Handler on Duty: Didier Stevens
Threat Level: green
Microsoft Patch Tuesday 2016-06-14
Title | Cumulative Security Update for Internet Explorer |
---|---|
Replaces | MS16-051, KB3156387, KB3156421 |
Affected | Internet Explorer |
KB | KB3163649 |
Known Exploits | No |
Microsoft Rating | Critical |
ISC Client Rating | Critical |
ISC Server Rating | Critical |
CVE | Exploitability |
---|---|
2016-0199 | 1 |
2016-0200 | 1 |
2016-0210 | 1 |
2016-3202 | 1 |
2016-3205 | 1 |
2016-3206 | 1 |
2016-3207 | 1 |
2016-3211 | 1 |
2016-3212 | 3 |
2016-3213 | 1 |
Title | Cumulative Security Update for Microsoft Edge |
---|---|
Replaces | KB3156387, KB3156421 |
Affected | Edge |
KB | KB3163656 |
Known Exploits | No |
Microsoft Rating | Critical |
ISC Client Rating | Critical |
ISC Server Rating | Critical |
CVE | Exploitability |
---|---|
2016-3198 | 1 |
2016-3199 | 1 |
2016-3201 | 1 |
2016-3202 | 1 |
2016-3203 | 1 |
2016-3214 | 1 |
2016-3215 | 1 |
2016-3222 | 1 |
Title | Cumulative Security Update for JScript and VBScript |
---|---|
Replaces | MS16-053 |
Affected | Jscript, VBscript |
KB | KB3163640 |
Known Exploits | No |
Microsoft Rating | Critical |
ISC Client Rating | Critical |
ISC Server Rating | Critical |
CVE | Exploitability |
---|---|
2016-3205 | 1 |
2016-3206 | 1 |
2016-3207 | 1 |
Title | Security Update for Microsoft Office |
---|---|
Replaces | MS16-004, MS16-042, MS16-054 |
Affected | Office |
KB | KB3164065 |
Known Exploits | No |
Microsoft Rating | Critical |
ISC Client Rating | Patch now |
ISC Server Rating | Less urgent |
CVE | Exploitability |
---|---|
2016-0025 | 1 |
2016-3233 | 1 |
2016-3234 | 2 |
2016-3235 | 2 |
Title | Security Update for Microsoft Windows DNS Server |
---|---|
Replaces | MS15-127 |
Affected | DNS Server |
KB | KB3164065 |
Known Exploits | No |
Microsoft Rating | Critical |
ISC Client Rating | N/A |
ISC Server Rating | Critical |
CVE | Exploitability |
---|---|
2016-3227 | 2 |
Title | Security Update for Group Policy |
---|---|
Replaces | KB3156387, KB3156421 |
Affected | Active Directory |
KB | KB3163622 |
Known Exploits | No |
Microsoft Rating | Important |
ISC Client Rating | Important |
ISC Server Rating | Critical |
CVE | Exploitability |
---|---|
2016-3223 | 2 |
Title | Security Update for Windows Kernel-Mode Drivers |
---|---|
Replaces | MS16-062, KB3156387, KB3156387, KB3156421, KB3156421 |
Affected | Kernel |
KB | KB3164028 |
Known Exploits | No |
Microsoft Rating | Important |
ISC Client Rating | Important |
ISC Server Rating | Important |
CVE | Exploitability |
---|---|
2016-3218 | 1 |
2016-3221 | 1 |
2016-3232 | 2 |
Title | Security Update for Microsoft Graphics Component |
---|---|
Replaces | MS16-026, MS16-055, KB3156387, KB3156421 |
Affected | Windows Graphics and Fonts |
KB | KB3164036 |
Known Exploits | No |
Microsoft Rating | Important |
ISC Client Rating | Important |
ISC Server Rating | Important |
CVE | Exploitability |
---|---|
2016-3216 | 2 |
2016-3219 | 2 |
2016-3220 | 1 |
Title | Security Update for Windows SMB Server |
---|---|
Replaces | MS15-052, MS15-122, MS16-007, KB3135173, KB3135174 |
Affected | Windows SMB Server |
KB | KB3164038 |
Known Exploits | No |
Microsoft Rating | Important |
ISC Client Rating | Important |
ISC Server Rating | Important |
CVE | Exploitability |
---|---|
2016-3225 | 3 |
Title | Security Update for Netlogon |
---|---|
Replaces | MS15-122, MS16-007 |
Affected | Netlogon |
KB | KB3167691 |
Known Exploits | No |
Microsoft Rating | Important |
ISC Client Rating | Important |
ISC Server Rating | Important |
CVE | Exploitability |
---|---|
2016-3228 | 2 |
Title | Security Update for WPAD |
---|---|
Replaces | KB3156387, KB3156421 |
Affected | Internet Explorer WPAD |
KB | KB3165191 |
Known Exploits | No |
Microsoft Rating | Important |
ISC Client Rating | Important |
ISC Server Rating | Important |
CVE | Exploitability |
---|---|
2016-3213 | 1 |
2016-3236 | 1 |
Title | Security Update for Windows Diagnostic Hub |
---|---|
Replaces | KB3156387, KB3156421 |
Affected | Windows Diagnostic Hub |
KB | KB3165479 |
Known Exploits | No |
Microsoft Rating | Important |
ISC Client Rating | Important |
ISC Server Rating | Important |
CVE | Exploitability |
---|---|
2016-3231 | 1 |
Title | Security Update for Microsoft Exchange Server |
---|---|
Replaces | MS14-075, MS16-010 |
Affected | Exchange Server and OWA |
KB | KB3160339 |
Known Exploits | No |
Microsoft Rating | Important |
ISC Client Rating | N/A |
ISC Server Rating | Important |
CVE | Exploitability |
---|---|
2016-0028 | 3 |
Title | Security Update for Microsoft Windows PDF |
---|---|
Replaces | MS16-028, KB3156387, KB3156421 |
Affected | Windows PDF |
KB | KB3164302 |
Known Exploits | No |
Microsoft Rating | Important |
ISC Client Rating | Important |
ISC Server Rating | Important |
CVE | Exploitability |
---|---|
2016-3201 | 2 |
2016-3203 | 2 |
2016-3215 | 2 |
Title | Security Update for Active Directory |
---|---|
Replaces | MS13-032 |
Affected | Active Directory |
KB | KB3160352 |
Known Exploits | No |
Microsoft Rating | Important |
ISC Client Rating | Important |
ISC Server Rating | Important |
CVE | Exploitability |
---|---|
2016-3226 | 3 |
Title | Security Update for Microsoft Windows Search Component |
---|---|
Replaces | KB3156387, KB3156421 |
Affected | Windows Search and Structured Query |
KB | KB3165270 |
Known Exploits | No |
Microsoft Rating | Important |
ISC Client Rating | Important |
ISC Server Rating | Important |
CVE | Exploitability |
---|---|
2016-3230 | 3 |
Title | Security Update for Adobe Flash Player |
---|---|
Replaces | |
Affected | Flash Player |
KB | KB3167685 |
Known Exploits | No |
Microsoft Rating | Critical |
ISC Client Rating | Patch now |
ISC Server Rating | Important |
CVE | Exploitability |
---|
We will update issues on this page for about a week or so as they evolve. We appreciate your updates!
US based customers can call Microsoft for free patch related support on 1-866-PCSAFETY
US based customers can call Microsoft for free patch related support on 1-866-PCSAFETY
(*): ISC rating
- We use 4 levels:
- PATCH NOW: Typically used where we see immediate danger of exploitation. Typical environments will want to deploy these patches ASAP. Workarounds are typically not accepted by users or are not possible. This rating is often used when typical deployments make it vulnerable and exploits are being used or easy to obtain or make.
- Critical: Anything that needs little to become "interesting" for the dark side. Best approach is to test and deploy ASAP. Workarounds can give more time to test.
- Important: Things where more testing and other measures can help.
- Less Urgent: practices for servers such as not using outlook, MSIE, word etc. to do traditional office or leisure work.
- The rating is not a risk analysis as such. It is a rating of importance of the vulnerability and the perceived or even predicted threatatches.