Microsoft security update for CVE-2016-3288 — Internet Explorer 11 on Windows
🔗 CVE IDs covered (1)
📋 Microsoft's advisory
EchelonGraph does not copy Microsoft's advisory page: its FAQ and remediation text are not shown here. Read the advisory on https://msrc.microsoft.com/update-guide/vulnerability/CVE-2016-3288. This page also shows what EchelonGraph holds for CVE-2016-3288, with the description from its CVE record, which the CVE Numbering Authority that assigned the CVE wrote: for a CVE Microsoft assigned, often in the words of Microsoft's own advisory.
🎯 Affected products13
- Internet Explorer 11 on Windows 10 Version 1511 for 32-bit Systems
- Internet Explorer 11 on Windows 10 Version 1511 for x64-based Systems
- Internet Explorer 11 on Windows 10 Version 1607 for 32-bit Systems
- Internet Explorer 11 on Windows 10 Version 1607 for x64-based Systems
- Internet Explorer 11 on Windows 10 for 32-bit Systems
- Internet Explorer 11 on Windows 10 for x64-based Systems
- Internet Explorer 11 on Windows 7 for 32-bit Systems Service Pack 1
- Internet Explorer 11 on Windows 7 for x64-based Systems Service Pack 1
- Internet Explorer 11 on Windows 8.1 for 32-bit systems
- Internet Explorer 11 on Windows 8.1 for x64-based systems
- Internet Explorer 11 on Windows RT 8.1
- Internet Explorer 11 on Windows Server 2008 R2 for x64-based Systems Service Pack 1
- Internet Explorer 11 on Windows Server 2012 R2
✅ Updates Microsoft lists: 3 KB articles and 5 other updates
8 rows: one per KB article or update, update type and fixed build. Their details are on Microsoft's advisory.
| KB article | Update | Fixed build |
|---|---|---|
| — | Security Update | — |
| — | Security Update | — |
| — | Security Update | — |
| — | Security Update | — |
| — | Security Update | — |
| KB3176492 | Security Update | — |
| KB3176493 | Security Update | — |
| KB3176495 | Security Update | — |
🧭 EchelonGraph on CVE-2016-3288
- EchelonGraph score
- 7.9 HIGH
- CISA KEV
- Not listed
- Fix status
- A fix is available — apply it.
Description from the CVE record (CVE.org), as published by its numbering authority
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code via a crafted web page, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3290.
Published by Microsoft Corporation, the CVE Numbering Authority that assigned CVE-2016-3288, in its CVE record at CVE.org; reused under the CVE Program's Terms of Use (its licence and MITRE's copyright notice are in our Terms of Service).
🔗 References (8)
- advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2016-3288
- patchhttps://www.microsoft.com/downloads/details.aspx?familyid=693dcdd8-0bc1-4940-817d-72e6769f9919
- patchhttps://www.microsoft.com/downloads/details.aspx?familyid=c8f97de6-30ce-40d5-8cb7-ec6166ed59bb
- patchhttps://www.microsoft.com/downloads/details.aspx?familyid=8c8d3d32-ed7a-4e2e-8c4b-1f1ba81771f6
- patchhttps://www.microsoft.com/downloads/details.aspx?familyid=1385662a-0bca-4de8-bb89-fbf7eccc2e2e
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176492
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176493
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3176495