Microsoft · Security update · December 13, 2016

KB3198800: December 2016 security update

KB3198800, released December 13, 2016, fixes 6 CVEs across 2 products. None of them is reported as exploited. Patch Radar priority: Urgent. The product is no longer supported.

UrgentUnsupported product
CVEs closed
6
1 rated Critical
Exploited
0
None reported
Exploitation more likely
2
Vendor assessment
Highest EPSS
0.4049
98th percentile

Priority of the 6 CVEs

Patch now 0 Urgent 2 High 3 Routine 1

Applies to

Product
Microsoft Excel 2016 for Mac
Microsoft Office 2016 for Mac

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Urgent CVE-2016-7274 Microsoft Office Remote Code Execution 6.4 0.4049 More likely
Urgent CVE-2016-7266 Microsoft Office Remote Code Execution n/a 0.2279 More likely
High CVE-2016-7276 Microsoft Office Information Disclosure n/a 0.2541 N/A
High CVE-2016-7264 Microsoft Office Information Disclosure n/a 0.2321 Exploitation Less Likely
High CVE-2016-7263 Microsoft Office Remote Code Execution n/a 0.1970 Exploitation Unlikely
Routine CVE-2016-7257 Microsoft Office Information Disclosure 6.7 0.2268 N/A
Showing 1 to 6 of 6 1