# KB3128022: December 2016 security update

KB3128022, released December 13, 2016, fixes 4 CVEs in Microsoft Office Compatibility Pack Service Pack 3. One of them is being exploited (CVE-2016-7262); 1 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

- Web page: https://patchblox.com/security/fix/microsoft/kb3128022
- Platform: Microsoft
- Released: Dec 13, 2016
- Priority: Patch now (Closes CVE-2016-7262, exploited (CISA KEV))
- CVEs: 4, exploited: 1, on CISA KEV: 1
- Vendor advisory: https://support.microsoft.com/help/3128022

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [Microsoft Office Compatibility Pack Service Pack 3](https://patchblox.com/security/data/product/microsoft/microsoft-office-compatibility-pack-service-pack-3.md) |  |  |

## CVEs this fix closes

| CVE | Priority | Component | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2016-7262](https://patchblox.com/security/data/cve/CVE-2016-7262.md) | Patch now | Microsoft Office | n/a | 0.5884 | CISA KEV |
| [CVE-2016-7266](https://patchblox.com/security/data/cve/CVE-2016-7266.md) | Urgent | Microsoft Office | n/a | 0.2279 | More likely |
| [CVE-2016-7264](https://patchblox.com/security/data/cve/CVE-2016-7264.md) | High | Microsoft Office | n/a | 0.2321 |  |
| [CVE-2016-7265](https://patchblox.com/security/data/cve/CVE-2016-7265.md) | High | Microsoft Office | n/a | 0.2166 |  |

---

Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo