Microsoft · Security update · July 12, 2016

KB3172985: July 2016 cumulative update for Windows 10 1511

KB3172985, released July 12, 2016, fixes 31 CVEs across 10 products. None of them is reported as exploited. Patch Radar priority: Urgent. The product is no longer supported.

Urgent2 publicly disclosedUnsupported product
CVEs closed
31
6 rated Critical
Exploited
0
None reported
Exploitation more likely
14
Vendor assessment
Highest EPSS
0.5807
99th percentile

Priority of the 31 CVEs

Patch now 0 Urgent 16 High 6 Routine 9

Applies to

ProductBuild after install
Internet Explorer 11 on Windows 10 Version 1511 for 32-bit Systems10586.494
Internet Explorer 11 on Windows 10 Version 1511 for x64-based Systems10586.494
Microsoft .NET Framework 3.5 on Windows 10 Version 1511 for 32-bit Systems10586.494
Microsoft .NET Framework 3.5 on Windows 10 Version 1511 for x64-based Systems10586.494
Microsoft .NET Framework 4.6.1 on Windows 10 Version 1511 for 32-bit Systems10586.494
Microsoft .NET Framework 4.6.1 on Windows 10 Version 1511 for x64-based Systems10586.494
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1511 for 32-bit Systems10586.494
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1511 for x64-based Systems10586.494
Windows 10 Version 1511 for 32-bit Systems10586.494
Windows 10 Version 1511 for x64-based Systems10586.494

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Urgent CVE-2016-3259 Microsoft Browsers Remote Code Execution 6.0 0.3479 More likely
Urgent CVE-2016-3260 Microsoft Browsers Remote Code Execution 7.1 0.2384 More likely
Urgent CVE-2016-3248 Microsoft Browsers Remote Code Execution 6.0 0.2374 More likely
Urgent CVE-2016-3269 Microsoft Edge Remote Code Execution n/a 0.2145 None reported
Urgent CVE-2016-3265 Microsoft Edge Remote Code Execution n/a 0.2073 More likely
Urgent CVE-2016-3204 Internet Explorer Remote Code Execution 7.1 0.1893 None reported
Urgent CVE-2016-3264 Microsoft Browsers Remote Code Execution n/a 0.1451 More likely
Urgent CVE-2016-3246 Microsoft Edge Remote Code Execution 4.2 0.1412 More likely
Urgent CVE-2016-3242 Internet Explorer Remote Code Execution 6.0 0.1385 More likely
Urgent CVE-2016-3241 Internet Explorer Remote Code Execution 6.0 0.1347 More likely
Urgent CVE-2016-3243 Internet Explorer Remote Code Execution 6.0 0.1347 More likely
Urgent CVE-2016-3252 Windows Kernel-Mode Drivers Elevation of Privilege 7.8 0.0383 More likely
Urgent CVE-2016-3249 Windows Kernel-Mode Drivers Elevation of Privilege 7.8 0.0253 More likely
Urgent CVE-2016-3286 Windows Kernel-Mode Drivers Elevation of Privilege 7.8 0.0253 More likely
Urgent CVE-2016-3287 Secure Boot Security Feature Bypass 6.2 0.0149 DisclosedMore likely
Urgent CVE-2016-3254 Windows Kernel-Mode Drivers Elevation of Privilege 7.8 0.0143 More likely
High CVE-2016-3255 .NET Framework Information Disclosure n/a 0.2467 Exploitation Unlikely
High CVE-2016-3271 Microsoft Edge Information Disclosure n/a 0.2087 Exploitation Less Likely
High CVE-2016-3261 Internet Explorer Information Disclosure n/a 0.1508 Exploitation Less Likely
High CVE-2016-3276 Microsoft Browsers Spoofing n/a 0.0817 Exploitation Less Likely
High CVE-2016-3250 Windows Kernel-Mode Drivers Elevation of Privilege 7.8 0.0253 Exploitation Unlikely
High CVE-2016-3239 Windows Print Spooler Components Elevation of Privilege 7.8 0.0138 Exploitation Less Likely
Routine CVE-2016-3251 Windows Kernel-Mode Drivers Information Disclosure 3.3 0.5807 Exploitation Less Likely
Routine CVE-2016-3272 Windows Kernel Information Disclosure 3.1 0.4328 DisclosedExploitation Less Likely
Routine CVE-2016-3277 Microsoft Browsers Information Disclosure 4.3 0.3220 Exploitation Less Likely
Showing 1 to 25 of 31 1Next