Microsoft · Security update · April 12, 2016

KB3146723: April 2016 security update

KB3146723, released April 12, 2016, fixes 1 CVE across 7 products. One of them is being exploited (CVE-2016-0151); 1 on CISA KEV. Patch Radar priority: Patch now.

Patch now1 on CISA KEVKnown ransomware use

CVEs closed

None rated Critical

Exploited

CVE-2016-0151

Exploitation more likely

Microsoft's assessment

Highest EPSS

0.6282

99th percentile

Applies to

Product
Windows 8.1 for 32-bit systems
Windows 8.1 for x64-based systems
Windows RT 8.1
Windows Server 2012
Windows Server 2012 (Server Core installation)
Windows Server 2012 R2
Windows Server 2012 R2 (Server Core installation)

CVEs this fix closes

Priority	CVE	Component	Impact	CVSS	EPSS	Exploitation
Patch now	CVE-2016-0151	CSRSS	Security Feature Bypass	n/a	0.6282	KEVRansomwareExploited

Released the same day

KB3114542
Microsoft Office 2007 Service Pack 3, Microsoft Word 2007 Service Pack 3
KB3114566
Microsoft Office 2010 Service Pack 2 (32-bit editions), Microsoft Office 2010 Service Pack 2 (64-bit editions), Microsoft Word 2010 Service Pack 2 (32-bit editions) and 1 more
KB3114871
Excel Services on Microsoft Sharepoint Server 2010 Service Pack 2 Bad
KB3114888
Microsoft Excel 2010 Service Pack 2 (32-bit editions), Microsoft Excel 2010 Service Pack 2 (64-bit editions)
KB3114892
Microsoft Excel 2007 Service Pack 3
KB3114895
Microsoft Office Compatibility Pack Service Pack 3
KB3114897
Excel Services on Microsoft SharePoint Server 2007 Service Pack 3 (32-bit editions), Excel Services on Microsoft SharePoint Server 2007 Service Pack 3 (64-bit editions)
KB3114898
Microsoft Excel Viewer
KB3114927
Word Automation Services on Microsoft SharePoint Server 2013 Service Pack 1
KB3114934
Microsoft Office Web Apps Server 2013 Service Pack 1
KB3114937
Microsoft Word 2013 RT Service Pack 1, Microsoft Word 2013 Service Pack 1 (32-bit editions), Microsoft Word 2013 Service Pack 1 (64-bit editions)
KB3114944
Microsoft Lync 2013 Service Pack 1 (32-bit), Microsoft Lync 2013 Service Pack 1 (64-bit), Microsoft Lync Basic 2013 Service Pack 1 (32-bit) and 1 more

Vendor advisory

https://support.microsoft.com/help/3146723

For tools and AI agents

This page as data: JSON · Markdown

Link to this page

If this page saved you time, a link to it in your ticket, advisory or write-up helps others find it.

HTML

<a href="https://patchblox.com/security/fix/microsoft/kb3146723">KB3146723 on Patchblox Patch Radar</a>

Reusing the data? How to credit Patch Radar.

Which machines still need it?

Patchblox reads the OS build on every Windows machine, from Intune, ConfigMgr or its own agent, and shows which ones are still below the fixed build.

Get a demo

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.