Microsoft · Security update · October 11, 2016

KB3185332: October 2016 security update

KB3185332, released October 11, 2016, fixes 25 CVEs across 3 products. 2 of them are being exploited (CVE-2016-3393); 2 on CISA KEV. Patch Radar priority: Patch now.

Patch now2 on CISA KEV
CVEs closed
25
2 rated Critical
Exploited
2
CVE-2016-3393
Exploitation more likely
11
Vendor assessment
Highest EPSS
0.6847
99th percentile

Priority of the 25 CVEs

Patch now 2 Urgent 11 High 10 Routine 2

Applies to

Product
Internet Explorer 10 on Windows Server 2012
Windows Server 2012
Windows Server 2012 (Server Core installation)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2016-3393 Microsoft Graphics Component Remote Code Execution 8.8 0.6847 KEVExploited
Patch now CVE-2016-3298 Internet Explorer Information Disclosure n/a 0.3333 KEVExploited
Urgent CVE-2016-3388 Microsoft Browsers Elevation of Privilege n/a 0.2759 More likely
Urgent CVE-2016-3396 Microsoft Graphics Component Remote Code Execution n/a 0.2438 More likely
Urgent CVE-2016-3385 Internet Explorer Remote Code Execution n/a 0.2303 More likely
Urgent CVE-2016-3387 Microsoft Browsers Elevation of Privilege n/a 0.1993 More likely
Urgent CVE-2016-3382 Microsoft Browsers Remote Code Execution n/a 0.1703 More likely
Urgent CVE-2016-3267 Microsoft Browsers Information Disclosure n/a 0.1589 More likely
Urgent CVE-2016-3383 Internet Explorer Remote Code Execution n/a 0.1358 More likely
Urgent CVE-2016-3384 Internet Explorer Remote Code Execution n/a 0.1264 More likely
Urgent CVE-2016-3270 Microsoft Graphics Component Elevation of Privilege n/a 0.0661 More likely
Urgent CVE-2016-3266 Windows Kernel-Mode Drivers Elevation of Privilege n/a 0.0616 More likely
Urgent CVE-2016-7211 Windows Kernel-Mode Drivers Elevation of Privilege n/a 0.0301 More likely
High CVE-2016-3209 Microsoft Graphics Component Information Disclosure n/a 0.5365 Exploitation Less Likely
High CVE-2016-3262 Microsoft Graphics Component Information Disclosure n/a 0.3198 Exploitation Less Likely
High CVE-2016-3263 Microsoft Graphics Component Information Disclosure n/a 0.3198 N/A
High CVE-2016-7182 Microsoft Graphics Component Elevation of Privilege n/a 0.3032 Exploitation Less Likely
High CVE-2016-3376 Windows Kernel-Mode Drivers Elevation of Privilege n/a 0.1282 Exploitation Less Likely
High CVE-2016-0070 Windows Registry Elevation of Privilege n/a 0.1149 Exploitation Less Likely
High CVE-2016-0075 Windows Registry Elevation of Privilege n/a 0.0688 Exploitation Less Likely
High CVE-2016-3341 Windows Kernel-Mode Drivers Elevation of Privilege n/a 0.0662 Exploitation Less Likely
High CVE-2016-0073 Windows Registry Elevation of Privilege n/a 0.0511 Exploitation Less Likely
High CVE-2016-7185 Windows Kernel-Mode Drivers Elevation of Privilege n/a 0.0338 Exploitation Less Likely
Routine CVE-2016-3237 Windows Authentication Methods Security Feature Bypass 6.4 0.1718 Exploitation Less Likely
Routine CVE-2016-3391 Microsoft Browsers Information Disclosure n/a 0.0794 Exploitation Unlikely
Showing 1 to 25 of 25 1