Microsoft · Security update · December 13, 2016

KB3205383: December 2016 cumulative update for Windows 10 1507

KB3205383, released December 13, 2016, fixes 21 CVEs across 6 products. None of them is reported as exploited. Patch Radar priority: Urgent. The product is no longer supported.

Urgent3 publicly disclosedUnsupported product
CVEs closed
21
6 rated Critical
Exploited
0
None reported
Exploitation more likely
10
Vendor assessment
Highest EPSS
0.7394
99th percentile

Priority of the 21 CVEs

Patch now 0 Urgent 10 High 2 Routine 9

Applies to

ProductBuild after install
Internet Explorer 11 on Windows 10 for 32-bit Systems10240.17202
Internet Explorer 11 on Windows 10 for x64-based Systems10240.17202
Microsoft Edge (EdgeHTML-based) on Windows 10 for 32-bit Systems10240.17202
Microsoft Edge (EdgeHTML-based) on Windows 10 for x64-based Systems10240.17202
Windows 10 for 32-bit Systems10240.17202
Windows 10 for x64-based Systems10240.17202

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Urgent CVE-2016-7202 Microsoft Browsers Remote Code Execution 4.2 0.7394 More likely
Urgent CVE-2016-7288 Microsoft Edge Remote Code Execution 4.2 0.7035 More likely
Urgent CVE-2016-7287 Microsoft Browsers Remote Code Execution 4.2 0.6966 More likely
Urgent CVE-2016-7274 Microsoft Office Remote Code Execution 6.4 0.4049 More likely
Urgent CVE-2016-7272 Microsoft Graphics Component Remote Code Execution 6.4 0.3926 More likely
Urgent CVE-2016-7273 Microsoft Graphics Component Remote Code Execution 4.2 0.1899 More likely
Urgent CVE-2016-7283 Internet Explorer Remote Code Execution 6.4 0.1794 More likely
Urgent CVE-2016-7296 Microsoft Edge Remote Code Execution 4.2 0.1671 More likely
Urgent CVE-2016-7279 Microsoft Browsers Remote Code Execution 6.4 0.1511 More likely
Urgent CVE-2016-7292 Microsoft Windows Elevation of Privilege 7.3 0.0147 More likely
High CVE-2016-7259 Windows Kernel-Mode Drivers Elevation of Privilege 7.0 0.0214 Exploitation Unlikely
High CVE-2016-7260 Windows Kernel-Mode Drivers Elevation of Privilege 7.0 0.0156 Exploitation Less Likely
Routine CVE-2016-7181 Microsoft Edge Remote Code Execution 4.2 0.1390 Exploitation Unlikely
Routine CVE-2016-7281 Microsoft Browsers Information Disclosure 4.3 0.1331 DisclosedExploitation Unlikely
Routine CVE-2016-7206 Microsoft Edge Information Disclosure 4.3 0.1161 DisclosedExploitation Unlikely
Routine CVE-2016-7282 Microsoft Browsers Information Disclosure 4.3 0.1006 DisclosedExploitation Unlikely
Routine CVE-2016-7280 Microsoft Browsers Information Disclosure 4.3 0.0939 Exploitation Unlikely
Routine CVE-2016-7219 Microsoft Windows Information Disclosure 6.7 0.0343 Exploitation Unlikely
Routine CVE-2016-7295 Common Log File System Driver Information Disclosure 6.0 0.0329 Exploitation Less Likely
Routine CVE-2016-7258 Windows Kernel Information Disclosure 3.3 0.0329 Exploitation Unlikely
Routine CVE-2016-7271 Windows Secure Kernel Mode Elevation of Privilege 6.3 0.0137 Exploitation Less Likely
Showing 1 to 21 of 21 1