# KB3185319: September 2016 security update

KB3185319, released September 13, 2016, fixes 9 CVEs across 12 products. One of them is being exploited (CVE-2016-3351); 1 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

- Web page: https://patchblox.com/security/fix/microsoft/kb3185319
- Platform: Microsoft
- Released: Sep 13, 2016
- Priority: Patch now (Closes CVE-2016-3351, exploited (CISA KEV, ransomware))
- CVEs: 9, exploited: 1, on CISA KEV: 1
- Vendor advisory: https://support.microsoft.com/help/3185319

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [Internet Explorer 10 on Windows Server 2012](https://patchblox.com/security/data/product/microsoft/internet-explorer-10-on-windows-server-2012.md) |  |  |
| [Internet Explorer 11 on Windows 7 for 32-bit Systems Service Pack 1](https://patchblox.com/security/data/product/microsoft/internet-explorer-11-on-windows-7-for-32-bit-systems-service-pack-1.md) |  |  |
| [Internet Explorer 11 on Windows 7 for x64-based Systems Service Pack 1](https://patchblox.com/security/data/product/microsoft/internet-explorer-11-on-windows-7-for-x64-based-systems-service-pack-1.md) |  |  |
| [Internet Explorer 11 on Windows 8.1 for 32-bit systems](https://patchblox.com/security/data/product/microsoft/internet-explorer-11-on-windows-8.1-for-32-bit-systems.md) |  |  |
| [Internet Explorer 11 on Windows 8.1 for x64-based systems](https://patchblox.com/security/data/product/microsoft/internet-explorer-11-on-windows-8.1-for-x64-based-systems.md) |  |  |
| [Internet Explorer 11 on Windows RT 8.1](https://patchblox.com/security/data/product/microsoft/internet-explorer-11-on-windows-rt-8.1.md) |  |  |
| [Internet Explorer 11 on Windows Server 2008 R2 for x64-based Systems Service Pack 1](https://patchblox.com/security/data/product/microsoft/internet-explorer-11-on-windows-server-2008-r2-for-x64-based-systems-service-pack-1.md) |  |  |
| [Internet Explorer 11 on Windows Server 2012 R2](https://patchblox.com/security/data/product/microsoft/internet-explorer-11-on-windows-server-2012-r2.md) |  |  |
| [Internet Explorer 9 on Windows Server 2008 for 32-bit Systems Service Pack 2](https://patchblox.com/security/data/product/microsoft/internet-explorer-9-on-windows-server-2008-for-32-bit-systems-service-pack-2.md) |  |  |
| [Internet Explorer 9 on Windows Server 2008 for x64-based Systems Service Pack 2](https://patchblox.com/security/data/product/microsoft/internet-explorer-9-on-windows-server-2008-for-x64-based-systems-service-pack-2.md) |  |  |
| [Internet Explorer 9 on Windows Vista Service Pack 2](https://patchblox.com/security/data/product/microsoft/internet-explorer-9-on-windows-vista-service-pack-2.md) |  |  |
| [Internet Explorer 9 on Windows Vista x64 Edition Service Pack 2](https://patchblox.com/security/data/product/microsoft/internet-explorer-9-on-windows-vista-x64-edition-service-pack-2.md) |  |  |

## CVEs this fix closes

| CVE | Priority | Component | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2016-3351](https://patchblox.com/security/data/cve/CVE-2016-3351.md) | Patch now | Microsoft Browsers | n/a | 0.2648 | CISA KEV, Ransomware |
| [CVE-2016-3375](https://patchblox.com/security/data/cve/CVE-2016-3375.md) | Urgent | Internet Explorer | 7.5 | 0.1702 | More likely |
| [CVE-2016-3295](https://patchblox.com/security/data/cve/CVE-2016-3295.md) | Urgent | Microsoft Browsers | n/a | 0.1499 | More likely |
| [CVE-2016-3292](https://patchblox.com/security/data/cve/CVE-2016-3292.md) | Urgent | Internet Explorer | 8.8 | 0.0711 | More likely |
| [CVE-2016-3247](https://patchblox.com/security/data/cve/CVE-2016-3247.md) | Routine | Microsoft Browsers | 4.2 | 0.7148 |  |
| [CVE-2016-3324](https://patchblox.com/security/data/cve/CVE-2016-3324.md) | Routine | Internet Explorer | 6.0 | 0.2833 |  |
| [CVE-2016-3297](https://patchblox.com/security/data/cve/CVE-2016-3297.md) | Routine | Microsoft Browsers | 4.2 | 0.2257 |  |
| [CVE-2016-3291](https://patchblox.com/security/data/cve/CVE-2016-3291.md) | Routine | Microsoft Browsers | 4.3 | 0.1303 |  |
| [CVE-2016-3353](https://patchblox.com/security/data/cve/CVE-2016-3353.md) | Routine | Internet Explorer | 4.6 | 0.1177 |  |

---

Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo