Microsoft · Security update · October 11, 2016
KB3191203: October 2016 security update
KB3191203, released October 11, 2016, fixes 10 CVEs across 7 products. One of them is being exploited (CVE-2016-3393); 1 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.
Patch now1 on CISA KEVUnsupported product
CVEs closed
10
2 rated Critical
Exploited
1
CVE-2016-3393
Exploitation more likely
4
Vendor assessment
Highest EPSS
0.6847
99th percentile
Priority of the 10 CVEs
Patch now 1
Urgent 4
High 5
Routine 0
Applies to
CVEs this fix closes
| Priority | CVE | Component | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Patch now | CVE-2016-3393 | Microsoft Graphics Component | Remote Code Execution | 8.8 | 0.6847 | KEVExploited |
| Urgent | CVE-2016-3396 | Microsoft Graphics Component | Remote Code Execution | n/a | 0.2438 | More likely |
| Urgent | CVE-2016-3270 | Microsoft Graphics Component | Elevation of Privilege | n/a | 0.0661 | More likely |
| Urgent | CVE-2016-3266 | Windows Kernel-Mode Drivers | Elevation of Privilege | n/a | 0.0616 | More likely |
| Urgent | CVE-2016-7211 | Windows Kernel-Mode Drivers | Elevation of Privilege | n/a | 0.0301 | More likely |
| High | CVE-2016-3209 | Microsoft Graphics Component | Information Disclosure | n/a | 0.5365 | Exploitation Less Likely |
| High | CVE-2016-3262 | Microsoft Graphics Component | Information Disclosure | n/a | 0.3198 | Exploitation Less Likely |
| High | CVE-2016-3263 | Microsoft Graphics Component | Information Disclosure | n/a | 0.3198 | N/A |
| High | CVE-2016-7182 | Microsoft Graphics Component | Elevation of Privilege | n/a | 0.3032 | Exploitation Less Likely |
| High | CVE-2016-3376 | Windows Kernel-Mode Drivers | Elevation of Privilege | n/a | 0.1282 | Exploitation Less Likely |
Showing 1 to 10 of 10
1