Microsoft · Security update · November 8, 2016

KB3197873: November 2016 security update

KB3197873, released November 8, 2016, fixes 34 CVEs across 7 products. 2 of them are being exploited (CVE-2016-7255); 2 on CISA KEV. Patch Radar priority: Patch now.

Patch now2 on CISA KEVKnown ransomware use1 publicly disclosed
CVEs closed
34
6 rated Critical
Exploited
2
CVE-2016-7255
Exploitation more likely
11
Vendor assessment
Highest EPSS
0.8097
99th percentile

Priority of the 34 CVEs

Patch now 2 Urgent 13 High 8 Routine 11

Applies to

Product
Internet Explorer 11 on Windows 8.1 for 32-bit systems
Internet Explorer 11 on Windows 8.1 for x64-based systems
Internet Explorer 11 on Windows Server 2012 R2
Windows 8.1 for 32-bit systems
Windows 8.1 for x64-based systems
Windows Server 2012 R2
Windows Server 2012 R2 (Server Core installation)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2016-7255 Windows Kernel-Mode Drivers Elevation of Privilege 6.1 0.8097 KEVRansomwareExploited
Patch now CVE-2016-7256 Microsoft Graphics Component Remote Code Execution 8.8 0.6459 KEVExploited
Urgent CVE-2016-7241 Microsoft Browsers Remote Code Execution 4.2 0.7253 More likely
Urgent CVE-2016-7212 Microsoft Windows Remote Code Execution 8.8 0.6983 Exploitation Less Likely
Urgent CVE-2016-7248 Microsoft Video Control Remote Code Execution n/a 0.2201 None reported
Urgent CVE-2016-7205 Microsoft Graphics Component Remote Code Execution 7.1 0.2155 More likely
Urgent CVE-2016-7217 Microsoft Graphics Component Remote Code Execution 4.2 0.2155 More likely
Urgent CVE-2016-7195 Microsoft Browsers Remote Code Execution 6.0 0.1710 More likely
Urgent CVE-2016-7196 Microsoft Browsers Remote Code Execution 6.0 0.1451 More likely
Urgent CVE-2016-7198 Microsoft Browsers Remote Code Execution 4.2 0.1451 More likely
Urgent CVE-2016-7227 Microsoft Browsers Information Disclosure 6.4 0.1171 More likely
Urgent CVE-2016-7247 Boot Manager Security Feature Bypass 6.2 0.0603 More likely
Urgent CVE-2016-7215 Windows Kernel-Mode Drivers Elevation of Privilege 7.8 0.0302 More likely
Urgent CVE-2016-7246 Windows Kernel-Mode Drivers Elevation of Privilege 7.8 0.0302 More likely
Urgent CVE-2016-7221 Microsoft Windows Elevation of Privilege 6.5 0.0218 More likely
High CVE-2016-3342 Common Log File System Driver Elevation of Privilege 7.8 0.1263 Exploitation Less Likely
High CVE-2016-3343 Common Log File System Driver Elevation of Privilege 7.8 0.1263 Exploitation Less Likely
High CVE-2016-3340 Common Log File System Driver Elevation of Privilege n/a 0.1263 Exploitation Less Likely
High CVE-2016-3332 Common Log File System Driver Elevation of Privilege 7.8 0.0662 Exploitation Less Likely
High CVE-2016-3333 Common Log File System Driver Elevation of Privilege 7.8 0.0662 Exploitation Less Likely
High CVE-2016-3334 Common Log File System Driver Elevation of Privilege 7.8 0.0662 Exploitation Less Likely
High CVE-2016-3335 Common Log File System Driver Elevation of Privilege 7.8 0.0662 Exploitation Less Likely
High CVE-2016-3338 Common Log File System Driver Elevation of Privilege 7.8 0.0662 Exploitation Less Likely
Routine CVE-2016-7237 Windows Authentication Methods Denial of Service 6.5 0.6746 Exploitation Unlikely
Routine CVE-2016-7210 Microsoft Graphics Component Information Disclosure 4.4 0.2112 Exploitation Less Likely
Showing 1 to 25 of 34 1Next