Microsoft · Security update · July 12, 2016

KB3172985: July 2016 cumulative update for Windows 10 1511

KB3172985, released July 12, 2016, fixes 31 CVEs across 10 products. None of them is reported as exploited. Patch Radar priority: Urgent. The product is no longer supported.

Urgent2 publicly disclosedUnsupported product

CVEs closed

6 rated Critical

Exploited

None reported

Exploitation more likely

Microsoft's assessment

Highest EPSS

0.5807

99th percentile

Priority of the 31 CVEs

Patch now 0
                                Urgent 16
                                High 6
                                Routine 9

Applies to

Product	Build after install
Internet Explorer 11 on Windows 10 Version 1511 for 32-bit Systems	10586.494
Internet Explorer 11 on Windows 10 Version 1511 for x64-based Systems	10586.494
Microsoft .NET Framework 3.5 on Windows 10 Version 1511 for 32-bit Systems	10586.494
Microsoft .NET Framework 3.5 on Windows 10 Version 1511 for x64-based Systems	10586.494
Microsoft .NET Framework 4.6.1 on Windows 10 Version 1511 for 32-bit Systems	10586.494
Microsoft .NET Framework 4.6.1 on Windows 10 Version 1511 for x64-based Systems	10586.494
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1511 for 32-bit Systems	10586.494
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1511 for x64-based Systems	10586.494
Windows 10 Version 1511 for 32-bit Systems	10586.494
Windows 10 Version 1511 for x64-based Systems	10586.494

CVEs this fix closes

Priority	CVE	Component	Impact	CVSS	EPSS	Exploitation
Urgent	CVE-2016-3259	Microsoft Browsers	Remote Code Execution	6.0	0.3479	More likely
Urgent	CVE-2016-3260	Microsoft Browsers	Remote Code Execution	7.1	0.2384	More likely
Urgent	CVE-2016-3248	Microsoft Browsers	Remote Code Execution	6.0	0.2374	More likely
Urgent	CVE-2016-3269	Microsoft Edge	Remote Code Execution	n/a	0.2145	None reported
Urgent	CVE-2016-3265	Microsoft Edge	Remote Code Execution	n/a	0.2073	More likely
Urgent	CVE-2016-3204	Internet Explorer	Remote Code Execution	7.1	0.1893	None reported
Urgent	CVE-2016-3264	Microsoft Browsers	Remote Code Execution	n/a	0.1451	More likely
Urgent	CVE-2016-3246	Microsoft Edge	Remote Code Execution	4.2	0.1412	More likely
Urgent	CVE-2016-3242	Internet Explorer	Remote Code Execution	6.0	0.1385	More likely
Urgent	CVE-2016-3241	Internet Explorer	Remote Code Execution	6.0	0.1347	More likely
Urgent	CVE-2016-3243	Internet Explorer	Remote Code Execution	6.0	0.1347	More likely
Urgent	CVE-2016-3252	Windows Kernel-Mode Drivers	Elevation of Privilege	7.8	0.0383	More likely
Urgent	CVE-2016-3249	Windows Kernel-Mode Drivers	Elevation of Privilege	7.8	0.0253	More likely
Urgent	CVE-2016-3286	Windows Kernel-Mode Drivers	Elevation of Privilege	7.8	0.0253	More likely
Urgent	CVE-2016-3287	Secure Boot	Security Feature Bypass	6.2	0.0149	DisclosedMore likely
Urgent	CVE-2016-3254	Windows Kernel-Mode Drivers	Elevation of Privilege	7.8	0.0143	More likely
High	CVE-2016-3255	.NET Framework	Information Disclosure	n/a	0.2467	Exploitation Unlikely
High	CVE-2016-3271	Microsoft Edge	Information Disclosure	n/a	0.2087	Exploitation Less Likely
High	CVE-2016-3261	Internet Explorer	Information Disclosure	n/a	0.1508	Exploitation Less Likely
High	CVE-2016-3276	Microsoft Browsers	Spoofing	n/a	0.0817	Exploitation Less Likely
High	CVE-2016-3250	Windows Kernel-Mode Drivers	Elevation of Privilege	7.8	0.0253	Exploitation Unlikely
High	CVE-2016-3239	Windows Print Spooler Components	Elevation of Privilege	7.8	0.0138	Exploitation Less Likely
Routine	CVE-2016-3251	Windows Kernel-Mode Drivers	Information Disclosure	3.3	0.5807	Exploitation Less Likely
Routine	CVE-2016-3272	Windows Kernel	Information Disclosure	3.1	0.4328	DisclosedExploitation Less Likely
Routine	CVE-2016-3277	Microsoft Browsers	Information Disclosure	4.3	0.3220	Exploitation Less Likely

Released the same day

KB3115114
Microsoft Excel Viewer 2007 Service Pack 3
KB3115118
Microsoft PowerPoint 2010 Service Pack 2 (32-bit editions), Microsoft PowerPoint 2010 Service Pack 2 (64-bit editions)
KB3115246
Microsoft Outlook 2010 Service Pack 2 (32-bit editions), Microsoft Outlook 2010 Service Pack 2 (64-bit editions)
KB3115254
Microsoft PowerPoint 2013 RT Service Pack 1, Microsoft PowerPoint 2013 Service Pack 1 (32-bit editions), Microsoft PowerPoint 2013 Service Pack 1 (64-bit editions)
KB3115259
Microsoft Outlook 2013 RT Service Pack 1, Microsoft Outlook 2013 Service Pack 1 (32-bit editions), Microsoft Outlook 2013 Service Pack 1 (64-bit editions)
KB3115262
Microsoft Excel 2013 RT Service Pack 1, Microsoft Excel 2013 Service Pack 1 (32-bit editions), Microsoft Excel 2013 Service Pack 1 (64-bit editions)
KB3115272
Microsoft Excel 2016 (32-bit edition), Microsoft Excel 2016 (64-bit edition)
KB3115279
Microsoft Outlook 2016 (32-bit edition), Microsoft Outlook 2016 (64-bit edition)
KB3115285
Microsoft SharePoint Server 2013 Service Pack 1 on Word Automation Services
KB3115289
Microsoft Office Web Apps 2013 Service Pack 1
KB3115292
Microsoft Word 2013 RT Service Pack 1, Microsoft Word 2013 Service Pack 1 (32-bit editions), Microsoft Word 2013 Service Pack 1 (64-bit editions)
KB3115299
Microsoft SharePoint Server 2016

Vendor advisory

https://support.microsoft.com/help/3172985

For tools and AI agents

This page as data: JSON · Markdown

Link to this page

If this page saved you time, a link to it in your ticket, advisory or write-up helps others find it.

HTML

<a href="https://patchblox.com/security/fix/microsoft/kb3172985">KB3172985 on Patchblox Patch Radar</a>

Reusing the data? How to credit Patch Radar.

Which machines still need it?

Patchblox reads the OS build on every Windows machine, from Intune, ConfigMgr or its own agent, and shows which ones are still below the fixed build.

Get a demo

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.