Microsoft · Security update · November 8, 2016

KB3198586: November 2016 cumulative update for Windows 10 1511

KB3198586, released November 8, 2016, fixes 47 CVEs across 6 products. 4 of them are being exploited (CVE-2016-7200); 4 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now4 on CISA KEVKnown ransomware use2 publicly disclosedUnsupported product
CVEs closed
47
12 rated Critical
Exploited
4
CVE-2016-7200
Exploitation more likely
17
Vendor assessment
Highest EPSS
0.8278
99th percentile

Priority of the 47 CVEs

Patch now 4 Urgent 19 High 8 Routine 16

Applies to

Product
Internet Explorer 11 on Windows 10 Version 1511 for 32-bit Systems
Internet Explorer 11 on Windows 10 Version 1511 for x64-based Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1511 for 32-bit Systems
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1511 for x64-based Systems
Windows 10 Version 1511 for 32-bit Systems
Windows 10 Version 1511 for x64-based Systems

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2016-7200 Microsoft Edge Remote Code Execution 4.2 0.8278 KEVExploited
Patch now CVE-2016-7255 Windows Kernel-Mode Drivers Elevation of Privilege 6.1 0.8097 KEVRansomwareExploited
Patch now CVE-2016-7201 Microsoft Edge Remote Code Execution 4.2 0.8000 KEVExploited
Patch now CVE-2016-7256 Microsoft Graphics Component Remote Code Execution 8.8 0.6459 KEVExploited
Urgent CVE-2016-7202 Microsoft Browsers Remote Code Execution 4.2 0.7394 More likely
Urgent CVE-2016-7241 Microsoft Browsers Remote Code Execution 4.2 0.7253 More likely
Urgent CVE-2016-7212 Microsoft Windows Remote Code Execution 8.8 0.6983 Exploitation Less Likely
Urgent CVE-2016-7240 Microsoft Edge Remote Code Execution 4.2 0.6647 More likely
Urgent CVE-2016-7203 Microsoft Edge Remote Code Execution 4.2 0.6489 More likely
Urgent CVE-2016-7248 Microsoft Video Control Remote Code Execution n/a 0.2201 None reported
Urgent CVE-2016-7205 Microsoft Graphics Component Remote Code Execution 7.1 0.2155 More likely
Urgent CVE-2016-7217 Microsoft Graphics Component Remote Code Execution 4.2 0.2155 More likely
Urgent CVE-2016-7195 Microsoft Browsers Remote Code Execution 6.0 0.1710 More likely
Urgent CVE-2016-7242 Microsoft Edge Remote Code Execution 4.2 0.1628 More likely
Urgent CVE-2016-7208 Microsoft Edge Remote Code Execution 4.2 0.1528 More likely
Urgent CVE-2016-7243 Microsoft Edge Remote Code Execution 4.2 0.1517 More likely
Urgent CVE-2016-7196 Microsoft Browsers Remote Code Execution 6.0 0.1451 More likely
Urgent CVE-2016-7198 Microsoft Browsers Remote Code Execution 4.2 0.1451 More likely
Urgent CVE-2016-7227 Microsoft Browsers Information Disclosure 6.4 0.1171 More likely
Urgent CVE-2016-7247 Boot Manager Security Feature Bypass 6.2 0.0603 More likely
Urgent CVE-2016-7215 Windows Kernel-Mode Drivers Elevation of Privilege 7.8 0.0302 More likely
Urgent CVE-2016-7246 Windows Kernel-Mode Drivers Elevation of Privilege 7.8 0.0302 More likely
Urgent CVE-2016-7221 Microsoft Windows Elevation of Privilege 6.5 0.0218 More likely
High CVE-2016-3342 Common Log File System Driver Elevation of Privilege 7.8 0.1263 Exploitation Less Likely
High CVE-2016-3343 Common Log File System Driver Elevation of Privilege 7.8 0.1263 Exploitation Less Likely
Showing 1 to 25 of 47 1Next