Microsoft · Security update · October 11, 2016

KB3192391: October 2016 security update

KB3192391, released October 11, 2016, fixes 18 CVEs across 8 products. 2 of them are being exploited (CVE-2016-3393); 2 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now2 on CISA KEVUnsupported product
CVEs closed
18
3 rated Critical
Exploited
2
CVE-2016-3393
Exploitation more likely
6
Vendor assessment
Highest EPSS
0.6847
99th percentile

Priority of the 18 CVEs

Patch now 2 Urgent 7 High 7 Routine 2

Applies to

Product
Internet Explorer 11 on Windows 7 for 32-bit Systems Service Pack 1
Internet Explorer 11 on Windows 7 for x64-based Systems Service Pack 1
Internet Explorer 11 on Windows Server 2008 R2 for x64-based Systems Service Pack 1
Windows 7 for 32-bit Systems Service Pack 1
Windows 7 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2016-3393 Microsoft Graphics Component Remote Code Execution 8.8 0.6847 KEVExploited
Patch now CVE-2016-3298 Internet Explorer Information Disclosure n/a 0.3333 KEVExploited
Urgent CVE-2016-3396 Microsoft Graphics Component Remote Code Execution n/a 0.2438 More likely
Urgent CVE-2016-3385 Internet Explorer Remote Code Execution n/a 0.2303 More likely
Urgent CVE-2016-0142 Microsoft Video Control Remote Code Execution n/a 0.2041 Exploitation Less Likely
Urgent CVE-2016-3267 Microsoft Browsers Information Disclosure n/a 0.1589 More likely
Urgent CVE-2016-3270 Microsoft Graphics Component Elevation of Privilege n/a 0.0661 More likely
Urgent CVE-2016-3266 Windows Kernel-Mode Drivers Elevation of Privilege n/a 0.0616 More likely
Urgent CVE-2016-7211 Windows Kernel-Mode Drivers Elevation of Privilege n/a 0.0301 More likely
High CVE-2016-3209 Microsoft Graphics Component Information Disclosure n/a 0.5365 Exploitation Less Likely
High CVE-2016-3262 Microsoft Graphics Component Information Disclosure n/a 0.3198 Exploitation Less Likely
High CVE-2016-3263 Microsoft Graphics Component Information Disclosure n/a 0.3198 N/A
High CVE-2016-7182 Microsoft Graphics Component Elevation of Privilege n/a 0.3032 Exploitation Less Likely
High CVE-2016-3376 Windows Kernel-Mode Drivers Elevation of Privilege n/a 0.1282 Exploitation Less Likely
High CVE-2016-0070 Windows Registry Elevation of Privilege n/a 0.1149 Exploitation Less Likely
High CVE-2016-7185 Windows Kernel-Mode Drivers Elevation of Privilege n/a 0.0338 Exploitation Less Likely
Routine CVE-2016-3237 Windows Authentication Methods Security Feature Bypass 6.4 0.1718 Exploitation Less Likely
Routine CVE-2016-3391 Microsoft Browsers Information Disclosure n/a 0.0794 Exploitation Unlikely
Showing 1 to 18 of 18 1