Microsoft · Security update · October 11, 2016

KB3118394: October 2016 security update

KB3118394, released October 11, 2016, fixes 5 CVEs in Microsoft Office Word Viewer. None of them is reported as exploited. Patch Radar priority: Urgent. The product is no longer supported.

UrgentUnsupported product
CVEs closed
5
1 rated Critical
Exploited
0
None reported
Exploitation more likely
1
Vendor assessment
Highest EPSS
0.5365
99th percentile

Priority of the 5 CVEs

Patch now 0 Urgent 1 High 4 Routine 0

Applies to

Product
Microsoft Office Word Viewer

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Urgent CVE-2016-3396 Microsoft Graphics Component Remote Code Execution n/a 0.2438 More likely
High CVE-2016-3209 Microsoft Graphics Component Information Disclosure n/a 0.5365 Exploitation Less Likely
High CVE-2016-3262 Microsoft Graphics Component Information Disclosure n/a 0.3198 Exploitation Less Likely
High CVE-2016-3263 Microsoft Graphics Component Information Disclosure n/a 0.3198 N/A
High CVE-2016-7182 Microsoft Graphics Component Elevation of Privilege n/a 0.3032 Exploitation Less Likely
Showing 1 to 5 of 5 1