Microsoft · Security update · November 8, 2016

KB3197877: November 2016 security update

KB3197877, released November 8, 2016, fixes 32 CVEs across 3 products. 2 of them are being exploited (CVE-2016-7255); 2 on CISA KEV. Patch Radar priority: Patch now.

Patch now2 on CISA KEVKnown ransomware use1 publicly disclosed
CVEs closed
32
4 rated Critical
Exploited
2
CVE-2016-7255
Exploitation more likely
10
Vendor assessment
Highest EPSS
0.8097
99th percentile

Priority of the 32 CVEs

Patch now 2 Urgent 11 High 8 Routine 11

Applies to

Product
Internet Explorer 10 on Windows Server 2012
Windows Server 2012
Windows Server 2012 (Server Core installation)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2016-7255 Windows Kernel-Mode Drivers Elevation of Privilege 6.1 0.8097 KEVRansomwareExploited
Patch now CVE-2016-7256 Microsoft Graphics Component Remote Code Execution 8.8 0.6459 KEVExploited
Urgent CVE-2016-7212 Microsoft Windows Remote Code Execution 8.8 0.6983 Exploitation Less Likely
Urgent CVE-2016-7205 Microsoft Graphics Component Remote Code Execution 7.1 0.2155 More likely
Urgent CVE-2016-7217 Microsoft Graphics Component Remote Code Execution 4.2 0.2155 More likely
Urgent CVE-2016-7195 Microsoft Browsers Remote Code Execution 6.0 0.1710 More likely
Urgent CVE-2016-7196 Microsoft Browsers Remote Code Execution 6.0 0.1451 More likely
Urgent CVE-2016-7198 Microsoft Browsers Remote Code Execution 4.2 0.1451 More likely
Urgent CVE-2016-7227 Microsoft Browsers Information Disclosure 6.4 0.1171 More likely
Urgent CVE-2016-7247 Boot Manager Security Feature Bypass 6.2 0.0603 More likely
Urgent CVE-2016-7215 Windows Kernel-Mode Drivers Elevation of Privilege 7.8 0.0302 More likely
Urgent CVE-2016-7246 Windows Kernel-Mode Drivers Elevation of Privilege 7.8 0.0302 More likely
Urgent CVE-2016-7221 Microsoft Windows Elevation of Privilege 6.5 0.0218 More likely
High CVE-2016-3342 Common Log File System Driver Elevation of Privilege 7.8 0.1263 Exploitation Less Likely
High CVE-2016-3343 Common Log File System Driver Elevation of Privilege 7.8 0.1263 Exploitation Less Likely
High CVE-2016-3340 Common Log File System Driver Elevation of Privilege n/a 0.1263 Exploitation Less Likely
High CVE-2016-3332 Common Log File System Driver Elevation of Privilege 7.8 0.0662 Exploitation Less Likely
High CVE-2016-3333 Common Log File System Driver Elevation of Privilege 7.8 0.0662 Exploitation Less Likely
High CVE-2016-3334 Common Log File System Driver Elevation of Privilege 7.8 0.0662 Exploitation Less Likely
High CVE-2016-3335 Common Log File System Driver Elevation of Privilege 7.8 0.0662 Exploitation Less Likely
High CVE-2016-3338 Common Log File System Driver Elevation of Privilege 7.8 0.0662 Exploitation Less Likely
Routine CVE-2016-7237 Windows Authentication Methods Denial of Service 6.5 0.6746 Exploitation Unlikely
Routine CVE-2016-7210 Microsoft Graphics Component Information Disclosure 4.4 0.2112 Exploitation Less Likely
Routine CVE-2016-7199 Microsoft Browsers Information Disclosure 4.3 0.1320 DisclosedExploitation Less Likely
Routine CVE-2016-7239 Microsoft Browsers Information Disclosure n/a 0.1171 Exploitation Unlikely
Showing 1 to 25 of 32 1Next