Microsoft · Security update · May 10, 2016

KB3155413: May 2016 security update

KB3155413, released May 10, 2016, fixes 2 CVEs in Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation). One of them is being exploited (CVE-2016-0189); 1 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now1 on CISA KEVKnown ransomware useUnsupported product
CVEs closed
2
1 rated Critical
Exploited
1
CVE-2016-0189
Exploitation more likely
1
Vendor assessment
Highest EPSS
0.9406
99th percentile

Priority of the 2 CVEs

Patch now 1 Urgent 1 High 0 Routine 0

Applies to

Product
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2016-0189 Internet Explorer Remote Code Execution n/a 0.9406 KEVRansomwareExploited
Urgent CVE-2016-0187 Internet Explorer Remote Code Execution n/a 0.2159 More likely
Showing 1 to 2 of 2 1