Microsoft · Security update · October 11, 2016
KB3191492: October 2016 security update
KB3191492, released October 11, 2016, fixes 6 CVEs across 4 products. One of them is being exploited (CVE-2016-3298); 1 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.
Patch now1 on CISA KEVUnsupported product
CVEs closed
6
None rated Critical
Exploited
1
CVE-2016-3298
Exploitation more likely
4
Vendor assessment
Highest EPSS
0.3333
98th percentile
Priority of the 6 CVEs
Patch now 1
Urgent 4
High 0
Routine 1
Applies to
CVEs this fix closes
| Priority | CVE | Component | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Patch now | CVE-2016-3298 | Internet Explorer | Information Disclosure | n/a | 0.3333 | KEVExploited |
| Urgent | CVE-2016-3385 | Internet Explorer | Remote Code Execution | n/a | 0.2303 | More likely |
| Urgent | CVE-2016-3382 | Microsoft Browsers | Remote Code Execution | n/a | 0.1703 | More likely |
| Urgent | CVE-2016-3267 | Microsoft Browsers | Information Disclosure | n/a | 0.1589 | More likely |
| Urgent | CVE-2016-3384 | Internet Explorer | Remote Code Execution | n/a | 0.1264 | More likely |
| Routine | CVE-2016-3391 | Microsoft Browsers | Information Disclosure | n/a | 0.0794 | Exploitation Unlikely |
Showing 1 to 6 of 6
1