MicrosoftKB3192887MS16-118: Cumulative security update for Internet Explorer: October 11, 2016
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
<html><body><p>Resolves vulnerabilities in Internet Explorer that could allow remote code execution if a user views a specially crafted webpage by using Internet Explorer. An attacker who successfully exploits the vulnerabilities could gain the same user rights as the current user.</p><h2>Summary</h2><div>This security update resolves several reported vulnerabilities in Internet Explorer. These vulnerabilities could allow remote code execution if a user views a specially crafted webpage in Internet Explorer. To learn more about these vulnerabilities, see <a href=“https://technet.microsoft.com/library/security/ms16-118” target=“_self”>Microsoft Security Bulletin MS16-118</a>.<span></span></div><h2>How to get and install the update</h2><div><h3>Method 1: Microsoft Update</h3><div>This update is available through Microsoft Update. When you turn on automatic updating, this update will be downloaded and installed automatically. For more information about how to get security updates automatically, see the “Turn on automatic updating in Control Panel” section of <a href=“https://www.microsoft.com/en-us/safety/pc-security/updates.aspx” target=“_self”>this Safety & Security Center article</a>. <br /><br /><span>Note</span> For Windows RT and Windows RT 8.1, this update is available through Microsoft Update only.</div><h3>Method 2: Microsoft Update Catalog</h3>To get the stand-alone package for this update, go to the <a href=“http://catalog.update.microsoft.com/v7/site/search.aspx?q=kb3192887” target=“_self”>Microsoft Update Catalog</a> website.<br /><br /><h3>Method 3: Microsoft Download Center</h3>You can get the stand-alone update package through the Microsoft Download Center. See <a href=“https://technet.microsoft.com/library/security/ms16-118” target=“_self”>Microsoft Security Bulletin MS16-118</a> to find the download links for this update. </div><h2>More Information</h2><div>The following articles contain more information about this security update:<ul><li><a href=“https://support.microsoft.com/en-us/help/3191492”>3191492 </a> MS16-118: Security update for Internet Explorer: October 11, 2016</li><li><a href=“https://support.microsoft.com/en-us/help/3192393”>3192393 </a> October 2016 security only quality update for Windows Server 2012</li><li><a href=“https://support.microsoft.com/en-us/help/3192392”>3192392 </a> October 2016 security only quality update for Windows 8.1, and Windows Server 2012 R2</li><li><a href=“https://support.microsoft.com/en-us/help/3192391”>3192391 </a> October 2016 security only quality update for Windows 7 SP1 and Windows Server 2008 R2 SP1</li><li><a href=“https://support.microsoft.com/en-us/help/3185332”>3185332 </a> October 2016 security monthly quality rollup for Windows Server 2012</li><li><a href=“https://support.microsoft.com/en-us/help/3185331”>3185331 </a> October 2016 security monthly quality rollup for Windows 8.1, and Windows Server 2012 R2</li><li><a href=“https://support.microsoft.com/en-us/help/3185330”>3185330 </a> October 2016 security monthly quality rollup for Windows 7 SP1 and Windows Server 2008 R2 SP1</li></ul><br />Additionally, see the following articles for information about the Windows 10, Windows 10 Version 1511, and Windows 10 Version 1607 cumulative updates:<ul><li><a href=“https://support.microsoft.com/en-us/help/3194798”>3194798 </a> Cumulative update for Windows 10 Version 1607 and Windows Server 2016: October 11, 2016</li><li><a href=“https://support.microsoft.com/en-us/help/3192441”>3192441 </a> Cumulative update for Windows 10 Version 1511: October 11, 2016</li><li><a href=“https://support.microsoft.com/en-us/help/3192440”>3192440 </a> Cumulative update for Windows 10: October 11, 2016</li></ul><h3>Known issues in this security update</h3> <br /><br />After you install this security update, System Center Operations Manager (SCOM) Management Console crashes in State view.<br /><br />To resolve this issue for systems running Windows Vista, Windows Server 2008, Windows 7, Windows Server 2008 R2, Windows Server 2012, Windows 8.1, or Windows Server 2012 R2, install the following update:<br /><div><a href=“https://support.microsoft.com/en-us/help/3200006”>3200006 </a> System Center Operations Manager Management Console crashes after you install MS16-118 and MS16-126<br /></div>To resolve this issue for Windows 10 RTM, install the following update:<br /><div><a href=“https://support.microsoft.com/en-us/help/3199125”>3199125 </a> Cumulative Update for Windows 10 RTM: October 18, 2016<br /></div>To resolve this issue for Windows 10 Version 1511, install the following update:<br /><div><a href=“https://support.microsoft.com/en-us/help/3200068”>3200068 </a> Cumulative Update for Windows 10 Version 1511: October 18, 2016<br /></div></div><h2></h2><div><div><div><div><span><span></span></span><span><span>Security update deployment information</span></span></div><div><span><div><h4> Windows Vista (all editions)</h4><span>Reference table</span><br /><br />The following table contains the security update information for this software.<br /><br /><br /><div><table><tr><td><span>Security update file names</span></td><td>For Internet Explorer 9 for all supported 32-bit editions of Windows Vista:<br /><span>IE9-Windows6.0-KB3191492-x86.msu</span></td></tr><tr><td></td><td>For Internet Explorer 9 for all supported x64-based editions of Windows Vista:<br /><span>IE9-Windows6.0-KB3191492-x64.msu</span></td></tr><tr><td><span>Installation switches</span></td><td>See <a href=“https://support.microsoft.com/help/934307” target=“_self”>Microsoft Knowledge Base article 934307</a></td></tr><tr><td><span>Restart requirement</span></td><td>You must restart the system after you apply this security update. </td></tr><tr><td><span>Removal information</span></td><td>WUSA.exe does not support uninstalling updates. To uninstall an update that is installed by WUSA, click <strong>Control Panel</strong>, and then click <span>Security</span>. Under <span>Windows Update</span>, click <strong>View installed updates</strong>, and then select from the list of updates. </td></tr><tr><td><span>File information</span></td><td>See <a href=“https://support.microsoft.com/help/3191492” target=“_self”>Microsoft Knowledge Base article 3191492</a></td></tr><tr><td><span>Registry key verification</span></td><td><span>Note</span> This update does not add a registry key to validate its installation. </td></tr></table></div><h4> Windows Server 2008 (all editions)</h4><span>Reference table</span><br /><br />The following table contains the security update information for this software.<br /><br /><br /><div><table><tr><td><span>Security update file names</span></td><td>For Internet Explorer 9 for all supported 32-bit editions of Windows Server 2008:<br /><span>IE9-Windows6.0-KB3191492-x86.msu</span></td></tr><tr><td></td><td>For Internet Explorer 9 in all supported x64-based editions of Windows Server 2008:<br /><span>IE9-Windows6.0-KB3191492-x64.msu</span></td></tr><tr><td><span>Installation switches</span></td><td>See <a href=“https://support.microsoft.com/help/934307” target=“_self”>Microsoft Knowledge Base article 934307</a></td></tr><tr><td><span>Restart requirement</span></td><td>You must restart the system after you apply this security update. </td></tr><tr><td><span>Removal information</span></td><td>WUSA.exe does not support uninstalling updates. To uninstall an update that is installed by WUSA, click <strong>Control Panel</strong>, and then click <span>Security</span>. Under <span>Windows Update</span>, click <strong>View installed updates</strong>, and then select from the list of updates. </td></tr><tr><td><span>File information</span></td><td>See <a href=“https://support.microsoft.com/help/3191492” target=“_self”>Microsoft Knowledge Base article 3191492</a></td></tr><tr><td><span>Registry key verification</span></td><td><span>Note</span> This update does not add a registry key to validate its installation. </td></tr></table></div><h4> Windows 7 (all editions)</h4><span>Reference table</span><br /><br />The following table contains the security update information for this software.<br /><br /><br /><div><table><tr><td><span>Security update file name</span></td><td>For Internet Explorer 11 for Windows 7 for 32-bit Systems Service Pack 1:<br /><span>IE11-Windows6.1-KB3192391-x86.msu<br /></span>Security Only</td></tr><tr><td></td><td>For Internet Explorer 11 for Windows 7 for 32-bit Systems Service Pack 1:<br /><span>IE11-Windows6.1-KB3185330-x86.msu<br /></span>Monthly Roll-Up</td></tr><tr><td></td><td>For Internet Explorer 11 for Windows 7 for x64-based Systems Service Pack 1:<br /><span>IE11-Windows6.1-KB3192391-x64.msu <br /></span>Security Only</td></tr><tr><td></td><td>For Internet Explorer 11 for Windows 7 for x64-based Systems Service Pack 1:<br /><span>IE11-Windows6.1-KB3185330-x64.msu <br /></span>Monthly Roll-Up</td></tr><tr><td><span>Installation switches</span></td><td>See <a href=“https://support.microsoft.com/help/934307” target=“_self”>Microsoft Knowledge Base article 934307</a></td></tr><tr><td><span>Restart requirement</span></td><td>You must restart the system after you apply this security update. </td></tr><tr><td><span>Removal information</span></td><td>To uninstall an update that is installed by WUSA, use the <span>/Uninstall</span> setup switch or click <strong>Control Panel</strong>, click <strong>System and Security</strong>. Under <strong>Windows Update</strong>, click <strong>View installed updates</strong>, and then select from the list of updates. </td></tr><tr><td><span>File information</span></td><td>See <a href=“https://support.microsoft.com/help/3192391” target=“_self”>Microsoft Knowledge Base article 3192391</a><br />See <a href=“https://support.microsoft.com/help/3185330” target=“_self”>Microsoft Knowledge Base article 3185330</a></td></tr><tr><td><span>Registry key verification</span></td><td><span>Note</span> This update does not add a registry key to validate its installation. </td></tr></table></div><h4> Windows Server 2008 R2 (all editions)</h4><span>Reference table</span><br /><br />The following table contains the security update information for this software.<br /><br /><br /><div><table><tr><td><span>Security update file name</span></td><td>For Internet Explorer 11 for Windows Server 2008 R2 for x64-based Systems Service Pack 1:<br /><span>IE11-Windows6.1-KB3192391-x86.msu<br /></span>Security Only</td></tr><tr><td></td><td>For Internet Explorer 11 for Windows Server 2008 R2 for x64-based Systems Service Pack 1:<br /><span>IE11-Windows6.1-KB3185330-x86.msu<br /></span>Monthly Roll-Up</td></tr><tr><td></td><td>For Internet Explorer 11 for Windows Server 2008 R2 for x64-based Systems Service Pack 1:<br /><span>IE11-Windows6.1- KB3192391-x64.msu <br /></span>Security Only</td></tr><tr><td></td><td>For Internet Explorer 11 for Windows Server 2008 R2 for x64-based Systems Service Pack 1:<br /><span>IE11-Windows6.1- KB3185330-x64.msu <br /></span>Monthly Roll-Up</td></tr><tr><td><span>Installation switches</span></td><td>See <a href=“https://support.microsoft.com/help/934307” target=“_self”>Microsoft Knowledge Base article 934307</a></td></tr><tr><td><span>Restart requirement</span></td><td>You must restart the system after you apply this security update. </td></tr><tr><td><span>Removal information</span></td><td>To uninstall an update that is installed by WUSA, use the <span>/Uninstall</span> setup switch or click <strong>Control Panel</strong>, click <strong>System and Security</strong>. Under <strong>Windows Update</strong>, click <strong>View installed updates</strong>, and then select from the list of updates. </td></tr><tr><td><span>File information</span></td><td>See <a href=“https://support.microsoft.com/help/3192391” target=“_self”>Microsoft Knowledge Base article 3192391</a><br />See <a href=“https://support.microsoft.com/help/3185330” target=“_self”>Microsoft Knowledge Base article 3185330</a></td></tr><tr><td><span>Registry key verification</span></td><td><span>Note</span> This update does not add a registry key to validate its installation. </td></tr></table></div><h4> Windows 8.1 (all editions)</h4><span>Reference table</span><br /><br />The following table contains the security update information for this software.<br /><br /><br /><div><table><tr><td><span>Security update file name</span></td><td>For Internet Explorer 11 in all supported 32-bit editions of Windows 8.1:<br /><span>IE11-Windows6.1-KB3192392-x86.msu<br /></span>Security Only</td></tr><tr><td></td><td>For Internet Explorer 11 in all supported 32-bit editions of Windows 8.1:<br /><span>IE11-Windows6.1-KB3185331-x86.msu<br /></span>Monthly Roll-Up</td></tr><tr><td></td><td>For Internet Explorer 11 in all supported x64-based editions of Windows 8.1:<br /><span>IE11-Windows6.1-KB3192392-x64.msu <br /></span>Security Only</td></tr><tr><td></td><td>For Internet Explorer 11 in all supported x64-based editions of Windows 8.1:<br /><span>IE11-Windows6.1-KB3185331-x64.msu <br /></span>Monthly Roll-Up</td></tr><tr><td><span>Installation switches</span></td><td>See <a href=“https://support.microsoft.com/help/934307” target=“_self”>Microsoft Knowledge Base article 934307</a></td></tr><tr><td><span>Restart requirement</span></td><td>You must restart the system after you apply this security update. </td></tr><tr><td><span>Removal information</span></td><td>To uninstall an update that is installed by WUSA, use the <span>/Uninstall</span> setup switch or click <strong>Control Panel</strong>, click <strong>System and Security</strong>, and then click <strong>Windows Update</strong>. Under <span>See also</span>, click <span>Installed updates</span> and select from the list of updates<span>. </span></td></tr><tr><td><span>File information</span></td><td>See <a href=“https://support.microsoft.com/help/3192392” target=“_self”>Microsoft Knowledge Base article 3192392</a><br />See <a href=“https://support.microsoft.com/help/3185331” target=“_self”>Microsoft Knowledge Base article 3185331</a></td></tr><tr><td><span>Registry key verification</span></td><td><span>Note</span> This update does not add a registry key to validate its installation. </td></tr></table></div><h4> Windows Server 2012 and Windows Server 2012 R2 (all editions)</h4><span>Reference table</span><br /><br />The following table contains the security update information for this software.<br /><br /><br /><div><table><tr><td><span>Security update file name</span></td><td>For Internet Explorer 10 in all supported editions of Windows Server 2012:<br /><span>Windows8-RT-KB3192393-x86.msu<br /></span>Security Only</td></tr><tr><td></td><td>For Internet Explorer 10 in all supported editions of Windows Server 2012:<br /><span>Windows8-RT-KB3185332-x86.msu<br /></span>Monthly Roll-Up</td></tr><tr><td></td><td>For Internet Explorer 11 in all supported editions of Windows Server 2012 R2:<br /><span>Windows8.1-KB3192392-x64.msu <br /></span>Security Only</td></tr><tr><td></td><td>For Internet Explorer 11 in all supported editions of Windows Server 2012 R2:<br /><span>Windows8.1-KB3185331-x64.msu <br /></span>Monthly Roll-Up</td></tr><tr><td><span>Installation switches</span></td><td>See <a href=“https://support.microsoft.com/help/934307” target=“_self”>Microsoft Knowledge Base article 934307</a></td></tr><tr><td><span>Restart requirement</span></td><td>You must restart the system after you apply this security update. </td></tr><tr><td><span>Removal information</span></td><td>To uninstall an update that is installed by WUSA, use the <span>/Uninstall</span> setup switch or click <strong>Control Panel</strong>, click <strong>System and Security</strong>, and then click <strong>Windows Update</strong>. Under <span>See also</span>, click <span>Installed updates</span>, and then select from the list of updates. </td></tr><tr><td><span>File information</span></td><td>See <a href=“https://support.microsoft.com/help/3192393” target=“_self”>Microsoft Knowledge Base article 3192393</a><br />See <a href=“https://support.microsoft.com/help/3185332” target=“_self”>Microsoft Knowledge Base article 3185332</a><br />See <a href=“https://support.microsoft.com/help/3192392” target=“_self”>Microsoft Knowledge Base article 3192392</a><br />See <a href=“https://support.microsoft.com/help/3185332” target=“_self”>Microsoft Knowledge Base article 3185332</a></td></tr><tr><td><span>Registry key verification</span></td><td><span>Note</span> This update does not add a registry key to validate its installation. </td></tr></table></div><h4> Windows RT 8.1 (all editions)</h4><span>Reference table</span><br /><br />The following table contains the security update information for this software.<br /><br /><br /><div><table><tr><td><span>Deployment</span></td><td>This update is available via <a href=“http://go.microsoft.com/fwlink/?linkid=21130” target=“_self”>Windows Update</a>. </td></tr><tr><td><span>Restart Requirement</span></td><td>You must restart the system after you apply this security update. </td></tr><tr><td><span>Removal Information</span></td><td>Click <strong>Control Panel</strong>, click <strong>System and Security</strong>, and then click <strong>Windows Update</strong>. Under <span>See also</span>, click <span>Installed updates</span>, and then select from the list of updates. </td></tr><tr><td><span>File information</span></td><td>Not applicable</td></tr></table></div><h4> Windows 10 (all editions)</h4><span>Reference table</span><br /><br />The following table contains the security update information for this software.<br /><br /><br /><div><table><tr><td><span>Security update file name</span></td><td>For all supported 32-bit editions of Windows 10:<br /><span>Windows10.0-KB3192440-x86.msu</span></td></tr><tr><td></td><td>For all supported x64-based editions of Windows 10:<br /><span>Windows10.0-KB</span><span>3192440</span><span>-x64.msu</span></td></tr><tr><td></td><td>For all supported 32-bit editions of Windows 10 Version 1511:<br /><span>Windows10.0-KB3192441-x86.msu</span></td></tr><tr><td></td><td>For all supported x64-based editions of Windows 10 Version 1511:<br /><span>Windows10.0-KB</span><span>3192441</span><span>-x64.msu</span></td></tr><tr><td></td><td>For all supported 32-bit editions of Windows 10 Version 1607:<br /><span>Windows10.0-KB3194798-x86.msu</span></td></tr><tr><td></td><td>For all supported x64-based editions of Windows 10 Version 1607:<br /><span>Windows10.0-KB</span><span>3194798</span><span>-x64.msu</span></td></tr><tr><td><span>Installation switches</span></td><td>See <a href=“https://support.microsoft.com/help/934307” target=“_self”>Microsoft Knowledge Base article 934307</a></td></tr><tr><td><span>Restart requirement</span></td><td>You must restart the system after you apply this security update. </td></tr><tr><td><span>Removal information</span></td><td>To uninstall an update that is installed by WUSA, use the <span>/Uninstall</span> setup switch or click <strong>Control Panel</strong>, click <strong>System and Security</strong>, and then click <strong>Windows Update</strong>. Under <span>See also</span>, click <span>Installed updates</span>, and then select from the list of updates. </td></tr><tr><td><span>File information</span></td><td>See <a href=“https://support.microsoft.com/help/3192440” target=“_self”>Microsoft Knowledge Base article 3192440</a><br />See <a href=“https://support.microsoft.com/help/3192441” target=“_self”>Microsoft Knowledge Base article 3192441</a><br />See <a href=“https://support.microsoft.com/help/3194798” target=“_self”>Microsoft Knowledge Base article 3194798</a></td></tr><tr><td><span>Registry key verification</span></td><td><span>Note</span> This update does not add a registry key to validate its installation.</td></tr></table></div></div><br /></span></div></div></div><div><div><div><span><span></span></span><span><span>How to obtain help and support for this security update</span></span></div><div><span><div>Help for installing updates: <a href=“https://support.microsoft.com/ph/6527” target=“_self”>Support for Microsoft Update</a><br /><br />Security solutions for IT professionals: <a href=“https://technet.microsoft.com/security/bb980617.aspx” target=“_self”>TechNet Security Troubleshooting and Support</a><br /><br />Help for protecting your Windows-based computer from viruses and malware: <a href=“https://support.microsoft.com/contactus/cu_sc_virsec_master” target=“_self”>Virus Solution and Security Center</a><br /><br />Local support according to your country: <a href=“https://www.microsoft.com/en-us/locale.aspx” target=“_self”>International Support</a></div><br /></span></div></div></div></div><h2>References</h2><div>Learn about the <a href=“https://support.microsoft.com/help/824684” target=“_self”>terminology</a> that Microsoft uses to describe software updates.</div></body></html>
Related
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C