Summary
To learn more about the vulnerability, see Microsoft Security Bulletin MS16-110.
More Information
Important
- We recommend that you install this security update on all client and server operating systems listed in the "applies to" section.
- You should also install security update 3184471 on any domain controllers running Windows Server 2012 R2 or systems with Active Directory Lightweight Directory Services (AD LDS) role installed..
- All future security and non-security updates for Windows RT 8.1 and Windows 8.1 require update 2919355 to be installed. We recommend that you install update 2919355 on your Windows RT 8.1-based, or Windows 8.1-based computer so that you receive future updates.
- If you install a language pack after you install this update, you must reinstall this update. Therefore, we recommend that you install any language packs that you need before you install this update. For more information, see Add language packs to Windows.
More Information
Known issues in this security update
Known issue 1
Symptoms
Consider the following scenario:
- You try to access a file server by using the SMBv1 protocol through an application such as File Explorer.
- The application uses the CONNECT_INTERACTIVE flag for the WNetAddConnection API.
- You're using a computer that's logged in through Microsoft Account credentials.
- The network credentials you're using to access the file server share are not present in Credential Manager.
- The firewall profile on the computer is set to Public.
In this scenario, you receive the following error message:
Note
A specified logon session does not exist. It may already have been terminated.
This problem may occur if you have security update 3187754 installed.
Workaround
To work around this problem, use any of these options:
Option 1: If possible, use SMBv2 instead of SMBv1.
Option 2: Pass credentials explicitly through the following net use cmd:
net use \\<serverName>\<shareName> /user: <DomainName\UserName> <Password>
Option 3: Change the network profile to Private for private home networks instead of Public.
Option 4: Save credentials for trusted network shares in Credential Manager.
Known issue 2
After you install this update, you may encounter 0xC0000022 NTLM authentication errors. To resolve this issue, see NTLM authentication fails with 0xC0000022 error for Windows Server 2012, Windows 8.1, and Windows Server 2012 R2 after update is applied.
How to obtain and install the update
Method 1: Windows Update
This update is available through Windows Update. When you turn on automatic updating, this update will be downloaded and installed automatically. For more information about how to turn on automatic updating, see
Get security updates automatically.
Note For Windows RT 8.1, this update is available through Windows Update only.
Method 2: Microsoft Update Catalog
To get the stand-alone package for this update, go to the Microsoft Update Catalog website.
Method 3: Microsoft Download Center
You can obtain the stand-alone update package through the Microsoft Download Center. Follow the installation instructions on the download page to install the update.
Click the download link in Microsoft Security Bulletin MS16-110 that corresponds to the version of Windows that you are running.
More Information
How to obtain help and support for this security update
Help for installing updates: Support for Microsoft Update
Security solutions for IT professionals: TechNet Security Troubleshooting and Support
Help for protecting your Windows-based computer from viruses and malware: Virus Solution and Security Center
Local support according to your country: International Support
File Information
File hash information
| File name | SHA1 hash | SHA256 hash |
|---|---|---|
| Windows8.1-KB3187754-v2-x86.msu | 1CCFA4C4B732DAC305264A78704A49D01F62BEB7 | C9E6933821256C432F935415A970936E7211B1C4A0ED193ACBA728F5B39B18B2 |
| Windows8.1-KB3187754-v2-x64.msu | C366213D75966AEA5D86070919F0B715F7DD7856 | DA37F953F1FA8B6B6EA86177A215E11A8242BD2D912DF6CD56FB3ED67FC026FE |
| Windows8-RT-KB3187754-v2-x64.msu | FC856F0C6DFFD0C177B1D56A38E399DDF61CF160 | 90786E1403D8E1D36672E8968E1BDC93E2DCF604F8264B2C1A7B636184B4B961 |
File information
The English (United States) version of this software update installs files that have the attributes that are listed in the following tables.
Windows 8.1 file information
Notes
The files that apply to a specific product, milestone (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:
Version Product Milestone Service branch 6.3.960 0.16 xxx Windows RT 8.1 and Windows 8.1 RTM GDR 6.3.960 0.17 xxx Windows RT 8.1 and Windows 8.1 RTM GDR 6.3.960 0.18 xxx Windows RT 8.1 and Windows 8.1 RTM GDR GDR service branches contain only those fixes that are widely released to address widespread, critical issues. LDR service branches contain hotfixes in addition to widely released fixes.
The MANIFEST files (.manifest) and MUM files (.mum) that are installed are not listed.
For all supported x86-based versions
| File name | File version | File size | Date | Time | Platform |
|---|---|---|---|---|---|
| Bcryptprimitives.dll | 6.3.9600.18340 | 340,872 | 16-May-2016 | 21:13 | x86 |
| Ksecdd.sys | 6.3.9600.18454 | 77,656 | 22-Aug-2016 | 16:09 | x86 |
| Lsass.exe | 6.3.9600.17415 | 35,616 | 29-Oct-2014 | 03:05 | x86 |
| Sspicli.dll | 6.3.9600.18454 | 136,872 | 22-Aug-2016 | 16:09 | x86 |
| Sspisrv.dll | 6.3.9600.17415 | 18,432 | 29-Oct-2014 | 02:03 | x86 |
| Cng.sys | 6.3.9600.18340 | 479,312 | 16-May-2016 | 21:16 | x86 |
| Ksecpkg.sys | 6.3.9600.18340 | 148,824 | 16-May-2016 | 21:16 | x86 |
| Lsasrv.dll | 6.3.9600.18454 | 1,118,720 | 20-Aug-2016 | 22:51 | x86 |
| Adtschema.dll | 6.3.9600.17415 | 736,768 | 29-Oct-2014 | 02:06 | x86 |
| Msaudite.dll | 6.3.9600.17415 | 154,112 | 29-Oct-2014 | 02:06 | x86 |
| Msobjs.dll | 6.3.9600.16384 | 61,952 | 22-Aug-2013 | 04:17 | x86 |
| Msv1_0.dll | 6.3.9600.18468 | 332,632 | 08-Sep-2016 | 21:51 | x86 |
| Mrxsmb10.sys | 6.3.9600.18454 | 229,888 | 20-Aug-2016 | 23:59 | x86 |
| Mrxsmb20.sys | 6.3.9600.18454 | 153,088 | 21-Aug-2016 | 00:01 | x86 |
| Mrxsmb.sys | 6.3.9600.18454 | 328,192 | 21-Aug-2016 | 00:00 | x86 |
For all supported x64-based versions
| File name | File version | File size | Date | Time | Platform | SP requirement | Service branch |
|---|---|---|---|---|---|---|---|
| Bcryptprimitives.dll | 6.3.9600.18344 | 397,232 | 18-May-2016 | 23:18 | x64 | None | Not applicable |
| Certcli.dll | 6.3.9600.18454 | 445,440 | 21-Aug-2016 | 00:17 | x64 | None | Not applicable |
| Ksecdd.sys | 6.3.9600.18454 | 100,184 | 22-Aug-2016 | 16:06 | x64 | None | Not applicable |
| Lsass.exe | 6.3.9600.17415 | 47,024 | 29-Oct-2014 | 03:51 | x64 | None | Not applicable |
| Sspicli.dll | 6.3.9600.18454 | 179,248 | 22-Aug-2016 | 16:06 | x64 | None | Not applicable |
| Sspisrv.dll | 6.3.9600.17415 | 29,184 | 29-Oct-2014 | 02:48 | x64 | None | Not applicable |
| Cng.sys | 6.3.9600.18344 | 563,024 | 18-May-2016 | 23:18 | x64 | None | Not applicable |
| Ksecpkg.sys | 6.3.9600.18344 | 178,016 | 18-May-2016 | 23:16 | x64 | None | Not applicable |
| Lsasrv.dll | 6.3.9600.18454 | 1,445,376 | 20-Aug-2016 | 23:27 | x64 | None | Not applicable |
| Adtschema.dll | 6.3.9600.17415 | 736,768 | 29-Oct-2014 | 02:50 | x64 | None | Not applicable |
| Msaudite.dll | 6.3.9600.17415 | 154,112 | 29-Oct-2014 | 02:51 | x64 | None | Not applicable |
| Msobjs.dll | 6.3.9600.16384 | 61,952 | 22-Aug-2013 | 11:46 | x64 | None | Not applicable |
| Ocspisapi.dll | 6.3.9600.17415 | 293,376 | 29-Oct-2014 | 01:43 | x64 | SPS | AMD64_MICROSOFT-WINDOWS-OCSP |
| Ocspisapictrs.h | Not applicable | 1,421 | 18-Jun-2013 | 15:06 | Not applicable | SPS | AMD64_MICROSOFT-WINDOWS-OCSP |
| Ocspisapictrs.ini | Not applicable | 2,636 | 18-Jun-2013 | 15:06 | Not applicable | SPS | AMD64_MICROSOFT-WINDOWS-OCSP |
| Ocspsvcctrs.ini | Not applicable | 2,960 | 22-Aug-2013 | 19:26 | Not applicable | SPS | AMD64_MICROSOFT-WINDOWS-OCSP |
| Ocspsvcctrs.ini | Not applicable | 3,134 | 22-Aug-2013 | 19:44 | Not applicable | SPS | AMD64_MICROSOFT-WINDOWS-OCSP |
| Ocspsvcctrs.ini | Not applicable | 2,918 | 22-Aug-2013 | 12:30 | Not applicable | SPS | AMD64_MICROSOFT-WINDOWS-OCSP |
| Ocspsvcctrs.ini | Not applicable | 3,210 | 22-Aug-2013 | 19:43 | Not applicable | SPS | AMD64_MICROSOFT-WINDOWS-OCSP |
| Ocspsvcctrs.ini | Not applicable | 3,098 | 22-Aug-2013 | 19:30 | Not applicable | SPS | AMD64_MICROSOFT-WINDOWS-OCSP |
| Ocspsvcctrs.ini | Not applicable | 3,028 | 22-Aug-2013 | 19:46 | Not applicable | SPS | AMD64_MICROSOFT-WINDOWS-OCSP |
| Ocspsvcctrs.ini | Not applicable | 3,140 | 22-Aug-2013 | 19:31 | Not applicable | SPS | AMD64_MICROSOFT-WINDOWS-OCSP |
| Ocspsvcctrs.ini | Not applicable | 2,642 | 22-Aug-2013 | 19:30 | Not applicable | SPS | AMD64_MICROSOFT-WINDOWS-OCSP |
| Ocspsvcctrs.ini | Not applicable | 2,576 | 22-Aug-2013 | 19:31 | Not applicable | SPS | AMD64_MICROSOFT-WINDOWS-OCSP |
| Ocspsvcctrs.ini | Not applicable | 3,026 | 22-Aug-2013 | 19:23 | Not applicable | SPS | AMD64_MICROSOFT-WINDOWS-OCSP |
| Ocspsvcctrs.ini | Not applicable | 3,028 | 22-Aug-2013 | 19:23 | Not applicable | SPS | AMD64_MICROSOFT-WINDOWS-OCSP |
| Ocspsvcctrs.ini | Not applicable | 3,188 | 22-Aug-2013 | 19:23 | Not applicable | SPS | AMD64_MICROSOFT-WINDOWS-OCSP |
| Ocspsvcctrs.ini | Not applicable | 3,126 | 22-Aug-2013 | 19:33 | Not applicable | SPS | AMD64_MICROSOFT-WINDOWS-OCSP |
| Ocspsvcctrs.ini | Not applicable | 3,064 | 22-Aug-2013 | 19:36 | Not applicable | SPS | AMD64_MICROSOFT-WINDOWS-OCSP |
| Ocspsvcctrs.ini | Not applicable | 3,092 | 22-Aug-2013 | 19:36 | Not applicable | SPS | AMD64_MICROSOFT-WINDOWS-OCSP |
| Ocspsvcctrs.ini | Not applicable | 2,828 | 22-Aug-2013 | 19:32 | Not applicable | SPS | AMD64_MICROSOFT-WINDOWS-OCSP |
| Ocspsvcctrs.ini | Not applicable | 2,464 | 22-Aug-2013 | 19:20 | Not applicable | SPS | AMD64_MICROSOFT-WINDOWS-OCSP |
| Ocspsvcctrs.ini | Not applicable | 2,480 | 22-Aug-2013 | 19:20 | Not applicable | SPS | AMD64_MICROSOFT-WINDOWS-OCSP |
| Ocspsvcctrs.ini | Not applicable | 2,460 | 22-Aug-2013 | 19:21 | Not applicable | SPS | AMD64_MICROSOFT-WINDOWS-OCSP |
| Ocspsvc.exe | 6.3.9600.17415 | 219,136 | 29-Oct-2014 | 02:19 | x64 | SPS | AMD64_MICROSOFT-WINDOWS-OCSP |
| Ocspsvcctrs.h | Not applicable | 1,569 | 18-Jun-2013 | 15:06 | Not applicable | SPS | AMD64_MICROSOFT-WINDOWS-OCSP |
| Ocspsvcctrs.ini | Not applicable | 2,918 | 18-Jun-2013 | 15:06 | Not applicable | SPS | AMD64_MICROSOFT-WINDOWS-OCSP |
| Msv1_0.dll | 6.3.9600.18468 | 443,224 | 08-Sep-2016 | 21:51 | x64 | None | Not applicable |
| Mrxsmb10.sys | 6.3.9600.18454 | 284,672 | 21-Aug-2016 | 01:01 | x64 | None | Not applicable |
| Mrxsmb20.sys | 6.3.9600.18454 | 201,728 | 21-Aug-2016 | 01:03 | x64 | None | Not applicable |
| Mrxsmb.sys | 6.3.9600.18454 | 401,408 | 21-Aug-2016 | 01:01 | x64 | None | Not applicable |
| Sspicli.dll | 6.3.9600.18454 | 104,960 | 20-Aug-2016 | 22:55 | x86 | None | Not applicable |
| Msv1_0.dll | 6.3.9600.18468 | 332,632 | 08-Sep-2016 | 21:51 | x86 | None | Not applicable |
| Bcryptprimitives.dll | 6.3.9600.18344 | 340,880 | 18-May-2016 | 22:28 | x86 | None | Not applicable |
| Certcli.dll | 6.3.9600.18454 | 324,096 | 20-Aug-2016 | 23:26 | x86 | None | Not applicable |
| Adtschema.dll | 6.3.9600.17415 | 736,768 | 29-Oct-2014 | 02:06 | x86 | None | Not applicable |
| Msaudite.dll | 6.3.9600.17415 | 154,112 | 29-Oct-2014 | 02:06 | x86 | None | Not applicable |
| Msobjs.dll | 6.3.9600.16384 | 61,952 | 22-Aug-2013 | 04:17 | x86 | None | Not applicable |