Microsoft · Security update · September 13, 2016
KB3185319: September 2016 security update
KB3185319, released September 13, 2016, fixes 9 CVEs across 12 products. One of them is being exploited (CVE-2016-3351); 1 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.
Patch now1 on CISA KEVKnown ransomware useUnsupported product
CVEs closed
9
1 rated Critical
Exploited
1
CVE-2016-3351
Exploitation more likely
3
Vendor assessment
Highest EPSS
0.7148
99th percentile
Priority of the 9 CVEs
Patch now 1
Urgent 3
High 0
Routine 5
Applies to
CVEs this fix closes
| Priority | CVE | Component | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Patch now | CVE-2016-3351 | Microsoft Browsers | Information Disclosure | n/a | 0.2648 | KEVRansomwareExploited |
| Urgent | CVE-2016-3375 | Internet Explorer | Remote Code Execution | 7.5 | 0.1702 | More likely |
| Urgent | CVE-2016-3295 | Microsoft Browsers | Remote Code Execution | n/a | 0.1499 | More likely |
| Urgent | CVE-2016-3292 | Internet Explorer | Elevation of Privilege | 8.8 | 0.0711 | More likely |
| Routine | CVE-2016-3247 | Microsoft Browsers | Remote Code Execution | 4.2 | 0.7148 | Exploitation Less Likely |
| Routine | CVE-2016-3324 | Internet Explorer | Remote Code Execution | 6.0 | 0.2833 | Exploitation Less Likely |
| Routine | CVE-2016-3297 | Microsoft Browsers | Remote Code Execution | 4.2 | 0.2257 | Exploitation Less Likely |
| Routine | CVE-2016-3291 | Microsoft Browsers | Information Disclosure | 4.3 | 0.1303 | Exploitation Unlikely |
| Routine | CVE-2016-3353 | Internet Explorer | Security Feature Bypass | 4.6 | 0.1177 | Exploitation Unlikely |
Showing 1 to 9 of 9
1