websites that you have not added to the Internet Explorer Trusted sites zone.</p>
<p><strong>Can EMET help mitigate attacks that attempt to exploit these vulnerabilities?</strong>
Yes. The Enhanced Mitigation Experience Toolkit (EMET) enables users to manage security mitigation technologies that help make it more difficult for attackers to exploit memory corruption vulnerabilities in a given piece of software. EMET can help mitigate attacks that attempt to exploit these vulnerabilities in Internet Explorer on systems where EMET is installed and configured to work with Internet Explorer.</p>
<p>For more information about EMET, see the <a href="https://technet.microsoft.com/security/jj653751">Enhanced Mitigation Experience Toolkit</a>.</p>
Internet Explorer
CVE-2016-3383
10555-10378
10486-10481
10486-10482
10486-10483
10486-10484
Remote Code Execution
10555-10378
Remote Code Execution
10486-10481
Remote Code Execution
10486-10482
Remote Code Execution
10486-10483
Remote Code Execution
10486-10484
Moderate
10555-10378
Critical
10486-10481
Critical
10486-10482
Moderate
10486-10483
Critical
10486-10484
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely
3185332
https://www.microsoft.com/downloads/details.aspx?familyid=93b4d5dd-9784-4fb4-9c0c-9171a24efca5
3192393
10555-10378
Yes
Monthly Rollup
3192393
https://www.microsoft.com/downloads/details.aspx?familyid=17dc5103-8380-440a-9e5b-a55cdc33388b
3185319
10555-10378
Yes
Security Only
3185331
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185331
3185319
10486-10481
Yes
Monthly Rollup
3192392
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192392
MS16-016, 3124280; MS16-097, 3178034; MS16-104, 3185319
10486-10481
Security Only
3185331
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185331
3185319
10486-10482
Yes
Monthly Rollup
3192392
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192392
MS16-016, 3124280; MS16-097, 3178034; MS16-101, 3167679; MS16-104, 3185319
10486-10482
Security Only
3185331
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185331
3185319
10486-10483
Yes
Monthly Rollup
3192392
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192392
MS16-016, 3124280; MS16-097, 3178034; MS16-101, 3167679; MS16-104, 3185319
10486-10483
Security Only
3185331
3185319
10486-10484
Yes
Monthly Rollup
0011, working with <a href="http://www.zerodayinitiative.com/">Trend Micro’s Zero Day Initiative (ZDI)</a>
1.0
2016-10-11T07:00:00Z
<p>Information published.</p>
2.0
2016-12-13T08:00:00Z
<p>Revised bulletin to announce the following updates have been rereleased with a detection change that addresses a supersedence issue that certain customers experienced when attempting to install the October Security Only updates.
◦ Security Only update 3192391 for all supported releases of Windows 7 and Windows Server 2008 R2. For more information, see Microsoft Knowledge Base Article 3192391.
◦ Security Only update 3192393 for Windows Server 2012. For more information, see Microsoft Knowledge Base Article 3192393.
◦ Security Only update 3192392 for Windows 8.1 and Windows Server 2012 R2. For more information, see Microsoft Knowledge Base Article 3192392.
These are detection changes only. There were no changes to the update files. Customers who have already successfully installed any of these updates do not need to take any action. For more information, see the Microsoft Knowledge Base article for the respective update.</p>
Microsoft Browser Memory Corruption Vulnerability
<p>A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory. The vulnerability could corrupt memory in a way that could allow an attacker to execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, the attacker could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>An attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft browsers, and then convince a user to view the website. The attacker could also take advantage of compromised websites, or websites that accept or host user-provided content or advertisements, by adding specially crafted content that could exploit the vulnerability. In all cases, however, an attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically via an enticement in email or instant message, or by getting them to open an email attachment.</p>
<p>The security update addresses the vulnerability by modifying how Microsoft browsers handle objects in memory.</p>
<p><strong>I am running Internet Explorer on Windows Server 2008, Windows Server 2008 R2, Windows Server 2012, or Windows Server 2012 R2. Does this mitigate these vulnerabilities?</strong>
Yes. By default, Internet Explorer on Windows Server 2008, Windows Server 2008 R2, Windows Server 2012, and Windows Server 2012 R2 runs in a restricted mode that is known as Enhanced Security Configuration. Enhanced Security Configuration is a group of preconfigured settings in Internet Explorer that can reduce the likelihood of a user or administrator downloading and running specially crafted web content on a server. This is a mitigating factor for websites that you have not added to the Internet Explorer Trusted sites zone.</p>
<p><strong>Can EMET help mitigate attacks that attempt to exploit these vulnerabilities?</strong>
Yes. The Enhanced Mitigation Experience Toolkit (EMET) enables users to manage security mitigation technologies that help make it more difficult for attackers to exploit memory corruption vulnerabilities in a given piece of software. EMET can help mitigate attacks that attempt to exploit these vulnerabilities in Internet Explorer on systems where EMET is installed and configured to work with Internet Explorer.</p>
<p>For more information about EMET, see the <a href="https://technet.microsoft.com/security/jj653751">Enhanced Mitigation Experience Toolkit</a>.</p>
Internet Explorer
CVE-2016-3384
10555-10378
10486-10481
10486-10482
10486-10483
10486-10484
10486-10729
10486-10735
10486-10789
10486-10788
10486-10852
10486-10853
10336-9316
10336-4393
10336-9312
10336-9318
Remote Code Execution
10555-10378
Remote Code Execution
10486-10481
Remote Code Execution
10486-10482
Remote Code Execution
10486-10483
Remote Code Execution
10486-10484
Remote Code Execution
10486-10729
Remote Code Execution
10486-10735
Remote Code Execution
10486-10789
Remote Code Execution
10486-10788
Remote Code Execution
10486-10852
Remote Code Execution
10486-10853
Remote Code Execution
10336-9316
Remote Code Execution
10336-4393
Remote Code Execution
10336-9312
Remote Code Execution
10336-9318
Moderate
10555-10378
Critical
10486-10481
Critical
10486-10482
Moderate
10486-10483
Critical
10486-10484
Critical
10486-10729
Critical
10486-10735
Critical
10486-10789
Critical
10486-10788
Critical
10486-10852
Critical
10486-10853
Critical
10336-9316
Critical
10336-4393
Moderate
10336-9312
Moderate
10336-9318
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely
3185332
https://www.microsoft.com/downloads/details.aspx?familyid=93b4d5dd-9784-4fb4-9c0c-9171a24efca5
3192393
10555-10378
Yes
Monthly Rollup
3192393
https://www.microsoft.com/downloads/details.aspx?familyid=17dc5103-8380-440a-9e5b-a55cdc33388b
3185319
10555-10378
Yes
Security Only
3185331
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185331
3185319
10486-10481
Yes
Monthly Rollup
3192392
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192392
MS16-016, 3124280; MS16-097, 3178034; MS16-104, 3185319
10486-10481
Security Only
3185331
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185331
3185319
10486-10482
Yes
Monthly Rollup
3192392
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192392
MS16-016, 3124280; MS16-097, 3178034; MS16-101, 3167679; MS16-104, 3185319
10486-10482
Security Only
3185331
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185331
3185319
10486-10483
Yes
Monthly Rollup
3192392
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192392
MS16-016, 3124280; MS16-097, 3178034; MS16-101, 3167679; MS16-104, 3185319
10486-10483
Security Only
3185331
3185319
10486-10484
Yes
Monthly Rollup
3192440
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192440
3185611
10486-10729
Yes
Security Update
3192440
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192440
3185611
10486-10735
Yes
Security Update
3192441
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192441
3185614
10486-10789
Yes
Security Update
3192441
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192441
3185614
10486-10788
Yes
Security Update
3194798
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3194798
3189866
10486-10852
Yes
Security Update
3194798
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3194798
3189866
10486-10853
Yes
Security Update
3191492
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3191492
3185319
10336-9316
Yes
Security Update
3191492
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3191492
3185319
10336-4393
Yes
Security Update
3191492
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3191492
3185319
10336-9312
Yes
Security Update
3191492
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3191492
3185319
10336-9318
Yes
Security Update
62600BCA031B9EB5CB4A74ADDDD6771E, working with <a href="http://www.zerodayinitiative.com/">Trend Micro’s Zero Day Initiative (ZDI)</a>
1.0
2016-10-11T07:00:00Z
<p>Information published.</p>
2.0
2016-12-13T08:00:00Z
<p>Revised bulletin to announce the following updates have been rereleased with a detection change that addresses a supersedence issue that certain customers experienced when attempting to install the October Security Only updates.
◦ Security Only update 3192391 for all supported releases of Windows 7 and Windows Server 2008 R2. For more information, see Microsoft Knowledge Base Article 3192391.
◦ Security Only update 3192393 for Windows Server 2012. For more information, see Microsoft Knowledge Base Article 3192393.
◦ Security Only update 3192392 for Windows 8.1 and Windows Server 2012 R2. For more information, see Microsoft Knowledge Base Article 3192392.
These are detection changes only. There were no changes to the update files. Customers who have already successfully installed any of these updates do not need to take any action. For more information, see the Microsoft Knowledge Base article for the respective update.</p>
Scripting Engine Memory Corruption Vulnerability
<p>A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Internet Explorer and then convince a user to view the website. An attacker could also embed an ActiveX control marked "safe for initialization" in an application or Microsoft Office document that hosts the IE rendering engine. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p>
<p>The security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.</p>
<p><strong>I am running Internet Explorer on Windows Server 2008, Windows Server 2008 R2, Windows Server 2012, or Windows Server 2012 R2. Does this mitigate these vulnerabilities?</strong>
Yes. By default, Internet Explorer on Windows Server 2008, Windows Server 2008 R2, Windows Server 2012, and Windows Server 2012 R2 runs in a restricted mode that is known as Enhanced Security Configuration. Enhanced Security Configuration is a group of preconfigured settings in Internet Explorer that can reduce the likelihood of a user or administrator downloading and running specially crafted web content on a server. This is a mitigating factor for websites that you have not added to the Internet Explorer Trusted sites zone.</p>
<p><strong>Can EMET help mitigate attacks that attempt to exploit these vulnerabilities?</strong>
Yes. The Enhanced Mitigation Experience Toolkit (EMET) enables users to manage security mitigation technologies that help make it more difficult for attackers to exploit memory corruption vulnerabilities in a given piece of software. EMET can help mitigate attacks that attempt to exploit these vulnerabilities in Internet Explorer on systems where EMET is installed and configured to work with Internet Explorer.</p>
<p>For more information about EMET, see the <a href="https://technet.microsoft.com/security/jj653751">Enhanced Mitigation Experience Toolkit</a>.</p>
Internet Explorer
CVE-2016-3385
10555-10378
10486-10481
10486-10482
10486-10483
10486-10484
10486-10047
10486-10048
10486-10051
10486-10729
10486-10735
10486-10789
10486-10788
10486-10852
10486-10853
10336-9316
10336-4393
10336-9312
10336-9318
Remote Code Execution
10555-10378
Remote Code Execution
10486-10481
Remote Code Execution
10486-10482
Remote Code Execution
10486-10483
Remote Code Execution
10486-10484
Remote Code Execution
10486-10047
Remote Code Execution
10486-10048
Remote Code Execution
10486-10051
Remote Code Execution
10486-10729
Remote Code Execution
10486-10735
Remote Code Execution
10486-10789
Remote Code Execution
10486-10788
Remote Code Execution
10486-10852
Remote Code Execution
10486-10853
Remote Code Execution
10336-9316
Remote Code Execution
10336-4393
Remote Code Execution
10336-9312
Remote Code Execution
10336-9318
Moderate
10555-10378
Critical
10486-10481
Critical
10486-10482
Moderate
10486-10483
Critical
10486-10484
Critical
10486-10047
Critical
10486-10048
Moderate
10486-10051
Critical
10486-10729
Critical
10486-10735
Critical
10486-10789
Critical
10486-10788
Critical
10486-10852
Critical
10486-10853
Critical
10336-9316
Critical
10336-4393
Moderate
10336-9312
Moderate
10336-9318
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely
3185332
https://www.microsoft.com/downloads/details.aspx?familyid=93b4d5dd-9784-4fb4-9c0c-9171a24efca5
3192393
10555-10378
Yes
Monthly Rollup
3192393
https://www.microsoft.com/downloads/details.aspx?familyid=17dc5103-8380-440a-9e5b-a55cdc33388b
3185319
10555-10378
Yes
Security Only
3185331
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185331
3185319
10486-10481
Yes
Monthly Rollup
3192392
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192392
MS16-016, 3124280; MS16-097, 3178034; MS16-104, 3185319
10486-10481
Security Only
3185331
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185331
3185319
10486-10482
Yes
Monthly Rollup
3192392
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192392
MS16-016, 3124280; MS16-097, 3178034; MS16-101, 3167679; MS16-104, 3185319
10486-10482
Security Only
3185331
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185331
3185319
10486-10483
Yes
Monthly Rollup
3192392
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192392
MS16-016, 3124280; MS16-097, 3178034; MS16-101, 3167679; MS16-104, 3185319
10486-10483
Security Only
3185331
3185319
10486-10484
Yes
Monthly Rollup
3185330
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185330
3175024
10486-10047
Yes
Monthly Rollup
3192391
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192391
3175024
10486-10047
Yes
Security Only
3185330
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185330
3175024
10486-10048
Yes
Monthly Rollup
3192391
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192391
3175024
10486-10048
Yes
Security Only
3185330
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185330
3175024
10486-10051
Yes
Monthly Rollup
3192391
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192391
3175024
10486-10051
Yes
Security Only
3192440
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192440
3185611
10486-10729
Yes
Security Update
3192440
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192440
3185611
10486-10735
Yes
Security Update
3192441
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192441
3185614
10486-10789
Yes
Security Update
3192441
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192441
3185614
10486-10788
Yes
Security Update
3194798
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3194798
3189866
10486-10852
Yes
Security Update
3194798
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3194798
3189866
10486-10853
Yes
Security Update
3191492
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3191492
3185319
10336-9316
Yes
Security Update
3191492
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3191492
3185319
10336-4393
Yes
Security Update
3191492
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3191492
3185319
10336-9312
Yes
Security Update
3191492
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3191492
3185319
10336-9318
Yes
Security Update
<a href="https://twitter.com/n3sk">Jaehun Jeong</a> (@n3sk) of WINS, WSEC Analysis Team, working with <a href="http://www.verisigninc.com/en_US/cyber-security/index.xhtml">VeriSign iDefense Labs</a>
1.0
2016-10-11T07:00:00Z
<p>Information published.</p>
2.0
2016-12-13T08:00:00Z
<p>Revised bulletin to announce the following updates have been rereleased with a detection change that addresses a supersedence issue that certain customers experienced when attempting to install the October Security Only updates.
◦ Security Only update 3192391 for all supported releases of Windows 7 and Windows Server 2008 R2. For more information, see Microsoft Knowledge Base Article 3192391.
◦ Security Only update 3192393 for Windows Server 2012. For more information, see Microsoft Knowledge Base Article 3192393.
◦ Security Only update 3192392 for Windows 8.1 and Windows Server 2012 R2. For more information, see Microsoft Knowledge Base Article 3192392.
These are detection changes only. There were no changes to the update files. Customers who have already successfully installed any of these updates do not need to take any action. For more information, see the Microsoft Knowledge Base article for the respective update.</p>
Scripting Engine Memory Corruption Vulnerability
<p>A remote code execution vulnerability exists in the way that Microsoft browser JavaScript engines render content when handling objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user.</p>
<p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft browsers and then convince a user to view the website. An attacker could also embed an ActiveX control marked "safe for initialization" in an application or Microsoft Office document that hosts the related rendering engine. The attacker could also take advantage of compromised websites, and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p>
<p>An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>The security update addresses the vulnerability by modifying how Microsoft browser JavaScript scripting engines handle objects in memory.</p>
Microsoft Edge
CVE-2016-3386
10724-10729
10724-10735
10724-10789
10724-10788
10724-10852
10724-10853
Remote Code Execution
10724-10729
Remote Code Execution
10724-10735
Remote Code Execution
10724-10789
Remote Code Execution
10724-10788
Remote Code Execution
10724-10852
Remote Code Execution
10724-10853
Critical
10724-10729
Critical
10724-10735
Critical
10724-10789
Critical
10724-10788
Critical
10724-10852
Critical
10724-10853
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A
3192440
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192440
3185611
10724-10729
Yes
Security Update
3192440
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192440
3185611
10724-10735
Yes
Security Update
3192441
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192441
3185614
10724-10789
Yes
Security Update
3192441
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192441
3185614
10724-10788
Yes
Security Update
3194798
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3194798
3189866
10724-10852
Yes
Security Update
3194798
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3194798
3189866
10724-10853
Yes
Security Update
Richard Zhu (fluorescence), working with <a href="http://www.zerodayinitiative.com/">Trend Micro’s Zero Day Initiative (ZDI)</a>
Natalie Silvanovich of <a href="http://www.google.com/">Google Project Zero</a>
1.0
2016-10-11T07:00:00Z
<p>Information published.</p>
Microsoft Browser Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists when affected Microsoft browsers fail to properly secure private namespace. An attacker who successfully exploited this vulnerability could gain elevated permissions on the namespace directory of a vulnerable system and gain elevated privileges.</p>
<p>The vulnerability by itself does not allow arbitrary code to be run. However, this vulnerability could be used in conjunction with one or more other vulnerabilities (e.g. a remote code execution vulnerability and another elevation of privilege) that could take advantage of the elevated privileges when running.</p>
<p>The update addresses the vulnerability by correcting how Microsoft browsers handle namespace boundaries.</p>
Microsoft Browsers
CVE-2016-3387
10724-10729
10724-10735
10724-10789
10724-10788
10724-10852
10724-10853
10555-10378
10486-10481
10486-10482
10486-10483
10486-10484
10486-10729
10486-10735
10486-10789
10486-10788
10486-10852
10486-10853
Elevation of Privilege
10724-10729
Elevation of Privilege
10724-10735
Elevation of Privilege
10724-10789
Elevation of Privilege
10724-10788
Elevation of Privilege
10724-10852
Elevation of Privilege
10724-10853
Elevation of Privilege
10555-10378
Elevation of Privilege
10486-10481
Elevation of Privilege
10486-10482
Elevation of Privilege
10486-10483
Elevation of Privilege
10486-10484
Elevation of Privilege
10486-10729
Elevation of Privilege
10486-10735
Elevation of Privilege
10486-10789
Elevation of Privilege
10486-10788
Elevation of Privilege
10486-10852
Elevation of Privilege
10486-10853
Important
10724-10729
Important
10724-10735
Important
10724-10789
Important
10724-10788
Important
10724-10852
Important
10724-10853
Low
10555-10378
Important
10486-10481
Important
10486-10482
Low
10486-10483
Important
10486-10484
Important
10486-10729
Important
10486-10735
Important
10486-10789
Important
10486-10788
Important
10486-10852
Important
10486-10853
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A
3192440
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192440
3185611
10724-10729
Yes
Security Update
3192440
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192440
3185611
10724-10735
Yes
Security Update
3192441
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192441
3185614
10724-10789
Yes
Security Update
3192441
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192441
3185614
10724-10788
Yes
Security Update
3194798
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3194798
3189866
10724-10852
Yes
Security Update
3194798
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3194798
3189866
10724-10853
Yes
Security Update
3185332
https://www.microsoft.com/downloads/details.aspx?familyid=93b4d5dd-9784-4fb4-9c0c-9171a24efca5
3192393
10555-10378
Yes
Monthly Rollup
3192393
https://www.microsoft.com/downloads/details.aspx?familyid=17dc5103-8380-440a-9e5b-a55cdc33388b
3185319
10555-10378
Yes
Security Only
3185331
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185331
3185319
10486-10481
Yes
Monthly Rollup
3192392
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192392
MS16-016, 3124280; MS16-097, 3178034; MS16-104, 3185319
10486-10481
Security Only
3185331
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185331
3185319
10486-10482
Yes
Monthly Rollup
3192392
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192392
MS16-016, 3124280; MS16-097, 3178034; MS16-101, 3167679; MS16-104, 3185319
10486-10482
Security Only
3185331
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185331
3185319
10486-10483
Yes
Monthly Rollup
3192392
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192392
MS16-016, 3124280; MS16-097, 3178034; MS16-101, 3167679; MS16-104, 3185319
10486-10483
Security Only
3185331
3185319
10486-10484
Yes
Monthly Rollup
3192440
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192440
3185611
10486-10729
Yes
Security Update
3192440
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192440
3185611
10486-10735
Yes
Security Update
3192441
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192441
3185614
10486-10789
Yes
Security Update
3192441
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192441
3185614
10486-10788
Yes
Security Update
3194798
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3194798
3189866
10486-10852
Yes
Security Update
3194798
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3194798
3189866
10486-10853
Yes
Security Update
James Forshaw of <a href="http://www.google.com/">Google Project Zero</a>
1.0
2016-10-11T07:00:00Z
<p>Information published.</p>
Microsoft Browser Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists when affected Microsoft browsers fail to properly secure private namespace. An attacker who successfully exploited this vulnerability could gain elevated permissions on the namespace directory of a vulnerable system and gain elevated privileges.</p>
<p>The vulnerability by itself does not allow arbitrary code to be run. However, this vulnerability could be used in conjunction with one or more other vulnerabilities (e.g. a remote code execution vulnerability and another elevation of privilege) that could take advantage of the elevated privileges when running.</p>
<p>The update addresses the vulnerability by correcting how Microsoft browsers handle namespace boundaries.</p>
Microsoft Browsers
CVE-2016-3388
10724-10729
10724-10735
10724-10789
10724-10788
10724-10852
10724-10853
10555-10378
10486-10481
10486-10482
10486-10483
10486-10484
10486-10729
10486-10735
10486-10789
10486-10788
10486-10852
10486-10853
Elevation of Privilege
10724-10729
Elevation of Privilege
10724-10735
Elevation of Privilege
10724-10789
Elevation of Privilege
10724-10788
Elevation of Privilege
10724-10852
Elevation of Privilege
10724-10853
Elevation of Privilege
10555-10378
Elevation of Privilege
10486-10481
Elevation of Privilege
10486-10482
Elevation of Privilege
10486-10483
Elevation of Privilege
10486-10484
Elevation of Privilege
10486-10729
Elevation of Privilege
10486-10735
Elevation of Privilege
10486-10789
Elevation of Privilege
10486-10788
Elevation of Privilege
10486-10852
Elevation of Privilege
10486-10853
Important
10724-10729
Important
10724-10735
Important
10724-10789
Important
10724-10788
Important
10724-10852
Important
10724-10853
Low
10555-10378
Important
10486-10481
Important
10486-10482
Low
10486-10483
Important
10486-10484
Important
10486-10729
Important
10486-10735
Important
10486-10789
Important
10486-10788
Important
10486-10852
Important
10486-10853
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A
3192440
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192440
3185611
10724-10729
Yes
Security Update
3192440
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192440
3185611
10724-10735
Yes
Security Update
3192441
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192441
3185614
10724-10789
Yes
Security Update
3192441
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192441
3185614
10724-10788
Yes
Security Update
3194798
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3194798
3189866
10724-10852
Yes
Security Update
3194798
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3194798
3189866
10724-10853
Yes
Security Update
3185332
https://www.microsoft.com/downloads/details.aspx?familyid=93b4d5dd-9784-4fb4-9c0c-9171a24efca5
3192393
10555-10378
Yes
Monthly Rollup
3192393
https://www.microsoft.com/downloads/details.aspx?familyid=17dc5103-8380-440a-9e5b-a55cdc33388b
3185319
10555-10378
Yes
Security Only
3185331
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185331
3185319
10486-10481
Yes
Monthly Rollup
3192392
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192392
MS16-016, 3124280; MS16-097, 3178034; MS16-104, 3185319
10486-10481
Security Only
3185331
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185331
3185319
10486-10482
Yes
Monthly Rollup
3192392
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192392
MS16-016, 3124280; MS16-097, 3178034; MS16-101, 3167679; MS16-104, 3185319
10486-10482
Security Only
3185331
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185331
3185319
10486-10483
Yes
Monthly Rollup
3192392
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192392
MS16-016, 3124280; MS16-097, 3178034; MS16-101, 3167679; MS16-104, 3185319
10486-10483
Security Only
3185331
3185319
10486-10484
Yes
Monthly Rollup
3192440
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192440
3185611
10486-10729
Yes
Security Update
3192440
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192440
3185611
10486-10735
Yes
Security Update
3192441
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192441
3185614
10486-10789
Yes
Security Update
3192441
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192441
3185614
10486-10788
Yes
Security Update
3194798
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3194798
3189866
10486-10852
Yes
Security Update
3194798
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3194798
3189866
10486-10853
Yes
Security Update
James Forshaw of <a href="http://www.google.com/">Google Project Zero</a>
1.0
2016-10-11T07:00:00Z
<p>Information published.</p>
Scripting Engine Memory Corruption Vulnerability
<p>A remote code execution vulnerability exists in the way that Microsoft browser JavaScript engines render content when handling objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user.</p>
<p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft browsers and then convince a user to view the website. An attacker could also embed an ActiveX control marked "safe for initialization" in an application or Microsoft Office document that hosts the related rendering engine. The attacker could also take advantage of compromised websites, and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p>
<p>An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>The security update addresses the vulnerability by modifying how Microsoft browser JavaScript scripting engines handle objects in memory.</p>
Internet Explorer
CVE-2016-3389
10724-10729
10724-10735
10724-10789
10724-10788
10724-10852
10724-10853
Remote Code Execution
10724-10729
Remote Code Execution
10724-10735
Remote Code Execution
10724-10789
Remote Code Execution
10724-10788
Remote Code Execution
10724-10852
Remote Code Execution
10724-10853
Critical
10724-10729
Critical
10724-10735
Critical
10724-10789
Critical
10724-10788
Critical
10724-10852
Critical
10724-10853
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A
3192440
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192440
3185611
10724-10729
Yes
Security Update
3192440
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192440
3185611
10724-10735
Yes
Security Update
3192441
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192441
3185614
10724-10789
Yes
Security Update
3192441
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192441
3185614
10724-10788
Yes
Security Update
3194798
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3194798
3189866
10724-10852
Yes
Security Update
3194798
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3194798
3189866
10724-10853
Yes
Security Update
Microsoft ChakraCore Team
1.0
2016-10-11T07:00:00Z
<p>Information published.</p>
Scripting Engine Memory Corruption Vulnerability
<p>A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Internet Explorer and then convince a user to view the website. An attacker could also embed an ActiveX control marked "safe for initialization" in an application or Microsoft Office document that hosts the IE rendering engine. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p>
<p>The security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.</p>
<p><strong>I am running Internet Explorer on Windows Server 2008, Windows Server 2008 R2, Windows Server 2012, or Windows Server 2012 R2. Does this mitigate these vulnerabilities?</strong>
Yes. By default, Internet Explorer on Windows Server 2008, Windows Server 2008 R2, Windows Server 2012, and Windows Server 2012 R2 runs in a restricted mode that is known as Enhanced Security Configuration. Enhanced Security Configuration is a group of preconfigured settings in Internet Explorer that can reduce the likelihood of a user or administrator downloading and running specially crafted web content on a server. This is a mitigating factor for websites that you have not added to the Internet Explorer Trusted sites zone.</p>
<p><strong>Can EMET help mitigate attacks that attempt to exploit these vulnerabilities?</strong>
Yes. The Enhanced Mitigation Experience Toolkit (EMET) enables users to manage security mitigation technologies that help make it more difficult for attackers to exploit memory corruption vulnerabilities in a given piece of software. EMET can help mitigate attacks that attempt to exploit these vulnerabilities in Internet Explorer on systems where EMET is installed and configured to work with Internet Explorer.</p>
<p>For more information about EMET, see the <a href="https://technet.microsoft.com/security/jj653751">Enhanced Mitigation Experience Toolkit</a>.</p>
Microsoft Browsers
CVE-2016-3390
10724-10729
10724-10735
10724-10789
10724-10788
10724-10852
10724-10853
10486-10481
10486-10482
10486-10483
10486-10484
10486-10729
10486-10735
10486-10789
10486-10788
10486-10852
10486-10853
Remote Code Execution
10724-10729
Remote Code Execution
10724-10735
Remote Code Execution
10724-10789
Remote Code Execution
10724-10788
Remote Code Execution
10724-10852
Remote Code Execution
10724-10853
Remote Code Execution
10486-10481
Remote Code Execution
10486-10482
Remote Code Execution
10486-10483
Remote Code Execution
10486-10484
Remote Code Execution
10486-10729
Remote Code Execution
10486-10735
Remote Code Execution
10486-10789
Remote Code Execution
10486-10788
Remote Code Execution
10486-10852
Remote Code Execution
10486-10853
Critical
10724-10729
Critical
10724-10735
Critical
10724-10789
Critical
10724-10788
Critical
10724-10852
Critical
10724-10853
Critical
10486-10481
Critical
10486-10482
Moderate
10486-10483
Critical
10486-10484
Critical
10486-10729
Critical
10486-10735
Critical
10486-10789
Critical
10486-10788
Critical
10486-10852
Critical
10486-10853
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A
7.1
6.4
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C
10486-10481
7.1
6.4
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C
10486-10482
6.0
5.4
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C
10486-10483
7.1
6.4
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C
10486-10484
7.1
6.4
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C
10486-10729
7.1
6.4
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C
10486-10735
7.1
6.4
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C
10486-10789
7.1
6.4
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C
10486-10788
7.1
6.4
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C
10486-10852
7.1
6.4
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C
10486-10853
3192440
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192440
3185611
10724-10729
Yes
Security Update
3192440
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192440
3185611
10724-10735
Yes
Security Update
3192441
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192441
3185614
10724-10789
Yes
Security Update
3192441
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192441
3185614
10724-10788
Yes
Security Update
3194798
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3194798
3189866
10724-10852
Yes
Security Update
3194798
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3194798
3189866
10724-10853
Yes
Security Update
3185331
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185331
3185319
10486-10481
Yes
Monthly Rollup
3192392
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192392
MS16-016, 3124280; MS16-097, 3178034; MS16-104, 3185319
10486-10481
Security Only
3185331
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185331
3185319
10486-10482
Yes
Monthly Rollup
3192392
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192392
MS16-016, 3124280; MS16-097, 3178034; MS16-101, 3167679; MS16-104, 3185319
10486-10482
Security Only
3185331
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185331
3185319
10486-10483
Yes
Monthly Rollup
3192392
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192392
MS16-016, 3124280; MS16-097, 3178034; MS16-101, 3167679; MS16-104, 3185319
10486-10483
Security Only
3185331
3185319
10486-10484
Yes
Monthly Rollup
3192440
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192440
3185611
10486-10729
Yes
Security Update
3192440
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192440
3185611
10486-10735
Yes
Security Update
3192441
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192441
3185614
10486-10789
Yes
Security Update
3192441
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192441
3185614
10486-10788
Yes
Security Update
3194798
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3194798
3189866
10486-10852
Yes
Security Update
3194798
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3194798
3189866
10486-10853
Yes
Security Update
Microsoft ChakraCore Team
1.0
2016-10-11T07:00:00Z
<p>Information published.</p>
2.0
2016-12-13T08:00:00Z
<p>Revised bulletin to announce the following updates have been rereleased with a detection change that addresses a supersedence issue that certain customers experienced when attempting to install the October Security Only updates.
◦ Security Only update 3192391 for all supported releases of Windows 7 and Windows Server 2008 R2. For more information, see Microsoft Knowledge Base Article 3192391.
◦ Security Only update 3192393 for Windows Server 2012. For more information, see Microsoft Knowledge Base Article 3192393.
◦ Security Only update 3192392 for Windows 8.1 and Windows Server 2012 R2. For more information, see Microsoft Knowledge Base Article 3192392.
These are detection changes only. There were no changes to the update files. Customers who have already successfully installed any of these updates do not need to take any action. For more information, see the Microsoft Knowledge Base article for the respective update.</p>
Microsoft Browser Information Disclosure Vulnerability
<p>An information disclosure vulnerability exists when affected Microsoft browsers leave credential data in memory. An attacker who successfully exploited this vulnerability could harvest credentials from a memory dump of the browser process. An attacker would need access to a dump of memory from the affected system.</p>
<p>The security update addresses the vulnerability by changing the way that Microsoft browsers store credentials in memory.</p>
Microsoft Browsers
CVE-2016-3391
10555-10378
10486-10481
10486-10482
10486-10483
10486-10484
10486-10047
10486-10048
10486-10051
10486-10729
10486-10735
10486-10789
10486-10788
10486-10852
10486-10853
10336-9316
10336-4393
10336-9312
10336-9318
10724-10729
10724-10735
10724-10789
10724-10788
10724-10852
10724-10853
Information Disclosure
10555-10378
Information Disclosure
10486-10481
Information Disclosure
10486-10482
Information Disclosure
10486-10483
Information Disclosure
10486-10484
Information Disclosure
10486-10047
Information Disclosure
10486-10048
Information Disclosure
10486-10051
Information Disclosure
10486-10729
Information Disclosure
10486-10735
Information Disclosure
10486-10789
Information Disclosure
10486-10788
Information Disclosure
10486-10852
Information Disclosure
10486-10853
Information Disclosure
10336-9316
Information Disclosure
10336-4393
Information Disclosure
10336-9312
Information Disclosure
10336-9318
Information Disclosure
10724-10729
Information Disclosure
10724-10735
Information Disclosure
10724-10789
Information Disclosure
10724-10788
Information Disclosure
10724-10852
Information Disclosure
10724-10853
Low
10555-10378
Moderate
10486-10481
Moderate
10486-10482
Low
10486-10483
Moderate
10486-10484
Moderate
10486-10047
Moderate
10486-10048
Moderate
10486-10051
Moderate
10486-10729
Moderate
10486-10735
Moderate
10486-10789
Moderate
10486-10788
Moderate
10486-10852
Moderate
10486-10853
Moderate
10336-9316
Moderate
10336-4393
Low
10336-9312
Low
10336-9318
Moderate
10724-10729
Moderate
10724-10735
Moderate
10724-10789
Moderate
10724-10788
Moderate
10724-10852
Moderate
10724-10853
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely;Older Software Release:Exploitation Unlikely
3185332
https://www.microsoft.com/downloads/details.aspx?familyid=93b4d5dd-9784-4fb4-9c0c-9171a24efca5
3192393
10555-10378
Yes
Monthly Rollup
3192393
https://www.microsoft.com/downloads/details.aspx?familyid=17dc5103-8380-440a-9e5b-a55cdc33388b
3185319
10555-10378
Yes
Security Only
3185331
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185331
3185319
10486-10481
Yes
Monthly Rollup
3192392
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192392
MS16-016, 3124280; MS16-097, 3178034; MS16-104, 3185319
10486-10481
Security Only
3185331
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185331
3185319
10486-10482
Yes
Monthly Rollup
3192392
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192392
MS16-016, 3124280; MS16-097, 3178034; MS16-101, 3167679; MS16-104, 3185319
10486-10482
Security Only
3185331
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185331
3185319
10486-10483
Yes
Monthly Rollup
3192392
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192392
MS16-016, 3124280; MS16-097, 3178034; MS16-101, 3167679; MS16-104, 3185319
10486-10483
Security Only
3185331
3185319
10486-10484
Yes
Monthly Rollup
3185330
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185330
3175024
10486-10047
Yes
Monthly Rollup
3192391
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192391
3175024
10486-10047
Yes
Security Only
3185330
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185330
3175024
10486-10048
Yes
Monthly Rollup
3192391
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192391
3175024
10486-10048
Yes
Security Only
3185330
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185330
3175024
10486-10051
Yes
Monthly Rollup
3192391
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192391
3175024
10486-10051
Yes
Security Only
3192440
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192440
3185611
10486-10729
Yes
Security Update
3192440
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192440
3185611
10486-10735
Yes
Security Update
3192441
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192441
3185614
10486-10789
Yes
Security Update
3192441
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192441
3185614
10486-10788
Yes
Security Update
3194798
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3194798
3189866
10486-10852
Yes
Security Update
3194798
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3194798
3189866
10486-10853
Yes
Security Update
3191492
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3191492
3185319
10336-9316
Yes
Security Update
3191492
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3191492
3185319
10336-4393
Yes
Security Update
3191492
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3191492
3185319
10336-9312
Yes
Security Update
3191492
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3191492
3185319
10336-9318
Yes
Security Update
3192440
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192440
3185611
10724-10729
Yes
Security Update
3192440
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192440
3185611
10724-10735
Yes
Security Update
3192441
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192441
3185614
10724-10789
Yes
Security Update
3192441
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192441
3185614
10724-10788
Yes
Security Update
3194798
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3194798
3189866
10724-10852
Yes
Security Update
3194798
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3194798
3189866
10724-10853
Yes
Security Update
Adrian Toma, working with <a href=https://www.nviso.be/>NVISO</a> (internship)
Daan Raman, working with <a href=https://www.nviso.be/>NVISO</a>
<a href=https://www.arneswinnen.net/>Arne Swinnen</a> working with <a href=https://www.nviso.be/>NVISO</a>
Stefaan Truijen, working with <a href="https://www.nviso.be/">NVISO</a>
1.0
2016-10-11T07:00:00Z
<p>Information published.</p>
2.0
2016-12-13T08:00:00Z
<p>Revised bulletin to announce the following updates have been rereleased with a detection change that addresses a supersedence issue that certain customers experienced when attempting to install the October Security Only updates.
◦ Security Only update 3192391 for all supported releases of Windows 7 and Windows Server 2008 R2. For more information, see Microsoft Knowledge Base Article 3192391.
◦ Security Only update 3192393 for Windows Server 2012. For more information, see Microsoft Knowledge Base Article 3192393.
◦ Security Only update 3192392 for Windows 8.1 and Windows Server 2012 R2. For more information, see Microsoft Knowledge Base Article 3192392.
These are detection changes only. There were no changes to the update files. Customers who have already successfully installed any of these updates do not need to take any action. For more information, see the Microsoft Knowledge Base article for the respective update.</p>
Internet Explorer Security Feature Bypass Vulnerability
<p>A security feature bypass vulnerability exists in Microsoft Internet Explorer where the browser fails to properly restrict mixed content for specifically-crafted documents.</p>
<p>An attacker could trick a user into loading a page with malicious content. To exploit the vulnerability, an attacker would need to trick a user into loading a page or visiting a site. The page could also be injected into a compromised site or ad network.</p>
<p>The security update corrects how Microsoft Internet Explorer handles mixed content.</p>
Microsoft Edge
CVE-2016-3392
10724-10729
10724-10735
10724-10789
10724-10788
10724-10852
10724-10853
Security Feature Bypass
10724-10729
Security Feature Bypass
10724-10735
Security Feature Bypass
10724-10789
Security Feature Bypass
10724-10788
Security Feature Bypass
10724-10852
Security Feature Bypass
10724-10853
Moderate
10724-10729
Moderate
10724-10735
Moderate
10724-10789
Moderate
10724-10788
Moderate
10724-10852
Moderate
10724-10853
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely;Older Software Release:N/A
3192440
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192440
3185611
10724-10729
Yes
Security Update
3192440
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192440
3185611
10724-10735
Yes
Security Update
3192441
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192441
3185614
10724-10789
Yes
Security Update
3192441
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192441
3185614
10724-10788
Yes
Security Update
3194798
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3194798
3189866
10724-10852
Yes
Security Update
3194798
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3194798
3189866
10724-10853
Yes
Security Update
<a href="https://twitter.com/general_nfs">Xiaoyin Liu</a>
1.0
2016-10-11T07:00:00Z
<p>Information published.</p>
GDI+ Remote Code Execution Vulnerability
<p>A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.</p>
<p>There are multiple ways an attacker could exploit the vulnerability:</p>
<ul>
<li>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability and then convince users to view the website. An attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically by getting them to open an email attachment or click a link in an email or instant message.</li>
<li>In a file-sharing attack scenario, an attacker could provide a specially crafted document file that is designed to exploit the vulnerability, and then convince users to open the document file.</li>
</ul>
<p>The security update addresses the vulnerability by correcting the way that the Windows GDI handles objects in the memory.</p>
Microsoft Graphics Component
CVE-2016-3393
10050
10051
10049
10378
10379
10483
10543
4393
9316
10729
10735
10789
10788
10852
10853
10047
10048
10481
10482
10484
9312
10287
9311
9318
9344
Remote Code Execution
10050
Remote Code Execution
10051
Remote Code Execution
10049
Remote Code Execution
10378
Remote Code Execution
10379
Remote Code Execution
10483
Remote Code Execution
10543
Remote Code Execution
4393
Remote Code Execution
9316
Remote Code Execution
10729
Remote Code Execution
10735
Remote Code Execution
10789
Remote Code Execution
10788
Remote Code Execution
10852
Remote Code Execution
10853
Remote Code Execution
10047
Remote Code Execution
10048
Remote Code Execution
10481
Remote Code Execution
10482
Remote Code Execution
10484
Remote Code Execution
9312
Remote Code Execution
10287
Remote Code Execution
9311
Remote Code Execution
9318
Remote Code Execution
9344
Critical
10050
Critical
10051
Critical
10049
Critical
10378
Critical
10379
Critical
10483
Critical
10543
Critical
4393
Critical
9316
Critical
10729
Critical
10735
Critical
10789
Critical
10788
Critical
10852
Critical
10853
Critical
10047
Critical
10048
Critical
10481
Critical
10482
Critical
10484
Critical
9312
Critical
10287
Critical
9311
Critical
9318
Critical
9344
Publicly Disclosed:No;Exploited:Yes;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation Detected;DOS:Permanent
8.8
7.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10050
8.8
7.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10051
8.8
7.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10049
8.8
7.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10378
8.8
7.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10379
8.8
7.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10483
8.8
7.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10543
8.8
7.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
4393
8.8
7.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9316
8.8
7.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10729
8.8
7.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10735
8.8
7.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10789
8.8
7.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10788
8.8
7.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10852
8.8
7.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10853
8.8
7.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10047
8.8
7.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10048
8.8
7.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10481
8.8
7.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10482
8.8
7.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10484
8.8
7.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9312
8.8
7.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
10287
8.8
7.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9311
8.8
7.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9318
8.8
7.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
9344
3185330
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185330
3175024
10050
Yes
Monthly Rollup
3192391
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192391
3175024
10050
Yes
Security Only
3185330
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185330
3175024
10051
Yes
Monthly Rollup
3192391
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192391
3175024
10051
Yes
Security Only
3185330
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185330
3175024
10049
Yes
Monthly Rollup
3192391
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192391
3175024
10049
Yes
Security Only
3185332
https://www.microsoft.com/downloads/details.aspx?familyid=93b4d5dd-9784-4fb4-9c0c-9171a24efca5
3192393
10378
Yes
Monthly Rollup
3192393
https://www.microsoft.com/downloads/details.aspx?familyid=17dc5103-8380-440a-9e5b-a55cdc33388b
3185319
10378
Yes
Security Only
3185332
https://www.microsoft.com/downloads/details.aspx?familyid=93b4d5dd-9784-4fb4-9c0c-9171a24efca5
3192393
10379
Yes
Monthly Rollup
3192393
https://www.microsoft.com/downloads/details.aspx?familyid=17dc5103-8380-440a-9e5b-a55cdc33388b
3185319
10379
Yes
Security Only
3185331
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185331
3185319
10483
Yes
Monthly Rollup
3192392
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192392
MS16-016, 3124280; MS16-097, 3178034; MS16-101, 3167679; MS16-104, 3185319
10483
Security Only
3185331
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185331
3185319
10543
Yes
Monthly Rollup
3192392
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192392
MS16-016, 3124280; MS16-097, 3178034; MS16-101, 3167679; MS16-104, 3185319
10543
Security Only
3191203
https://www.microsoft.com/downloads/details.aspx?familyid=20843ec5-7bc3-4264-9003-bd656f72535e
3177725
4393
Yes
Security Update
3191203
https://www.microsoft.com/downloads/details.aspx?familyid=4da722a9-e219-47a9-8108-2e0b04b5488d
3177725
9316
Yes
Security Update
3192440
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192440
3185611
10729
Yes
Security Update
3192440
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192440
3185611
10735
Yes
Security Update
3192441
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192441
3185614
10789
Yes
Security Update
3192441
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192441
3185614
10788
Yes
Security Update
3194798
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3194798
3189866
10852
Yes
Security Update
3194798
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3194798
3189866
10853
Yes
Security Update
3185330
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185330
3175024
10047
Yes
Monthly Rollup
3192391
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192391
3175024
10047
Yes
Security Only
3185330
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185330
3175024
10048
Yes
Monthly Rollup
3192391
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192391
3175024
10048
Yes
Security Only
3185331
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185331
3185319
10481
Yes
Monthly Rollup
3192392
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192392
MS16-016, 3124280; MS16-097, 3178034; MS16-104, 3185319
10481
Security Only
3185331
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185331
3185319
10482
Yes
Monthly Rollup
3192392
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192392
MS16-016, 3124280; MS16-097, 3178034; MS16-101, 3167679; MS16-104, 3185319
10482
Security Only
3185331
3185319
10484
Yes
Monthly Rollup
3191203
https://www.microsoft.com/downloads/details.aspx?familyid=20843ec5-7bc3-4264-9003-bd656f72535e
3177725
9312
Yes
Security Update
3191203
https://www.microsoft.com/downloads/details.aspx?familyid=20843ec5-7bc3-4264-9003-bd656f72535e
3177725
10287
Yes
Security Update
3191203
https://www.microsoft.com/downloads/details.aspx?familyid=10fff467-bfe7-4b31-bec5-b3126a271c88
3177725
9311
Yes
Security Update
3191203
https://www.microsoft.com/downloads/details.aspx?familyid=4da722a9-e219-47a9-8108-2e0b04b5488d
3177725
9318
Yes
Security Update
3191203
https://www.microsoft.com/downloads/details.aspx?familyid=4da722a9-e219-47a9-8108-2e0b04b5488d
3177725
9344
Yes
Security Update
Anton Ivanov of <a href="https://www.kaspersky.com/">Kaspersky Lab</a>
1.0
2016-10-11T07:00:00Z
<p>Information published.</p>
1.1
2016-11-08T08:00:00Z
<p>Revised bulletin to announce a detection change to address an issue in supersedence, specifically in WSUS environments where various updates applicable to Windows 7 SP1 and Windows Server 2008 R2 SP1 were incorrectly marked as being superseded. This is a detection change only. There were no changes to the update files. Customers who have already successfully installed the update do not need to take any action.</p>
2.0
2016-12-13T08:00:00Z
<p>Revised bulletin to announce the following updates have been rereleased with a detection change that addresses a supersedence issue that certain customers experienced when attempting to install the October Security Only updates.
◦ Security Only update 3192391 for all supported releases of Windows 7 and Windows Server 2008 R2. For more information, see Microsoft Knowledge Base Article 3192391.
◦ Security Only update 3192393 for Windows Server 2012. For more information, see Microsoft Knowledge Base Article 3192393.
◦ Security Only update 3192392 for Windows 8.1 and Windows Server 2012 R2. For more information, see Microsoft Knowledge Base Article 3192392.
These are detection changes only. There were no changes to the update files. Customers who have already successfully installed any of these updates do not need to take any action. For more information, see the Microsoft Knowledge Base article for the respective update.</p>
GDI+ Remote Code Execution Vulnerability
<p>A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker who successfully exploited the vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.</p>
<p>There are multiple ways an attacker could exploit the vulnerability:</p>
<ul>
<li>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability and then convince users to view the website. An attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically by getting them to click a link in an email or instant message that takes users to the attacker's website, or by opening an attachment sent through email.</li>
<li>In a file-sharing attack scenario, an attacker could provide a specially crafted document file that is designed to exploit the vulnerability and then convince users to open the document file. The security update addresses the vulnerability by correcting how the Windows font library handles embedded fonts.</li>
</ul>
<p>Note that where the severity is indicated as Critical in the Affected Products table, the Preview Pane is an attack vector for this vulnerability. The security update addresses the vulnerability by correcting how the Windows font library handles embedded fonts.</p>
<p><strong>I am running Office 2010, which is listed as affected software. Why am I not being offered the update?</strong>
The update is not applicable to Office 2010 on Windows Vista and later versions of Windows because the vulnerable code is not present.</p>
<p><strong>I am being offered this update for software that is not specifically indicated as being affected in the Affected Software and Vulnerability Severity Ratings table. Why am I being offered this update?</strong>
When updates address vulnerable code that exists in a component that is shared between multiple Microsoft Office products or shared between multiple versions of the same Microsoft Office product, the update is considered to be applicable to all supported products and versions that contain the vulnerable component.</p>
<p>For example, when an update applies to Microsoft Office 2007 products, only Microsoft Office 2007 may be specifically listed in the Affected Software table. However, the update could apply to Microsoft Word 2007, Microsoft Excel 2007, Microsoft Visio 2007, Microsoft Compatibility Pack, Microsoft Excel Viewer, or any other Microsoft Office 2007 product that is not specifically listed in the Affected Software table. Furthermore, when an update applies to Microsoft Office 2010 products, only Microsoft Office 2010 may be specifically listed in the Affected Software table. However, the update could apply to Microsoft Word 2010, Microsoft Excel 2010, Microsoft Visio 2010, Microsoft Visio Viewer, or any other Microsoft Office 2010 product that is not specifically listed in the Affected Software table.</p>
<p>For more information on this behavior and recommended actions, see <a href="https://support.microsoft.com/kb/830335">Microsoft Knowledge Base Article 830335</a>. For a list of Microsoft Office products an update may apply to, refer to the Microsoft Knowledge Base Article associated with the specific update.</p>
<p><strong>Are there any prerequisites for any of the updates offered in this bulletin for affected editions of Microsoft Lync 2013 (Skype for Business)?</strong>
Yes. Customers running affected editions of Microsoft Lync 2013 (Skype for Business) must first install the 2965218 update for Office 2013 released in April 2015, and then the 3039779 security update released in May 2015. For more information about these two prerequisite updates, see:</p>
<p><a href="https://support.microsoft.com/en-us/kb/2965218">Knowledge Base Article 2965218</a>
<a href="https://support.microsoft.com/en-us/kb/3039779">Knowledge Base Article 3039779</a> </p>
<p><strong>Are there any related non-security updates that customers should install along with the Microsoft Live Meeting Console security update?</strong>
Yes, in addition to releasing a security update for Microsoft Live Meeting Console, Microsoft has released the following non-security updates for the OCS Conferencing Addin for Outlook. Where applicable, Microsoft recommends that customers install these updates to keep their systems up-to-date:</p>
<p>OCS Conferencing Addin for Outlook (32-bit) (3189648)
OCS Conferencing Addin for Outlook (64-bit) (3189648)</p>
<p>See<a href="https://support.microsoft.com/kb/3189648"> Microsoft Knowledge Base Article 3189648</a> for more information.</p>
<p><strong>Why is the Lync 2010 Attendee (user level install) update only available from the Microsoft Download Center?</strong>
Microsoft is releasing the update for Lync 2010 Attendee (user level install) to the Microsoft Download Center only. Because the user level installation of Lync 2010 Attendee is handled through a Lync session, distribution methods such as automatic updating are not appropriate for this type of installation scenario.</p>
Microsoft Graphics Component
CVE-2016-3396
10729
10735
10789
10788
10852
10853
10047
10048
10481
10482
10484
9312
10287
9311
9318
9344
10050
10051
10049
10378
10379
10483
10543
4393
9316
10150
10521
10522
1160
10069
10303
10268
10295
10628
10630
10629
10631
10770
10771
10772
10773
10290
Remote Code Execution
10729
Remote Code Execution
10735
Remote Code Execution
10789
Remote Code Execution
10788
Remote Code Execution
10852
Remote Code Execution
10853
Remote Code Execution
10047
Remote Code Execution
10048
Remote Code Execution
10481
Remote Code Execution
10482
Remote Code Execution
10484
Remote Code Execution
9312
Remote Code Execution
10287
Remote Code Execution
9311
Remote Code Execution
9318
Remote Code Execution
9344
Remote Code Execution
10050
Remote Code Execution
10051
Remote Code Execution
10049
Remote Code Execution
10378
Remote Code Execution
10379
Remote Code Execution
10483
Remote Code Execution
10543
Remote Code Execution
4393
Remote Code Execution
9316
Remote Code Execution
10150
Remote Code Execution
10521
Remote Code Execution
10522
Remote Code Execution
1160
Remote Code Execution
10069
Remote Code Execution
10303
Remote Code Execution
10268
Remote Code Execution
10295
Remote Code Execution
10628
Remote Code Execution
10630
Remote Code Execution
10629
Remote Code Execution
10631
Remote Code Execution
10770
Remote Code Execution
10771
Remote Code Execution
10772
Remote Code Execution
10773
Remote Code Execution
10290
Critical
10729
Critical
10735
Critical
10789
Critical
10788
Critical
10852
Critical
10853
Critical
10047
Critical
10048
Critical
10481
Critical
10482
Critical
10484
Critical
9312
Critical
10287
Critical
9311
Critical
9318
Critical
9344
Critical
10050
Critical
10051
Critical
10049
Critical
10378
Critical
10379
Critical
10483
Critical
10543
Critical
4393
Critical
9316
Important
10150
Important
10521
Important
10522
Important
1160
Important
10069
Important
10303
Important
10268
Important
10295
Important
10628
Important
10630
Important
10629
Important
10631
Important
10770
Important
10771
Important
10772
Important
10773
Important
10290
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely
3192440
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192440
3185611
10729
Yes
Security Update
3192440
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192440
3185611
10735
Yes
Security Update
3192441
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192441
3185614
10789
Yes
Security Update
3192441
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192441
3185614
10788
Yes
Security Update
3194798
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3194798
3189866
10852
Yes
Security Update
3194798
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3194798
3189866
10853
Yes
Security Update
3185330
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185330
3175024
10047
Yes
Monthly Rollup
3192391
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192391
3175024
10047
Yes
Security Only
3185330
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185330
3175024
10048
Yes
Monthly Rollup
3192391
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192391
3175024
10048
Yes
Security Only
3185331
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185331
3185319
10481
Yes
Monthly Rollup
3192392
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192392
MS16-016, 3124280; MS16-097, 3178034; MS16-104, 3185319
10481
Security Only
3185331
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185331
3185319
10482
Yes
Monthly Rollup
3192392
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192392
MS16-016, 3124280; MS16-097, 3178034; MS16-101, 3167679; MS16-104, 3185319
10482
Security Only
3185331
3185319
10484
Yes
Monthly Rollup
3191203
https://www.microsoft.com/downloads/details.aspx?familyid=20843ec5-7bc3-4264-9003-bd656f72535e
3177725
9312
Yes
Security Update
3191203
https://www.microsoft.com/downloads/details.aspx?familyid=20843ec5-7bc3-4264-9003-bd656f72535e
3177725
10287
Yes
Security Update
3191203
https://www.microsoft.com/downloads/details.aspx?familyid=10fff467-bfe7-4b31-bec5-b3126a271c88
3177725
9311
Yes
Security Update
3191203
https://www.microsoft.com/downloads/details.aspx?familyid=4da722a9-e219-47a9-8108-2e0b04b5488d
3177725
9318
Yes
Security Update
3191203
https://www.microsoft.com/downloads/details.aspx?familyid=4da722a9-e219-47a9-8108-2e0b04b5488d
3177725
9344
Yes
Security Update
3185330
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185330
3175024
10050
Yes
Monthly Rollup
3192391
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192391
3175024
10050
Yes
Security Only
3185330
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185330
3175024
10051
Yes
Monthly Rollup
3192391
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192391
3175024
10051
Yes
Security Only
3185330
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185330
3175024
10049
Yes
Monthly Rollup
3192391
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192391
3175024
10049
Yes
Security Only
3185332
https://www.microsoft.com/downloads/details.aspx?familyid=93b4d5dd-9784-4fb4-9c0c-9171a24efca5
3192393
10378
Yes
Monthly Rollup
3192393
https://www.microsoft.com/downloads/details.aspx?familyid=17dc5103-8380-440a-9e5b-a55cdc33388b
3185319
10378
Yes
Security Only
3185332
https://www.microsoft.com/downloads/details.aspx?familyid=93b4d5dd-9784-4fb4-9c0c-9171a24efca5
3192393
10379
Yes
Monthly Rollup
3192393
https://www.microsoft.com/downloads/details.aspx?familyid=17dc5103-8380-440a-9e5b-a55cdc33388b
3185319
10379
Yes
Security Only
3185331
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185331
3185319
10483
Yes
Monthly Rollup
3192392
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192392
MS16-016, 3124280; MS16-097, 3178034; MS16-101, 3167679; MS16-104, 3185319
10483
Security Only
3185331
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185331
3185319
10543
Yes
Monthly Rollup
3192392
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192392
MS16-016, 3124280; MS16-097, 3178034; MS16-101, 3167679; MS16-104, 3185319
10543
Security Only
3191203
https://www.microsoft.com/downloads/details.aspx?familyid=20843ec5-7bc3-4264-9003-bd656f72535e
3177725
4393
Yes
Security Update
3191203
https://www.microsoft.com/downloads/details.aspx?familyid=4da722a9-e219-47a9-8108-2e0b04b5488d
3177725
9316
Yes
Security Update
3118301
https://www.microsoft.com/downloads/details.aspx?familyid=6b34f57a-8e6e-48ee-9d28-3db1223301f7
3115109
10150
Maybe
Security Update
3118317
https://www.microsoft.com/downloads/details.aspx?familyid=1faa41d7-d702-4f6b-a065-8542c2b4ef74
3115131
10521
Maybe
Security Update
3118317
https://www.microsoft.com/downloads/details.aspx?familyid=bd1b477e-7425-42e1-813a-3e7efb848e9b
3115131
10522
Maybe
Security Update
3118394
https://www.microsoft.com/downloads/details.aspx?familyid=37423544-2eda-4532-a55d-fb810b85d214
3115481
1160
Maybe
Security Update
3188397
https://www.microsoft.com/downloads/details.aspx?familyid=ed3e2f47-a13c-46d5-8a52-83398a3a4610
3174301
10069
Maybe
Security Update
3188397
https://www.microsoft.com/downloads/details.aspx?familyid=ed3e2f47-a13c-46d5-8a52-83398a3a4610
3174301
10303
Maybe
Security Update
3188400
https://www.microsoft.com/downloads/details.aspx?familyid=da3a99c9-4ddc-4602-a2b3-9a39e9de8f7c
3174304
10268
Maybe
Security Update
3188399
https://www.microsoft.com/downloads/details.aspx?familyid=798a3367-cf4b-45b0-a808-0602cbbc0edc
3174302
10295
Maybe
Security Update
3118348
https://www.microsoft.com/downloads/details.aspx?familyid=f66d62d2-7d3a-41c1-a00d-2377e9b56e21
3115431
10628
Maybe
Security Update
3118348
https://www.microsoft.com/downloads/details.aspx?familyid=ffd14e33-ba80-466f-b77a-b7855005abb9
3115431
10630
Maybe
Security Update
3118348
https://www.microsoft.com/downloads/details.aspx?familyid=f66d62d2-7d3a-41c1-a00d-2377e9b56e21
3115431
10629
Maybe
Security Update
3118348
https://www.microsoft.com/downloads/details.aspx?familyid=ffd14e33-ba80-466f-b77a-b7855005abb9
3115431
10631
Maybe
Security Update
3118327
https://www.microsoft.com/downloads/details.aspx?familyid=f0ba5411-c983-4541-95e4-6f54eb4f1582
3115408
10770
Maybe
Security Update
3118327
https://www.microsoft.com/downloads/details.aspx?familyid=f0f949dc-2bf8-4470-8a57-ed753d5cc97e
3115408
10771
Maybe
Security Update
3118327
https://www.microsoft.com/downloads/details.aspx?familyid=f0ba5411-c983-4541-95e4-6f54eb4f1582
3115408
10772
Maybe
Security Update
3118327
https://www.microsoft.com/downloads/details.aspx?familyid=f0f949dc-2bf8-4470-8a57-ed753d5cc97e
3115408
10773
Maybe
Security Update
3189647
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3189647
3174305
10290
Maybe
Security Update
1.0
2016-10-11T07:00:00Z
<p>Information published.</p>
1.1
2016-11-08T08:00:00Z
<p>Revised bulletin to announce a detection change to address an issue in supersedence, specifically in WSUS environments where various updates applicable to Windows 7 SP1 and Windows Server 2008 R2 SP1 were incorrectly marked as being superseded. This is a detection change only. There were no changes to the update files. Customers who have already successfully installed the update do not need to take any action.</p>
2.0
2016-12-13T08:00:00Z
<p>Revised bulletin to announce the following updates have been rereleased with a detection change that addresses a supersedence issue that certain customers experienced when attempting to install the October Security Only updates.
◦ Security Only update 3192391 for all supported releases of Windows 7 and Windows Server 2008 R2. For more information, see Microsoft Knowledge Base Article 3192391.
◦ Security Only update 3192393 for Windows Server 2012. For more information, see Microsoft Knowledge Base Article 3192393.
◦ Security Only update 3192392 for Windows 8.1 and Windows Server 2012 R2. For more information, see Microsoft Knowledge Base Article 3192392.
These are detection changes only. There were no changes to the update files. Customers who have already successfully installed any of these updates do not need to take any action. For more information, see the Microsoft Knowledge Base article for the respective update.</p>
GDI+ Information Disclosure Vulnerability
<p>An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, allowing an attacker to retrieve information from a targeted system. An attacker who successfully exploited this vulnerability could use the retrieved information to circumvent Address Space Layout Randomization (ASLR) in Windows, which helps guard against a broad class of vulnerabilities. By itself, the information disclosure does not allow arbitrary code execution; however, it could allow arbitrary code to be run if the attacker uses it in combination with another vulnerability, such as a remote code execution vulnerability, that is capable of leveraging the ASLR circumvention.</p>
<p>To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application.</p>
<p>The security update addresses the vulnerability, and helps protect the integrity of the ASLR security feature, by correcting how GDI handles memory addresses.</p>
<p><strong>I am running Office 2010, which is listed as affected software. Why am I not being offered the update?</strong>
The update is not applicable to Office 2010 on Windows Vista and later versions of Windows because the vulnerable code is not present.</p>
<p><strong>I am being offered this update for software that is not specifically indicated as being affected in the Affected Software and Vulnerability Severity Ratings table. Why am I being offered this update?</strong>
When updates address vulnerable code that exists in a component that is shared between multiple Microsoft Office products or shared between multiple versions of the same Microsoft Office product, the update is considered to be applicable to all supported products and versions that contain the vulnerable component.</p>
<p>For example, when an update applies to Microsoft Office 2007 products, only Microsoft Office 2007 may be specifically listed in the Affected Software table. However, the update could apply to Microsoft Word 2007, Microsoft Excel 2007, Microsoft Visio 2007, Microsoft Compatibility Pack, Microsoft Excel Viewer, or any other Microsoft Office 2007 product that is not specifically listed in the Affected Software table. Furthermore, when an update applies to Microsoft Office 2010 products, only Microsoft Office 2010 may be specifically listed in the Affected Software table. However, the update could apply to Microsoft Word 2010, Microsoft Excel 2010, Microsoft Visio 2010, Microsoft Visio Viewer, or any other Microsoft Office 2010 product that is not specifically listed in the Affected Software table.</p>
<p>For more information on this behavior and recommended actions, see <a href="https://support.microsoft.com/kb/830335">Microsoft Knowledge Base Article 830335</a>. For a list of Microsoft Office products an update may apply to, refer to the Microsoft Knowledge Base Article associated with the specific update.</p>
<p><strong>Are there any prerequisites for any of the updates offered in this bulletin for affected editions of Microsoft Lync 2013 (Skype for Business)?</strong>
Yes. Customers running affected editions of Microsoft Lync 2013 (Skype for Business) must first install the 2965218 update for Office 2013 released in April 2015, and then the 3039779 security update released in May 2015. For more information about these two prerequisite updates, see:</p>
<p><a href="https://support.microsoft.com/en-us/kb/2965218">Knowledge Base Article 2965218</a>
<a href="https://support.microsoft.com/en-us/kb/3039779">Knowledge Base Article 3039779</a> </p>
<p><strong>Are there any related non-security updates that customers should install along with the Microsoft Live Meeting Console security update?</strong>
Yes, in addition to releasing a security update for Microsoft Live Meeting Console, Microsoft has released the following non-security updates for the OCS Conferencing Addin for Outlook. Where applicable, Microsoft recommends that customers install these updates to keep their systems up-to-date:</p>
<p>OCS Conferencing Addin for Outlook (32-bit) (3189648)
OCS Conferencing Addin for Outlook (64-bit) (3189648)</p>
<p>See<a href="https://support.microsoft.com/kb/3189648"> Microsoft Knowledge Base Article 3189648</a> for more information.</p>
<p><strong>Why is the Lync 2010 Attendee (user level install) update only available from the Microsoft Download Center?</strong>
Microsoft is releasing the update for Lync 2010 Attendee (user level install) to the Microsoft Download Center only. Because the user level installation of Lync 2010 Attendee is handled through a Lync session, distribution methods such as automatic updating are not appropriate for this type of installation scenario.</p>
Microsoft Graphics Component
CVE-2016-3262
10729
10735
10789
10788
10047
10048
10481
10482
10484
9312
10287
9311
9318
9344
10050
10051
10049
10378
10379
10483
10543
4393
9316
10852
10853
10628
10630
10629
10631
10770
10771
10772
10773
10150
10521
10522
1160
10069
10303
10268
10295
10290
Information Disclosure
10729
Information Disclosure
10735
Information Disclosure
10789
Information Disclosure
10788
Information Disclosure
10047
Information Disclosure
10048
Information Disclosure
10481
Information Disclosure
10482
Information Disclosure
10484
Information Disclosure
9312
Information Disclosure
10287
Information Disclosure
9311
Information Disclosure
9318
Information Disclosure
9344
Information Disclosure
10050
Information Disclosure
10051
Information Disclosure
10049
Information Disclosure
10378
Information Disclosure
10379
Information Disclosure
10483
Information Disclosure
10543
Information Disclosure
4393
Information Disclosure
9316
Information Disclosure
10852
Information Disclosure
10853
Information Disclosure
10628
Information Disclosure
10630
Information Disclosure
10629
Information Disclosure
10631
Information Disclosure
10770
Information Disclosure
10771
Information Disclosure
10772
Information Disclosure
10773
Information Disclosure
10150
Information Disclosure
10521
Information Disclosure
10522
Information Disclosure
1160
Information Disclosure
10069
Information Disclosure
10303
Information Disclosure
10268
Information Disclosure
10295
Information Disclosure
10290
Important
10729
Important
10735
Important
10789
Important
10788
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9311
Important
9318
Important
9344
Important
10050
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Important
4393
Important
9316
Important
10852
Important
10853
Important
10628
Important
10630
Important
10629
Important
10631
Important
10770
Important
10771
Important
10772
Important
10773
Important
10150
Important
10521
Important
10522
Important
1160
Important
10069
Important
10303
Important
10268
Important
10295
Important
10290
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely
3192440
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192440
3185611
10729
Yes
Security Update
3192440
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192440
3185611
10735
Yes
Security Update
3192441
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192441
3185614
10789
Yes
Security Update
3192441
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192441
3185614
10788
Yes
Security Update
3185330
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185330
3175024
10047
Yes
Monthly Rollup
3192391
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192391
3175024
10047
Yes
Security Only
3185330
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185330
3175024
10048
Yes
Monthly Rollup
3192391
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192391
3175024
10048
Yes
Security Only
3185331
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185331
3185319
10481
Yes
Monthly Rollup
3192392
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192392
MS16-016, 3124280; MS16-097, 3178034; MS16-104, 3185319
10481
Security Only
3185331
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185331
3185319
10482
Yes
Monthly Rollup
3192392
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192392
MS16-016, 3124280; MS16-097, 3178034; MS16-101, 3167679; MS16-104, 3185319
10482
Security Only
3185331
3185319
10484
Yes
Monthly Rollup
3191203
https://www.microsoft.com/downloads/details.aspx?familyid=20843ec5-7bc3-4264-9003-bd656f72535e
3177725
9312
Yes
Security Update
3191203
https://www.microsoft.com/downloads/details.aspx?familyid=20843ec5-7bc3-4264-9003-bd656f72535e
3177725
10287
Yes
Security Update
3191203
https://www.microsoft.com/downloads/details.aspx?familyid=10fff467-bfe7-4b31-bec5-b3126a271c88
3177725
9311
Yes
Security Update
3191203
https://www.microsoft.com/downloads/details.aspx?familyid=4da722a9-e219-47a9-8108-2e0b04b5488d
3177725
9318
Yes
Security Update
3191203
https://www.microsoft.com/downloads/details.aspx?familyid=4da722a9-e219-47a9-8108-2e0b04b5488d
3177725
9344
Yes
Security Update
3185330
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185330
3175024
10050
Yes
Monthly Rollup
3192391
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192391
3175024
10050
Yes
Security Only
3185330
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185330
3175024
10051
Yes
Monthly Rollup
3192391
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192391
3175024
10051
Yes
Security Only
3185330
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185330
3175024
10049
Yes
Monthly Rollup
3192391
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192391
3175024
10049
Yes
Security Only
3185332
https://www.microsoft.com/downloads/details.aspx?familyid=93b4d5dd-9784-4fb4-9c0c-9171a24efca5
3192393
10378
Yes
Monthly Rollup
3192393
https://www.microsoft.com/downloads/details.aspx?familyid=17dc5103-8380-440a-9e5b-a55cdc33388b
3185319
10378
Yes
Security Only
3185332
https://www.microsoft.com/downloads/details.aspx?familyid=93b4d5dd-9784-4fb4-9c0c-9171a24efca5
3192393
10379
Yes
Monthly Rollup
3192393
https://www.microsoft.com/downloads/details.aspx?familyid=17dc5103-8380-440a-9e5b-a55cdc33388b
3185319
10379
Yes
Security Only
3185331
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185331
3185319
10483
Yes
Monthly Rollup
3192392
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192392
MS16-016, 3124280; MS16-097, 3178034; MS16-101, 3167679; MS16-104, 3185319
10483
Security Only
3185331
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185331
3185319
10543
Yes
Monthly Rollup
3192392
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192392
MS16-016, 3124280; MS16-097, 3178034; MS16-101, 3167679; MS16-104, 3185319
10543
Security Only
3191203
https://www.microsoft.com/downloads/details.aspx?familyid=20843ec5-7bc3-4264-9003-bd656f72535e
3177725
4393
Yes
Security Update
3191203
https://www.microsoft.com/downloads/details.aspx?familyid=4da722a9-e219-47a9-8108-2e0b04b5488d
3177725
9316
Yes
Security Update
3194798
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3194798
3189866
10852
Yes
Security Update
3194798
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3194798
3189866
10853
Yes
Security Update
3118348
https://www.microsoft.com/downloads/details.aspx?familyid=f66d62d2-7d3a-41c1-a00d-2377e9b56e21
3115431
10628
Maybe
Security Update
3118348
https://www.microsoft.com/downloads/details.aspx?familyid=ffd14e33-ba80-466f-b77a-b7855005abb9
3115431
10630
Maybe
Security Update
3118348
https://www.microsoft.com/downloads/details.aspx?familyid=f66d62d2-7d3a-41c1-a00d-2377e9b56e21
3115431
10629
Maybe
Security Update
3118348
https://www.microsoft.com/downloads/details.aspx?familyid=ffd14e33-ba80-466f-b77a-b7855005abb9
3115431
10631
Maybe
Security Update
3118327
https://www.microsoft.com/downloads/details.aspx?familyid=f0ba5411-c983-4541-95e4-6f54eb4f1582
3115408
10770
Maybe
Security Update
3118327
https://www.microsoft.com/downloads/details.aspx?familyid=f0f949dc-2bf8-4470-8a57-ed753d5cc97e
3115408
10771
Maybe
Security Update
3118327
https://www.microsoft.com/downloads/details.aspx?familyid=f0ba5411-c983-4541-95e4-6f54eb4f1582
3115408
10772
Maybe
Security Update
3118327
https://www.microsoft.com/downloads/details.aspx?familyid=f0f949dc-2bf8-4470-8a57-ed753d5cc97e
3115408
10773
Maybe
Security Update
3118301
https://www.microsoft.com/downloads/details.aspx?familyid=6b34f57a-8e6e-48ee-9d28-3db1223301f7
3115109
10150
Maybe
Security Update
3118317
https://www.microsoft.com/downloads/details.aspx?familyid=1faa41d7-d702-4f6b-a065-8542c2b4ef74
3115131
10521
Maybe
Security Update
3118317
https://www.microsoft.com/downloads/details.aspx?familyid=bd1b477e-7425-42e1-813a-3e7efb848e9b
3115131
10522
Maybe
Security Update
3118394
https://www.microsoft.com/downloads/details.aspx?familyid=37423544-2eda-4532-a55d-fb810b85d214
3115481
1160
Maybe
Security Update
3188397
https://www.microsoft.com/downloads/details.aspx?familyid=ed3e2f47-a13c-46d5-8a52-83398a3a4610
3174301
10069
Maybe
Security Update
3188397
https://www.microsoft.com/downloads/details.aspx?familyid=ed3e2f47-a13c-46d5-8a52-83398a3a4610
3174301
10303
Maybe
Security Update
3188400
https://www.microsoft.com/downloads/details.aspx?familyid=da3a99c9-4ddc-4602-a2b3-9a39e9de8f7c
3174304
10268
Maybe
Security Update
3188399
https://www.microsoft.com/downloads/details.aspx?familyid=798a3367-cf4b-45b0-a808-0602cbbc0edc
3174302
10295
Maybe
Security Update
3189647
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3189647
3174305
10290
Maybe
Security Update
Mateusz Jurczyk of <a href="http://www.google.com/">Google Project Zero</a>
1.0
2016-10-11T07:00:00Z
<p>Information published.</p>
1.1
2016-11-08T08:00:00Z
<p>Revised bulletin to announce a detection change to address an issue in supersedence, specifically in WSUS environments where various updates applicable to Windows 7 SP1 and Windows Server 2008 R2 SP1 were incorrectly marked as being superseded. This is a detection change only. There were no changes to the update files. Customers who have already successfully installed the update do not need to take any action.</p>
2.0
2016-12-13T08:00:00Z
<p>Revised bulletin to announce the following updates have been rereleased with a detection change that addresses a supersedence issue that certain customers experienced when attempting to install the October Security Only updates.
◦ Security Only update 3192391 for all supported releases of Windows 7 and Windows Server 2008 R2. For more information, see Microsoft Knowledge Base Article 3192391.
◦ Security Only update 3192393 for Windows Server 2012. For more information, see Microsoft Knowledge Base Article 3192393.
◦ Security Only update 3192392 for Windows 8.1 and Windows Server 2012 R2. For more information, see Microsoft Knowledge Base Article 3192392.
These are detection changes only. There were no changes to the update files. Customers who have already successfully installed any of these updates do not need to take any action. For more information, see the Microsoft Knowledge Base article for the respective update.</p>
GDI+ Information Disclosure Vulnerability
<p>An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, allowing an attacker to retrieve information from a targeted system. An attacker who successfully exploited this vulnerability could use the retrieved information to circumvent Address Space Layout Randomization (ASLR) in Windows, which helps guard against a broad class of vulnerabilities. By itself, the information disclosure does not allow arbitrary code execution; however, it could allow arbitrary code to be run if the attacker uses it in combination with another vulnerability, such as a remote code execution vulnerability, that is capable of leveraging the ASLR circumvention.</p>
<p>To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application.</p>
<p>The security update addresses the vulnerability, and helps protect the integrity of the ASLR security feature, by correcting how GDI handles memory addresses.</p>
<p><strong>I am running Office 2010, which is listed as affected software. Why am I not being offered the update?</strong>
The update is not applicable to Office 2010 on Windows Vista and later versions of Windows because the vulnerable code is not present.</p>
<p><strong>I am being offered this update for software that is not specifically indicated as being affected in the Affected Software and Vulnerability Severity Ratings table. Why am I being offered this update?</strong>
When updates address vulnerable code that exists in a component that is shared between multiple Microsoft Office products or shared between multiple versions of the same Microsoft Office product, the update is considered to be applicable to all supported products and versions that contain the vulnerable component.</p>
<p>For example, when an update applies to Microsoft Office 2007 products, only Microsoft Office 2007 may be specifically listed in the Affected Software table. However, the update could apply to Microsoft Word 2007, Microsoft Excel 2007, Microsoft Visio 2007, Microsoft Compatibility Pack, Microsoft Excel Viewer, or any other Microsoft Office 2007 product that is not specifically listed in the Affected Software table. Furthermore, when an update applies to Microsoft Office 2010 products, only Microsoft Office 2010 may be specifically listed in the Affected Software table. However, the update could apply to Microsoft Word 2010, Microsoft Excel 2010, Microsoft Visio 2010, Microsoft Visio Viewer, or any other Microsoft Office 2010 product that is not specifically listed in the Affected Software table.</p>
<p>For more information on this behavior and recommended actions, see <a href="https://support.microsoft.com/kb/830335">Microsoft Knowledge Base Article 830335</a>. For a list of Microsoft Office products an update may apply to, refer to the Microsoft Knowledge Base Article associated with the specific update.</p>
<p><strong>Are there any prerequisites for any of the updates offered in this bulletin for affected editions of Microsoft Lync 2013 (Skype for Business)?</strong>
Yes. Customers running affected editions of Microsoft Lync 2013 (Skype for Business) must first install the 2965218 update for Office 2013 released in April 2015, and then the 3039779 security update released in May 2015. For more information about these two prerequisite updates, see:</p>
<p><a href="https://support.microsoft.com/en-us/kb/2965218">Knowledge Base Article 2965218</a>
<a href="https://support.microsoft.com/en-us/kb/3039779">Knowledge Base Article 3039779</a> </p>
<p><strong>Are there any related non-security updates that customers should install along with the Microsoft Live Meeting Console security update?</strong>
Yes, in addition to releasing a security update for Microsoft Live Meeting Console, Microsoft has released the following non-security updates for the OCS Conferencing Addin for Outlook. Where applicable, Microsoft recommends that customers install these updates to keep their systems up-to-date:</p>
<p>OCS Conferencing Addin for Outlook (32-bit) (3189648)
OCS Conferencing Addin for Outlook (64-bit) (3189648)</p>
<p>See<a href="https://support.microsoft.com/kb/3189648"> Microsoft Knowledge Base Article 3189648</a> for more information.</p>
<p><strong>Why is the Lync 2010 Attendee (user level install) update only available from the Microsoft Download Center?</strong>
Microsoft is releasing the update for Lync 2010 Attendee (user level install) to the Microsoft Download Center only. Because the user level installation of Lync 2010 Attendee is handled through a Lync session, distribution methods such as automatic updating are not appropriate for this type of installation scenario.</p>
Microsoft Graphics Component
CVE-2016-3263
10729
10735
10789
10788
10047
10048
10481
10482
10484
9312
10287
9311
9318
9344
10050
10051
10049
10378
10379
10483
10543
4393
9316
10852
10853
10150
10521
10522
1160
10069
10303
10268
10295
10628
10630
10629
10631
10770
10771
10772
10773
10290
10855
Information Disclosure
10729
Information Disclosure
10735
Information Disclosure
10789
Information Disclosure
10788
Information Disclosure
10047
Information Disclosure
10048
Information Disclosure
10481
Information Disclosure
10482
Information Disclosure
10484
Information Disclosure
9312
Information Disclosure
10287
Information Disclosure
9311
Information Disclosure
9318
Information Disclosure
9344
Information Disclosure
10050
Information Disclosure
10051
Information Disclosure
10049
Information Disclosure
10378
Information Disclosure
10379
Information Disclosure
10483
Information Disclosure
10543
Information Disclosure
4393
Information Disclosure
9316
Information Disclosure
10852
Information Disclosure
10853
Information Disclosure
10150
Information Disclosure
10521
Information Disclosure
10522
Information Disclosure
1160
Information Disclosure
10069
Information Disclosure
10303
Information Disclosure
10268
Information Disclosure
10295
Information Disclosure
10628
Information Disclosure
10630
Information Disclosure
10629
Information Disclosure
10631
Information Disclosure
10770
Information Disclosure
10771
Information Disclosure
10772
Information Disclosure
10773
Information Disclosure
10290
Information Disclosure
10855
Important
10729
Important
10735
Important
10789
Important
10788
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9311
Important
9318
Important
9344
Important
10050
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Important
4393
Important
9316
Important
10852
Important
10853
Important
10150
Important
10521
Important
10522
Important
1160
Important
10069
Important
10303
Important
10268
Important
10295
Important
10628
Important
10630
Important
10629
Important
10631
Important
10770
Important
10771
Important
10772
Important
10773
Important
10290
Important
10855
Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A;Older Software Release:Exploitation Less Likely
3192440
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192440
3185611
10729
Yes
Security Update
3192440
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192440
3185611
10735
Yes
Security Update
3192441
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192441
3185614
10789
Yes
Security Update
3192441
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192441
3185614
10788
Yes
Security Update
3185330
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185330
3175024
10047
Yes
Monthly Rollup
3192391
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192391
3175024
10047
Yes
Security Only
3185330
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185330
3175024
10048
Yes
Monthly Rollup
3192391
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192391
3175024
10048
Yes
Security Only
3185331
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185331
3185319
10481
Yes
Monthly Rollup
3192392
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192392
MS16-016, 3124280; MS16-097, 3178034; MS16-104, 3185319
10481
Security Only
3185331
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185331
3185319
10482
Yes
Monthly Rollup
3192392
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192392
MS16-016, 3124280; MS16-097, 3178034; MS16-101, 3167679; MS16-104, 3185319
10482
Security Only
3185331
3185319
10484
Yes
Monthly Rollup
3191203
https://www.microsoft.com/downloads/details.aspx?familyid=20843ec5-7bc3-4264-9003-bd656f72535e
3177725
9312
Yes
Security Update
3191203
https://www.microsoft.com/downloads/details.aspx?familyid=20843ec5-7bc3-4264-9003-bd656f72535e
3177725
10287
Yes
Security Update
3191203
https://www.microsoft.com/downloads/details.aspx?familyid=10fff467-bfe7-4b31-bec5-b3126a271c88
3177725
9311
Yes
Security Update
3191203
https://www.microsoft.com/downloads/details.aspx?familyid=4da722a9-e219-47a9-8108-2e0b04b5488d
3177725
9318
Yes
Security Update
3191203
https://www.microsoft.com/downloads/details.aspx?familyid=4da722a9-e219-47a9-8108-2e0b04b5488d
3177725
9344
Yes
Security Update
3185330
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185330
3175024
10050
Yes
Monthly Rollup
3192391
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192391
3175024
10050
Yes
Security Only
3185330
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185330
3175024
10051
Yes
Monthly Rollup
3192391
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192391
3175024
10051
Yes
Security Only
3185330
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185330
3175024
10049
Yes
Monthly Rollup
3192391
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192391
3175024
10049
Yes
Security Only
3185332
https://www.microsoft.com/downloads/details.aspx?familyid=93b4d5dd-9784-4fb4-9c0c-9171a24efca5
3192393
10378
Yes
Monthly Rollup
3192393
https://www.microsoft.com/downloads/details.aspx?familyid=17dc5103-8380-440a-9e5b-a55cdc33388b
3185319
10378
Yes
Security Only
3185332
https://www.microsoft.com/downloads/details.aspx?familyid=93b4d5dd-9784-4fb4-9c0c-9171a24efca5
3192393
10379
Yes
Monthly Rollup
3192393
https://www.microsoft.com/downloads/details.aspx?familyid=17dc5103-8380-440a-9e5b-a55cdc33388b
3185319
10379
Yes
Security Only
3185331
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185331
3185319
10483
Yes
Monthly Rollup
3192392
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192392
MS16-016, 3124280; MS16-097, 3178034; MS16-101, 3167679; MS16-104, 3185319
10483
Security Only
3185331
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185331
3185319
10543
Yes
Monthly Rollup
3192392
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192392
MS16-016, 3124280; MS16-097, 3178034; MS16-101, 3167679; MS16-104, 3185319
10543
Security Only
3191203
https://www.microsoft.com/downloads/details.aspx?familyid=20843ec5-7bc3-4264-9003-bd656f72535e
3177725
4393
Yes
Security Update
3191203
https://www.microsoft.com/downloads/details.aspx?familyid=4da722a9-e219-47a9-8108-2e0b04b5488d
3177725
9316
Yes
Security Update
3194798
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3194798
3189866
10852
Yes
Security Update
3194798
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3194798
3189866
10853
Yes
Security Update
3118301
https://www.microsoft.com/downloads/details.aspx?familyid=6b34f57a-8e6e-48ee-9d28-3db1223301f7
3115109
10150
Maybe
Security Update
3118317
https://www.microsoft.com/downloads/details.aspx?familyid=1faa41d7-d702-4f6b-a065-8542c2b4ef74
3115131
10521
Maybe
Security Update
3118317
https://www.microsoft.com/downloads/details.aspx?familyid=bd1b477e-7425-42e1-813a-3e7efb848e9b
3115131
10522
Maybe
Security Update
3118394
https://www.microsoft.com/downloads/details.aspx?familyid=37423544-2eda-4532-a55d-fb810b85d214
3115481
1160
Maybe
Security Update
3188397
https://www.microsoft.com/downloads/details.aspx?familyid=ed3e2f47-a13c-46d5-8a52-83398a3a4610
3174301
10069
Maybe
Security Update
3188397
https://www.microsoft.com/downloads/details.aspx?familyid=ed3e2f47-a13c-46d5-8a52-83398a3a4610
3174301
10303
Maybe
Security Update
3188400
https://www.microsoft.com/downloads/details.aspx?familyid=da3a99c9-4ddc-4602-a2b3-9a39e9de8f7c
3174304
10268
Maybe
Security Update
3188399
https://www.microsoft.com/downloads/details.aspx?familyid=798a3367-cf4b-45b0-a808-0602cbbc0edc
3174302
10295
Maybe
Security Update
3118348
https://www.microsoft.com/downloads/details.aspx?familyid=f66d62d2-7d3a-41c1-a00d-2377e9b56e21
3115431
10628
Maybe
Security Update
3118348
https://www.microsoft.com/downloads/details.aspx?familyid=ffd14e33-ba80-466f-b77a-b7855005abb9
3115431
10630
Maybe
Security Update
3118348
https://www.microsoft.com/downloads/details.aspx?familyid=f66d62d2-7d3a-41c1-a00d-2377e9b56e21
3115431
10629
Maybe
Security Update
3118348
https://www.microsoft.com/downloads/details.aspx?familyid=ffd14e33-ba80-466f-b77a-b7855005abb9
3115431
10631
Maybe
Security Update
3118327
https://www.microsoft.com/downloads/details.aspx?familyid=f0ba5411-c983-4541-95e4-6f54eb4f1582
3115408
10770
Maybe
Security Update
3118327
https://www.microsoft.com/downloads/details.aspx?familyid=f0f949dc-2bf8-4470-8a57-ed753d5cc97e
3115408
10771
Maybe
Security Update
3118327
https://www.microsoft.com/downloads/details.aspx?familyid=f0ba5411-c983-4541-95e4-6f54eb4f1582
3115408
10772
Maybe
Security Update
3118327
https://www.microsoft.com/downloads/details.aspx?familyid=f0f949dc-2bf8-4470-8a57-ed753d5cc97e
3115408
10773
Maybe
Security Update
3189647
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3189647
3174305
10290
Maybe
Security Update
3200970
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3200970
10855
Yes
Security Update
Mateusz Jurczyk of <a href="http://www.google.com/">Google Project Zero</a>
1.0
2016-10-11T07:00:00Z
<p>Information published.</p>
1.1
2016-11-08T08:00:00Z
<p>Revised bulletin to announce a detection change to address an issue in supersedence, specifically in WSUS environments where various updates applicable to Windows 7 SP1 and Windows Server 2008 R2 SP1 were incorrectly marked as being superseded. This is a detection change only. There were no changes to the update files. Customers who have already successfully installed the update do not need to take any action.</p>
2.0
2016-12-13T08:00:00Z
<p>Revised bulletin to announce the following updates have been rereleased with a detection change that addresses a supersedence issue that certain customers experienced when attempting to install the October Security Only updates.
◦ Security Only update 3192391 for all supported releases of Windows 7 and Windows Server 2008 R2. For more information, see Microsoft Knowledge Base Article 3192391.
◦ Security Only update 3192393 for Windows Server 2012. For more information, see Microsoft Knowledge Base Article 3192393.
◦ Security Only update 3192392 for Windows 8.1 and Windows Server 2012 R2. For more information, see Microsoft Knowledge Base Article 3192392.
These are detection changes only. There were no changes to the update files. Customers who have already successfully installed any of these updates do not need to take any action. For more information, see the Microsoft Knowledge Base article for the respective update.</p>
Win32k Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system.</p>
<p>The update addresses this vulnerability by correcting how the Windows kernel-mode driver handles objects in memory.</p>
Windows Kernel-Mode Drivers
CVE-2016-3266
10729
10735
10789
10788
10047
10048
10481
10482
10484
9312
10287
9311
9318
9344
10050
10051
10049
10378
10379
10483
10543
4393
9316
10852
10853
Elevation of Privilege
10729
Elevation of Privilege
10735
Elevation of Privilege
10789
Elevation of Privilege
10788
Elevation of Privilege
10047
Elevation of Privilege
10048
Elevation of Privilege
10481
Elevation of Privilege
10482
Elevation of Privilege
10484
Elevation of Privilege
9312
Elevation of Privilege
10287
Elevation of Privilege
9311
Elevation of Privilege
9318
Elevation of Privilege
9344
Elevation of Privilege
10050
Elevation of Privilege
10051
Elevation of Privilege
10049
Elevation of Privilege
10378
Elevation of Privilege
10379
Elevation of Privilege
10483
Elevation of Privilege
10543
Elevation of Privilege
4393
Elevation of Privilege
9316
Elevation of Privilege
10852
Elevation of Privilege
10853
Important
10729
Important
10735
Important
10789
Important
10788
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9311
Important
9318
Important
9344
Important
10050
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Important
4393
Important
9316
Important
10852
Important
10853
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely
3192440
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192440
3185611
10729
Yes
Security Update
3192440
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192440
3185611
10735
Yes
Security Update
3192441
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192441
3185614
10789
Yes
Security Update
3192441
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192441
3185614
10788
Yes
Security Update
3185330
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185330
3175024
10047
Yes
Monthly Rollup
3192391
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192391
3175024
10047
Yes
Security Only
3185330
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185330
3175024
10048
Yes
Monthly Rollup
3192391
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192391
3175024
10048
Yes
Security Only
3185331
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185331
3185319
10481
Yes
Monthly Rollup
3192392
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192392
MS16-016, 3124280; MS16-097, 3178034; MS16-104, 3185319
10481
Security Only
3185331
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185331
3185319
10482
Yes
Monthly Rollup
3192392
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192392
MS16-016, 3124280; MS16-097, 3178034; MS16-101, 3167679; MS16-104, 3185319
10482
Security Only
3185331
3185319
10484
Yes
Monthly Rollup
3191203
https://www.microsoft.com/downloads/details.aspx?familyid=20843ec5-7bc3-4264-9003-bd656f72535e
3177725
9312
Yes
Security Update
3191203
https://www.microsoft.com/downloads/details.aspx?familyid=20843ec5-7bc3-4264-9003-bd656f72535e
3177725
10287
Yes
Security Update
3191203
https://www.microsoft.com/downloads/details.aspx?familyid=10fff467-bfe7-4b31-bec5-b3126a271c88
3177725
9311
Yes
Security Update
3191203
https://www.microsoft.com/downloads/details.aspx?familyid=4da722a9-e219-47a9-8108-2e0b04b5488d
3177725
9318
Yes
Security Update
3191203
https://www.microsoft.com/downloads/details.aspx?familyid=4da722a9-e219-47a9-8108-2e0b04b5488d
3177725
9344
Yes
Security Update
3185330
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185330
3175024
10050
Yes
Monthly Rollup
3192391
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192391
3175024
10050
Yes
Security Only
3185330
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185330
3175024
10051
Yes
Monthly Rollup
3192391
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192391
3175024
10051
Yes
Security Only
3185330
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185330
3175024
10049
Yes
Monthly Rollup
3192391
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192391
3175024
10049
Yes
Security Only
3185332
https://www.microsoft.com/downloads/details.aspx?familyid=93b4d5dd-9784-4fb4-9c0c-9171a24efca5
3192393
10378
Yes
Monthly Rollup
3192393
https://www.microsoft.com/downloads/details.aspx?familyid=17dc5103-8380-440a-9e5b-a55cdc33388b
MS16-039, 3145739; MS16-051, 3154070; MS16-060, 3153171; MS16-062, 3153199; MS16-073, 3161664; MS16-090, 3168965; MS16-092, 3170377; MS16-097, 3178034; MS16-098, 3177725; MS16-101, 3177108; MS16-104, 3185319; MS16-110, 3187754
10378
Security Only
3185332
https://www.microsoft.com/downloads/details.aspx?familyid=93b4d5dd-9784-4fb4-9c0c-9171a24efca5
3192393
10379
Yes
Monthly Rollup
3192393
https://www.microsoft.com/downloads/details.aspx?familyid=17dc5103-8380-440a-9e5b-a55cdc33388b
MS16-039, 3145739; MS16-051, 3154070; MS16-060, 3153171; MS16-062, 3153199; MS16-073, 3161664; MS16-090, 3168965; MS16-092, 3170377; MS16-097, 3178034; MS16-098, 3177725; MS16-101, 3177108; MS16-104, 3185319; MS16-110, 3187754
10379
Security Only
3185331
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185331
3185319
10483
Yes
Monthly Rollup
3192392
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192392
MS16-016, 3124280; MS16-097, 3178034; MS16-101, 3167679; MS16-104, 3185319
10483
Security Only
3185331
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185331
3185319
10543
Yes
Monthly Rollup
3192392
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192392
MS16-016, 3124280; MS16-097, 3178034; MS16-101, 3167679; MS16-104, 3185319
10543
Security Only
3191203
https://www.microsoft.com/downloads/details.aspx?familyid=20843ec5-7bc3-4264-9003-bd656f72535e
3177725
4393
Yes
Security Update
3191203
https://www.microsoft.com/downloads/details.aspx?familyid=4da722a9-e219-47a9-8108-2e0b04b5488d
3177725
9316
Yes
Security Update
3194798
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3194798
3189866
10852
Yes
Security Update
3194798
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3194798
3189866
10853
Yes
Security Update
<a href="http://weibo.com/pgboy1988">pgboy</a>, <a href="http://weibo.com/2641521260">zhong_sf</a> of <a href="http://www.360.com/">Qihoo 360 Vulcan Team</a>
1.0
2016-10-11T07:00:00Z
<p>Information published.</p>
2.0
2016-12-13T08:00:00Z
<p>Revised bulletin to announce the following updates have been rereleased with a detection change that addresses a supersedence issue that certain customers experienced when attempting to install the October Security Only updates.
◦ Security Only update 3192391 for all supported releases of Windows 7 and Windows Server 2008 R2. For more information, see Microsoft Knowledge Base Article 3192391.
◦ Security Only update 3192393 for Windows Server 2012. For more information, see Microsoft Knowledge Base Article 3192393.
◦ Security Only update 3192392 for Windows 8.1 and Windows Server 2012 R2. For more information, see Microsoft Knowledge Base Article 3192392.
These are detection changes only. There were no changes to the update files. Customers who have already successfully installed any of these updates do not need to take any action. For more information, see the Microsoft Knowledge Base article for the respective update.</p>
Win32k Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system.</p>
<p>The update addresses this vulnerability by correcting how the Windows kernel-mode driver handles objects in memory.</p>
Microsoft Graphics Component
CVE-2016-3270
10729
10735
10789
10788
10047
10048
10481
10482
10484
9312
10287
9311
9318
9344
10050
10051
10049
10378
10379
10483
10543
4393
9316
10852
10853
Elevation of Privilege
10729
Elevation of Privilege
10735
Elevation of Privilege
10789
Elevation of Privilege
10788
Elevation of Privilege
10047
Elevation of Privilege
10048
Elevation of Privilege
10481
Elevation of Privilege
10482
Elevation of Privilege
10484
Elevation of Privilege
9312
Elevation of Privilege
10287
Elevation of Privilege
9311
Elevation of Privilege
9318
Elevation of Privilege
9344
Elevation of Privilege
10050
Elevation of Privilege
10051
Elevation of Privilege
10049
Elevation of Privilege
10378
Elevation of Privilege
10379
Elevation of Privilege
10483
Elevation of Privilege
10543
Elevation of Privilege
4393
Elevation of Privilege
9316
Elevation of Privilege
10852
Elevation of Privilege
10853
Important
10729
Important
10735
Important
10789
Important
10788
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9311
Important
9318
Important
9344
Important
10050
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Important
4393
Important
9316
Important
10852
Important
10853
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely
3192440
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192440
3185611
10729
Yes
Security Update
3192440
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192440
3185611
10735
Yes
Security Update
3192441
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192441
3185614
10789
Yes
Security Update
3192441
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192441
3185614
10788
Yes
Security Update
3185330
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185330
3175024
10047
Yes
Monthly Rollup
3192391
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192391
3175024
10047
Yes
Security Only
3185330
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185330
3175024
10048
Yes
Monthly Rollup
3192391
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192391
3175024
10048
Yes
Security Only
3185331
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185331
3185319
10481
Yes
Monthly Rollup
3192392
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192392
MS16-016, 3124280; MS16-097, 3178034; MS16-104, 3185319
10481
Security Only
3185331
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185331
3185319
10482
Yes
Monthly Rollup
3192392
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192392
MS16-016, 3124280; MS16-097, 3178034; MS16-101, 3167679; MS16-104, 3185319
10482
Security Only
3185331
3185319
10484
Yes
Monthly Rollup
3191203
https://www.microsoft.com/downloads/details.aspx?familyid=20843ec5-7bc3-4264-9003-bd656f72535e
3177725
9312
Yes
Security Update
3191203
https://www.microsoft.com/downloads/details.aspx?familyid=20843ec5-7bc3-4264-9003-bd656f72535e
3177725
10287
Yes
Security Update
3191203
https://www.microsoft.com/downloads/details.aspx?familyid=10fff467-bfe7-4b31-bec5-b3126a271c88
3177725
9311
Yes
Security Update
3191203
https://www.microsoft.com/downloads/details.aspx?familyid=4da722a9-e219-47a9-8108-2e0b04b5488d
3177725
9318
Yes
Security Update
3191203
https://www.microsoft.com/downloads/details.aspx?familyid=4da722a9-e219-47a9-8108-2e0b04b5488d
3177725
9344
Yes
Security Update
3185330
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185330
3175024
10050
Yes
Monthly Rollup
3192391
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192391
3175024
10050
Yes
Security Only
3185330
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185330
3175024
10051
Yes
Monthly Rollup
3192391
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192391
3175024
10051
Yes
Security Only
3185330
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185330
3175024
10049
Yes
Monthly Rollup
3192391
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192391
3175024
10049
Yes
Security Only
3185332
https://www.microsoft.com/downloads/details.aspx?familyid=93b4d5dd-9784-4fb4-9c0c-9171a24efca5
3192393
10378
Yes
Monthly Rollup
3192393
https://www.microsoft.com/downloads/details.aspx?familyid=17dc5103-8380-440a-9e5b-a55cdc33388b
3185319
10378
Yes
Security Only
3185332
https://www.microsoft.com/downloads/details.aspx?familyid=93b4d5dd-9784-4fb4-9c0c-9171a24efca5
3192393
10379
Yes
Monthly Rollup
3192393
https://www.microsoft.com/downloads/details.aspx?familyid=17dc5103-8380-440a-9e5b-a55cdc33388b
3185319
10379
Yes
Security Only
3185331
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185331
3185319
10483
Yes
Monthly Rollup
3192392
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192392
MS16-016, 3124280; MS16-097, 3178034; MS16-101, 3167679; MS16-104, 3185319
10483
Security Only
3185331
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185331
3185319
10543
Yes
Monthly Rollup
3192392
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192392
MS16-016, 3124280; MS16-097, 3178034; MS16-101, 3167679; MS16-104, 3185319
10543
Security Only
3191203
https://www.microsoft.com/downloads/details.aspx?familyid=20843ec5-7bc3-4264-9003-bd656f72535e
3177725
4393
Yes
Security Update
3191203
https://www.microsoft.com/downloads/details.aspx?familyid=4da722a9-e219-47a9-8108-2e0b04b5488d
3177725
9316
Yes
Security Update
3194798
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3194798
3189866
10852
Yes
Security Update
3194798
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3194798
3189866
10853
Yes
Security Update
<a href="http://weibo.com/pgboy1988">pgboy</a>, <a href="http://weibo.com/2641521260">zhong_sf</a> of <a href="http://www.360.com/">Qihoo 360 Vulcan Team</a>
1.0
2016-10-11T07:00:00Z
<p>Information published.</p>
1.1
2016-11-08T08:00:00Z
<p>Revised bulletin to announce a detection change to address an issue in supersedence, specifically in WSUS environments where various updates applicable to Windows 7 SP1 and Windows Server 2008 R2 SP1 were incorrectly marked as being superseded. This is a detection change only. There were no changes to the update files. Customers who have already successfully installed the update do not need to take any action.</p>
2.0
2016-12-13T08:00:00Z
<p>Revised bulletin to announce the following updates have been rereleased with a detection change that addresses a supersedence issue that certain customers experienced when attempting to install the October Security Only updates.
◦ Security Only update 3192391 for all supported releases of Windows 7 and Windows Server 2008 R2. For more information, see Microsoft Knowledge Base Article 3192391.
◦ Security Only update 3192393 for Windows Server 2012. For more information, see Microsoft Knowledge Base Article 3192393.
◦ Security Only update 3192392 for Windows 8.1 and Windows Server 2012 R2. For more information, see Microsoft Knowledge Base Article 3192392.
These are detection changes only. There were no changes to the update files. Customers who have already successfully installed any of these updates do not need to take any action. For more information, see the Microsoft Knowledge Base article for the respective update.</p>
GDI+ Information Disclosure Vulnerability
<p>An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, allowing an attacker to retrieve information from a targeted system. An attacker who successfully exploited this vulnerability could use the retrieved information to circumvent Address Space Layout Randomization (ASLR) in Windows, which helps guard against a broad class of vulnerabilities. By itself, the information disclosure does not allow arbitrary code execution; however, it could allow arbitrary code to be run if the attacker uses it in combination with another vulnerability, such as a remote code execution vulnerability, that is capable of leveraging the ASLR circumvention.</p>
<p>To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application.</p>
<p>The security update addresses the vulnerability, and helps protect the integrity of the ASLR security feature, by correcting how GDI handles memory addresses.</p>
<p><strong>I am running Office 2010, which is listed as affected software. Why am I not being offered the update?</strong>
The update is not applicable to Office 2010 on Windows Vista and later versions of Windows because the vulnerable code is not present.</p>
<p><strong>I am being offered this update for software that is not specifically indicated as being affected in the Affected Software and Vulnerability Severity Ratings table. Why am I being offered this update?</strong>
When updates address vulnerable code that exists in a component that is shared between multiple Microsoft Office products or shared between multiple versions of the same Microsoft Office product, the update is considered to be applicable to all supported products and versions that contain the vulnerable component.</p>
<p>For example, when an update applies to Microsoft Office 2007 products, only Microsoft Office 2007 may be specifically listed in the Affected Software table. However, the update could apply to Microsoft Word 2007, Microsoft Excel 2007, Microsoft Visio 2007, Microsoft Compatibility Pack, Microsoft Excel Viewer, or any other Microsoft Office 2007 product that is not specifically listed in the Affected Software table. Furthermore, when an update applies to Microsoft Office 2010 products, only Microsoft Office 2010 may be specifically listed in the Affected Software table. However, the update could apply to Microsoft Word 2010, Microsoft Excel 2010, Microsoft Visio 2010, Microsoft Visio Viewer, or any other Microsoft Office 2010 product that is not specifically listed in the Affected Software table.</p>
<p>For more information on this behavior and recommended actions, see <a href="https://support.microsoft.com/kb/830335">Microsoft Knowledge Base Article 830335</a>. For a list of Microsoft Office products an update may apply to, refer to the Microsoft Knowledge Base Article associated with the specific update.</p>
<p><strong>Are there any prerequisites for any of the updates offered in this bulletin for affected editions of Microsoft Lync 2013 (Skype for Business)?</strong>
Yes. Customers running affected editions of Microsoft Lync 2013 (Skype for Business) must first install the 2965218 update for Office 2013 released in April 2015, and then the 3039779 security update released in May 2015. For more information about these two prerequisite updates, see:</p>
<p><a href="https://support.microsoft.com/en-us/kb/2965218">Knowledge Base Article 2965218</a>
<a href="https://support.microsoft.com/en-us/kb/3039779">Knowledge Base Article 3039779</a> </p>
<p><strong>Are there any related non-security updates that customers should install along with the Microsoft Live Meeting Console security update?</strong>
Yes, in addition to releasing a security update for Microsoft Live Meeting Console, Microsoft has released the following non-security updates for the OCS Conferencing Addin for Outlook. Where applicable, Microsoft recommends that customers install these updates to keep their systems up-to-date:</p>
<p>OCS Conferencing Addin for Outlook (32-bit) (3189648)
OCS Conferencing Addin for Outlook (64-bit) (3189648)</p>
<p>See<a href="https://support.microsoft.com/kb/3189648"> Microsoft Knowledge Base Article 3189648</a> for more information.</p>
<p><strong>Why is the Lync 2010 Attendee (user level install) update only available from the Microsoft Download Center?</strong>
Microsoft is releasing the update for Lync 2010 Attendee (user level install) to the Microsoft Download Center only. Because the user level installation of Lync 2010 Attendee is handled through a Lync session, distribution methods such as automatic updating are not appropriate for this type of installation scenario.</p>
Microsoft Graphics Component
CVE-2016-3209
10729
10735
10789
10788
10047
10048
10481
10482
10484
9312
10287
9311
9318
9344
10050
10051
10049
10378
10379
10483
10543
4393
9316
10852
10853
10150
10521
10522
1160
10069
10303
10268
10295
10628
10630
10629
10631
10770
10771
10772
10773
10450
10453
10452
10100
10451
10099
10290
9195-4393
9195-9318
9195-9316
9195-9312
2472-10482
2472-10483
2472-10729
2472-10735
2472-10789
2472-10788
2472-10852
2472-10853
2472-10543
2472-10481
2472-10379
2472-10378
9495-10047
9495-10051
9495-10050
9495-10049
9495-10048
10636-9316
10636-4393
10636-9312
10636-9318
10728-4393
10728-9316
10728-9312
10728-9318
Information Disclosure
10729
Information Disclosure
10735
Information Disclosure
10789
Information Disclosure
10788
Information Disclosure
10047
Information Disclosure
10048
Information Disclosure
10481
Information Disclosure
10482
Information Disclosure
10484
Information Disclosure
9312
Information Disclosure
10287
Information Disclosure
9311
Information Disclosure
9318
Information Disclosure
9344
Information Disclosure
10050
Information Disclosure
10051
Information Disclosure
10049
Information Disclosure
10378
Information Disclosure
10379
Information Disclosure
10483
Information Disclosure
10543
Information Disclosure
4393
Information Disclosure
9316
Information Disclosure
10852
Information Disclosure
10853
Information Disclosure
10150
Information Disclosure
10521
Information Disclosure
10522
Information Disclosure
1160
Information Disclosure
10069
Information Disclosure
10303
Information Disclosure
10268
Information Disclosure
10295
Information Disclosure
10628
Information Disclosure
10630
Information Disclosure
10629
Information Disclosure
10631
Information Disclosure
10770
Information Disclosure
10771
Information Disclosure
10772
Information Disclosure
10773
Information Disclosure
10450
Information Disclosure
10453
Information Disclosure
10452
Information Disclosure
10100
Information Disclosure
10451
Information Disclosure
10099
Information Disclosure
10290
Information Disclosure
9195-4393
Information Disclosure
9195-9318
Information Disclosure
9195-9316
Information Disclosure
9195-9312
Information Disclosure
2472-10482
Information Disclosure
2472-10483
Information Disclosure
2472-10729
Information Disclosure
2472-10735
Information Disclosure
2472-10789
Information Disclosure
2472-10788
Information Disclosure
2472-10852
Information Disclosure
2472-10853
Information Disclosure
2472-10543
Information Disclosure
2472-10481
Information Disclosure
2472-10379
Information Disclosure
2472-10378
Information Disclosure
9495-10047
Information Disclosure
9495-10051
Information Disclosure
9495-10050
Information Disclosure
9495-10049
Information Disclosure
9495-10048
Information Disclosure
10636-9316
Information Disclosure
10636-4393
Information Disclosure
10636-9312
Information Disclosure
10636-9318
Information Disclosure
10728-4393
Information Disclosure
10728-9316
Information Disclosure
10728-9312
Information Disclosure
10728-9318
Important
10729
Important
10735
Important
10789
Important
10788
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9311
Important
9318
Important
9344
Important
10050
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Important
4393
Important
9316
Important
10852
Important
10853
Important
10150
Important
10521
Important
10522
Important
1160
Important
10069
Important
10303
Important
10268
Important
10295
Important
10628
Important
10630
Important
10629
Important
10631
Important
10770
Important
10771
Important
10772
Important
10773
Important
10450
Important
10453
Important
10452
Important
10100
Important
10451
Important
10099
Important
10290
Important
9195-4393
Important
9195-9318
Important
9195-9316
Important
9195-9312
Important
2472-10482
Important
2472-10483
Important
2472-10729
Important
2472-10735
Important
2472-10789
Important
2472-10788
Important
2472-10852
Important
2472-10853
Important
2472-10543
Important
2472-10481
Important
2472-10379
Important
2472-10378
Important
9495-10047
Important
9495-10051
Important
9495-10050
Important
9495-10049
Important
9495-10048
Important
10636-9316
Important
10636-4393
Important
10636-9312
Important
10636-9318
Important
10728-4393
Important
10728-9316
Important
10728-9312
Important
10728-9318
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation More Likely
3192440
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192440
3185611
10729
Yes
Security Update
3192440
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192440
3185611
10735
Yes
Security Update
3192441
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192441
3185614
10789
Yes
Security Update
3192441
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192441
3185614
10788
Yes
Security Update
3185330
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185330
3175024
10047
Yes
Monthly Rollup
3192391
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192391
3175024
10047
Yes
Security Only
3185330
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185330
3175024
10048
Yes
Monthly Rollup
3192391
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192391
3175024
10048
Yes
Security Only
3185331
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185331
3185319
10481
Yes
Monthly Rollup
3192392
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192392
MS16-016, 3124280; MS16-097, 3178034; MS16-104, 3185319
10481
Security Only
3185331
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185331
3185319
10482
Yes
Monthly Rollup
3192392
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192392
MS16-016, 3124280; MS16-097, 3178034; MS16-101, 3167679; MS16-104, 3185319
10482
Security Only
3185331
3185319
10484
Yes
Monthly Rollup
3191203
https://www.microsoft.com/downloads/details.aspx?familyid=20843ec5-7bc3-4264-9003-bd656f72535e
3177725
9312
Yes
Security Update
3191203
https://www.microsoft.com/downloads/details.aspx?familyid=20843ec5-7bc3-4264-9003-bd656f72535e
3177725
10287
Yes
Security Update
3191203
https://www.microsoft.com/downloads/details.aspx?familyid=10fff467-bfe7-4b31-bec5-b3126a271c88
3177725
9311
Yes
Security Update
3191203
https://www.microsoft.com/downloads/details.aspx?familyid=4da722a9-e219-47a9-8108-2e0b04b5488d
3177725
9318
Yes
Security Update
3191203
https://www.microsoft.com/downloads/details.aspx?familyid=4da722a9-e219-47a9-8108-2e0b04b5488d
3177725
9344
Yes
Security Update
3185330
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185330
3175024
10050
Yes
Monthly Rollup
3192391
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192391
3175024
10050
Yes
Security Only
3185330
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185330
3175024
10051
Yes
Monthly Rollup
3192391
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192391
3175024
10051
Yes
Security Only
3185330
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185330
3175024
10049
Yes
Monthly Rollup
3192391
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192391
3175024
10049
Yes
Security Only
3185332
https://www.microsoft.com/downloads/details.aspx?familyid=93b4d5dd-9784-4fb4-9c0c-9171a24efca5
3192393
10378
Yes
Monthly Rollup
3192393
https://www.microsoft.com/downloads/details.aspx?familyid=17dc5103-8380-440a-9e5b-a55cdc33388b
3185319
10378
Yes
Security Only
3185332
https://www.microsoft.com/downloads/details.aspx?familyid=93b4d5dd-9784-4fb4-9c0c-9171a24efca5
3192393
10379
Yes
Monthly Rollup
3192393
https://www.microsoft.com/downloads/details.aspx?familyid=17dc5103-8380-440a-9e5b-a55cdc33388b
3185319
10379
Yes
Security Only
3185331
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185331
3185319
10483
Yes
Monthly Rollup
3192392
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192392
MS16-016, 3124280; MS16-097, 3178034; MS16-101, 3167679; MS16-104, 3185319
10483
Security Only
3185331
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185331
3185319
10543
Yes
Monthly Rollup
3192392
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192392
MS16-016, 3124280; MS16-097, 3178034; MS16-101, 3167679; MS16-104, 3185319
10543
Security Only
3191203
https://www.microsoft.com/downloads/details.aspx?familyid=20843ec5-7bc3-4264-9003-bd656f72535e
3177725
4393
Yes
Security Update
3191203
https://www.microsoft.com/downloads/details.aspx?familyid=4da722a9-e219-47a9-8108-2e0b04b5488d
3177725
9316
Yes
Security Update
3194798
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3194798
3189866
10852
Yes
Security Update
3194798
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3194798
3189866
10853
Yes
Security Update
3118301
https://www.microsoft.com/downloads/details.aspx?familyid=6b34f57a-8e6e-48ee-9d28-3db1223301f7
3115109
10150
Maybe
Security Update
3118317
https://www.microsoft.com/downloads/details.aspx?familyid=1faa41d7-d702-4f6b-a065-8542c2b4ef74
3115131
10521
Maybe
Security Update
3118317
https://www.microsoft.com/downloads/details.aspx?familyid=bd1b477e-7425-42e1-813a-3e7efb848e9b
3115131
10522
Maybe
Security Update
3118394
https://www.microsoft.com/downloads/details.aspx?familyid=37423544-2eda-4532-a55d-fb810b85d214
3115481
1160
Maybe
Security Update
3188397
https://www.microsoft.com/downloads/details.aspx?familyid=ed3e2f47-a13c-46d5-8a52-83398a3a4610
3174301
10069
Maybe
Security Update
3188397
https://www.microsoft.com/downloads/details.aspx?familyid=ed3e2f47-a13c-46d5-8a52-83398a3a4610
3174301
10303
Maybe
Security Update
3188400
https://www.microsoft.com/downloads/details.aspx?familyid=da3a99c9-4ddc-4602-a2b3-9a39e9de8f7c
3174304
10268
Maybe
Security Update
3188399
https://www.microsoft.com/downloads/details.aspx?familyid=798a3367-cf4b-45b0-a808-0602cbbc0edc
3174302
10295
Maybe
Security Update
3118348
https://www.microsoft.com/downloads/details.aspx?familyid=f66d62d2-7d3a-41c1-a00d-2377e9b56e21
3115431
10628
Maybe
Security Update
3118348
https://www.microsoft.com/downloads/details.aspx?familyid=ffd14e33-ba80-466f-b77a-b7855005abb9
3115431
10630
Maybe
Security Update
3118348
https://www.microsoft.com/downloads/details.aspx?familyid=f66d62d2-7d3a-41c1-a00d-2377e9b56e21
3115431
10629
Maybe
Security Update
3118348
https://www.microsoft.com/downloads/details.aspx?familyid=ffd14e33-ba80-466f-b77a-b7855005abb9
3115431
10631
Maybe
Security Update
3118327
https://www.microsoft.com/downloads/details.aspx?familyid=f0ba5411-c983-4541-95e4-6f54eb4f1582
3115408
10770
Maybe
Security Update
3118327
https://www.microsoft.com/downloads/details.aspx?familyid=f0f949dc-2bf8-4470-8a57-ed753d5cc97e
3115408
10771
Maybe
Security Update
3118327
https://www.microsoft.com/downloads/details.aspx?familyid=f0ba5411-c983-4541-95e4-6f54eb4f1582
3115408
10772
Maybe
Security Update
3118327
https://www.microsoft.com/downloads/details.aspx?familyid=f0f949dc-2bf8-4470-8a57-ed753d5cc97e
3115408
10773
Maybe
Security Update
3193713
https://www.microsoft.com/downloads/details.aspx?familyid=8dff48ec-f9fe-45e7-a157-c1e5b10448da
3182373
10450
Maybe
Security Update
3193713
https://www.microsoft.com/downloads/details.aspx?familyid=8dff48ec-f9fe-45e7-a157-c1e5b10448da
3182373
10453
Maybe
Security Update
3193713
https://www.microsoft.com/downloads/details.aspx?familyid=8dff48ec-f9fe-45e7-a157-c1e5b10448da
3182373
10452
Maybe
Security Update
3193713
https://www.microsoft.com/downloads/details.aspx?familyid=8dff48ec-f9fe-45e7-a157-c1e5b10448da
3182373
10100
Maybe
Security Update
3193713
https://www.microsoft.com/downloads/details.aspx?familyid=8dff48ec-f9fe-45e7-a157-c1e5b10448da
3182373
10451
Maybe
Security Update
3193713
https://www.microsoft.com/downloads/details.aspx?familyid=8dff48ec-f9fe-45e7-a157-c1e5b10448da
3182373
10099
Maybe
Security Update
3189647
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3189647
3174305
10290
Maybe
Security Update
3188735
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3188735
3142041
9195-4393
Yes
Security Update
3188726
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3188726
3142041
9195-4393
Maybe
Security Only
3188735
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3188735
3142041
9195-9318
Yes
Security Update
3188726
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3188726
3142041
9195-9318
Maybe
Security Only
3188735
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3188735
3142041
9195-9316
Yes
Security Update
3188726
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3188726
3142041
9195-9316
Maybe
Security Only
3188735
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3188735
3142041
9195-9312
Yes
Security Update
3188726
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3188726
3142041
9195-9312
Maybe
Security Only
3188743
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3188743
3142045
2472-10482
Yes
Security Update
3188732
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3188732
MS16-039, 3142045
2472-10482
Security Only
3188743
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3188743
3142045
2472-10483
Yes
Security Update
3188732
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3188732
MS16-039, 3142045
2472-10483
Security Only
3192440
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192440
3185611
2472-10729
Yes
Security Update
3192440
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192440
3185611
2472-10735
Yes
Security Update
3192441
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192441
3185614
2472-10789
Yes
Security Update
3192441
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192441
3185614
2472-10788
Yes
Security Update
3194798
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3194798
3189866
2472-10852
Yes
Security Update
3194798
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3194798
3189866
2472-10853
Yes
Security Update
3188743
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3188743
3142045
2472-10543
Yes
Security Update
3188732
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3188732
MS16-039, 3142045
2472-10543
Security Only
3188743
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3188743
3142045
2472-10481
Yes
Security Update
3188732
https://www.microsoft.com/downloads/details.aspx?familyid=5b6ff53a-833b-431f-b124-11810a42fb95
MS16-039, 3142045
2472-10481
Security Only
3188741
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3188741
3142043
2472-10379
Yes
Security Update
3188731
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3188731
MS16-039, 3142043
2472-10379
Security Only
3188741
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3188741
3142043
2472-10378
Yes
Security Update
3188731
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3188731
MS16-039, 3142043
2472-10378
Security Only
3188740
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3188740
3142042
9495-10047
Yes
Security Update
3188730
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3188730
3142042
9495-10047
Maybe
Security Update
3188740
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3188740
3142042
9495-10051
Yes
Security Update
3188730
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3188730
MS16-039, 3142042
9495-10051
Security Only
3188730
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3188730
3142042
9495-10050
Maybe
Security Update
3188740
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3188740
3142042
9495-10049
Yes
Security Update
3188730
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3188730
3142042
9495-10049
Maybe
Security Update
3188740
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3188740
3142042
9495-10048
Yes
Security Update
3188730
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3188730
MS16-039, 3142042
9495-10048
Security Only
3189051
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3189051
10636-9316
Yes
Security Update
3189039
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3189039
3099869
10636-9316
Maybe
Security Only
3189051
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3189051
10636-4393
Yes
Security Update
3189039
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3189039
3099869
10636-4393
Maybe
Security Only
3189051
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3189051
10636-9312
Yes
Security Update
3189039
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3189039
3099869
10636-9312
Maybe
Security Only
3189051
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3189051
10636-9318
Yes
Security Update
3189039
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3189039
3099869
10636-9318
Maybe
Security Only
3189052
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3189052
10728-4393
Yes
Security Update
3189040
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3189040
3099874
10728-4393
Maybe
Security Only
3189052
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3189052
10728-9316
Yes
Security Update
3189040
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3189040
3099874
10728-9316
Maybe
Security Only
3189052
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3189052
10728-9312
Yes
Security Update
3189040
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3189040
3099874
10728-9312
Maybe
Security Only
3189052
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3189052
10728-9318
Yes
Security Update
3189040
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3189040
3099874
10728-9318
Maybe
Security Only
Mateusz Jurczyk of <a href="http://www.google.com/">Google Project Zero</a>
1.0
2016-10-11T07:00:00Z
<p>Information published.</p>
1.1
2016-11-08T08:00:00Z
<p>Revised bulletin to announce a detection change to address an issue in supersedence, specifically in WSUS environments where various updates applicable to Windows 7 SP1 and Windows Server 2008 R2 SP1 were incorrectly marked as being superseded. This is a detection change only. There were no changes to the update files. Customers who have already successfully installed the update do not need to take any action.</p>
2.0
2016-12-13T08:00:00Z
<p>Revised bulletin to announce the following updates have been rereleased with a detection change that addresses a supersedence issue that certain customers experienced when attempting to install the October Security Only updates.
◦ Security Only update 3192391 for all supported releases of Windows 7 and Windows Server 2008 R2. For more information, see Microsoft Knowledge Base Article 3192391.
◦ Security Only update 3192393 for Windows Server 2012. For more information, see Microsoft Knowledge Base Article 3192393.
◦ Security Only update 3192392 for Windows 8.1 and Windows Server 2012 R2. For more information, see Microsoft Knowledge Base Article 3192392.
These are detection changes only. There were no changes to the update files. Customers who have already successfully installed any of these updates do not need to take any action. For more information, see the Microsoft Knowledge Base article for the respective update.</p>
Windows Kernel Local Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists when the Windows Kernel API improperly allows a user to access sensitive registry information. An attacker who successfully exploited the vulnerability could gain access to user account information that is not intended for the user.</p>
<p>A locally authenticated attacker could exploit this vulnerability by running a specially crafted application.</p>
<p>The security update addresses the vulnerability by helping to ensure that the Windows Kernel API correctly restricts access to user account information.</p>
Windows Registry
CVE-2016-0079
10729
10735
10789
10788
10852
10853
Elevation of Privilege
10729
Elevation of Privilege
10735
Elevation of Privilege
10789
Elevation of Privilege
10788
Elevation of Privilege
10852
Elevation of Privilege
10853
Important
10729
Important
10735
Important
10789
Important
10788
Important
10852
Important
10853
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:N/A
3192440
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192440
3185611
10729
Yes
Security Update
3192440
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192440
3185611
10735
Yes
Security Update
3192441
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192441
3185614
10789
Yes
Security Update
3192441
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192441
3185614
10788
Yes
Security Update
3194798
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3194798
3189866
10852
Yes
Security Update
3194798
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3194798
3189866
10853
Yes
Security Update
James Forshaw of <a href="http://www.google.com/">Google Project Zero</a>
1.0
2016-10-11T07:00:00Z
<p>Information published.</p>
Windows Kernel Local Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists when the Windows Kernel API improperly allows a user to access sensitive registry information. An attacker who successfully exploited the vulnerability could gain access to user account information that is not intended for the user.</p>
<p>A locally authenticated attacker could exploit this vulnerability by running a specially crafted application.</p>
<p>The security update addresses the vulnerability by helping to ensure that the Windows Kernel API correctly restricts access to user account information.</p>
Windows Registry
CVE-2016-0075
10729
10735
10789
10788
10852
10853
10481
10482
10484
10378
10379
10483
10543
Elevation of Privilege
10729
Elevation of Privilege
10735
Elevation of Privilege
10789
Elevation of Privilege
10788
Elevation of Privilege
10852
Elevation of Privilege
10853
Elevation of Privilege
10481
Elevation of Privilege
10482
Elevation of Privilege
10484
Elevation of Privilege
10378
Elevation of Privilege
10379
Elevation of Privilege
10483
Elevation of Privilege
10543
Important
10729
Important
10735
Important
10789
Important
10788
Important
10852
Important
10853
Important
10481
Important
10482
Important
10484
Important
10378
Important
10379
Important
10483
Important
10543
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely
3192440
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192440
3185611
10729
Yes
Security Update
3192440
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192440
3185611
10735
Yes
Security Update
3192441
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192441
3185614
10789
Yes
Security Update
3192441
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192441
3185614
10788
Yes
Security Update
3194798
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3194798
3189866
10852
Yes
Security Update
3194798
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3194798
3189866
10853
Yes
Security Update
3185331
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185331
3185319
10481
Yes
Monthly Rollup
3192392
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192392
MS16-016, 3124280; MS16-097, 3178034; MS16-104, 3185319
10481
Security Only
3185331
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185331
3185319
10482
Yes
Monthly Rollup
3192392
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192392
MS16-016, 3124280; MS16-097, 3178034; MS16-101, 3167679; MS16-104, 3185319
10482
Security Only
3185331
3185319
10484
Yes
Monthly Rollup
3185332
https://www.microsoft.com/downloads/details.aspx?familyid=93b4d5dd-9784-4fb4-9c0c-9171a24efca5
3192393
10378
Yes
Monthly Rollup
3192393
https://www.microsoft.com/downloads/details.aspx?familyid=17dc5103-8380-440a-9e5b-a55cdc33388b
3185319
10378
Yes
Security Only
3185332
https://www.microsoft.com/downloads/details.aspx?familyid=93b4d5dd-9784-4fb4-9c0c-9171a24efca5
3192393
10379
Yes
Monthly Rollup
3192393
https://www.microsoft.com/downloads/details.aspx?familyid=17dc5103-8380-440a-9e5b-a55cdc33388b
3185319
10379
Yes
Security Only
3185331
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185331
3185319
10483
Yes
Monthly Rollup
3192392
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192392
MS16-016, 3124280; MS16-097, 3178034; MS16-101, 3167679; MS16-104, 3185319
10483
Security Only
3185331
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185331
3185319
10543
Yes
Monthly Rollup
3192392
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192392
MS16-016, 3124280; MS16-097, 3178034; MS16-101, 3167679; MS16-104, 3185319
10543
Security Only
James Forshaw of <a href="http://www.google.com/">Google Project Zero</a>
1.0
2016-10-11T07:00:00Z
<p>Information published.</p>
2.0
2016-12-13T08:00:00Z
<p>Revised bulletin to announce the following updates have been rereleased with a detection change that addresses a supersedence issue that certain customers experienced when attempting to install the October Security Only updates.
◦ Security Only update 3192391 for all supported releases of Windows 7 and Windows Server 2008 R2. For more information, see Microsoft Knowledge Base Article 3192391.
◦ Security Only update 3192393 for Windows Server 2012. For more information, see Microsoft Knowledge Base Article 3192393.
◦ Security Only update 3192392 for Windows 8.1 and Windows Server 2012 R2. For more information, see Microsoft Knowledge Base Article 3192392.
These are detection changes only. There were no changes to the update files. Customers who have already successfully installed any of these updates do not need to take any action. For more information, see the Microsoft Knowledge Base article for the respective update.</p>
Windows Kernel Local Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists when the Windows Kernel API improperly allows a user to access sensitive registry information. An attacker who successfully exploited the vulnerability could gain access to user account information that is not intended for the user.</p>
<p>A locally authenticated attacker could exploit this vulnerability by running a specially crafted application.</p>
<p>The security update addresses the vulnerability by helping to ensure that the Windows Kernel API correctly restricts access to user account information.</p>
Windows Registry
CVE-2016-0073
10729
10735
10789
10788
10852
10853
10481
10482
10484
10378
10379
10483
10543
Elevation of Privilege
10729
Elevation of Privilege
10735
Elevation of Privilege
10789
Elevation of Privilege
10788
Elevation of Privilege
10852
Elevation of Privilege
10853
Elevation of Privilege
10481
Elevation of Privilege
10482
Elevation of Privilege
10484
Elevation of Privilege
10378
Elevation of Privilege
10379
Elevation of Privilege
10483
Elevation of Privilege
10543
Important
10729
Important
10735
Important
10789
Important
10788
Important
10852
Important
10853
Important
10481
Important
10482
Important
10484
Important
10378
Important
10379
Important
10483
Important
10543
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely
3192440
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192440
3185611
10729
Yes
Security Update
3192440
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192440
3185611
10735
Yes
Security Update
3192441
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192441
3185614
10789
Yes
Security Update
3192441
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192441
3185614
10788
Yes
Security Update
3194798
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3194798
3189866
10852
Yes
Security Update
3194798
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3194798
3189866
10853
Yes
Security Update
3185331
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185331
3185319
10481
Yes
Monthly Rollup
3192392
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192392
MS16-016, 3124280; MS16-097, 3178034; MS16-104, 3185319
10481
Security Only
3185331
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185331
3185319
10482
Yes
Monthly Rollup
3192392
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192392
MS16-016, 3124280; MS16-097, 3178034; MS16-101, 3167679; MS16-104, 3185319
10482
Security Only
3185331
3185319
10484
Yes
Monthly Rollup
3185332
https://www.microsoft.com/downloads/details.aspx?familyid=93b4d5dd-9784-4fb4-9c0c-9171a24efca5
3192393
10378
Yes
Monthly Rollup
3192393
https://www.microsoft.com/downloads/details.aspx?familyid=17dc5103-8380-440a-9e5b-a55cdc33388b
3185319
10378
Yes
Security Only
3185332
https://www.microsoft.com/downloads/details.aspx?familyid=93b4d5dd-9784-4fb4-9c0c-9171a24efca5
3192393
10379
Yes
Monthly Rollup
3192393
https://www.microsoft.com/downloads/details.aspx?familyid=17dc5103-8380-440a-9e5b-a55cdc33388b
3185319
10379
Yes
Security Only
3185331
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185331
3185319
10483
Yes
Monthly Rollup
3192392
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192392
MS16-016, 3124280; MS16-097, 3178034; MS16-101, 3167679; MS16-104, 3185319
10483
Security Only
3185331
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185331
3185319
10543
Yes
Monthly Rollup
3192392
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192392
MS16-016, 3124280; MS16-097, 3178034; MS16-101, 3167679; MS16-104, 3185319
10543
Security Only
James Forshaw of <a href="http://www.google.com/">Google Project Zero</a>
1.0
2016-10-11T07:00:00Z
<p>Information published.</p>
2.0
2016-12-13T08:00:00Z
<p>Revised bulletin to announce the following updates have been rereleased with a detection change that addresses a supersedence issue that certain customers experienced when attempting to install the October Security Only updates.
◦ Security Only update 3192391 for all supported releases of Windows 7 and Windows Server 2008 R2. For more information, see Microsoft Knowledge Base Article 3192391.
◦ Security Only update 3192393 for Windows Server 2012. For more information, see Microsoft Knowledge Base Article 3192393.
◦ Security Only update 3192392 for Windows 8.1 and Windows Server 2012 R2. For more information, see Microsoft Knowledge Base Article 3192392.
These are detection changes only. There were no changes to the update files. Customers who have already successfully installed any of these updates do not need to take any action. For more information, see the Microsoft Knowledge Base article for the respective update.</p>
Windows Kernel Local Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists when the Windows Kernel API improperly allows a user to access sensitive registry information. An attacker who successfully exploited the vulnerability could gain access to user account information that is not intended for the user.</p>
<p>A locally authenticated attacker could exploit this vulnerability by running a specially crafted application.</p>
<p>The security update addresses the vulnerability by helping to ensure that the Windows Kernel API correctly restricts access to user account information.</p>
Windows Registry
CVE-2016-0070
10729
10735
10789
10788
10852
10853
10047
10048
10481
10482
10484
9312
10287
9311
9318
9344
10050
10051
10049
10378
10379
10483
10543
4393
9316
Elevation of Privilege
10729
Elevation of Privilege
10735
Elevation of Privilege
10789
Elevation of Privilege
10788
Elevation of Privilege
10852
Elevation of Privilege
10853
Elevation of Privilege
10047
Elevation of Privilege
10048
Elevation of Privilege
10481
Elevation of Privilege
10482
Elevation of Privilege
10484
Elevation of Privilege
9312
Elevation of Privilege
10287
Elevation of Privilege
9311
Elevation of Privilege
9318
Elevation of Privilege
9344
Elevation of Privilege
10050
Elevation of Privilege
10051
Elevation of Privilege
10049
Elevation of Privilege
10378
Elevation of Privilege
10379
Elevation of Privilege
10483
Elevation of Privilege
10543
Elevation of Privilege
4393
Elevation of Privilege
9316
Important
10729
Important
10735
Important
10789
Important
10788
Important
10852
Important
10853
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9311
Important
9318
Important
9344
Important
10050
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Important
4393
Important
9316
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely
3192440
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192440
3185611
10729
Yes
Security Update
3192440
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192440
3185611
10735
Yes
Security Update
3192441
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192441
3185614
10789
Yes
Security Update
3192441
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192441
3185614
10788
Yes
Security Update
3194798
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3194798
3189866
10852
Yes
Security Update
3194798
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3194798
3189866
10853
Yes
Security Update
3185330
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185330
3175024
10047
Yes
Monthly Rollup
3192391
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192391
3175024
10047
Yes
Security Only
3185330
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185330
3175024
10048
Yes
Monthly Rollup
3192391
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192391
3175024
10048
Yes
Security Only
3185331
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185331
3185319
10481
Yes
Monthly Rollup
3192392
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192392
MS16-016, 3124280; MS16-097, 3178034; MS16-104, 3185319
10481
Security Only
3185331
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185331
3185319
10482
Yes
Monthly Rollup
3192392
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192392
MS16-016, 3124280; MS16-097, 3178034; MS16-101, 3167679; MS16-104, 3185319
10482
Security Only
3185331
3185319
10484
Yes
Monthly Rollup
3191256
https://www.microsoft.com/downloads/details.aspx?familyid=57d112bd-624c-4b8d-b68b-f76ea18f505f
3175024
9312
Yes
Security Update
3191256
https://www.microsoft.com/downloads/details.aspx?familyid=57d112bd-624c-4b8d-b68b-f76ea18f505f
3175024
10287
Yes
Security Update
3191256
https://www.microsoft.com/downloads/details.aspx?familyid=8103ddaf-ff52-4190-aee4-df3ace21fab2
3175024
9311
Yes
Security Update
3191256
https://www.microsoft.com/downloads/details.aspx?familyid=10e6c817-1d79-4a32-89d6-a1bd2e15be0e
3175024
9318
Yes
Security Update
3191256
https://www.microsoft.com/downloads/details.aspx?familyid=10e6c817-1d79-4a32-89d6-a1bd2e15be0e
3175024
9344
Yes
Security Update
3185330
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185330
3175024
10050
Yes
Monthly Rollup
3192391
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192391
3175024
10050
Yes
Security Only
3185330
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185330
3175024
10051
Yes
Monthly Rollup
3192391
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192391
3175024
10051
Yes
Security Only
3185330
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185330
3175024
10049
Yes
Monthly Rollup
3192391
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192391
3175024
10049
Yes
Security Only
3185332
https://www.microsoft.com/downloads/details.aspx?familyid=93b4d5dd-9784-4fb4-9c0c-9171a24efca5
3192393
10378
Yes
Monthly Rollup
3192393
https://www.microsoft.com/downloads/details.aspx?familyid=17dc5103-8380-440a-9e5b-a55cdc33388b
3185319
10378
Yes
Security Only
3185332
https://www.microsoft.com/downloads/details.aspx?familyid=93b4d5dd-9784-4fb4-9c0c-9171a24efca5
3192393
10379
Yes
Monthly Rollup
3192393
https://www.microsoft.com/downloads/details.aspx?familyid=17dc5103-8380-440a-9e5b-a55cdc33388b
3185319
10379
Yes
Security Only
3185331
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185331
3185319
10483
Yes
Monthly Rollup
3192392
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192392
MS16-016, 3124280; MS16-097, 3178034; MS16-101, 3167679; MS16-104, 3185319
10483
Security Only
3185331
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185331
3185319
10543
Yes
Monthly Rollup
3192392
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192392
MS16-016, 3124280; MS16-097, 3178034; MS16-101, 3167679; MS16-104, 3185319
10543
Security Only
3191256
https://www.microsoft.com/downloads/details.aspx?familyid=57d112bd-624c-4b8d-b68b-f76ea18f505f
3175024
4393
Yes
Security Update
3191256
https://www.microsoft.com/downloads/details.aspx?familyid=10e6c817-1d79-4a32-89d6-a1bd2e15be0e
3175024
9316
Yes
Security Update
Mateusz Jurczyk of <a href="https://www.google.com">Google Project Zero</a>
James Forshaw of <a href="<http://www.google.com/">Google Project Zero</a>
Fortinet’s <a href="http://fortiguard.com/">FortiGuard Labs</a>
1.0
2016-10-11T07:00:00Z
<p>Information published.</p>
2.0
2016-12-13T08:00:00Z
<p>Revised bulletin to announce the following updates have been rereleased with a detection change that addresses a supersedence issue that certain customers experienced when attempting to install the October Security Only updates.
◦ Security Only update 3192391 for all supported releases of Windows 7 and Windows Server 2008 R2. For more information, see Microsoft Knowledge Base Article 3192391.
◦ Security Only update 3192393 for Windows Server 2012. For more information, see Microsoft Knowledge Base Article 3192393.
◦ Security Only update 3192392 for Windows 8.1 and Windows Server 2012 R2. For more information, see Microsoft Knowledge Base Article 3192392.
These are detection changes only. There were no changes to the update files. Customers who have already successfully installed any of these updates do not need to take any action. For more information, see the Microsoft Knowledge Base article for the respective update.</p>
Win32k Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system.</p>
<p>The update addresses this vulnerability by correcting how the Windows kernel-mode driver handles objects in memory.</p>
Windows Kernel-Mode Drivers
CVE-2016-7211
10729
10735
10789
10788
10852
10853
10047
10048
10481
10482
10484
9312
10287
9311
9318
9344
10050
10051
10049
10378
10379
10483
10543
4393
9316
Elevation of Privilege
10729
Elevation of Privilege
10735
Elevation of Privilege
10789
Elevation of Privilege
10788
Elevation of Privilege
10852
Elevation of Privilege
10853
Elevation of Privilege
10047
Elevation of Privilege
10048
Elevation of Privilege
10481
Elevation of Privilege
10482
Elevation of Privilege
10484
Elevation of Privilege
9312
Elevation of Privilege
10287
Elevation of Privilege
9311
Elevation of Privilege
9318
Elevation of Privilege
9344
Elevation of Privilege
10050
Elevation of Privilege
10051
Elevation of Privilege
10049
Elevation of Privilege
10378
Elevation of Privilege
10379
Elevation of Privilege
10483
Elevation of Privilege
10543
Elevation of Privilege
4393
Elevation of Privilege
9316
Important
10729
Important
10735
Important
10789
Important
10788
Important
10852
Important
10853
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9311
Important
9318
Important
9344
Important
10050
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Important
4393
Important
9316
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely
3192440
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192440
3185611
10729
Yes
Security Update
3192440
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192440
3185611
10735
Yes
Security Update
3192441
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192441
3185614
10789
Yes
Security Update
3192441
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192441
3185614
10788
Yes
Security Update
3194798
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3194798
3189866
10852
Yes
Security Update
3194798
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3194798
3189866
10853
Yes
Security Update
3185330
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185330
3175024
10047
Yes
Monthly Rollup
3192391
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192391
MS16-016, 3124280; MS16-031, 3140410; MS16-034, 3139852; MS16-039, 3145739; MS16-060, 3153171; MS16-062, 3153199; MS16-073, 3161664; MS16-097, 3178034; MS16-098, 3177725; MS16-101, 3167679; MS16-111, 3175024
10047
Security Only
3185330
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185330
3175024
10048
Yes
Monthly Rollup
3192391
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192391
3175024
10048
Yes
Security Only
3185331
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185331
3185319
10481
Yes
Monthly Rollup
3192392
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192392
MS16-016, 3124280; MS16-097, 3178034; MS16-104, 3185319
10481
Security Only
3185331
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185331
3185319
10482
Yes
Monthly Rollup
3192392
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192392
MS16-016, 3124280; MS16-097, 3178034; MS16-101, 3167679; MS16-104, 3185319
10482
Security Only
3185331
3185319
10484
Yes
Monthly Rollup
3191203
https://www.microsoft.com/downloads/details.aspx?familyid=20843ec5-7bc3-4264-9003-bd656f72535e
3177725
9312
Yes
Security Update
3191203
https://www.microsoft.com/downloads/details.aspx?familyid=20843ec5-7bc3-4264-9003-bd656f72535e
3177725
10287
Yes
Security Update
3191203
https://www.microsoft.com/downloads/details.aspx?familyid=10fff467-bfe7-4b31-bec5-b3126a271c88
3177725
9311
Yes
Security Update
3191203
https://www.microsoft.com/downloads/details.aspx?familyid=4da722a9-e219-47a9-8108-2e0b04b5488d
3177725
9318
Yes
Security Update
3191203
https://www.microsoft.com/downloads/details.aspx?familyid=4da722a9-e219-47a9-8108-2e0b04b5488d
3177725
9344
Yes
Security Update
3185330
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185330
3175024
10050
Yes
Monthly Rollup
3192391
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192391
3175024
10050
Yes
Security Only
3185330
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185330
3175024
10051
Yes
Monthly Rollup
3192391
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192391
3175024
10051
Yes
Security Only
3185330
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185330
3175024
10049
Yes
Monthly Rollup
3192391
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192391
3175024
10049
Yes
Security Only
3185332
https://www.microsoft.com/downloads/details.aspx?familyid=93b4d5dd-9784-4fb4-9c0c-9171a24efca5
3192393
10378
Yes
Monthly Rollup
3192393
https://www.microsoft.com/downloads/details.aspx?familyid=17dc5103-8380-440a-9e5b-a55cdc33388b
3185319
10378
Yes
Security Only
3185332
https://www.microsoft.com/downloads/details.aspx?familyid=93b4d5dd-9784-4fb4-9c0c-9171a24efca5
3192393
10379
Yes
Monthly Rollup
3192393
https://www.microsoft.com/downloads/details.aspx?familyid=17dc5103-8380-440a-9e5b-a55cdc33388b
3185319
10379
Yes
Security Only
3185331
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185331
3185319
10483
Yes
Monthly Rollup
3192392
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192392
MS16-016, 3124280; MS16-097, 3178034; MS16-101, 3167679; MS16-104, 3185319
10483
Security Only
3185331
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185331
3185319
10543
Yes
Monthly Rollup
3192392
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192392
MS16-016, 3124280; MS16-097, 3178034; MS16-101, 3167679; MS16-104, 3185319
10543
Security Only
3191203
https://www.microsoft.com/downloads/details.aspx?familyid=20843ec5-7bc3-4264-9003-bd656f72535e
3177725
4393
Yes
Security Update
3191203
https://www.microsoft.com/downloads/details.aspx?familyid=4da722a9-e219-47a9-8108-2e0b04b5488d
3177725
9316
Yes
Security Update
<a href="https://twitter.com/TinySecEx">fanxiaocao</a> (@TinySec), and <a href="http://weibo.com/jfpan">pjf</a> of IceSword Lab, <a href="http://www.360.cn/">Qihoo 360</a>
1.0
2016-10-11T07:00:00Z
<p>Information published.</p>
1.1
2016-10-11T07:00:00Z
<p>Bulletin revised to correct a CVE ID. CVE-2016-7191 has been changed to CVE-2016-7211. This is an informational change only. Customers who have successfully installed the updates do not need to take any further action.</p>
2.0
2016-12-13T08:00:00Z
<p>Revised bulletin to announce the following updates have been rereleased with a detection change that addresses a supersedence issue that certain customers experienced when attempting to install the October Security Only updates.
◦ Security Only update 3192391 for all supported releases of Windows 7 and Windows Server 2008 R2. For more information, see Microsoft Knowledge Base Article 3192391.
◦ Security Only update 3192393 for Windows Server 2012. For more information, see Microsoft Knowledge Base Article 3192393.
◦ Security Only update 3192392 for Windows 8.1 and Windows Server 2012 R2. For more information, see Microsoft Knowledge Base Article 3192392.
These are detection changes only. There were no changes to the update files. Customers who have already successfully installed any of these updates do not need to take any action. For more information, see the Microsoft Knowledge Base article for the respective update.</p>
Graphics Component Font Parsing Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory. An attacker who successfully exploits this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system.</p>
<p>The update addresses the vulnerability by correcting the way in which the Windows Graphics Component handles objects in memory, preventing unintended elevation from user mode.</p>
<p><strong>I am running Office 2010, which is listed as affected software. Why am I not being offered the update?</strong>
The update is not applicable to Office 2010 on Windows Vista and later versions of Windows because the vulnerable code is not present.</p>
<p><strong>I am being offered this update for software that is not specifically indicated as being affected in the Affected Software and Vulnerability Severity Ratings table. Why am I being offered this update?</strong>
When updates address vulnerable code that exists in a component that is shared between multiple Microsoft Office products or shared between multiple versions of the same Microsoft Office product, the update is considered to be applicable to all supported products and versions that contain the vulnerable component.</p>
<p>For example, when an update applies to Microsoft Office 2007 products, only Microsoft Office 2007 may be specifically listed in the Affected Software table. However, the update could apply to Microsoft Word 2007, Microsoft Excel 2007, Microsoft Visio 2007, Microsoft Compatibility Pack, Microsoft Excel Viewer, or any other Microsoft Office 2007 product that is not specifically listed in the Affected Software table. Furthermore, when an update applies to Microsoft Office 2010 products, only Microsoft Office 2010 may be specifically listed in the Affected Software table. However, the update could apply to Microsoft Word 2010, Microsoft Excel 2010, Microsoft Visio 2010, Microsoft Visio Viewer, or any other Microsoft Office 2010 product that is not specifically listed in the Affected Software table.</p>
<p>For more information on this behavior and recommended actions, see <a href="https://support.microsoft.com/kb/830335">Microsoft Knowledge Base Article 830335</a>. For a list of Microsoft Office products an update may apply to, refer to the Microsoft Knowledge Base Article associated with the specific update.</p>
<p><strong>Are there any prerequisites for any of the updates offered in this bulletin for affected editions of Microsoft Lync 2013 (Skype for Business)?</strong>
Yes. Customers running affected editions of Microsoft Lync 2013 (Skype for Business) must first install the 2965218 update for Office 2013 released in April 2015, and then the 3039779 security update released in May 2015. For more information about these two prerequisite updates, see:</p>
<p><a href="https://support.microsoft.com/en-us/kb/2965218">Knowledge Base Article 2965218</a>
<a href="https://support.microsoft.com/en-us/kb/3039779">Knowledge Base Article 3039779</a> </p>
<p><strong>Are there any related non-security updates that customers should install along with the Microsoft Live Meeting Console security update?</strong>
Yes, in addition to releasing a security update for Microsoft Live Meeting Console, Microsoft has released the following non-security updates for the OCS Conferencing Addin for Outlook. Where applicable, Microsoft recommends that customers install these updates to keep their systems up-to-date:</p>
<p>OCS Conferencing Addin for Outlook (32-bit) (3189648)
OCS Conferencing Addin for Outlook (64-bit) (3189648)</p>
<p>See<a href="https://support.microsoft.com/kb/3189648"> Microsoft Knowledge Base Article 3189648</a> for more information.</p>
<p><strong>Why is the Lync 2010 Attendee (user level install) update only available from the Microsoft Download Center?</strong>
Microsoft is releasing the update for Lync 2010 Attendee (user level install) to the Microsoft Download Center only. Because the user level installation of Lync 2010 Attendee is handled through a Lync session, distribution methods such as automatic updating are not appropriate for this type of installation scenario.</p>
Microsoft Graphics Component
CVE-2016-7182
10150
10521
10522
1160
10069
10303
10268
10295
10628
10630
10629
10631
10770
10771
10772
10773
10290
10729
10735
10789
10788
10852
10853
10047
10048
10481
10482
10484
9312
10287
9311
9318
9344
10050
10051
10049
10378
10379
10483
10543
4393
9316
Elevation of Privilege
10150
Elevation of Privilege
10521
Elevation of Privilege
10522
Elevation of Privilege
1160
Elevation of Privilege
10069
Elevation of Privilege
10303
Elevation of Privilege
10268
Elevation of Privilege
10295
Elevation of Privilege
10628
Elevation of Privilege
10630
Elevation of Privilege
10629
Elevation of Privilege
10631
Elevation of Privilege
10770
Elevation of Privilege
10771
Elevation of Privilege
10772
Elevation of Privilege
10773
Elevation of Privilege
10290
Elevation of Privilege
10729
Elevation of Privilege
10735
Elevation of Privilege
10789
Elevation of Privilege
10788
Elevation of Privilege
10852
Elevation of Privilege
10853
Elevation of Privilege
10047
Elevation of Privilege
10048
Elevation of Privilege
10481
Elevation of Privilege
10482
Elevation of Privilege
10484
Elevation of Privilege
9312
Elevation of Privilege
10287
Elevation of Privilege
9311
Elevation of Privilege
9318
Elevation of Privilege
9344
Elevation of Privilege
10050
Elevation of Privilege
10051
Elevation of Privilege
10049
Elevation of Privilege
10378
Elevation of Privilege
10379
Elevation of Privilege
10483
Elevation of Privilege
10543
Elevation of Privilege
4393
Elevation of Privilege
9316
Important
10150
Important
10521
Important
10522
Important
1160
Important
10069
Important
10303
Important
10268
Important
10295
Important
10628
Important
10630
Important
10629
Important
10631
Important
10770
Important
10771
Important
10772
Important
10773
Important
10290
Important
10729
Important
10735
Important
10789
Important
10788
Important
10852
Important
10853
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9311
Important
9318
Important
9344
Important
10050
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Important
4393
Important
9316
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation More Likely
3118301
https://www.microsoft.com/downloads/details.aspx?familyid=6b34f57a-8e6e-48ee-9d28-3db1223301f7
3115109
10150
Maybe
Security Update
3118317
https://www.microsoft.com/downloads/details.aspx?familyid=1faa41d7-d702-4f6b-a065-8542c2b4ef74
3115131
10521
Maybe
Security Update
3118317
https://www.microsoft.com/downloads/details.aspx?familyid=bd1b477e-7425-42e1-813a-3e7efb848e9b
3115131
10522
Maybe
Security Update
3118394
https://www.microsoft.com/downloads/details.aspx?familyid=37423544-2eda-4532-a55d-fb810b85d214
3115481
1160
Maybe
Security Update
3188397
https://www.microsoft.com/downloads/details.aspx?familyid=ed3e2f47-a13c-46d5-8a52-83398a3a4610
3174301
10069
Maybe
Security Update
3188397
https://www.microsoft.com/downloads/details.aspx?familyid=ed3e2f47-a13c-46d5-8a52-83398a3a4610
3174301
10303
Maybe
Security Update
3188400
https://www.microsoft.com/downloads/details.aspx?familyid=da3a99c9-4ddc-4602-a2b3-9a39e9de8f7c
3174304
10268
Maybe
Security Update
3188399
https://www.microsoft.com/downloads/details.aspx?familyid=798a3367-cf4b-45b0-a808-0602cbbc0edc
3174302
10295
Maybe
Security Update
3118348
https://www.microsoft.com/downloads/details.aspx?familyid=f66d62d2-7d3a-41c1-a00d-2377e9b56e21
3115431
10628
Maybe
Security Update
3118348
https://www.microsoft.com/downloads/details.aspx?familyid=ffd14e33-ba80-466f-b77a-b7855005abb9
3115431
10630
Maybe
Security Update
3118348
https://www.microsoft.com/downloads/details.aspx?familyid=f66d62d2-7d3a-41c1-a00d-2377e9b56e21
3115431
10629
Maybe
Security Update
3118348
https://www.microsoft.com/downloads/details.aspx?familyid=ffd14e33-ba80-466f-b77a-b7855005abb9
3115431
10631
Maybe
Security Update
3118327
https://www.microsoft.com/downloads/details.aspx?familyid=f0ba5411-c983-4541-95e4-6f54eb4f1582
3115408
10770
Maybe
Security Update
3118327
https://www.microsoft.com/downloads/details.aspx?familyid=f0f949dc-2bf8-4470-8a57-ed753d5cc97e
3115408
10771
Maybe
Security Update
3118327
https://www.microsoft.com/downloads/details.aspx?familyid=f0ba5411-c983-4541-95e4-6f54eb4f1582
3115408
10772
Maybe
Security Update
3118327
https://www.microsoft.com/downloads/details.aspx?familyid=f0f949dc-2bf8-4470-8a57-ed753d5cc97e
3115408
10773
Maybe
Security Update
3189647
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3189647
3174305
10290
Maybe
Security Update
3192440
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192440
3185611
10729
Yes
Security Update
3192440
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192440
3185611
10735
Yes
Security Update
3192441
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192441
3185614
10789
Yes
Security Update
3192441
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192441
3185614
10788
Yes
Security Update
3194798
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3194798
3189866
10852
Yes
Security Update
3194798
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3194798
3189866
10853
Yes
Security Update
3185330
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185330
3175024
10047
Yes
Monthly Rollup
3192391
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192391
3175024
10047
Yes
Security Only
3185330
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185330
3175024
10048
Yes
Monthly Rollup
3192391
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192391
3175024
10048
Yes
Security Only
3185331
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185331
3185319
10481
Yes
Monthly Rollup
3192392
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192392
MS16-016, 3124280; MS16-097, 3178034; MS16-104, 3185319
10481
Security Only
3185331
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185331
3185319
10482
Yes
Monthly Rollup
3192392
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192392
MS16-016, 3124280; MS16-097, 3178034; MS16-101, 3167679; MS16-104, 3185319
10482
Security Only
3185331
3185319
10484
Yes
Monthly Rollup
3191203
https://www.microsoft.com/downloads/details.aspx?familyid=20843ec5-7bc3-4264-9003-bd656f72535e
3177725
9312
Yes
Security Update
3191203
https://www.microsoft.com/downloads/details.aspx?familyid=20843ec5-7bc3-4264-9003-bd656f72535e
3177725
10287
Yes
Security Update
3191203
https://www.microsoft.com/downloads/details.aspx?familyid=10fff467-bfe7-4b31-bec5-b3126a271c88
3177725
9311
Yes
Security Update
3191203
https://www.microsoft.com/downloads/details.aspx?familyid=4da722a9-e219-47a9-8108-2e0b04b5488d
3177725
9318
Yes
Security Update
3191203
https://www.microsoft.com/downloads/details.aspx?familyid=4da722a9-e219-47a9-8108-2e0b04b5488d
3177725
9344
Yes
Security Update
3185330
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185330
3175024
10050
Yes
Monthly Rollup
3192391
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192391
3175024
10050
Yes
Security Only
3185330
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185330
3175024
10051
Yes
Monthly Rollup
3192391
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192391
3175024
10051
Yes
Security Only
3185330
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185330
3175024
10049
Yes
Monthly Rollup
3192391
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192391
3175024
10049
Yes
Security Only
3185332
https://www.microsoft.com/downloads/details.aspx?familyid=93b4d5dd-9784-4fb4-9c0c-9171a24efca5
3192393
10378
Yes
Monthly Rollup
3192393
https://www.microsoft.com/downloads/details.aspx?familyid=17dc5103-8380-440a-9e5b-a55cdc33388b
3185319
10378
Yes
Security Only
3185332
https://www.microsoft.com/downloads/details.aspx?familyid=93b4d5dd-9784-4fb4-9c0c-9171a24efca5
3192393
10379
Yes
Monthly Rollup
3192393
https://www.microsoft.com/downloads/details.aspx?familyid=17dc5103-8380-440a-9e5b-a55cdc33388b
3185319
10379
Yes
Security Only
3185331
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185331
3185319
10483
Yes
Monthly Rollup
3192392
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192392
MS16-016, 3124280; MS16-097, 3178034; MS16-101, 3167679; MS16-104, 3185319
10483
Security Only
3185331
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185331
3185319
10543
Yes
Monthly Rollup
3192392
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192392
MS16-016, 3124280; MS16-097, 3178034; MS16-101, 3167679; MS16-104, 3185319
10543
Security Only
3191203
https://www.microsoft.com/downloads/details.aspx?familyid=20843ec5-7bc3-4264-9003-bd656f72535e
3177725
4393
Yes
Security Update
3191203
https://www.microsoft.com/downloads/details.aspx?familyid=4da722a9-e219-47a9-8108-2e0b04b5488d
3177725
9316
Yes
Security Update
Mateusz Jurczyk of <a href="http://www.google.com/">Google Project Zero</a>
1.0
2016-10-11T07:00:00Z
<p>Information published.</p>
1.1
2016-11-08T08:00:00Z
<p>Revised bulletin to announce a detection change to address an issue in supersedence, specifically in WSUS environments where various updates applicable to Windows 7 SP1 and Windows Server 2008 R2 SP1 were incorrectly marked as being superseded. This is a detection change only. There were no changes to the update files. Customers who have already successfully installed the update do not need to take any action.</p>
2.0
2016-12-13T08:00:00Z
<p>Revised bulletin to announce the following updates have been rereleased with a detection change that addresses a supersedence issue that certain customers experienced when attempting to install the October Security Only updates.
◦ Security Only update 3192391 for all supported releases of Windows 7 and Windows Server 2008 R2. For more information, see Microsoft Knowledge Base Article 3192391.
◦ Security Only update 3192393 for Windows Server 2012. For more information, see Microsoft Knowledge Base Article 3192393.
◦ Security Only update 3192392 for Windows 8.1 and Windows Server 2012 R2. For more information, see Microsoft Knowledge Base Article 3192392.
These are detection changes only. There were no changes to the update files. Customers who have already successfully installed any of these updates do not need to take any action. For more information, see the Microsoft Knowledge Base article for the respective update.</p>
Win32k Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system.</p>
<p>The update addresses this vulnerability by correcting how the Windows kernel-mode driver handles objects in memory.</p>
Windows Kernel-Mode Drivers
CVE-2016-7185
10729
10735
10789
10788
10852
10853
10047
10048
10481
10482
10484
9312
10287
9311
9318
9344
10050
10051
10049
10378
10379
10483
10543
4393
9316
Elevation of Privilege
10729
Elevation of Privilege
10735
Elevation of Privilege
10789
Elevation of Privilege
10788
Elevation of Privilege
10852
Elevation of Privilege
10853
Elevation of Privilege
10047
Elevation of Privilege
10048
Elevation of Privilege
10481
Elevation of Privilege
10482
Elevation of Privilege
10484
Elevation of Privilege
9312
Elevation of Privilege
10287
Elevation of Privilege
9311
Elevation of Privilege
9318
Elevation of Privilege
9344
Elevation of Privilege
10050
Elevation of Privilege
10051
Elevation of Privilege
10049
Elevation of Privilege
10378
Elevation of Privilege
10379
Elevation of Privilege
10483
Elevation of Privilege
10543
Elevation of Privilege
4393
Elevation of Privilege
9316
Important
10729
Important
10735
Important
10789
Important
10788
Important
10852
Important
10853
Important
10047
Important
10048
Important
10481
Important
10482
Important
10484
Important
9312
Important
10287
Important
9311
Important
9318
Important
9344
Important
10050
Important
10051
Important
10049
Important
10378
Important
10379
Important
10483
Important
10543
Important
4393
Important
9316
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:Permanent
3192440
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192440
3185611
10729
Yes
Security Update
3192440
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192440
3185611
10735
Yes
Security Update
3192441
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192441
3185614
10789
Yes
Security Update
3192441
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192441
3185614
10788
Yes
Security Update
3194798
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3194798
3189866
10852
Yes
Security Update
3194798
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3194798
3189866
10853
Yes
Security Update
3185330
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185330
3175024
10047
Yes
Monthly Rollup
3192391
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192391
3175024
10047
Yes
Security Only
3185330
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185330
3175024
10048
Yes
Monthly Rollup
3192391
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192391
3175024
10048
Yes
Security Only
3185331
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185331
3185319
10481
Yes
Monthly Rollup
3192392
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192392
MS16-016, 3124280; MS16-097, 3178034; MS16-104, 3185319
10481
Security Only
3185331
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185331
3185319
10482
Yes
Monthly Rollup
3192392
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192392
MS16-016, 3124280; MS16-097, 3178034; MS16-101, 3167679; MS16-104, 3185319
10482
Security Only
3185331
3185319
10484
Yes
Monthly Rollup
3183431
https://www.microsoft.com/downloads/details.aspx?familyid=08e4b860-b4ee-4b93-80e8-debdfb14c068
3124280
9312
Yes
Security Update
3183431
https://www.microsoft.com/downloads/details.aspx?familyid=08e4b860-b4ee-4b93-80e8-debdfb14c068
3124280
10287
Yes
Security Update
3183431
https://www.microsoft.com/downloads/details.aspx?familyid=f0c05379-bb89-4f67-a562-e51fae5a6711
3124280
9311
Yes
Security Update
3183431
https://www.microsoft.com/downloads/details.aspx?familyid=39995d45-b583-4c9d-b1b8-7a3d0fb1d25b
3124280
9318
Yes
Security Update
3183431
https://www.microsoft.com/downloads/details.aspx?familyid=39995d45-b583-4c9d-b1b8-7a3d0fb1d25b
3124280
9344
Yes
Security Update
3185330
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185330
3175024
10050
Yes
Monthly Rollup
3192391
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192391
3175024
10050
Yes
Security Only
3185330
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185330
3175024
10051
Yes
Monthly Rollup
3192391
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192391
3175024
10051
Yes
Security Only
3185330
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185330
3175024
10049
Yes
Monthly Rollup
3192391
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192391
3175024
10049
Yes
Security Only
3185332
https://www.microsoft.com/downloads/details.aspx?familyid=93b4d5dd-9784-4fb4-9c0c-9171a24efca5
3192393
10378
Yes
Monthly Rollup
3192393
https://www.microsoft.com/downloads/details.aspx?familyid=17dc5103-8380-440a-9e5b-a55cdc33388b
3185319
10378
Yes
Security Only
3185332
https://www.microsoft.com/downloads/details.aspx?familyid=93b4d5dd-9784-4fb4-9c0c-9171a24efca5
3192393
10379
Yes
Monthly Rollup
3192393
https://www.microsoft.com/downloads/details.aspx?familyid=17dc5103-8380-440a-9e5b-a55cdc33388b
3185319
10379
Yes
Security Only
3185331
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185331
3185319
10483
Yes
Monthly Rollup
3192392
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192392
MS16-016, 3124280; MS16-097, 3178034; MS16-101, 3167679; MS16-104, 3185319
10483
Security Only
3185331
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185331
3185319
10543
Yes
Monthly Rollup
3192392
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192392
MS16-016, 3124280; MS16-097, 3178034; MS16-101, 3167679; MS16-104, 3185319
10543
Security Only
3183431
https://www.microsoft.com/downloads/details.aspx?familyid=08e4b860-b4ee-4b93-80e8-debdfb14c068
3124280
4393
Yes
Security Update
3183431
https://www.microsoft.com/downloads/details.aspx?familyid=39995d45-b583-4c9d-b1b8-7a3d0fb1d25b
3124280
9316
Yes
Security Update
James Forshaw of <a href="http://www.google.com/">Google Project Zero</a>
1.0
2016-10-11T07:00:00Z
<p>Information published.</p>
2.0
2016-12-13T08:00:00Z
<p>Revised bulletin to announce the following updates have been rereleased with a detection change that addresses a supersedence issue that certain customers experienced when attempting to install the October Security Only updates.
◦ Security Only update 3192391 for all supported releases of Windows 7 and Windows Server 2008 R2. For more information, see Microsoft Knowledge Base Article 3192391.
◦ Security Only update 3192393 for Windows Server 2012. For more information, see Microsoft Knowledge Base Article 3192393.
◦ Security Only update 3192392 for Windows 8.1 and Windows Server 2012 R2. For more information, see Microsoft Knowledge Base Article 3192392.
These are detection changes only. There were no changes to the update files. Customers who have already successfully installed any of these updates do not need to take any action. For more information, see the Microsoft Knowledge Base article for the respective update.</p>
Windows Diagnostics Hub Elevation of Privilege Vulnerability
<p>An elevation of privilege vulnerability exists when the Windows Diagnostics Hub Standard Collector Service fails to properly sanitize input, leading to an unsecure library-loading behavior. An attacker who successfully exploited this vulnerability could run arbitrary code with elevated system privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application.</p>
<p>The security update addresses the vulnerability by correcting how the Windows Diagnostics Hub Standard Collector Service sanitizes input, to help preclude unintended elevated system privileges.</p>
Diagnostics Hub
CVE-2016-7188
10729
10735
10789
10788
10852
10853
Elevation of Privilege
10729
Elevation of Privilege
10735
Elevation of Privilege
10789
Elevation of Privilege
10788
Elevation of Privilege
10852
Elevation of Privilege
10853
Important
10729
Important
10735
Important
10789
Important
10788
Important
10852
Important
10853
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A
3192440
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192440
3185611
10729
Yes
Security Update
3192440
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192440
3185611
10735
Yes
Security Update
3192441
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192441
3185614
10789
Yes
Security Update
3192441
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3192441
3185614
10788
Yes
Security Update
3194798
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3194798
3189866
10852
Yes
Security Update
3194798
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3194798
3189866
10853
Yes
Security Update
James Forshaw of <a href="http://www.google.com/">Google Project Zero</a>
1.0
2016-10-11T07:00:00Z
<p>Information published.</p>
Microsoft Office Memory Corruption Vulnerability
<p>An Office RTF remote code execution vulnerability exists in Microsoft Office software when the Office software fails to properly handle RTF files. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an attacker could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.</p>
<p>Exploitation of the vulnerability requires that a user open a specially crafted file with an affected version of Microsoft Office software. In an email attack scenario, an attacker could exploit the vulnerability by sending the specially crafted file to the user and convincing the user to open the file. In a web-based attack scenario, an attacker could host a website (or leverage a compromised website that accepts or hosts user-provided content) that contains a specially crafted file designed to exploit the vulnerability. An attacker would have no way to force users to visit the website. Instead, an attacker would have to convince users to click a link, typically by way of an enticement in an email or instant message, and then convince them to open the specially crafted file.</p>
<p>The security update addresses the vulnerability by changing the way Microsoft Office software handles RTF content.</p>
<p><strong>I have Microsoft Word 2010 installed. Why am I not being offered the 3118311 update?</strong>
The 3118311 update only applies to systems running specific configurations of Microsoft Office 2010. Some configurations will not be offered the update.</p>
<p><strong>I am being offered this update for software that is not specifically indicated as being affected in the Affected Software and Vulnerability Severity Ratings table. Why am I being offered this update?</strong>
When updates address vulnerable code that exists in a component that is shared between multiple Microsoft Office products or shared between multiple versions of the same Microsoft Office product, the update is considered to be applicable to all supported products and versions that contain the vulnerable component.</p>
<p>For example, when an update applies to Microsoft Office 2007 products, only Microsoft Office 2007 may be specifically listed in the Affected Software table. However, the update could apply to Microsoft Word 2007, Microsoft Excel 2007, Microsoft Visio 2007, Microsoft Compatibility Pack, Microsoft Excel Viewer, or any other Microsoft Office 2007 product that is not specifically listed in the Affected Software table. Furthermore, when an update applies to Microsoft Office 2010 products, only Microsoft Office 2010 may be specifically listed in the Affected Software table. However, the update could apply to Microsoft Word 2010, Microsoft Excel 2010, Microsoft Visio 2010, Microsoft Visio Viewer, or any other Microsoft Office 2010 product that is not specifically listed in the Affected Software table.</p>
<p>For more information on this behavior and recommended actions, see <a href="https://support.microsoft.com/kb/830335">Microsoft Knowledge Base Article 830335</a>. For a list of Microsoft Office products that an update may apply to, refer to the Microsoft Knowledge Base Article associated with the specific update.</p>
Microsoft Office
CVE-2016-7193
10521
10522
4497
10525
10611
10748
1160
10162
10513
10514
10606
10604
10605
10746
10747
10670
10025
9432-10607
9432-10495
Remote Code Execution
10521
Remote Code Execution
10522
Remote Code Execution
4497
Remote Code Execution
10525
Remote Code Execution
10611
Remote Code Execution
10748
Remote Code Execution
1160
Remote Code Execution
10162
Remote Code Execution
10513
Remote Code Execution
10514
Remote Code Execution
10606
Remote Code Execution
10604
Remote Code Execution
10605
Remote Code Execution
10746
Remote Code Execution
10747
Remote Code Execution
10670
Remote Code Execution
10025
Remote Code Execution
9432-10607
Remote Code Execution
9432-10495
Critical
10521
Critical
10522
Critical
4497
Critical
10525
Critical
10611
Critical
10748
Critical
1160
Critical
10162
Critical
10513
Critical
10514
Critical
10606
Critical
10604
Critical
10605
Critical
10746
Critical
10747
Critical
10670
Critical
10025
Critical
9432-10607
Critical
9432-10495
Publicly Disclosed:No;Exploited:Yes;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation Detected
3118311
https://www.microsoft.com/downloads/details.aspx?familyid=fbab9dfe-0876-4181-b4b6-05da396c69ca
3115468
10521
Maybe
Security Update
3118311
https://www.microsoft.com/downloads/details.aspx?familyid=19a6d1f4-4471-43d3-a3a6-581c0f611972
3115468
10522
Maybe
Security Update
3118307
https://www.microsoft.com/downloads/details.aspx?familyid=dc23e11c-c9bb-409f-ac27-0f82f79dc12d
3115464
4497
Maybe
Security Update
3118384
https://www.microsoft.com/downloads/details.aspx?familyid=038db3d0-6f83-4a95-bcb5-b3971890d03e
3115472
10525
Maybe
Security Update
3118360
https://www.microsoft.com/downloads/details.aspx?familyid=bd3f0388-1c7e-46ea-8e9d-00020f1c8e50
3118270
10611
Maybe
Security Update
3127897
https://www.microsoft.com/downloads/details.aspx?familyid=a2825872-8049-45e7-83f4-ddf03a15898b
3118299
10748
Maybe
Security Update
3127898
https://www.microsoft.com/downloads/details.aspx?familyid=60b9e402-859f-4593-b78b-f83c1a43d8e9
3115480
1160
Maybe
Security Update
3118308
https://www.microsoft.com/downloads/details.aspx?familyid=3b906f89-89e9-49e5-aa6b-68d587fac8e6
3115465
10162
Maybe
Security Update
3118312
https://www.microsoft.com/downloads/details.aspx?familyid=4f544a6a-b1ed-4888-9d34-2e0d7bc2c740
3115471
10513
Maybe
Security Update
3118312
https://www.microsoft.com/downloads/details.aspx?familyid=80d98120-b32d-4731-9791-e489a382aa34
3115471
10514
Maybe
Security Update
3118345
3115449
10606
Maybe
Security Update
3118345
https://www.microsoft.com/downloads/details.aspx?familyid=b6d2ff1b-86d3-4ef0-ba7e-338799b1d3e9
3115449
10604
Maybe
Security Update
3118345
https://www.microsoft.com/downloads/details.aspx?familyid=442251d2-1722-4555-8b9d-cd05e3f96b79
3115449
10605
Maybe
Security Update
3118331
https://www.microsoft.com/downloads/details.aspx?familyid=22656ea1-d788-4f7e-b9dc-aaed1074578c
3115439
10746
Maybe
Security Update
3118331
https://www.microsoft.com/downloads/details.aspx?familyid=196b229f-fbda-4b52-80d2-31e65fde4c61
3115439
10747
Maybe
Security Update
3193438
http://go.microsoft.com/fwlink/?LinkId=827851
3186807
10670
Maybe
Security Update
3193442
https://www.microsoft.com/downloads/details.aspx?familyid=537a915c-0a56-4fcc-a876-8ca69dc82043
3186805
10025
Maybe
Security Update
3118352
https://www.microsoft.com/downloads/details.aspx?familyid=f699078a-89a0-470c-a146-c471a9f24fa3
3115443
9432-10607
Maybe
Security Update
3118377
https://www.microsoft.com/downloads/details.aspx?familyid=23ca7348-eb7d-4e18-b4e0-77498eda771b
3115466
9432-10495
Maybe
Security Update
Austrian MilCERT
1.0
2016-10-11T07:00:00Z
<p>Information published.</p>
1.1
2016-10-12T07:00:00Z
<p>This bulletin has been revised to change the severity to Critical. This is an informational change only.</p>
November 2016 Adobe Flash Security Update
<p>This security update addresses the following vulnerabilities, which are described in Adobe Security Bulletin <a href="http://helpx.adobe.com/security/products/flash-player/apsb16-32.htm">APSB16-32</a>:</p>
<p>CVE-2016-4273, CVE-2016-4286, CVE-2016-6981, CVE-2016-6982, CVE-2016-6983, CVE-2016-6984, CVE-2016-6985, CVE-2016-6986, CVE-2016-6987, CVE-2016-6989, CVE-2016-6990, CVE-2016-6992</p>
<p><strong>How could an attacker exploit these vulnerabilities?</strong>
In a web-based attack scenario where the user is using Internet Explorer for the desktop, an attacker could host a specially crafted website that is designed to exploit any of these vulnerabilities through Internet Explorer and then convince a user to view the website. An attacker could also embed an ActiveX control marked "safe for initialization" in an application or Microsoft Office document that hosts the IE rendering engine. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit any of these vulnerabilities. In all cases, however, an attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically by clicking a link in an email message or in an Instant Messenger message that takes users to the attacker's website, or by opening an attachment sent through email.</p>
<p>In a web-based attack scenario where the user is using Internet Explorer in the Windows 8-style UI, an attacker would first need to compromise a website already listed in the Compatibility View (CV) list. An attacker could then host a website that contains specially crafted Flash content designed to exploit any of these vulnerabilities through Internet Explorer and then convince a user to view the website. An attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically by clicking a link in an email message or in an Instant Messenger message that takes users to the attacker's website, or by opening an attachment sent through email. For more information about Internet Explorer and the CV List, please see the MSDN Article, Developer Guidance for websites with content for Adobe Flash Player in Windows 8.</p>
Adobe Flash Player
ADV160007
10384-10484
10384-10378
10384-10481
10384-10482
10384-10483
10384-10729
10384-10735
10384-10789
10384-10788
10384-10852
10384-10853
Remote Code Execution
10384-10484
Remote Code Execution
10384-10378
Remote Code Execution
10384-10481
Remote Code Execution
10384-10482
Remote Code Execution
10384-10483
Remote Code Execution
10384-10729
Remote Code Execution
10384-10735
Remote Code Execution
10384-10789
Remote Code Execution
10384-10788
Remote Code Execution
10384-10852
Remote Code Execution
10384-10853
Critical
10384-10484
Moderate
10384-10378
Critical
10384-10481
Critical
10384-10482
Moderate
10384-10483
Critical
10384-10729
Critical
10384-10735
Critical
10384-10789
Critical
10384-10788
Critical
10384-10852
Critical
10384-10853
Publicly Disclosed:No;Exploited:No
3194343
3188128
10384-10484
Yes
Security Update
3194343
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3194343
3188128
10384-10378
Yes
Security Update
3194343
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3194343
3188128
10384-10481
Yes
Security Update
3194343
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3194343
3188128
10384-10482
Yes
Security Update
3194343
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3194343
3188128
10384-10483
Yes
Security Update
3194343
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3194343
3188128
10384-10729
Yes
Security Update
3194343
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3194343
3188128
10384-10735
Yes
Security Update
3194343
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3194343
3188128
10384-10789
Yes
Security Update
3194343
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3194343
3188128
10384-10788
Yes
Security Update
3194343
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3194343
3188128
10384-10852
Yes
Security Update
3194343
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3194343
3188128
10384-10853
Yes
Security Update
<p>The following <a href="https://technet.microsoft.com/library/security/dn848375.aspx#Mitigation">mitigating factors</a> may be helpful in your situation:</p>
<ul>
<li>In a web-based attack scenario where the user is using Internet Explorer for the desktop, an attacker could host a website that contains a webpage that is used to exploit any of these vulnerabilities. In addition, compromised websites and websites that accept or host user-provided content or advertisements could contain specially crafted content that could exploit any of these vulnerabilities. In all cases, however, an attacker would have no way to force users to visit these websites. Instead, an attacker would have to convince users to visit the website, typically by getting them to click a link in an email message or instant message that takes users to the attacker's website.</li>
<li>Internet Explorer in the Windows 8-style UI will only play Flash content from sites listed on the Compatibility View (CV) list. This restriction requires an attacker to first compromise a website already listed on the CV list. An attacker could then host specially crafted Flash content designed to exploit any of these vulnerabilities through Internet Explorer and then convince a user to view the website. An attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically by clicking a link in an email message or in an instant message that takes users to the attacker's website, or by opening an attachment sent through email.</li>
<li>By default, all supported versions of Microsoft Outlook and Windows Live Mail open HTML email messages in the Restricted sites zone. The Restricted sites zone, which disables scripts and ActiveX controls, helps reduce the risk of an attacker being able to use any of these vulnerabilities to execute malicious code. If a user clicks a link in an email message, the user could still be vulnerable to exploitation of any of these vulnerabilities through the web-based attack scenario.</li>
<li>By default, Internet Explorer on Windows Server 2012 and Windows Server 2012 R2 runs in a restricted mode that is known as <a href="https://technet.microsoft.com/library/dd883248.aspx">Enhanced Security Configuration</a>. This mode can help reduce the likelihood of the exploitation of these Adobe Flash Player vulnerabilities in Internet Explorer.</li>
</ul>
<p>Workaround refers to a setting or configuration change that would help block known attack vectors before you apply the update.</p>
<p><strong>Prevent Adobe Flash Player from running</strong>
You can disable attempts to instantiate Adobe Flash Player in Internet Explorer and other applications that honor the kill bit feature, such as Office 2007 and Office 2010, by setting the kill bit for the control in the registry.</p>
<p><strong>Warning</strong> If you use Registry Editor incorrectly, you may cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that you can solve problems that result from using Registry Editor incorrectly. Use Registry Editor at your own risk.
To set the kill bit for the control in the registry, perform the following steps:</p>
<ol>
<li><p>Paste the following into a text file and save it with the .reg file extension.</p>
<pre><code> Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{D27CDB6E-AE6D-11CF-96B8-444553540000}]
"Compatibility Flags"=dword:00000400
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{D27CDB6E-AE6D-11CF-96B8-444553540000}]
"Compatibility Flags"=dword:00000400
</code></pre>
</li>
<li><p>Double-click the .reg file to apply it to an individual system.</p>
<p>You can also apply this workaround across domains by using Group Policy. For more information about Group Policy, see the TechNet article, Group Policy collection.</p>
</li>
</ol>
<p><strong>Note</strong> You must restart Internet Explorer for your changes to take effect.
<strong>Impact of workaround</strong>. There is no impact as long as the object is not intended to be used in Internet Explorer.
<strong>How to undo the workaround.</strong> Delete the registry keys that were added in implementing this workaround.
<strong>Prevent Adobe Flash Player from running in Internet Explorer through Group Policy</strong>
<strong>Note</strong> The Group Policy MMC snap-in can be used to set policy for a machine, for an organizational unit, or for an entire domain. For more information about Group Policy, visit the following Microsoft Web sites:</p>
<p><a href="https://technet.microsoft.com/library/hh831791">Group Policy Overview</a>
<a href="https://technet.microsoft.com/library/cc737816%28v=ws.10%29.aspx">What is Group Policy Object Editor?</a>
<a href="https://technet.microsoft.com/library/cc784165%28v=ws.10%29.aspx">Core Group Policy tools and settings</a></p>
<p>To disable Adobe Flash Player in Internet Explorer through Group Policy, perform the following steps:
<strong>Note</strong> This workaround does not prevent Flash from being invoked from other applications, such as Microsoft Office 2007 or Microsoft Office 2010.</p>
<ol>
<li>Open the Group Policy Management Console and configure the console to work with the appropriate Group Policy object, such as local machine, OU, or domain GPO.</li>
<li>Navigate to the following node:
<strong>Administrative Templates -> Windows Components -> Internet Explorer -> Security Features -> Add-on Management</strong></li>
<li>Double-click <strong>Turn off Adobe Flash in Internet Explorer and prevent applications from using Internet Explorer technology to instantiate Flash objects</strong>.</li>
<li>Change the setting to Enabled.</li>
<li>Click <strong>Apply</strong> and then click <strong>OK</strong> to return to the Group Policy Management Console.</li>
<li>Refresh Group Policy on all systems or wait for the next scheduled Group Policy refresh interval for the settings to take effect.
<strong>Prevent Adobe Flash Player from running in Office 2010 on affected systems</strong>
<strong>Note</strong> This workaround does not prevent Adobe Flash Player from running in Internet Explorer.
<strong>Warning</strong> If you use Registry Editor incorrectly, you may cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that you can solve problems that result from using Registry Editor incorrectly. Use Registry Editor at your own risk.
For detailed steps that you can use to prevent a control from running in Internet Explorer, see Microsoft Knowledge Base Article 240797. Follow the steps in the article to create a Compatibility Flags value in the registry to prevent a COM object from being instantiated in Internet Explorer.</li>
</ol>
<p>To disable Adobe Flash Player in Office 2010 only, set the kill bit for the ActiveX control for Adobe Flash Player in the registry using the following steps:</p>
<ol>
<li>Create a text file named Disable_Flash.reg with the following contents:</li>
</ol>
<pre><code> [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\Common\COM\Compatibility\{D27CDB6E-AE6D-11CF-96B8-444553540000}]
"Compatibility Flags"=dword:00000400
</code></pre>
<ol start="2">
<li>Double-click the .reg file to apply it to an individual system.</li>
<li><strong>Note</strong> You must restart Internet Explorer for your changes to take effect.
You can also apply this workaround across domains by using Group Policy. For more information about Group Policy, see the TechNet article, <a href="http://go.microsoft.com/fwlink/?LinkID=215719">Group Policy collection</a>.
<strong>Prevent ActiveX controls from running in Office 2007 and Office 2010</strong></li>
</ol>
<p>To disable all ActiveX controls in Microsoft Office 2007 and Microsoft Office 2010, including Adobe Flash Player in Internet Explorer, perform the following steps:</p>
<ol>
<li>Click File, click Options, click Trust Center, and then click Trust Center Settings.</li>
<li>Click ActiveX Settings in the left-hand pane, and then select Disable all controls without notifications.</li>
<li>Click OK to save your settings.
<strong>Impact of workaround</strong>. Office documents that use embedded ActiveX controls may not display as intended.
<strong>How to undo the workaround</strong>.</li>
</ol>
<p>To re-enable ActiveX controls in Microsoft Office 2007 and Microsoft Office 2010, perform the following steps:</p>
<ol>
<li>Click File, click Options, click Trust Center, and then click Trust Center Settings.</li>
<li>Click ActiveX Settings in the left-hand pane, and then deselect Disable all controls without notifications.</li>
<li>Click OK to save your settings.
<strong>Set Internet and Local intranet security zone settings to "High" to block ActiveX Controls and Active Scripting in these zones</strong>
You can help protect against exploitation of these vulnerabilities by changing your settings for the Internet security zone to block ActiveX controls and Active Scripting. You can do this by setting your browser security to High.</li>
</ol>
<p>To raise the browsing security level in Internet Explorer, perform the following steps:</p>
<ol>
<li>On the Internet Explorer <strong>Tools</strong> menu, click** Internet Option**s.</li>
<li>In the <strong>Internet Options</strong> dialog box, click the <strong>Security</strong> tab, and then click <strong>Internet</strong>.</li>
<li>Under <strong>Security level for this zone</strong>, move the slider to <strong>High</strong>. This sets the security level for all websites you visit to High.</li>
<li>Click <strong>Local intranet</strong>.</li>
<li>Under <strong>Security level for this zone</strong>, move the slider to <strong>High</strong>. This sets the security level for all websites you visit to High.</li>
<li>Click <strong>OK</strong> to accept the changes and return to Internet Explorer.
<strong>Note</strong> If no slider is visible, click <strong>Default Level</strong>, and then move the slider to <strong>High</strong>.
<strong>Note</strong> Setting the level to High may cause some websites to work incorrectly. If you have difficulty using a website after you change this setting, and you are sure the site is safe to use, you can add that site to your list of trusted sites. This will allow the site to work correctly even with the security setting set to High.
<strong>Impact of workaround</strong>. There are side effects to blocking ActiveX Controls and Active Scripting. Many websites on the Internet or an intranet use ActiveX or Active Scripting to provide additional functionality. For example, an online e-commerce site or banking site may use ActiveX Controls to provide menus, ordering forms, or even account statements. Blocking ActiveX Controls or Active Scripting is a global setting that affects all Internet and intranet sites. If you do not want to block ActiveX Controls or Active Scripting for such sites, use the steps outlined in "Add sites that you trust to the Internet Explorer Trusted sites zone".
<strong>Configure Internet Explorer to prompt before running Active Scripting or to disable Active Scripting in the Internet and Local intranet security zone</strong></li>
</ol>
<p>You can help protect against exploitation of these vulnerabilities by changing your settings to prompt before running Active Scripting or to disable Active Scripting in the Internet and Local intranet security zone. To do this, perform the following steps:</p>
<ol>
<li>In Internet Explorer, click <strong>Internet Options</strong> on the <strong>Tools</strong> menu.</li>
<li>Click the <strong>Security</strong> tab.</li>
<li>Click <strong>Internet</strong>, and then click <strong>Custom Level</strong>.</li>
<li>Under <strong>Settings</strong>, in the <strong>Scripting</strong> section, under <strong>Active Scripting</strong>, click <strong>Prompt</strong> or <strong>Disable</strong>, and then click <strong>OK</strong>.</li>
<li>Click <strong>Local intranet</strong>, and then click <strong>Custom Level</strong>.</li>
<li>Under <strong>Settings</strong>, in the <strong>Scripting</strong> section, under <strong>Active Scripting</strong>, click <strong>Prompt</strong> or <strong>Disable</strong>, and then click <strong>OK</strong>.</li>
<li>Click <strong>OK</strong> to return to Internet Explorer, and then click <strong>OK</strong> again.
<strong>Note</strong> Disabling Active Scripting in the Internet and Local intranet security zones may cause some websites to work incorrectly. If you have difficulty using a website after you change this setting, and you are sure the site is safe to use, you can add that site to your list of trusted sites. This will allow the site to work correctly.
<strong>Impact of workaround</strong>. There are side effects to prompting before running Active Scripting. Many websites that are on the Internet or on an intranet use Active Scripting to provide additional functionality. For example, an online e-commerce site or banking site may use Active Scripting to provide menus, ordering forms, or even account statements. Prompting before running Active Scripting is a global setting that affects all Internet and intranet sites. You will be prompted frequently when you enable this workaround. For each prompt, if you feel you trust the site that you are visiting, click <strong>Yes</strong> to run Active Scripting. If you do not want to be prompted for all these sites, use the steps outlined in "Add sites that you trust to the Internet Explorer Trusted sites zone".
<strong>Add sites that you trust to the Internet Explorer Trusted sites zone</strong>
After you set Internet Explorer to require a prompt before it runs ActiveX controls and Active Scripting in the Internet zone and in the Local intranet zone, you can add sites that you trust to the Internet Explorer Trusted sites zone. This will allow you to continue to use trusted websites exactly as you do today, while helping to protect you from this attack on untrusted sites. We recommend that you add only sites that you trust to the Trusted sites zone.</li>
</ol>
<p>To do this, perform the following steps:</p>
<ol>
<li>In Internet Explorer, click <strong>Tools</strong>, click <strong>Internet Options</strong>, and then click the <strong>Security</strong> tab.</li>
<li>In the <strong>Select a web content zone to specify its current security settings</strong> box, click <strong>Trusted Sites</strong>, and then click <strong>Sites</strong>.</li>
<li>If you want to add sites that do not require an encrypted channel, click to clear the <strong>Require server verification (https:) for all sites in this zone</strong> check box.</li>
<li>In the <strong>Add this website to the zone</strong> box, type the URL of a site that you trust, and then click <strong>Add</strong>.</li>
<li>Repeat these steps for each site that you want to add to the zone.</li>
<li>Click <strong>OK</strong> two times to accept the changes and return to Internet Explorer.
<strong>Note</strong> Add any sites that you trust not to take malicious action on your system. Two sites in particular that you may want to add are *<strong>.windowsupdate.microsoft.com</strong> and *<strong>.update.microsoft.com</strong>. These are the sites that will host the update, and they require an ActiveX control to install the update.</li>
</ol>
1.0
2016-10-11T07:00:00Z
<p>Information published.</p>
October 27, 2016 Adobe Flash Security Update
<p>This security update addresses the following vulnerability, which is described in Adobe Security Bulletin <a href="http://helpx.adobe.com/security/products/flash-player/apsb16-36.html">APSB16-36</a>:</p>
<p>CVE-2016-7855</p>
<p><strong>How could an attacker exploit these vulnerabilities?</strong>
In a web-based attack scenario where the user is using Internet Explorer for the desktop, an attacker could host a specially crafted website that is designed to exploit any of these vulnerabilities through Internet Explorer and then convince a user to view the website. An attacker could also embed an ActiveX control marked "safe for initialization" in an application or Microsoft Office document that hosts the IE rendering engine. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit any of these vulnerabilities. In all cases, however, an attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically by clicking a link in an email message or in an Instant Messenger message that takes users to the attacker's website, or by opening an attachment sent through email.</p>
<p>In a web-based attack scenario where the user is using Internet Explorer in the Windows 8-style UI, an attacker would first need to compromise a website already listed in the Compatibility View (CV) list. An attacker could then host a website that contains specially crafted Flash content designed to exploit any of these vulnerabilities through Internet Explorer and then convince a user to view the website. An attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically by clicking a link in an email message or in an Instant Messenger message that takes users to the attacker's website, or by opening an attachment sent through email. For more information about Internet Explorer and the CV List, please see the MSDN Article, Developer Guidance for websites with content for Adobe Flash Player in Windows 8.</p>
Adobe Flash Player
ADV160008
10384-10481
10384-10482
10384-10484
10384-10483
10384-10735
10384-10729
10384-10789
10384-10788
10384-10852
10384-10853
10384-10378
Remote Code Execution
10384-10481
Remote Code Execution
10384-10482
Remote Code Execution
10384-10484
Remote Code Execution
10384-10483
Remote Code Execution
10384-10735
Remote Code Execution
10384-10729
Remote Code Execution
10384-10789
Remote Code Execution
10384-10788
Remote Code Execution
10384-10852
Remote Code Execution
10384-10853
Remote Code Execution
10384-10378
Critical
10384-10481
Critical
10384-10482
Critical
10384-10484
Critical
10384-10483
Critical
10384-10735
Critical
10384-10729
Critical
10384-10789
Critical
10384-10788
Critical
10384-10852
Critical
10384-10853
Critical
10384-10378
Publicly Disclosed:No;Exploited:Yes
3201860
https://www.microsoft.com/downloads/details.aspx?familyid=ca4b800b-a5b8-4ece-8766-d7529f98a0b4
3194343
10384-10481
Yes
Security Update
3201860
https://www.microsoft.com/downloads/details.aspx?familyid=480f1e78-caad-4d1a-a7e1-808b349ff642
3194343
10384-10482
Yes
Security Update
3201860
3194343
10384-10484
Yes
Security Update
3201860
https://www.microsoft.com/downloads/details.aspx?familyid=480f1e78-caad-4d1a-a7e1-808b349ff642
3194343
10384-10483
Yes
Security Update
3201860
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3201860
3194343
10384-10735
Yes
Security Update
3201860
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3201860
3194343
10384-10729
Yes
Security Update
3201860
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3201860
3194343
10384-10789
Yes
Security Update
3201860
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3201860
3194343
10384-10788
Yes
Security Update
3201860
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3201860
3194343
10384-10852
Yes
Security Update
3201860
https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3201860
3194343
10384-10853
Yes
Security Update
3201860
https://www.microsoft.com/downloads/details.aspx?familyid=4c9178f1-12ba-4537-a564-2d56717b96dc
3194343
10384-10378
Yes
Security Update
<p>The following <a href="https://technet.microsoft.com/library/security/dn848375.aspx#Mitigation">mitigating factors</a> may be helpful in your situation:</p>
<ul>
<li>In a web-based attack scenario where the user is using Internet Explorer for the desktop, an attacker could host a website that contains a webpage that is used to exploit any of these vulnerabilities. In addition, compromised websites and websites that accept or host user-provided content or advertisements could contain specially crafted content that could exploit any of these vulnerabilities. In all cases, however, an attacker would have no way to force users to visit these websites. Instead, an attacker would have to convince users to visit the website, typically by getting them to click a link in an email message or instant message that takes users to the attacker's website.</li>
<li>Internet Explorer in the Windows 8-style UI will only play Flash content from sites listed on the Compatibility View (CV) list. This restriction requires an attacker to first compromise a website already listed on the CV list. An attacker could then host specially crafted Flash content designed to exploit any of these vulnerabilities through Internet Explorer and then convince a user to view the website. An attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically by clicking a link in an email message or in an instant message that takes users to the attacker's website, or by opening an attachment sent through email.</li>
<li>By default, all supported versions of Microsoft Outlook and Windows Live Mail open HTML email messages in the Restricted sites zone. The Restricted sites zone, which disables scripts and ActiveX controls, helps reduce the risk of an attacker being able to use any of these vulnerabilities to execute malicious code. If a user clicks a link in an email message, the user could still be vulnerable to exploitation of any of these vulnerabilities through the web-based attack scenario.</li>
<li>By default, Internet Explorer on Windows Server 2012 and Windows Server 2012 R2 runs in a restricted mode that is known as <a href="https://technet.microsoft.com/library/dd883248.aspx">Enhanced Security Configuration</a>. This mode can help reduce the likelihood of the exploitation of these Adobe Flash Player vulnerabilities in Internet Explorer.</li>
</ul>
<p>Workaround refers to a setting or configuration change that would help block known attack vectors before you apply the update.</p>
<p><strong>Prevent Adobe Flash Player from running</strong>
You can disable attempts to instantiate Adobe Flash Player in Internet Explorer and other applications that honor the kill bit feature, such as Office 2007 and Office 2010, by setting the kill bit for the control in the registry.</p>
<p><strong>Warning</strong> If you use Registry Editor incorrectly, you may cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that you can solve problems that result from using Registry Editor incorrectly. Use Registry Editor at your own risk.
To set the kill bit for the control in the registry, perform the following steps:</p>
<ol>
<li><p>Paste the following into a text file and save it with the .reg file extension.</p>
<pre><code> Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{D27CDB6E-AE6D-11CF-96B8-444553540000}]
"Compatibility Flags"=dword:00000400
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{D27CDB6E-AE6D-11CF-96B8-444553540000}]
"Compatibility Flags"=dword:00000400
</code></pre>
</li>
<li><p>Double-click the .reg file to apply it to an individual system.</p>
<p>You can also apply this workaround across domains by using Group Policy. For more information about Group Policy, see the TechNet article, Group Policy collection.</p>
</li>
</ol>
<p><strong>Note</strong> You must restart Internet Explorer for your changes to take effect.
<strong>Impact of workaround</strong>. There is no impact as long as the object is not intended to be used in Internet Explorer.
<strong>How to undo the workaround.</strong> Delete the registry keys that were added in implementing this workaround.
<strong>Prevent Adobe Flash Player from running in Internet Explorer through Group Policy</strong>
<strong>Note</strong> The Group Policy MMC snap-in can be used to set policy for a machine, for an organizational unit, or for an entire domain. For more information about Group Policy, visit the following Microsoft Web sites:</p>
<p><a href="https://technet.microsoft.com/library/hh831791">Group Policy Overview</a>
<a href="https://technet.microsoft.com/library/cc737816%28v=ws.10%29.aspx">What is Group Policy Object Editor?</a>
<a href="https://technet.microsoft.com/library/cc784165%28v=ws.10%29.aspx">Core Group Policy tools and settings</a></p>
<p>To disable Adobe Flash Player in Internet Explorer through Group Policy, perform the following steps:
<strong>Note</strong> This workaround does not prevent Flash from being invoked from other applications, such as Microsoft Office 2007 or Microsoft Office 2010.</p>
<ol>
<li>Open the Group Policy Management Console and configure the console to work with the appropriate Group Policy object, such as local machine, OU, or domain GPO.</li>
<li>Navigate to the following node:
<strong>Administrative Templates -> Windows Components -> Internet Explorer -> Security Features -> Add-on Management</strong></li>
<li>Double-click <strong>Turn off Adobe Flash in Internet Explorer and prevent applications from using Internet Explorer technology to instantiate Flash objects</strong>.</li>
<li>Change the setting to Enabled.</li>
<li>Click <strong>Apply</strong> and then click <strong>OK</strong> to return to the Group Policy Management Console.</li>
<li>Refresh Group Policy on all systems or wait for the next scheduled Group Policy refresh interval for the settings to take effect.
<strong>Prevent Adobe Flash Player from running in Office 2010 on affected systems</strong>
<strong>Note</strong> This workaround does not prevent Adobe Flash Player from running in Internet Explorer.
<strong>Warning</strong> If you use Registry Editor incorrectly, you may cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that you can solve problems that result from using Registry Editor incorrectly. Use Registry Editor at your own risk.
For detailed steps that you can use to prevent a control from running in Internet Explorer, see Microsoft Knowledge Base Article 240797. Follow the steps in the article to create a Compatibility Flags value in the registry to prevent a COM object from being instantiated in Internet Explorer.</li>
</ol>
<p>To disable Adobe Flash Player in Office 2010 only, set the kill bit for the ActiveX control for Adobe Flash Player in the registry using the following steps:</p>
<ol>
<li>Create a text file named Disable_Flash.reg with the following contents:</li>
</ol>
<pre><code> [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\Common\COM\Compatibility\{D27CDB6E-AE6D-11CF-96B8-444553540000}]
"Compatibility Flags"=dword:00000400
</code></pre>
<ol start="2">
<li>Double-click the .reg file to apply it to an individual system.</li>
<li><strong>Note</strong> You must restart Internet Explorer for your changes to take effect.
You can also apply this workaround across domains by using Group Policy. For more information about Group Policy, see the TechNet article, <a href="http://go.microsoft.com/fwlink/?LinkID=215719">Group Policy collection</a>.
<strong>Prevent ActiveX controls from running in Office 2007 and Office 2010</strong></li>
</ol>
<p>To disable all ActiveX controls in Microsoft Office 2007 and Microsoft Office 2010, including Adobe Flash Player in Internet Explorer, perform the following steps:</p>
<ol>
<li>Click File, click Options, click Trust Center, and then click Trust Center Settings.</li>
<li>Click ActiveX Settings in the left-hand pane, and then select Disable all controls without notifications.</li>
<li>Click OK to save your settings.
<strong>Impact of workaround</strong>. Office documents that use embedded ActiveX controls may not display as intended.
<strong>How to undo the workaround</strong>.</li>
</ol>
<p>To re-enable ActiveX controls in Microsoft Office 2007 and Microsoft Office 2010, perform the following steps:</p>
<ol>
<li>Click File, click Options, click Trust Center, and then click Trust Center Settings.</li>
<li>Click ActiveX Settings in the left-hand pane, and then deselect Disable all controls without notifications.</li>
<li>Click OK to save your settings.
<strong>Set Internet and Local intranet security zone settings to "High" to block ActiveX Controls and Active Scripting in these zones</strong>
You can help protect against exploitation of these vulnerabilities by changing your settings for the Internet security zone to block ActiveX controls and Active Scripting. You can do this by setting your browser security to High.</li>
</ol>
<p>To raise the browsing security level in Internet Explorer, perform the following steps:</p>
<ol>
<li>On the Internet Explorer <strong>Tools</strong> menu, click** Internet Option**s.</li>
<li>In the <strong>Internet Options</strong> dialog box, click the <strong>Security</strong> tab, and then click <strong>Internet</strong>.</li>
<li>Under <strong>Security level for this zone</strong>, move the slider to <strong>High</strong>. This sets the security level for all websites you visit to High.</li>
<li>Click <strong>Local intranet</strong>.</li>
<li>Under <strong>Security level for this zone</strong>, move the slider to <strong>High</strong>. This sets the security level for all websites you visit to High.</li>
<li>Click <strong>OK</strong> to accept the changes and return to Internet Explorer.
<strong>Note</strong> If no slider is visible, click <strong>Default Level</strong>, and then move the slider to <strong>High</strong>.
<strong>Note</strong> Setting the level to High may cause some websites to work incorrectly. If you have difficulty using a website after you change this setting, and you are sure the site is safe to use, you can add that site to your list of trusted sites. This will allow the site to work correctly even with the security setting set to High.
<strong>Impact of workaround</strong>. There are side effects to blocking ActiveX Controls and Active Scripting. Many websites on the Internet or an intranet use ActiveX or Active Scripting to provide additional functionality. For example, an online e-commerce site or banking site may use ActiveX Controls to provide menus, ordering forms, or even account statements. Blocking ActiveX Controls or Active Scripting is a global setting that affects all Internet and intranet sites. If you do not want to block ActiveX Controls or Active Scripting for such sites, use the steps outlined in "Add sites that you trust to the Internet Explorer Trusted sites zone".
<strong>Configure Internet Explorer to prompt before running Active Scripting or to disable Active Scripting in the Internet and Local intranet security zone</strong></li>
</ol>
<p>You can help protect against exploitation of these vulnerabilities by changing your settings to prompt before running Active Scripting or to disable Active Scripting in the Internet and Local intranet security zone. To do this, perform the following steps:</p>
<ol>
<li>In Internet Explorer, click <strong>Internet Options</strong> on the <strong>Tools</strong> menu.</li>
<li>Click the <strong>Security</strong> tab.</li>
<li>Click <strong>Internet</strong>, and then click <strong>Custom Level</strong>.</li>
<li>Under <strong>Settings</strong>, in the <strong>Scripting</strong> section, under <strong>Active Scripting</strong>, click <strong>Prompt</strong> or <strong>Disable</strong>, and then click <strong>OK</strong>.</li>
<li>Click <strong>Local intranet</strong>, and then click <strong>Custom Level</strong>.</li>
<li>Under <strong>Settings</strong>, in the <strong>Scripting</strong> section, under <strong>Active Scripting</strong>, click <strong>Prompt</strong> or <strong>Disable</strong>, and then click <strong>OK</strong>.</li>
<li>Click <strong>OK</strong> to return to Internet Explorer, and then click <strong>OK</strong> again.
<strong>Note</strong> Disabling Active Scripting in the Internet and Local intranet security zones may cause some websites to work incorrectly. If you have difficulty using a website after you change this setting, and you are sure the site is safe to use, you can add that site to your list of trusted sites. This will allow the site to work correctly.
<strong>Impact of workaround</strong>. There are side effects to prompting before running Active Scripting. Many websites that are on the Internet or on an intranet use Active Scripting to provide additional functionality. For example, an online e-commerce site or banking site may use Active Scripting to provide menus, ordering forms, or even account statements. Prompting before running Active Scripting is a global setting that affects all Internet and intranet sites. You will be prompted frequently when you enable this workaround. For each prompt, if you feel you trust the site that you are visiting, click <strong>Yes</strong> to run Active Scripting. If you do not want to be prompted for all these sites, use the steps outlined in "Add sites that you trust to the Internet Explorer Trusted sites zone".
<strong>Add sites that you trust to the Internet Explorer Trusted sites zone</strong>
After you set Internet Explorer to require a prompt before it runs ActiveX controls and Active Scripting in the Internet zone and in the Local intranet zone, you can add sites that you trust to the Internet Explorer Trusted sites zone. This will allow you to continue to use trusted websites exactly as you do today, while helping to protect you from this attack on untrusted sites. We recommend that you add only sites that you trust to the Trusted sites zone.</li>
</ol>
<p>To do this, perform the following steps:</p>
<ol>
<li>In Internet Explorer, click <strong>Tools</strong>, click <strong>Internet Options</strong>, and then click the <strong>Security</strong> tab.</li>
<li>In the <strong>Select a web content zone to specify its current security settings</strong> box, click <strong>Trusted Sites</strong>, and then click <strong>Sites</strong>.</li>
<li>If you want to add sites that do not require an encrypted channel, click to clear the <strong>Require server verification (https:) for all sites in this zone</strong> check box.</li>
<li>In the <strong>Add this website to the zone</strong> box, type the URL of a site that you trust, and then click <strong>Add</strong>.</li>
<li>Repeat these steps for each site that you want to add to the zone.</li>
<li>Click <strong>OK</strong> two times to accept the changes and return to Internet Explorer.
<strong>Note</strong> Add any sites that you trust not to take malicious action on your system. Two sites in particular that you may want to add are *<strong>.windowsupdate.microsoft.com</strong> and *<strong>.update.microsoft.com</strong>. These are the sites that will host the update, and they require an ActiveX control to install the update.</li>
</ol>
1.0
2016-10-27T07:00:00Z
<p>Information published.</p>