Microsoft · Security update · October 11, 2016

KB3192440: October 2016 cumulative update for Windows 10 1507

KB3192440, released October 11, 2016, fixes 32 CVEs across 8 products. 2 of them are being exploited (CVE-2016-3393); 2 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now2 on CISA KEVUnsupported product
CVEs closed
32
7 rated Critical
Exploited
2
CVE-2016-3393
Exploitation more likely
15
Vendor assessment
Highest EPSS
0.6847
99th percentile

Priority of the 32 CVEs

Patch now 2 Urgent 16 High 11 Routine 3

Applies to

ProductBuild after install
Internet Explorer 11 on Windows 10 for 32-bit Systems10240.17146
Internet Explorer 11 on Windows 10 for x64-based Systems10240.17146
Microsoft .NET Framework 3.5 on Windows 10 for 32-bit Systems10240.17146
Microsoft .NET Framework 3.5 on Windows 10 for x64-based Systems10240.17146
Microsoft Edge (EdgeHTML-based) on Windows 10 for 32-bit Systems10240.17146
Microsoft Edge (EdgeHTML-based) on Windows 10 for x64-based Systems10240.17146
Windows 10 for 32-bit Systems10240.17146
Windows 10 for x64-based Systems10240.17146

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2016-3393 Microsoft Graphics Component Remote Code Execution 8.8 0.6847 KEVExploited
Patch now CVE-2016-3298 Internet Explorer Information Disclosure n/a 0.3333 KEVExploited
Urgent CVE-2016-3386 Microsoft Edge Remote Code Execution n/a 0.4132 More likely
Urgent CVE-2016-3388 Microsoft Browsers Elevation of Privilege n/a 0.2759 More likely
Urgent CVE-2016-3396 Microsoft Graphics Component Remote Code Execution n/a 0.2438 More likely
Urgent CVE-2016-3385 Internet Explorer Remote Code Execution n/a 0.2303 More likely
Urgent CVE-2016-0142 Microsoft Video Control Remote Code Execution n/a 0.2041 Exploitation Less Likely
Urgent CVE-2016-3387 Microsoft Browsers Elevation of Privilege n/a 0.1993 More likely
Urgent CVE-2016-3382 Microsoft Browsers Remote Code Execution n/a 0.1703 More likely
Urgent CVE-2016-3390 Microsoft Browsers Remote Code Execution 7.1 0.1684 More likely
Urgent CVE-2016-3267 Microsoft Browsers Information Disclosure n/a 0.1589 More likely
Urgent CVE-2016-3389 Internet Explorer Remote Code Execution n/a 0.1517 More likely
Urgent CVE-2016-3331 Microsoft Browsers Remote Code Execution 7.1 0.1445 More likely
Urgent CVE-2016-3384 Internet Explorer Remote Code Execution n/a 0.1264 More likely
Urgent CVE-2016-3270 Microsoft Graphics Component Elevation of Privilege n/a 0.0661 More likely
Urgent CVE-2016-3266 Windows Kernel-Mode Drivers Elevation of Privilege n/a 0.0616 More likely
Urgent CVE-2016-7188 Diagnostics Hub Elevation of Privilege n/a 0.0366 More likely
Urgent CVE-2016-7211 Windows Kernel-Mode Drivers Elevation of Privilege n/a 0.0301 More likely
High CVE-2016-3209 Microsoft Graphics Component Information Disclosure n/a 0.5365 Exploitation Less Likely
High CVE-2016-3262 Microsoft Graphics Component Information Disclosure n/a 0.3198 Exploitation Less Likely
High CVE-2016-3263 Microsoft Graphics Component Information Disclosure n/a 0.3198 N/A
High CVE-2016-7182 Microsoft Graphics Component Elevation of Privilege n/a 0.3032 Exploitation Less Likely
High CVE-2016-3376 Windows Kernel-Mode Drivers Elevation of Privilege n/a 0.1282 Exploitation Less Likely
High CVE-2016-0070 Windows Registry Elevation of Privilege n/a 0.1149 Exploitation Less Likely
High CVE-2016-0075 Windows Registry Elevation of Privilege n/a 0.0688 Exploitation Less Likely
Showing 1 to 25 of 32 1Next