# KB3147461: April 2016 cumulative update for Windows 10 1507 KB3147461, released April 12, 2016, fixes 18 CVEs across 8 products. 3 of them are being exploited (CVE-2016-0151); 3 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported. - Web page: https://patchblox.com/security/fix/microsoft/kb3147461 - Platform: Microsoft - Released: Apr 12, 2016 - Priority: Patch now (Closes CVE-2016-0151, exploited (CISA KEV, ransomware)) - CVEs: 18, exploited: 3, on CISA KEV: 3 - Vendor advisory: https://support.microsoft.com/help/3147461 ## Applies to | Product | Release | Fixed in | |---|---|---| | [Internet Explorer 11 on Windows 10 for 32-bit Systems](https://patchblox.com/security/data/product/microsoft/internet-explorer-11-on-windows-10-for-32-bit-systems.md) | | | | [Internet Explorer 11 on Windows 10 for x64-based Systems](https://patchblox.com/security/data/product/microsoft/internet-explorer-11-on-windows-10-for-x64-based-systems.md) | | | | [Microsoft .NET Framework 3.5 on Windows 10 for 32-bit Systems](https://patchblox.com/security/data/product/microsoft/microsoft-.net-framework-3.5-on-windows-10-for-32-bit-systems.md) | | | | [Microsoft .NET Framework 3.5 on Windows 10 for x64-based Systems](https://patchblox.com/security/data/product/microsoft/microsoft-.net-framework-3.5-on-windows-10-for-x64-based-systems.md) | | | | [Microsoft Edge (EdgeHTML-based) on Windows 10 for 32-bit Systems](https://patchblox.com/security/data/product/microsoft/microsoft-edge-edgehtml-based-on-windows-10-for-32-bit-systems.md) | | | | [Microsoft Edge (EdgeHTML-based) on Windows 10 for x64-based Systems](https://patchblox.com/security/data/product/microsoft/microsoft-edge-edgehtml-based-on-windows-10-for-x64-based-systems.md) | | | | [Windows 10 for 32-bit Systems](https://patchblox.com/security/data/product/microsoft/windows-10-for-32-bit-systems.md) | | | | [Windows 10 for x64-based Systems](https://patchblox.com/security/data/product/microsoft/windows-10-for-x64-based-systems.md) | | | ## CVEs this fix closes | CVE | Priority | Component | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2016-0151](https://patchblox.com/security/data/cve/CVE-2016-0151.md) | Patch now | CSRSS | n/a | 0.6282 | CISA KEV, Ransomware | | [CVE-2016-0165](https://patchblox.com/security/data/cve/CVE-2016-0165.md) | Patch now | Microsoft Graphics Component | 7.8 | 0.1368 | CISA KEV | | [CVE-2016-0167](https://patchblox.com/security/data/cve/CVE-2016-0167.md) | Patch now | Microsoft Graphics Component | n/a | 0.0566 | CISA KEV, Ransomware | | [CVE-2016-0145](https://patchblox.com/security/data/cve/CVE-2016-0145.md) | Urgent | Microsoft Graphics Component | n/a | 0.4084 | | | [CVE-2016-0156](https://patchblox.com/security/data/cve/CVE-2016-0156.md) | Urgent | Microsoft Edge | n/a | 0.1872 | More likely | | [CVE-2016-0166](https://patchblox.com/security/data/cve/CVE-2016-0166.md) | Urgent | Internet Explorer | n/a | 0.1551 | More likely | | [CVE-2016-0157](https://patchblox.com/security/data/cve/CVE-2016-0157.md) | Urgent | Microsoft Edge | n/a | 0.1539 | More likely | | [CVE-2016-0158](https://patchblox.com/security/data/cve/CVE-2016-0158.md) | Urgent | Microsoft Edge | n/a | 0.1472 | More likely | | [CVE-2016-0154](https://patchblox.com/security/data/cve/CVE-2016-0154.md) | Urgent | Microsoft Browsers | n/a | 0.1388 | More likely | | [CVE-2016-0143](https://patchblox.com/security/data/cve/CVE-2016-0143.md) | Urgent | Microsoft Graphics Component | n/a | 0.0334 | More likely | | [CVE-2016-0150](https://patchblox.com/security/data/cve/CVE-2016-0150.md) | High | HTTP.sys | n/a | 0.2801 | | | [CVE-2016-0128](https://patchblox.com/security/data/cve/CVE-2016-0128.md) | High | SAM and LSAD Remote Protocols | n/a | 0.2080 | Disclosed | | [CVE-2016-0160](https://patchblox.com/security/data/cve/CVE-2016-0160.md) | High | Internet Explorer | n/a | 0.1294 | Disclosed | | [CVE-2016-0088](https://patchblox.com/security/data/cve/CVE-2016-0088.md) | High | Windows Hyper-V | n/a | 0.0735 | | | [CVE-2016-0089](https://patchblox.com/security/data/cve/CVE-2016-0089.md) | High | Windows Hyper-V | n/a | 0.0333 | | | [CVE-2016-0090](https://patchblox.com/security/data/cve/CVE-2016-0090.md) | High | Windows Hyper-V | n/a | 0.0296 | | | [CVE-2016-0135](https://patchblox.com/security/data/cve/CVE-2016-0135.md) | High | Secondary Logon | n/a | 0.0154 | Disclosed | | [CVE-2016-0161](https://patchblox.com/security/data/cve/CVE-2016-0161.md) | Routine | Microsoft Edge | n/a | 0.6809 | | --- Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo