Microsoft · Security update · November 8, 2016

KB3197868: November 2016 security update

KB3197868, released November 8, 2016, fixes 30 CVEs across 8 products. 2 of them are being exploited (CVE-2016-7255); 2 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now2 on CISA KEVKnown ransomware use1 publicly disclosedUnsupported product
CVEs closed
30
5 rated Critical
Exploited
2
CVE-2016-7255
Exploitation more likely
8
Vendor assessment
Highest EPSS
0.8097
99th percentile

Priority of the 30 CVEs

Patch now 2 Urgent 10 High 8 Routine 10

Applies to

Product
Internet Explorer 11 on Windows 7 for 32-bit Systems Service Pack 1
Internet Explorer 11 on Windows 7 for x64-based Systems Service Pack 1
Internet Explorer 11 on Windows Server 2008 R2 for x64-based Systems Service Pack 1
Windows 7 for 32-bit Systems Service Pack 1
Windows 7 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2016-7255 Windows Kernel-Mode Drivers Elevation of Privilege 6.1 0.8097 KEVRansomwareExploited
Patch now CVE-2016-7256 Microsoft Graphics Component Remote Code Execution 8.8 0.6459 KEVExploited
Urgent CVE-2016-7212 Microsoft Windows Remote Code Execution 8.8 0.6983 Exploitation Less Likely
Urgent CVE-2016-7248 Microsoft Video Control Remote Code Execution n/a 0.2201 None reported
Urgent CVE-2016-7205 Microsoft Graphics Component Remote Code Execution 7.1 0.2155 More likely
Urgent CVE-2016-7195 Microsoft Browsers Remote Code Execution 6.0 0.1710 More likely
Urgent CVE-2016-7196 Microsoft Browsers Remote Code Execution 6.0 0.1451 More likely
Urgent CVE-2016-7198 Microsoft Browsers Remote Code Execution 4.2 0.1451 More likely
Urgent CVE-2016-7227 Microsoft Browsers Information Disclosure 6.4 0.1171 More likely
Urgent CVE-2016-7215 Windows Kernel-Mode Drivers Elevation of Privilege 7.8 0.0302 More likely
Urgent CVE-2016-7246 Windows Kernel-Mode Drivers Elevation of Privilege 7.8 0.0302 More likely
Urgent CVE-2016-7221 Microsoft Windows Elevation of Privilege 6.5 0.0218 More likely
High CVE-2016-3342 Common Log File System Driver Elevation of Privilege 7.8 0.1263 Exploitation Less Likely
High CVE-2016-3343 Common Log File System Driver Elevation of Privilege 7.8 0.1263 Exploitation Less Likely
High CVE-2016-3340 Common Log File System Driver Elevation of Privilege n/a 0.1263 Exploitation Less Likely
High CVE-2016-3332 Common Log File System Driver Elevation of Privilege 7.8 0.0662 Exploitation Less Likely
High CVE-2016-3333 Common Log File System Driver Elevation of Privilege 7.8 0.0662 Exploitation Less Likely
High CVE-2016-3334 Common Log File System Driver Elevation of Privilege 7.8 0.0662 Exploitation Less Likely
High CVE-2016-3335 Common Log File System Driver Elevation of Privilege 7.8 0.0662 Exploitation Less Likely
High CVE-2016-3338 Common Log File System Driver Elevation of Privilege 7.8 0.0662 Exploitation Less Likely
Routine CVE-2016-7237 Windows Authentication Methods Denial of Service 6.5 0.6746 Exploitation Unlikely
Routine CVE-2016-7210 Microsoft Graphics Component Information Disclosure 4.4 0.2112 Exploitation Less Likely
Routine CVE-2016-7199 Microsoft Browsers Information Disclosure 4.3 0.1320 DisclosedExploitation Less Likely
Routine CVE-2016-7239 Microsoft Browsers Information Disclosure n/a 0.1171 Exploitation Unlikely
Routine CVE-2016-0026 Common Log File System Driver Elevation of Privilege 6.5 0.0662 Exploitation Less Likely
Showing 1 to 25 of 30 1Next