Microsoft · Security update · December 13, 2016

KB3208481: December 2016 security update

KB3208481, released December 13, 2016, fixes 6 CVEs across 4 products. None of them is reported as exploited. Patch Radar priority: Urgent. The product is no longer supported.

Urgent2 publicly disclosedUnsupported product
CVEs closed
6
None rated Critical
Exploited
0
None reported
Exploitation more likely
3
Vendor assessment
Highest EPSS
0.7394
99th percentile

Priority of the 6 CVEs

Patch now 0 Urgent 3 High 0 Routine 3

Applies to

Product
Microsoft Windows Hyperlink Object Library on Windows Server 2008 for 32-bit Systems Service Pack 2
Microsoft Windows Hyperlink Object Library on Windows Server 2008 for x64-based Systems Service Pack 2
Microsoft Windows Hyperlink Object Library on Windows Vista Service Pack 2
Microsoft Windows Hyperlink Object Library on Windows Vista x64 Edition Service Pack 2

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Urgent CVE-2016-7202 Microsoft Browsers Remote Code Execution 4.2 0.7394 More likely
Urgent CVE-2016-7283 Internet Explorer Remote Code Execution 6.4 0.1794 More likely
Urgent CVE-2016-7279 Microsoft Browsers Remote Code Execution 6.4 0.1511 More likely
Routine CVE-2016-7278 Internet Explorer Information Disclosure 2.4 0.1479 Exploitation Less Likely
Routine CVE-2016-7281 Microsoft Browsers Information Disclosure 4.3 0.1331 DisclosedExploitation Unlikely
Routine CVE-2016-7282 Microsoft Browsers Information Disclosure 4.3 0.1006 DisclosedExploitation Unlikely
Showing 1 to 6 of 6 1