Microsoft · Security update · August 9, 2016

KB3176495: August 2016 cumulative update for Windows 10 1607

KB3176495, released August 9, 2016, fixes 15 CVEs across 6 products. One of them is being exploited (CVE-2016-3309); 1 on CISA KEV. Patch Radar priority: Patch now.

Patch now1 on CISA KEVKnown ransomware use

CVEs closed

8 rated Critical

Exploited

CVE-2016-3309

Exploitation more likely

Microsoft's assessment

Highest EPSS

0.4627

98th percentile

Priority of the 15 CVEs

Patch now 1
                                Urgent 12
                                High 0
                                Routine 2

Applies to

Product	Build after install
Internet Explorer 11 on Windows 10 Version 1607 for 32-bit Systems	14393.51
Internet Explorer 11 on Windows 10 Version 1607 for x64-based Systems	14393.51
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for 32-bit Systems	14393.51
Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for x64-based Systems	14393.51
Windows 10 Version 1607 for 32-bit Systems	14393.51
Windows 10 Version 1607 for x64-based Systems	14393.51

CVEs this fix closes

Priority	CVE	Component	Impact	CVSS	EPSS	Exploitation
Patch now	CVE-2016-3309	Windows Kernel-Mode Drivers	Elevation of Privilege	n/a	0.2047	KEVRansomwareExploited
Urgent	CVE-2016-3288	Internet Explorer	Remote Code Execution	7.1	0.4627	More likely
Urgent	CVE-2016-3301	Microsoft Graphics Component	Remote Code Execution	8.8	0.4449	More likely
Urgent	CVE-2016-3321	Internet Explorer	Information Disclosure	2.6	0.3795	More likely
Urgent	CVE-2016-3319	Microsoft Windows PDF	Remote Code Execution	4.2	0.1854	Exploitation Less Likely
Urgent	CVE-2016-3289	Microsoft Browsers	Remote Code Execution	7.1	0.1770	More likely
Urgent	CVE-2016-3290	Internet Explorer	Remote Code Execution	7.1	0.1643	More likely
Urgent	CVE-2016-3296	Microsoft Edge	Remote Code Execution	4.2	0.1487	More likely
Urgent	CVE-2016-3293	Microsoft Browsers	Remote Code Execution	7.1	0.1473	More likely
Urgent	CVE-2016-3322	Microsoft Browsers	Remote Code Execution	7.1	0.1451	More likely
Urgent	CVE-2016-3308	Windows Kernel-Mode Drivers	Elevation of Privilege	n/a	0.0642	More likely
Urgent	CVE-2016-3310	Windows Kernel-Mode Drivers	Elevation of Privilege	n/a	0.0263	More likely
Urgent	CVE-2016-3311	Windows Kernel-Mode Drivers	Elevation of Privilege	n/a	0.0153	More likely
Routine	CVE-2016-3327	Microsoft Browsers	Information Disclosure	6.4	0.1592	Exploitation Less Likely
Routine	CVE-2016-3329	Microsoft Browsers	Information Disclosure	6.4	0.1592	Exploitation Unlikely

Released the same day

KB3114456
Microsoft OneNote 2007 Service Pack 3
KB3114869
Microsoft Office 2010 Service Pack 2 (32-bit editions), Microsoft Office 2010 Service Pack 2 (64-bit editions)
KB3114885
Microsoft OneNote 2010 Service Pack 2 (32-bit editions), Microsoft OneNote 2010 Service Pack 2 (64-bit editions)
KB3114893
Microsoft Office 2007 Service Pack 3
KB3115109
Microsoft Office 2007 Service Pack 3
KB3115131
Microsoft Office 2010 Service Pack 2 (32-bit editions), Microsoft Office 2010 Service Pack 2 (64-bit editions)
KB3115256
Microsoft OneNote 2013 RT Service Pack 1, Microsoft OneNote 2013 Service Pack 1 (32-bit editions), Microsoft OneNote 2013 Service Pack 1 (64-bit editions)
KB3115408
Skype for Business 2016 (32-bit), Skype for Business 2016 (64-bit), Skype for Business 2016 Basic (32-bit) and 1 more
KB3115415
Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition)
KB3115419
Microsoft OneNote 2016 (32-bit edition), Microsoft OneNote 2016 (64-bit edition)
KB3115427
Microsoft Office 2013 RT Service Pack 1, Microsoft Office 2013 Service Pack 1 (32-bit editions), Microsoft Office 2013 Service Pack 1 (64-bit editions)
KB3115431
Microsoft Lync 2013 Service Pack 1 (32-bit), Microsoft Lync 2013 Service Pack 1 (64-bit), Microsoft Lync Basic 2013 Service Pack 1 (32-bit) and 1 more

Vendor advisory

https://support.microsoft.com/help/3176495

For tools and AI agents

This page as data: JSON · Markdown

Link to this page

If this page saved you time, a link to it in your ticket, advisory or write-up helps others find it.

HTML

<a href="https://patchblox.com/security/fix/microsoft/kb3176495">KB3176495 on Patchblox Patch Radar</a>

Reusing the data? How to credit Patch Radar.

Which machines still need it?

Patchblox reads the OS build on every Windows machine, from Intune, ConfigMgr or its own agent, and shows which ones are still below the fixed build.

Get a demo

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.