MS16-120: Description of the security update for Skype for Business 2016: October 11, 2016

Applies to: Skype for Business 2016


This security update resolves vulnerabilities in Skype for Business 2016 that could allow remote code execution if a user visits a specially crafted website or opens a specially crafted document. To learn more about these vulnerabilities, see Microsoft Security Bulletin MS16-120.

For a complete list of affected software, see Microsoft Knowledge Base article 3192884.

More information about this security update

Security-related fixes and improvements that are included in this security update

This security update contains fixes for the following security issue:
  • 3193844 Internet Explorer 11 freezes when you view a webpage with large flow and Skype for Business Browser Helper is enabled
  • 3193845 Skype for Business 2016 crashes when you're sharing an application
  • 3193846 No notification shows when you try to exit Skype for Business 2016
  • 3195495 Skype for Business doesn't open the Outlook window when you try to "Find Previous Conversations"
  • 3193843 Skype for Business 2016 connects through the DirectAccess tunnel when you connect to an external network

How to get and install the update

Method 1: Microsoft Update

This update is available from Microsoft Update. When you turn on automatic updating, this update will be downloaded and installed automatically. For more information about how to get security updates automatically, see the "Turn on automatic updating in Control Panel" section of this Safety & Security Center article.

Method 2: Microsoft Update Catalog

To get the stand-alone package for this update, go to the Microsoft Update Catalog website.

Method 3: Microsoft Download Center

You can get the stand-alone update package through the Microsoft Download Center. Follow the installation instructions on the download page to install the update.

More Information

Security update deployment information

For deployment information about this update, see Microsoft Knowledge Base article 3192884.

Security update replacement information

This security update replaces previously released update 3115408.