MS16-120 - Critical: Security Update for Microsoft Graphics Component (3192884) - Version: 1.0

The following software versions or editions are affected. Versions or editions that are not listed are either past their support life cycle or are not affected. To determine the support life cycle for your software version or edition, see Microsoft Support Lifecycle.

The severity ratings indicated for each affected software assume the potential maximum impact of the vulnerability. For information regarding the likelihood, within 30 days of this security bulletin’s release, of the exploitability of the vulnerability in relation to its severity rating and security impact, please see the Exploitability Index in the October bulletin summary.

Operating System	True Type Font Parsing Information Disclosure Vulnerability - CVE-2016-3209	GDI+ Information Disclosure Vulnerability - CVE-2016-3262	GDI+ Information Disclosure Vulnerability - CVE-2016-3263	Win32k Elevation of Privilege Vulnerability - CVE-2016-3270	Windows Graphics Component RCE Vulnerability – CVE-2016-3393	GDI+ Remote Code Execution Vulnerability - CVE-2016-3396	True Type Font Parsing Elevation of Privilege Vulnerability - CVE-2016-7182	Updates Replaced*
Windows Vista
Windows Vista Service Pack 2 (3191203)	Important Information Disclosure	Important Information Disclosure	Important Information Disclosure	Important  Elevation of Privilege	Critical Remote Code Execution	Critical Remote Code Execution	Important  Elevation of Privilege	3177725 in MS16-098
Windows Vista x64 Edition Service Pack 2 (3191203)	Important  Information Disclosure	Important Information Disclosure	Important Information Disclosure	Important  Elevation of Privilege	Critical Remote Code Execution	Critical Remote Code Execution	Important  Elevation of Privilege	3177725 in MS16-098
Windows Server 2008
Windows Server 2008 for 32-bit Systems Service Pack 2 (3191203)	Important  Information Disclosure	Important Information Disclosure	Important Information Disclosure	Important  Elevation of Privilege	Critical Remote Code Execution	Critical Remote Code Execution	Important  Elevation of Privilege	3177725 in MS16-098
Windows Server 2008 for x64-based Systems Service Pack 2 (3191203)	Important  Information Disclosure	Important Information Disclosure	Important Information Disclosure	Important  Elevation of Privilege	Critical Remote Code Execution	Critical Remote Code Execution	Important  Elevation of Privilege	3177725 in MS16-098
Windows Server 2008 for Itanium-based Systems Service Pack 2 (3191203)	Important  Information Disclosure	Important Information Disclosure	Important Information Disclosure	Important Elevation of Privilege	Critical Remote Code Execution	Critical Remote Code Execution	Important  Elevation of Privilege	3177725 in MS16-098
Windows 7
Windows 7 for 32-bit Systems Service Pack 1 (3192391) Security Only[3]	Important  Information Disclosure	Important Information Disclosure	Important Information Disclosure	Important Elevation of Privilege	Critical Remote Code Execution	Critical Remote Code Execution	Important  Elevation of Privilege	3175024 in MS16-111
Windows 7 for 32-bit Systems Service Pack 1 (3185330) Monthly Rollup[3]	Important  Information Disclosure	Important Information Disclosure	Important Information Disclosure	Important Elevation of Privilege	Critical Remote Code Execution	Critical Remote Code Execution	Important  Elevation of Privilege	3175024 in MS16-111
Windows 7 for x64-based Systems Service Pack 1 (3192391) Security Only[3]	Important  Information Disclosure	Important Information Disclosure	Important Information Disclosure	Important Elevation of Privilege	Critical Remote Code Execution	Critical Remote Code Execution	Important  Elevation of Privilege	3175024 in MS16-111
Windows 7 for x64-based Systems Service Pack 1 (3185330) Monthly Rollup[3]	Important  Information Disclosure	Important Information Disclosure	Important Information Disclosure	Important Elevation of Privilege	Critical Remote Code Execution	Critical Remote Code Execution	Important  Elevation of Privilege	3175024 in MS16-111
Windows Server 2008 R2
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (3192391) Security Only[3]	Important  Information Disclosure	Important Information Disclosure	Important Information Disclosure	Important Elevation of Privilege	Critical Remote Code Execution	Critical Remote Code Execution	Important  Elevation of Privilege	3175024 in MS16-111
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (3185330) Monthly Rollup[3]	Important  Information Disclosure	Important Information Disclosure	Important Information Disclosure	Important Elevation of Privilege	Critical Remote Code Execution	Critical Remote Code Execution	Important  Elevation of Privilege	3175024 in MS16-111
Windows Server 2008 R2 for Itanium-based Systems Service Pack 1 (3192391) Security Only[3]	Important  Information Disclosure	Important Information Disclosure	Important Information Disclosure	Important Elevation of Privilege	Critical Remote Code Execution	Critical Remote Code Execution	Important  Elevation of Privilege	3175024 in MS16-111
Windows Server 2008 R2 for Itanium-based Systems Service Pack 1 (3185330) Monthly Rollup[3]	Important  Information Disclosure	Important Information Disclosure	Important Information Disclosure	Important Elevation of Privilege	Critical Remote Code Execution	Critical Remote Code Execution	Important  Elevation of Privilege	3175024 in MS16-111
Windows 8.1
Windows 8.1 for 32-bit Systems (3192392) Security Only[3]	Important  Information Disclosure	Important Information Disclosure	Important Information Disclosure	Important Elevation of Privilege	Critical Remote Code Execution	Critical Remote Code Execution	Important  Elevation of Privilege	3185319 in MS16-104
Windows 8.1 for 32-bit Systems (3185331) Monthly Rollup[3]	Important  Information Disclosure	Important Information Disclosure	Important Information Disclosure	Important Elevation of Privilege	Critical Remote Code Execution	Critical Remote Code Execution	Important  Elevation of Privilege	3185319 in MS16-104
Windows 8.1 for x64-based Systems (3192392) Security Only[3]	Important  Information Disclosure	Important Information Disclosure	Important Information Disclosure	Important Elevation of Privilege	Critical Remote Code Execution	Critical Remote Code Execution	Important  Elevation of Privilege	3185319 in MS16-104
Windows 8.1 for x64-based Systems (3185331) Monthly Rollup[3]	Important  Information Disclosure	Important Information Disclosure	Important Information Disclosure	Important Elevation of Privilege	Critical Remote Code Execution	Critical Remote Code Execution	Important  Elevation of Privilege	3185319 in MS16-104
Windows Server 2012 and Windows Server 2012 R2
Windows Server 2012 (3192393) Security Only[3]	Important  Information Disclosure	Important Information Disclosure	Important Information Disclosure	Important Elevation of Privilege	Critical Remote Code Execution	Critical Remote Code Execution	Important  Elevation of Privilege	3185319 in MS16-104
Windows Server 2012 (3185332) Monthly Rollup[3]	Important  Information Disclosure	Important Information Disclosure	Important Information Disclosure	Important Elevation of Privilege	Critical Remote Code Execution	Critical Remote Code Execution	Important  Elevation of Privilege	3185319 in MS16-104
Windows Server 2012 R2 (3192392) Security Only[3]	Important  Information Disclosure	Important Information Disclosure	Important Information Disclosure	Important Elevation of Privilege	Critical Remote Code Execution	Critical Remote Code Execution	Important  Elevation of Privilege	3185319 in MS16-104
Windows Server 2012 R2 (3185331) Monthly Rollup[3]	Important  Information Disclosure	Important Information Disclosure	Important Information Disclosure	Important Elevation of Privilege	Critical Remote Code Execution	Critical Remote Code Execution	Important  Elevation of Privilege	3185319 in MS16-104
Windows RT 8.1
Windows RT 8.1[1] (3185331) Monthly Rollup[3]	Important  Information Disclosure	Important Information Disclosure	Important Information Disclosure	Important Elevation of Privilege	Critical Remote Code Execution	Critical Remote Code Execution	Important  Elevation of Privilege	3185319 in MS16-104
Windows 10
Windows 10 for 32-bit Systems [2] (3192440)	Important  Information Disclosure	Important Information Disclosure	Important Information Disclosure	Important Elevation of Privilege	Critical Remote Code Execution	Critical Remote Code Execution	Important  Elevation of Privilege	3185611
Windows 10 for x64-based Systems [2] (3192440)	Important  Information Disclosure	Important Information Disclosure	Important Information Disclosure	Important Elevation of Privilege	Critical Remote Code Execution	Critical Remote Code Execution	Important  Elevation of Privilege	3185611
Windows 10 Version 1511 for 32-bit Systems [2] (3192441)	Important  Information Disclosure	Important Information Disclosure	Important Information Disclosure	Important Elevation of Privilege	Critical Remote Code Execution	Critical Remote Code Execution	Important  Elevation of Privilege	3185614
Windows 10 Version 1511 for x64-based Systems [2] (3192441)	Important  Information Disclosure	Important Information Disclosure	Important Information Disclosure	Important Elevation of Privilege	Critical Remote Code Execution	Critical Remote Code Execution	Important  Elevation of Privilege	3185614
Windows 10 Version 1607 for 32-bit Systems [2] (3194798)	Important  Information Disclosure	Important Information Disclosure	Important Information Disclosure	Important Elevation of Privilege	Critical Remote Code Execution	Critical Remote Code Execution	Important  Elevation of Privilege	3189866
Windows 10 Version 1607 for x64-based Systems [2] (3194798)	Important  Information Disclosure	Important Information Disclosure	Important Information Disclosure	Important Elevation of Privilege	Critical Remote Code Execution	Critical Remote Code Execution	Important  Elevation of Privilege	3189866
Server Core installation option
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) (3191203)	Important  Information Disclosure	Important Information Disclosure	Important Information Disclosure	Important  Elevation of Privilege	Critical Remote Code Execution	Critical Remote Code Execution	Important  Elevation of Privilege	3177725 in MS16-098
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) (3191203)	Important  Information Disclosure	Important Information Disclosure	Important Information Disclosure	Important  Elevation of Privilege	Critical Remote Code Execution	Critical Remote Code Execution	Important  Elevation of Privilege	3177725 in MS16-098
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) (3192391) Security Only[3]	Important  Information Disclosure	Important Information Disclosure	Important Information Disclosure	Important Elevation of Privilege	Critical Remote Code Execution	Critical Remote Code Execution	Important  Elevation of Privilege	3175024 in MS16-111
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) (3185330) Monthly Rollup[3]	Important  Information Disclosure	Important Information Disclosure	Important Information Disclosure	Important Elevation of Privilege	Critical Remote Code Execution	Critical Remote Code Execution	Important  Elevation of Privilege	3175024 in MS16-111
Windows Server 2012 (Server Core installation) (3192393) Security Only[3]	Important  Information Disclosure	Important Information Disclosure	Important Information Disclosure	Important Elevation of Privilege	Critical Remote Code Execution	Critical Remote Code Execution	Important  Elevation of Privilege	3185319 in MS16-104
Windows Server 2012 (Server Core installation) (3185332) Monthly Rollup[3]	Important  Information Disclosure	Important Information Disclosure	Important Information Disclosure	Important Elevation of Privilege	Critical Remote Code Execution	Critical Remote Code Execution	Important  Elevation of Privilege	3185319 in MS16-104
Windows Server 2012 R2 (Server Core installation) (3192392) Security Only[3]	Important  Information Disclosure	Important Information Disclosure	Important Information Disclosure	Important Elevation of Privilege	Critical Remote Code Execution	Critical Remote Code Execution	Important  Elevation of Privilege	3185319 in MS16-104
Windows Server 2012 R2 (Server Core installation) (3185331) Monthly Rollup[3]	Important  Information Disclosure	Important Information Disclosure	Important Information Disclosure	Important Elevation of Privilege	Critical Remote Code Execution	Critical Remote Code Execution	Important  Elevation of Privilege	3185319 in MS16-104

*The Updates Replaced column shows only the latest update in any chain of superseded updates. For a comprehensive list of updates replaced, go to the Microsoft Update Catalog, search for the update KB number, and then view update details (updates replaced information is provided on the Package Details tab).

[5] .Microsoft .NET Framework 4.5.2 and 4.6 are rollup patches and include all previous updates as well as this month’s updates. Please see This Page for more information.

*The Updates Replaced column shows only the latest update in any chain of superseded updates. For a comprehensive list of updates replaced, go to the Microsoft Update Catalog, search for the update KB number, and then view update details (updates replaced information is provided on the Package Details tab).

*The Updates Replaced column shows only the latest update in a chain of superseded updates. For a comprehensive list of updates replaced, go to the Microsoft Update Catalog, search for the update KB number, and then view update details (updates replaced information is on the Package Details tab).

*The Updates Replaced column shows only the latest update in a chain of superseded updates. For a comprehensive list of updates replaced, go to the Microsoft Update Catalog, search for the update KB number, and then view update details (updates replaced information is on the Package Details tab).

from Microsoft Security Bulletins http://ift.tt/2dIDM2F