September 2016 Security Updates Security Update secure@microsoft.com The Microsoft Security Response Center (MSRC) identifies, monitors, resolves, and responds to security incidents and Microsoft software security vulnerabilities. For more information, see http://www.microsoft.com/security/msrc. 2016-Sep 2016-Sep Final 1.0 5 2024-11-18T08:00:00 September 2016 Security Updates 2016-09-13T07:00:00 2024-11-18T08:00:00 <p>The September security release consists of security updates for the following software:</p> <ul> <li>Internet Explorer</li> <li>Microsoft Edge</li> <li>Microsoft Windows</li> <li>Microsoft .NET Framework</li> <li>Microsoft Office and Microsoft Office Services and Web Apps</li> <li>Microsoft Exchange</li> <li>Adobe Flash Player</li> </ul> <p>Please note the following information regarding the security updates:</p> <ul> <li>Windows 10 updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows 10, in addition to non-security updates. The updates are available via the <a href="http://catalog.update.microsoft.com/v7/site/Home.aspx">Microsoft Update Catalog</a>.</li> <li>Vulnerabilities addressed in the September 2016 security release might also affect Windows Server 2016 Technical Preview 5. To be protected from these vulnerabilities, Microsoft recommends that customers running this operating system apply the current update, which is available from Windows Update.</li> <li>Updates for Windows RT 8.1 and Microsoft Office RT software are only available via <a href="http://go.microsoft.com/fwlink/?LinkId=21130">Windows Update</a>.</li> <li>In addition to security changes for the vulnerabilities, updates include defense-in-depth updates to help improve security-related features.</li> </ul> <p><strong>Known Issues</strong></p> <ul> <li>Windows, IE: <a href="https://support.microsoft.com/en-us/kb/3185319">3185319</a></li> <li>Windows: <a href="https://support.microsoft.com/en-us/kb/3175024">3175024</a></li> <li>Windows: <a href="https://support.microsoft.com/en-us/kb/3187754">3187754</a></li> </ul> The information provided in the Microsoft Knowledge Base is provided "as is" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply. Windows Vista Service Pack 2 Windows Vista x64 Edition Service Pack 2 Windows RT 8.1 Windows 10 for 32-bit Systems Windows 10 for x64-based Systems Windows 10 Version 1511 for 32-bit Systems Windows 10 Version 1511 for x64-based Systems Windows 10 Version 1607 for 32-bit Systems Windows 10 Version 1607 for x64-based Systems Windows 8.1 for 32-bit systems Windows 8.1 for x64-based systems Windows 10 Version 1703 for 32-bit Systems Windows 10 Version 1703 for x64-based Systems Windows Server 2008 for Itanium-Based Systems Service Pack 2 Windows Server 2008 for 32-bit Systems Service Pack 2 Windows Server 2008 for x64-based Systems Service Pack 2 Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) Windows Server 2012 R2 Windows Server 2012 R2 (Server Core installation) Windows 7 for 32-bit Systems Service Pack 1 Windows 7 for x64-based Systems Service Pack 1 Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1 Windows Server 2008 R2 for x64-based Systems Service Pack 1 Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) Windows Server 2012 Windows Server 2012 (Server Core installation) Internet Explorer 9 on Windows Vista x64 Edition Service Pack 2 Internet Explorer 9 on Windows Vista Service Pack 2 Internet Explorer 9 on Windows Server 2008 for 32-bit Systems Service Pack 2 Internet Explorer 9 on Windows Server 2008 for x64-based Systems Service Pack 2 Internet Explorer 10 on Windows Server 2012 Internet Explorer 11 on Windows 8.1 for 32-bit systems Internet Explorer 11 on Windows 8.1 for x64-based systems Internet Explorer 11 on Windows Server 2012 R2 Internet Explorer 11 on Windows RT 8.1 Internet Explorer 11 on Windows 7 for 32-bit Systems Service Pack 1 Internet Explorer 11 on Windows 7 for x64-based Systems Service Pack 1 Internet Explorer 11 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 Internet Explorer 11 on Windows 10 for 32-bit Systems Internet Explorer 11 on Windows 10 for x64-based Systems Internet Explorer 11 on Windows 10 Version 1511 for 32-bit Systems Internet Explorer 11 on Windows 10 Version 1511 for x64-based Systems Internet Explorer 11 on Windows 10 Version 1607 for 32-bit Systems Internet Explorer 11 on Windows 10 Version 1607 for x64-based Systems Microsoft Edge (EdgeHTML-based) on Windows 10 for 32-bit Systems Microsoft Edge (EdgeHTML-based) on Windows 10 for x64-based Systems Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1511 for 32-bit Systems Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1511 for x64-based Systems Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for 32-bit Systems Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for x64-based Systems Microsoft Silverlight 5 Developer Runtime when installed on Apple Mac OS (Intel-based) Microsoft Silverlight 5 Developer Runtime when installed on Microsoft Windows (32-bit) Microsoft Silverlight 5 Developer Runtime when installed on Microsoft Windows (x64-based) Microsoft Silverlight 5 when installed on Apple Mac OS (Intel-based) Microsoft Silverlight 5 when installed on Microsoft Windows (32-bit) Microsoft Silverlight 5 when installed on Microsoft Windows (x64-based) Microsoft Excel 2007 Service Pack 3 Microsoft Excel 2010 Service Pack 2 (32-bit editions) Microsoft Excel 2010 Service Pack 2 (64-bit editions) Microsoft Excel 2013 RT Service Pack 1 Microsoft Excel 2013 Service Pack 1 (32-bit editions) Microsoft Excel 2013 Service Pack 1 (64-bit editions) Microsoft Excel 2016 (32-bit edition) Microsoft Excel 2016 (64-bit edition) Microsoft Excel 2016 for Mac Microsoft Excel Viewer 2007 Service Pack 3 Microsoft Office Online Server 2016 Microsoft Office Compatibility Pack Service Pack 3 Excel Services on Microsoft SharePoint Server 2007 Service Pack 3 (32-bit editions) Excel Services on Microsoft SharePoint Server 2007 Service Pack 3 (64-bit editions) Excel Automation Services on Microsoft SharePoint Server 2013 Service Pack 1 Excel Services on Microsoft Sharepoint Server 2010 Service Pack 2 Bad Microsoft PowerPoint 2007 Service Pack 3 Microsoft PowerPoint 2010 Service Pack 2 (32-bit editions) Microsoft PowerPoint 2010 Service Pack 2 (64-bit editions) Microsoft PowerPoint 2013 RT Service Pack 1 Microsoft PowerPoint 2013 Service Pack 1 (32-bit editions) Microsoft PowerPoint 2016 for Mac Microsoft PowerPoint Viewer Microsoft SharePoint Server 2013 Service Pack 1 Microsoft Office Web Apps 2010 Service Pack 2 Microsoft Office Web Apps Server 2013 Service Pack 1 Microsoft PowerPoint 2013 Service Pack 1 (64-bit editions) Excel Services on Microsoft SharePoint Server 2010 Service Pack 2 Microsoft Outlook 2013 Service Pack 1 (32-bit editions) Microsoft Outlook 2013 Service Pack 1 (64-bit editions) Microsoft Outlook 2007 Service Pack 3 Microsoft Outlook 2010 Service Pack 2 (32-bit editions) Microsoft Outlook 2010 Service Pack 2 (64-bit editions) Microsoft Outlook 2013 RT Service Pack 1 Microsoft Outlook 2016 (32-bit edition) Microsoft Outlook 2016 (64-bit edition) Microsoft Outlook 2016 for Mac Microsoft Office 2013 Service Pack 1 (32-bit editions) Microsoft Office 2013 Service Pack 1 (64-bit editions) Microsoft Office 2010 Service Pack 2 (32-bit editions) Microsoft Office 2010 Service Pack 2 (64-bit editions) Microsoft Office 2007 Service Pack 3 Microsoft Office 2016 (32-bit edition) Microsoft Office 2016 (64-bit edition) Microsoft Exchange Server 2007 Service Pack 3 Microsoft Exchange Server 2010 Service Pack 3 Microsoft Exchange Server 2013 Service Pack 1 Microsoft Exchange Server 2013 Cumulative Update 13 Microsoft Exchange Server 2013 Cumulative Update 12 Microsoft Exchange Server 2016 Cumulative Update 1 Microsoft Exchange Server 2016 Cumulative Update 2 Adobe Flash Player on Windows Server 2012 Adobe Flash Player on Windows 8.1 for 32-bit systems Adobe Flash Player on Windows 8.1 for x64-based systems Adobe Flash Player on Windows Server 2012 R2 Adobe Flash Player on Windows RT 8.1 Adobe Flash Player on Windows 10 for 32-bit Systems Adobe Flash Player on Windows 10 for x64-based Systems Adobe Flash Player on Windows 10 Version 1511 for 32-bit Systems Adobe Flash Player on Windows 10 Version 1511 for x64-based Systems Adobe Flash Player on Windows 10 Version 1607 for 32-bit Systems Adobe Flash Player on Windows 10 Version 1607 for x64-based Systems Microsoft Exchange Server 2007 Service Pack 3 Windows 7 for 32-bit Systems Service Pack 1 Windows 7 for x64-based Systems Service Pack 1 Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1 Windows Server 2008 R2 for x64-based Systems Service Pack 1 Microsoft Silverlight 5 when installed on Microsoft Windows (x64-based) Microsoft Silverlight 5 when installed on Apple Mac OS (Intel-based) Microsoft Office 2007 Service Pack 3 Microsoft Excel 2007 Service Pack 3 Microsoft Outlook 2007 Service Pack 3 Microsoft PowerPoint 2007 Service Pack 3 Microsoft Excel Viewer 2007 Service Pack 3 Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) Internet Explorer 9 on Windows Vista Service Pack 2 Internet Explorer 9 on Windows Server 2008 for 32-bit Systems Service Pack 2 Internet Explorer 9 on Windows Vista x64 Edition Service Pack 2 Internet Explorer 9 on Windows Server 2008 for x64-based Systems Service Pack 2 Windows Server 2012 Windows Server 2012 (Server Core installation) Adobe Flash Player on Windows Server 2012 Adobe Flash Player on Windows 8.1 for 32-bit systems Adobe Flash Player on Windows 8.1 for x64-based systems Adobe Flash Player on Windows Server 2012 R2 Adobe Flash Player on Windows RT 8.1 Adobe Flash Player on Windows 10 for 32-bit Systems Adobe Flash Player on Windows 10 for x64-based Systems Adobe Flash Player on Windows 10 Version 1511 for x64-based Systems Adobe Flash Player on Windows 10 Version 1511 for 32-bit Systems Adobe Flash Player on Windows 10 Version 1607 for 32-bit Systems Adobe Flash Player on Windows 10 Version 1607 for x64-based Systems Microsoft Outlook 2013 RT Service Pack 1 Microsoft Silverlight 5 Developer Runtime when installed on Apple Mac OS (Intel-based) Microsoft Silverlight 5 when installed on Microsoft Windows (32-bit) Microsoft Silverlight 5 Developer Runtime when installed on Microsoft Windows (x64-based) Microsoft Silverlight 5 Developer Runtime when installed on Microsoft Windows (32-bit) Microsoft Exchange Server 2010 Service Pack 3 Windows 8.1 for 32-bit systems Windows 8.1 for x64-based systems Windows Server 2012 R2 Windows RT 8.1 Internet Explorer 11 on Windows 7 for 32-bit Systems Service Pack 1 Internet Explorer 11 on Windows 7 for x64-based Systems Service Pack 1 Internet Explorer 11 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 Internet Explorer 11 on Windows 8.1 for 32-bit systems Internet Explorer 11 on Windows 8.1 for x64-based systems Internet Explorer 11 on Windows Server 2012 R2 Internet Explorer 11 on Windows RT 8.1 Internet Explorer 11 on Windows 10 for 32-bit Systems Internet Explorer 11 on Windows 10 for x64-based Systems Internet Explorer 11 on Windows 10 Version 1511 for x64-based Systems Internet Explorer 11 on Windows 10 Version 1511 for 32-bit Systems Internet Explorer 11 on Windows 10 Version 1607 for 32-bit Systems Internet Explorer 11 on Windows 10 Version 1607 for x64-based Systems Microsoft Excel 2010 Service Pack 2 (32-bit editions) Microsoft Excel 2010 Service Pack 2 (64-bit editions) Microsoft PowerPoint 2010 Service Pack 2 (32-bit editions) Microsoft PowerPoint 2010 Service Pack 2 (64-bit editions) Microsoft Office 2010 Service Pack 2 (32-bit editions) Microsoft Office 2010 Service Pack 2 (64-bit editions) Microsoft Office Web Apps 2010 Service Pack 2 Microsoft Outlook 2010 Service Pack 2 (32-bit editions) Microsoft Outlook 2010 Service Pack 2 (64-bit editions) Windows Server 2012 R2 (Server Core installation) Internet Explorer 10 on Windows Server 2012 Microsoft Office 2013 Service Pack 1 (32-bit editions) Microsoft Office 2013 Service Pack 1 (64-bit editions) Microsoft SharePoint Server 2013 Service Pack 1 Microsoft Office Web Apps Server 2013 Service Pack 1 Microsoft Exchange Server 2013 Service Pack 1 Microsoft Excel 2013 Service Pack 1 (32-bit editions) Microsoft Excel 2013 Service Pack 1 (64-bit editions) Microsoft Excel 2013 RT Service Pack 1 Microsoft Excel 2016 for Mac Microsoft PowerPoint 2016 for Mac Microsoft PowerPoint 2013 Service Pack 1 (32-bit editions) Microsoft PowerPoint 2013 Service Pack 1 (64-bit editions) Microsoft PowerPoint 2013 RT Service Pack 1 Microsoft Edge (EdgeHTML-based) on Windows 10 for 32-bit Systems Microsoft Edge (EdgeHTML-based) on Windows 10 for x64-based Systems Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1511 for x64-based Systems Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1511 for 32-bit Systems Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for 32-bit Systems Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for x64-based Systems Windows 10 for 32-bit Systems Windows 10 for x64-based Systems Microsoft Excel 2016 (32-bit edition) Microsoft Excel 2016 (64-bit edition) Microsoft Office Online Server 2016 Microsoft Office 2016 (32-bit edition) Microsoft Office 2016 (64-bit edition) Microsoft Outlook 2016 (32-bit edition) Microsoft Outlook 2016 (64-bit edition) Microsoft Outlook 2016 for Mac Windows 10 Version 1511 for x64-based Systems Windows 10 Version 1511 for 32-bit Systems Microsoft Outlook 2013 Service Pack 1 (32-bit editions) Microsoft Outlook 2013 Service Pack 1 (64-bit editions) Microsoft Exchange Server 2013 Cumulative Update 12 Microsoft Exchange Server 2016 Cumulative Update 1 Windows 10 Version 1607 for 32-bit Systems Windows 10 Version 1607 for x64-based Systems Microsoft Exchange Server 2013 Cumulative Update 13 Microsoft Exchange Server 2016 Cumulative Update 2 Excel Automation Services on Microsoft SharePoint Server 2013 Service Pack 1 Windows 10 Version 1703 for 32-bit Systems Windows 10 Version 1703 for x64-based Systems Microsoft PowerPoint Viewer Windows Vista Service Pack 2 Microsoft Office Compatibility Pack Service Pack 3 Excel Services on Microsoft SharePoint Server 2007 Service Pack 3 (64-bit editions) Excel Services on Microsoft SharePoint Server 2007 Service Pack 3 (32-bit editions) Excel Services on Microsoft SharePoint Server 2010 Service Pack 2 Excel Services on Microsoft Sharepoint Server 2010 Service Pack 2 Bad Windows Server 2008 for Itanium-Based Systems Service Pack 2 Windows Server 2008 for 32-bit Systems Service Pack 2 Windows Vista x64 Edition Service Pack 2 Windows Server 2008 for x64-based Systems Service Pack 2 Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) Scripting Engine Memory Corruption Vulnerability <p>A remote code execution vulnerability exists in the way that the Microsoft OLE Automation mechanism and the VBScript Scripting Engine in Internet Explorer access objects in memory. The vulnerability could corrupt memory in a way that could allow an attacker to execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, the attacker could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p> <p>An attacker could host a specially crafted website that is designed to exploit the vulnerability through Internet Explorer, and then convince a user to view the website. The attacker could also take advantage of compromised websites, or websites that accept or host user-provided content or advertisements, by adding specially crafted content that could exploit the vulnerability. In all cases, however, an attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically via an enticement in email or instant message, or by getting them to open an email attachment.</p> <p>Note that to be protected from CVE-2016-3375, you must install all of the updates listed in the Affected Products table for the software installed on your system. The updates address the vulnerability by modifying how the Microsoft OLE Automation mechanism and the VBScript Scripting Engine in Internet Explorer handle objects in memory.</p> <p><strong>In addition to installing this update are there any further steps I need to carry out to be protected from CVE-2016-3375?</strong> Yes. Although protecting Windows 10 systems from CVE-2016-3375 requires no additional steps other than installing the September Windows 10 cumulative update, for all other affected operating systems installing the 3185319 cumulative update by itself does not fully protect against CVE-2016-3375 — you must also install security update 3184122 to be fully protected from the vulnerability.</p> <p><strong>I am running Internet Explorer on Windows Server 2008, Windows Server 2008 R2, Windows Server 2012, or Windows Server 2012 R2. Does this mitigate these vulnerabilities?</strong>  Yes. By default, Internet Explorer on Windows Server 2008, Windows Server 2008 R2, Windows Server 2012, and Windows Server 2012 R2 runs in a restricted mode that is known as <a href="https://technet.microsoft.com/library/dd883248">Enhanced Security Configuration</a>. Enhanced Security Configuration is a group of preconfigured settings in Internet Explorer that can reduce the likelihood of a user or administrator downloading and running specially crafted web content on a server. This is a mitigating factor for websites that you have not added to the Internet Explorer Trusted sites zone.</p> <p><strong>Can EMET help mitigate attacks that attempt to exploit these vulnerabilities?</strong> Yes. The Enhanced Mitigation Experience Toolkit (EMET) enables users to manage security mitigation technologies that help make it more difficult for attackers to exploit memory corruption vulnerabilities in a given piece of software. EMET can help mitigate attacks that attempt to exploit these vulnerabilities in Internet Explorer on systems where EMET is installed and configured to work with Internet Explorer. For more information about EMET, see the <a href="https://technet.microsoft.com/security/jj653751">Enhanced Mitigation Experience Toolkit</a>.</p> Internet Explorer Microsoft Yes CVE-2016-3375 4393 9311 9312 9316 9318 9344 10287 10484 10729 10735 10789 10788 10852 10853 10555-10378 10486-10481 10486-10482 10486-10483 10486-10484 10486-10047 10486-10048 10486-10051 10486-10729 10486-10735 10486-10789 10486-10788 10486-10852 10486-10853 Remote Code Execution 4393 Remote Code Execution 9311 Remote Code Execution 9312 Remote Code Execution 9316 Remote Code Execution 9318 Remote Code Execution 9344 Remote Code Execution 10287 Remote Code Execution 10484 Remote Code Execution 10729 Remote Code Execution 10735 Remote Code Execution 10789 Remote Code Execution 10788 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10555-10378 Remote Code Execution 10486-10481 Remote Code Execution 10486-10482 Remote Code Execution 10486-10483 Remote Code Execution 10486-10484 Remote Code Execution 10486-10047 Remote Code Execution 10486-10048 Remote Code Execution 10486-10051 Remote Code Execution 10486-10729 Remote Code Execution 10486-10735 Remote Code Execution 10486-10789 Remote Code Execution 10486-10788 Remote Code Execution 10486-10852 Remote Code Execution 10486-10853 Critical 4393 Moderate 9311 Moderate 9312 Critical 9316 Moderate 9318 Moderate 9344 Moderate 10287 Critical 10484 Critical 10729 Critical 10735 Critical 10789 Critical 10788 Critical 10852 Critical 10853 Moderate 10555-10378 Critical 10486-10481 Critical 10486-10482 Moderate 10486-10483 Critical 10486-10484 Critical 10486-10047 Critical 10486-10048 Moderate 10486-10051 Critical 10486-10729 Critical 10486-10735 Critical 10486-10789 Critical 10486-10788 Critical 10486-10852 Critical 10486-10853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A 7.5 6.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10484 7.5 6.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10729 7.5 6.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10735 7.5 6.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10789 7.5 6.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10788 7.5 6.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10852 7.5 6.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10853 3.7 3.4 CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10555-10378 7.5 6.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10486-10481 7.5 6.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10486-10482 3.7 3.4 CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10486-10483 7.5 6.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10486-10484 7.5 6.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10486-10047 7.5 6.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10486-10048 3.7 3.4 CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10486-10051 7.5 6.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10486-10729 7.5 6.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10486-10735 7.5 6.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10486-10789 7.5 6.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10486-10788 7.5 6.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10486-10852 7.5 6.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10486-10853 3184122 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3184122 3006226 4393 9311 9312 9316 9318 9344 10287 Yes Security Update 3184122 3006226 10484 Yes Security Update 3185611 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185611 3176492 10729 10735 10486-10729 Yes Security Update 3185614 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3193494 3176493 10789 10486-10789 mshtml.dll;ntkrnlmp.exe;ntkrpamp.exe;csrsrv.dll;pnidui.dll;win32kbase.sys;win32kfull.sys;ntdsai.dll;inputservice.dll;securekernel.exe;srv.sys;srv2.sys;srvnet.sys;winresume.exe;winresume.efi;ieframe.dll;emodel.dll;chakra.dll;ieinstal.exe;edgehtml.dll;mobile;only;vbscript.dll;oleaut32.dll;wininet.dll;lsasrv.dll;lsass.exe;wow6432;sspicli.dll;msv1_0.dll;ksecdd.sys;mrxsmb.sys;mrxsmb10.sys;mrxsmb20.sys;windows.data.pdf.dll 0001-01-01T00:00:00 Yes Security Update 3185614 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185614 3176493 10788 10486-10788 mshtml.dll;ntkrnlmp.exe;ntkrpamp.exe;csrsrv.dll;pnidui.dll;win32kbase.sys;win32kfull.sys;ntdsai.dll;inputservice.dll;securekernel.exe;srv.sys;srv2.sys;srvnet.sys;winresume.exe;winresume.efi;ieframe.dll;emodel.dll;chakra.dll;ieinstal.exe;edgehtml.dll;mobile;only;vbscript.dll;oleaut32.dll;wininet.dll;lsasrv.dll;lsass.exe;wow6432;sspicli.dll;msv1_0.dll;ksecdd.sys;mrxsmb.sys;mrxsmb10.sys;mrxsmb20.sys;windows.data.pdf.dll 0001-01-01T00:00:00 Yes Security Update 3189866 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3189866 3176495 10852 10853 10486-10852 10486-10853 ntkrnlmp.exe;ntkrpamp.exe;pnidui.dll;win32kbase.sys;win32kfull.sys;ntdsai.dll;inputservice.dll;srv.sys;mshtml.dll;windowscodecs.dll;chakra.dll;ieinstal.exe;edgehtml.dll;vbscript.dll;oleaut32.dll;wininet.dll;lsasrv.dll;lsass.exe;wow6432;sspicli.dll;msv1_0.dll;ksecdd.sys;mrxsmb.sys;mrxsmb10.sys;mrxsmb20.sys;ieframe.dll;windows.data.pdf.dll 0001-01-01T00:00:00 Yes Security Update 3185319 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185319 3175443 10555-10378 10486-10481 10486-10482 10486-10483 10486-10484 10486-10047 10486-10048 10486-10051 Yes Security Update 3185611 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3193494 3176492 10486-10735 ntkrnlmp.exe;ntkrpamp.exe;securekernel.exe;winresume.exe;winresume.efi;ieframe.dll;emodel.dll;mshtml.dll;chakra.dll;wwanconn.dll;oleaut32.dll 0001-01-01T00:00:00 Yes Security Update Yuki Chen of <a href="http://www.360.com/">Qihoo 360 Vulcan Team</a> Anonymous, working with <a href="http://www.zerodayinitiative.com/">Trend Micro's Zero Day Initiative (ZDI)</a> 1.0 2016-09-13T07:00:00 <p>Information published.</p> Windows Secure Kernel Mode Information Disclosure Vulnerability <p>An information disclosure vulnerability exists when Windows Secure Kernel Mode improperly handles objects in memory. A locally authenticated attacker who successfully exploited this vulnerability could be able to read sensitive information on the target system.</p> <p>To exploit this vulnerability, an attacker could run a specially crafted application on the target system. Note that the information disclosure vulnerability by itself would not be sufficient for an attacker to compromise a system. However, an attacker could combine this vulnerability with additional vulnerabilities to further exploit the system.</p> <p>The update addresses the vulnerability by correcting how Windows Secure Kernel Mode handles objects in memory.</p> Windows Secure Kernel Mode Microsoft Yes CVE-2016-3344 10729 10735 10789 10788 Information Disclosure 10729 Information Disclosure 10735 Information Disclosure 10789 Information Disclosure 10788 Important 10729 Important 10735 Important 10789 Important 10788 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely;Older Software Release:Exploitation Unlikely;DOS:N/A 5.0 4.2 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:R 10729 5.0 4.2 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:R 10735 5.0 4.2 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:R 10789 5.0 4.2 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:R 10788 3185611 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3193494 3176492 10729 ntkrnlmp.exe;ntkrpamp.exe;securekernel.exe;winresume.exe;winresume.efi;ieframe.dll;emodel.dll;mshtml.dll;chakra.dll;wwanconn.dll 0001-01-01T00:00:00 Yes Security Update 3185611 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3193494 3176492 10735 ntkrnlmp.exe;ntkrpamp.exe;securekernel.exe;winresume.exe;winresume.efi;ieframe.dll;emodel.dll;mshtml.dll;chakra.dll;wwanconn.dll;oleaut32.dll 0001-01-01T00:00:00 Yes Security Update 3185614 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3193494 3176493 10789 mshtml.dll;ntkrnlmp.exe;ntkrpamp.exe;csrsrv.dll;pnidui.dll;win32kbase.sys;win32kfull.sys;ntdsai.dll;inputservice.dll;securekernel.exe;srv.sys;srv2.sys;srvnet.sys;winresume.exe;winresume.efi;ieframe.dll;emodel.dll;chakra.dll;ieinstal.exe;edgehtml.dll;mobile;only;vbscript.dll;oleaut32.dll;wininet.dll;lsasrv.dll;lsass.exe;wow6432;sspicli.dll;msv1_0.dll;ksecdd.sys;mrxsmb.sys;mrxsmb10.sys;mrxsmb20.sys;windows.data.pdf.dll 0001-01-01T00:00:00 Yes Security Update 3185614 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185614 3176493 10788 mshtml.dll;ntkrnlmp.exe;ntkrpamp.exe;csrsrv.dll;pnidui.dll;win32kbase.sys;win32kfull.sys;ntdsai.dll;inputservice.dll;securekernel.exe;srv.sys;srv2.sys;srvnet.sys;winresume.exe;winresume.efi;ieframe.dll;emodel.dll;chakra.dll;ieinstal.exe;edgehtml.dll;mobile;only;vbscript.dll;oleaut32.dll;wininet.dll;lsasrv.dll;lsass.exe;wow6432;sspicli.dll;msv1_0.dll;ksecdd.sys;mrxsmb.sys;mrxsmb10.sys;mrxsmb20.sys;windows.data.pdf.dll 0001-01-01T00:00:00 Yes Security Update 1.0 2016-09-13T07:00:00 <p>Information published.</p> Windows Lock Screen Elevation of Privilege Vulnerability <p>An elevation of privilege vulnerability exists when Windows improperly allows web content to load from the Windows lock screen. To exploit the vulnerability, an attacker with physical access to a user’s computer could either connect to a maliciously configured WiFi hotspot or insert a mobile broadband adaptor in the user’s computer.</p> <p>An attacker who successfully exploited the vulnerability could potentially execute code on a user's locked computer. However, the attacker would have no way to either force a user to connect to the hotspot or control the default browser selection on the user’s computer.</p> <p>The security update addresses the vulnerability by correcting the behavior of the Windows lock screen to prevent unintended web content from loading.</p> Windows Lock Screen Microsoft Yes CVE-2016-3302 10729 10735 10789 10788 10481 10482 10484 10483 10543 10852 10853 Elevation of Privilege 10729 Elevation of Privilege 10735 Elevation of Privilege 10789 Elevation of Privilege 10788 Elevation of Privilege 10481 Elevation of Privilege 10482 Elevation of Privilege 10484 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 10852 Elevation of Privilege 10853 Important 10729 Important 10735 Important 10789 Important 10788 Important 10481 Important 10482 Important 10484 Important 10483 Important 10543 Important 10852 Important 10853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely;Older Software Release:Exploitation Unlikely;DOS:N/A 7.0 6.1 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:R 10729 7.0 6.1 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:R 10735 7.0 6.1 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:R 10789 7.0 6.1 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:R 10788 7.0 6.1 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:R 10481 7.0 6.1 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:R 10482 7.0 6.1 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:R 10484 7.0 6.1 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:R 10483 7.0 6.1 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:R 10543 7.0 6.1 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:R 10852 7.0 6.1 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:R 10853 3185611 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185611 3176492 10729 10735 Yes Security Update 3185614 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3193494 3176493 10789 mshtml.dll;ntkrnlmp.exe;ntkrpamp.exe;csrsrv.dll;pnidui.dll;win32kbase.sys;win32kfull.sys;ntdsai.dll;inputservice.dll;securekernel.exe;srv.sys;srv2.sys;srvnet.sys;winresume.exe;winresume.efi;ieframe.dll;emodel.dll;chakra.dll;ieinstal.exe;edgehtml.dll;mobile;only;vbscript.dll;oleaut32.dll;wininet.dll;lsasrv.dll;lsass.exe;wow6432;sspicli.dll;msv1_0.dll;ksecdd.sys;mrxsmb.sys;mrxsmb10.sys;mrxsmb20.sys;windows.data.pdf.dll 0001-01-01T00:00:00 Yes Security Update 3185614 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185614 3176493 10788 mshtml.dll;ntkrnlmp.exe;ntkrpamp.exe;csrsrv.dll;pnidui.dll;win32kbase.sys;win32kfull.sys;ntdsai.dll;inputservice.dll;securekernel.exe;srv.sys;srv2.sys;srvnet.sys;winresume.exe;winresume.efi;ieframe.dll;emodel.dll;chakra.dll;ieinstal.exe;edgehtml.dll;mobile;only;vbscript.dll;oleaut32.dll;wininet.dll;lsasrv.dll;lsass.exe;wow6432;sspicli.dll;msv1_0.dll;ksecdd.sys;mrxsmb.sys;mrxsmb10.sys;mrxsmb20.sys;windows.data.pdf.dll 0001-01-01T00:00:00 Yes Security Update 3178539 https://www.microsoft.com/download/details.aspx?familyid=ba985332-6909-4801-befc-288fa00a641c 10481 Yes Security Update 3178539 https://www.microsoft.com/download/details.aspx?familyid=aec7fbe4-ed20-4a91-ad19-92bbd9698e06 10482 10483 10543 Yes Security Update 3178539 10484 Yes Security Update 3189866 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3189866 3176495 10852 10853 ntkrnlmp.exe;ntkrpamp.exe;pnidui.dll;win32kbase.sys;win32kfull.sys;ntdsai.dll;inputservice.dll;srv.sys;mshtml.dll;windowscodecs.dll;chakra.dll;ieinstal.exe;edgehtml.dll;vbscript.dll;oleaut32.dll;wininet.dll;lsasrv.dll;lsass.exe;wow6432;sspicli.dll;msv1_0.dll;ksecdd.sys;mrxsmb.sys;mrxsmb10.sys;mrxsmb20.sys;ieframe.dll;windows.data.pdf.dll 0001-01-01T00:00:00 Yes Security Update Auri A. Rahimzadeh of <a href="http://auri.net">Auri’s Ideas</a> 1.0 2016-09-13T07:00:00 <p>Information published.</p> Windows SMB Authenticated Remote Code Execution Vulnerability <p>For Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2 operating systems, a remote code execution vulnerability exists in the way that the Microsoft Server Message Block 1.0 (SMBv1) Server handles certain requests when an authenticated attacker sends specially crafted packets to the SMBv1 server. The vulnerability does not impact other SMB Server versions.</p> <p>On later operating systems, an attacker who successfully exploited this vulnerability could cause the affected system to stop responding until it is manually restarted.</p> <p>To exploit the vulnerability, an attacker would first need to authenticate to the SMBv1 Server and have permission to open files on the target server before attempting the attack.</p> <p>The security update addresses the vulnerability by correcting how the Microsoft SMBv1 Server handles specially crafted requests.</p> <p><strong>What versions of SMB are impacted by this vulnerability?</strong> This vulnerability affects only SMBv1.</p> <p><strong>What is the difference between SMBv1 and SMBv2?</strong> Both protocols are used by clients to request file and print services from a server system over the network. Both are stateful protocols in which clients establish a connection to a server, establish an authenticated context on that connection, and then issue a variety of requests to access files, printers, and named pipes for interprocess communication. The SMBv2 protocol is a major revision of the existing SMB protocol. While many of the underlying concepts are the same, the packet formats are completely different. In addition to providing all of the capabilities found in SMBv1, the SMBv2 protocol provides several enhancements:</p> <ul> <li>Allowing an open to a file to be reestablished after a client connection becomes temporarily disconnected.</li> <li>Allowing the server to balance the number of simultaneous operations that a client can have outstanding at any time.</li> <li>Providing scalability in terms of the number of shares, users, and simultaneously open files.</li> <li>Supporting symbolic links.</li> <li>Using a stronger algorithm to validate the integrity of requests and responses.</li> </ul> Windows SMB Server Microsoft Yes CVE-2016-3345 10729 10735 10789 10788 10047 10048 10481 10482 10484 9312 10287 9311 9318 9344 10050 10051 10049 10378 10379 10483 10543 4393 9316 10852 10853 Denial of Service 10729 Denial of Service 10735 Denial of Service 10789 Denial of Service 10788 Remote Code Execution 10047 Remote Code Execution 10048 Denial of Service 10481 Denial of Service 10482 Denial of Service 10484 Remote Code Execution 9312 Remote Code Execution 10287 Remote Code Execution 9311 Remote Code Execution 9318 Remote Code Execution 9344 Remote Code Execution 10050 Remote Code Execution 10051 Remote Code Execution 10049 Denial of Service 10378 Denial of Service 10379 Denial of Service 10483 Denial of Service 10543 Remote Code Execution 4393 Remote Code Execution 9316 Denial of Service 10852 Denial of Service 10853 Important 10729 Important 10735 Important 10789 Important 10788 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 9312 Important 10287 Important 9311 Important 9318 Important 9344 Important 10050 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Important 4393 Important 9316 Important 10852 Important 10853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely;Older Software Release:N/A;DOS:N/A 5.0 4.2 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:R 10729 5.0 4.2 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:R 10735 5.0 4.2 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:R 10789 5.0 4.2 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:R 10788 7.3 6.1 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:R 10047 7.3 6.1 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:R 10048 5.0 4.2 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:R 10481 5.0 4.2 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:R 10482 5.0 4.2 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:R 10484 7.3 6.1 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:R 9312 7.3 6.1 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:R 10287 7.3 6.1 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:R 9311 7.3 6.1 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:R 9318 7.3 6.1 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:R 9344 7.3 6.1 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:R 10050 7.3 6.1 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:R 10051 7.3 6.1 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:R 10049 5.0 4.2 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:R 10378 5.0 4.2 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:R 10379 5.0 4.2 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:R 10483 5.0 4.2 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:R 10543 7.3 6.1 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:R 4393 7.3 6.1 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:R 9316 5.0 4.2 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:R 10852 5.0 4.2 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:R 10853 3185611 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185611 3176492 10729 10735 Yes Security Update 3185614 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3193494 3176493 10789 mshtml.dll;ntkrnlmp.exe;ntkrpamp.exe;csrsrv.dll;pnidui.dll;win32kbase.sys;win32kfull.sys;ntdsai.dll;inputservice.dll;securekernel.exe;srv.sys;srv2.sys;srvnet.sys;winresume.exe;winresume.efi;ieframe.dll;emodel.dll;chakra.dll;ieinstal.exe;edgehtml.dll;mobile;only;vbscript.dll;oleaut32.dll;wininet.dll;lsasrv.dll;lsass.exe;wow6432;sspicli.dll;msv1_0.dll;ksecdd.sys;mrxsmb.sys;mrxsmb10.sys;mrxsmb20.sys;windows.data.pdf.dll 0001-01-01T00:00:00 Yes Security Update 3185614 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185614 3176493 10788 mshtml.dll;ntkrnlmp.exe;ntkrpamp.exe;csrsrv.dll;pnidui.dll;win32kbase.sys;win32kfull.sys;ntdsai.dll;inputservice.dll;securekernel.exe;srv.sys;srv2.sys;srvnet.sys;winresume.exe;winresume.efi;ieframe.dll;emodel.dll;chakra.dll;ieinstal.exe;edgehtml.dll;mobile;only;vbscript.dll;oleaut32.dll;wininet.dll;lsasrv.dll;lsass.exe;wow6432;sspicli.dll;msv1_0.dll;ksecdd.sys;mrxsmb.sys;mrxsmb10.sys;mrxsmb20.sys;windows.data.pdf.dll 0001-01-01T00:00:00 Yes Security Update 3177186 https://www.microsoft.com/download/details.aspx?familyid=2fc5b497-1cd6-4195-8e2b-fec332f53f4d 2536275 10047 srv.sys;srv2.sys;srvnet.sys 0001-01-01T00:00:00 Yes Security Update 3177186 https://www.microsoft.com/download/details.aspx?familyid=a1758d07-f328-4584-a87d-15448228fa14 2536275 10048 10051 10049 srv.sys;srv2.sys;srvnet.sys 0001-01-01T00:00:00 Yes Security Update 3177186 https://www.microsoft.com/download/details.aspx?familyid=76cde9cc-1368-478a-b521-4cde9924cc17 3130896 10481 srv.sys 0001-01-01T00:00:00 Yes Security Update 3177186 https://www.microsoft.com/download/details.aspx?familyid=98e89316-e871-42d6-84d3-13e57ca10cc9 3130896 10482 10483 10543 srv.sys 0001-01-01T00:00:00 Yes Security Update 3177186 10484 srv.sys 0001-01-01T00:00:00 Yes Security Update 3177186 https://www.microsoft.com/download/details.aspx?familyid=f6c97580-0371-40e4-baa0-ee0b08568210 3073921 9312 10287 4393 srv.sys;srv2.sys;srvnet.sys;netevent.dll;netevent.dll.mui 0001-01-01T00:00:00 Yes Security Update 3177186 https://www.microsoft.com/download/details.aspx?familyid=d9f05505-d358-4c99-a6c9-af82010ac6a3 3073921 9311 srv.sys;srv2.sys;srvnet.sys;netevent.dll;netevent.dll.mui 0001-01-01T00:00:00 Yes Security Update 3177186 https://www.microsoft.com/download/details.aspx?familyid=f694edbd-f71b-4d18-b5ae-ef65bfefd5f9 3073921 9318 9344 9316 srv.sys;srv2.sys;srvnet.sys;netevent.dll;netevent.dll.mui 0001-01-01T00:00:00 Yes Security Update 3177186 https://www.microsoft.com/download/details.aspx?familyid=bbf1d6ba-e30f-41a8-ad72-bf004014a47f 2536275 10050 srv.sys;srv2.sys;srvnet.sys 0001-01-01T00:00:00 Yes Security Update 3177186 https://www.microsoft.com/download/details.aspx?familyid=f6370a66-2bfe-463e-88a2-3ce5dbaa4147 3130896 10378 10379 srv.sys;srv2.sys;srvnet.sys 0001-01-01T00:00:00 Yes Security Update 3189866 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3189866 3176495 10852 10853 ntkrnlmp.exe;ntkrpamp.exe;pnidui.dll;win32kbase.sys;win32kfull.sys;ntdsai.dll;inputservice.dll;srv.sys;mshtml.dll;windowscodecs.dll;chakra.dll;ieinstal.exe;edgehtml.dll;vbscript.dll;oleaut32.dll;wininet.dll;lsasrv.dll;lsass.exe;wow6432;sspicli.dll;msv1_0.dll;ksecdd.sys;mrxsmb.sys;mrxsmb10.sys;mrxsmb20.sys;ieframe.dll;windows.data.pdf.dll 0001-01-01T00:00:00 Yes Security Update <p><strong>Disable SMBv1</strong></p> <p><strong>For customers running Windows Vista and later</strong> <a href="https://support.microsoft.com/kb/2696547">See Microsoft Knowledge Base Article 2696547</a>.</p> <p><strong>Alternative method for customers running Windows 8.1 or Windows Server 2012 R2 and later</strong> For client operating systems:</p> <ol> <li>Open <strong>Control Panel</strong>, click <strong>Programs</strong>, and then click <strong>Turn Windows features on or off</strong>.</li> <li>In the <strong>Windows Features</strong> window, clear the <strong>SMB1.0/CIFS File Sharing Support</strong> checkbox, and then click <strong>OK</strong> to close the window.</li> <li>Restart the system.</li> </ol> <p>For server operating systems:</p> <ol> <li>Open <strong>Server Manager</strong> and then click the <strong>Manage</strong> menu and select <strong>Remove Roles and Features</strong>.</li> <li>In the Features window, clear the <strong>SMB1.0/CIFS File Sharing Support</strong> check box, and then click OK to close the window.</li> <li>Restart the system.</li> </ol> <p><strong>Impact of workaround.</strong> The SMBv1 protocol will be disabled on the target system.</p> <p><strong>How to undo the workaround</strong>. Retrace the workaround steps, and select the <strong>SMB1.0/CIFS File Sharing Support</strong> check box to restore the SMB1.0/CIFS File Sharing Support feature to an active state.</p> Oleg Kravtsov of <a href="https://www.tuxera.com/">Tuxera Inc</a> Alexander Ovchinnikov of <a href"https://www.tuxera.com">Tuxera Inc</a> 1.0 2016-09-13T07:00:00 <p>Information published.</p> Windows Kernel Local Elevation of Privilege Vulnerability <p>An elevation of privilege vulnerability exists when the Windows Kernel API improperly allows a user to access sensitive registry information. An attacker who successfully exploited the vulnerability could gain access to user account information that is not intended for the user.</p> <p>A locally authenticated attacker could exploit this vulnerability by running a specially crafted application.</p> <p>The security update addresses the vulnerability by helping to ensure that the Windows Kernel API correctly restricts access to user account information.</p> Windows Kernel Microsoft Yes CVE-2016-3373 10729 10735 10789 10788 10852 10853 10047 10048 10481 10482 10484 9312 10287 9311 9318 9344 10050 10051 10049 10378 10379 10483 10543 4393 9316 Elevation of Privilege 10729 Elevation of Privilege 10735 Elevation of Privilege 10789 Elevation of Privilege 10788 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10047 Elevation of Privilege 10048 Elevation of Privilege 10481 Elevation of Privilege 10482 Elevation of Privilege 10484 Elevation of Privilege 9312 Elevation of Privilege 10287 Elevation of Privilege 9311 Elevation of Privilege 9318 Elevation of Privilege 9344 Elevation of Privilege 10050 Elevation of Privilege 10051 Elevation of Privilege 10049 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 4393 Elevation of Privilege 9316 Important 10729 Important 10735 Important 10789 Important 10788 Important 10852 Important 10853 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 9312 Important 10287 Important 9311 Important 9318 Important 9344 Important 10050 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Important 4393 Important 9316 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A 6.8 6.1 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10729 6.8 6.1 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10735 6.8 6.1 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10789 6.8 6.1 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10788 6.8 6.1 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10852 6.8 6.1 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10853 6.8 6.1 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10047 6.8 6.1 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10048 6.8 6.1 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10481 6.8 6.1 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10482 6.8 6.1 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10484 6.8 6.1 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 9312 6.8 6.1 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10287 6.8 6.1 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 9311 6.8 6.1 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 9318 6.8 6.1 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 9344 6.8 6.1 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10050 6.8 6.1 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10051 6.8 6.1 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10049 6.8 6.1 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10378 6.8 6.1 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10379 6.8 6.1 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10483 6.8 6.1 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10543 6.8 6.1 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 4393 6.8 6.1 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 9316 3185611 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3193494 3176492 10729 ntkrnlmp.exe;ntkrpamp.exe;securekernel.exe;winresume.exe;winresume.efi;ieframe.dll;emodel.dll;mshtml.dll;chakra.dll;wwanconn.dll 0001-01-01T00:00:00 Yes Security Update 3185611 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3193494 3176492 10735 ntkrnlmp.exe;ntkrpamp.exe;securekernel.exe;winresume.exe;winresume.efi;ieframe.dll;emodel.dll;mshtml.dll;chakra.dll;wwanconn.dll;oleaut32.dll 0001-01-01T00:00:00 Yes Security Update 3185614 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3193494 3176493 10789 mshtml.dll;ntkrnlmp.exe;ntkrpamp.exe;csrsrv.dll;pnidui.dll;win32kbase.sys;win32kfull.sys;ntdsai.dll;inputservice.dll;securekernel.exe;srv.sys;srv2.sys;srvnet.sys;winresume.exe;winresume.efi;ieframe.dll;emodel.dll;chakra.dll;ieinstal.exe;edgehtml.dll;mobile;only;vbscript.dll;oleaut32.dll;wininet.dll;lsasrv.dll;lsass.exe;wow6432;sspicli.dll;msv1_0.dll;ksecdd.sys;mrxsmb.sys;mrxsmb10.sys;mrxsmb20.sys;windows.data.pdf.dll 0001-01-01T00:00:00 Yes Security Update 3185614 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185614 3176493 10788 mshtml.dll;ntkrnlmp.exe;ntkrpamp.exe;csrsrv.dll;pnidui.dll;win32kbase.sys;win32kfull.sys;ntdsai.dll;inputservice.dll;securekernel.exe;srv.sys;srv2.sys;srvnet.sys;winresume.exe;winresume.efi;ieframe.dll;emodel.dll;chakra.dll;ieinstal.exe;edgehtml.dll;mobile;only;vbscript.dll;oleaut32.dll;wininet.dll;lsasrv.dll;lsass.exe;wow6432;sspicli.dll;msv1_0.dll;ksecdd.sys;mrxsmb.sys;mrxsmb10.sys;mrxsmb20.sys;windows.data.pdf.dll 0001-01-01T00:00:00 Yes Security Update 3189866 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3189866 3176495 10852 10853 ntkrnlmp.exe;ntkrpamp.exe;pnidui.dll;win32kbase.sys;win32kfull.sys;ntdsai.dll;inputservice.dll;srv.sys;mshtml.dll;windowscodecs.dll;chakra.dll;ieinstal.exe;edgehtml.dll;vbscript.dll;oleaut32.dll;wininet.dll;lsasrv.dll;lsass.exe;wow6432;sspicli.dll;msv1_0.dll;ksecdd.sys;mrxsmb.sys;mrxsmb10.sys;mrxsmb20.sys;ieframe.dll;windows.data.pdf.dll 0001-01-01T00:00:00 Yes Security Update 3175024 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3175024 3170377 10047 10048 9312 10287 9311 9318 9344 10050 10051 10049 4393 9316 Yes Security Update 3175024 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3175024 3170377 10481 10482 10378 10379 10483 10543 ntkrnlmp.exe;ntkrpamp.exe;csrsrv.dll 0001-01-01T00:00:00 Yes Security Update 3175024 3170377 10484 ntkrnlmp.exe;ntkrpamp.exe;csrsrv.dll 0001-01-01T00:00:00 Yes Security Update James Forshaw of <a href="http://www.google.com/" >Google Project Zero</a> 1.0 2016-09-13T07:00:00 <p>Information published.</p> Windows Elevation of Privilege Vulnerability <p>An elevation of privilege vulnerability exists in the way that the Windows Kernel API enforces permissions. An attacker who successfully exploited the vulnerability could impersonate processes, interject cross-process communication, or interrupt system functionality.</p> <p>To exploit the vulnerability, a locally authenticated attacker could run a specially crafted application.</p> <p>The security update addresses the vulnerability by helping to ensure that the Windows Kernel API properly enforces permissions.</p> Windows Kernel Microsoft Yes CVE-2016-3372 9312 10287 9311 9318 9344 4393 9316 Elevation of Privilege 9312 Elevation of Privilege 10287 Elevation of Privilege 9311 Elevation of Privilege 9318 Elevation of Privilege 9344 Elevation of Privilege 4393 Elevation of Privilege 9316 Important 9312 Important 10287 Important 9311 Important 9318 Important 9344 Important 4393 Important 9316 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A;Older Software Release:Exploitation Unlikely;DOS:N/A 4.2 3.7 CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L/E:U/RL:O/RC:C 9312 4.2 3.7 CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L/E:U/RL:O/RC:C 10287 4.2 3.7 CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L/E:U/RL:O/RC:C 9311 4.2 3.7 CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L/E:U/RL:O/RC:C 9318 4.2 3.7 CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L/E:U/RL:O/RC:C 9344 4.2 3.7 CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L/E:U/RL:O/RC:C 4393 4.2 3.7 CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L/E:U/RL:O/RC:C 9316 3175024 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3175024 3170377 9312 10287 9311 9318 9344 4393 9316 Yes Security Update Marcin Wiazowski, Individual 1.0 2016-09-13T07:00:00 <p>Information published.</p> Windows Elevation of Privilege Vulnerability <p>An elevation of privilege vulnerability exists in the way that the Windows Kernel API enforces permissions. An attacker who successfully exploited the vulnerability could impersonate processes, interject cross-process communication, or interrupt system functionality.</p> <p>To exploit the vulnerability, a locally authenticated attacker could run a specially crafted application.</p> <p>The security update addresses the vulnerability by helping to ensure that the Windows Kernel API properly enforces permissions.</p> Windows Kernel Microsoft Yes CVE-2016-3371 10729 10735 10789 10788 10047 10048 10481 10482 10484 9312 10287 9311 9318 9344 10050 10051 10049 10378 10379 10483 10543 4393 9316 10852 10853 Elevation of Privilege 10729 Elevation of Privilege 10735 Elevation of Privilege 10789 Elevation of Privilege 10788 Elevation of Privilege 10047 Elevation of Privilege 10048 Elevation of Privilege 10481 Elevation of Privilege 10482 Elevation of Privilege 10484 Elevation of Privilege 9312 Elevation of Privilege 10287 Elevation of Privilege 9311 Elevation of Privilege 9318 Elevation of Privilege 9344 Elevation of Privilege 10050 Elevation of Privilege 10051 Elevation of Privilege 10049 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 4393 Elevation of Privilege 9316 Elevation of Privilege 10852 Elevation of Privilege 10853 Important 10729 Important 10735 Important 10789 Important 10788 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 9312 Important 10287 Important 9311 Important 9318 Important 9344 Important 10050 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Important 4393 Important 9316 Important 10852 Important 10853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A 6.8 6.1 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10729 6.8 6.1 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10735 6.8 6.1 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10789 6.8 6.1 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10788 6.8 6.1 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10047 6.8 6.1 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10048 6.8 6.1 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10481 6.8 6.1 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10482 6.8 6.1 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10484 6.8 6.1 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 9312 6.8 6.1 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10287 6.8 6.1 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 9311 6.8 6.1 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 9318 6.8 6.1 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 9344 6.8 6.1 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10050 6.8 6.1 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10051 6.8 6.1 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10049 6.8 6.1 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10378 6.8 6.1 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10379 6.8 6.1 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10483 6.8 6.1 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10543 6.8 6.1 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 4393 6.8 6.1 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 9316 6.8 6.1 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10852 6.8 6.1 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10853 3185611 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3193494 3176492 10729 ntkrnlmp.exe;ntkrpamp.exe;securekernel.exe;winresume.exe;winresume.efi;ieframe.dll;emodel.dll;mshtml.dll;chakra.dll;wwanconn.dll 0001-01-01T00:00:00 Yes Security Update 3185611 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3193494 3176492 10735 ntkrnlmp.exe;ntkrpamp.exe;securekernel.exe;winresume.exe;winresume.efi;ieframe.dll;emodel.dll;mshtml.dll;chakra.dll;wwanconn.dll;oleaut32.dll 0001-01-01T00:00:00 Yes Security Update 3185614 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3193494 3176493 10789 mshtml.dll;ntkrnlmp.exe;ntkrpamp.exe;csrsrv.dll;pnidui.dll;win32kbase.sys;win32kfull.sys;ntdsai.dll;inputservice.dll;securekernel.exe;srv.sys;srv2.sys;srvnet.sys;winresume.exe;winresume.efi;ieframe.dll;emodel.dll;chakra.dll;ieinstal.exe;edgehtml.dll;mobile;only;vbscript.dll;oleaut32.dll;wininet.dll;lsasrv.dll;lsass.exe;wow6432;sspicli.dll;msv1_0.dll;ksecdd.sys;mrxsmb.sys;mrxsmb10.sys;mrxsmb20.sys;windows.data.pdf.dll 0001-01-01T00:00:00 Yes Security Update 3185614 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185614 3176493 10788 mshtml.dll;ntkrnlmp.exe;ntkrpamp.exe;csrsrv.dll;pnidui.dll;win32kbase.sys;win32kfull.sys;ntdsai.dll;inputservice.dll;securekernel.exe;srv.sys;srv2.sys;srvnet.sys;winresume.exe;winresume.efi;ieframe.dll;emodel.dll;chakra.dll;ieinstal.exe;edgehtml.dll;mobile;only;vbscript.dll;oleaut32.dll;wininet.dll;lsasrv.dll;lsass.exe;wow6432;sspicli.dll;msv1_0.dll;ksecdd.sys;mrxsmb.sys;mrxsmb10.sys;mrxsmb20.sys;windows.data.pdf.dll 0001-01-01T00:00:00 Yes Security Update 3175024 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3175024 3170377 10047 10048 9312 10287 9311 9318 9344 10050 10051 10049 Yes Security Update 3175024 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3175024 3170377 10481 10482 10378 10379 10483 10543 ntkrnlmp.exe;ntkrpamp.exe;csrsrv.dll 0001-01-01T00:00:00 Yes Security Update 3175024 3170377 10484 ntkrnlmp.exe;ntkrpamp.exe;csrsrv.dll 0001-01-01T00:00:00 Yes Security Update 3175024 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3175024 3170377 4393 9316 ntkrnlmp.exe;ntkrpamp.exe 0001-01-01T00:00:00 Yes Security Update 3189866 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3189866 3176495 10852 10853 ntkrnlmp.exe;ntkrpamp.exe;pnidui.dll;win32kbase.sys;win32kfull.sys;ntdsai.dll;inputservice.dll;srv.sys;mshtml.dll;windowscodecs.dll;chakra.dll;ieinstal.exe;edgehtml.dll;vbscript.dll;oleaut32.dll;wininet.dll;lsasrv.dll;lsass.exe;wow6432;sspicli.dll;msv1_0.dll;ksecdd.sys;mrxsmb.sys;mrxsmb10.sys;mrxsmb20.sys;ieframe.dll;windows.data.pdf.dll 0001-01-01T00:00:00 Yes Security Update James Forshaw of <a href="http://www.google.com/" >Google Project Zero</a> 1.0 2016-09-13T07:00:00 <p>Information published.</p> Windows Session Object Elevation of Privilege Vulnerability <p>An elevation of privilege vulnerability exists in the way that Windows handles session objects. A locally authenticated attacker who successfully exploited the vulnerability could hijack the session of another user.</p> <p>To exploit the vulnerability, the attacker could run a specially crafted application.</p> <p>The security update corrects how Windows handles session objects to prevent user session hijacking.</p> Windows Kernel Microsoft Yes CVE-2016-3306 10729 10735 10789 10788 10047 10048 10481 10482 10484 9312 10287 9311 9318 9344 10050 10051 10049 10378 10379 10483 10543 4393 9316 10852 10853 Elevation of Privilege 10729 Elevation of Privilege 10735 Elevation of Privilege 10789 Elevation of Privilege 10788 Elevation of Privilege 10047 Elevation of Privilege 10048 Elevation of Privilege 10481 Elevation of Privilege 10482 Elevation of Privilege 10484 Elevation of Privilege 9312 Elevation of Privilege 10287 Elevation of Privilege 9311 Elevation of Privilege 9318 Elevation of Privilege 9344 Elevation of Privilege 10050 Elevation of Privilege 10051 Elevation of Privilege 10049 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 4393 Elevation of Privilege 9316 Elevation of Privilege 10852 Elevation of Privilege 10853 Important 10729 Important 10735 Important 10789 Important 10788 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 9312 Important 10287 Important 9311 Important 9318 Important 9344 Important 10050 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Important 4393 Important 9316 Important 10852 Important 10853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A 7.8 6.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:R 10729 7.8 6.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:R 10735 7.8 6.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:R 10789 7.8 6.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:R 10788 7.8 6.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:R 10047 7.8 6.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:R 10048 7.8 6.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:R 10481 7.8 6.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:R 10482 7.8 6.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:R 10484 7.8 6.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:R 9312 7.8 6.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:R 10287 7.8 6.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:R 9311 7.8 6.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:R 9318 7.8 6.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:R 9344 7.8 6.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:R 10050 7.8 6.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:R 10051 7.8 6.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:R 10049 7.8 6.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:R 10378 7.8 6.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:R 10379 7.8 6.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:R 10483 7.8 6.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:R 10543 7.8 6.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:R 4393 7.8 6.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:R 9316 7.8 6.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:R 10852 7.8 6.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:R 10853 3185611 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3193494 3176492 10729 ntkrnlmp.exe;ntkrpamp.exe;securekernel.exe;winresume.exe;winresume.efi;ieframe.dll;emodel.dll;mshtml.dll;chakra.dll;wwanconn.dll 0001-01-01T00:00:00 Yes Security Update 3185611 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3193494 3176492 10735 ntkrnlmp.exe;ntkrpamp.exe;securekernel.exe;winresume.exe;winresume.efi;ieframe.dll;emodel.dll;mshtml.dll;chakra.dll;wwanconn.dll;oleaut32.dll 0001-01-01T00:00:00 Yes Security Update 3185614 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3193494 3176493 10789 mshtml.dll;ntkrnlmp.exe;ntkrpamp.exe;csrsrv.dll;pnidui.dll;win32kbase.sys;win32kfull.sys;ntdsai.dll;inputservice.dll;securekernel.exe;srv.sys;srv2.sys;srvnet.sys;winresume.exe;winresume.efi;ieframe.dll;emodel.dll;chakra.dll;ieinstal.exe;edgehtml.dll;mobile;only;vbscript.dll;oleaut32.dll;wininet.dll;lsasrv.dll;lsass.exe;wow6432;sspicli.dll;msv1_0.dll;ksecdd.sys;mrxsmb.sys;mrxsmb10.sys;mrxsmb20.sys;windows.data.pdf.dll 0001-01-01T00:00:00 Yes Security Update 3185614 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185614 3176493 10788 mshtml.dll;ntkrnlmp.exe;ntkrpamp.exe;csrsrv.dll;pnidui.dll;win32kbase.sys;win32kfull.sys;ntdsai.dll;inputservice.dll;securekernel.exe;srv.sys;srv2.sys;srvnet.sys;winresume.exe;winresume.efi;ieframe.dll;emodel.dll;chakra.dll;ieinstal.exe;edgehtml.dll;mobile;only;vbscript.dll;oleaut32.dll;wininet.dll;lsasrv.dll;lsass.exe;wow6432;sspicli.dll;msv1_0.dll;ksecdd.sys;mrxsmb.sys;mrxsmb10.sys;mrxsmb20.sys;windows.data.pdf.dll 0001-01-01T00:00:00 Yes Security Update 3175024 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3175024 3170377 10047 10048 9312 10287 9318 9344 10050 10051 10049 4393 9316 Yes Security Update 3175024 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3175024 3170377 10481 10482 10378 10379 10483 10543 ntkrnlmp.exe;ntkrpamp.exe;csrsrv.dll 0001-01-01T00:00:00 Yes Security Update 3175024 3170377 10484 ntkrnlmp.exe;ntkrpamp.exe;csrsrv.dll 0001-01-01T00:00:00 Yes Security Update 3175024 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3175024 3170377 9311 ntkrnlmp.exe;ntkrpamp.exe 0001-01-01T00:00:00 Yes Security Update 3189866 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3189866 3176495 10852 10853 ntkrnlmp.exe;ntkrpamp.exe;pnidui.dll;win32kbase.sys;win32kfull.sys;ntdsai.dll;inputservice.dll;srv.sys;mshtml.dll;windowscodecs.dll;chakra.dll;ieinstal.exe;edgehtml.dll;vbscript.dll;oleaut32.dll;wininet.dll;lsasrv.dll;lsass.exe;wow6432;sspicli.dll;msv1_0.dll;ksecdd.sys;mrxsmb.sys;mrxsmb10.sys;mrxsmb20.sys;ieframe.dll;windows.data.pdf.dll 0001-01-01T00:00:00 Yes Security Update <a href=”https://www.citrix.com/”>The Citrix Product Security Team</a> 1.0 2016-09-13T07:00:00 <p>Information published.</p> Windows Session Object Elevation of Privilege Vulnerability <p>An elevation of privilege vulnerability exists in the way that Windows handles session objects. A locally authenticated attacker who successfully exploited the vulnerability could hijack the session of another user.</p> <p>To exploit the vulnerability, the attacker could run a specially crafted application.</p> <p>The security update corrects how Windows handles session objects to prevent user session hijacking.</p> Windows Kernel Microsoft Yes CVE-2016-3305 10951 10952 10729 10735 10789 10788 10047 10048 10481 10482 10484 9312 10287 9311 9318 9344 10050 10051 10049 10378 10379 10483 10543 4393 9316 10852 10853 Elevation of Privilege 10951 Elevation of Privilege 10952 Elevation of Privilege 10729 Elevation of Privilege 10735 Elevation of Privilege 10789 Elevation of Privilege 10788 Elevation of Privilege 10047 Elevation of Privilege 10048 Elevation of Privilege 10481 Elevation of Privilege 10482 Elevation of Privilege 10484 Elevation of Privilege 9312 Elevation of Privilege 10287 Elevation of Privilege 9311 Elevation of Privilege 9318 Elevation of Privilege 9344 Elevation of Privilege 10050 Elevation of Privilege 10051 Elevation of Privilege 10049 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 4393 Elevation of Privilege 9316 Elevation of Privilege 10852 Elevation of Privilege 10853 Important 10951 Important 10952 Important 10729 Important 10735 Important 10789 Important 10788 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 9312 Important 10287 Important 9311 Important 9318 Important 9344 Important 10050 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Important 4393 Important 9316 Important 10852 Important 10853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A 7.8 6.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:R 10951 7.8 6.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:R 10952 7.8 6.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:R 10729 7.8 6.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:R 10735 7.8 6.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:R 10789 7.8 6.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:R 10788 7.8 6.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:R 10047 7.8 6.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:R 10048 7.8 6.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:R 10481 7.8 6.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:R 10482 7.8 6.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:R 10484 7.8 6.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:R 9312 7.8 6.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:R 10287 7.8 6.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:R 9311 7.8 6.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:R 9318 7.8 6.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:R 9344 7.8 6.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:R 10050 7.8 6.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:R 10051 7.8 6.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:R 10049 7.8 6.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:R 10378 7.8 6.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:R 10379 7.8 6.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:R 10483 7.8 6.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:R 10543 7.8 6.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:R 4393 7.8 6.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:R 9316 7.8 6.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:R 10852 7.8 6.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:R 10853 4025342 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4025342 4022725 10951 10952 Yes Security Update 3185611 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185611 3176492 10729 10735 Yes Security Update 3185614 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3193494 3176493 10789 mshtml.dll;ntkrnlmp.exe;ntkrpamp.exe;csrsrv.dll;pnidui.dll;win32kbase.sys;win32kfull.sys;ntdsai.dll;inputservice.dll;securekernel.exe;srv.sys;srv2.sys;srvnet.sys;winresume.exe;winresume.efi;ieframe.dll;emodel.dll;chakra.dll;ieinstal.exe;edgehtml.dll;mobile;only;vbscript.dll;oleaut32.dll;wininet.dll;lsasrv.dll;lsass.exe;wow6432;sspicli.dll;msv1_0.dll;ksecdd.sys;mrxsmb.sys;mrxsmb10.sys;mrxsmb20.sys;windows.data.pdf.dll 0001-01-01T00:00:00 Yes Security Update 3185614 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185614 3176493 10788 mshtml.dll;ntkrnlmp.exe;ntkrpamp.exe;csrsrv.dll;pnidui.dll;win32kbase.sys;win32kfull.sys;ntdsai.dll;inputservice.dll;securekernel.exe;srv.sys;srv2.sys;srvnet.sys;winresume.exe;winresume.efi;ieframe.dll;emodel.dll;chakra.dll;ieinstal.exe;edgehtml.dll;mobile;only;vbscript.dll;oleaut32.dll;wininet.dll;lsasrv.dll;lsass.exe;wow6432;sspicli.dll;msv1_0.dll;ksecdd.sys;mrxsmb.sys;mrxsmb10.sys;mrxsmb20.sys;windows.data.pdf.dll 0001-01-01T00:00:00 Yes Security Update 3175024 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3175024 3170377 10047 10048 9312 10287 9311 9318 9344 10050 10051 10049 4393 9316 Yes Security Update 3175024 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3175024 3170377 10481 10482 10378 10379 10483 10543 ntkrnlmp.exe;ntkrpamp.exe;csrsrv.dll 0001-01-01T00:00:00 Yes Security Update 3175024 3170377 10484 ntkrnlmp.exe;ntkrpamp.exe;csrsrv.dll 0001-01-01T00:00:00 Yes Security Update 3189866 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3189866 3176495 10852 10853 ntkrnlmp.exe;ntkrpamp.exe;pnidui.dll;win32kbase.sys;win32kfull.sys;ntdsai.dll;inputservice.dll;srv.sys;mshtml.dll;windowscodecs.dll;chakra.dll;ieinstal.exe;edgehtml.dll;vbscript.dll;oleaut32.dll;wininet.dll;lsasrv.dll;lsass.exe;wow6432;sspicli.dll;msv1_0.dll;ksecdd.sys;mrxsmb.sys;mrxsmb10.sys;mrxsmb20.sys;ieframe.dll;windows.data.pdf.dll 0001-01-01T00:00:00 Yes Security Update <a href=”https://www.citrix.com/”>The Citrix Product Security Team</a> 2.0 2017-07-11T07:00:00 <p>Revised the Affected Products table to include 10 Version 1703 for 32-bit Systems and Windows 10 Version 1703 for x64-based Systems because they are affected by CVE-2016-3305. Microsoft recommends that customers running Windows 10 Version 1703 should install update 4025342 to be protected from this vulnerability.</p> 1.0 2016-09-13T07:00:00 <p>Information published.</p> Windows Information Disclosure Vulnerability <p>An information disclosure vulnerability exists when Windows fails to properly validate NT LAN Manager (NTLM) Single Sign-On (SSO) requests during Microsoft Account (MSA) login sessions. An attacker who successfully exploited the vulnerability could attempt to brute force a user’s NTLM password hash.</p> <p>To exploit the vulnerability, an attacker would have to trick a user into browsing to a malicious website, or to an SMB or UNC path destination, or convince a user to load a malicious document that initiates an NTLM SSO validation request without the consent of the user.</p> <p>To validate MSA NTLM SSO authentication requests properly, it is imperative that Windows client operating system firewall profiles and enterprise perimeter firewalls are configured correctly. If users are connected to the “Guest or public networks” firewall profile, it would imply that no enterprise perimeter firewall is present between the user and the Internet.</p> <p>The security update addresses the vulnerability by preventing NTLM SSO authentication to non-private SMB resources when users are signed in to Windows via a Microsoft Account network firewall profile for users who are signed in to Windows via a Microsoft account (<a href="https://www.microsoft.com/account">https://www.microsoft.com/account</a>) and connected to a “Guest or public networks” firewall profile.</p> <p>VPNs are considered private networks. For more information, see the Mitigations section.</p> Microsoft Windows Microsoft Yes CVE-2016-3352 10729 10735 10789 10788 10852 10853 10481 10482 10484 Information Disclosure 10729 Information Disclosure 10735 Information Disclosure 10789 Information Disclosure 10788 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10481 Information Disclosure 10482 Information Disclosure 10484 Important 10729 Important 10735 Important 10789 Important 10788 Important 10852 Important 10853 Important 10481 Important 10482 Important 10484 Publicly Disclosed:Yes;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A 6.5 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N 10729 6.5 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N 10735 6.5 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N 10789 6.5 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N 10788 6.5 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N 10852 6.5 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N 10853 6.5 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N 10481 6.5 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N 10482 6.5 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N 10484 3185611 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185611 3176492 10729 10735 Yes Security Update 3185614 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3193494 3176493 10789 mshtml.dll;ntkrnlmp.exe;ntkrpamp.exe;csrsrv.dll;pnidui.dll;win32kbase.sys;win32kfull.sys;ntdsai.dll;inputservice.dll;securekernel.exe;srv.sys;srv2.sys;srvnet.sys;winresume.exe;winresume.efi;ieframe.dll;emodel.dll;chakra.dll;ieinstal.exe;edgehtml.dll;mobile;only;vbscript.dll;oleaut32.dll;wininet.dll;lsasrv.dll;lsass.exe;wow6432;sspicli.dll;msv1_0.dll;ksecdd.sys;mrxsmb.sys;mrxsmb10.sys;mrxsmb20.sys;windows.data.pdf.dll 0001-01-01T00:00:00 Yes Security Update 3185614 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185614 3176493 10788 mshtml.dll;ntkrnlmp.exe;ntkrpamp.exe;csrsrv.dll;pnidui.dll;win32kbase.sys;win32kfull.sys;ntdsai.dll;inputservice.dll;securekernel.exe;srv.sys;srv2.sys;srvnet.sys;winresume.exe;winresume.efi;ieframe.dll;emodel.dll;chakra.dll;ieinstal.exe;edgehtml.dll;mobile;only;vbscript.dll;oleaut32.dll;wininet.dll;lsasrv.dll;lsass.exe;wow6432;sspicli.dll;msv1_0.dll;ksecdd.sys;mrxsmb.sys;mrxsmb10.sys;mrxsmb20.sys;windows.data.pdf.dll 0001-01-01T00:00:00 Yes Security Update 3189866 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3189866 3176495 10852 10853 ntkrnlmp.exe;ntkrpamp.exe;pnidui.dll;win32kbase.sys;win32kfull.sys;ntdsai.dll;inputservice.dll;srv.sys;mshtml.dll;windowscodecs.dll;chakra.dll;ieinstal.exe;edgehtml.dll;vbscript.dll;oleaut32.dll;wininet.dll;lsasrv.dll;lsass.exe;wow6432;sspicli.dll;msv1_0.dll;ksecdd.sys;mrxsmb.sys;mrxsmb10.sys;mrxsmb20.sys;ieframe.dll;windows.data.pdf.dll 0001-01-01T00:00:00 Yes Security Update 3187754 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3187754 3167679 10481 10482 Yes Security Update 3187754 3167679 10484 Yes Security Update <p>The following <a href="https://technet.microsoft.com/library/security/dn848375.aspx#Mitigation">mitigating factors</a> might be helpful in your situation:</p> <p>An enterprise perimeter firewall can be used to prevent this type of attack. See <a href="https://support.microsoft.com/kb/3185535">Preventing SMB traffic from lateral connections and entering or leaving the network</a> for guidance on configuring an enterprise perimeter firewall.</p> Arnold Osipov with <a href="https://www.morphisec.com/">Morphisec</a> Michael Gorelik with <a href="https://www.morphisec.com/">Morphisec</a> 1.1 2024-11-18T08:00:00 <p>Added acknowledgements. This is an informational change only.</p> 1.0 2016-09-13T07:00:00 <p>Information published.</p> Windows Permissions Enforcement Elevation of Privilege Vulnerability <p>An elevation of privilege vulnerability exists in the way that Windows enforces permissions if an attacker loads a specially crafted DLL. A locally authenticated attacker who successfully exploited this vulnerability could run arbitrary code as a system administrator. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p> <p>To exploit the vulnerability, an attacker would need to create and implement a malicious DLL and already be able to execute code on the target system.</p> <p>The security update addresses the vulnerability by correcting how Windows enforces permissions.</p> Microsoft Windows Microsoft Yes CVE-2016-3346 10729 10735 10789 10788 10852 10853 Elevation of Privilege 10729 Elevation of Privilege 10735 Elevation of Privilege 10789 Elevation of Privilege 10788 Elevation of Privilege 10852 Elevation of Privilege 10853 Important 10729 Important 10735 Important 10789 Important 10788 Important 10852 Important 10853 Publicly Disclosed:Yes;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A 7.8 6.7 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:R 10729 7.8 6.7 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:R 10735 7.8 6.7 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:R 10789 7.8 6.7 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:R 10788 7.8 6.7 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:R 10852 7.8 6.7 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:R 10853 3185611 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185611 3176492 10729 10735 Yes Security Update 3185614 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3193494 3176493 10789 mshtml.dll;ntkrnlmp.exe;ntkrpamp.exe;csrsrv.dll;pnidui.dll;win32kbase.sys;win32kfull.sys;ntdsai.dll;inputservice.dll;securekernel.exe;srv.sys;srv2.sys;srvnet.sys;winresume.exe;winresume.efi;ieframe.dll;emodel.dll;chakra.dll;ieinstal.exe;edgehtml.dll;mobile;only;vbscript.dll;oleaut32.dll;wininet.dll;lsasrv.dll;lsass.exe;wow6432;sspicli.dll;msv1_0.dll;ksecdd.sys;mrxsmb.sys;mrxsmb10.sys;mrxsmb20.sys;windows.data.pdf.dll 0001-01-01T00:00:00 Yes Security Update 3185614 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185614 3176493 10788 mshtml.dll;ntkrnlmp.exe;ntkrpamp.exe;csrsrv.dll;pnidui.dll;win32kbase.sys;win32kfull.sys;ntdsai.dll;inputservice.dll;securekernel.exe;srv.sys;srv2.sys;srvnet.sys;winresume.exe;winresume.efi;ieframe.dll;emodel.dll;chakra.dll;ieinstal.exe;edgehtml.dll;mobile;only;vbscript.dll;oleaut32.dll;wininet.dll;lsasrv.dll;lsass.exe;wow6432;sspicli.dll;msv1_0.dll;ksecdd.sys;mrxsmb.sys;mrxsmb10.sys;mrxsmb20.sys;windows.data.pdf.dll 0001-01-01T00:00:00 Yes Security Update 3189866 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3189866 3176495 10852 10853 ntkrnlmp.exe;ntkrpamp.exe;pnidui.dll;win32kbase.sys;win32kfull.sys;ntdsai.dll;inputservice.dll;srv.sys;mshtml.dll;windowscodecs.dll;chakra.dll;ieinstal.exe;edgehtml.dll;vbscript.dll;oleaut32.dll;wininet.dll;lsasrv.dll;lsass.exe;wow6432;sspicli.dll;msv1_0.dll;ksecdd.sys;mrxsmb.sys;mrxsmb10.sys;mrxsmb20.sys;ieframe.dll;windows.data.pdf.dll 0001-01-01T00:00:00 Yes Security Update 1.0 2016-09-13T07:00:00 <p>Information published.</p> Windows Remote Code Execution Vulnerability <p>A remote code execution vulnerability exists in the way that Windows handles objects in memory. An attacker who successfully exploited the vulnerability could execute arbitrary code with elevated permissions on a target system.</p> <p>To exploit the vulnerability, an attacker who has a domain user account could create a specially crafted request, causing Windows to execute arbitrary code with elevated permissions.</p> <p>The security update addresses the vulnerability by correcting how Windows handles objects in memory.</p> Microsoft Windows Microsoft Yes CVE-2016-3368 10049 10378 10379 10483 10543 4393 9316 10729 10735 10789 10788 10047 10048 10481 10482 10484 9312 10287 9318 9344 10051 10852 10853 Remote Code Execution 10049 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 4393 Remote Code Execution 9316 Remote Code Execution 10729 Remote Code Execution 10735 Remote Code Execution 10789 Remote Code Execution 10788 Remote Code Execution 10047 Remote Code Execution 10048 Remote Code Execution 10481 Remote Code Execution 10482 Remote Code Execution 10484 Remote Code Execution 9312 Remote Code Execution 10287 Remote Code Execution 9318 Remote Code Execution 9344 Remote Code Execution 10051 Remote Code Execution 10852 Remote Code Execution 10853 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Important 4393 Important 9316 Important 10729 Important 10735 Important 10789 Important 10788 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 9312 Important 10287 Important 9318 Important 9344 Important 10051 Important 10852 Important 10853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A 7.5 7.2 CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/RL:O/RC:C 10049 7.5 7.2 CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/RL:O/RC:C 10378 7.5 7.2 CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/RL:O/RC:C 10379 7.5 7.2 CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/RL:O/RC:C 10483 7.5 7.2 CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/RL:O/RC:C 10543 7.5 7.5 CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H 4393 7.5 7.5 CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H 9316 7.5 7.2 CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/RL:O/RC:C 10729 7.5 7.2 CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/RL:O/RC:C 10735 7.5 7.2 CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/RL:O/RC:C 10789 7.5 7.2 CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/RL:O/RC:C 10788 7.5 7.2 CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/RL:O/RC:C 10047 7.5 7.2 CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/RL:O/RC:C 10048 7.5 7.2 CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/RL:O/RC:C 10481 7.5 7.2 CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/RL:O/RC:C 10482 7.5 7.2 CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/RL:O/RC:C 10484 7.5 7.2 CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/RL:O/RC:C 9312 7.5 7.2 CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/RL:O/RC:C 10287 7.5 7.2 CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/RL:O/RC:C 9318 7.5 7.2 CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/RL:O/RC:C 9344 7.5 7.2 CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/RL:O/RC:C 10051 7.5 7.5 CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H 10852 7.5 7.5 CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H 10853 3184471 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3184471 2772930 10049 10378 10379 10483 10543 4393 9316 10047 10048 10481 10482 9312 10287 9318 9344 10051 Yes Security Update 3185611 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185611 3176492 10729 10735 Yes Security Update 3185614 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3193494 3176493 10789 mshtml.dll;ntkrnlmp.exe;ntkrpamp.exe;csrsrv.dll;pnidui.dll;win32kbase.sys;win32kfull.sys;ntdsai.dll;inputservice.dll;securekernel.exe;srv.sys;srv2.sys;srvnet.sys;winresume.exe;winresume.efi;ieframe.dll;emodel.dll;chakra.dll;ieinstal.exe;edgehtml.dll;mobile;only;vbscript.dll;oleaut32.dll;wininet.dll;lsasrv.dll;lsass.exe;wow6432;sspicli.dll;msv1_0.dll;ksecdd.sys;mrxsmb.sys;mrxsmb10.sys;mrxsmb20.sys;windows.data.pdf.dll 0001-01-01T00:00:00 Yes Security Update 3185614 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185614 3176493 10788 mshtml.dll;ntkrnlmp.exe;ntkrpamp.exe;csrsrv.dll;pnidui.dll;win32kbase.sys;win32kfull.sys;ntdsai.dll;inputservice.dll;securekernel.exe;srv.sys;srv2.sys;srvnet.sys;winresume.exe;winresume.efi;ieframe.dll;emodel.dll;chakra.dll;ieinstal.exe;edgehtml.dll;mobile;only;vbscript.dll;oleaut32.dll;wininet.dll;lsasrv.dll;lsass.exe;wow6432;sspicli.dll;msv1_0.dll;ksecdd.sys;mrxsmb.sys;mrxsmb10.sys;mrxsmb20.sys;windows.data.pdf.dll 0001-01-01T00:00:00 Yes Security Update 3184471 2772930 10484 Yes Security Update 3189866 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3189866 3176495 10852 10853 ntkrnlmp.exe;ntkrpamp.exe;pnidui.dll;win32kbase.sys;win32kfull.sys;ntdsai.dll;inputservice.dll;srv.sys;mshtml.dll;windowscodecs.dll;chakra.dll;ieinstal.exe;edgehtml.dll;vbscript.dll;oleaut32.dll;wininet.dll;lsasrv.dll;lsass.exe;wow6432;sspicli.dll;msv1_0.dll;ksecdd.sys;mrxsmb.sys;mrxsmb10.sys;mrxsmb20.sys;ieframe.dll;windows.data.pdf.dll 0001-01-01T00:00:00 Yes Security Update Jonathan Brown of <a href="http://www.vmware.com/">VMware, Inc</a> 1.0 2016-09-13T07:00:00 <p>Information published.</p> Windows IPSec Denial of Service Vulnerability <p>A denial of service vulnerability exists in the way that Windows handles objects in memory. An attacker who successfully exploited the vulnerability could cause a target system to stop responding. Note that the denial of service condition would not allow an attacker to execute code or to elevate user privileges. However, the denial of service condition could prevent authorized users from using system resources.</p> <p>The security update addresses the vulnerability by correcting how Windows handles objects in memory.</p> Microsoft Windows Microsoft Yes CVE-2016-3369 10729 10735 10789 10788 Denial of Service 10729 Denial of Service 10735 Denial of Service 10789 Denial of Service 10788 Important 10729 Important 10735 Important 10789 Important 10788 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely;Older Software Release:Exploitation Unlikely;DOS:N/A 5.7 5.7 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H 10729 5.7 5.7 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H 10735 5.7 5.7 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H 10789 5.7 5.7 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H 10788 3185611 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185611 3176492 10729 10735 Yes Security Update 3185614 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3193494 3176493 10789 mshtml.dll;ntkrnlmp.exe;ntkrpamp.exe;csrsrv.dll;pnidui.dll;win32kbase.sys;win32kfull.sys;ntdsai.dll;inputservice.dll;securekernel.exe;srv.sys;srv2.sys;srvnet.sys;winresume.exe;winresume.efi;ieframe.dll;emodel.dll;chakra.dll;ieinstal.exe;edgehtml.dll;mobile;only;vbscript.dll;oleaut32.dll;wininet.dll;lsasrv.dll;lsass.exe;wow6432;sspicli.dll;msv1_0.dll;ksecdd.sys;mrxsmb.sys;mrxsmb10.sys;mrxsmb20.sys;windows.data.pdf.dll 0001-01-01T00:00:00 Yes Security Update 3185614 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185614 3176493 10788 mshtml.dll;ntkrnlmp.exe;ntkrpamp.exe;csrsrv.dll;pnidui.dll;win32kbase.sys;win32kfull.sys;ntdsai.dll;inputservice.dll;securekernel.exe;srv.sys;srv2.sys;srvnet.sys;winresume.exe;winresume.efi;ieframe.dll;emodel.dll;chakra.dll;ieinstal.exe;edgehtml.dll;mobile;only;vbscript.dll;oleaut32.dll;wininet.dll;lsasrv.dll;lsass.exe;wow6432;sspicli.dll;msv1_0.dll;ksecdd.sys;mrxsmb.sys;mrxsmb10.sys;mrxsmb20.sys;windows.data.pdf.dll 0001-01-01T00:00:00 Yes Security Update Piotr Bania of <a href=”http://talosintel.com/vulnerability-reports/”>Cisco Talos</a> Piotr Bania, Cisco Talos., http://talosintel.com/vulnerability-reports/ 1.0 2016-09-13T07:00:00 <p>Information published.</p> Microsoft Silverlight Memory Corruption Vulnerability <p>A remote code execution vulnerability exists when Microsoft Silverlight improperly allows applications to access objects in memory. The vulnerability could corrupt system memory, which could allow an attacker to execute arbitrary code. In a web-browsing scenario, an attacker who successfully exploited this vulnerability could obtain the same permissions as the currently logged-on user. If a user is logged on with administrative user rights, an attacker could take complete control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.</p> <p>To exploit the vulnerability, an attacker could host a website that contains a specially crafted Silverlight application and then convince a user to visit the compromised website. The attacker could also take advantage of websites containing specially crafted content, including those that accept or host user-provided content or advertisements. For example, an attacker could display specially crafted web content by using banner advertisements or by using other methods to deliver web content to affected systems. However, in all cases, an attacker would have no way to force a user to visit a compromised website. Instead, an attacker would have to convince a user to visit the website, typically by enticing the user to click a link in either an email or instant message.</p> <p>The update addresses the vulnerability by correcting how Microsoft Silverlight allocates memory for inserting and appending strings in StringBuilder.</p> <p><strong>Which web browsers support Microsoft Silverlight applications?</strong> To run Microsoft Silverlight applications, most web browsers, including Microsoft Internet Explorer, require Microsoft Silverlight to be installed and the corresponding plug-in to be enabled. For more information about Microsoft Silverlight, see the official site, <a href="https://www.microsoft.com/silverlight/">Microsoft Silverlight</a>. Please refer to the documentation of your browser to learn more about how to disable or remove plug-ins.</p> <p><strong>What versions of Microsoft Silverlight 5 are affected by the vulnerabilities?</strong> Microsoft Silverlight build 5.1.50709.0, which was the current build of Microsoft Silverlight as of when this bulletin was first released, addresses the vulnerabilities and is not affected. Builds of Microsoft Silverlight previous to 5.1.50709.0 are affected.</p> <p><strong>How do I know which version and build of Microsoft Silverlight is currently installed on my system?</strong> If Microsoft Silverlight is already installed on your computer, you can visit the <a href="https://www.microsoft.com/getsilverlight">Get Microsoft Silverlight</a> page, which will indicate which version and build of Microsoft Silverlight is currently installed on your system. Alternatively, you can use the Manage Add-Ons feature of current versions of Microsoft Internet Explorer to determine the version and build information that is currently installed on your system.</p> <p>You can also manually check the version number of sllauncher.exe located in the &quot;%ProgramFiles%\Microsoft Silverlight&quot; directory (on x86 Microsoft Windows systems) or in the &quot;%ProgramFiles(x86)%\Microsoft Silverlight&quot; directory (on x64 Microsoft Windows systems).</p> <p>In addition, on Microsoft Windows, the version and build information of the currently installed version of Microsoft Silverlight can be found in the registry at [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Silverlight]:Version on x86 Microsoft Windows systems, or [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Silverlight]:Version on x64 Microsoft Windows systems.</p> <p>On Apple Mac OS, the version and build information of the currently installed version of Microsoft Silverlight can be found as follows:</p> <ol> <li>Open the Finder.</li> <li>Select the system drive and go to the folder Internet Plug-ins – Library.</li> <li>Right-click the file Silverlight.Plugin (if your mouse has only one button, press the Ctrl key while clicking on the file) to bring up the context menu, then click Show Package Contents.</li> <li>Inside the contents folder, locate the file info.plist and open it with an editor. It will contain an entry like this, which shows you the version number: SilverlightVersion 5.1.50709.0</li> </ol> <p>The version installed with this security update for Microsoft Silverlight 5 is 5.1.50709.0. If your Microsoft Silverlight 5 version number is higher than or equal to this version number, your system is not vulnerable.</p> <p><strong>How do I upgrade my version of Microsoft Silverlight?</strong> The Microsoft Silverlight auto-update feature helps make sure that your Microsoft Silverlight installation is kept up to date with the latest version of Microsoft Silverlight, Microsoft Silverlight functionality, and security features. For more information about the Microsoft Silverlight auto-update feature, see the <a href="https://www.microsoft.com/getsilverlight/resources/documentation/Updater.aspx">Microsoft Silverlight Updater</a>. Windows users who have disabled the Microsoft Silverlight auto-update feature can enroll in <a href="http://go.microsoft.com/fwlink/?LinkID=40747">Microsoft Update</a> to obtain the latest version of Microsoft Silverlight, or can download the latest version of Microsoft Silverlight manually using the download link in the Affected Products table in the earlier section, Affected Products. For information about deploying Microsoft Silverlight in an enterprise environment, see the <a href="http://go.microsoft.com/fwlink/?LinkId=119611">Silverlight Enterprise Deployment Guide</a>.</p> <p><strong>Will this update upgrade my version of Silverlight?</strong> The 3182373 update upgrades previous versions of Silverlight to Silverlight version 5.1.50709.0. Microsoft recommends upgrading to be protected against the vulnerability described in this bulletin.</p> <p><strong>Where can I find additional information about the Silverlight product lifecycle?</strong> For lifecycle information specific to Silverlight, see the <a href="https://www.microsoft.com/getsilverlight/locale/en-us/html/installation-win-SL5.html">Microsoft Silverlight Support Lifecycle Policy</a>.</p> Silverlight Microsoft Yes CVE-2016-3367 10450 10453 10452 10100 10451 10099 Remote Code Execution 10450 Remote Code Execution 10453 Remote Code Execution 10452 Remote Code Execution 10100 Remote Code Execution 10451 Remote Code Execution 10099 Important 10450 Important 10453 Important 10452 Important 10100 Important 10451 Important 10099 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely;Older Software Release:Exploitation Unlikely;DOS:N/A 3182373 https://www.microsoft.com/download/details.aspx?familyid=eb6ea2c4-e888-4af8-b28a-6dbce82dbd43 3126036 10450 10453 10452 10100 10451 10099 No Security Update 1.0 2016-09-13T07:00:00 <p>Information published.</p> 2.0 2016-12-09T08:00:00 <p>Revised bulletin to announce the following updates have been rereleased with a detection change that addresses a supersedence issue that certain customers experienced when attempting to install the October Security Only updates. ◦ Security Only update 3192391 for all supported releases of Windows 7 and Windows Server 2008 R2. For more information, see Microsoft Knowledge Base Article 3192391. ◦ Security Only update 3192393 for Windows Server 2012. For more information, see Microsoft Knowledge Base Article 3192393. ◦ Security Only update 3192392 for Windows 8.1 and Windows Server 2012 R2. For more information, see Microsoft Knowledge Base Article 3192392. These are detection changes only. There were no changes to the update files. Customers who have already successfully installed any of these updates do not need to take any action. For more information, see the Microsoft Knowledge Base article for the respective update.</p> Microsoft Browser Information Disclosure Vulnerability <p>An information disclosure vulnerability exists when affected Microsoft browsers improperly handle objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system.</p> <p>To exploit the vulnerability, in a web-based attack scenario, an attacker could host a website that is used to attempt to exploit the vulnerability. In addition, compromised websites and websites that accept or host user-provided content could contain specially crafted content that could exploit the vulnerability. However, in all cases an attacker would have no way to force a user to view the attacker-controlled content. Instead, an attacker would have to convince a user to take action. For example, an attacker could trick a user into clicking a link that takes the user to the attacker's site.</p> <p>The security update addresses the vulnerability by modifying how Microsoft browsers handle objects in memory.</p> <p><strong>The security updates Windows 10 appear twice in the Affected Products table. To be protected from this vulnerability, do I need to install multiple updates for my particular system?</strong> No. Customers running Windows 10 systems only need to install the one cumulative update for their system to be protected from this vulnerability. The security updates are also listed for systems with Windows 10 and Microsoft Edge configurations because on Windows 10 systems, the security fixes for these vulnerabilities reside in the Microsoft Edge component that is shipping in the cumulative update.</p> Microsoft Windows PDF Microsoft Yes CVE-2016-3370 10481 10482 10378 10483 10484 10729 10735 10789 10788 10852 10853 10724-10729 10724-10735 10724-10789 10724-10788 10724-10852 10724-10853 Information Disclosure 10481 Information Disclosure 10482 Information Disclosure 10378 Information Disclosure 10483 Information Disclosure 10484 Information Disclosure 10729 Information Disclosure 10735 Information Disclosure 10789 Information Disclosure 10788 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10724-10729 Information Disclosure 10724-10735 Information Disclosure 10724-10789 Information Disclosure 10724-10788 Information Disclosure 10724-10852 Information Disclosure 10724-10853 Important 10481 Important 10482 Important 10378 Important 10483 Important 10484 Important 10729 Important 10735 Important 10789 Important 10788 Important 10852 Important 10853 Important 10724-10729 Important 10724-10735 Important 10724-10789 Important 10724-10788 Important 10724-10852 Important 10724-10853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A;DOS:N/A 3.1 2.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10481 3.1 2.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10482 3.1 2.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10378 3.1 2.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10483 3.1 2.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10484 3.1 2.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10729 3.1 2.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10735 3.1 2.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10789 3.1 2.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10788 3.1 2.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10852 3.1 2.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10853 3.1 3.1 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N 10724-10729 3.1 3.1 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N 10724-10735 3.1 3.1 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N 10724-10789 3.1 3.1 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N 10724-10788 3.1 3.1 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N 10724-10852 3.1 3.1 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N 10724-10853 3184943 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3184943 3175887 10481 10482 10378 10483 Maybe Security Update 3184943 3175887 10484 Maybe Security Update 3185611 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185611 3176492 10729 10735 10724-10729 10724-10735 Yes Security Update 3185614 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3193494 3176493 10789 10724-10789 mshtml.dll;ntkrnlmp.exe;ntkrpamp.exe;csrsrv.dll;pnidui.dll;win32kbase.sys;win32kfull.sys;ntdsai.dll;inputservice.dll;securekernel.exe;srv.sys;srv2.sys;srvnet.sys;winresume.exe;winresume.efi;ieframe.dll;emodel.dll;chakra.dll;ieinstal.exe;edgehtml.dll;mobile;only;vbscript.dll;oleaut32.dll;wininet.dll;lsasrv.dll;lsass.exe;wow6432;sspicli.dll;msv1_0.dll;ksecdd.sys;mrxsmb.sys;mrxsmb10.sys;mrxsmb20.sys;windows.data.pdf.dll 0001-01-01T00:00:00 Yes Security Update 3185614 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185614 3176493 10788 10724-10788 mshtml.dll;ntkrnlmp.exe;ntkrpamp.exe;csrsrv.dll;pnidui.dll;win32kbase.sys;win32kfull.sys;ntdsai.dll;inputservice.dll;securekernel.exe;srv.sys;srv2.sys;srvnet.sys;winresume.exe;winresume.efi;ieframe.dll;emodel.dll;chakra.dll;ieinstal.exe;edgehtml.dll;mobile;only;vbscript.dll;oleaut32.dll;wininet.dll;lsasrv.dll;lsass.exe;wow6432;sspicli.dll;msv1_0.dll;ksecdd.sys;mrxsmb.sys;mrxsmb10.sys;mrxsmb20.sys;windows.data.pdf.dll 0001-01-01T00:00:00 Yes Security Update 3189866 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3189866 3176495 10852 10853 10724-10852 10724-10853 ntkrnlmp.exe;ntkrpamp.exe;pnidui.dll;win32kbase.sys;win32kfull.sys;ntdsai.dll;inputservice.dll;srv.sys;mshtml.dll;windowscodecs.dll;chakra.dll;ieinstal.exe;edgehtml.dll;vbscript.dll;oleaut32.dll;wininet.dll;lsasrv.dll;lsass.exe;wow6432;sspicli.dll;msv1_0.dll;ksecdd.sys;mrxsmb.sys;mrxsmb10.sys;mrxsmb20.sys;ieframe.dll;windows.data.pdf.dll 0001-01-01T00:00:00 Yes Security Update Ke Liu of <a href="http://xlab.tencent.com/">Tencent's Xuanwu LAB </a> 1.0 2016-09-13T07:00:00 <p>Information published.</p> Microsoft Browser Information Disclosure Vulnerability <p>An information disclosure vulnerability exists when affected Microsoft browsers improperly handle objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system.</p> <p>To exploit the vulnerability, in a web-based attack scenario, an attacker could host a website that is used to attempt to exploit the vulnerability. In addition, compromised websites and websites that accept or host user-provided content could contain specially crafted content that could exploit the vulnerability. However, in all cases an attacker would have no way to force a user to view the attacker-controlled content. Instead, an attacker would have to convince a user to take action. For example, an attacker could trick a user into clicking a link that takes the user to the attacker's site.</p> <p>The security update addresses the vulnerability by modifying how Microsoft browsers handle objects in memory.</p> <p><strong>The security updates Windows 10 appear twice in the Affected Products table. To be protected from this vulnerability, do I need to install multiple updates for my particular system?</strong> No. Customers running Windows 10 systems only need to install the one cumulative update for their system to be protected from this vulnerability. The security updates are also listed for systems with Windows 10 and Microsoft Edge configurations because on Windows 10 systems, the security fixes for these vulnerabilities reside in the Microsoft Edge component that is shipping in the cumulative update.</p> Microsoft Windows PDF Microsoft Yes CVE-2016-3374 10481 10482 10378 10483 10484 10729 10735 10789 10788 10852 10853 10724-10729 10724-10735 10724-10789 10724-10788 10724-10852 10724-10853 Information Disclosure 10481 Information Disclosure 10482 Information Disclosure 10378 Information Disclosure 10483 Information Disclosure 10484 Information Disclosure 10729 Information Disclosure 10735 Information Disclosure 10789 Information Disclosure 10788 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10724-10729 Information Disclosure 10724-10735 Information Disclosure 10724-10789 Information Disclosure 10724-10788 Information Disclosure 10724-10852 Information Disclosure 10724-10853 Important 10481 Important 10482 Important 10378 Important 10483 Important 10484 Important 10729 Important 10735 Important 10789 Important 10788 Important 10852 Important 10853 Important 10724-10729 Important 10724-10735 Important 10724-10789 Important 10724-10788 Important 10724-10852 Important 10724-10853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A;DOS:N/A 3.1 2.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10481 3.1 2.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10482 3.1 2.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10378 3.1 2.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10483 3.1 2.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10484 3.1 2.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10729 3.1 2.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10735 3.1 2.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10789 3.1 2.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10788 3.1 2.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10852 3.1 2.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10853 3.1 2.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10724-10729 3.1 2.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10724-10735 3.1 2.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10724-10789 3.1 2.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10724-10788 3.1 2.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10724-10852 3.1 2.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10724-10853 3184943 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3184943 3175887 10481 10482 10378 10483 Maybe Security Update 3184943 3175887 10484 Maybe Security Update 3185611 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185611 3176492 10729 10735 10724-10729 10724-10735 Yes Security Update 3185614 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3193494 3176493 10789 10724-10789 mshtml.dll;ntkrnlmp.exe;ntkrpamp.exe;csrsrv.dll;pnidui.dll;win32kbase.sys;win32kfull.sys;ntdsai.dll;inputservice.dll;securekernel.exe;srv.sys;srv2.sys;srvnet.sys;winresume.exe;winresume.efi;ieframe.dll;emodel.dll;chakra.dll;ieinstal.exe;edgehtml.dll;mobile;only;vbscript.dll;oleaut32.dll;wininet.dll;lsasrv.dll;lsass.exe;wow6432;sspicli.dll;msv1_0.dll;ksecdd.sys;mrxsmb.sys;mrxsmb10.sys;mrxsmb20.sys;windows.data.pdf.dll 0001-01-01T00:00:00 Yes Security Update 3185614 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185614 3176493 10788 10724-10788 mshtml.dll;ntkrnlmp.exe;ntkrpamp.exe;csrsrv.dll;pnidui.dll;win32kbase.sys;win32kfull.sys;ntdsai.dll;inputservice.dll;securekernel.exe;srv.sys;srv2.sys;srvnet.sys;winresume.exe;winresume.efi;ieframe.dll;emodel.dll;chakra.dll;ieinstal.exe;edgehtml.dll;mobile;only;vbscript.dll;oleaut32.dll;wininet.dll;lsasrv.dll;lsass.exe;wow6432;sspicli.dll;msv1_0.dll;ksecdd.sys;mrxsmb.sys;mrxsmb10.sys;mrxsmb20.sys;windows.data.pdf.dll 0001-01-01T00:00:00 Yes Security Update 3189866 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3189866 3176495 10852 10853 10724-10852 10724-10853 ntkrnlmp.exe;ntkrpamp.exe;pnidui.dll;win32kbase.sys;win32kfull.sys;ntdsai.dll;inputservice.dll;srv.sys;mshtml.dll;windowscodecs.dll;chakra.dll;ieinstal.exe;edgehtml.dll;vbscript.dll;oleaut32.dll;wininet.dll;lsasrv.dll;lsass.exe;wow6432;sspicli.dll;msv1_0.dll;ksecdd.sys;mrxsmb.sys;mrxsmb10.sys;mrxsmb20.sys;ieframe.dll;windows.data.pdf.dll 0001-01-01T00:00:00 Yes Security Update Steven Seeley of <a href="http://srcincite.io/">Source Incite </a> Roberto Suggi Liverani (@malerisch) of <a href="http://blog.malerisch.net/">malerisch.net</a> 1.0 2016-09-13T07:00:00 <p>Information published.</p> Microsoft Office Memory Corruption Vulnerability <p>A remote code execution vulnerability exists in Microsoft Office software when the Office software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an attacker could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.</p> <p>Exploitation of the vulnerability requires that a user open a specially crafted file with an affected version of Microsoft Office software. In an email attack scenario, an attacker could exploit the vulnerability by sending the specially crafted file to the user and convincing the user to open the file. In a web-based attack scenario, an attacker could host a website (or leverage a compromised website that accepts or hosts user-provided content) that contains a specially crafted file designed to exploit the vulnerability. An attacker would have no way to force users to visit the website. Instead, an attacker would have to convince users to click a link, typically by way of an enticement in an email or instant message, and then convince them to open the specially crafted file.</p> <p>Note that the Preview Pane is not an attack vector for this vulnerability. The security update addresses the vulnerability by correcting how Office handles objects in memory.</p> <p><strong>I am being offered this update for software that is not specifically indicated as being affected in the Affected Software and Vulnerability Severity Ratings table. Why am I being offered this update?</strong></p> <p>When updates address vulnerable code that exists in a component that is shared between multiple Microsoft Office products or shared between multiple versions of the same Microsoft Office product, the update is considered to be applicable to all supported products and versions that contain the vulnerable component.</p> <p>For example, when an update applies to Microsoft Office 2007 products, only Microsoft Office 2007 may be specifically listed in the Affected Software table. However, the update could apply to Microsoft Word 2007, Microsoft Excel 2007, Microsoft Visio 2007, Microsoft Compatibility Pack, Microsoft Excel Viewer, or any other Microsoft Office 2007 product that is not specifically listed in the Affected Software table. Furthermore, when an update applies to Microsoft Office 2010 products, only Microsoft Office 2010 may be specifically listed in the Affected Software table. However, the update could apply to Microsoft Word 2010, Microsoft Excel 2010, Microsoft Visio 2010, Microsoft Visio Viewer, or any other Microsoft Office 2010 product that is not specifically listed in the Affected Software table.</p> <p>For more information on this behavior and recommended actions, see <a href="https://support.microsoft.com/kb/830335">Microsoft Knowledge Base Article 830335</a>. For a list of Microsoft Office products that an update may apply to, refer to the Microsoft Knowledge Base Article associated with the specific update.</p> Microsoft Office Microsoft Yes CVE-2016-3358 10152 10489 10490 10656 10654 10655 10739 10740 10672 10279 10748 4497 9171-10308 9171-10307 10898-10607 9171-999008 Remote Code Execution 10152 Remote Code Execution 10489 Remote Code Execution 10490 Remote Code Execution 10656 Remote Code Execution 10654 Remote Code Execution 10655 Remote Code Execution 10739 Remote Code Execution 10740 Remote Code Execution 10672 Remote Code Execution 10279 Remote Code Execution 10748 Remote Code Execution 4497 Remote Code Execution 9171-10308 Remote Code Execution 9171-10307 Remote Code Execution 10898-10607 Remote Code Execution 9171-999008 Important 10152 Important 10489 Important 10490 Important 10656 Important 10654 Important 10655 Important 10739 Important 10740 Important 10672 Important 10279 Important 10748 Important 4497 Important 9171-10308 Important 9171-10307 Important 10898-10607 Important 9171-999008 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A 3115459 https://www.microsoft.com/download/details.aspx?familyid=a2d85409-5354-4fd2-ae8d-e6373a257601 3115306 10152 Maybe Security Update 3118316 https://www.microsoft.com/download/details.aspx?familyid=58e515e7-80b4-4d54-882d-9a8e1bbfe16b 3115322 10489 Maybe Security Update 3118316 https://www.microsoft.com/download/details.aspx?familyid=47e85a73-6a22-41ad-aa4e-1a05a56318cb 3115322 10490 Maybe Security Update 3118284 3115262 10656 Maybe Security Update 3118284 https://www.microsoft.com/download/details.aspx?familyid=33f27a25-c07a-4f12-aa00-8bf507697b64 3115262 10654 Maybe Security Update 3118284 https://www.microsoft.com/download/details.aspx?familyid=3b5af716-f051-442f-b103-cf3d14eedff6 3115262 10655 Maybe Security Update 3118290 https://www.microsoft.com/download/details.aspx?familyid=ecc2a97f-d86f-4d0d-9f59-99d092ae5acd 3115272 10739 Maybe Security Update 3118290 https://www.microsoft.com/download/details.aspx?familyid=ffb27d67-72cb-4407-af05-a24397f6a231 3115272 10740 Maybe Security Update 3186807 http://go.microsoft.com/fwlink/?LinkId=825107 3179163 10672 Maybe Security Update 3115463 https://www.microsoft.com/download/details.aspx?familyid=5f9c8db3-b4b5-4495-89c8-ee4862b7984d 3115114 10279 Maybe Security Update 3118299 https://www.microsoft.com/download/details.aspx?familyid=81a63997-7836-4aba-a789-0eb5c2791340 3115386 10748 Maybe Security Update 3115462 https://www.microsoft.com/download/details.aspx?familyid=8207226e-8245-40a9-b543-3a8edd8f20db 3115308 4497 Maybe Security Update 3115112 https://www.microsoft.com/download/details.aspx?familyid=e7d9f719-a657-4118-aeb8-f98635236efd 3114897 9171-10308 Maybe Security Update 3115112 https://www.microsoft.com/download/details.aspx?familyid=4a17e450-b50b-4858-b924-1d5e26dc8910 3114897 9171-10307 Maybe Security Update 3115169 https://www.microsoft.com/download/details.aspx?familyid=133561e7-90dc-429c-bf78-89cb75259b74 3114335 10898-10607 Maybe Security Update 3115119 https://www.microsoft.com/download/details.aspx?familyid=3b876e53-072f-4e34-986e-f4fc6fb65ef8 3114871 9171-999008 Maybe Security Update Steven Seeley of Source Incite, working with <a href="http://www.verisigninc.com/en_US/cyber-security/index.xhtml">VeriSign iDefense Labs</a> 1.0 2016-09-13T07:00:00 <p>Information published.</p> 2.0 2016-09-22T07:00:00 <p>Bulletin revised to announce the availability of the 14.6.8 update for Microsoft Office for Mac 2011 (3186805) and the 15.25 update for Microsoft Office 2016 for Mac (3186807). Customers running affected Mac software should install the appropriate update for their product to be protected from the vulnerabilities discussed in this bulletin. Customers running other Microsoft Office software do not need to take any action. See <a href="https://support.microsoft.com/en-us/kb/3186805">Microsoft Knowledge Base Article 3186805</a> and <a href="https://support.microsoft.com/en-us/kb/3186807">Microsoft Knowledge Base Article 3186807</a> for more information and download links.</p> Microsoft Office Memory Corruption Vulnerability <p>A remote code execution vulnerability exists in Microsoft Office software when the Office software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an attacker could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.</p> <p>Exploitation of the vulnerability requires that a user open a specially crafted file with an affected version of Microsoft Office software. In an email attack scenario, an attacker could exploit the vulnerability by sending the specially crafted file to the user and convincing the user to open the file. In a web-based attack scenario, an attacker could host a website (or leverage a compromised website that accepts or hosts user-provided content) that contains a specially crafted file designed to exploit the vulnerability. An attacker would have no way to force users to visit the website. Instead, an attacker would have to convince users to click a link, typically by way of an enticement in an email or instant message, and then convince them to open the specially crafted file.</p> <p>Note that the Preview Pane is not an attack vector for this vulnerability. The security update addresses the vulnerability by correcting how Office handles objects in memory.</p> <p><strong>I am being offered this update for software that is not specifically indicated as being affected in the Affected Software and Vulnerability Severity Ratings table. Why am I being offered this update?</strong></p> <p>When updates address vulnerable code that exists in a component that is shared between multiple Microsoft Office products or shared between multiple versions of the same Microsoft Office product, the update is considered to be applicable to all supported products and versions that contain the vulnerable component.</p> <p>For example, when an update applies to Microsoft Office 2007 products, only Microsoft Office 2007 may be specifically listed in the Affected Software table. However, the update could apply to Microsoft Word 2007, Microsoft Excel 2007, Microsoft Visio 2007, Microsoft Compatibility Pack, Microsoft Excel Viewer, or any other Microsoft Office 2007 product that is not specifically listed in the Affected Software table. Furthermore, when an update applies to Microsoft Office 2010 products, only Microsoft Office 2010 may be specifically listed in the Affected Software table. However, the update could apply to Microsoft Word 2010, Microsoft Excel 2010, Microsoft Visio 2010, Microsoft Visio Viewer, or any other Microsoft Office 2010 product that is not specifically listed in the Affected Software table.</p> <p>For more information on this behavior and recommended actions, see <a href="https://support.microsoft.com/kb/830335">Microsoft Knowledge Base Article 830335</a>. For a list of Microsoft Office products that an update may apply to, refer to the Microsoft Knowledge Base Article associated with the specific update.</p> Microsoft Office Microsoft Yes CVE-2016-3359 4497 10152 10489 10490 10279 Remote Code Execution 4497 Remote Code Execution 10152 Remote Code Execution 10489 Remote Code Execution 10490 Remote Code Execution 10279 Important 4497 Important 10152 Important 10489 Important 10490 Important 10279 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A 3115462 https://www.microsoft.com/download/details.aspx?familyid=8207226e-8245-40a9-b543-3a8edd8f20db 3115308 4497 Maybe Security Update 3115459 https://www.microsoft.com/download/details.aspx?familyid=a2d85409-5354-4fd2-ae8d-e6373a257601 3115306 10152 Maybe Security Update 3118316 https://www.microsoft.com/download/details.aspx?familyid=58e515e7-80b4-4d54-882d-9a8e1bbfe16b 3115322 10489 Maybe Security Update 3118316 https://www.microsoft.com/download/details.aspx?familyid=47e85a73-6a22-41ad-aa4e-1a05a56318cb 3115322 10490 Maybe Security Update 3115463 https://www.microsoft.com/download/details.aspx?familyid=5f9c8db3-b4b5-4495-89c8-ee4862b7984d 3115114 10279 Maybe Security Update Steven Seeley of Source Incite, working with <a href="http://www.verisigninc.com/en_US/cyber-security/index.xhtml">VeriSign iDefense Labs</a> 1.0 2016-09-13T07:00:00 <p>Information published.</p> Microsoft Office Memory Corruption Vulnerability <p>A remote code execution vulnerability exists in Microsoft Office software when the Office software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an attacker could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.</p> <p>Exploitation of the vulnerability requires that a user open a specially crafted file with an affected version of Microsoft Office software. In an email attack scenario, an attacker could exploit the vulnerability by sending the specially crafted file to the user and convincing the user to open the file. In a web-based attack scenario, an attacker could host a website (or leverage a compromised website that accepts or hosts user-provided content) that contains a specially crafted file designed to exploit the vulnerability. An attacker would have no way to force users to visit the website. Instead, an attacker would have to convince users to click a link, typically by way of an enticement in an email or instant message, and then convince them to open the specially crafted file.</p> <p>Note that the Preview Pane is not an attack vector for this vulnerability. The security update addresses the vulnerability by correcting how Office handles objects in memory.</p> <p><strong>I am being offered this update for software that is not specifically indicated as being affected in the Affected Software and Vulnerability Severity Ratings table. Why am I being offered this update?</strong></p> <p>When updates address vulnerable code that exists in a component that is shared between multiple Microsoft Office products or shared between multiple versions of the same Microsoft Office product, the update is considered to be applicable to all supported products and versions that contain the vulnerable component.</p> <p>For example, when an update applies to Microsoft Office 2007 products, only Microsoft Office 2007 may be specifically listed in the Affected Software table. However, the update could apply to Microsoft Word 2007, Microsoft Excel 2007, Microsoft Visio 2007, Microsoft Compatibility Pack, Microsoft Excel Viewer, or any other Microsoft Office 2007 product that is not specifically listed in the Affected Software table. Furthermore, when an update applies to Microsoft Office 2010 products, only Microsoft Office 2010 may be specifically listed in the Affected Software table. However, the update could apply to Microsoft Word 2010, Microsoft Excel 2010, Microsoft Visio 2010, Microsoft Visio Viewer, or any other Microsoft Office 2010 product that is not specifically listed in the Affected Software table.</p> <p>For more information on this behavior and recommended actions, see <a href="https://support.microsoft.com/kb/830335">Microsoft Knowledge Base Article 830335</a>. For a list of Microsoft Office products that an update may apply to, refer to the Microsoft Knowledge Base Article associated with the specific update.</p> Microsoft Office Microsoft Yes CVE-2016-3360 10157 10498 10499 10694 10692 10673 256 4497 10607 10525 10611 10693 Remote Code Execution 10157 Remote Code Execution 10498 Remote Code Execution 10499 Remote Code Execution 10694 Remote Code Execution 10692 Remote Code Execution 10673 Remote Code Execution 256 Remote Code Execution 4497 Remote Code Execution 10607 Remote Code Execution 10525 Remote Code Execution 10611 Remote Code Execution 10693 Important 10157 Important 10498 Important 10499 Important 10694 Important 10692 Important 10673 Important 256 Important 4497 Important 10607 Important 10525 Important 10611 Important 10693 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A;Older Software Release:Exploitation Less Likely;DOS:N/A 3114744 https://www.microsoft.com/download/details.aspx?familyid=2f1203a1-3169-4e72-b58b-2e3acbd429b6 3114429 10157 Maybe Security Update 3115467 https://www.microsoft.com/download/details.aspx?familyid=be4bafbe-2249-439c-b41d-30de85274ef6 3115118 10498 Maybe Security Update 3115467 https://www.microsoft.com/download/details.aspx?familyid=363f53ac-ba98-4187-9a35-03aa16c9cd15 3115118 10499 Maybe Security Update 3115487 3115118 10694 Maybe Security Update 3115487 https://www.microsoft.com/download/details.aspx?familyid=a75a9650-d15b-4059-984d-6a6b5226d116 3115118 10692 Maybe Security Update 3186807 http://go.microsoft.com/fwlink/?LinkId=825107 3179163 10673 Maybe Security Update 3054969 https://www.microsoft.com/download/details.aspx?familyid=6e15d728-e557-4a58-9379-256e239a17ac 3054840 256 Maybe Security Update 2597974 https://www.microsoft.com/download/details.aspx?familyid=98cf0432-8903-49bb-a529-79825d5cf405 2596843 4497 Maybe Security Update 3054862 https://www.microsoft.com/download/details.aspx?familyid=48f8b0a4-99cc-42fb-a2a0-8f86f6d5170a 3039736 10607 Maybe Security Update 3115472 https://www.microsoft.com/download/details.aspx?familyid=7978e99b-dd7b-49a7-bdb3-96823a06e310 3115318 10525 Maybe Security Update 3118270 https://www.microsoft.com/download/details.aspx?familyid=49d1c12c-1733-41b7-9d91-f1245b0ba831 3115289 10611 Maybe Security Update 3115487 https://www.microsoft.com/download/details.aspx?familyid=aae1c59c-0e55-4a19-9f4b-3b47c054613e 3115118 10693 Maybe Security Update Steven Vittitoe of <a href="http://www.google.com/">Google Project Zero</a> 1.0 2016-09-13T07:00:00 <p>Information published.</p> 2.0 2016-09-22T07:00:00 <p>Bulletin revised to announce the availability of the 14.6.8 update for Microsoft Office for Mac 2011 (3186805) and the 15.25 update for Microsoft Office 2016 for Mac (3186807). Customers running affected Mac software should install the appropriate update for their product to be protected from the vulnerabilities discussed in this bulletin. Customers running other Microsoft Office software do not need to take any action. See <a href="https://support.microsoft.com/en-us/kb/3186805">Microsoft Knowledge Base Article 3186805</a> and <a href="https://support.microsoft.com/en-us/kb/3186807">Microsoft Knowledge Base Article 3186807</a> for more information and download links.</p> Microsoft Office Memory Corruption Vulnerability <p>A remote code execution vulnerability exists in Microsoft Office software when the Office software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an attacker could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.</p> <p>Exploitation of the vulnerability requires that a user open a specially crafted file with an affected version of Microsoft Office software. In an email attack scenario, an attacker could exploit the vulnerability by sending the specially crafted file to the user and convincing the user to open the file. In a web-based attack scenario, an attacker could host a website (or leverage a compromised website that accepts or hosts user-provided content) that contains a specially crafted file designed to exploit the vulnerability. An attacker would have no way to force users to visit the website. Instead, an attacker would have to convince users to click a link, typically by way of an enticement in an email or instant message, and then convince them to open the specially crafted file.</p> <p>Note that the Preview Pane is not an attack vector for this vulnerability. The security update addresses the vulnerability by correcting how Office handles objects in memory.</p> <p><strong>I am being offered this update for software that is not specifically indicated as being affected in the Affected Software and Vulnerability Severity Ratings table. Why am I being offered this update?</strong></p> <p>When updates address vulnerable code that exists in a component that is shared between multiple Microsoft Office products or shared between multiple versions of the same Microsoft Office product, the update is considered to be applicable to all supported products and versions that contain the vulnerable component.</p> <p>For example, when an update applies to Microsoft Office 2007 products, only Microsoft Office 2007 may be specifically listed in the Affected Software table. However, the update could apply to Microsoft Word 2007, Microsoft Excel 2007, Microsoft Visio 2007, Microsoft Compatibility Pack, Microsoft Excel Viewer, or any other Microsoft Office 2007 product that is not specifically listed in the Affected Software table. Furthermore, when an update applies to Microsoft Office 2010 products, only Microsoft Office 2010 may be specifically listed in the Affected Software table. However, the update could apply to Microsoft Word 2010, Microsoft Excel 2010, Microsoft Visio 2010, Microsoft Visio Viewer, or any other Microsoft Office 2010 product that is not specifically listed in the Affected Software table.</p> <p>For more information on this behavior and recommended actions, see <a href="https://support.microsoft.com/kb/830335">Microsoft Knowledge Base Article 830335</a>. For a list of Microsoft Office products that an update may apply to, refer to the Microsoft Knowledge Base Article associated with the specific update.</p> Microsoft Office Microsoft Yes CVE-2016-3361 10489 10490 Remote Code Execution 10489 Remote Code Execution 10490 Important 10489 Important 10490 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A;Older Software Release:Exploitation Less Likely;DOS:N/A 3118316 https://www.microsoft.com/download/details.aspx?familyid=58e515e7-80b4-4d54-882d-9a8e1bbfe16b 3115322 10489 Maybe Security Update 3118316 https://www.microsoft.com/download/details.aspx?familyid=47e85a73-6a22-41ad-aa4e-1a05a56318cb 3115322 10490 Maybe Security Update <p>The following <a href="https://technet.microsoft.com/library/security/dn848375.aspx#Mitigation">mitigating factors</a> might be helpful in your situation:</p> <p>In order for the attack to succeed, the victim must be made to click a specific button within the given page.</p> Steven Seeley of <a href="http://srcincite.io/">Source Incite</a> 1.0 2016-09-13T07:00:00 <p>Information published.</p> Microsoft Office Memory Corruption Vulnerability <p>A remote code execution vulnerability exists in Microsoft Office software when the Office software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an attacker could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.</p> <p>Exploitation of the vulnerability requires that a user open a specially crafted file with an affected version of Microsoft Office software. In an email attack scenario, an attacker could exploit the vulnerability by sending the specially crafted file to the user and convincing the user to open the file. In a web-based attack scenario, an attacker could host a website (or leverage a compromised website that accepts or hosts user-provided content) that contains a specially crafted file designed to exploit the vulnerability. An attacker would have no way to force users to visit the website. Instead, an attacker would have to convince users to click a link, typically by way of an enticement in an email or instant message, and then convince them to open the specially crafted file.</p> <p>Note that the Preview Pane is not an attack vector for this vulnerability. The security update addresses the vulnerability by correcting how Office handles objects in memory.</p> <p><strong>I am being offered this update for software that is not specifically indicated as being affected in the Affected Software and Vulnerability Severity Ratings table. Why am I being offered this update?</strong></p> <p>When updates address vulnerable code that exists in a component that is shared between multiple Microsoft Office products or shared between multiple versions of the same Microsoft Office product, the update is considered to be applicable to all supported products and versions that contain the vulnerable component.</p> <p>For example, when an update applies to Microsoft Office 2007 products, only Microsoft Office 2007 may be specifically listed in the Affected Software table. However, the update could apply to Microsoft Word 2007, Microsoft Excel 2007, Microsoft Visio 2007, Microsoft Compatibility Pack, Microsoft Excel Viewer, or any other Microsoft Office 2007 product that is not specifically listed in the Affected Software table. Furthermore, when an update applies to Microsoft Office 2010 products, only Microsoft Office 2010 may be specifically listed in the Affected Software table. However, the update could apply to Microsoft Word 2010, Microsoft Excel 2010, Microsoft Visio 2010, Microsoft Visio Viewer, or any other Microsoft Office 2010 product that is not specifically listed in the Affected Software table.</p> <p>For more information on this behavior and recommended actions, see <a href="https://support.microsoft.com/kb/830335">Microsoft Knowledge Base Article 830335</a>. For a list of Microsoft Office products that an update may apply to, refer to the Microsoft Knowledge Base Article associated with the specific update.</p> Microsoft Office Microsoft Yes CVE-2016-3362 10152 10489 10490 10656 10654 10655 10739 10740 10279 10748 4497 9171-10308 9171-10307 9171-999008 10898-10607 Remote Code Execution 10152 Remote Code Execution 10489 Remote Code Execution 10490 Remote Code Execution 10656 Remote Code Execution 10654 Remote Code Execution 10655 Remote Code Execution 10739 Remote Code Execution 10740 Remote Code Execution 10279 Remote Code Execution 10748 Remote Code Execution 4497 Remote Code Execution 9171-10308 Remote Code Execution 9171-10307 Remote Code Execution 9171-999008 Remote Code Execution 10898-10607 Important 10152 Important 10489 Important 10490 Important 10656 Important 10654 Important 10655 Important 10739 Important 10740 Important 10279 Important 10748 Important 4497 Important 9171-10308 Important 9171-10307 Important 9171-999008 Important 10898-10607 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A 3115459 https://www.microsoft.com/download/details.aspx?familyid=a2d85409-5354-4fd2-ae8d-e6373a257601 3115306 10152 Maybe Security Update 3118316 https://www.microsoft.com/download/details.aspx?familyid=58e515e7-80b4-4d54-882d-9a8e1bbfe16b 3115322 10489 Maybe Security Update 3118316 https://www.microsoft.com/download/details.aspx?familyid=47e85a73-6a22-41ad-aa4e-1a05a56318cb 3115322 10490 Maybe Security Update 3118284 3115262 10656 Maybe Security Update 3118284 https://www.microsoft.com/download/details.aspx?familyid=33f27a25-c07a-4f12-aa00-8bf507697b64 3115262 10654 Maybe Security Update 3118284 https://www.microsoft.com/download/details.aspx?familyid=3b5af716-f051-442f-b103-cf3d14eedff6 3115262 10655 Maybe Security Update 3118290 https://www.microsoft.com/download/details.aspx?familyid=ecc2a97f-d86f-4d0d-9f59-99d092ae5acd 3115272 10739 Maybe Security Update 3118290 https://www.microsoft.com/download/details.aspx?familyid=ffb27d67-72cb-4407-af05-a24397f6a231 3115272 10740 Maybe Security Update 3115463 https://www.microsoft.com/download/details.aspx?familyid=5f9c8db3-b4b5-4495-89c8-ee4862b7984d 3115114 10279 Maybe Security Update 3118299 https://www.microsoft.com/download/details.aspx?familyid=81a63997-7836-4aba-a789-0eb5c2791340 3115386 10748 Maybe Security Update 3115462 https://www.microsoft.com/download/details.aspx?familyid=8207226e-8245-40a9-b543-3a8edd8f20db 3115308 4497 Maybe Security Update 3115112 https://www.microsoft.com/download/details.aspx?familyid=e7d9f719-a657-4118-aeb8-f98635236efd 3114897 9171-10308 Maybe Security Update 3115112 https://www.microsoft.com/download/details.aspx?familyid=4a17e450-b50b-4858-b924-1d5e26dc8910 3114897 9171-10307 Maybe Security Update 3115119 https://www.microsoft.com/download/details.aspx?familyid=3b876e53-072f-4e34-986e-f4fc6fb65ef8 3114871 9171-999008 Maybe Security Update 3115169 https://www.microsoft.com/download/details.aspx?familyid=133561e7-90dc-429c-bf78-89cb75259b74 3114335 10898-10607 Maybe Security Update <p>The following <a href="https://technet.microsoft.com/library/security/dn848375.aspx#Mitigation">mitigating factors</a> might be helpful in your situation:</p> <p>In order for the attack to succeed, the victim must be made to click a specific button within the given page.</p> Steven Seeley of <a href="http://srcincite.io/">Source Incite</a> 1.0 2016-09-13T07:00:00 <p>Information published.</p> Microsoft Office Memory Corruption Vulnerability <p>A remote code execution vulnerability exists in Microsoft Office software when the Office software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an attacker could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.</p> <p>Exploitation of the vulnerability requires that a user open a specially crafted file with an affected version of Microsoft Office software. In an email attack scenario, an attacker could exploit the vulnerability by sending the specially crafted file to the user and convincing the user to open the file. In a web-based attack scenario, an attacker could host a website (or leverage a compromised website that accepts or hosts user-provided content) that contains a specially crafted file designed to exploit the vulnerability. An attacker would have no way to force users to visit the website. Instead, an attacker would have to convince users to click a link, typically by way of an enticement in an email or instant message, and then convince them to open the specially crafted file.</p> <p>Note that the Preview Pane is not an attack vector for this vulnerability. The security update addresses the vulnerability by correcting how Office handles objects in memory.</p> <p><strong>I am being offered this update for software that is not specifically indicated as being affected in the Affected Software and Vulnerability Severity Ratings table. Why am I being offered this update?</strong></p> <p>When updates address vulnerable code that exists in a component that is shared between multiple Microsoft Office products or shared between multiple versions of the same Microsoft Office product, the update is considered to be applicable to all supported products and versions that contain the vulnerable component.</p> <p>For example, when an update applies to Microsoft Office 2007 products, only Microsoft Office 2007 may be specifically listed in the Affected Software table. However, the update could apply to Microsoft Word 2007, Microsoft Excel 2007, Microsoft Visio 2007, Microsoft Compatibility Pack, Microsoft Excel Viewer, or any other Microsoft Office 2007 product that is not specifically listed in the Affected Software table. Furthermore, when an update applies to Microsoft Office 2010 products, only Microsoft Office 2010 may be specifically listed in the Affected Software table. However, the update could apply to Microsoft Word 2010, Microsoft Excel 2010, Microsoft Visio 2010, Microsoft Visio Viewer, or any other Microsoft Office 2010 product that is not specifically listed in the Affected Software table.</p> <p>For more information on this behavior and recommended actions, see <a href="https://support.microsoft.com/kb/830335">Microsoft Knowledge Base Article 830335</a>. For a list of Microsoft Office products that an update may apply to, refer to the Microsoft Knowledge Base Article associated with the specific update.</p> Microsoft Office Microsoft Yes CVE-2016-3381 10152 10489 10490 10656 10654 10655 10739 10740 10279 4497 Remote Code Execution 10152 Remote Code Execution 10489 Remote Code Execution 10490 Remote Code Execution 10656 Remote Code Execution 10654 Remote Code Execution 10655 Remote Code Execution 10739 Remote Code Execution 10740 Remote Code Execution 10279 Remote Code Execution 4497 Important 10152 Important 10489 Important 10490 Important 10656 Important 10654 Important 10655 Important 10739 Important 10740 Important 10279 Important 4497 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A 3115459 https://www.microsoft.com/download/details.aspx?familyid=a2d85409-5354-4fd2-ae8d-e6373a257601 3115306 10152 Maybe Security Update 3118316 https://www.microsoft.com/download/details.aspx?familyid=58e515e7-80b4-4d54-882d-9a8e1bbfe16b 3115322 10489 Maybe Security Update 3118316 https://www.microsoft.com/download/details.aspx?familyid=47e85a73-6a22-41ad-aa4e-1a05a56318cb 3115322 10490 Maybe Security Update 3118284 3115262 10656 Maybe Security Update 3118284 https://www.microsoft.com/download/details.aspx?familyid=33f27a25-c07a-4f12-aa00-8bf507697b64 3115262 10654 Maybe Security Update 3118284 https://www.microsoft.com/download/details.aspx?familyid=3b5af716-f051-442f-b103-cf3d14eedff6 3115262 10655 Maybe Security Update 3118290 https://www.microsoft.com/download/details.aspx?familyid=ecc2a97f-d86f-4d0d-9f59-99d092ae5acd 3115272 10739 Maybe Security Update 3118290 https://www.microsoft.com/download/details.aspx?familyid=ffb27d67-72cb-4407-af05-a24397f6a231 3115272 10740 Maybe Security Update 3115463 https://www.microsoft.com/download/details.aspx?familyid=5f9c8db3-b4b5-4495-89c8-ee4862b7984d 3115114 10279 Maybe Security Update 3115462 https://www.microsoft.com/download/details.aspx?familyid=8207226e-8245-40a9-b543-3a8edd8f20db 3115308 4497 Maybe Security Update <p>The following <a href="https://technet.microsoft.com/library/security/dn848375.aspx#Mitigation">mitigating factors</a> might be helpful in your situation:</p> <p>In order for the attack to succeed, the victim must be made to click a specific button within the given page.</p> Steven Seeley of <a href="http://srcincite.io/">Source Incite</a> 1.0 2016-09-13T07:00:00 <p>Information published.</p> Microsoft Office Memory Corruption Vulnerability <p>A remote code execution vulnerability exists in Microsoft Office software when the Office software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an attacker could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.</p> <p>Exploitation of the vulnerability requires that a user open a specially crafted file with an affected version of Microsoft Office software. In an email attack scenario, an attacker could exploit the vulnerability by sending the specially crafted file to the user and convincing the user to open the file. In a web-based attack scenario, an attacker could host a website (or leverage a compromised website that accepts or hosts user-provided content) that contains a specially crafted file designed to exploit the vulnerability. An attacker would have no way to force users to visit the website. Instead, an attacker would have to convince users to click a link, typically by way of an enticement in an email or instant message, and then convince them to open the specially crafted file.</p> <p>Note that the Preview Pane is not an attack vector for this vulnerability. The security update addresses the vulnerability by correcting how Office handles objects in memory.</p> <p><strong>I am being offered this update for software that is not specifically indicated as being affected in the Affected Software and Vulnerability Severity Ratings table. Why am I being offered this update?</strong></p> <p>When updates address vulnerable code that exists in a component that is shared between multiple Microsoft Office products or shared between multiple versions of the same Microsoft Office product, the update is considered to be applicable to all supported products and versions that contain the vulnerable component.</p> <p>For example, when an update applies to Microsoft Office 2007 products, only Microsoft Office 2007 may be specifically listed in the Affected Software table. However, the update could apply to Microsoft Word 2007, Microsoft Excel 2007, Microsoft Visio 2007, Microsoft Compatibility Pack, Microsoft Excel Viewer, or any other Microsoft Office 2007 product that is not specifically listed in the Affected Software table. Furthermore, when an update applies to Microsoft Office 2010 products, only Microsoft Office 2010 may be specifically listed in the Affected Software table. However, the update could apply to Microsoft Word 2010, Microsoft Excel 2010, Microsoft Visio 2010, Microsoft Visio Viewer, or any other Microsoft Office 2010 product that is not specifically listed in the Affected Software table.</p> <p>For more information on this behavior and recommended actions, see <a href="https://support.microsoft.com/kb/830335">Microsoft Knowledge Base Article 830335</a>. For a list of Microsoft Office products that an update may apply to, refer to the Microsoft Knowledge Base Article associated with the specific update.</p> Microsoft Office Microsoft Yes CVE-2016-3363 10152 10489 10490 10656 10654 10655 10739 10740 10279 4497 Remote Code Execution 10152 Remote Code Execution 10489 Remote Code Execution 10490 Remote Code Execution 10656 Remote Code Execution 10654 Remote Code Execution 10655 Remote Code Execution 10739 Remote Code Execution 10740 Remote Code Execution 10279 Remote Code Execution 4497 Important 10152 Important 10489 Important 10490 Important 10656 Important 10654 Important 10655 Important 10739 Important 10740 Important 10279 Important 4497 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A 3115459 https://www.microsoft.com/download/details.aspx?familyid=a2d85409-5354-4fd2-ae8d-e6373a257601 3115306 10152 Maybe Security Update 3118316 https://www.microsoft.com/download/details.aspx?familyid=58e515e7-80b4-4d54-882d-9a8e1bbfe16b 3115322 10489 Maybe Security Update 3118316 https://www.microsoft.com/download/details.aspx?familyid=47e85a73-6a22-41ad-aa4e-1a05a56318cb 3115322 10490 Maybe Security Update 3118284 3115262 10656 Maybe Security Update 3118284 https://www.microsoft.com/download/details.aspx?familyid=33f27a25-c07a-4f12-aa00-8bf507697b64 3115262 10654 Maybe Security Update 3118284 https://www.microsoft.com/download/details.aspx?familyid=3b5af716-f051-442f-b103-cf3d14eedff6 3115262 10655 Maybe Security Update 3118290 https://www.microsoft.com/download/details.aspx?familyid=ecc2a97f-d86f-4d0d-9f59-99d092ae5acd 3115272 10739 Maybe Security Update 3118290 https://www.microsoft.com/download/details.aspx?familyid=ffb27d67-72cb-4407-af05-a24397f6a231 3115272 10740 Maybe Security Update 3115463 https://www.microsoft.com/download/details.aspx?familyid=5f9c8db3-b4b5-4495-89c8-ee4862b7984d 3115114 10279 Maybe Security Update 3115462 https://www.microsoft.com/download/details.aspx?familyid=8207226e-8245-40a9-b543-3a8edd8f20db 3115308 4497 Maybe Security Update Steven Seeley of <a href="http://srcincite.io/">Source Incite</a> 1.0 2016-09-13T07:00:00 <p>Information published.</p> Microsoft Office Memory Corruption Vulnerability <p>A remote code execution vulnerability exists in Microsoft Office software when the Office software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an attacker could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.</p> <p>Exploitation of the vulnerability requires that a user open a specially crafted file with an affected version of Microsoft Office software. In an email attack scenario, an attacker could exploit the vulnerability by sending the specially crafted file to the user and convincing the user to open the file. In a web-based attack scenario, an attacker could host a website (or leverage a compromised website that accepts or hosts user-provided content) that contains a specially crafted file designed to exploit the vulnerability. An attacker would have no way to force users to visit the website. Instead, an attacker would have to convince users to click a link, typically by way of an enticement in an email or instant message, and then convince them to open the specially crafted file.</p> <p>Note that the Preview Pane is not an attack vector for this vulnerability. The security update addresses the vulnerability by correcting how Office handles objects in memory.</p> <p><strong>I am being offered this update for software that is not specifically indicated as being affected in the Affected Software and Vulnerability Severity Ratings table. Why am I being offered this update?</strong></p> <p>When updates address vulnerable code that exists in a component that is shared between multiple Microsoft Office products or shared between multiple versions of the same Microsoft Office product, the update is considered to be applicable to all supported products and versions that contain the vulnerable component.</p> <p>For example, when an update applies to Microsoft Office 2007 products, only Microsoft Office 2007 may be specifically listed in the Affected Software table. However, the update could apply to Microsoft Word 2007, Microsoft Excel 2007, Microsoft Visio 2007, Microsoft Compatibility Pack, Microsoft Excel Viewer, or any other Microsoft Office 2007 product that is not specifically listed in the Affected Software table. Furthermore, when an update applies to Microsoft Office 2010 products, only Microsoft Office 2010 may be specifically listed in the Affected Software table. However, the update could apply to Microsoft Word 2010, Microsoft Excel 2010, Microsoft Visio 2010, Microsoft Visio Viewer, or any other Microsoft Office 2010 product that is not specifically listed in the Affected Software table.</p> <p>For more information on this behavior and recommended actions, see <a href="https://support.microsoft.com/kb/830335">Microsoft Knowledge Base Article 830335</a>. For a list of Microsoft Office products that an update may apply to, refer to the Microsoft Knowledge Base Article associated with the specific update.</p> Microsoft Office Microsoft Yes CVE-2016-3365 10152 10489 10490 10656 10654 10655 10739 10740 10279 10748 4497 9171-10308 9171-10307 9171-10495 10898-10607 Remote Code Execution 10152 Remote Code Execution 10489 Remote Code Execution 10490 Remote Code Execution 10656 Remote Code Execution 10654 Remote Code Execution 10655 Remote Code Execution 10739 Remote Code Execution 10740 Remote Code Execution 10279 Remote Code Execution 10748 Remote Code Execution 4497 Remote Code Execution 9171-10308 Remote Code Execution 9171-10307 Remote Code Execution 9171-10495 Remote Code Execution 10898-10607 Important 10152 Important 10489 Important 10490 Important 10656 Important 10654 Important 10655 Important 10739 Important 10740 Important 10279 Important 10748 Important 4497 Important 9171-10308 Important 9171-10307 Important 9171-10495 Important 10898-10607 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A 3115459 https://www.microsoft.com/download/details.aspx?familyid=a2d85409-5354-4fd2-ae8d-e6373a257601 3115306 10152 Maybe Security Update 3118316 https://www.microsoft.com/download/details.aspx?familyid=58e515e7-80b4-4d54-882d-9a8e1bbfe16b 3115322 10489 Maybe Security Update 3118316 https://www.microsoft.com/download/details.aspx?familyid=47e85a73-6a22-41ad-aa4e-1a05a56318cb 3115322 10490 Maybe Security Update 3118284 3115262 10656 Maybe Security Update 3118284 https://www.microsoft.com/download/details.aspx?familyid=33f27a25-c07a-4f12-aa00-8bf507697b64 3115262 10654 Maybe Security Update 3118284 https://www.microsoft.com/download/details.aspx?familyid=3b5af716-f051-442f-b103-cf3d14eedff6 3115262 10655 Maybe Security Update 3118290 https://www.microsoft.com/download/details.aspx?familyid=ecc2a97f-d86f-4d0d-9f59-99d092ae5acd 3115272 10739 Maybe Security Update 3118290 https://www.microsoft.com/download/details.aspx?familyid=ffb27d67-72cb-4407-af05-a24397f6a231 3115272 10740 Maybe Security Update 3115463 https://www.microsoft.com/download/details.aspx?familyid=5f9c8db3-b4b5-4495-89c8-ee4862b7984d 3115114 10279 Maybe Security Update 3118299 https://www.microsoft.com/download/details.aspx?familyid=81a63997-7836-4aba-a789-0eb5c2791340 3115386 10748 Maybe Security Update 3115462 https://www.microsoft.com/download/details.aspx?familyid=8207226e-8245-40a9-b543-3a8edd8f20db 3115308 4497 Maybe Security Update 3115112 https://www.microsoft.com/download/details.aspx?familyid=e7d9f719-a657-4118-aeb8-f98635236efd 3114897 9171-10308 Maybe Security Update 3115112 https://www.microsoft.com/download/details.aspx?familyid=4a17e450-b50b-4858-b924-1d5e26dc8910 3114897 9171-10307 Maybe Security Update 3115119 https://www.microsoft.com/download/details.aspx?familyid=3b876e53-072f-4e34-986e-f4fc6fb65ef8 3114871 9171-10495 Maybe Security Update 3115169 https://www.microsoft.com/download/details.aspx?familyid=133561e7-90dc-429c-bf78-89cb75259b74 3114335 10898-10607 Maybe Security Update <p>The following <a href="https://technet.microsoft.com/library/security/dn848375.aspx#Mitigation">mitigating factors</a> might be helpful in your situation:</p> <p>In order for the attack to succeed, the victim must be made to click a specific button within the given page.</p> Steven Seeley of <a href="http://scrincite.io/">Source Incite, </a>working with <a href="http://www.zerodayinitiative.com/">Trend Micro's Zero Day Initiative (ZDI)</a> 1.0 2016-09-13T07:00:00 <p>Information published.</p> Microsoft Outlook Spoofing Vulnerability <p>A spoofing vulnerability exists when Microsoft Outlook does not strictly adhere to RFC2046, and improperly identifies the end of a MIME attachment. An improper MIME attachment ending may cause antivirus or antispam scanning to not work as intended.</p> <p>To exploit the vulnerability, an attacker could send a specially crafted email attachment to a user in an attempt to launch a social engineering attack, such as phishing.</p> <p>The security update addresses the vulnerability by correcting how Outlook determines the end of MIME messages.</p> <p><strong>I am being offered this update for software that is not specifically indicated as being affected in the Affected Software and Vulnerability Severity Ratings table. Why am I being offered this update?</strong></p> <p>When updates address vulnerable code that exists in a component that is shared between multiple Microsoft Office products or shared between multiple versions of the same Microsoft Office product, the update is considered to be applicable to all supported products and versions that contain the vulnerable component.</p> <p>For example, when an update applies to Microsoft Office 2007 products, only Microsoft Office 2007 may be specifically listed in the Affected Software table. However, the update could apply to Microsoft Word 2007, Microsoft Excel 2007, Microsoft Visio 2007, Microsoft Compatibility Pack, Microsoft Excel Viewer, or any other Microsoft Office 2007 product that is not specifically listed in the Affected Software table. Furthermore, when an update applies to Microsoft Office 2010 products, only Microsoft Office 2010 may be specifically listed in the Affected Software table. However, the update could apply to Microsoft Word 2010, Microsoft Excel 2010, Microsoft Visio 2010, Microsoft Visio Viewer, or any other Microsoft Office 2010 product that is not specifically listed in the Affected Software table.</p> <p>For more information on this behavior and recommended actions, see <a href="https://support.microsoft.com/kb/830335">Microsoft Knowledge Base Article 830335</a>. For a list of Microsoft Office products that an update may apply to, refer to the Microsoft Knowledge Base Article associated with the specific update.</p> Microsoft Office Microsoft Yes CVE-2016-3366 10810 10811 10156 10527 10528 10407 10765 10766 10768 Spoofing 10810 Spoofing 10811 Spoofing 10156 Spoofing 10527 Spoofing 10528 Spoofing 10407 Spoofing 10765 Spoofing 10766 Spoofing 10768 Important 10810 Important 10811 Important 10156 Important 10527 Important 10528 Important 10407 Important 10765 Important 10766 Important 10768 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely;Older Software Release:Exploitation Unlikely;DOS:N/A 3118280 https://www.microsoft.com/download/details.aspx?familyid=797da3d0-d337-4db5-a222-8baf48d11ab4 3115118 10810 Maybe Security Update 3118280 https://www.microsoft.com/download/details.aspx?familyid=6060baf6-8ac9-4555-9ccb-64705a9390a7 3115118 10811 Maybe Security Update 3118303 https://www.microsoft.com/download/details.aspx?familyid=ccb90af6-3a7f-4bd1-826f-dedb44c0bf0c 3114981 10156 Maybe Security Update 3118313 https://www.microsoft.com/download/details.aspx?familyid=9ab8897e-ec8d-47e8-b587-a96e45eeb2f3 3115474 10527 Maybe Security Update 3118313 https://www.microsoft.com/download/details.aspx?familyid=fae9d8a5-78cc-4cfa-a5ce-6c556f1b5a76 3115474 10528 Maybe Security Update 3118280 3115118 10407 Maybe Security Update 3118293 https://www.microsoft.com/download/details.aspx?familyid=9bd8ac68-323b-43e6-8d18-b655d5788ba6 10765 Maybe Security Update 3118293 https://www.microsoft.com/download/details.aspx?familyid=51dc76b2-d841-4f91-b164-e76cab385355 10766 Maybe Security Update 3186807 http://go.microsoft.com/fwlink/?LinkId=825107 3179163 10768 Maybe Security Update Incident Response Team of <a href="http://www.certego.net/">Certego</a> 1.0 2016-09-13T07:00:00 <p>Information published.</p> 2.0 2016-09-22T07:00:00 <p>Bulletin revised to announce the availability of the 14.6.8 update for Microsoft Office for Mac 2011 (3186805) and the 15.25 update for Microsoft Office 2016 for Mac (3186807). Customers running affected Mac software should install the appropriate update for their product to be protected from the vulnerabilities discussed in this bulletin. Customers running other Microsoft Office software do not need to take any action. See Microsoft Knowledge Base Article 3186805 and Microsoft Knowledge Base Article 3186807 for more information and download links.</p> Microsoft Office Information Disclosure Vulnerability <p>An information disclosure vulnerability exists when Microsoft Outlook fails to enforce copy/paste permissions on DRM-protected emails. An attacker who successfully exploited the vulnerability could potentially extract plaintext content from DRM-protected draft emails.</p> <p>The attacker would have to use another vulnerability to gain access to the victim's Drafts folder, either locally on the victim's system or remotely via MAPI.</p> <p>The security update addresses the vulnerability by correcting how Microsoft Outlook enforces DRM copy/paste permissions.</p> <p><strong>I am being offered this update for software that is not specifically indicated as being affected in the Affected Software and Vulnerability Severity Ratings table. Why am I being offered this update?</strong></p> <p>When updates address vulnerable code that exists in a component that is shared between multiple Microsoft Office products or shared between multiple versions of the same Microsoft Office product, the update is considered to be applicable to all supported products and versions that contain the vulnerable component.</p> <p>For example, when an update applies to Microsoft Office 2007 products, only Microsoft Office 2007 may be specifically listed in the Affected Software table. However, the update could apply to Microsoft Word 2007, Microsoft Excel 2007, Microsoft Visio 2007, Microsoft Compatibility Pack, Microsoft Excel Viewer, or any other Microsoft Office 2007 product that is not specifically listed in the Affected Software table. Furthermore, when an update applies to Microsoft Office 2010 products, only Microsoft Office 2010 may be specifically listed in the Affected Software table. However, the update could apply to Microsoft Word 2010, Microsoft Excel 2010, Microsoft Visio 2010, Microsoft Visio Viewer, or any other Microsoft Office 2010 product that is not specifically listed in the Affected Software table.</p> <p>For more information on this behavior and recommended actions, see <a href="https://support.microsoft.com/kb/830335">Microsoft Knowledge Base Article 830335</a>. For a list of Microsoft Office products that an update may apply to, refer to the Microsoft Knowledge Base Article associated with the specific update.</p> Microsoft Office Microsoft Yes CVE-2016-0141 10601 10602 10521 10522 10150 10753 10754 Information Disclosure 10601 Information Disclosure 10602 Information Disclosure 10521 Information Disclosure 10522 Information Disclosure 10150 Information Disclosure 10753 Information Disclosure 10754 Important 10601 Important 10602 Important 10521 Important 10522 Important 10150 Important 10753 Important 10754 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely;Older Software Release:Exploitation Unlikely;DOS:N/A 3118268 https://www.microsoft.com/download/details.aspx?familyid=c582868a-0631-4bfd-ae12-adc54778fd25 3115427 10601 Maybe Security Update 3118268 https://www.microsoft.com/download/details.aspx?familyid=8e15cbb1-5400-463e-b38b-f0fbfc65b390 3115427 10602 Maybe Security Update 3118309 https://www.microsoft.com/download/details.aspx?familyid=ca5536b1-a706-4694-b6bc-98ce162a1eb6 3114869 10521 Maybe Security Update 3118309 https://www.microsoft.com/download/details.aspx?familyid=3abc23a3-ec3a-49c4-9e49-991c46c3c137 3114869 10522 Maybe Security Update 3118300 https://www.microsoft.com/download/details.aspx?familyid=32311a8f-aa2f-4cf2-b63c-f3911cba8eed 3114893 10150 Maybe Security Update 3118292 https://www.microsoft.com/download/details.aspx?familyid=b50e8984-03e4-4803-8d1f-f7f7ddbedcee 3115272 10753 Maybe Security Update 3118292 https://www.microsoft.com/download/details.aspx?familyid=66fb8f08-3170-4e72-b65c-4fdab2a214c5 3115272 10754 Maybe Security Update 1.0 2016-09-13T07:00:00 <p>Information published.</p> Microsoft APP-V Security Feature Bypass Vulnerability <p>An information disclosure vulnerability exists in the way that the Click-to-Run (C2R) components handle objects in memory, which could lead to an Address Space Layout Randomization (ASLR) bypass.</p> <p>An attacker who successfully exploited the information disclosure vulnerability could use the obtained information to bypass the ASLR security mechanism in Windows, which helps protect users from a broad class of vulnerabilities. The ASLR bypass by itself does not allow arbitrary code execution; however, an attacker could use the ASLR bypass in conjunction with another vulnerability, such as a remote code execution vulnerability, that could leverage the ASLR bypass to run arbitrary code.</p> <p>To exploit the ASLR bypass, an attacker would have to log on to an affected system and run a specially crafted application. Workstations are primarily vulnerable to the potential ASLR bypass. The security update addresses the ASLR bypass by correcting how C2R components handle memory addresses.</p> <p><strong>This security update is for the Click-to-Run (C2R) version only</strong>. For more information and the current Click-to-Run version number, see <a href="https://technet.microsoft.com/en-us/office/mt465751">Office 365 client update channel releases</a>.</p> <p><strong>I am being offered this update for software that is not specifically indicated as being affected in the Affected Products table. Why am I being offered this update?</strong> When updates address vulnerable code that exists in a component that is shared between multiple Microsoft Office products or shared between multiple versions of the same Microsoft Office product, the update is considered to be applicable to all supported products and versions that contain the vulnerable component.</p> <p>For example, when an update applies to Microsoft Office 2007 products, only Microsoft Office 2007 may be specifically listed in the Affected Products table. However, the update could apply to Microsoft Word 2007, Microsoft Excel 2007, Microsoft Visio 2007, Microsoft Compatibility Pack, Microsoft Excel Viewer, or any other Microsoft Office 2007 product that is not specifically listed in the Affected Products table. Furthermore, when an update applies to Microsoft Office 2010 products, only Microsoft Office 2010 may be specifically listed in the Affected Products table. However, the update could apply to Microsoft Word 2010, Microsoft Excel 2010, Microsoft Visio 2010, Microsoft Visio Viewer, or any other Microsoft Office 2010 product that is not specifically listed in the Affected Products table.</p> <p>For more information on this behavior and recommended actions, see <a href="https://support.microsoft.com/kb/830335">Microsoft Knowledge Base Article 830335</a>. For a list of Microsoft Office products that an update may apply to, refer to the Microsoft Knowledge Base Article associated with the specific update.</p> Microsoft Office Microsoft Yes CVE-2016-0137 10601 10602 Security Feature Bypass 10601 Security Feature Bypass 10602 Important 10601 Important 10602 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A Click to Run 10601 10602 No Security Update Udi Yavo of <a href="http://ensilo.com">enSilo Inc</a> 1.0 2016-09-13T07:00:00 <p>Information published.</p> Win32k Elevation of Privilege Vulnerability <p>An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p> <p>To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system.</p> <p>The update addresses this vulnerability by correcting how the Windows kernel-mode driver handles objects in memory.</p> Microsoft Graphics Component Microsoft Yes CVE-2016-3349 10729 10735 10789 10788 10481 10482 10484 10378 10379 10483 10543 Elevation of Privilege 10729 Elevation of Privilege 10735 Elevation of Privilege 10789 Elevation of Privilege 10788 Elevation of Privilege 10481 Elevation of Privilege 10482 Elevation of Privilege 10484 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 10729 Important 10735 Important 10789 Important 10788 Important 10481 Important 10482 Important 10484 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10729 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10735 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10789 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10788 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10481 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10482 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10484 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10378 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10379 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10483 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10543 3185611 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185611 3176492 10729 10735 Yes Security Update 3185614 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3193494 3176493 10789 mshtml.dll;ntkrnlmp.exe;ntkrpamp.exe;csrsrv.dll;pnidui.dll;win32kbase.sys;win32kfull.sys;ntdsai.dll;inputservice.dll;securekernel.exe;srv.sys;srv2.sys;srvnet.sys;winresume.exe;winresume.efi;ieframe.dll;emodel.dll;chakra.dll;ieinstal.exe;edgehtml.dll;mobile;only;vbscript.dll;oleaut32.dll;wininet.dll;lsasrv.dll;lsass.exe;wow6432;sspicli.dll;msv1_0.dll;ksecdd.sys;mrxsmb.sys;mrxsmb10.sys;mrxsmb20.sys;windows.data.pdf.dll 0001-01-01T00:00:00 Yes Security Update 3185614 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185614 3176493 10788 mshtml.dll;ntkrnlmp.exe;ntkrpamp.exe;csrsrv.dll;pnidui.dll;win32kbase.sys;win32kfull.sys;ntdsai.dll;inputservice.dll;securekernel.exe;srv.sys;srv2.sys;srvnet.sys;winresume.exe;winresume.efi;ieframe.dll;emodel.dll;chakra.dll;ieinstal.exe;edgehtml.dll;mobile;only;vbscript.dll;oleaut32.dll;wininet.dll;lsasrv.dll;lsass.exe;wow6432;sspicli.dll;msv1_0.dll;ksecdd.sys;mrxsmb.sys;mrxsmb10.sys;mrxsmb20.sys;windows.data.pdf.dll 0001-01-01T00:00:00 Yes Security Update 3185911 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185911 3177725 10481 10482 10378 10379 10483 10543 win32k.sys;user32.dll 0001-01-01T00:00:00 Yes Security Update 3185911 3177725 10484 win32k.sys;user32.dll 0001-01-01T00:00:00 Yes Security Update 1.0 2016-09-13T07:00:00 <p>Information published.</p> GDI+ Remote Code Execution Vulnerability <p>A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.</p> <p>There are multiple ways an attacker could exploit the vulnerability:</p> <ul> <li>In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability and then convince users to view the website. An attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically by getting them to open an email attachment or click a link in an email or instant message.</li> <li>In a file-sharing attack scenario, an attacker could provide a specially crafted document file that is designed to exploit the vulnerability, and then convince users to open the document file.</li> </ul> <p>The security update addresses the vulnerability by correcting the way that the Windows GDI handles objects in the memory.</p> Microsoft Graphics Component Microsoft Yes CVE-2016-3356 10852 10853 Remote Code Execution 10852 Remote Code Execution 10853 Critical 10852 Critical 10853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:N/A;DOS:N/A 6.7 6.2 CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:W/RC:C 10852 6.7 6.2 CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:W/RC:C 10853 3189866 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3189866 3176495 10852 10853 ntkrnlmp.exe;ntkrpamp.exe;pnidui.dll;win32kbase.sys;win32kfull.sys;ntdsai.dll;inputservice.dll;srv.sys;mshtml.dll;windowscodecs.dll;chakra.dll;ieinstal.exe;edgehtml.dll;vbscript.dll;oleaut32.dll;wininet.dll;lsasrv.dll;lsass.exe;wow6432;sspicli.dll;msv1_0.dll;ksecdd.sys;mrxsmb.sys;mrxsmb10.sys;mrxsmb20.sys;ieframe.dll;windows.data.pdf.dll 0001-01-01T00:00:00 Yes Security Update 1.0 2016-09-13T07:00:00 <p>Information published.</p> Win32k Elevation of Privilege Vulnerability <p>An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p> <p>To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system.</p> <p>The update addresses this vulnerability by correcting how the Windows kernel-mode driver handles objects in memory.</p> Microsoft Graphics Component Microsoft Yes CVE-2016-3348 10729 10735 10789 10788 10047 10048 10481 10482 10484 9312 10287 9318 9344 10050 10051 10049 10378 10379 10483 10543 4393 9316 10852 10853 9311 Elevation of Privilege 10729 Elevation of Privilege 10735 Elevation of Privilege 10789 Elevation of Privilege 10788 Elevation of Privilege 10047 Elevation of Privilege 10048 Elevation of Privilege 10481 Elevation of Privilege 10482 Elevation of Privilege 10484 Elevation of Privilege 9312 Elevation of Privilege 10287 Elevation of Privilege 9318 Elevation of Privilege 9344 Elevation of Privilege 10050 Elevation of Privilege 10051 Elevation of Privilege 10049 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 4393 Elevation of Privilege 9316 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 9311 Important 10729 Important 10735 Important 10789 Important 10788 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 9312 Important 10287 Important 9318 Important 9344 Important 10050 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Important 4393 Important 9316 Important 10852 Important 10853 Important 9311 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A;Older Software Release:Exploitation More Likely;DOS:N/A 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10729 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10735 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10789 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10788 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10047 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10048 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10481 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10482 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10484 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9312 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10287 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9318 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9344 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10050 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10051 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10049 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10378 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10379 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10483 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10543 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 4393 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9316 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10852 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10853 7.8 7.0 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9311 3185611 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185611 3176492 10729 10735 Yes Security Update 3185614 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3193494 3176493 10789 mshtml.dll;ntkrnlmp.exe;ntkrpamp.exe;csrsrv.dll;pnidui.dll;win32kbase.sys;win32kfull.sys;ntdsai.dll;inputservice.dll;securekernel.exe;srv.sys;srv2.sys;srvnet.sys;winresume.exe;winresume.efi;ieframe.dll;emodel.dll;chakra.dll;ieinstal.exe;edgehtml.dll;mobile;only;vbscript.dll;oleaut32.dll;wininet.dll;lsasrv.dll;lsass.exe;wow6432;sspicli.dll;msv1_0.dll;ksecdd.sys;mrxsmb.sys;mrxsmb10.sys;mrxsmb20.sys;windows.data.pdf.dll 0001-01-01T00:00:00 Yes Security Update 3185614 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185614 3176493 10788 mshtml.dll;ntkrnlmp.exe;ntkrpamp.exe;csrsrv.dll;pnidui.dll;win32kbase.sys;win32kfull.sys;ntdsai.dll;inputservice.dll;securekernel.exe;srv.sys;srv2.sys;srvnet.sys;winresume.exe;winresume.efi;ieframe.dll;emodel.dll;chakra.dll;ieinstal.exe;edgehtml.dll;mobile;only;vbscript.dll;oleaut32.dll;wininet.dll;lsasrv.dll;lsass.exe;wow6432;sspicli.dll;msv1_0.dll;ksecdd.sys;mrxsmb.sys;mrxsmb10.sys;mrxsmb20.sys;windows.data.pdf.dll 0001-01-01T00:00:00 Yes Security Update 3185911 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185911 3177725 10047 10048 10481 10482 10050 10051 10049 10378 10379 10483 10543 win32k.sys;user32.dll 0001-01-01T00:00:00 Yes Security Update 3185911 3177725 10484 win32k.sys;user32.dll 0001-01-01T00:00:00 Yes Security Update 3185911 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185911 3177725 9312 10287 9318 9344 4393 9316 9311 win32k.sys 0001-01-01T00:00:00 Yes Security Update 3189866 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3189866 3176495 10852 10853 ntkrnlmp.exe;ntkrpamp.exe;pnidui.dll;win32kbase.sys;win32kfull.sys;ntdsai.dll;inputservice.dll;srv.sys;mshtml.dll;windowscodecs.dll;chakra.dll;ieinstal.exe;edgehtml.dll;vbscript.dll;oleaut32.dll;wininet.dll;lsasrv.dll;lsass.exe;wow6432;sspicli.dll;msv1_0.dll;ksecdd.sys;mrxsmb.sys;mrxsmb10.sys;mrxsmb20.sys;ieframe.dll;windows.data.pdf.dll 0001-01-01T00:00:00 Yes Security Update <a href="https://twitter.com/zhanlulab/">RanchoIce</a> of Tencent ZhanluLab RanchoIce of <a href="http://xlab.baidu.com/">Baidu Security Lab</a> 1.0 2016-09-13T07:00:00 <p>Information published.</p> Windows GDI Elevation of Privilege Vulnerability <p>An elevation of privilege vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p> <p>To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system.</p> <p>The update addresses the vulnerability by correcting how GDI handles objects in memory and by preventing instances of unintended user-mode privilege elevation.</p> Microsoft Graphics Component Microsoft Yes CVE-2016-3355 10729 10735 10789 10788 10047 10048 10481 10482 10484 9312 10287 9311 9318 9344 10050 10051 10049 10378 10379 10483 10543 4393 9316 10852 10853 Elevation of Privilege 10729 Elevation of Privilege 10735 Elevation of Privilege 10789 Elevation of Privilege 10788 Elevation of Privilege 10047 Elevation of Privilege 10048 Elevation of Privilege 10481 Elevation of Privilege 10482 Elevation of Privilege 10484 Elevation of Privilege 9312 Elevation of Privilege 10287 Elevation of Privilege 9311 Elevation of Privilege 9318 Elevation of Privilege 9344 Elevation of Privilege 10050 Elevation of Privilege 10051 Elevation of Privilege 10049 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 4393 Elevation of Privilege 9316 Elevation of Privilege 10852 Elevation of Privilege 10853 Important 10729 Important 10735 Important 10789 Important 10788 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 9312 Important 10287 Important 9311 Important 9318 Important 9344 Important 10050 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Important 4393 Important 9316 Important 10852 Important 10853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10729 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10735 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10789 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10788 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10047 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10048 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10481 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10482 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10484 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9312 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10287 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9311 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9318 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9344 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10050 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10051 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10049 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10378 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10379 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10483 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10543 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 4393 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 9316 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10852 7.8 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 10853 3185611 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185611 3176492 10729 10735 Yes Security Update 3185614 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3193494 3176493 10789 mshtml.dll;ntkrnlmp.exe;ntkrpamp.exe;csrsrv.dll;pnidui.dll;win32kbase.sys;win32kfull.sys;ntdsai.dll;inputservice.dll;securekernel.exe;srv.sys;srv2.sys;srvnet.sys;winresume.exe;winresume.efi;ieframe.dll;emodel.dll;chakra.dll;ieinstal.exe;edgehtml.dll;mobile;only;vbscript.dll;oleaut32.dll;wininet.dll;lsasrv.dll;lsass.exe;wow6432;sspicli.dll;msv1_0.dll;ksecdd.sys;mrxsmb.sys;mrxsmb10.sys;mrxsmb20.sys;windows.data.pdf.dll 0001-01-01T00:00:00 Yes Security Update 3185614 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185614 3176493 10788 mshtml.dll;ntkrnlmp.exe;ntkrpamp.exe;csrsrv.dll;pnidui.dll;win32kbase.sys;win32kfull.sys;ntdsai.dll;inputservice.dll;securekernel.exe;srv.sys;srv2.sys;srvnet.sys;winresume.exe;winresume.efi;ieframe.dll;emodel.dll;chakra.dll;ieinstal.exe;edgehtml.dll;mobile;only;vbscript.dll;oleaut32.dll;wininet.dll;lsasrv.dll;lsass.exe;wow6432;sspicli.dll;msv1_0.dll;ksecdd.sys;mrxsmb.sys;mrxsmb10.sys;mrxsmb20.sys;windows.data.pdf.dll 0001-01-01T00:00:00 Yes Security Update 3185911 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185911 3177725 10047 10048 10481 10482 10050 10051 10049 10378 10379 10483 10543 win32k.sys;user32.dll 0001-01-01T00:00:00 Yes Security Update 3185911 3177725 10484 win32k.sys;user32.dll 0001-01-01T00:00:00 Yes Security Update 3185911 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185911 3177725 9312 10287 9311 9318 9344 4393 9316 win32k.sys 0001-01-01T00:00:00 Yes Security Update 3189866 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3189866 3176495 10852 10853 ntkrnlmp.exe;ntkrpamp.exe;pnidui.dll;win32kbase.sys;win32kfull.sys;ntdsai.dll;inputservice.dll;srv.sys;mshtml.dll;windowscodecs.dll;chakra.dll;ieinstal.exe;edgehtml.dll;vbscript.dll;oleaut32.dll;wininet.dll;lsasrv.dll;lsass.exe;wow6432;sspicli.dll;msv1_0.dll;ksecdd.sys;mrxsmb.sys;mrxsmb10.sys;mrxsmb20.sys;ieframe.dll;windows.data.pdf.dll 0001-01-01T00:00:00 Yes Security Update Jun Mao of Tencent PC Manager via GeekPwn Liang Yin of Tencent PC Manager working with GeekPwn 1.0 2016-09-13T07:00:00 <p>Information published.</p> GDI+ Information Disclosure Vulnerability <p>An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, allowing an attacker to retrieve information from a targeted system. An attacker who successfully exploited this vulnerability could use the retrieved information to circumvent Address Space Layout Randomization (ASLR) in Windows, which helps guard against a broad class of vulnerabilities. By itself, the information disclosure does not allow arbitrary code execution; however, it could allow arbitrary code to be run if the attacker uses it in combination with another vulnerability, such as a remote code execution vulnerability, that is capable of leveraging the ASLR circumvention.</p> <p>To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application.</p> <p>The security update addresses the vulnerability, and helps protect the integrity of the ASLR security feature, by correcting how GDI handles memory addresses.</p> Microsoft Graphics Component Microsoft Yes CVE-2016-3354 10729 10735 10789 10788 10047 10048 10481 10482 10484 9312 10287 9311 9318 9344 10050 10051 10049 10378 10379 10483 10543 4393 9316 10852 10853 Information Disclosure 10729 Information Disclosure 10735 Information Disclosure 10789 Information Disclosure 10788 Information Disclosure 10047 Information Disclosure 10048 Information Disclosure 10481 Information Disclosure 10482 Information Disclosure 10484 Information Disclosure 9312 Information Disclosure 10287 Information Disclosure 9311 Information Disclosure 9318 Information Disclosure 9344 Information Disclosure 10050 Information Disclosure 10051 Information Disclosure 10049 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 4393 Information Disclosure 9316 Information Disclosure 10852 Information Disclosure 10853 Important 10729 Important 10735 Important 10789 Important 10788 Important 10047 Important 10048 Important 10481 Important 10482 Important 10484 Important 9312 Important 10287 Important 9311 Important 9318 Important 9344 Important 10050 Important 10051 Important 10049 Important 10378 Important 10379 Important 10483 Important 10543 Important 4393 Important 9316 Important 10852 Important 10853 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A;Older Software Release:Exploitation Less Likely;DOS:N/A 3.3 2.9 CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:R 10729 3.3 2.9 CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:R 10735 3.3 2.9 CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:R 10789 3.3 2.9 CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:R 10788 3.3 2.9 CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:R 10047 3.3 2.9 CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:R 10048 3.3 2.9 CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:R 10481 3.3 2.9 CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:R 10482 3.3 2.9 CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:R 10484 3.3 2.9 CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:R 9312 3.3 2.9 CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:R 10287 3.3 2.9 CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:R 9311 3.3 2.9 CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:R 9318 3.3 2.9 CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:R 9344 3.3 2.9 CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:R 10050 3.3 2.9 CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:R 10051 3.3 2.9 CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:R 10049 3.3 2.9 CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:R 10378 3.3 2.9 CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:R 10379 3.3 2.9 CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:R 10483 3.3 2.9 CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:R 10543 3.3 2.9 CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:R 4393 3.3 2.9 CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:R 9316 3.3 2.9 CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:R 10852 3.3 2.9 CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:R 10853 3185611 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185611 3176492 10729 10735 Yes Security Update 3185614 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3193494 3176493 10789 mshtml.dll;ntkrnlmp.exe;ntkrpamp.exe;csrsrv.dll;pnidui.dll;win32kbase.sys;win32kfull.sys;ntdsai.dll;inputservice.dll;securekernel.exe;srv.sys;srv2.sys;srvnet.sys;winresume.exe;winresume.efi;ieframe.dll;emodel.dll;chakra.dll;ieinstal.exe;edgehtml.dll;mobile;only;vbscript.dll;oleaut32.dll;wininet.dll;lsasrv.dll;lsass.exe;wow6432;sspicli.dll;msv1_0.dll;ksecdd.sys;mrxsmb.sys;mrxsmb10.sys;mrxsmb20.sys;windows.data.pdf.dll 0001-01-01T00:00:00 Yes Security Update 3185614 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185614 3176493 10788 mshtml.dll;ntkrnlmp.exe;ntkrpamp.exe;csrsrv.dll;pnidui.dll;win32kbase.sys;win32kfull.sys;ntdsai.dll;inputservice.dll;securekernel.exe;srv.sys;srv2.sys;srvnet.sys;winresume.exe;winresume.efi;ieframe.dll;emodel.dll;chakra.dll;ieinstal.exe;edgehtml.dll;mobile;only;vbscript.dll;oleaut32.dll;wininet.dll;lsasrv.dll;lsass.exe;wow6432;sspicli.dll;msv1_0.dll;ksecdd.sys;mrxsmb.sys;mrxsmb10.sys;mrxsmb20.sys;windows.data.pdf.dll 0001-01-01T00:00:00 Yes Security Update 3185911 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185911 3177725 10047 10048 10481 10482 10050 10051 10049 10378 10379 10483 10543 win32k.sys;user32.dll 0001-01-01T00:00:00 Yes Security Update 3185911 3177725 10484 win32k.sys;user32.dll 0001-01-01T00:00:00 Yes Security Update 3185911 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185911 3177725 9312 10287 9311 9318 9344 4393 9316 win32k.sys 0001-01-01T00:00:00 Yes Security Update 3189866 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3189866 3176495 10852 10853 ntkrnlmp.exe;ntkrpamp.exe;pnidui.dll;win32kbase.sys;win32kfull.sys;ntdsai.dll;inputservice.dll;srv.sys;mshtml.dll;windowscodecs.dll;chakra.dll;ieinstal.exe;edgehtml.dll;vbscript.dll;oleaut32.dll;wininet.dll;lsasrv.dll;lsass.exe;wow6432;sspicli.dll;msv1_0.dll;ksecdd.sys;mrxsmb.sys;mrxsmb10.sys;mrxsmb20.sys;ieframe.dll;windows.data.pdf.dll 0001-01-01T00:00:00 Yes Security Update Anonymous working with <a href="http://www.zerodayinitiative.com/">Trend Micro's Zero Day Initiative</a> WanderingGlitch of <a href="http://www.zerodayinitiative.com/">TrendMicro's Zero Day Initiative (ZDI)</a> 1.0 2016-09-13T07:00:00 <p>Information published.</p> Oracle Outside In Vulnerabilities <p>This security update addresses the following vulnerabilities, which are described in <a href="http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html">Oracle Critical Patch Update Advisory – July 2016</a></p> <p>Remote Code Execution: CVE-2016-3575, CVE-2016-3581, CVE-2016-3582, CVE-2016-3583, CVE-2016-3595, CVE-2016-3594, CVE-2015-6014, CVE-2016-3593, CVE-2016-3592, CVE-2016-3596, CVE-2016-3591</p> <p>Information Disclosure: CVE-2016-3574</p> <p>Denial of Service: CVE-2016-3576, CVE-2016-3577, CVE-2016-3578, CVE-2016-3579, CVE-2016-3580, CVE-2016-3590</p> <p><strong>Why is Microsoft issuing a security update for vulnerabilities that are in third-party code, Oracle Outside In libraries?</strong> Microsoft licenses a custom implementation of the Oracle Outside In libraries, specific to the product in which the third-party code is used. Microsoft is issuing this security update to help ensure that all customers using this third-party code in Microsoft Exchange are protected from these vulnerabilities. For more information about these vulnerabilities, see <a href="http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html">Oracle Critical Patch Update Advisory – July 2016.</a></p> Microsoft Exchange Server Microsoft Yes ADV160006 10004 10476 10650 10896 10837 10838 10897 Remote Code Execution 10004 Remote Code Execution 10476 Remote Code Execution 10650 Remote Code Execution 10896 Remote Code Execution 10837 Remote Code Execution 10838 Remote Code Execution 10897 Critical 10004 Critical 10476 Critical 10650 Critical 10896 Critical 10837 Critical 10838 Critical 10897 Publicly Disclosed:Yes;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A 3184711 https://www.microsoft.com/download/details.aspx?familyid=7346ee80-aa1d-4a74-abdf-40ba864eebc8 3151086 10004 Maybe Security Update 3184728 https://www.microsoft.com/download/details.aspx?familyid=4d9bd5bb-34e8-49b8-9ae8-3275230e1c1d 3151097 10476 Maybe Security Update 3184736 https://www.microsoft.com/download/details.aspx?familyid=9c8e9062-2c83-46d2-85fe-af4fe80d96e1 3150501 10650 10896 10837 Maybe Security Update 3184736 https://www.microsoft.com/download/details.aspx?familyid=6b407e49-79b7-450c-9278-315cfec23c1b 3150501 10838 10897 Maybe Security Update 1.0 2016-09-13T07:00:00 <p>Information published.</p> Microsoft Exchange Elevation of Privilege Vulnerability <p>An elevation of privilege vulnerability exists in the way that Microsoft Outlook handles meeting invitation requests.</p> <p>To exploit the vulnerability, an attacker could send a specially crafted Outlook meeting invitation request with malicious cross-site scripting (XSS) capability to a user.</p> <p>The update addresses the vulnerability by correcting how Outlook handles meeting invitation requests.</p> Microsoft Office Microsoft Yes CVE-2016-3379 10838 10897 Elevation of Privilege 10838 Elevation of Privilege 10897 Important 10838 Important 10897 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:N/A;DOS:N/A 3184736 https://www.microsoft.com/download/details.aspx?familyid=6b407e49-79b7-450c-9278-315cfec23c1b 3150501 10838 10897 Maybe Security Update Adrian Ivascu 1.0 2016-09-13T07:00:00 <p>Information published.</p> Microsoft Exchange Open Redirect Vulnerability <p>An open redirect vulnerability exists in Microsoft Exchange that could lead to spoofing.</p> <p>To exploit the vulnerability, an attacker could send a link that has a specially crafted URL, and convince the user to click the link. When an authenticated Exchange user clicks the link, the authenticated user's browser session could be redirected to a malicious site that is designed to impersonate a legitimate website. By doing so, the attacker could trick the user and potentially acquire sensitive information, such as the user's credentials.</p> <p>The update addresses the vulnerability by correcting how Exchange handles open redirect requests.</p> Microsoft Exchange Server Microsoft Yes CVE-2016-3378 10837 10896 10838 10897 10650 Spoofing 10837 Spoofing 10896 Spoofing 10838 Spoofing 10897 Spoofing 10650 Moderate 10837 Moderate 10896 Moderate 10838 Moderate 10897 Moderate 10650 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely;Older Software Release:Exploitation Unlikely;DOS:N/A 3184736 https://www.microsoft.com/download/details.aspx?familyid=9c8e9062-2c83-46d2-85fe-af4fe80d96e1 3150501 10837 10896 10650 Maybe Security Update 3184736 https://www.microsoft.com/download/details.aspx?familyid=6b407e49-79b7-450c-9278-315cfec23c1b 3150501 10838 10897 Maybe Security Update John Page of <a href="http://hyp3rlinx.altervista.org">ApparitionSec</a> 1.0 2016-09-13T07:00:00 <p>Information published.</p> Microsoft Outlook Information Disclosure Vulnerability <p>An information disclosure vulnerability exists in the way that Microsoft Exchange Server parses email messages. The vulnerability could allow an attacker to discover confidential user information that is contained in Microsoft Outlook applications.</p> <p>To exploit the vulnerability, an attacker could use &quot;send as&quot; rights to send a specially crafted message to a user.</p> <p>The security update addresses the vulnerability by correcting how Microsoft Exchange parses certain unstructured file formats.</p> Microsoft Exchange Server Microsoft Yes CVE-2016-0138 10837 10896 10838 10897 10476 10650 10004 Information Disclosure 10837 Information Disclosure 10896 Information Disclosure 10838 Information Disclosure 10897 Information Disclosure 10476 Information Disclosure 10650 Information Disclosure 10004 Important 10837 Important 10896 Important 10838 Important 10897 Important 10476 Important 10650 Important 10004 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely;Older Software Release:N/A;DOS:N/A 3184736 https://www.microsoft.com/download/details.aspx?familyid=9c8e9062-2c83-46d2-85fe-af4fe80d96e1 3150501 10837 10896 10650 Maybe Security Update 3184736 https://www.microsoft.com/download/details.aspx?familyid=6b407e49-79b7-450c-9278-315cfec23c1b 3150501 10838 10897 Maybe Security Update 3184728 https://www.microsoft.com/download/details.aspx?familyid=4d9bd5bb-34e8-49b8-9ae8-3275230e1c1d 3151097 10476 Maybe Security Update 3184711 https://www.microsoft.com/download/details.aspx?familyid=7346ee80-aa1d-4a74-abdf-40ba864eebc8 3151086 10004 Maybe Security Update <a href="mailto:bassel.rachid@dh.com">Bassel Rachid</a> of <a href="http://www.dh.com">DH Corporation</a><br /> <a href="mailto:lucie.brochu@dh.com">Lucie Brochu</a> of <a href="http://www.dh.com">DH Corporation</a> 1.0 2016-09-13T07:00:00 <p>Information published.</p> September 2016 Adobe Flash Security Update <p>This security update addresses the following vulnerabilities, which are described in Adobe Security Bulletin <a href="http://helpx.adobe.com/security/products/flash-player/apsb16-29.html">APSB16-29</a>:</p> <p>CVE-2016-4271, CVE-2016-4272, CVE-2016-4274, CVE-2016-4275, CVE-2016-4276, CVE-2016-4277, CVE-2016-4278, CVE-2016-4279, CVE-2016-4280, CVE-2016-4281, CVE-2016-4282, CVE-2016-4283, CVE-2016-4284, CVE-2016-4285, CVE-2016-4287, CVE-2016-6921, CVE-2016-6922, CVE-2016-6923, CVE-2016-6924, CVE-2016-6925, CVE-2016-6926, CVE-2016-6927, CVE-2016-6929, CVE-2016-6930, CVE-2016-6931, CVE-2016-6932&lt;/p&gt;</p> <p><strong>How could an attacker exploit these vulnerabilities?</strong> In a web-based attack scenario where the user is using Internet Explorer for the desktop, an attacker could host a specially crafted website that is designed to exploit any of these vulnerabilities through Internet Explorer and then convince a user to view the website. An attacker could also embed an ActiveX control marked &quot;safe for initialization&quot; in an application or Microsoft Office document that hosts the IE rendering engine. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit any of these vulnerabilities. In all cases, however, an attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically by clicking a link in an email message or in an Instant Messenger message that takes users to the attacker's website, or by opening an attachment sent through email.</p> <p>In a web-based attack scenario where the user is using Internet Explorer in the Windows 8-style UI, an attacker would first need to compromise a website already listed in the Compatibility View (CV) list. An attacker could then host a website that contains specially crafted Flash content designed to exploit any of these vulnerabilities through Internet Explorer and then convince a user to view the website. An attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically by clicking a link in an email message or in an Instant Messenger message that takes users to the attacker's website, or by opening an attachment sent through email. For more information about Internet Explorer and the CV List, please see the MSDN Article, Developer Guidance for websites with content for Adobe Flash Player in Windows 8.</p> Adobe Flash Player Microsoft Yes ADV160005 10384-10378 10384-10481 10384-10482 10384-10483 10384-10484 10384-10729 10384-10735 10384-10789 10384-10788 10384-10852 10384-10853 Remote Code Execution 10384-10378 Remote Code Execution 10384-10481 Remote Code Execution 10384-10482 Remote Code Execution 10384-10483 Remote Code Execution 10384-10484 Remote Code Execution 10384-10729 Remote Code Execution 10384-10735 Remote Code Execution 10384-10789 Remote Code Execution 10384-10788 Remote Code Execution 10384-10852 Remote Code Execution 10384-10853 Moderate 10384-10378 Critical 10384-10481 Critical 10384-10482 Moderate 10384-10483 Critical 10384-10484 Critical 10384-10729 Critical 10384-10735 Critical 10384-10789 Critical 10384-10788 Critical 10384-10852 Critical 10384-10853 Publicly Disclosed:No;Exploited:No;DOS:N/A 3188128 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3188128 3174060 10384-10378 10384-10481 10384-10482 10384-10483 10384-10729 10384-10735 10384-10789 10384-10788 10384-10852 10384-10853 Yes Security Update 3188128 3174060 10384-10484 Yes Security Update <p>Workaround refers to a setting or configuration change that would help block known attack vectors before you apply the update.</p> <p><strong>Prevent Adobe Flash Player from running</strong> You can disable attempts to instantiate Adobe Flash Player in Internet Explorer and other applications that honor the kill bit feature, such as Office 2007 and Office 2010, by setting the kill bit for the control in the registry.</p> <p><strong>Warning</strong> If you use Registry Editor incorrectly, you may cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that you can solve problems that result from using Registry Editor incorrectly. Use Registry Editor at your own risk. To set the kill bit for the control in the registry, perform the following steps:</p> <ol> <li><p>Paste the following into a text file and save it with the .reg file extension.</p> <pre><code> Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{D27CDB6E-AE6D-11CF-96B8-444553540000}] &quot;Compatibility Flags&quot;=dword:00000400 [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{D27CDB6E-AE6D-11CF-96B8-444553540000}] &quot;Compatibility Flags&quot;=dword:00000400 </code></pre> </li> <li><p>Double-click the .reg file to apply it to an individual system.</p> <p>You can also apply this workaround across domains by using Group Policy. For more information about Group Policy, see the TechNet article, Group Policy collection.</p> </li> </ol> <p><strong>Note</strong> You must restart Internet Explorer for your changes to take effect. <strong>Impact of workaround</strong>. There is no impact as long as the object is not intended to be used in Internet Explorer. <strong>How to undo the workaround.</strong> Delete the registry keys that were added in implementing this workaround. <strong>Prevent Adobe Flash Player from running in Internet Explorer through Group Policy</strong> <strong>Note</strong> The Group Policy MMC snap-in can be used to set policy for a machine, for an organizational unit, or for an entire domain. For more information about Group Policy, visit the following Microsoft Web sites:</p> <p><a href="https://technet.microsoft.com/library/hh831791">Group Policy Overview</a> <a href="https://technet.microsoft.com/library/cc737816%28v=ws.10%29.aspx">What is Group Policy Object Editor?</a> <a href="https://technet.microsoft.com/library/cc784165%28v=ws.10%29.aspx">Core Group Policy tools and settings</a></p> <p>To disable Adobe Flash Player in Internet Explorer through Group Policy, perform the following steps: <strong>Note</strong> This workaround does not prevent Flash from being invoked from other applications, such as Microsoft Office 2007 or Microsoft Office 2010.</p> <ol> <li>Open the Group Policy Management Console and configure the console to work with the appropriate Group Policy object, such as local machine, OU, or domain GPO.</li> <li>Navigate to the following node: <strong>Administrative Templates -&gt; Windows Components -&gt; Internet Explorer -&gt; Security Features -&gt; Add-on Management</strong></li> <li>Double-click <strong>Turn off Adobe Flash in Internet Explorer and prevent applications from using Internet Explorer technology to instantiate Flash objects</strong>.</li> <li>Change the setting to Enabled.</li> <li>Click <strong>Apply</strong> and then click <strong>OK</strong> to return to the Group Policy Management Console.</li> <li>Refresh Group Policy on all systems or wait for the next scheduled Group Policy refresh interval for the settings to take effect. <strong>Prevent Adobe Flash Player from running in Office 2010 on affected systems</strong> <strong>Note</strong> This workaround does not prevent Adobe Flash Player from running in Internet Explorer. <strong>Warning</strong> If you use Registry Editor incorrectly, you may cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that you can solve problems that result from using Registry Editor incorrectly. Use Registry Editor at your own risk. For detailed steps that you can use to prevent a control from running in Internet Explorer, see Microsoft Knowledge Base Article 240797. Follow the steps in the article to create a Compatibility Flags value in the registry to prevent a COM object from being instantiated in Internet Explorer.</li> </ol> <p>To disable Adobe Flash Player in Office 2010 only, set the kill bit for the ActiveX control for Adobe Flash Player in the registry using the following steps:</p> <ol> <li>Create a text file named Disable_Flash.reg with the following contents:</li> </ol> <pre><code> [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\Common\COM\Compatibility\{D27CDB6E-AE6D-11CF-96B8-444553540000}] &quot;Compatibility Flags&quot;=dword:00000400 </code></pre> <ol start="2"> <li>Double-click the .reg file to apply it to an individual system.</li> <li><strong>Note</strong> You must restart Internet Explorer for your changes to take effect. You can also apply this workaround across domains by using Group Policy. For more information about Group Policy, see the TechNet article, <a href="http://go.microsoft.com/fwlink/?LinkID=215719">Group Policy collection</a>. <strong>Prevent ActiveX controls from running in Office 2007 and Office 2010</strong></li> </ol> <p>To disable all ActiveX controls in Microsoft Office 2007 and Microsoft Office 2010, including Adobe Flash Player in Internet Explorer, perform the following steps:</p> <ol> <li>Click File, click Options, click Trust Center, and then click Trust Center Settings.</li> <li>Click ActiveX Settings in the left-hand pane, and then select Disable all controls without notifications.</li> <li>Click OK to save your settings. <strong>Impact of workaround</strong>. Office documents that use embedded ActiveX controls may not display as intended. <strong>How to undo the workaround</strong>.</li> </ol> <p>To re-enable ActiveX controls in Microsoft Office 2007 and Microsoft Office 2010, perform the following steps:</p> <ol> <li>Click File, click Options, click Trust Center, and then click Trust Center Settings.</li> <li>Click ActiveX Settings in the left-hand pane, and then deselect Disable all controls without notifications.</li> <li>Click OK to save your settings. <strong>Set Internet and Local intranet security zone settings to &quot;High&quot; to block ActiveX Controls and Active Scripting in these zones</strong> You can help protect against exploitation of these vulnerabilities by changing your settings for the Internet security zone to block ActiveX controls and Active Scripting. You can do this by setting your browser security to High.</li> </ol> <p>To raise the browsing security level in Internet Explorer, perform the following steps:</p> <ol> <li>On the Internet Explorer <strong>Tools</strong> menu, click** Internet Option**s.</li> <li>In the <strong>Internet Options</strong> dialog box, click the <strong>Security</strong> tab, and then click <strong>Internet</strong>.</li> <li>Under <strong>Security level for this zone</strong>, move the slider to <strong>High</strong>. This sets the security level for all websites you visit to High.</li> <li>Click <strong>Local intranet</strong>.</li> <li>Under <strong>Security level for this zone</strong>, move the slider to <strong>High</strong>. This sets the security level for all websites you visit to High.</li> <li>Click <strong>OK</strong> to accept the changes and return to Internet Explorer. <strong>Note</strong> If no slider is visible, click <strong>Default Level</strong>, and then move the slider to <strong>High</strong>. <strong>Note</strong> Setting the level to High may cause some websites to work incorrectly. If you have difficulty using a website after you change this setting, and you are sure the site is safe to use, you can add that site to your list of trusted sites. This will allow the site to work correctly even with the security setting set to High. <strong>Impact of workaround</strong>. There are side effects to blocking ActiveX Controls and Active Scripting. Many websites on the Internet or an intranet use ActiveX or Active Scripting to provide additional functionality. For example, an online e-commerce site or banking site may use ActiveX Controls to provide menus, ordering forms, or even account statements. Blocking ActiveX Controls or Active Scripting is a global setting that affects all Internet and intranet sites. If you do not want to block ActiveX Controls or Active Scripting for such sites, use the steps outlined in &quot;Add sites that you trust to the Internet Explorer Trusted sites zone&quot;. <strong>Configure Internet Explorer to prompt before running Active Scripting or to disable Active Scripting in the Internet and Local intranet security zone</strong></li> </ol> <p>You can help protect against exploitation of these vulnerabilities by changing your settings to prompt before running Active Scripting or to disable Active Scripting in the Internet and Local intranet security zone. To do this, perform the following steps:</p> <ol> <li>In Internet Explorer, click <strong>Internet Options</strong> on the <strong>Tools</strong> menu.</li> <li>Click the <strong>Security</strong> tab.</li> <li>Click <strong>Internet</strong>, and then click <strong>Custom Level</strong>.</li> <li>Under <strong>Settings</strong>, in the <strong>Scripting</strong> section, under <strong>Active Scripting</strong>, click <strong>Prompt</strong> or <strong>Disable</strong>, and then click <strong>OK</strong>.</li> <li>Click <strong>Local intranet</strong>, and then click <strong>Custom Level</strong>.</li> <li>Under <strong>Settings</strong>, in the <strong>Scripting</strong> section, under <strong>Active Scripting</strong>, click <strong>Prompt</strong> or <strong>Disable</strong>, and then click <strong>OK</strong>.</li> <li>Click <strong>OK</strong> to return to Internet Explorer, and then click <strong>OK</strong> again. <strong>Note</strong> Disabling Active Scripting in the Internet and Local intranet security zones may cause some websites to work incorrectly. If you have difficulty using a website after you change this setting, and you are sure the site is safe to use, you can add that site to your list of trusted sites. This will allow the site to work correctly. <strong>Impact of workaround</strong>. There are side effects to prompting before running Active Scripting. Many websites that are on the Internet or on an intranet use Active Scripting to provide additional functionality. For example, an online e-commerce site or banking site may use Active Scripting to provide menus, ordering forms, or even account statements. Prompting before running Active Scripting is a global setting that affects all Internet and intranet sites. You will be prompted frequently when you enable this workaround. For each prompt, if you feel you trust the site that you are visiting, click <strong>Yes</strong> to run Active Scripting. If you do not want to be prompted for all these sites, use the steps outlined in &quot;Add sites that you trust to the Internet Explorer Trusted sites zone&quot;. <strong>Add sites that you trust to the Internet Explorer Trusted sites zone</strong> After you set Internet Explorer to require a prompt before it runs ActiveX controls and Active Scripting in the Internet zone and in the Local intranet zone, you can add sites that you trust to the Internet Explorer Trusted sites zone. This will allow you to continue to use trusted websites exactly as you do today, while helping to protect you from this attack on untrusted sites. We recommend that you add only sites that you trust to the Trusted sites zone.</li> </ol> <p>To do this, perform the following steps:</p> <ol> <li>In Internet Explorer, click <strong>Tools</strong>, click <strong>Internet Options</strong>, and then click the <strong>Security</strong> tab.</li> <li>In the <strong>Select a web content zone to specify its current security settings</strong> box, click <strong>Trusted Sites</strong>, and then click <strong>Sites</strong>.</li> <li>If you want to add sites that do not require an encrypted channel, click to clear the <strong>Require server verification (https:) for all sites in this zone</strong> check box.</li> <li>In the <strong>Add this website to the zone</strong> box, type the URL of a site that you trust, and then click <strong>Add</strong>.</li> <li>Repeat these steps for each site that you want to add to the zone.</li> <li>Click <strong>OK</strong> two times to accept the changes and return to Internet Explorer. <strong>Note</strong> Add any sites that you trust not to take malicious action on your system. Two sites in particular that you may want to add are *<strong>.windowsupdate.microsoft.com</strong> and *<strong>.update.microsoft.com</strong>. These are the sites that will host the update, and they require an ActiveX control to install the update.</li> </ol> <p>The following <a href="https://technet.microsoft.com/library/security/dn848375.aspx#Mitigation">mitigating factors</a> may be helpful in your situation:</p> <ul> <li>In a web-based attack scenario where the user is using Internet Explorer for the desktop, an attacker could host a website that contains a webpage that is used to exploit any of these vulnerabilities. In addition, compromised websites and websites that accept or host user-provided content or advertisements could contain specially crafted content that could exploit any of these vulnerabilities. In all cases, however, an attacker would have no way to force users to visit these websites. Instead, an attacker would have to convince users to visit the website, typically by getting them to click a link in an email message or instant message that takes users to the attacker's website.</li> <li>Internet Explorer in the Windows 8-style UI will only play Flash content from sites listed on the Compatibility View (CV) list. This restriction requires an attacker to first compromise a website already listed on the CV list. An attacker could then host specially crafted Flash content designed to exploit any of these vulnerabilities through Internet Explorer and then convince a user to view the website. An attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically by clicking a link in an email message or in an instant message that takes users to the attacker's website, or by opening an attachment sent through email.</li> <li>By default, all supported versions of Microsoft Outlook and Windows Live Mail open HTML email messages in the Restricted sites zone. The Restricted sites zone, which disables scripts and ActiveX controls, helps reduce the risk of an attacker being able to use any of these vulnerabilities to execute malicious code. If a user clicks a link in an email message, the user could still be vulnerable to exploitation of any of these vulnerabilities through the web-based attack scenario.</li> <li>By default, Internet Explorer on Windows Server 2012 and Windows Server 2012 R2 runs in a restricted mode that is known as <a href="https://technet.microsoft.com/library/dd883248.aspx">Enhanced Security Configuration</a>. This mode can help reduce the likelihood of the exploitation of these Adobe Flash Player vulnerabilities in Internet Explorer.</li> </ul> 1.0 2016-09-13T07:00:00 <p>Information published.</p> Scripting Engine Memory Corruption Vulnerability <p>A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p> <p>In a web-based attack scenario, an attacker could host a specially crafted website designed to exploit the vulnerability through a Microsoft browser and then convince a user to view the website. An attacker could also embed an ActiveX control marked &quot;safe for initialization&quot; in an application or Microsoft Office document that hosts the browser rendering engine. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p> <p>The security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.</p> Microsoft Edge (HTML-based) Microsoft Yes CVE-2016-3377 10724-10789 10724-10788 10724-10852 10724-10853 Remote Code Execution 10724-10789 Remote Code Execution 10724-10788 Remote Code Execution 10724-10852 Remote Code Execution 10724-10853 Critical 10724-10789 Critical 10724-10788 Critical 10724-10852 Critical 10724-10853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A;DOS:N/A 3185614 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3193494 3176493 10724-10789 mshtml.dll;ntkrnlmp.exe;ntkrpamp.exe;csrsrv.dll;pnidui.dll;win32kbase.sys;win32kfull.sys;ntdsai.dll;inputservice.dll;securekernel.exe;srv.sys;srv2.sys;srvnet.sys;winresume.exe;winresume.efi;ieframe.dll;emodel.dll;chakra.dll;ieinstal.exe;edgehtml.dll;mobile;only;vbscript.dll;oleaut32.dll;wininet.dll;lsasrv.dll;lsass.exe;wow6432;sspicli.dll;msv1_0.dll;ksecdd.sys;mrxsmb.sys;mrxsmb10.sys;mrxsmb20.sys;windows.data.pdf.dll 0001-01-01T00:00:00 Yes Security Update 3185614 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185614 3176493 10724-10788 mshtml.dll;ntkrnlmp.exe;ntkrpamp.exe;csrsrv.dll;pnidui.dll;win32kbase.sys;win32kfull.sys;ntdsai.dll;inputservice.dll;securekernel.exe;srv.sys;srv2.sys;srvnet.sys;winresume.exe;winresume.efi;ieframe.dll;emodel.dll;chakra.dll;ieinstal.exe;edgehtml.dll;mobile;only;vbscript.dll;oleaut32.dll;wininet.dll;lsasrv.dll;lsass.exe;wow6432;sspicli.dll;msv1_0.dll;ksecdd.sys;mrxsmb.sys;mrxsmb10.sys;mrxsmb20.sys;windows.data.pdf.dll 0001-01-01T00:00:00 Yes Security Update 3189866 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3189866 3176495 10724-10852 10724-10853 ntkrnlmp.exe;ntkrpamp.exe;pnidui.dll;win32kbase.sys;win32kfull.sys;ntdsai.dll;inputservice.dll;srv.sys;mshtml.dll;windowscodecs.dll;chakra.dll;ieinstal.exe;edgehtml.dll;vbscript.dll;oleaut32.dll;wininet.dll;lsasrv.dll;lsass.exe;wow6432;sspicli.dll;msv1_0.dll;ksecdd.sys;mrxsmb.sys;mrxsmb10.sys;mrxsmb20.sys;ieframe.dll;windows.data.pdf.dll 0001-01-01T00:00:00 Yes Security Update Richard Zhu (fluorescence), working with <a href="http://www.zerodayinitiative.com/">Trend Micro's Zero Day Initiative (ZDI)</a> 1.0 2016-09-13T07:00:00 <p>Information published.</p> Internet Explorer Information Disclosure Vulnerability <p>An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.</p> <p>To exploit the vulnerability, in a web-based attack scenario, an attacker could host a website in an attempt to exploit the vulnerability. In addition, compromised websites and websites that accept or host user-provided content could contain specially crafted content that could exploit the vulnerability. However, in all cases an attacker would have no way to force a user to view the attacker-controlled content. Instead, an attacker would have to convince a user to take action. For example, an attacker could trick a user into clicking a link that takes the user to the attacker's site.</p> <p>The security update addresses the vulnerability by modifying how Internet Explorer handles objects in memory.</p> Microsoft Browsers Microsoft Yes CVE-2016-3325 10486-10729 10486-10735 10486-10789 10486-10788 10486-10852 10486-10853 10724-10729 10724-10735 10724-10789 10724-10788 10724-10852 10724-10853 Information Disclosure 10486-10729 Information Disclosure 10486-10735 Information Disclosure 10486-10789 Information Disclosure 10486-10788 Information Disclosure 10486-10852 Information Disclosure 10486-10853 Information Disclosure 10724-10729 Information Disclosure 10724-10735 Information Disclosure 10724-10789 Information Disclosure 10724-10788 Information Disclosure 10724-10852 Information Disclosure 10724-10853 Important 10486-10729 Important 10486-10735 Important 10486-10789 Important 10486-10788 Important 10486-10852 Important 10486-10853 Important 10724-10729 Important 10724-10735 Important 10724-10789 Important 10724-10788 Important 10724-10852 Important 10724-10853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A 3185611 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185611 3176492 10486-10729 10486-10735 10724-10729 10724-10735 Yes Security Update 3185614 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3193494 3176493 10486-10789 10724-10789 mshtml.dll;ntkrnlmp.exe;ntkrpamp.exe;csrsrv.dll;pnidui.dll;win32kbase.sys;win32kfull.sys;ntdsai.dll;inputservice.dll;securekernel.exe;srv.sys;srv2.sys;srvnet.sys;winresume.exe;winresume.efi;ieframe.dll;emodel.dll;chakra.dll;ieinstal.exe;edgehtml.dll;mobile;only;vbscript.dll;oleaut32.dll;wininet.dll;lsasrv.dll;lsass.exe;wow6432;sspicli.dll;msv1_0.dll;ksecdd.sys;mrxsmb.sys;mrxsmb10.sys;mrxsmb20.sys;windows.data.pdf.dll 0001-01-01T00:00:00 Yes Security Update 3185614 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185614 3176493 10486-10788 10724-10788 mshtml.dll;ntkrnlmp.exe;ntkrpamp.exe;csrsrv.dll;pnidui.dll;win32kbase.sys;win32kfull.sys;ntdsai.dll;inputservice.dll;securekernel.exe;srv.sys;srv2.sys;srvnet.sys;winresume.exe;winresume.efi;ieframe.dll;emodel.dll;chakra.dll;ieinstal.exe;edgehtml.dll;mobile;only;vbscript.dll;oleaut32.dll;wininet.dll;lsasrv.dll;lsass.exe;wow6432;sspicli.dll;msv1_0.dll;ksecdd.sys;mrxsmb.sys;mrxsmb10.sys;mrxsmb20.sys;windows.data.pdf.dll 0001-01-01T00:00:00 Yes Security Update 3189866 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3189866 3176495 10486-10852 10486-10853 10724-10852 10724-10853 ntkrnlmp.exe;ntkrpamp.exe;pnidui.dll;win32kbase.sys;win32kfull.sys;ntdsai.dll;inputservice.dll;srv.sys;mshtml.dll;windowscodecs.dll;chakra.dll;ieinstal.exe;edgehtml.dll;vbscript.dll;oleaut32.dll;wininet.dll;lsasrv.dll;lsass.exe;wow6432;sspicli.dll;msv1_0.dll;ksecdd.sys;mrxsmb.sys;mrxsmb10.sys;mrxsmb20.sys;ieframe.dll;windows.data.pdf.dll 0001-01-01T00:00:00 Yes Security Update SkyLined 1.0 2016-09-13T07:00:00 <p>Information published.</p> Scripting Engine Memory Corruption Vulnerability <p>A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p> <p>In a web-based attack scenario, an attacker could host a specially crafted website designed to exploit the vulnerability through a Microsoft browser and then convince a user to view the website. An attacker could also embed an ActiveX control marked &quot;safe for initialization&quot; in an application or Microsoft Office document that hosts the browser rendering engine. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability.</p> <p>The security update addresses the vulnerability by modifying how the scripting engine handles objects in memory.</p> Microsoft Edge (HTML-based) Microsoft Yes CVE-2016-3350 10724-10852 10724-10853 Remote Code Execution 10724-10852 Remote Code Execution 10724-10853 Critical 10724-10852 Critical 10724-10853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A;DOS:N/A 3189866 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3189866 3176495 10724-10852 10724-10853 ntkrnlmp.exe;ntkrpamp.exe;pnidui.dll;win32kbase.sys;win32kfull.sys;ntdsai.dll;inputservice.dll;srv.sys;mshtml.dll;windowscodecs.dll;chakra.dll;ieinstal.exe;edgehtml.dll;vbscript.dll;oleaut32.dll;wininet.dll;lsasrv.dll;lsass.exe;wow6432;sspicli.dll;msv1_0.dll;ksecdd.sys;mrxsmb.sys;mrxsmb10.sys;mrxsmb20.sys;ieframe.dll;windows.data.pdf.dll 0001-01-01T00:00:00 Yes Security Update Microsoft ChakraCore Team 1.0 2016-09-13T07:00:00 <p>Information published.</p> Microsoft Browser Information Disclosure Vulnerability <p>An information disclosure vulnerability exists when affected Microsoft scripting engines do not properly handle objects in memory. The vulnerability could allow an attacker to detect specific files on the user's computer. In a web-based attack scenario, an attacker could host a website that is used to attempt to exploit the vulnerability.</p> <p>In addition, compromised websites and websites that accept or host user-generated content could contain specially crafted content that could exploit the vulnerability. However, in all cases an attacker would have no way to force a user to view the attacker-controlled content. Instead, an attacker would have to convince a user to take action. For example, an attacker could trick a user into clicking a link that takes the user to the attacker's site.</p> <p>An attacker who successfully exploited the vulnerability could potentially read data that was not intended to be disclosed. Note that the vulnerability would not allow an attacker to either execute code or to elevate a user’s rights directly, but the vulnerability could be used to obtain information in an attempt to further compromise the affected system.</p> <p>The security update addresses the vulnerability by helping to restrict what information is returned to affected Microsoft browsers.</p> Microsoft Browsers Microsoft Yes CVE-2016-3351 10555-10378 10486-10481 10486-10482 10486-10483 10486-10484 10486-10047 10486-10048 10486-10051 10486-10729 10486-10735 10486-10789 10486-10788 10486-10852 10486-10853 10336-9316 10336-4393 10336-9312 10336-9318 10724-10729 10724-10735 10724-10789 10724-10788 10724-10852 10724-10853 Information Disclosure 10555-10378 Information Disclosure 10486-10481 Information Disclosure 10486-10482 Information Disclosure 10486-10483 Information Disclosure 10486-10484 Information Disclosure 10486-10047 Information Disclosure 10486-10048 Information Disclosure 10486-10051 Information Disclosure 10486-10729 Information Disclosure 10486-10735 Information Disclosure 10486-10789 Information Disclosure 10486-10788 Information Disclosure 10486-10852 Information Disclosure 10486-10853 Information Disclosure 10336-9316 Information Disclosure 10336-4393 Information Disclosure 10336-9312 Information Disclosure 10336-9318 Information Disclosure 10724-10729 Information Disclosure 10724-10735 Information Disclosure 10724-10789 Information Disclosure 10724-10788 Information Disclosure 10724-10852 Information Disclosure 10724-10853 Low 10555-10378 Important 10486-10481 Important 10486-10482 Low 10486-10483 Important 10486-10484 Important 10486-10047 Important 10486-10048 Low 10486-10051 Important 10486-10729 Important 10486-10735 Important 10486-10789 Important 10486-10788 Important 10486-10852 Important 10486-10853 Important 10336-9316 Important 10336-4393 Low 10336-9312 Low 10336-9318 Important 10724-10729 Important 10724-10735 Important 10724-10789 Important 10724-10788 Important 10724-10852 Important 10724-10853 Publicly Disclosed:No;Exploited:Yes;Latest Software Release:Exploitation Detected;Older Software Release:Exploitation Detected;DOS:N/A 3185319 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185319 3175443 10555-10378 10486-10481 10486-10482 10486-10483 10486-10484 10486-10047 10486-10048 10486-10051 10336-9316 10336-4393 10336-9312 10336-9318 Yes Security Update 3185611 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185611 3176492 10486-10729 10724-10729 10724-10735 Yes Security Update 3185611 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3193494 3176492 10486-10735 ntkrnlmp.exe;ntkrpamp.exe;securekernel.exe;winresume.exe;winresume.efi;ieframe.dll;emodel.dll;mshtml.dll;chakra.dll;wwanconn.dll;oleaut32.dll 0001-01-01T00:00:00 Yes Security Update 3185614 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3193494 3176493 10486-10789 10724-10789 mshtml.dll;ntkrnlmp.exe;ntkrpamp.exe;csrsrv.dll;pnidui.dll;win32kbase.sys;win32kfull.sys;ntdsai.dll;inputservice.dll;securekernel.exe;srv.sys;srv2.sys;srvnet.sys;winresume.exe;winresume.efi;ieframe.dll;emodel.dll;chakra.dll;ieinstal.exe;edgehtml.dll;mobile;only;vbscript.dll;oleaut32.dll;wininet.dll;lsasrv.dll;lsass.exe;wow6432;sspicli.dll;msv1_0.dll;ksecdd.sys;mrxsmb.sys;mrxsmb10.sys;mrxsmb20.sys;windows.data.pdf.dll 0001-01-01T00:00:00 Yes Security Update 3185614 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185614 3176493 10486-10788 10724-10788 mshtml.dll;ntkrnlmp.exe;ntkrpamp.exe;csrsrv.dll;pnidui.dll;win32kbase.sys;win32kfull.sys;ntdsai.dll;inputservice.dll;securekernel.exe;srv.sys;srv2.sys;srvnet.sys;winresume.exe;winresume.efi;ieframe.dll;emodel.dll;chakra.dll;ieinstal.exe;edgehtml.dll;mobile;only;vbscript.dll;oleaut32.dll;wininet.dll;lsasrv.dll;lsass.exe;wow6432;sspicli.dll;msv1_0.dll;ksecdd.sys;mrxsmb.sys;mrxsmb10.sys;mrxsmb20.sys;windows.data.pdf.dll 0001-01-01T00:00:00 Yes Security Update 3189866 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3189866 3176495 10486-10852 10486-10853 10724-10852 10724-10853 ntkrnlmp.exe;ntkrpamp.exe;pnidui.dll;win32kbase.sys;win32kfull.sys;ntdsai.dll;inputservice.dll;srv.sys;mshtml.dll;windowscodecs.dll;chakra.dll;ieinstal.exe;edgehtml.dll;vbscript.dll;oleaut32.dll;wininet.dll;lsasrv.dll;lsass.exe;wow6432;sspicli.dll;msv1_0.dll;ksecdd.sys;mrxsmb.sys;mrxsmb10.sys;mrxsmb20.sys;ieframe.dll;windows.data.pdf.dll 0001-01-01T00:00:00 Yes Security Update <a href="https://twitter.com/kafeine">Kafeine</a>, Brooks Li of<a href="http://www.trendmicro.com/">Trend Micro</a> 1.0 2016-09-13T07:00:00 <p>Information published.</p> Microsoft Browser Memory Corruption Vulnerability <p>A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory. The vulnerability could corrupt memory in a way that could allow an attacker to execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, the attacker could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p> <p>An attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft browsers, and then convince a user to view the website. The attacker could also take advantage of compromised websites, or websites that accept or host user-provided content or advertisements, by adding specially crafted content that could exploit the vulnerability. In all cases, however, an attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically via an enticement in email or instant message, or by getting them to open an email attachment.</p> <p>The security update addresses the vulnerability by modifying how Microsoft browsers handle objects in memory.</p> <p><strong>I am running Internet Explorer on Windows Server 2008, Windows Server 2008 R2, Windows Server 2012, or Windows Server 2012 R2. Does this mitigate these vulnerabilities?</strong> Yes. By default, Internet Explorer on Windows Server 2008, Windows Server 2008 R2, Windows Server 2012, and Windows Server 2012 R2 runs in a restricted mode that is known as Enhanced Security Configuration. Enhanced Security Configuration is a group of preconfigured settings in Internet Explorer that can reduce the likelihood of a user or administrator downloading and running specially crafted web content on a server. This is a mitigating factor for websites that you have not added to the Internet Explorer Trusted sites zone.</p> <p><strong>Can EMET help mitigate attacks that attempt to exploit these vulnerabilities?</strong> Yes. The Enhanced Mitigation Experience Toolkit (EMET) enables users to manage security mitigation technologies that help make it more difficult for attackers to exploit memory corruption vulnerabilities in a given piece of software. EMET can help mitigate attacks that attempt to exploit these vulnerabilities in Internet Explorer on systems where EMET is installed and configured to work with Internet Explorer.</p> <p>For more information about EMET, see the <a href="https://technet.microsoft.com/security/jj653751">Enhanced Mitigation Experience Toolkit</a>.</p> Microsoft Browsers Microsoft Yes CVE-2016-3247 10486-10481 10486-10482 10486-10483 10486-10484 10486-10729 10486-10735 10486-10789 10486-10788 10486-10852 10486-10853 10724-10729 10724-10735 10724-10789 10724-10788 10724-10852 10724-10853 Remote Code Execution 10486-10481 Remote Code Execution 10486-10482 Remote Code Execution 10486-10483 Remote Code Execution 10486-10484 Remote Code Execution 10486-10729 Remote Code Execution 10486-10735 Remote Code Execution 10486-10789 Remote Code Execution 10486-10788 Remote Code Execution 10486-10852 Remote Code Execution 10486-10853 Remote Code Execution 10724-10729 Remote Code Execution 10724-10735 Remote Code Execution 10724-10789 Remote Code Execution 10724-10788 Remote Code Execution 10724-10852 Remote Code Execution 10724-10853 Important 10486-10481 Important 10486-10482 Low 10486-10483 Important 10486-10484 Important 10486-10729 Important 10486-10735 Important 10486-10789 Important 10486-10788 Important 10486-10852 Important 10486-10853 Important 10724-10729 Important 10724-10735 Important 10724-10789 Important 10724-10788 Important 10724-10852 Important 10724-10853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:N/A;DOS:N/A 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10729 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10735 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10789 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10788 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10852 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10853 3185319 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185319 3175443 10486-10481 10486-10482 10486-10483 10486-10484 Yes Security Update 3185611 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185611 3176492 10486-10729 10486-10735 10724-10729 10724-10735 Yes Security Update 3185614 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3193494 3176493 10486-10789 10724-10789 mshtml.dll;ntkrnlmp.exe;ntkrpamp.exe;csrsrv.dll;pnidui.dll;win32kbase.sys;win32kfull.sys;ntdsai.dll;inputservice.dll;securekernel.exe;srv.sys;srv2.sys;srvnet.sys;winresume.exe;winresume.efi;ieframe.dll;emodel.dll;chakra.dll;ieinstal.exe;edgehtml.dll;mobile;only;vbscript.dll;oleaut32.dll;wininet.dll;lsasrv.dll;lsass.exe;wow6432;sspicli.dll;msv1_0.dll;ksecdd.sys;mrxsmb.sys;mrxsmb10.sys;mrxsmb20.sys;windows.data.pdf.dll 0001-01-01T00:00:00 Yes Security Update 3185614 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185614 3176493 10486-10788 10724-10788 mshtml.dll;ntkrnlmp.exe;ntkrpamp.exe;csrsrv.dll;pnidui.dll;win32kbase.sys;win32kfull.sys;ntdsai.dll;inputservice.dll;securekernel.exe;srv.sys;srv2.sys;srvnet.sys;winresume.exe;winresume.efi;ieframe.dll;emodel.dll;chakra.dll;ieinstal.exe;edgehtml.dll;mobile;only;vbscript.dll;oleaut32.dll;wininet.dll;lsasrv.dll;lsass.exe;wow6432;sspicli.dll;msv1_0.dll;ksecdd.sys;mrxsmb.sys;mrxsmb10.sys;mrxsmb20.sys;windows.data.pdf.dll 0001-01-01T00:00:00 Yes Security Update 3189866 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3189866 3176495 10486-10852 10486-10853 10724-10852 10724-10853 ntkrnlmp.exe;ntkrpamp.exe;pnidui.dll;win32kbase.sys;win32kfull.sys;ntdsai.dll;inputservice.dll;srv.sys;mshtml.dll;windowscodecs.dll;chakra.dll;ieinstal.exe;edgehtml.dll;vbscript.dll;oleaut32.dll;wininet.dll;lsasrv.dll;lsass.exe;wow6432;sspicli.dll;msv1_0.dll;ksecdd.sys;mrxsmb.sys;mrxsmb10.sys;mrxsmb20.sys;ieframe.dll;windows.data.pdf.dll 0001-01-01T00:00:00 Yes Security Update SkyLined, working with <a href="http://www.zerodayinitiative.com/">Trend Micro's Zero Day Initiative (ZDI)</a> 1.0 2016-09-13T07:00:00 <p>Information published.</p> Microsoft Browser Memory Corruption Vulnerability <p>A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory. The vulnerability could corrupt memory in a way that could allow an attacker to execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, the attacker could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p> <p>An attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft browsers, and then convince a user to view the website. The attacker could also take advantage of compromised websites, or websites that accept or host user-provided content or advertisements, by adding specially crafted content that could exploit the vulnerability. In all cases, however, an attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically via an enticement in email or instant message, or by getting them to open an email attachment.</p> <p>The security update addresses the vulnerability by modifying how Microsoft browsers handle objects in memory.</p> <p><strong>I am running Internet Explorer on Windows Server 2008, Windows Server 2008 R2, Windows Server 2012, or Windows Server 2012 R2. Does this mitigate these vulnerabilities?</strong> Yes. By default, Internet Explorer on Windows Server 2008, Windows Server 2008 R2, Windows Server 2012, and Windows Server 2012 R2 runs in a restricted mode that is known as Enhanced Security Configuration. Enhanced Security Configuration is a group of preconfigured settings in Internet Explorer that can reduce the likelihood of a user or administrator downloading and running specially crafted web content on a server. This is a mitigating factor for websites that you have not added to the Internet Explorer Trusted sites zone.</p> <p><strong>Can EMET help mitigate attacks that attempt to exploit these vulnerabilities?</strong> Yes. The Enhanced Mitigation Experience Toolkit (EMET) enables users to manage security mitigation technologies that help make it more difficult for attackers to exploit memory corruption vulnerabilities in a given piece of software. EMET can help mitigate attacks that attempt to exploit these vulnerabilities in Internet Explorer on systems where EMET is installed and configured to work with Internet Explorer.</p> <p>For more information about EMET, see the <a href="https://technet.microsoft.com/security/jj653751">Enhanced Mitigation Experience Toolkit</a>.</p> Microsoft Browsers Microsoft Yes CVE-2016-3297 10486-10047 10486-10048 10486-10051 10486-10729 10486-10735 10486-10789 10486-10788 10486-10852 10486-10853 10336-9316 10336-4393 10336-9312 10336-9318 10555-10378 10486-10481 10486-10482 10486-10484 10486-10483 10724-10729 10724-10735 10724-10789 10724-10788 10724-10852 10724-10853 Remote Code Execution 10486-10047 Remote Code Execution 10486-10048 Remote Code Execution 10486-10051 Remote Code Execution 10486-10729 Remote Code Execution 10486-10735 Remote Code Execution 10486-10789 Remote Code Execution 10486-10788 Remote Code Execution 10486-10852 Remote Code Execution 10486-10853 Remote Code Execution 10336-9316 Remote Code Execution 10336-4393 Remote Code Execution 10336-9312 Remote Code Execution 10336-9318 Remote Code Execution 10555-10378 Remote Code Execution 10486-10481 Remote Code Execution 10486-10482 Remote Code Execution 10486-10484 Remote Code Execution 10486-10483 Remote Code Execution 10724-10729 Remote Code Execution 10724-10735 Remote Code Execution 10724-10789 Remote Code Execution 10724-10788 Remote Code Execution 10724-10852 Remote Code Execution 10724-10853 Important 10486-10047 Important 10486-10048 Low 10486-10051 Important 10486-10729 Important 10486-10735 Important 10486-10789 Important 10486-10788 Important 10486-10852 Important 10486-10853 Important 10336-9316 Important 10336-4393 Low 10336-9312 Low 10336-9318 Low 10555-10378 Important 10486-10481 Important 10486-10482 Important 10486-10484 Low 10486-10483 Important 10724-10729 Important 10724-10735 Important 10724-10789 Important 10724-10788 Important 10724-10852 Important 10724-10853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10729 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10735 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10789 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10788 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10852 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10853 3185319 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185319 3175443 10486-10047 10486-10048 10486-10051 10336-9316 10336-4393 10336-9312 10336-9318 10555-10378 10486-10481 10486-10482 10486-10484 10486-10483 Yes Security Update 3185611 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185611 3176492 10486-10729 10486-10735 10724-10729 10724-10735 Yes Security Update 3185614 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3193494 3176493 10486-10789 10724-10789 mshtml.dll;ntkrnlmp.exe;ntkrpamp.exe;csrsrv.dll;pnidui.dll;win32kbase.sys;win32kfull.sys;ntdsai.dll;inputservice.dll;securekernel.exe;srv.sys;srv2.sys;srvnet.sys;winresume.exe;winresume.efi;ieframe.dll;emodel.dll;chakra.dll;ieinstal.exe;edgehtml.dll;mobile;only;vbscript.dll;oleaut32.dll;wininet.dll;lsasrv.dll;lsass.exe;wow6432;sspicli.dll;msv1_0.dll;ksecdd.sys;mrxsmb.sys;mrxsmb10.sys;mrxsmb20.sys;windows.data.pdf.dll 0001-01-01T00:00:00 Yes Security Update 3185614 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185614 3176493 10486-10788 10724-10788 mshtml.dll;ntkrnlmp.exe;ntkrpamp.exe;csrsrv.dll;pnidui.dll;win32kbase.sys;win32kfull.sys;ntdsai.dll;inputservice.dll;securekernel.exe;srv.sys;srv2.sys;srvnet.sys;winresume.exe;winresume.efi;ieframe.dll;emodel.dll;chakra.dll;ieinstal.exe;edgehtml.dll;mobile;only;vbscript.dll;oleaut32.dll;wininet.dll;lsasrv.dll;lsass.exe;wow6432;sspicli.dll;msv1_0.dll;ksecdd.sys;mrxsmb.sys;mrxsmb10.sys;mrxsmb20.sys;windows.data.pdf.dll 0001-01-01T00:00:00 Yes Security Update 3189866 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3189866 3176495 10486-10852 10486-10853 10724-10852 10724-10853 ntkrnlmp.exe;ntkrpamp.exe;pnidui.dll;win32kbase.sys;win32kfull.sys;ntdsai.dll;inputservice.dll;srv.sys;mshtml.dll;windowscodecs.dll;chakra.dll;ieinstal.exe;edgehtml.dll;vbscript.dll;oleaut32.dll;wininet.dll;lsasrv.dll;lsass.exe;wow6432;sspicli.dll;msv1_0.dll;ksecdd.sys;mrxsmb.sys;mrxsmb10.sys;mrxsmb20.sys;ieframe.dll;windows.data.pdf.dll 0001-01-01T00:00:00 Yes Security Update Liu Long of <a href="http://www.360.com/">Qihoo 360Vulcan Team</a> 1.0 2016-09-13T07:00:00 <p>Information published.</p> Microsoft Browser Memory Corruption Vulnerability <p>A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory. The vulnerability could corrupt memory in a way that could allow an attacker to execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, the attacker could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p> <p>An attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft browsers, and then convince a user to view the website. The attacker could also take advantage of compromised websites, or websites that accept or host user-provided content or advertisements, by adding specially crafted content that could exploit the vulnerability. In all cases, however, an attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically via an enticement in email or instant message, or by getting them to open an email attachment.</p> <p>The security update addresses the vulnerability by modifying how Microsoft browsers handle objects in memory.</p> Microsoft Edge (HTML-based) Microsoft Yes CVE-2016-3330 10724-10789 10724-10788 Remote Code Execution 10724-10789 Remote Code Execution 10724-10788 Important 10724-10789 Important 10724-10788 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A;DOS:N/A 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10789 4.2 3.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10724-10788 3185614 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3193494 3176493 10724-10789 mshtml.dll;ntkrnlmp.exe;ntkrpamp.exe;csrsrv.dll;pnidui.dll;win32kbase.sys;win32kfull.sys;ntdsai.dll;inputservice.dll;securekernel.exe;srv.sys;srv2.sys;srvnet.sys;winresume.exe;winresume.efi;ieframe.dll;emodel.dll;chakra.dll;ieinstal.exe;edgehtml.dll;mobile;only;vbscript.dll;oleaut32.dll;wininet.dll;lsasrv.dll;lsass.exe;wow6432;sspicli.dll;msv1_0.dll;ksecdd.sys;mrxsmb.sys;mrxsmb10.sys;mrxsmb20.sys;windows.data.pdf.dll 0001-01-01T00:00:00 Yes Security Update 3185614 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185614 3176493 10724-10788 mshtml.dll;ntkrnlmp.exe;ntkrpamp.exe;csrsrv.dll;pnidui.dll;win32kbase.sys;win32kfull.sys;ntdsai.dll;inputservice.dll;securekernel.exe;srv.sys;srv2.sys;srvnet.sys;winresume.exe;winresume.efi;ieframe.dll;emodel.dll;chakra.dll;ieinstal.exe;edgehtml.dll;mobile;only;vbscript.dll;oleaut32.dll;wininet.dll;lsasrv.dll;lsass.exe;wow6432;sspicli.dll;msv1_0.dll;ksecdd.sys;mrxsmb.sys;mrxsmb10.sys;mrxsmb20.sys;windows.data.pdf.dll 0001-01-01T00:00:00 Yes Security Update F4B3CD of STARLAB 1.0 2016-09-13T07:00:00 <p>Information published.</p> Microsoft Browser Memory Corruption Vulnerability <p>A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory. The vulnerability could corrupt memory in a way that could allow an attacker to execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, the attacker could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p> <p>An attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft browsers, and then convince a user to view the website. The attacker could also take advantage of compromised websites, or websites that accept or host user-provided content or advertisements, by adding specially crafted content that could exploit the vulnerability. In all cases, however, an attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically via an enticement in email or instant message, or by getting them to open an email attachment.</p> <p>The security update addresses the vulnerability by modifying how Microsoft browsers handle objects in memory.</p> <p><strong>I am running Internet Explorer on Windows Server 2008, Windows Server 2008 R2, Windows Server 2012, or Windows Server 2012 R2. Does this mitigate these vulnerabilities?</strong> Yes. By default, Internet Explorer on Windows Server 2008, Windows Server 2008 R2, Windows Server 2012, and Windows Server 2012 R2 runs in a restricted mode that is known as Enhanced Security Configuration. Enhanced Security Configuration is a group of preconfigured settings in Internet Explorer that can reduce the likelihood of a user or administrator downloading and running specially crafted web content on a server. This is a mitigating factor for websites that you have not added to the Internet Explorer Trusted sites zone.</p> <p><strong>Can EMET help mitigate attacks that attempt to exploit these vulnerabilities?</strong> Yes. The Enhanced Mitigation Experience Toolkit (EMET) enables users to manage security mitigation technologies that help make it more difficult for attackers to exploit memory corruption vulnerabilities in a given piece of software. EMET can help mitigate attacks that attempt to exploit these vulnerabilities in Internet Explorer on systems where EMET is installed and configured to work with Internet Explorer.</p> <p>For more information about EMET, see the <a href="https://technet.microsoft.com/security/jj653751">Enhanced Mitigation Experience Toolkit</a>.</p> Microsoft Browsers Microsoft Yes CVE-2016-3295 10555-10378 10486-10729 10486-10735 10486-10789 10486-10788 10724-10729 10724-10735 10486-10852 10486-10853 10486-10481 10486-10482 10486-10483 10486-10484 Remote Code Execution 10555-10378 Remote Code Execution 10486-10729 Remote Code Execution 10486-10735 Remote Code Execution 10486-10789 Remote Code Execution 10486-10788 Remote Code Execution 10724-10729 Remote Code Execution 10724-10735 Remote Code Execution 10486-10852 Remote Code Execution 10486-10853 Remote Code Execution 10486-10481 Remote Code Execution 10486-10482 Remote Code Execution 10486-10483 Remote Code Execution 10486-10484 Moderate 10555-10378 Critical 10486-10729 Critical 10486-10735 Critical 10486-10789 Critical 10486-10788 Critical 10724-10729 Critical 10724-10735 Critical 10486-10852 Critical 10486-10853 Critical 10486-10481 Critical 10486-10482 Moderate 10486-10483 Critical 10486-10484 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A;DOS:N/A 3185319 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185319 3175443 10555-10378 10486-10481 10486-10482 10486-10483 10486-10484 Yes Security Update 3185611 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185611 3176492 10486-10729 10486-10735 10724-10729 10724-10735 Yes Security Update 3185614 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3193494 3176493 10486-10789 mshtml.dll;ntkrnlmp.exe;ntkrpamp.exe;csrsrv.dll;pnidui.dll;win32kbase.sys;win32kfull.sys;ntdsai.dll;inputservice.dll;securekernel.exe;srv.sys;srv2.sys;srvnet.sys;winresume.exe;winresume.efi;ieframe.dll;emodel.dll;chakra.dll;ieinstal.exe;edgehtml.dll;mobile;only;vbscript.dll;oleaut32.dll;wininet.dll;lsasrv.dll;lsass.exe;wow6432;sspicli.dll;msv1_0.dll;ksecdd.sys;mrxsmb.sys;mrxsmb10.sys;mrxsmb20.sys;windows.data.pdf.dll 0001-01-01T00:00:00 Yes Security Update 3185614 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185614 3176493 10486-10788 mshtml.dll;ntkrnlmp.exe;ntkrpamp.exe;csrsrv.dll;pnidui.dll;win32kbase.sys;win32kfull.sys;ntdsai.dll;inputservice.dll;securekernel.exe;srv.sys;srv2.sys;srvnet.sys;winresume.exe;winresume.efi;ieframe.dll;emodel.dll;chakra.dll;ieinstal.exe;edgehtml.dll;mobile;only;vbscript.dll;oleaut32.dll;wininet.dll;lsasrv.dll;lsass.exe;wow6432;sspicli.dll;msv1_0.dll;ksecdd.sys;mrxsmb.sys;mrxsmb10.sys;mrxsmb20.sys;windows.data.pdf.dll 0001-01-01T00:00:00 Yes Security Update 3189866 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3189866 3176495 10486-10852 10486-10853 ntkrnlmp.exe;ntkrpamp.exe;pnidui.dll;win32kbase.sys;win32kfull.sys;ntdsai.dll;inputservice.dll;srv.sys;mshtml.dll;windowscodecs.dll;chakra.dll;ieinstal.exe;edgehtml.dll;vbscript.dll;oleaut32.dll;wininet.dll;lsasrv.dll;lsass.exe;wow6432;sspicli.dll;msv1_0.dll;ksecdd.sys;mrxsmb.sys;mrxsmb10.sys;mrxsmb20.sys;ieframe.dll;windows.data.pdf.dll 0001-01-01T00:00:00 Yes Security Update Garage4Hackers, working with <a href="http://www.zerodayinitiative.com/">Trend Micro's Zero Day Initiative (ZDI)</a> 1.0 2016-09-13T07:00:00 <p>Information published.</p> Microsoft Browser Information Disclosure Vulnerability <p>An information disclosure vulnerability exists in the way that affected Microsoft browsers handle cross-origin requests. An attacker who successfully exploited this vulnerability could determine the origin of all of the web pages in the affected browser.</p> <p>In a web-based attack scenario, an attacker could host a website that is used to attempt to exploit the vulnerability. Additionally, compromised websites and websites that accept or host user-provided content could contain specially crafted content that could be used to exploit the vulnerability. However, in all cases an attacker would have no way to force users to view attacker-controlled content. Instead, an attacker would have to convince users to take action. For example, an attacker could trick users into clicking a link that takes them to the attacker's site.</p> <p>The security update addresses the vulnerability by correcting how affected browsers handle cross-origin resources.</p> Microsoft Browsers Microsoft Yes CVE-2016-3291 10486-10481 10486-10482 10486-10483 10486-10484 10486-10729 10486-10735 10486-10852 10486-10853 10724-10729 10724-10735 10724-10789 10724-10788 10724-10852 10724-10853 Information Disclosure 10486-10481 Information Disclosure 10486-10482 Information Disclosure 10486-10483 Information Disclosure 10486-10484 Information Disclosure 10486-10729 Information Disclosure 10486-10735 Information Disclosure 10486-10852 Information Disclosure 10486-10853 Information Disclosure 10724-10729 Information Disclosure 10724-10735 Information Disclosure 10724-10789 Information Disclosure 10724-10788 Information Disclosure 10724-10852 Information Disclosure 10724-10853 Moderate 10486-10481 Moderate 10486-10482 Low 10486-10483 Moderate 10486-10484 Moderate 10486-10729 Moderate 10486-10735 Moderate 10486-10852 Moderate 10486-10853 Moderate 10724-10729 Moderate 10724-10735 Moderate 10724-10789 Moderate 10724-10788 Moderate 10724-10852 Moderate 10724-10853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely;Older Software Release:Exploitation Unlikely;DOS:N/A 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:T/RC:C 10486-10729 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:T/RC:C 10486-10735 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:T/RC:C 10486-10852 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:T/RC:C 10486-10853 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10724-10729 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10724-10735 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10724-10789 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10724-10788 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10724-10852 4.3 3.9 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 10724-10853 3185319 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185319 3175443 10486-10481 10486-10482 10486-10483 10486-10484 Yes Security Update 3185611 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185611 3176492 10486-10729 10486-10735 10724-10729 10724-10735 Yes Security Update 3189866 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3189866 3176495 10486-10852 10486-10853 10724-10852 10724-10853 ntkrnlmp.exe;ntkrpamp.exe;pnidui.dll;win32kbase.sys;win32kfull.sys;ntdsai.dll;inputservice.dll;srv.sys;mshtml.dll;windowscodecs.dll;chakra.dll;ieinstal.exe;edgehtml.dll;vbscript.dll;oleaut32.dll;wininet.dll;lsasrv.dll;lsass.exe;wow6432;sspicli.dll;msv1_0.dll;ksecdd.sys;mrxsmb.sys;mrxsmb10.sys;mrxsmb20.sys;ieframe.dll;windows.data.pdf.dll 0001-01-01T00:00:00 Yes Security Update 3185614 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3193494 3176493 10724-10789 mshtml.dll;ntkrnlmp.exe;ntkrpamp.exe;csrsrv.dll;pnidui.dll;win32kbase.sys;win32kfull.sys;ntdsai.dll;inputservice.dll;securekernel.exe;srv.sys;srv2.sys;srvnet.sys;winresume.exe;winresume.efi;ieframe.dll;emodel.dll;chakra.dll;ieinstal.exe;edgehtml.dll;mobile;only;vbscript.dll;oleaut32.dll;wininet.dll;lsasrv.dll;lsass.exe;wow6432;sspicli.dll;msv1_0.dll;ksecdd.sys;mrxsmb.sys;mrxsmb10.sys;mrxsmb20.sys;windows.data.pdf.dll 0001-01-01T00:00:00 Yes Security Update 3185614 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185614 3176493 10724-10788 mshtml.dll;ntkrnlmp.exe;ntkrpamp.exe;csrsrv.dll;pnidui.dll;win32kbase.sys;win32kfull.sys;ntdsai.dll;inputservice.dll;securekernel.exe;srv.sys;srv2.sys;srvnet.sys;winresume.exe;winresume.efi;ieframe.dll;emodel.dll;chakra.dll;ieinstal.exe;edgehtml.dll;mobile;only;vbscript.dll;oleaut32.dll;wininet.dll;lsasrv.dll;lsass.exe;wow6432;sspicli.dll;msv1_0.dll;ksecdd.sys;mrxsmb.sys;mrxsmb10.sys;mrxsmb20.sys;windows.data.pdf.dll 0001-01-01T00:00:00 Yes Security Update Nathaniel Theis (<a href="http://XMPPwocky.net">XMPPwocky</a>) 1.0 2016-09-13T07:00:00 <p>Information published.</p> Microsoft Browser Memory Corruption Vulnerability <p>A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory. The vulnerability could corrupt memory in a way that could allow an attacker to execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, the attacker could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p> <p>An attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft browsers, and then convince a user to view the website. The attacker could also take advantage of compromised websites, or websites that accept or host user-provided content or advertisements, by adding specially crafted content that could exploit the vulnerability. In all cases, however, an attacker would have no way to force users to view the attacker-controlled content. Instead, an attacker would have to convince users to take action, typically via an enticement in email or instant message, or by getting them to open an email attachment.</p> <p>The security update addresses the vulnerability by modifying how Microsoft browsers handle objects in memory.</p> Microsoft Edge (HTML-based) Microsoft Yes CVE-2016-3294 10724-10729 10724-10735 10724-10789 10724-10788 Remote Code Execution 10724-10729 Remote Code Execution 10724-10735 Remote Code Execution 10724-10789 Remote Code Execution 10724-10788 Critical 10724-10729 Critical 10724-10735 Critical 10724-10789 Critical 10724-10788 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:N/A;DOS:N/A 3185611 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185611 3176492 10724-10729 10724-10735 Yes Security Update 3185614 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3193494 3176493 10724-10789 mshtml.dll;ntkrnlmp.exe;ntkrpamp.exe;csrsrv.dll;pnidui.dll;win32kbase.sys;win32kfull.sys;ntdsai.dll;inputservice.dll;securekernel.exe;srv.sys;srv2.sys;srvnet.sys;winresume.exe;winresume.efi;ieframe.dll;emodel.dll;chakra.dll;ieinstal.exe;edgehtml.dll;mobile;only;vbscript.dll;oleaut32.dll;wininet.dll;lsasrv.dll;lsass.exe;wow6432;sspicli.dll;msv1_0.dll;ksecdd.sys;mrxsmb.sys;mrxsmb10.sys;mrxsmb20.sys;windows.data.pdf.dll 0001-01-01T00:00:00 Yes Security Update 3185614 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185614 3176493 10724-10788 mshtml.dll;ntkrnlmp.exe;ntkrpamp.exe;csrsrv.dll;pnidui.dll;win32kbase.sys;win32kfull.sys;ntdsai.dll;inputservice.dll;securekernel.exe;srv.sys;srv2.sys;srvnet.sys;winresume.exe;winresume.efi;ieframe.dll;emodel.dll;chakra.dll;ieinstal.exe;edgehtml.dll;mobile;only;vbscript.dll;oleaut32.dll;wininet.dll;lsasrv.dll;lsass.exe;wow6432;sspicli.dll;msv1_0.dll;ksecdd.sys;mrxsmb.sys;mrxsmb10.sys;mrxsmb20.sys;windows.data.pdf.dll 0001-01-01T00:00:00 Yes Security Update Shi Ji (@Puzzor) of VARAS@IIE, working with <a href="http://www.zerodayinitiative">Trend Micro's Zero Day Initiative (ZDI) </a> 1.0 2016-09-13T07:00:00 <p>Information published.</p> Internet Explorer Memory Corruption Vulnerability <p>A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user. If the current user is logged on with administrative user rights, the attacker could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p> <p>An attacker could host a specially crafted website designed to exploit the vulnerability through Internet Explorer and then convince a user to view the website. The attacker could also take advantage of compromised websites, or websites that accept or host user-provided content or advertisements, by adding specially crafted content that could exploit the vulnerability. However, in all cases an attacker would have no way to force a user to view the attacker-controlled content. Instead, an attacker would have to convince a user to take action, typically by an enticement in an email or instant message, or by getting the user to open an attachment sent through email.</p> <p>The security update addresses the vulnerability by modifying how Internet Explorer handles objects in memory.</p> <p><strong>I am running Internet Explorer on Windows Server 2008, Windows Server 2008 R2, Windows Server 2012, or Windows Server 2012 R2. Does this mitigate these vulnerabilities?</strong> Yes. By default, Internet Explorer on Windows Server 2008, Windows Server 2008 R2, Windows Server 2012, and Windows Server 2012 R2 runs in a restricted mode that is known as Enhanced Security Configuration. Enhanced Security Configuration is a group of preconfigured settings in Internet Explorer that can reduce the likelihood of a user or administrator downloading and running specially crafted web content on a server. This is a mitigating factor for websites that you have not added to the Internet Explorer Trusted sites zone.</p> <p><strong>Can EMET help mitigate attacks that attempt to exploit these vulnerabilities?</strong> Yes. The Enhanced Mitigation Experience Toolkit (EMET) enables users to manage security mitigation technologies that help make it more difficult for attackers to exploit memory corruption vulnerabilities in a given piece of software. EMET can help mitigate attacks that attempt to exploit these vulnerabilities in Internet Explorer on systems where EMET is installed and configured to work with Internet Explorer.</p> <p>For more information about EMET, see the <a href="https://technet.microsoft.com/security/jj653751">Enhanced Mitigation Experience Toolkit</a>.</p> Internet Explorer Microsoft Yes CVE-2016-3324 10555-10378 10486-10481 10486-10482 10486-10483 10486-10484 10486-10047 10486-10048 10486-10051 10486-10729 10486-10735 10486-10789 10486-10788 10486-10852 10486-10853 10336-9316 10336-4393 10336-9312 10336-9318 Remote Code Execution 10555-10378 Remote Code Execution 10486-10481 Remote Code Execution 10486-10482 Remote Code Execution 10486-10483 Remote Code Execution 10486-10484 Remote Code Execution 10486-10047 Remote Code Execution 10486-10048 Remote Code Execution 10486-10051 Remote Code Execution 10486-10729 Remote Code Execution 10486-10735 Remote Code Execution 10486-10789 Remote Code Execution 10486-10788 Remote Code Execution 10486-10852 Remote Code Execution 10486-10853 Remote Code Execution 10336-9316 Remote Code Execution 10336-4393 Remote Code Execution 10336-9312 Remote Code Execution 10336-9318 Low 10555-10378 Important 10486-10481 Important 10486-10482 Low 10486-10483 Important 10486-10484 Important 10486-10047 Important 10486-10048 Low 10486-10051 Important 10486-10729 Important 10486-10735 Important 10486-10789 Important 10486-10788 Important 10486-10852 Important 10486-10853 Important 10336-9316 Important 10336-4393 Low 10336-9312 Low 10336-9318 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A 6.0 5.4 CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10555-10378 7.1 6.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10486-10481 7.1 6.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10486-10482 6.0 5.4 CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10486-10483 7.1 6.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10486-10484 7.1 6.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10486-10047 7.1 6.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10486-10048 6.0 5.4 CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10486-10051 7.1 6.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10486-10729 7.1 6.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10486-10735 7.1 6.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10486-10789 7.1 6.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10486-10788 7.1 6.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10486-10852 7.1 6.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10486-10853 7.1 6.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10336-9316 7.1 6.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10336-4393 6.0 5.4 CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10336-9312 6.0 5.4 CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10336-9318 3185319 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185319 3175443 10555-10378 10486-10481 10486-10482 10486-10483 10486-10484 10486-10047 10486-10048 10486-10051 10336-9316 10336-4393 10336-9312 10336-9318 Yes Security Update 3185611 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3193494 3176492 10486-10729 ntkrnlmp.exe;ntkrpamp.exe;securekernel.exe;winresume.exe;winresume.efi;ieframe.dll;emodel.dll;mshtml.dll;chakra.dll;wwanconn.dll 0001-01-01T00:00:00 Yes Security Update 3185611 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3193494 3176492 10486-10735 ntkrnlmp.exe;ntkrpamp.exe;securekernel.exe;winresume.exe;winresume.efi;ieframe.dll;emodel.dll;mshtml.dll;chakra.dll;wwanconn.dll;oleaut32.dll 0001-01-01T00:00:00 Yes Security Update 3185614 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3193494 3176493 10486-10789 mshtml.dll;ntkrnlmp.exe;ntkrpamp.exe;csrsrv.dll;pnidui.dll;win32kbase.sys;win32kfull.sys;ntdsai.dll;inputservice.dll;securekernel.exe;srv.sys;srv2.sys;srvnet.sys;winresume.exe;winresume.efi;ieframe.dll;emodel.dll;chakra.dll;ieinstal.exe;edgehtml.dll;mobile;only;vbscript.dll;oleaut32.dll;wininet.dll;lsasrv.dll;lsass.exe;wow6432;sspicli.dll;msv1_0.dll;ksecdd.sys;mrxsmb.sys;mrxsmb10.sys;mrxsmb20.sys;windows.data.pdf.dll 0001-01-01T00:00:00 Yes Security Update 3185614 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185614 3176493 10486-10788 mshtml.dll;ntkrnlmp.exe;ntkrpamp.exe;csrsrv.dll;pnidui.dll;win32kbase.sys;win32kfull.sys;ntdsai.dll;inputservice.dll;securekernel.exe;srv.sys;srv2.sys;srvnet.sys;winresume.exe;winresume.efi;ieframe.dll;emodel.dll;chakra.dll;ieinstal.exe;edgehtml.dll;mobile;only;vbscript.dll;oleaut32.dll;wininet.dll;lsasrv.dll;lsass.exe;wow6432;sspicli.dll;msv1_0.dll;ksecdd.sys;mrxsmb.sys;mrxsmb10.sys;mrxsmb20.sys;windows.data.pdf.dll 0001-01-01T00:00:00 Yes Security Update 3189866 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3189866 3176495 10486-10852 10486-10853 ntkrnlmp.exe;ntkrpamp.exe;pnidui.dll;win32kbase.sys;win32kfull.sys;ntdsai.dll;inputservice.dll;srv.sys;mshtml.dll;windowscodecs.dll;chakra.dll;ieinstal.exe;edgehtml.dll;vbscript.dll;oleaut32.dll;wininet.dll;lsasrv.dll;lsass.exe;wow6432;sspicli.dll;msv1_0.dll;ksecdd.sys;mrxsmb.sys;mrxsmb10.sys;mrxsmb20.sys;ieframe.dll;windows.data.pdf.dll 0001-01-01T00:00:00 Yes Security Update SkyLined 1.0 2016-09-13T07:00:00 <p>Information published.</p> Internet Explorer Elevation of Privilege Vulnerability <p>An elevation of privilege vulnerability exists when Internet Explorer fails a check, allowing sandbox escape. An attacker who successfully exploited the vulnerability could use the sandbox escape to elevate privileges on an affected system.</p> <p>This vulnerability by itself does not allow arbitrary code execution; however, it could allow arbitrary code to be run if the attacker uses it in combination with another vulnerability (such as a remote code execution vulnerability or another elevation of privilege vulnerability) that is capable of leveraging the elevated privileges when code execution is attempted.</p> <p>The update addresses the vulnerability by correcting how Internet Explorer handles zone and integrity settings.</p> Internet Explorer Microsoft Yes CVE-2016-3292 10555-10378 10486-10481 10486-10482 10486-10483 10486-10484 10486-10729 10486-10735 10486-10789 10486-10788 10486-10852 10486-10853 Elevation of Privilege 10555-10378 Elevation of Privilege 10486-10481 Elevation of Privilege 10486-10482 Elevation of Privilege 10486-10483 Elevation of Privilege 10486-10484 Elevation of Privilege 10486-10729 Elevation of Privilege 10486-10735 Elevation of Privilege 10486-10789 Elevation of Privilege 10486-10788 Elevation of Privilege 10486-10852 Elevation of Privilege 10486-10853 Low 10555-10378 Important 10486-10481 Important 10486-10482 Low 10486-10483 Important 10486-10484 Important 10486-10729 Important 10486-10735 Important 10486-10789 Important 10486-10788 Important 10486-10852 Important 10486-10853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely;DOS:N/A 8.8 7.9 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C 10555-10378 8.8 7.9 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C 10486-10481 8.8 7.9 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C 10486-10482 8.8 7.9 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C 10486-10483 8.8 7.9 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C 10486-10484 8.8 7.9 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C 10486-10729 8.8 7.9 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C 10486-10735 8.8 7.9 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C 10486-10789 8.8 7.9 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C 10486-10788 8.8 7.9 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C 10486-10852 8.8 7.9 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C 10486-10853 3185319 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185319 3175443 10555-10378 10486-10481 10486-10482 10486-10483 10486-10484 Yes Security Update 3185611 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185611 3176492 10486-10729 10486-10735 Yes Security Update 3185614 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3193494 3176493 10486-10789 mshtml.dll;ntkrnlmp.exe;ntkrpamp.exe;csrsrv.dll;pnidui.dll;win32kbase.sys;win32kfull.sys;ntdsai.dll;inputservice.dll;securekernel.exe;srv.sys;srv2.sys;srvnet.sys;winresume.exe;winresume.efi;ieframe.dll;emodel.dll;chakra.dll;ieinstal.exe;edgehtml.dll;mobile;only;vbscript.dll;oleaut32.dll;wininet.dll;lsasrv.dll;lsass.exe;wow6432;sspicli.dll;msv1_0.dll;ksecdd.sys;mrxsmb.sys;mrxsmb10.sys;mrxsmb20.sys;windows.data.pdf.dll 0001-01-01T00:00:00 Yes Security Update 3185614 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185614 3176493 10486-10788 mshtml.dll;ntkrnlmp.exe;ntkrpamp.exe;csrsrv.dll;pnidui.dll;win32kbase.sys;win32kfull.sys;ntdsai.dll;inputservice.dll;securekernel.exe;srv.sys;srv2.sys;srvnet.sys;winresume.exe;winresume.efi;ieframe.dll;emodel.dll;chakra.dll;ieinstal.exe;edgehtml.dll;mobile;only;vbscript.dll;oleaut32.dll;wininet.dll;lsasrv.dll;lsass.exe;wow6432;sspicli.dll;msv1_0.dll;ksecdd.sys;mrxsmb.sys;mrxsmb10.sys;mrxsmb20.sys;windows.data.pdf.dll 0001-01-01T00:00:00 Yes Security Update 3189866 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3189866 3176495 10486-10852 10486-10853 ntkrnlmp.exe;ntkrpamp.exe;pnidui.dll;win32kbase.sys;win32kfull.sys;ntdsai.dll;inputservice.dll;srv.sys;mshtml.dll;windowscodecs.dll;chakra.dll;ieinstal.exe;edgehtml.dll;vbscript.dll;oleaut32.dll;wininet.dll;lsasrv.dll;lsass.exe;wow6432;sspicli.dll;msv1_0.dll;ksecdd.sys;mrxsmb.sys;mrxsmb10.sys;mrxsmb20.sys;ieframe.dll;windows.data.pdf.dll 0001-01-01T00:00:00 Yes Security Update Anonymous working with <a href="http://www.zerodayinitiative.com/">Trend Micro's Zero Day Initiative</a> SandboxEscaper working with <a href="https://www.zerodayinitiative.com/">Trend Micro’s Zero Day Initiative (ZDI)</a> 1.0 2016-09-13T07:00:00 <p>Information published.</p> Internet Explorer Security Feature Bypass Vulnerability <p>A security feature bypass vulnerability exists in Internet Explorer that allows for bypassing Mixed Content warnings. This could allow for the loading of unsecure content (HTTP) from secure locations (HTTPS).</p> <p>In a web-based attack scenario, an attacker could host a malicious website that is designed to exploit the security feature bypass. Alternatively, in an email or instant message attack scenario, the attacker could send the targeted user a specially crafted .url file that is designed to exploit the bypass. Additionally, compromised websites or websites that accept or host user-provided content could contain specially crafted content to exploit the security feature bypass. However, in all cases an attacker would have no way to force a user to view attacker-controlled content. Instead, an attacker would have to convince a user to take action. For example, an attacker could entice a user to either click a link that directs the user to the attacker's site or send a malicious attachment.</p> <p>The security update addresses the security feature bypass by correcting how Internet Explorer handles mixed content.</p> Internet Explorer Microsoft Yes CVE-2016-3353 10555-10378 10486-10481 10486-10482 10486-10483 10486-10484 10486-10047 10486-10048 10486-10051 10486-10729 10486-10735 10486-10789 10486-10788 10486-10852 10486-10853 10336-9316 10336-4393 10336-9312 10336-9318 Security Feature Bypass 10555-10378 Security Feature Bypass 10486-10481 Security Feature Bypass 10486-10482 Security Feature Bypass 10486-10483 Security Feature Bypass 10486-10484 Security Feature Bypass 10486-10047 Security Feature Bypass 10486-10048 Security Feature Bypass 10486-10051 Security Feature Bypass 10486-10729 Security Feature Bypass 10486-10735 Security Feature Bypass 10486-10789 Security Feature Bypass 10486-10788 Security Feature Bypass 10486-10852 Security Feature Bypass 10486-10853 Security Feature Bypass 10336-9316 Security Feature Bypass 10336-4393 Security Feature Bypass 10336-9312 Security Feature Bypass 10336-9318 Low 10555-10378 Important 10486-10481 Important 10486-10482 Low 10486-10483 Important 10486-10484 Important 10486-10047 Important 10486-10048 Low 10486-10051 Important 10486-10729 Important 10486-10735 Important 10486-10789 Important 10486-10788 Important 10486-10852 Important 10486-10853 Important 10336-9316 Important 10336-4393 Low 10336-9312 Low 10336-9318 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely;Older Software Release:Exploitation Unlikely;DOS:N/A 4.6 4.2 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10555-10378 8.3 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10486-10481 8.3 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10486-10482 4.6 4.2 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10486-10483 8.3 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10486-10484 8.3 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10486-10047 8.3 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10486-10048 4.6 4.2 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10486-10051 8.3 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10486-10729 8.3 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10486-10735 8.3 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10486-10789 8.3 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10486-10788 8.3 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10486-10852 8.3 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10486-10853 8.3 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10336-9316 8.3 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L/E:P/RL:O/RC:C 10336-4393 4.6 4.2 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10336-9312 4.6 4.2 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C 10336-9318 3185319 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185319 3175443 10555-10378 10486-10481 10486-10482 10486-10483 10486-10484 10486-10047 10486-10048 10486-10051 10336-9316 10336-4393 10336-9312 10336-9318 Yes Security Update 3185611 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185611 3176492 10486-10729 10486-10735 Yes Security Update 3185614 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3193494 3176493 10486-10789 mshtml.dll;ntkrnlmp.exe;ntkrpamp.exe;csrsrv.dll;pnidui.dll;win32kbase.sys;win32kfull.sys;ntdsai.dll;inputservice.dll;securekernel.exe;srv.sys;srv2.sys;srvnet.sys;winresume.exe;winresume.efi;ieframe.dll;emodel.dll;chakra.dll;ieinstal.exe;edgehtml.dll;mobile;only;vbscript.dll;oleaut32.dll;wininet.dll;lsasrv.dll;lsass.exe;wow6432;sspicli.dll;msv1_0.dll;ksecdd.sys;mrxsmb.sys;mrxsmb10.sys;mrxsmb20.sys;windows.data.pdf.dll 0001-01-01T00:00:00 Yes Security Update 3185614 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3185614 3176493 10486-10788 mshtml.dll;ntkrnlmp.exe;ntkrpamp.exe;csrsrv.dll;pnidui.dll;win32kbase.sys;win32kfull.sys;ntdsai.dll;inputservice.dll;securekernel.exe;srv.sys;srv2.sys;srvnet.sys;winresume.exe;winresume.efi;ieframe.dll;emodel.dll;chakra.dll;ieinstal.exe;edgehtml.dll;mobile;only;vbscript.dll;oleaut32.dll;wininet.dll;lsasrv.dll;lsass.exe;wow6432;sspicli.dll;msv1_0.dll;ksecdd.sys;mrxsmb.sys;mrxsmb10.sys;mrxsmb20.sys;windows.data.pdf.dll 0001-01-01T00:00:00 Yes Security Update 3189866 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3189866 3176495 10486-10852 10486-10853 ntkrnlmp.exe;ntkrpamp.exe;pnidui.dll;win32kbase.sys;win32kfull.sys;ntdsai.dll;inputservice.dll;srv.sys;mshtml.dll;windowscodecs.dll;chakra.dll;ieinstal.exe;edgehtml.dll;vbscript.dll;oleaut32.dll;wininet.dll;lsasrv.dll;lsass.exe;wow6432;sspicli.dll;msv1_0.dll;ksecdd.sys;mrxsmb.sys;mrxsmb10.sys;mrxsmb20.sys;ieframe.dll;windows.data.pdf.dll 0001-01-01T00:00:00 Yes Security Update Eduardo Braun Prado, working with <a href="http://www.zerodayinitiative">Trend Micro's Zero Day Initiative (ZDI) </a> 1.0 2016-09-13T07:00:00 <p>Information published.</p>