MS16-139: Security update for Windows kernel: November 8, 2016

Applies To
Windows Server 2008 R2 Service Pack 1 Windows Server 2008 R2 Datacenter Windows Server 2008 R2 Enterprise Windows Server 2008 R2 Standard Windows Server 2008 R2 Web Edition Windows Server 2008 R2 Foundation Windows 7 Service Pack 1 Windows 7 Ultimate Windows 7 Enterprise Windows 7 Professional Windows 7 Home Premium Windows 7 Home Basic Windows 7 Starter Windows Server 2008 Service Pack 2 Windows Server 2008 Datacenter Windows Server 2008 Enterprise Windows Server 2008 Standard Windows Server 2008 Web Edition Windows Server 2008 Foundation Windows Server 2008 for Itanium-Based Systems Windows Vista Service Pack 2 Windows Vista Ultimate Windows Vista Enterprise Windows Vista Business Windows Vista Home Premium Windows Vista Home Basic Windows Vista Starter

Summary

This security update resolves a vulnerability in Microsoft Windows. The vulnerability could allow elevation of privilege if an attacker runs a specially crafted application to access sensitive information. A locally authenticated attacker could attempt to exploit this vulnerability by running a specially crafted application. By using this method, an attacker can gain access to information not intended to be available to the user. 

To learn more about the vulnerability, see Microsoft Security Bulletin MS16-139.

More Information

Important

  • If you install a language pack after you install this update, you must reinstall this update. Therefore, we recommend that you install any language packs that you need before you install this update. For more information, see Add language packs to Windows.

Additional information about this security update

The following articles contain additional information about this security update as it relates to individual product versions. The articles may contain known issue information.

  • 3198483 MS16-139: Description of the security update for Windows kernel: November 8, 2016
  • 3197867 November 2016 security only quality update for Windows 7 SP1 and Windows Server 2008 R2 SP1
  • 3197868 November 2016 Security Monthly Quality Rollup for Windows 7 SP1 and Windows Server 2008 R2 SP1

More Information

Security update deployment information

Windows Vista (all editions)
Reference table

The following table contains the security update information for this software.

Security update file names For all supported 32-bit editions of Windows Vista:
Windows6.0-KB3198483-x86.msu
For all supported x64-based editions of Windows Vista:
Windows6.0-KB3198483-x64.msu
Installation switches See Microsoft Knowledge Base Article 934307
Restart requirement You must restart the system after you apply this security update.
Removal information WUSA.exe does not support uninstalling updates. To uninstall an update that is installed by WUSA, click Control Panel, and then click Security. Under Windows Update, click View installed updates, and then select from the list of updates.
File information See Microsoft Knowledge Base Article 3198483
Registry key verification Note This update does not add a registry key to validate its installation.

Windows Server 2008 (all editions)
Reference table

The following table contains the security update information for this software.

Security update file names For all supported 32-bit editions of Windows Server 2008:
Windows6.0-KB3198483-x86.msu
For all supported x64-based editions of Windows Server 2008:
Windows6.0-KB3198483-x64.msu
For all supported Itanium-based editions of Windows Server 2008:
Windows6.0-KB3198483-ia64.msu
Installation switches See Microsoft Knowledge Base article 934307
Restart requirement You must restart the system after you apply this security update.
Removal information WUSA.exe does not support uninstalling updates. To uninstall an update that is installed by WUSA, click Control Panel, and then click Security. Under Windows Update, click View installed updates, and then select from the list of updates.
File information See Microsoft Knowledge Base article 3198483
Registry key verification Note This update does not add a registry key to validate its installation.

Windows 7 (all editions)
Reference table

The following table contains the security update information for this software.

Security update file name For all supported 32-bit editions of Windows 7:
Windows6.1-KB3197867-x86.msu
Security Only
For all supported 32-bit editions of Windows 7
Windows6.1-KB3197868-x86.msu
Monthly Rollup
For all supported x64-based editions of Windows 7:
Windows6.1-KB3197867-x64.msu
Security Only
For all supported x64-based editions of Windows 7:
Windows6.1-KB3197868-x64.msu
Monthly Rollup
Installation switches See Microsoft Knowledge Base article 934307
Restart requirement You must restart the system after you apply this security update.
Removal information To uninstall an update that is installed by WUSA, use the /Uninstall setup switch or click Control Panel, click System and Security. Under Windows Update, click View installed updates, and then select from the list of updates.
File information See Microsoft Knowledge Base article 3197867
See Microsoft Knowledge Base article 3197868
Registry key verification Note This update does not add a registry key to validate its installation.

Windows Server 2008 R2 (all editions)Reference table

The following table contains the security update information for this software.

Security update file name For all supported x64-based editions of Windows Server 2008 R2:
Windows6.1-KB3197867-x64.msu
Security Only
For all supported x64-based editions of Windows Server 2008 R2:
Windows6.1-KB3197868-x64.msu
Monthly Rollup
For all supported Itanium-based editions of Windows Server 2008 R2:
Windows6.1-KB3197867-ia64.msu
Security Only
For all supported Itanium-based editions of Windows Server 2008 R2:
Windows6.1-KB3197868-ia64.msu
Monthly Rollup
Installation switches See Microsoft Knowledge Base article 934307
Restart requirement You must restart the system after you apply this security update.
Removal information To uninstall an update that is installed by WUSA, use the /Uninstall setup switch or click Control Panel, click System and Security. Under Windows Update, click View installed updates, and then select from the list of updates.
File information See Microsoft Knowledge Base article 3197867
See Microsoft Knowledge Base article 3197868
Registry key verification Note This update does not add a registry key to validate its installation.

      

How to obtain help and support for this security update

Help for installing updates: Support for Microsoft Update

Security solutions for IT professionals: TechNet Security Troubleshooting and Support

Help for protecting your Windows-based computer from viruses and malware: Virus Solution and Security Center

Local support according to your country: International Support