Threat Level: green Handler on Duty: Rob VandenBrink

SANS ISC: Microsoft Patch Tuesday - SANS Internet Storm Center Microsoft Patch Tuesday


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

Microsoft Patch Tuesday 2016-06-14

MS16-063
Title Cumulative Security Update for Internet Explorer
Replaces MS16-051, KB3156387, KB3156421
Affected Internet Explorer
KB KB3163649
Known Exploits No
Microsoft Rating Critical
ISC Client Rating Critical
ISC Server Rating Critical
CVE Exploitability
2016-0199 1
2016-0200 1
2016-0210 1
2016-3202 1
2016-3205 1
2016-3206 1
2016-3207 1
2016-3211 1
2016-3212 3
2016-3213 1
MS16-068
Title Cumulative Security Update for Microsoft Edge
Replaces KB3156387, KB3156421
Affected Edge
KB KB3163656
Known Exploits No
Microsoft Rating Critical
ISC Client Rating Critical
ISC Server Rating Critical
CVE Exploitability
2016-3198 1
2016-3199 1
2016-3201 1
2016-3202 1
2016-3203 1
2016-3214 1
2016-3215 1
2016-3222 1
MS16-069
Title Cumulative Security Update for JScript and VBScript
Replaces MS16-053
Affected Jscript, VBscript
KB KB3163640
Known Exploits No
Microsoft Rating Critical
ISC Client Rating Critical
ISC Server Rating Critical
CVE Exploitability
2016-3205 1
2016-3206 1
2016-3207 1
MS16-070
Title Security Update for Microsoft Office
Replaces MS16-004, MS16-042, MS16-054
Affected Office
KB KB3164065
Known Exploits No
Microsoft Rating Critical
ISC Client Rating Patch now
ISC Server Rating Less urgent
CVE Exploitability
2016-0025 1
2016-3233 1
2016-3234 2
2016-3235 2
MS16-071
Title Security Update for Microsoft Windows DNS Server
Replaces MS15-127
Affected DNS Server
KB KB3164065
Known Exploits No
Microsoft Rating Critical
ISC Client Rating N/A
ISC Server Rating Critical
CVE Exploitability
2016-3227 2
MS16-072
Title Security Update for Group Policy
Replaces KB3156387, KB3156421
Affected Active Directory
KB KB3163622
Known Exploits No
Microsoft Rating Important
ISC Client Rating Important
ISC Server Rating Critical
CVE Exploitability
2016-3223 2
MS16-073
Title Security Update for Windows Kernel-Mode Drivers
Replaces MS16-062, KB3156387, KB3156387, KB3156421, KB3156421
Affected Kernel
KB KB3164028
Known Exploits No
Microsoft Rating Important
ISC Client Rating Important
ISC Server Rating Important
CVE Exploitability
2016-3218 1
2016-3221 1
2016-3232 2
MS16-074
Title Security Update for Microsoft Graphics Component
Replaces MS16-026, MS16-055, KB3156387, KB3156421
Affected Windows Graphics and Fonts
KB KB3164036
Known Exploits No
Microsoft Rating Important
ISC Client Rating Important
ISC Server Rating Important
CVE Exploitability
2016-3216 2
2016-3219 2
2016-3220 1
MS16-075
Title Security Update for Windows SMB Server
Replaces MS15-052, MS15-122, MS16-007, KB3135173, KB3135174
Affected Windows SMB Server
KB KB3164038
Known Exploits No
Microsoft Rating Important
ISC Client Rating Important
ISC Server Rating Important
CVE Exploitability
2016-3225 3
MS16-076
Title Security Update for Netlogon
Replaces MS15-122, MS16-007
Affected Netlogon
KB KB3167691
Known Exploits No
Microsoft Rating Important
ISC Client Rating Important
ISC Server Rating Important
CVE Exploitability
2016-3228 2
MS16-077
Title Security Update for WPAD
Replaces KB3156387, KB3156421
Affected Internet Explorer WPAD
KB KB3165191
Known Exploits No
Microsoft Rating Important
ISC Client Rating Important
ISC Server Rating Important
CVE Exploitability
2016-3213 1
2016-3236 1
MS16-078
Title Security Update for Windows Diagnostic Hub
Replaces KB3156387, KB3156421
Affected Windows Diagnostic Hub
KB KB3165479
Known Exploits No
Microsoft Rating Important
ISC Client Rating Important
ISC Server Rating Important
CVE Exploitability
2016-3231 1
MS16-079
Title Security Update for Microsoft Exchange Server
Replaces MS14-075, MS16-010
Affected Exchange Server and OWA
KB KB3160339
Known Exploits No
Microsoft Rating Important
ISC Client Rating N/A
ISC Server Rating Important
CVE Exploitability
2016-0028 3
MS16-080
Title Security Update for Microsoft Windows PDF
Replaces MS16-028, KB3156387, KB3156421
Affected Windows PDF
KB KB3164302
Known Exploits No
Microsoft Rating Important
ISC Client Rating Important
ISC Server Rating Important
CVE Exploitability
2016-3201 2
2016-3203 2
2016-3215 2
MS16-081
Title Security Update for Active Directory
Replaces MS13-032
Affected Active Directory
KB KB3160352
Known Exploits No
Microsoft Rating Important
ISC Client Rating Important
ISC Server Rating Important
CVE Exploitability
2016-3226 3
MS16-082
Title Security Update for Microsoft Windows Search Component
Replaces KB3156387, KB3156421
Affected Windows Search and Structured Query
KB KB3165270
Known Exploits No
Microsoft Rating Important
ISC Client Rating Important
ISC Server Rating Important
CVE Exploitability
2016-3230 3
MS16-083
Title Security Update for Adobe Flash Player
Replaces
Affected Flash Player
KB KB3167685
Known Exploits No
Microsoft Rating Critical
ISC Client Rating Patch now
ISC Server Rating Important
CVE Exploitability
We will update issues on this page for about a week or so as they evolve. We appreciate your updates!
US based customers can call Microsoft for free patch related support on 1-866-PCSAFETY
(*): ISC rating
  • We use 4 levels:
    • PATCH NOW: Typically used where we see immediate danger of exploitation. Typical environments will want to deploy these patches ASAP. Workarounds are typically not accepted by users or are not possible. This rating is often used when typical deployments make it vulnerable and exploits are being used or easy to obtain or make.
    • Critical: Anything that needs little to become "interesting" for the dark side. Best approach is to test and deploy ASAP. Workarounds can give more time to test.
    • Important: Things where more testing and other measures can help.
    • Less Urgent: practices for servers such as not using outlook, MSIE, word etc. to do traditional office or leisure work.
    • The rating is not a risk analysis as such. It is a rating of importance of the vulnerability and the perceived or even predicted threatatches.