Rapid7 Vulnerability & Exploit Database

MS16-044: Security Update for Windows OLE (3146706)

Free InsightVM Trial No Credit Card Necessary
2024 Attack Intel Report Latest research by Rapid7 Labs
Back to Search

MS16-044: Security Update for Windows OLE (3146706)

Severity
9
CVSS
(AV:N/AC:M/Au:N/C:C/I:C/A:C)
Published
04/12/2016
Created
07/25/2018
Added
04/12/2016
Modified
11/23/2022

Description

A remote code execution vulnerability exists when Microsoft Windows OLE fails to properly validate user input. An attacker could exploit the vulnerability to execute malicious code.

Solution(s)

  • WINDOWS-HOTFIX-MS16-044-07ab2de4-76d2-45ab-a09b-f0c4761064da
  • WINDOWS-HOTFIX-MS16-044-0a8dbfea-936e-4dc2-85bc-c670b6b5c355
  • WINDOWS-HOTFIX-MS16-044-146aae33-8df2-45a8-ba4c-54ab33d49ea9
  • WINDOWS-HOTFIX-MS16-044-27ef76a4-a711-4bac-b853-9b69d4f6b04b
  • WINDOWS-HOTFIX-MS16-044-306ac353-de02-48d8-b1d3-eefdf7652f95
  • WINDOWS-HOTFIX-MS16-044-3c864d90-bdf2-4bd9-b303-af58b9e6a64b
  • WINDOWS-HOTFIX-MS16-044-423d21f0-227e-4d49-b1e2-20c0bc56b63b
  • WINDOWS-HOTFIX-MS16-044-437ff47f-944b-4fae-92e2-e02032ab6ce9
  • WINDOWS-HOTFIX-MS16-044-75d4d67d-db5d-4a06-a666-de22c3a4e5fb
  • WINDOWS-HOTFIX-MS16-044-81527537-79c5-4f09-806c-4c82b3dee622
  • WINDOWS-HOTFIX-MS16-044-932ab71a-8131-4ab4-bcef-6a552004d14e
  • WINDOWS-HOTFIX-MS16-044-9950e7d0-632b-47df-bbc4-4ea2ca95c951
  • WINDOWS-HOTFIX-MS16-044-b16aeab0-f807-4b18-bbae-789d507981db
  • WINDOWS-HOTFIX-MS16-044-c297b5e2-2fbc-4147-8378-a6688f49209f
  • WINDOWS-HOTFIX-MS16-044-d2e98abb-0703-49b0-9d82-eeef1dc13174
  • WINDOWS-HOTFIX-MS16-044-d7948e3f-c716-41fd-a3dc-a943ff03dea5
  • WINDOWS-HOTFIX-MS16-044-f4f632c6-6492-402c-8c6e-0e2cbbb7c0dc

References

insightVM

Advanced vulnerability management analytics and reporting.
Key Features
  • Lightweight Endpoint Agent
  • Live Dashboards
  • Real Risk Prioritization
  • IT-Integrated Remediation Projects
  • Cloud, Virtual, and Container Assessment
  • Integrated Threat Feeds
  • Easy-to-Use RESTful API
  • Automation-Assisted Patching
  • Automated Containment
Free InsightVM Trial View All Features

With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.

– Scott Cheney, Manager of Information Security, Sierra View Medical Center

;