{
  "fix": "KB3156387",
  "url": "https://patchblox.com/security/fix/microsoft/kb3156387",
  "summary": "KB3156387, released May 10, 2016, fixes 26 CVEs across 10 products. One of them is being exploited (CVE-2016-0189); 1 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.",
  "platform": "microsoft",
  "type": "kb",
  "releaseKind": "Security",
  "title": "May 2016 cumulative update for Windows 10 1507",
  "released": "2016-05-10T00:00:00Z",
  "priority": "Patch now",
  "priorityTier": 1,
  "priorityReason": "Closes CVE-2016-0189, exploited (CISA KEV, ransomware)",
  "supported": false,
  "cveCount": 26,
  "exploitedCveCount": 1,
  "kevCveCount": 1,
  "ransomwareCveCount": 1,
  "maxEpss": 0.94062,
  "vendorAdvisory": "https://support.microsoft.com/help/3156387",
  "appliesTo": [
    {
      "product": "Internet Explorer 11 on Windows 10 for 32-bit Systems",
      "productUrl": "https://patchblox.com/security/product/microsoft/internet-explorer-11-on-windows-10-for-32-bit-systems",
      "fixedVersion": "10240.16854",
      "supported": false
    },
    {
      "product": "Internet Explorer 11 on Windows 10 for x64-based Systems",
      "productUrl": "https://patchblox.com/security/product/microsoft/internet-explorer-11-on-windows-10-for-x64-based-systems",
      "fixedVersion": "10240.16854",
      "supported": false
    },
    {
      "product": "Microsoft .NET Framework 3.5 on Windows 10 for 32-bit Systems",
      "productUrl": "https://patchblox.com/security/product/microsoft/microsoft-.net-framework-3.5-on-windows-10-for-32-bit-systems",
      "fixedVersion": "10240.16854",
      "supported": false
    },
    {
      "product": "Microsoft .NET Framework 3.5 on Windows 10 for x64-based Systems",
      "productUrl": "https://patchblox.com/security/product/microsoft/microsoft-.net-framework-3.5-on-windows-10-for-x64-based-systems",
      "fixedVersion": "10240.16854",
      "supported": false
    },
    {
      "product": "Microsoft .NET Framework 4.6 on Windows 10 for 32-bit Systems",
      "productUrl": "https://patchblox.com/security/product/microsoft/microsoft-.net-framework-4.6-on-windows-10-for-32-bit-systems",
      "fixedVersion": "10240.16854",
      "supported": false
    },
    {
      "product": "Microsoft .NET Framework 4.6 on Windows 10 for x64-based Systems",
      "productUrl": "https://patchblox.com/security/product/microsoft/microsoft-.net-framework-4.6-on-windows-10-for-x64-based-systems",
      "fixedVersion": "10240.16854",
      "supported": false
    },
    {
      "product": "Microsoft Edge (EdgeHTML-based) on Windows 10 for 32-bit Systems",
      "productUrl": "https://patchblox.com/security/product/microsoft/microsoft-edge-edgehtml-based-on-windows-10-for-32-bit-systems",
      "fixedVersion": "10240.16854",
      "supported": false
    },
    {
      "product": "Microsoft Edge (EdgeHTML-based) on Windows 10 for x64-based Systems",
      "productUrl": "https://patchblox.com/security/product/microsoft/microsoft-edge-edgehtml-based-on-windows-10-for-x64-based-systems",
      "fixedVersion": "10240.16854",
      "supported": false
    },
    {
      "product": "Windows 10 for 32-bit Systems",
      "productUrl": "https://patchblox.com/security/product/microsoft/windows-10-for-32-bit-systems",
      "fixedVersion": "10240.16854",
      "supported": false
    },
    {
      "product": "Windows 10 for x64-based Systems",
      "productUrl": "https://patchblox.com/security/product/microsoft/windows-10-for-x64-based-systems",
      "fixedVersion": "10240.16854",
      "supported": false
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2016-0189",
      "url": "https://patchblox.com/security/cve/CVE-2016-0189",
      "title": "Scripting Engine Memory Corruption Vulnerability",
      "component": "Internet Explorer",
      "impact": "Remote Code Execution",
      "priority": "Patch now",
      "severity": "Critical",
      "epss": 0.94062,
      "kev": true,
      "ransomware": true,
      "exploited": true,
      "disclosed": false
    },
    {
      "cveId": "CVE-2016-0170",
      "url": "https://patchblox.com/security/cve/CVE-2016-0170",
      "title": "Windows Graphics Component Remote Code Execution Vulnerability",
      "component": "Microsoft Graphics Component",
      "impact": "Remote Code Execution",
      "priority": "Urgent",
      "severity": "Critical",
      "epss": 0.48585,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2016-0169",
      "url": "https://patchblox.com/security/cve/CVE-2016-0169",
      "title": "Windows Graphics Component Information Disclosure Vulnerability",
      "component": "Microsoft Graphics Component",
      "impact": "Information Disclosure",
      "priority": "Urgent",
      "severity": "Important",
      "epss": 0.43248,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2016-0191",
      "url": "https://patchblox.com/security/cve/CVE-2016-0191",
      "title": "Scripting Engine Memory Corruption Vulnerability",
      "component": "Microsoft Edge",
      "impact": "Remote Code Execution",
      "priority": "Urgent",
      "severity": "Critical",
      "epss": 0.28261,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2016-0179",
      "url": "https://patchblox.com/security/cve/CVE-2016-0179",
      "title": "Windows Shell Remote Code Execution Vulnerability",
      "component": "Windows Shell",
      "impact": "Remote Code Execution",
      "priority": "Urgent",
      "severity": "Critical",
      "epss": 0.24194,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2016-0187",
      "url": "https://patchblox.com/security/cve/CVE-2016-0187",
      "title": "Scripting Engine Memory Corruption Vulnerability",
      "component": "Internet Explorer",
      "impact": "Remote Code Execution",
      "priority": "Urgent",
      "severity": "Moderate",
      "epss": 0.21591,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2016-0193",
      "url": "https://patchblox.com/security/cve/CVE-2016-0193",
      "title": "Scripting Engine Memory Corruption Vulnerability",
      "component": "Microsoft Edge",
      "impact": "Remote Code Execution",
      "priority": "Urgent",
      "severity": "Critical",
      "epss": 0.20081,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2016-0182",
      "url": "https://patchblox.com/security/cve/CVE-2016-0182",
      "title": "Windows Journal Memory Corruption Vulnerability",
      "component": "Windows Journal",
      "impact": "Remote Code Execution",
      "priority": "Urgent",
      "severity": "Critical",
      "epss": 0.1971,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2016-0186",
      "url": "https://patchblox.com/security/cve/CVE-2016-0186",
      "title": "Scripting Engine Memory Corruption Vulnerability",
      "component": "Microsoft Edge",
      "impact": "Remote Code Execution",
      "priority": "Urgent",
      "severity": "Critical",
      "epss": 0.19448,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2016-0184",
      "url": "https://patchblox.com/security/cve/CVE-2016-0184",
      "title": "Direct3D Use After Free RCE Vulnerability",
      "component": "Microsoft Graphics Component",
      "impact": "Remote Code Execution",
      "priority": "Urgent",
      "severity": "Critical",
      "epss": 0.18765,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2016-0195",
      "url": "https://patchblox.com/security/cve/CVE-2016-0195",
      "title": "Windows Imaging Component Memory Corruption Vulnerability",
      "component": "Microsoft Graphics Component",
      "impact": "Remote Code Execution",
      "priority": "Urgent",
      "severity": "Critical",
      "epss": 0.18423,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2016-0171",
      "url": "https://patchblox.com/security/cve/CVE-2016-0171",
      "title": "Win32k Elevation of Privilege Vulnerability",
      "component": "Windows Kernel-Mode Drivers",
      "impact": "Elevation of Privilege",
      "priority": "Urgent",
      "severity": "Important",
      "epss": 0.03799,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2016-0173",
      "url": "https://patchblox.com/security/cve/CVE-2016-0173",
      "title": "Win32k Elevation of Privilege Vulnerability",
      "component": "Windows Kernel-Mode Drivers",
      "impact": "Elevation of Privilege",
      "priority": "Urgent",
      "severity": "Important",
      "epss": 0.03663,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2016-0174",
      "url": "https://patchblox.com/security/cve/CVE-2016-0174",
      "title": "Win32k Elevation of Privilege Vulnerability",
      "component": "Windows Kernel-Mode Drivers",
      "impact": "Elevation of Privilege",
      "priority": "Urgent",
      "severity": "Important",
      "epss": 0.02485,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2016-0176",
      "url": "https://patchblox.com/security/cve/CVE-2016-0176",
      "title": "DirectX Elevation of Privilege Vulnerability",
      "component": "Windows Kernel-Mode Drivers",
      "impact": "Elevation of Privilege",
      "priority": "Urgent",
      "severity": "Important",
      "epss": 0.02031,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2016-0196",
      "url": "https://patchblox.com/security/cve/CVE-2016-0196",
      "title": "Win32k Elevation of Privilege Vulnerability",
      "component": "Windows Kernel-Mode Drivers",
      "impact": "Elevation of Privilege",
      "priority": "Urgent",
      "severity": "Important",
      "epss": 0.02031,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2016-0168",
      "url": "https://patchblox.com/security/cve/CVE-2016-0168",
      "title": "Windows Graphics Component Information Disclosure Vulnerability",
      "component": "Microsoft Graphics Component",
      "impact": "Information Disclosure",
      "priority": "High",
      "severity": "Important",
      "epss": 0.43248,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2016-0188",
      "url": "https://patchblox.com/security/cve/CVE-2016-0188",
      "title": "Internet Explorer Security Feature Bypass Vulnerability",
      "component": "Internet Explorer",
      "impact": "Security Feature Bypass",
      "priority": "High",
      "severity": "Important",
      "epss": 0.18331,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": true
    },
    {
      "cveId": "CVE-2016-0178",
      "url": "https://patchblox.com/security/cve/CVE-2016-0178",
      "title": "RPC Network Data Representation Engine Remote Code Execution Vulnerability",
      "component": "Microsoft RPC",
      "impact": "Remote Code Execution",
      "priority": "High",
      "severity": "Important",
      "epss": 0.16706,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2016-0149",
      "url": "https://patchblox.com/security/cve/CVE-2016-0149",
      "title": "TLS/SSL Information Disclosure Vulnerability",
      "component": ".NET Framework",
      "impact": "Information Disclosure",
      "priority": "High",
      "severity": "Important",
      "epss": 0.08389,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": true
    },
    {
      "cveId": "CVE-2016-0175",
      "url": "https://patchblox.com/security/cve/CVE-2016-0175",
      "title": "Win32k Information Disclosure Vulnerability",
      "component": "Windows Kernel-Mode Drivers",
      "impact": "Information Disclosure",
      "priority": "High",
      "severity": "Important",
      "epss": 0.03821,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2016-0181",
      "url": "https://patchblox.com/security/cve/CVE-2016-0181",
      "title": "Hypervisor Code Integrity Security Feature Bypass",
      "component": "Virtual Secure Mode",
      "impact": "Security Feature Bypass",
      "priority": "High",
      "severity": "Important",
      "epss": 0.01516,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2016-0197",
      "url": "https://patchblox.com/security/cve/CVE-2016-0197",
      "title": "Microsoft DirectX Graphics Kernel Subsystem Elevation of Privilege Vulnerability",
      "component": "Windows Kernel-Mode Drivers",
      "impact": "Elevation of Privilege",
      "priority": "High",
      "severity": "Important",
      "epss": 0.01497,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2016-0180",
      "url": "https://patchblox.com/security/cve/CVE-2016-0180",
      "title": "Windows Kernel Elevation of Privilege Vulnerability",
      "component": "Windows Kernel",
      "impact": "Elevation of Privilege",
      "priority": "High",
      "severity": "Important",
      "epss": 0.01486,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2016-0192",
      "url": "https://patchblox.com/security/cve/CVE-2016-0192",
      "title": "Microsoft Browser Memory Corruption Vulnerability",
      "component": "Microsoft Browsers",
      "impact": "Remote Code Execution",
      "priority": "Routine",
      "severity": "Moderate",
      "epss": 0.16885,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2016-0194",
      "url": "https://patchblox.com/security/cve/CVE-2016-0194",
      "title": "Internet Explorer Information Disclosure Vulnerability",
      "component": "Internet Explorer",
      "impact": "Information Disclosure",
      "priority": "Routine",
      "severity": "Low",
      "epss": 0.15511,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-07T06:34:28Z"
}