Microsoft · Security update · October 11, 2016

KB3194798: October 2016 cumulative update for Windows 10 1607

KB3194798, released October 11, 2016, fixes 31 CVEs across 8 products. 2 of them are being exploited (CVE-2016-3393); 2 on CISA KEV. Patch Radar priority: Patch now.

Patch now2 on CISA KEV
CVEs closed
31
6 rated Critical
Exploited
2
CVE-2016-3393
Exploitation more likely
14
Vendor assessment
Highest EPSS
0.6847
99th percentile

Priority of the 31 CVEs

Patch now 2 Urgent 15 High 11 Routine 3

Applies to

ProductBuild after install
Internet Explorer 11 on Windows 10 Version 1607 for 32-bit Systems14393.321
Internet Explorer 11 on Windows 10 Version 1607 for x64-based Systems14393.321
Microsoft .NET Framework 3.5 on Windows 10 Version 1607 for 32-bit Systems14393.321
Microsoft .NET Framework 3.5 on Windows 10 Version 1607 for x64-based Systems14393.321
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for 32-bit Systems14393.321
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for x64-based Systems14393.321
Windows 10 Version 1607 for 32-bit Systems14393.321
Windows 10 Version 1607 for x64-based Systems14393.321

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2016-3393 Microsoft Graphics Component Remote Code Execution 8.8 0.6847 KEVExploited
Patch now CVE-2016-3298 Internet Explorer Information Disclosure n/a 0.3333 KEVExploited
Urgent CVE-2016-3386 Microsoft Edge Remote Code Execution n/a 0.4132 More likely
Urgent CVE-2016-3388 Microsoft Browsers Elevation of Privilege n/a 0.2759 More likely
Urgent CVE-2016-3396 Microsoft Graphics Component Remote Code Execution n/a 0.2438 More likely
Urgent CVE-2016-3385 Internet Explorer Remote Code Execution n/a 0.2303 More likely
Urgent CVE-2016-0142 Microsoft Video Control Remote Code Execution n/a 0.2041 Exploitation Less Likely
Urgent CVE-2016-3387 Microsoft Browsers Elevation of Privilege n/a 0.1993 More likely
Urgent CVE-2016-3382 Microsoft Browsers Remote Code Execution n/a 0.1703 More likely
Urgent CVE-2016-3390 Microsoft Browsers Remote Code Execution 7.1 0.1684 More likely
Urgent CVE-2016-3267 Microsoft Browsers Information Disclosure n/a 0.1589 More likely
Urgent CVE-2016-3389 Internet Explorer Remote Code Execution n/a 0.1517 More likely
Urgent CVE-2016-3384 Internet Explorer Remote Code Execution n/a 0.1264 More likely
Urgent CVE-2016-3270 Microsoft Graphics Component Elevation of Privilege n/a 0.0661 More likely
Urgent CVE-2016-3266 Windows Kernel-Mode Drivers Elevation of Privilege n/a 0.0616 More likely
Urgent CVE-2016-7188 Diagnostics Hub Elevation of Privilege n/a 0.0366 More likely
Urgent CVE-2016-7211 Windows Kernel-Mode Drivers Elevation of Privilege n/a 0.0301 More likely
High CVE-2016-3209 Microsoft Graphics Component Information Disclosure n/a 0.5365 Exploitation Less Likely
High CVE-2016-3262 Microsoft Graphics Component Information Disclosure n/a 0.3198 Exploitation Less Likely
High CVE-2016-3263 Microsoft Graphics Component Information Disclosure n/a 0.3198 N/A
High CVE-2016-7182 Microsoft Graphics Component Elevation of Privilege n/a 0.3032 Exploitation Less Likely
High CVE-2016-3376 Windows Kernel-Mode Drivers Elevation of Privilege n/a 0.1282 Exploitation Less Likely
High CVE-2016-0070 Windows Registry Elevation of Privilege n/a 0.1149 Exploitation Less Likely
High CVE-2016-0075 Windows Registry Elevation of Privilege n/a 0.0688 Exploitation Less Likely
High CVE-2016-3341 Windows Kernel-Mode Drivers Elevation of Privilege n/a 0.0662 Exploitation Less Likely
Showing 1 to 25 of 31 1Next