Microsoft · Security update · April 12, 2016

KB3147458: April 2016 cumulative update for Windows 10 1511

KB3147458, released April 12, 2016, fixes 16 CVEs across 8 products. 3 of them are being exploited (CVE-2016-0151); 3 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now3 on CISA KEVKnown ransomware use3 publicly disclosedUnsupported product

CVEs closed

6 rated Critical

Exploited

CVE-2016-0151

Exploitation more likely

Microsoft's assessment

Highest EPSS

0.6809

99th percentile

Priority of the 16 CVEs

Patch now 3
                                Urgent 8
                                High 4
                                Routine 1

Applies to

Product	Build after install
Internet Explorer 11 on Windows 10 Version 1511 for 32-bit Systems	10586.218
Internet Explorer 11 on Windows 10 Version 1511 for x64-based Systems	10586.218
Microsoft .NET Framework 3.5 on Windows 10 Version 1511 for 32-bit Systems	10586.218
Microsoft .NET Framework 3.5 on Windows 10 Version 1511 for x64-based Systems	10586.218
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1511 for 32-bit Systems	10586.218
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1511 for x64-based Systems	10586.218
Windows 10 Version 1511 for 32-bit Systems	10586.218
Windows 10 Version 1511 for x64-based Systems	10586.218

CVEs this fix closes

Priority	CVE	Component	Impact	CVSS	EPSS	Exploitation
Patch now	CVE-2016-0151	CSRSS	Security Feature Bypass	n/a	0.6282	KEVRansomwareExploited
Patch now	CVE-2016-0165	Microsoft Graphics Component	Elevation of Privilege	7.8	0.1368	KEVExploited
Patch now	CVE-2016-0167	Microsoft Graphics Component	Elevation of Privilege	n/a	0.0566	KEVRansomwareExploited
Urgent	CVE-2016-0145	Microsoft Graphics Component	Remote Code Execution	n/a	0.4084	Exploitation Less Likely
Urgent	CVE-2016-0156	Microsoft Edge	Remote Code Execution	n/a	0.1872	More likely
Urgent	CVE-2016-0166	Internet Explorer	Remote Code Execution	n/a	0.1551	More likely
Urgent	CVE-2016-0157	Microsoft Edge	Remote Code Execution	n/a	0.1539	More likely
Urgent	CVE-2016-0158	Microsoft Edge	Elevation of Privilege	n/a	0.1472	More likely
Urgent	CVE-2016-0154	Microsoft Browsers	Remote Code Execution	n/a	0.1388	More likely
Urgent	CVE-2016-0155	Microsoft Edge	Remote Code Execution	n/a	0.1007	More likely
Urgent	CVE-2016-0143	Microsoft Graphics Component	Elevation of Privilege	n/a	0.0334	More likely
High	CVE-2016-0150	HTTP.sys	Denial of Service	n/a	0.2801	Exploitation Unlikely
High	CVE-2016-0128	SAM and LSAD Remote Protocols	Elevation of Privilege	n/a	0.2080	DisclosedExploitation Unlikely
High	CVE-2016-0160	Internet Explorer	Remote Code Execution	n/a	0.1294	DisclosedExploitation Less Likely
High	CVE-2016-0135	Secondary Logon	Elevation of Privilege	n/a	0.0154	DisclosedExploitation Less Likely
Routine	CVE-2016-0161	Microsoft Edge	Elevation of Privilege	n/a	0.6809	Exploitation Unlikely

Released the same day

KB3114542
Microsoft Office 2007 Service Pack 3, Microsoft Word 2007 Service Pack 3
KB3114566
Microsoft Office 2010 Service Pack 2 (32-bit editions), Microsoft Office 2010 Service Pack 2 (64-bit editions), Microsoft Word 2010 Service Pack 2 (32-bit editions) and 1 more
KB3114871
Excel Services on Microsoft Sharepoint Server 2010 Service Pack 2 Bad
KB3114888
Microsoft Excel 2010 Service Pack 2 (32-bit editions), Microsoft Excel 2010 Service Pack 2 (64-bit editions)
KB3114892
Microsoft Excel 2007 Service Pack 3
KB3114895
Microsoft Office Compatibility Pack Service Pack 3
KB3114897
Excel Services on Microsoft SharePoint Server 2007 Service Pack 3 (32-bit editions), Excel Services on Microsoft SharePoint Server 2007 Service Pack 3 (64-bit editions)
KB3114898
Microsoft Excel Viewer
KB3114927
Word Automation Services on Microsoft SharePoint Server 2013 Service Pack 1
KB3114934
Microsoft Office Web Apps Server 2013 Service Pack 1
KB3114937
Microsoft Word 2013 RT Service Pack 1, Microsoft Word 2013 Service Pack 1 (32-bit editions), Microsoft Word 2013 Service Pack 1 (64-bit editions)
KB3114944
Microsoft Lync 2013 Service Pack 1 (32-bit), Microsoft Lync 2013 Service Pack 1 (64-bit), Microsoft Lync Basic 2013 Service Pack 1 (32-bit) and 1 more

Vendor advisory

https://support.microsoft.com/help/3147458

For tools and AI agents

This page as data: JSON · Markdown

Link to this page

If this page saved you time, a link to it in your ticket, advisory or write-up helps others find it.

HTML

<a href="https://patchblox.com/security/fix/microsoft/kb3147458">KB3147458 on Patchblox Patch Radar</a>

Reusing the data? How to credit Patch Radar.

Which machines still need it?

Patchblox reads the OS build on every Windows machine, from Intune, ConfigMgr or its own agent, and shows which ones are still below the fixed build.

Get a demo

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.