Lucene search

K
mskbMicrosoftKB3159398
HistoryJun 14, 2016 - 7:00 a.m.

MS16-072: Description of the security update for Group Policy: June 14, 2016

2016-06-1407:00:00
Microsoft
support.microsoft.com
15

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

7.8 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.02 Low

EPSS

Percentile

88.6%

MS16-072: Description of the security update for Group Policy: June 14, 2016

Summary

This security update resolves a vulnerability in Microsoft Windows. The vulnerability could allow elevation of privilege if an attacker launches a man-in-the-middle (MiTM) attack against the traffic passing between a domain controller and the target machine.

To learn more about the vulnerability, see Microsoft Security Bulletin MS16-072.

More Information

Important

  • All future security and non-security updates for Windows RT 8.1, Windows 8.1, and Windows Server 2012 R2 require update 2919355 to be installed. We recommend that you install update 2919355 on your Windows RT 8.1-based, Windows 8.1-based, or Windows Server 2012 R2-based computer so that you receive future updates.
  • If you install a language pack after you install this update, you must reinstall this update. Therefore, we recommend that you install any language packs that you need before you install this update. For more information, see Add language packs to Windows.

Known issues

MS16-072 changes the security context with which user group policies are retrieved. This by-design behavior change protects customers’ computers from a security vulnerability. Before MS16-072 is installed, user group policies were retrieved by using the user’s security context. After MS16-072 is installed, user group policies are retrieved by using the computer’s security context. This issue is applicable for the following KB articles:

  • 3159398 MS16-072: Description of the security update for Group Policy: June 14, 2016
  • 3163017 Cumulative update for Windows 10: June 14, 2016
  • 3163018 Cumulative update for Windows 10 Version 1511 and Windows Server 2016 Technical Preview 4: June 14, 2016
  • 3163016 Cumulative Update for Windows Server 2016 Technical Preview 5: June 14 2016

Symptoms

All user Group Policy, including those that have been security filtered on user accounts or security groups, or both, may fail to apply on domain joined computers.

Cause

This issue may occur if the Group Policy Object is missing the Read permissions for the Authenticated Users group or if you are using security filtering and are missing Read permissions for the domain computers group.

Resolution

To resolve this issue, use the Group Policy Management Console (GPMC.MSC) and follow one of the following steps:

  • Add the Authenticated Users group with Read Permissions on the Group Policy Object (GPO).
  • If you are using security filtering, add the Domain Computers group with read permission.

How to obtain and install the update

Method 1: Windows Update

This update is available through Windows Update. When you turn on automatic updating, this update will be downloaded and installed automatically. For more information about how to turn on automatic updating, see
Get security updates automatically.

Note For Windows RT 8.1, this update is available through Windows Update only.

Method 2: Microsoft Download Center

You can obtain the stand-alone update package through the Microsoft Download Center. Follow the installation instructions on the download page to install the update.

Click the download link in Microsoft Security Bulletin MS16-072 that corresponds to the version of Windows that you are running.

More Information

How to obtain help and support for this security update

Help for installing updates: Support for Microsoft Update

Security solutions for IT professionals: TechNet Security Troubleshooting and Support

Help for protecting your Windows-based computer from viruses and malware: Virus Solution and Security Center

Local support according to your country: International Support

File Information

__

File hash information

File name SHA1 hash SHA256 hash
Windows8.1-KB3159398-x64.msu F8E8F71AA74A71071D24C90AF9FF3F5E2A7F75B8 19BF996C955D0FD2CB153F19C373383B8D9C2D38AE225EABB1294478DD321781
Windows8.1-KB3159398-x86.msu 940C8C91B5BEFCA778047D70BA600CE12BBF8904 947BAE51CB37690D58C541FBF05F421EA06280370BC4A8EBC89E0DC1C1258BA5
Windows6.0-KB3159398-x86.msu 70CFEA352CCD8511648F1E3C3DAD1A4D58E7BB1F 24D247ADF5DFC9575120DCD4E6351A172521000CC855621C113697913DC2CC1F
Windows6.1-KB3159398-ia64.msu 24FFF758E5069E4E88914AD4C0E224A529C116D1 C36C9E75517A753102D054DDC3EBF8B991AA36FFBB07FECE37AF5345963C9ACF
Windows6.0-KB3159398-ia64.msu B746FD9E24940EC3D27A09E0C035AC139BD0953F F08731397F1E06CEC0AFB69A3C50522EF16183DC5E1EC6B8A4B231CC5B2A591E
Windows6.0-KB3159398-x64.msu F004DDAF674FE52277CA6D66E31126501505D887 8F9A82DE1951FCD9726CE191CC5387B46C394BCB217A62DC5311C37A759E66B3
Windows6.1-KB3159398-x86.msu C4FA9C67178BEF5DBCBD72CDE2FE94F5126337E5 5D487DC65E12E25DBB914169D4EC884356C915196FD388C982A6521B261B0226
Windows6.1-KB3159398-x64.msu DC2B2C11AF4B38B0B632BD7F6D683D57A93B711C 38E0237AD884CD2C8A4FDF8E59BB7F373F2985B0F1C8A5588575E8B8679CD34F
Windows8-RT-KB3159398-x64.msu A5CE0578667487B375079E85AE08390D1F57782B F842181B456D583A41B0D7967D3311BE1BA9102DFACE8D43AF92A3EBE68C9AEC

__

File information

The English (United States) version of this software update installs files that have the attributes that are listed in the following tables. The dates and times for these files are listed in Coordinated Universal Time (UTC). Be aware that dates and times for these files on your local computer are displayed in your local time and with your current daylight saving time bias. The dates and times may also change when you perform certain operations on the files.Windows 8.1 and Windows Server 2012 R2 file informationNotes

  • The files that apply to a specific product, milestone (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:
    Version| Product| Milestone| Service branch
    β€”|β€”|β€”|β€”
    6.3.960 0.16xxx| Windows RT 8.1, Windows 8.1, and Windows Server 2012 R2| RTM| GDR
    6.3.960 0.17xxx| Windows RT 8.1, Windows 8.1, and Windows Server 2012 R2| RTM| GDR
    6.3.960 0.18xxx| Windows RT 8.1, Windows 8.1, and Windows Server 2012 R2| RTM| GDR

  • GDR service branches contain only those fixes that are widely released to address widespread, critical issues. LDR service branches contain hotfixes in addition to widely released fixes.

  • The MANIFEST files (.manifest) and MUM files (.mum) that are installed are not listed.
    For all supported x64-based versionsFile name| File version| File size| Date| Time| Platform
    β€”|β€”|β€”|β€”|β€”|β€”
    Gpprefcl.dll| 6.3.9600.18339| 678,912| 12-May-2016| 16:24| x64
    Gpapi.dll| 6.3.9600.18339| 135,336| 12-May-2016| 18:38| x64
    Gpsvc.dll| 6.3.9600.18339| 1,360,896| 12-May-2016| 16:07| x64
    Gpscript.dll| 6.3.9600.18339| 39,936| 12-May-2016| 16:12| x64
    Gpscript.exe| 6.3.9600.17415| 35,328| 29-Oct-2014| 01:27| x64
    Fwremotesvr.dll| 6.3.9600.18339| 92,160| 12-May-2016| 16:08| x64
    Ipsecsvc.dll| 6.3.9600.18339| 398,848| 12-May-2016| 15:59| x64
    Ipsecsvc.mof| Not applicable| 1,278| 18-Jun-2013| 14:53| Not applicable
    Polstore.dll| 6.3.9600.18339| 331,776| 12-May-2016| 16:17| x64
    Polstore.mof| Not applicable| 1,275| 18-Jun-2013| 14:53| Not applicable
    Winipsec.dll| 6.3.9600.17415| 102,912| 29-Oct-2014| 01:25| x64
    Winipsec.mof| Not applicable| 1,270| 18-Jun-2013| 14:53| Not applicable
    Gpprefcl.dll| 6.3.9600.18339| 580,096| 12-May-2016| 15:48| x86
    Gpapi.dll| 6.3.9600.18339| 115,704| 12-May-2016| 17:43| x86
    Fwremotesvr.dll| 6.3.9600.18339| 50,176| 12-May-2016| 15:37| x86
    Ipsecsvc.mof| Not applicable| 1,278| 18-Jun-2013| 12:25| Not applicable
    Polstore.dll| 6.3.9600.18339| 291,328| 12-May-2016| 15:43| x86
    Polstore.mof| Not applicable| 1,275| 18-Jun-2013| 12:25| Not applicable
    Winipsec.dll| 6.3.9600.17415| 72,704| 29-Oct-2014| 01:02| x86
    Winipsec.mof| Not applicable| 1,270| 18-Jun-2013| 12:25| Not applicable
    Gpscript.dll| 6.3.9600.18339| 34,304| 12-May-2016| 15:40| x86
    Gpscript.exe| 6.3.9600.17415| 30,720| 29-Oct-2014| 01:04| x86
    For all supported x86-based versionsFile name| File version| File size| Date| Time| Platform
    β€”|β€”|β€”|β€”|β€”|β€”
    Gpprefcl.dll| 6.3.9600.18339| 580,096| 12-May-2016| 15:48| x86
    Gpapi.dll| 6.3.9600.18339| 115,704| 12-May-2016| 17:43| x86
    Gpsvc.dll| 6.3.9600.18339| 1,210,880| 12-May-2016| 15:35| x86
    Gpscript.dll| 6.3.9600.18339| 34,304| 12-May-2016| 15:40| x86
    Gpscript.exe| 6.3.9600.17415| 30,720| 29-Oct-2014| 01:04| x86
    Fwremotesvr.dll| 6.3.9600.18339| 50,176| 12-May-2016| 15:37| x86
    Ipsecsvc.dll| 6.3.9600.18339| 308,736| 12-May-2016| 15:32| x86
    Ipsecsvc.mof| Not applicable| 1,278| 18-Jun-2013| 12:25| Not applicable
    Polstore.dll| 6.3.9600.18339| 291,328| 12-May-2016| 15:43| x86
    Polstore.mof| Not applicable| 1,275| 18-Jun-2013| 12:25| Not applicable
    Winipsec.dll| 6.3.9600.17415| 72,704| 29-Oct-2014| 01:02| x86
    Winipsec.mof| Not applicable| 1,270| 18-Jun-2013| 12:25| Not applicable
    Windows Vista and Windows Server 2008 file informationNotes

  • The files that apply to a specific product, milestone (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:
    Version| Product| Milestone| Service branch
    β€”|β€”|β€”|β€”
    6.0.600 2.19xxx| Windows Vista or Windows Server 2008| SP2| GDR
    6.0.600 2.23xxx| Windows Vista or Windows Server 2008| SP2| LDR

  • GDR service branches contain only those fixes that are widely released to address widespread, critical issues. LDR service branches contain hotfixes in addition to widely released fixes.

  • The MANIFEST files (.manifest) and MUM files (.mum) that are installed are not listed.
    For all supported x86-based versionsFile name| File version| File size| Date| Time| Platform
    β€”|β€”|β€”|β€”|β€”|β€”
    Gpprefcl.dll| 6.0.6002.19657| 638,976| 12-May-2016| 15:34| x86
    Gpprefcl.dll| 6.0.6002.23972| 648,704| 12-May-2016| 15:12| x86
    Gpapi.dll| 6.0.6002.19657| 75,264| 12-May-2016| 15:33| x86
    Gpsvc.dll| 6.0.6002.19657| 582,144| 12-May-2016| 15:34| x86
    Gpapi.dll| 6.0.6002.23972| 75,264| 12-May-2016| 15:12| x86
    Gpsvc.dll| 6.0.6002.23972| 582,656| 12-May-2016| 15:12| x86
    Gpscript.dll| 6.0.6002.19657| 28,672| 12-May-2016| 15:34| x86
    Gpscript.exe| 6.0.6002.19657| 24,064| 12-May-2016| 14:23| x86
    Gpscript.dll| 6.0.6002.23972| 28,672| 12-May-2016| 15:12| x86
    Gpscript.exe| 6.0.6002.23972| 24,064| 12-May-2016| 14:24| x86
    Fwremotesvr.dll| 6.0.6002.19657| 28,672| 12-May-2016| 15:33| x86
    Ipsecsvc.dll| 6.0.6002.19657| 365,056| 12-May-2016| 15:34| x86
    Ipsecsvc.mof| Not applicable| 1,278| 08-Mar-2016| 00:44| Not applicable
    Polstore.dll| 6.0.6002.19657| 273,920| 12-May-2016| 15:34| x86
    Polstore.mof| Not applicable| 1,275| 08-Mar-2016| 00:44| Not applicable
    Winipsec.dll| 6.0.6002.19657| 61,440| 12-May-2016| 15:34| x86
    Winipsec.mof| Not applicable| 1,270| 08-Mar-2016| 00:44| Not applicable
    Fwremotesvr.dll| 6.0.6002.23972| 28,672| 12-May-2016| 15:12| x86
    Ipsecsvc.dll| 6.0.6002.23972| 365,568| 12-May-2016| 15:12| x86
    Ipsecsvc.mof| Not applicable| 1,278| 07-Mar-2016| 23:37| Not applicable
    Polstore.dll| 6.0.6002.23972| 273,920| 12-May-2016| 15:13| x86
    Polstore.mof| Not applicable| 1,275| 07-Mar-2016| 23:37| Not applicable
    Winipsec.dll| 6.0.6002.23972| 61,440| 12-May-2016| 15:13| x86
    Winipsec.mof| Not applicable| 1,270| 07-Mar-2016| 23:37| Not applicable
    For all supported ia64-based versionsFile name| File version| File size| Date| Time| Platform
    β€”|β€”|β€”|β€”|β€”|β€”
    Gpprefcl.dll| 6.0.6002.19657| 1,646,592| 12-May-2016| 15:22| IA-64
    Gpprefcl.dll| 6.0.6002.23972| 1,679,360| 12-May-2016| 15:12| IA-64
    Gpapi.dll| 6.0.6002.19657| 155,136| 12-May-2016| 15:22| IA-64
    Gpsvc.dll| 6.0.6002.19657| 1,289,216| 12-May-2016| 15:22| IA-64
    Gpapi.dll| 6.0.6002.23972| 155,136| 12-May-2016| 15:12| IA-64
    Gpsvc.dll| 6.0.6002.23972| 1,292,288| 12-May-2016| 15:12| IA-64
    Gpscript.dll| 6.0.6002.19657| 62,976| 12-May-2016| 15:22| IA-64
    Gpscript.exe| 6.0.6002.19657| 51,712| 12-May-2016| 14:30| IA-64
    Gpscript.dll| 6.0.6002.23972| 62,976| 12-May-2016| 15:12| IA-64
    Gpscript.exe| 6.0.6002.23972| 51,712| 12-May-2016| 14:31| IA-64
    Fwremotesvr.dll| 6.0.6002.19657| 79,872| 12-May-2016| 15:22| IA-64
    Ipsecsvc.dll| 6.0.6002.19657| 1,208,320| 12-May-2016| 15:22| IA-64
    Ipsecsvc.mof| Not applicable| 1,278| 08-Mar-2016| 00:44| Not applicable
    Polstore.dll| 6.0.6002.19657| 781,824| 12-May-2016| 15:22| IA-64
    Polstore.mof| Not applicable| 1,275| 08-Mar-2016| 00:44| Not applicable
    Winipsec.dll| 6.0.6002.19657| 152,576| 12-May-2016| 15:23| IA-64
    Winipsec.mof| Not applicable| 1,270| 08-Mar-2016| 00:44| Not applicable
    Fwremotesvr.dll| 6.0.6002.23972| 79,872| 12-May-2016| 15:12| IA-64
    Ipsecsvc.dll| 6.0.6002.23972| 1,208,832| 12-May-2016| 15:12| IA-64
    Ipsecsvc.mof| Not applicable| 1,278| 07-Mar-2016| 23:37| Not applicable
    Polstore.dll| 6.0.6002.23972| 781,824| 12-May-2016| 15:12| IA-64
    Polstore.mof| Not applicable| 1,275| 07-Mar-2016| 23:37| Not applicable
    Winipsec.dll| 6.0.6002.23972| 152,576| 12-May-2016| 15:12| IA-64
    Winipsec.mof| Not applicable| 1,270| 07-Mar-2016| 23:37| Not applicable
    Gpprefcl.dll| 6.0.6002.19657| 638,976| 12-May-2016| 15:34| x86
    Gpprefcl.dll| 6.0.6002.23972| 648,704| 12-May-2016| 15:12| x86
    Gpapi.dll| 6.0.6002.19657| 75,264| 12-May-2016| 15:33| x86
    Gpapi.dll| 6.0.6002.23972| 75,264| 12-May-2016| 15:12| x86
    Gpscript.dll| 6.0.6002.19657| 28,672| 12-May-2016| 15:34| x86
    Gpscript.exe| 6.0.6002.19657| 24,064| 12-May-2016| 14:23| x86
    Gpscript.dll| 6.0.6002.23972| 28,672| 12-May-2016| 15:12| x86
    Gpscript.exe| 6.0.6002.23972| 24,064| 12-May-2016| 14:24| x86
    Fwremotesvr.dll| 6.0.6002.19657| 28,672| 12-May-2016| 15:33| x86
    Ipsecsvc.mof| Not applicable| 1,278| 08-Mar-2016| 00:44| Not applicable
    Polstore.dll| 6.0.6002.19657| 273,920| 12-May-2016| 15:34| x86
    Polstore.mof| Not applicable| 1,275| 08-Mar-2016| 00:44| Not applicable
    Winipsec.dll| 6.0.6002.19657| 61,440| 12-May-2016| 15:34| x86
    Winipsec.mof| Not applicable| 1,270| 08-Mar-2016| 00:44| Not applicable
    Fwremotesvr.dll| 6.0.6002.23972| 28,672| 12-May-2016| 15:12| x86
    Ipsecsvc.mof| Not applicable| 1,278| 07-Mar-2016| 23:37| Not applicable
    Polstore.dll| 6.0.6002.23972| 273,920| 12-May-2016| 15:13| x86
    Polstore.mof| Not applicable| 1,275| 07-Mar-2016| 23:37| Not applicable
    Winipsec.dll| 6.0.6002.23972| 61,440| 12-May-2016| 15:13| x86
    Winipsec.mof| Not applicable| 1,270| 07-Mar-2016| 23:37| Not applicable
    Gpscript.dll| 6.0.6002.19657| 28,672| 12-May-2016| 15:34| x86
    Gpscript.exe| 6.0.6002.19657| 24,064| 12-May-2016| 14:23| x86
    Gpscript.dll| 6.0.6002.23972| 28,672| 12-May-2016| 15:12| x86
    Gpscript.exe| 6.0.6002.23972| 24,064| 12-May-2016| 14:24| x86
    For all supported x64-based versionsFile name| File version| File size| Date| Time| Platform
    β€”|β€”|β€”|β€”|β€”|β€”
    Gpprefcl.dll| 6.0.6002.19657| 833,024| 12-May-2016| 15:56| x64
    Gpprefcl.dll| 6.0.6002.23972| 847,872| 12-May-2016| 15:35| x64
    Gpapi.dll| 6.0.6002.19657| 84,480| 12-May-2016| 15:56| x64
    Gpsvc.dll| 6.0.6002.19657| 726,016| 12-May-2016| 15:56| x64
    Gpapi.dll| 6.0.6002.23972| 84,480| 12-May-2016| 15:35| x64
    Gpsvc.dll| 6.0.6002.23972| 726,016| 12-May-2016| 15:35| x64
    Gpscript.dll| 6.0.6002.19657| 30,720| 12-May-2016| 15:56| x64
    Gpscript.exe| 6.0.6002.19657| 25,088| 12-May-2016| 14:48| x64
    Gpscript.dll| 6.0.6002.23972| 30,720| 12-May-2016| 15:35| x64
    Gpscript.exe| 6.0.6002.23972| 25,088| 12-May-2016| 14:49| x64
    Fwremotesvr.dll| 6.0.6002.19657| 50,176| 12-May-2016| 15:56| x64
    Ipsecsvc.dll| 6.0.6002.19657| 534,528| 12-May-2016| 15:56| x64
    Ipsecsvc.mof| Not applicable| 1,278| 08-Mar-2016| 00:45| Not applicable
    Polstore.dll| 6.0.6002.19657| 381,952| 12-May-2016| 15:56| x64
    Polstore.mof| Not applicable| 1,275| 08-Mar-2016| 00:45| Not applicable
    Winipsec.dll| 6.0.6002.19657| 100,864| 12-May-2016| 15:56| x64
    Winipsec.mof| Not applicable| 1,270| 08-Mar-2016| 00:45| Not applicable
    Fwremotesvr.dll| 6.0.6002.23972| 50,176| 12-May-2016| 15:35| x64
    Ipsecsvc.dll| 6.0.6002.23972| 535,040| 12-May-2016| 15:35| x64
    Ipsecsvc.mof| Not applicable| 1,278| 07-Mar-2016| 23:38| Not applicable
    Polstore.dll| 6.0.6002.23972| 381,952| 12-May-2016| 15:35| x64
    Polstore.mof| Not applicable| 1,275| 07-Mar-2016| 23:38| Not applicable
    Winipsec.dll| 6.0.6002.23972| 100,864| 12-May-2016| 15:36| x64
    Winipsec.mof| Not applicable| 1,270| 07-Mar-2016| 23:38| Not applicable
    Gpprefcl.dll| 6.0.6002.19657| 638,976| 12-May-2016| 15:34| x86
    Gpprefcl.dll| 6.0.6002.23972| 648,704| 12-May-2016| 15:12| x86
    Gpapi.dll| 6.0.6002.19657| 75,264| 12-May-2016| 15:33| x86
    Gpapi.dll| 6.0.6002.23972| 75,264| 12-May-2016| 15:12| x86
    Gpscript.dll| 6.0.6002.19657| 28,672| 12-May-2016| 15:34| x86
    Gpscript.exe| 6.0.6002.19657| 24,064| 12-May-2016| 14:23| x86
    Gpscript.dll| 6.0.6002.23972| 28,672| 12-May-2016| 15:12| x86
    Gpscript.exe| 6.0.6002.23972| 24,064| 12-May-2016| 14:24| x86
    Fwremotesvr.dll| 6.0.6002.19657| 28,672| 12-May-2016| 15:33| x86
    Ipsecsvc.mof| Not applicable| 1,278| 08-Mar-2016| 00:44| Not applicable
    Polstore.dll| 6.0.6002.19657| 273,920| 12-May-2016| 15:34| x86
    Polstore.mof| Not applicable| 1,275| 08-Mar-2016| 00:44| Not applicable
    Winipsec.dll| 6.0.6002.19657| 61,440| 12-May-2016| 15:34| x86
    Winipsec.mof| Not applicable| 1,270| 08-Mar-2016| 00:44| Not applicable
    Fwremotesvr.dll| 6.0.6002.23972| 28,672| 12-May-2016| 15:12| x86
    Ipsecsvc.mof| Not applicable| 1,278| 07-Mar-2016| 23:37| Not applicable
    Polstore.dll| 6.0.6002.23972| 273,920| 12-May-2016| 15:13| x86
    Polstore.mof| Not applicable| 1,275| 07-Mar-2016| 23:37| Not applicable
    Winipsec.dll| 6.0.6002.23972| 61,440| 12-May-2016| 15:13| x86
    Winipsec.mof| Not applicable| 1,270| 07-Mar-2016| 23:37| Not applicable
    Gpscript.dll| 6.0.6002.19657| 28,672| 12-May-2016| 15:34| x86
    Gpscript.exe| 6.0.6002.19657| 24,064| 12-May-2016| 14:23| x86
    Gpscript.dll| 6.0.6002.23972| 28,672| 12-May-2016| 15:12| x86
    Gpscript.exe| 6.0.6002.23972| 24,064| 12-May-2016| 14:24| x86
    Windows 7 and Windows Server 2008 R2 file informationNotes

  • The files that apply to a specific product, milestone (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:
    Version| Product| Milestone| Service branch
    β€”|β€”|β€”|β€”
    6.1.760 1.18xxx| Windows 7 or Windows Server 2008 R2| SP1| GDR
    6.1.760 1.23xxx| Windows 7 or Windows Server 2008 R2| SP1| LDR

  • GDR service branches contain only those fixes that are widely released to address widespread, critical issues. LDR service branches contain hotfixes in addition to widely released fixes.

  • The MANIFEST files (.manifest) and MUM files (.mum) that are installed are not listed.
    For all supported ia64-based versionsFile name| File version| File size| Date| Time| Platform
    β€”|β€”|β€”|β€”|β€”|β€”
    Gpprefcl.dll| 6.1.7601.23452| 1,527,296| 12-May-2016| 17:13| IA-64
    Gpapi.dll| 6.1.7601.23452| 168,448| 12-May-2016| 17:13| IA-64
    Gpsvc.dll| 6.1.7601.23452| 1,348,608| 12-May-2016| 17:13| IA-64
    Gpscript.dll| 6.1.7601.23452| 66,048| 12-May-2016| 17:13| IA-64
    Gpscript.exe| 6.1.7601.23452| 53,760| 12-May-2016| 14:53| IA-64
    Fwremotesvr.dll| 6.1.7601.23452| 131,584| 12-May-2016| 17:13| IA-64
    Ipsecsvc.dll| 6.1.7601.23452| 1,220,096| 12-May-2016| 17:13| IA-64
    Ipsecsvc.mof| Not applicable| 1,278| 23-Mar-2016| 22:41| Not applicable
    Polstore.dll| 6.1.7601.23452| 800,768| 12-May-2016| 17:14| IA-64
    Polstore.mof| Not applicable| 1,275| 23-Mar-2016| 22:41| Not applicable
    Winipsec.dll| 6.1.7601.23452| 183,296| 12-May-2016| 17:14| IA-64
    Winipsec.mof| Not applicable| 1,270| 23-Mar-2016| 22:41| Not applicable
    Gpapi.dll| 6.1.7601.23452| 79,360| 12-May-2016| 15:18| x86
    Fwremotesvr.dll| 6.1.7601.23452| 44,032| 12-May-2016| 15:18| x86
    Ipsecsvc.mof| Not applicable| 1,278| 23-Mar-2016| 22:40| Not applicable
    Polstore.dll| 6.1.7601.23452| 274,944| 12-May-2016| 15:18| x86
    Polstore.mof| Not applicable| 1,275| 23-Mar-2016| 22:40| Not applicable
    Winipsec.dll| 6.1.7601.23452| 70,144| 12-May-2016| 15:18| x86
    Winipsec.mof| Not applicable| 1,270| 23-Mar-2016| 22:40| Not applicable
    Gpprefcl.dll| 6.1.7601.23452| 591,872| 12-May-2016| 15:18| x86
    Gpscript.dll| 6.1.7601.23452| 30,720| 12-May-2016| 14:57| x86
    Gpscript.exe| 6.1.7601.23452| 24,576| 12-May-2016| 14:57| x86
    For all supported x86-based versionsFile name| File version| File size| Date| Time| Platform
    β€”|β€”|β€”|β€”|β€”|β€”
    Gpprefcl.dll| 6.1.7601.23452| 591,872| 12-May-2016| 15:18| x86
    Gpapi.dll| 6.1.7601.23452| 79,360| 12-May-2016| 15:18| x86
    Gpsvc.dll| 6.1.7601.23452| 606,720| 12-May-2016| 15:18| x86
    Gpscript.dll| 6.1.7601.23452| 30,720| 12-May-2016| 14:57| x86
    Gpscript.exe| 6.1.7601.23452| 24,576| 12-May-2016| 14:57| x86
    Fwremotesvr.dll| 6.1.7601.23452| 44,032| 12-May-2016| 15:18| x86
    Ipsecsvc.dll| 6.1.7601.23452| 351,744| 12-May-2016| 15:18| x86
    Ipsecsvc.mof| Not applicable| 1,278| 23-Mar-2016| 22:40| Not applicable
    Polstore.dll| 6.1.7601.23452| 274,944| 12-May-2016| 15:18| x86
    Polstore.mof| Not applicable| 1,275| 23-Mar-2016| 22:40| Not applicable
    Winipsec.dll| 6.1.7601.23452| 70,144| 12-May-2016| 15:18| x86
    Winipsec.mof| Not applicable| 1,270| 23-Mar-2016| 22:40| Not applicable
    For all supported x64-based versionsFile name| File version| File size| Date| Time| Platform
    β€”|β€”|β€”|β€”|β€”|β€”
    Gpprefcl.dll| 6.1.7601.23452| 793,088| 12-May-2016| 17:14| x64
    Gpapi.dll| 6.1.7601.23452| 96,256| 12-May-2016| 17:14| x64
    Gpsvc.dll| 6.1.7601.23452| 794,624| 12-May-2016| 17:14| x64
    Gpscript.dll| 6.1.7601.23452| 32,768| 12-May-2016| 17:14| x64
    Gpscript.exe| 6.1.7601.23452| 25,600| 12-May-2016| 15:06| x64
    Fwremotesvr.dll| 6.1.7601.23452| 75,776| 12-May-2016| 17:14| x64
    Ipsecsvc.dll| 6.1.7601.23452| 502,272| 12-May-2016| 17:14| x64
    Ipsecsvc.mof| Not applicable| 1,278| 23-Mar-2016| 22:41| Not applicable
    Polstore.dll| 6.1.7601.23452| 373,760| 12-May-2016| 17:14| x64
    Polstore.mof| Not applicable| 1,275| 23-Mar-2016| 22:41| Not applicable
    Winipsec.dll| 6.1.7601.23452| 105,472| 12-May-2016| 17:15| x64
    Winipsec.mof| Not applicable| 1,270| 23-Mar-2016| 22:41| Not applicable
    Gpprefcl.dll| 6.1.7601.23452| 591,872| 12-May-2016| 15:18| x86
    Gpapi.dll| 6.1.7601.23452| 79,360| 12-May-2016| 15:18| x86
    Gpscript.dll| 6.1.7601.23452| 30,720| 12-May-2016| 14:57| x86
    Gpscript.exe| 6.1.7601.23452| 24,576| 12-May-2016| 14:57| x86
    Fwremotesvr.dll| 6.1.7601.23452| 44,032| 12-May-2016| 15:18| x86
    Ipsecsvc.mof| Not applicable| 1,278| 23-Mar-2016| 22:40| Not applicable
    Polstore.dll| 6.1.7601.23452| 274,944| 12-May-2016| 15:18| x86
    Polstore.mof| Not applicable| 1,275| 23-Mar-2016| 22:40| Not applicable
    Winipsec.dll| 6.1.7601.23452| 70,144| 12-May-2016| 15:18| x86
    Winipsec.mof| Not applicable| 1,270| 23-Mar-2016| 22:40| Not applicable
    Gpprefcl.dll| 6.1.7601.23452| 591,872| 12-May-2016| 15:18| x86
    Gpscript.dll| 6.1.7601.23452| 30,720| 12-May-2016| 14:57| x86
    Gpscript.exe| 6.1.7601.23452| 24,576| 12-May-2016| 14:57| x86
    Windows Server 2012 file informationNotes

  • The files that apply to a specific product, milestone (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:
    Version| Product| Milestone| Service branch
    β€”|β€”|β€”|β€”
    6.2.920 0.17xxx| Windows 8, Windows RT, or Windows Server 2012| RTM| GDR
    6.2.920 0.21xxx| Windows 8, Windows RT, or Windows Server 2012| RTM| LDR

  • GDR service branches contain only those fixes that are widely released to address widespread, critical issues. LDR service branches contain hotfixes in addition to widely released fixes.

  • The MANIFEST files (.manifest) and MUM files (.mum) that are installed are not listed.
    For all supported x64-based versionsFile name| File version| File size| Date| Time| Platform
    β€”|β€”|β€”|β€”|β€”|β€”
    Gpprefcl.dll| 6.2.9200.21872| 822,784| 12-May-2016| 22:15| x64
    Gpapi.dll| 6.2.9200.21872| 109,056| 12-May-2016| 22:15| x64
    Gpsvc.dll| 6.2.9200.21872| 1,254,912| 12-May-2016| 22:15| x64
    Gpscript.dll| 6.2.9200.21872| 38,912| 12-May-2016| 22:15| x64
    Gpscript.exe| 6.2.9200.21872| 33,792| 12-May-2016| 22:16| x64
    Fwremotesvr.dll| 6.2.9200.21872| 90,624| 12-May-2016| 22:15| x64
    Ipsecsvc.dll| 6.2.9200.21872| 476,160| 12-May-2016| 22:15| x64
    Ipsecsvc.mof| Not applicable| 1,278| 02-Jun-2012| 14:32| Not applicable
    Polstore.dll| 6.2.9200.21872| 360,960| 12-May-2016| 22:15| x64
    Polstore.mof| Not applicable| 1,275| 02-Jun-2012| 14:32| Not applicable
    Winipsec.dll| 6.2.9200.16384| 100,864| 26-Jul-2012| 03:07| x64
    Winipsec.mof| Not applicable| 1,270| 02-Jun-2012| 14:32| Not applicable
    Gpprefcl.dll| 6.2.9200.21872| 583,680| 12-May-2016| 22:03| x86
    Gpapi.dll| 6.2.9200.21872| 95,232| 12-May-2016| 22:03| x86
    Fwremotesvr.dll| 6.2.9200.21872| 49,152| 12-May-2016| 22:03| x86
    Ipsecsvc.mof| Not applicable| 1,278| 02-Jun-2012| 14:32| Not applicable
    Polstore.dll| 6.2.9200.21872| 318,464| 12-May-2016| 22:05| x86
    Polstore.mof| Not applicable| 1,275| 02-Jun-2012| 14:32| Not applicable
    Winipsec.dll| 6.2.9200.16384| 76,800| 26-Jul-2012| 03:20| x86
    Winipsec.mof| Not applicable| 1,270| 02-Jun-2012| 14:32| Not applicable
    Gpscript.dll| 6.2.9200.21872| 33,792| 12-May-2016| 22:03| x86
    Gpscript.exe| 6.2.9200.21872| 29,696| 12-May-2016| 22:06| x86

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

7.8 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.02 Low

EPSS

Percentile

88.6%