Threat Level: green Handler on Duty: Johannes Ullrich

SANS ISC: Microsoft and Adobe Patch Tuesday, October 2016 - SANS Internet Storm Center SANS ISC InfoSec Forums

Watch ISC TV. Great for NOCs, SOCs and Living Rooms:

Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
Microsoft and Adobe Patch Tuesday, October 2016

Microsoft published nine bulletins plus one bulletin affecting Adobe Flash. These bulletins fix 43 vulnerabilities in Microsoft software, and  11 in Flash.

Several of the bulletins address vulnerabilities that are already exploited in the wild. Most of these vulnerabilities are information disclosure vulnerabilities. One of them, CVE-2016-3393 is a remote code execution vulnerability which is why I labeled it as "Patch Now".

For more details, see how summary here:

or our API for automatic processing of the data.

Johannes B. Ullrich, Ph.D.

I will be teaching next: Application Security: Securing Web Apps, APIs, and Microservices - SANSFIRE 2022


4506 Posts
ISC Handler
Oct 11th 2016
MS16-124 should have KB article associated with it:
(currently just says "KB0").

Sign Up for Free or Log In to start participating in the conversation!