FYI…
- https://technet.microsoft.com/library/security/ms16-sep
Sep 13, 2016 - "This bulletin summary lists security bulletins released for September 2016…
(Total of -14-)
Microsoft Security Bulletin MS16-104 - Critical
Cumulative Security Update for Internet Explorer (3183038)
- https://technet.microsoft.com/library/security/MS16-104
Critical - Remote Code Execution - Requires restart - Microsoft Windows, Internet Explorer
Microsoft Security Bulletin MS16-105 - Critical
Cumulative Security Update for Microsoft Edge (3183043)
- https://technet.microsoft.com/library/security/MS16-105
Critical - Remote Code Execution - Requires restart - Microsoft Windows, Microsoft Edge
Microsoft Security Bulletin MS16-106 - Critical
Security Update for Microsoft Graphics Component (3185848)
- https://technet.microsoft.com/library/security/MS16-106
Critical - Remote Code Execution - Requires restart - Microsoft Windows
Microsoft Security Bulletin MS16-107 - Critical
Security Update for Microsoft Office (3185852)
- https://technet.microsoft.com/library/security/MS16-107
Critical - Remote Code Execution - May require restart - Microsoft Office, Microsoft Office Services and Web Apps
Microsoft Security Bulletin MS16-108 - Critical
Security Update for Microsoft Exchange Server (3185883)
- https://technet.microsoft.com/library/security/MS16-108
Critical - Remote Code Execution - May require restart - Microsoft Exchange
Microsoft Security Bulletin MS16-109 - Important
Security Update for Silverlight (3182373)
- https://technet.microsoft.com/library/security/MS16-109
Important - Remote Code Execution - Does not require restart - Microsoft Windows
Microsoft Security Bulletin MS16-110 - Important
Security Update for Microsoft Windows (3178467)
- https://technet.microsoft.com/library/security/MS16-110
Important - Remote Code Execution - Requires restart - Microsoft Windows
Microsoft Security Bulletin MS16-111 - Important
Security Update for Windows Kernel (3186973)
- https://technet.microsoft.com/library/security/MS16-111
Important - Elevation of Privilege - Requires restart - Microsoft Windows
Microsoft Security Bulletin MS16-112 - Important
Security Update for Windows Lock Screen (3178469)
- https://technet.microsoft.com/library/security/MS16-112
Important - Elevation of Privilege - Requires restart - Microsoft Windows
Microsoft Security Bulletin MS16-112 - Important
Security Update for Windows Lock Screen (3178469)
- https://technet.microsoft.com/library/security/MS16-112
Important - Elevation of Privilege - Requires restart - Microsoft Windows
Microsoft Security Bulletin MS16-113 - Important
Security Update for Windows Secure Kernel Mode (3185876)
- https://technet.microsoft.com/library/security/MS16-113
Important - Information Disclosure - Requires restart - Microsoft Windows
Microsoft Security Bulletin MS16-114 - Important
Security Update for Windows SMBv1 Server (3185879)
- https://technet.microsoft.com/library/security/MS16-114
Important - Remote Code Execution - Requires restart - Microsoft Windows
Microsoft Security Bulletin MS16-115 - Important
Security Update for Microsoft Windows PDF Library (3188733)
- https://technet.microsoft.com/library/security/MS16-115
Important - Information Disclosure - May require restart - Microsoft Windows
Microsoft Security Bulletin MS16-116 - Critical
Security Update in OLE Automation for VBScript Scripting Engine (3188724)
- https://technet.microsoft.com/library/security/MS16-116
Critical - Remote Code Execution - Requires restart - Microsoft Windows
Microsoft Security Bulletin MS16-117 - Critical
Security Update for Adobe Flash Player (3188128)
- https://technet.microsoft.com/library/security/MS16-117
Critical - Remote Code Execution- Requires restart - Microsoft Windows, Adobe Flash Player
___
MS16-104: http://www.securitytracker.com/id/1036788
MS16-105: http://www.securitytracker.com/id/1036789
MS16-106: http://www.securitytracker.com/id/1036786
MS16-107: http://www.securitytracker.com/id/1036785
MS16-108: http://www.securitytracker.com/id/1036778
MS16-109: http://www.securitytracker.com/id/1036795
MS16-110: http://www.securitytracker.com/id/1036798
MS16-111: http://www.securitytracker.com/id/1036802
MS16-112: http://www.securitytracker.com/id/1036799
MS16-113: http://www.securitytracker.com/id/1036800
MS16-114: http://www.securitytracker.com/id/1036803
___
- https://blogs.technet.microsoft.com/msrc/2016/09/13/september-2016-security-update-release/
Sep 13, 2016
Security Advisories:
Microsoft Security Advisory 3174644
Updated Support for Diffie-Hellman Key Exchange
- https://technet.microsoft.com/library/security/3174644
Sep 13, 2016
Microsoft Security Advisory 3181759
Vulnerabilities in ASP.NET Core View Components Could Allow Elevation of Privilege
- https://technet.microsoft.com/library/security/3181759
Sep 13, 2016
Sep 2016 Office Update Release
- https://blogs.technet.microsoft.com/office_sustained_engineering/2016/09/13/september-2016-office-update-release/
Sep 13, 2016 - "… This month, there are -34- security updates (1 bulletin) and 35 non-security updates.
Security bulletins:
MS16-107: https://technet.microsoft.com/en-us/library/security/ms16-107.aspx
All of the security and non-security updates for September are listed in KB article 3188548:
> http://support.microsoft.com/kb/3188548
A new version of Office 2013 Click-To-Run is available: 15.0.4859.1002
A new version of Office 2010 Click-To-Run is available: 14.0.7173.5001
For information on Office 365 Click-To-Run updates, see Office 365 client update branch releases:
- https://technet.microsoft.com/en-us/mt465751
___
ISC Analysis: https://isc.sans.edu/mspatchdays.html?viewday=2016-09-13
Qualys Analysis: https://blog.qualys.com/laws-of-vulnerabilities/2016/09/13/large-microsoft-patch-tuesday-update-for-august-2016
"… 14 security bulletins that affect a host of components including desktop operating systems, servers, browsers, Exchange server, Silverlight, SMBv1 and several others. It’s a large update that will keep desktop as well as server administrators busy. Seven updates are rated as critical, while the other seven are rated as Important. One 0-day vulnerability CVE-2016-3352 which was publicly disclosed earlier is also patched in the MS16-110 bulletin…"
.
