Microsoft · Security update · May 10, 2016

KB3156387: May 2016 cumulative update for Windows 10 1507

KB3156387, released May 10, 2016, fixes 26 CVEs across 10 products. One of them is being exploited (CVE-2016-0189); 1 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now1 on CISA KEVKnown ransomware use2 publicly disclosedUnsupported product
CVEs closed
26
9 rated Critical
Exploited
1
CVE-2016-0189
Exploitation more likely
10
Vendor assessment
Highest EPSS
0.9406
99th percentile

Priority of the 26 CVEs

Patch now 1 Urgent 15 High 8 Routine 2

Applies to

ProductBuild after install
Internet Explorer 11 on Windows 10 for 32-bit Systems10240.16854
Internet Explorer 11 on Windows 10 for x64-based Systems10240.16854
Microsoft .NET Framework 3.5 on Windows 10 for 32-bit Systems10240.16854
Microsoft .NET Framework 3.5 on Windows 10 for x64-based Systems10240.16854
Microsoft .NET Framework 4.6 on Windows 10 for 32-bit Systems10240.16854
Microsoft .NET Framework 4.6 on Windows 10 for x64-based Systems10240.16854
Microsoft Edge (EdgeHTML-based) on Windows 10 for 32-bit Systems10240.16854
Microsoft Edge (EdgeHTML-based) on Windows 10 for x64-based Systems10240.16854
Windows 10 for 32-bit Systems10240.16854
Windows 10 for x64-based Systems10240.16854

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2016-0189 Internet Explorer Remote Code Execution n/a 0.9406 KEVRansomwareExploited
Urgent CVE-2016-0170 Microsoft Graphics Component Remote Code Execution n/a 0.4859 Exploitation Less Likely
Urgent CVE-2016-0169 Microsoft Graphics Component Information Disclosure n/a 0.4325 More likely
Urgent CVE-2016-0191 Microsoft Edge Remote Code Execution n/a 0.2826 More likely
Urgent CVE-2016-0179 Windows Shell Remote Code Execution n/a 0.2419 Exploitation Less Likely
Urgent CVE-2016-0187 Internet Explorer Remote Code Execution n/a 0.2159 More likely
Urgent CVE-2016-0193 Microsoft Edge Remote Code Execution n/a 0.2008 More likely
Urgent CVE-2016-0182 Windows Journal Remote Code Execution n/a 0.1971 Exploitation Unlikely
Urgent CVE-2016-0186 Microsoft Edge Remote Code Execution n/a 0.1945 None reported
Urgent CVE-2016-0184 Microsoft Graphics Component Remote Code Execution n/a 0.1877 More likely
Urgent CVE-2016-0195 Microsoft Graphics Component Remote Code Execution n/a 0.1842 Exploitation Less Likely
Urgent CVE-2016-0171 Windows Kernel-Mode Drivers Elevation of Privilege n/a 0.0380 More likely
Urgent CVE-2016-0173 Windows Kernel-Mode Drivers Elevation of Privilege n/a 0.0366 More likely
Urgent CVE-2016-0174 Windows Kernel-Mode Drivers Elevation of Privilege n/a 0.0249 More likely
Urgent CVE-2016-0176 Windows Kernel-Mode Drivers Elevation of Privilege n/a 0.0203 More likely
Urgent CVE-2016-0196 Windows Kernel-Mode Drivers Elevation of Privilege n/a 0.0203 More likely
High CVE-2016-0168 Microsoft Graphics Component Information Disclosure n/a 0.4325 Exploitation Less Likely
High CVE-2016-0188 Internet Explorer Security Feature Bypass n/a 0.1833 DisclosedExploitation Unlikely
High CVE-2016-0178 Microsoft RPC Remote Code Execution n/a 0.1671 Exploitation Less Likely
High CVE-2016-0149 .NET Framework Information Disclosure n/a 0.0839 DisclosedExploitation Unlikely
High CVE-2016-0175 Windows Kernel-Mode Drivers Information Disclosure n/a 0.0382 Exploitation Less Likely
High CVE-2016-0181 Virtual Secure Mode Security Feature Bypass n/a 0.0152 Exploitation Unlikely
High CVE-2016-0197 Windows Kernel-Mode Drivers Elevation of Privilege n/a 0.0150 Exploitation Unlikely
High CVE-2016-0180 Windows Kernel Elevation of Privilege n/a 0.0149 Exploitation Less Likely
Routine CVE-2016-0192 Microsoft Browsers Remote Code Execution n/a 0.1689 Exploitation Less Likely
Showing 1 to 25 of 26 1Next