MS16-120: Security update for Microsoft graphics component: October 11, 2016

Summary

This update resolves vulnerabilities in Microsoft Windows, Microsoft Office, Skype for Business, Silverlight, Microsoft Lync, and the Microsoft .NET Framework. The vulnerabilities could allow remote code execution if a user either visits a specially crafted website or opens a specially crafted document. This update addresses the vulnerabilities by correcting how the Windows font library handles embedded fonts. To learn more about the vulnerability, see Microsoft Security Bulletin MS16-120.

More Information

Important

  • All future security and nonsecurity updates for Windows RT 8.1, Windows 8.1, and Windows Server 2012 R2 require update 2919355 to be installed. We recommend that you install update 2919355 on your Windows RT 8.1-based, Windows 8.1-based, or Windows Server 2012 R2-based computer so that you receive future updates.

  • If you install a language pack after you install this update, you must reinstall this update. Therefore, we recommend that you install any language packs that you need before you install this update. For more information, see Add language packs to Windows.

Additional information about this security update


The following articles contain additional information about this security update as it relates to individual product versions. The articles may contain known issue information.

  • 3189040 MS16-120: Description of the security update for the .NET Framework 4.6 for Windows Vista Service Pack 2 and Windows Server 2008 Service Pack 2: October 11, 2016: October 11, 2016

  • 3189039 MS16-120: Description of the security update for the .NET Framework 4.5.2 for Windows Vista Service Pack 2 and Windows Server 2008 Service Pack 2: October 11, 2016

  • 3188730 MS16-120: Description of the security update for the .NET Framework 3.5.1 for Windows 7 and Windows Server 2008 R2 Service Pack 1: October 11, 2016

  • 3188731 MS16-120: Description of the security update for the .NET Framework 3.5 for Windows Server 2012: October 11, 2016

  • 3188732 MS16-120: Description of the security update for the .NET Framework 3.5 for Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2: October 11, 2016

  • 3188726 MS16-120: Description of the security update for the .NET Framework 3.0 Service Pack 2 for Windows Vista Service Pack 2 and Windows Server 2008 Service Pack 2: October 11, 2016

  • 3188735 MS16-120: Description of the security update for the .NET Framework 3.0 Service Pack 2 for Windows Vista Service Pack 2 and Windows Server 2008 Service Pack 2: October 11, 2016

  • 3189052 MS16-120: Description of the Security and Quality Rollup for the .NET Framework 4.6 for Windows Vista Service Pack 2 and Windows Server 2008 Service Pack 2: October 11, 2016

  • 3189051 MS16-120: Description of the Security and Quality Rollup for the .NET Framework 4.5.2 for Windows Vista Service Pack 2 and Windows Server 2008 Service Pack 2: October 11, 2016

  • 3188740 MS16-120: Description of the Security and Quality Rollup for the .NET Framework 3.5.1 for Windows 7 Service Pack 1 and Windows Server 2008 R2 Service Pack 1: October 11, 2016

  • 3188741 MS16-120: Description of the Security and Quality Rollup for the .NET Framework 3.5 for Windows Server 2012: October 11, 2016

  • 3188743 MS16-120: Description of the Security and Quality Rollup for the .NET Framework 3.5 for Windows 8.1 and Windows Server 2012 R2: October 11, 2016

  • 3193713 MS16-120: Security update for Silverlight: October 11, 2016

  • 3188744 MS16-120: Description of the Security and Quality Rollup for the .NET Framework 3.0 Service Pack 2, 4.5.2, and 4.6 for Windows Vista and Windows Server 2008: October 11, 2016

  • 3118301 MS16-120: Description of the security update for 2007 Microsoft Office Suite: October 11, 2016

  • 3118317 MS16-120: Description of the security update for Office 2010: October 11, 2016

  • 3118394 MS16-120: Description of the security update for Word Viewer: October 11, 2016

  • 3118327 MS16-120: Description of the security update for Skype for Business 2016: October 11, 2016

  • 3118348 MS16-120: Description of the security update for Lync 2013 (Skype for Business): October 11, 2016

  • 3188397 MS16-120: Description of the security update for Lync 2010: October 11, 2016

  • 3188399 MS16-120: Description of the security update for Lync 2010 Attendee (user level install): October 11, 2016

  • 3188400 MS16-120: Description of the security update for Lync 2010 Attendee (admin level install): October 11, 2016

  • 3189647 MS16-120: Description of the security update for Live Meeting Console: October 11, 2016

  • 3189648 MS16-120: Description of the OCS Conferencing Addin for Outlook: October 11, 2016

  • 3188736 MS16-120: Description of the Security and Quality Rollup .NET Framework 3.0 Service Pack 2, 4.5.2, and 4.6 updates for Windows Vista Service Pack 2 and Windows Server 2008 Service Pack 2: October 11, 2016

  • 3191203 MS16-120 and MS16-123: Description of the security update for kernel-mode drivers: October 11, 2016

  • 3192392 October 2016 security only quality update for Windows 8.1 and Windows Server 2012 R2

  • 3185331 October 2016 security monthly quality rollup for Windows 8.1 and Windows Server 2012 R2

  • 3192393 October 2016 security only quality update for Windows Server 2012

  • 3185332 October 2016 security monthly quality rollup for Windows Server 2012

  • 3192391 October 2016 security only quality update for Windows 7 SP1 and Windows Server 2008 R2 SP1

  • 3185330 October 2016 security monthly quality rollup for Windows 7 SP1 and Windows Server 2008 R2 SP1

  • 3192440 Cumulative update for Windows 10: October 11, 2016

  • 3194798 Cumulative update for Windows 10 Version 1607 and Windows Server 2016: October 11, 2016

  • 3192441 Cumulative update for Windows 10 Version 1511: October 11, 2016

Windows Vista (excluding .NET)Reference table

The following table contains the security update information for this software.

Security update file names

For all supported 32-bit editions of Windows Vista:
Windows6.0-KB3191203-x86.msu

For all supported x64-based editions of Windows Vista:
Windows6.0-KB3191203-x64.msu

Installation switches

For Microsoft Windows, see Microsoft Knowledge Base article 934307

For Microsoft .NET Framework, see Microsoft Knowledge Base article 2844699

Update log file

Not applicable

Restart requirement

Yes, you must restart your system after you apply this security update.

Removal information

WUSA.exe does not support uninstalling updates. To uninstall an update that is installed by WUSA, click Control Panel, and then click Security. Under Windows Update, click View installed updates, and then select from the list of updates.

File information

See Microsoft Knowledge Base article 3191203

Registry key verification

This update does not add a registry key to validate its installation.

Windows Server 2008 (excluding .NET)Reference table

The following table contains the security update information for this software.

Security update file names

For all supported 32-bit editions of Windows Server 2008:
Windows6.0-KB3191203-x86.msu

For all supported x64-based editions of Windows Server 2008:
Windows6.0-KB3191203-x64.msu

For all supported Itanium-based editions of Windows Server 2008:
Windows6.0-KB3191203-ia64.msu

Installation switches

For Microsoft Windows, see Microsoft Knowledge Base article 934307

Update log file

Not applicable

Restart requirement

Yes, you must restart your system after you apply this security update.

Removal information

WUSA.exe does not support uninstalling updates. To uninstall an update that is installed by WUSA, click Control Panel, and then click Security. Under Windows Update, click View installed updates, and then select from the list of updates.

File information

See Microsoft Knowledge Base article 3191203

Registry key verification

This update does not add a registry key to validate its installation.

Windows 7 (excluding .NET)Reference table

The following table contains the security update information for this software.

Security update file name

For all supported 32-bit editions of Windows 7:
Windows6.1-KB3192391-x86.msu
Security Only

For all supported 32-bit editions of Windows 7:
Windows6.1-KB3185330-x86.msu
Monthly Rollup

For all supported x64-based editions of Windows 7:
Windows6.1-KB3192391-x64.msu
Security Only

For all supported x64-based editions of Windows 7:
Windows6.1-KB3185330-x64.msu
Monthly Rollup

Installation switches

See Microsoft Knowledge Base article 934307

Restart requirement

You must restart the system after you apply this security update.

Removal information

To uninstall an update that is installed by WUSA, use the /Uninstall setup switch or click Control Panel, click System and Security. Under Windows Update, click View installed updates, and then select from the list of updates.

File information

See Microsoft Knowledge Base article 3192391
See Microsoft Knowledge Base article 3185330

Registry key verification

Note This update does not add a registry key to validate its installation.

Windows Server 2008 R2 (excluding .NET)Reference table

The following table contains the security update information for this software.

Security update file name

For all supported x64-based editions of Windows Server 2008 R2:
Windows6.1-KB3192391-x64.msu
Security Only

For all supported x64-based editions of Windows Server 2008 R2:
Windows6.1-KB3185330-x64.msu
Monthly Rollup

For all supported Itanium-based editions of Windows Server 2008 R2:
Windows6.1-KB3192391-ia64.msu
Security Only

For all supported Itanium-based editions of Windows Server 2008 R2:
Windows6.1-KB3185330-ia64.msu
Monthly Rollup

Installation switches

See Microsoft Knowledge Base article 934307

Restart requirement

You must restart the system after you apply this security update.

Removal information

To uninstall an update that is installed by WUSA, use the /Uninstall setup switch or click Control Panel, click System and Security. Under Windows Update, click View installed updates, and then select from the list of updates.

File information

See Microsoft Knowledge Base article 3192391
See Microsoft Knowledge Base article 3185330

Registry key verification

Note This update does not add a registry key to validate its installation.

Windows 8.1 (excluding .NET)Reference table

The following table contains the security update information for this software.

Security update file name

For all supported 32-bit editions of Windows 8.1:
Windows8.1-KB3192392-x86.msu
Security Only

For all supported 32-bit editions of Windows 8.1:
Windows8.1-KB3185331-x86.msu
Monthly Rollup

For all supported x64-based editions of Windows 8.1:
Windows8.1-KB3192392-x64.msu
Security Only

For all supported x64-based editions of Windows 8.1:
Windows8.1-KB3185331-x64.msu
Monthly Rollup

Installation switches

See Microsoft Knowledge Base article 934307

Restart requirement

You must restart the system after you apply this security update.

Removal information

To uninstall an update that is installed by WUSA, use the /Uninstall setup switch or Click Control Panel, click System and Security, and then click Windows Update. Under See also, click Installed updates, and then select from the list of updates.

File information

See Microsoft Knowledge Base article 3192392
See Microsoft Knowledge Base article 3185331

Registry key verification

Note This update does not add a registry key to validate its installation.

Windows Server 2012 and Windows Server 2012 R2 (excluding .NET)Reference table

The following table contains the security update information for this software.

Security update file name

For all supported editions of Windows Server 2012:
Windows8-RT-KB3192393-x64.msu
Security Only

For all supported editions of Windows Server 2012:
Windows8-RT-KB3185332-x64.msu
Monthly Rollup

For all supported editions of Windows Server 2012 R2:
Windows8.1-KB3192392-x64.msu
Security Only

For all supported editions of Windows Server 2012 R2:
Windows8.1-KB3185331-x64.msu
Monthly Rollup

Installation switches

See Microsoft Knowledge Base article 934307

Restart requirement

You must restart the system after you apply this security update.

Removal information

To uninstall an update that is installed by WUSA, use the /Uninstall setup switch or Click Control Panel, click System and Security, and then click Windows Update. Under See also, click Installed updates, and then select from the list of updates.

File information

See Microsoft Knowledge Base article 3192393
See Microsoft Knowledge Base article 3185332

Registry key verification

Note This update does not add a registry key to validate its installation.

Windows RT 8.1 (excluding .NET)Reference table

The following table contains the security update information for this software.

Deployment

The 3192392 update is available via Windows Update only.

Restart Requirement

Yes, you must restart your system after you apply this security update.

Removal Information

Click Control Panel, click System and Security, and then click Windows Update. Under See also, click Installed updates, and then select from the list of updates.

File Information

See Microsoft Knowledge Base article 3192392

Windows 10 (excluding .NET)Reference table

The following table contains the security update information for this software.

Security update file name

For all supported 32-bit editions of Windows 10:
Windows10.0-KB3192440-x86.msu

For all supported x64-based editions of Windows 10:
Windows10.0-KB3192440-x64.msu

For all supported 32-bit editions of Windows 10 Version 1511:
Windows10.0-KB3192441-x86.msu

For all supported x64-based editions of Windows 10 Version 1511:
Windows10.0-KB3192441-x64.msu

For all supported 32-bit editions of Windows 10 Version 1607:
Windows10.0-KB3194798-x86.msu

For all supported x64-based editions of Windows 10 Version 1607:
Windows10.0-KB3194798-x64.msu

Installation switches

For Microsoft Windows, see Microsoft Knowledge Base article 934307

Restart requirement

Yes, you must restart your system after you apply this security update.

Removal information

To uninstall an update that is installed by WUSA, use the /Uninstall setup switch or click Control Panel, click System and Security. Under Windows Update, click View installed updates, and then select from the list of updates.

File information

See Microsoft Knowledge Base article 3192440
See Microsoft Knowledge Base article 3192441
See Microsoft Knowledge Base article 3194798

Registry key verification

These updates do not add a registry key to validate their installation.

Windows Vista (.NET Framework Installations)Reference table

The following table contains the security update information for .NET Framework installations running on all supported versions of Vista for the Security Only Release.

Security update file names

For Microsoft .NET Framework 3.0 Service Pack 2 when installed on all supported 32-bit editions of Windows Vista:
Windows6.0-KB3188726-x86.msu

For Microsoft .NET Framework 4.5.2 when installed on all supported 32-bit editions of Windows Vista:
NDP45-KB3189039-x86.msi

For Microsoft .NET Framework 4.6 when installed on all supported 32-bit editions of Windows Vista:
NDP46-KB3189040-x86.msi

Security update file names

For Microsoft .NET Framework 3.0 Service Pack 2 when installed on all supported 64-bit editions of Windows Vista:
Windows6.0-KB3188726-x86.msu

For Microsoft .NET Framework 4.5.2 when installed on all supported 64-bit editions of Windows Vista:
NDP45-KB3189039-x86.msi

For Microsoft .NET Framework 4.6 when installed on all supported 64-bit editions of Windows Vista:
NDP46-KB3189040-x86.msi

Installation switches

See Microsoft Knowledge Base article 2844699

Update log file

For Microsoft .NET Framework 3.0 Service Pack 2:
Microsoft .NET Framework 3.0-KB3188726_*-msi0.txt
Microsoft .NET Framework 3.0-KB3188726_*.html

For Microsoft .NET Framework 4.5.2:
KB3189039_*_*-Microsoft .NET Framework [.NET target version]-MSP0.txt
KB3189039_*_*.html

For Microsoft .NET Framework 4.6:
KB3189040_*_*-Microsoft .NET Framework [.NET target version]-MSP0.txt
KB3189040_*_*.html

Restart requirement

This update does not require a restart. The installer stops the required services, applies the update, and then restarts the services. However, if the required services cannot be stopped for any reason, or if required files are being used, this update will require a restart. If this behavior occurs, a message appears that advises you to restart.

Removal information

For Microsoft .NET Framework:
Click Control Panel, and then click Security. Under Windows Update, click View installed updates, and then select from the list of updates.

File information

See Microsoft Knowledge Base article 3188726
See Microsoft Knowledge Base article 3189039
See Microsoft Knowledge Base article 3189040

Registry key verification

For Microsoft .NET Framework 3.0 Service Pack 2:
This update does not add a registry key to validate its installation. Use WMI to detect this update.

For Microsoft .NET Framework 4.5.2:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Microsoft .NET Framework [.NET target version]\KB3189039
”ThisVersionInstalled” = “Y”

For Microsoft .NET Framework 4.6:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Microsoft .NET Framework 4.6\ KB3189040
"ThisVersionInstalled" = "Y"

Windows Server 2008 (.NET Framework Installations)Reference table

The following table contains the security update information for .NET Framework installations running on all supported versions of Windows Server 2008 for the Security Only Release.

Security update file names

For Microsoft .NET Framework 3.0 Service Pack 2 when installed on all supported 32-bit editions of Windows Server 2008:
Windows6.0-KB3188726-x86.msu

For Microsoft .NET Framework 4.5.2 when installed on all supported 32-bit editions of Windows Server 2008:
NDP45-KB3189039-x86.msi

For Microsoft .NET Framework 4.6 when installed on all supported 32-bit editions of Windows Server 2008:
NDP46-KB3189040-x86.msi

Security update file names

For Microsoft .NET Framework 3.0 Service Pack 2 when installed on all supported 64-bit editions of Windows Server 2008:
Windows6.0-KB3188726-x86.msu

For Microsoft .NET Framework 4.5.2 when installed on all supported 64-bit editions of Windows Server 2008:
NDP45-KB3189039-x86.msi

For Microsoft .NET Framework 4.6 when installed on all supported 64-bit editions of Windows Server 2008:
NDP46-KB3189040-x86.msi

Installation switches

See Microsoft Knowledge Base article 2844699

Update log file

For Microsoft .NET Framework 3.0 Service Pack 2:
Microsoft .NET Framework 3.0-KB3188726_*-msi0.txt
Microsoft .NET Framework 3.0-KB3188726_*.html

For Microsoft .NET Framework 4.5.2:
KB3189039_*_*-Microsoft .NET Framework [.NET target version]-MSP0.txt
KB3189039_*_*.html

For Microsoft .NET Framework 4.6:
KB3189040_*_*-Microsoft .NET Framework [.NET target version]-MSP0.txt
KB3189040_*_*.html

Restart requirement

This update does not require a restart. The installer stops the required services, applies the update, and then restarts the services. However, if the required services cannot be stopped for any reason, or if required files are being used, this update will require a restart. If this behavior occurs, a message appears that advises you to restart.

Removal information

For Microsoft .NET Framework:
Click Control Panel, and then click Security. Under Windows Update, click View installed updates, and then select from the list of updates.

File information

See Microsoft Knowledge Base article 3188726
See Microsoft Knowledge Base article 3189039
See Microsoft Knowledge Base article 3189040

Registry key verification

For Microsoft .NET Framework 3.0 Service Pack 2:
This update does not add a registry key to validate its installation. Use WMI to detect this update.

For Microsoft .NET Framework 4.5.2:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Microsoft .NET Framework [.NET target version]\KB3189039
”ThisVersionInstalled” = “Y”

For Microsoft .NET Framework 4.6:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Microsoft .NET Framework 4.6\ KB3189040
"ThisVersionInstalled" = "Y"

Windows 7 Service Pack 1 (.NET Framework Installations)Reference table

The following table contains the security update information for .NET Framework installations running on all supported versions of Windows 7 Service Pack 1 for the Security Only Release..

Security update file name

For Microsoft .NET Framework 3.5.1 on all supported 32-bit editions of Windows 7 Service Pack 1:
Windows6.1-KB3188730-x86.msu

For Microsoft .NET Framework 3.5.1 on all supported x64-based editions of Windows 7 Service Pack 1:
Windows6.1-KB3188730-x64.msu

Installation switches

See Microsoft Knowledge Base article 2844699

Update log file

Not applicable.

Restart requirement

This update does not require a restart. The installer stops the required services, applies the update, and then restarts the services. However, if the required services cannot be stopped for any reason, or if required files are being used, this update will require a restart. If this behavior occurs, a message appears that advises you to restart.

Removal information

Click Control Panel, click System and Security. Under Windows Update, click View installed updates, and then select from the list of updates.

File information

See Microsoft Knowledge Base article 3188730

Registry key verification

This update does not add a registry key to validate its installation. Use WMI to detect this update.

Windows Server 2008 R2 (.NET Framework Installations)Reference table

The following table contains the security update information for .NET Framework installations running on all supported versions of Windows Server 2008 R2 for the Security Only Release..

Security update file name

For Microsoft .NET Framework 3.5.1 on all supported x64-based editions of Windows Server 2008 R2 Service Pack 1:
Windows6.1-KB3188730-x64.msu

Installation switches

For Microsoft .NET Framework, see Microsoft Knowledge Base article 2844699

Update log file

Not applicable

Restart requirement

This update does not require a restart. The installer stops the required services, applies the update, and then restarts the services. However, if the required services cannot be stopped for any reason, or if required files are being used, this update will require a restart. If this behavior occurs, a message appears that advises you to restart.

Removal information

Click Control Panel, click System and Security. Under Windows Update, click View installed updates, and then select from the list of updates.

File information

See Microsoft Knowledge Base article 3188730

Registry key verification

For Microsoft .NET Framework 3.5.1:
This update does not add a registry key to validate its installation. Use WMI to detect this update.

Windows 8.1 (.NET Framework Installations)Reference table

The following table contains the security update information for .NET Framework installations running on all supported versions of Windows 8.1 for the Security Only Release..

Security update file name

For Microsoft .NET Framework 3.5 on Windows 8.1 for 32-bit Systems:
Windows8.1- KB3188732-x86.msu

For Microsoft .NET Framework 3.5 on Windows 8.1 for x64-based Systems:
Windows8.1-KB3188732-x64.msu

Installation switches

For Microsoft .NET Framework, see Microsoft Knowledge Base article 2844699

Restart requirement

This update does not require a restart. The installer stops the required services, applies the update, and then restarts the services. However, if the required services cannot be stopped for any reason, or if required files are being used, this update will require a restart. If this behavior occurs, a message appears that advises you to restart.

Removal information

Click Control Panel, click System and Security. Under Windows Update, click View update history, and then select from the list of updates.

File information

See Microsoft Knowledge Base article 3188732

Registry key verification

These updates do not add a registry key to validate their installation.

Windows Server 2012 and Windows Server 2012 R2 (.NET Framework Installations)Reference table

The following table contains the security update information for .NET Framework installations running on all supported versions of Windows Server 2012 and Windows Server 2012 R2 for the Security Only Release..

Security update file name

For Microsoft .NET Framework 3.5 on Windows Server 2012:
Windows8-RT-KB3188731-x64.msu

For Microsoft .NET Framework 3.5 on Windows Server 2012 R2:
Windows8.1-KB3188732-x64.msu

Installation switches

For Microsoft .NET Framework, see Microsoft Knowledge Base article 2844699

Restart requirement

This update does not require a restart. The installer stops the required services, applies the update, and then restarts the services. However, if the required services cannot be stopped for any reason, or if required files are being used, this update will require a restart. If this behavior occurs, a message appears that advises you to restart.

Removal information

Click Control Panel, click System and Security. Under Windows Update, click View update history, and then select from the list of updates.

File information

See Microsoft Knowledge Base article 3188731
See Microsoft Knowledge Base article 3188732

Registry key verification

These updates do not add a registry key to validate their installation.

Windows 10 (.NET Framework Installations)Reference table

The following table contains the security update information for .NET Framework installations running on all supported versions of Windows 10 for the Security Only Release..

Security update file name

For Microsoft .NET Framework 3.5 on all supported 32-bit editions of Windows 10:
Windows10.0-KB3192440-x86.msu

For Microsoft .NET Framework 3.5 on all supported x64-based editions of Windows 10:
Windows10.0-KB3192440-x64.msu

For Microsoft .NET Framework 3.5 on all supported 32-bit editions of Windows 10 version 1511:
Windows10.0-KB3192441-x86.msu

For Microsoft .NET Framework 3.5 on all supported x64-based editions of Windows 10 Version 1511:
Windows10.0-KB3192441-x64.msu

For Microsoft .NET Framework 3.5 on all supported 32-bit editions of Windows 10 version 1607:
Windows10.0-KB3194798-x86.msu

For Microsoft .NET Framework 3.5 on all supported x64-based editions of Windows 10 Version 1607:
Windows10.0-KB3194798-x64.msu

Installation switches

For Microsoft .NET Framework, see Microsoft Knowledge Base article 2844699

Restart requirement

Yes, you must restart your system after you apply this security update.

Removal information

To uninstall an update that is installed by WUSA, use the /Uninstall setup switch or click Control Panel, click System and Security. Under Windows Update, click View installed updates, and then select from the list of updates.

File information

See Microsoft Knowledge Base article 3192440
See Microsoft Knowledge Base article 3192441
See Microsoft Knowledge Base article 3194798

Registry key verification

These updates do not add a registry key to validate their installation.

Windows Vista (.NET Framework Installations)Reference table

The following table contains the security update information for .NET Framework installations running on all supported versions of Vista for the Monthly Rollup.

Security update file names

For Microsoft .NET Framework 3.0 Service Pack 2 when installed on all supported 32-bit editions of Windows Vista:
Windows6.0-KB3188735-x86.msu

For Microsoft .NET Framework 4.5.2 when installed on all supported 32-bit editions of Windows Vista:
NDP45-KB3189051-x86.msi

For Microsoft .NET Framework 4.6 when installed on all supported 32-bit editions of Windows Vista:
NDP46-KB3189052-x86.msi

Security update file names

For Microsoft .NET Framework 3.0 Service Pack 2 when installed on all supported 64-bit editions of Windows Vista:
Windows6.0-KB3188735-x86.msu

For Microsoft .NET Framework 4.5.2 when installed on all supported 64-bit editions of Windows Vista:
NDP45-KB3189051-x86.msi

For Microsoft .NET Framework 4.6 when installed on all supported 64-bit editions of Windows Vista:
NDP46-KB3189052-x86.msi

Installation switches

See Microsoft Knowledge Base article 2844699

Update log file

For Microsoft .NET Framework 3.0 Service Pack 2:
Microsoft .NET Framework 3.0-KB3188735_*-msi0.txt
Microsoft .NET Framework 3.0-KB3188735_*.html

For Microsoft .NET Framework 4.5.2:
KB3189051_*_*-Microsoft .NET Framework [.NET target version]-MSP0.txt
KB3189051_*_*.html

For Microsoft .NET Framework 4.6:
KB3189052_*_*-Microsoft .NET Framework [.NET target version]-MSP0.txt
KB3189052_*_*.html

Restart requirement

This update does not require a restart. The installer stops the required services, applies the update, and then restarts the services. However, if the required services cannot be stopped for any reason, or if required files are being used, this update will require a restart. If this behavior occurs, a message appears that advises you to restart.

Removal information

For Microsoft .NET Framework:
Click Control Panel, and then click Security. Under Windows Update, click View installed updates, and then select from the list of updates.

File information

See Microsoft Knowledge Base article 3188735
See Microsoft Knowledge Base article 3189051
See Microsoft Knowledge Base article 3189052

Registry key verification

For Microsoft .NET Framework 3.0 Service Pack 2:
This update does not add a registry key to validate its installation. Use WMI to detect this update.

For Microsoft .NET Framework 4.5.2:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Microsoft .NET Framework [.NET target version]\KB3189051
”ThisVersionInstalled” = “Y”

For Microsoft .NET Framework 4.6:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Microsoft .NET Framework 4.6\ KB3189052
"ThisVersionInstalled" = "Y"

Windows Server 2008 (.NET Framework Installations)Reference table

The following table contains the security update information for .NET Framework installations running on all supported versions of Windows Sever 2008 for the Monthly Rollup.

Security update file names

For Microsoft .NET Framework 3.0 Service Pack 2 when installed on all supported 32-bit editions of Windows Server 2008:
Windows6.0-KB3188735-x86.msu

For Microsoft .NET Framework 4.5.2 when installed on all supported 32-bit editions of Windows Server 2008:
NDP45-KB3189051-x86.msi

For Microsoft .NET Framework 4.6 when installed on all supported 32-bit editions of Windows Server 2008:
NDP46-KB3189052-x86.msi

Security update file names

For Microsoft .NET Framework 3.0 Service Pack 2 when installed on all supported 64-bit editions of Windows Server 2008:
Windows6.0-KB3188735-x86.msu

For Microsoft .NET Framework 4.5.2 when installed on all supported 64-bit editions of Windows Server 2008:
NDP45-KB3189051-x86.msi

For Microsoft .NET Framework 4.6 when installed on all supported 64-bit editions of Windows Server 2008:
NDP46-KB3189052-x86.msi

Installation switches

See Microsoft Knowledge Base article 2844699

Update log file

For Microsoft .NET Framework 3.0 Service Pack 2:
Microsoft .NET Framework 3.0-KB3188735_*-msi0.txt
Microsoft .NET Framework 3.0-KB3188735_*.html

For Microsoft .NET Framework 4.5.2:
KB3189051_*_*-Microsoft .NET Framework [.NET target version]-MSP0.txt
KB3189051_*_*.html

For Microsoft .NET Framework 4.6:
KB3189052_*_*-Microsoft .NET Framework [.NET target version]-MSP0.txt
KB3189052_*_*.html

Restart requirement

This update does not require a restart. The installer stops the required services, applies the update, and then restarts the services. However, if the required services cannot be stopped for any reason, or if required files are being used, this update will require a restart. If this behavior occurs, a message appears that advises you to restart.

Removal information

For Microsoft .NET Framework:
Click Control Panel, and then click Security. Under Windows Update, click View installed updates, and then select from the list of updates.

File information

See Microsoft Knowledge Base article 3188735
See Microsoft Knowledge Base article 3189051
See Microsoft Knowledge Base article 3189052

Registry key verification

For Microsoft .NET Framework 3.0 Service Pack 2:
This update does not add a registry key to validate its installation. Use WMI to detect this update.

For Microsoft .NET Framework 4.5.2:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Microsoft .NET Framework [.NET target version]\KB3189051
”ThisVersionInstalled” = “Y”

For Microsoft .NET Framework 4.6:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Microsoft .NET Framework 4.6\ KB3189052
"ThisVersionInstalled" = "Y"

Windows 7 Service Pack 1 (.NET Framework Installations)Reference table

The following table contains the security update information for .NET Framework installations running on all supported versions of Windows 7 Service Pack 1 for the Monthly Rollup.

Security update file name

For Microsoft .NET Framework 3.5.1 on all supported 32-bit editions of Windows 7 Service Pack 1:
Windows6.1-KB3188740-x86.msu

For Microsoft .NET Framework 3.5.1 on all supported x64-based editions of Windows 7 Service Pack 1:
Windows6.1-KB3188740-x64.msu

Installation switches

See Microsoft Knowledge Base article 2844699

Update log file

Not applicable.

Restart requirement

This update does not require a restart. The installer stops the required services, applies the update, and then restarts the services. However, if the required services cannot be stopped for any reason, or if required files are being used, this update will require a restart. If this behavior occurs, a message appears that advises you to restart.

Removal information

Click Control Panel, click System and Security. Under Windows Update, click View installed updates, and then select from the list of updates.

File information

See Microsoft Knowledge Base article 3188740

Registry key verification

This update does not add a registry key to validate its installation. Use WMI to detect this update.

Windows Server 2008 R2 (.NET Framework Installations)Reference table

The following table contains the security update information for .NET Framework installations running on all supported versions of Windows Server 2008 for the Monthly Rollup.

Security update file name

For Microsoft .NET Framework 3.5.1 on all supported x64-based editions of Windows Server 2008 R2 Service Pack 1:
Windows6.1-KB3188740-x64.msu

Installation switches

For Microsoft .NET Framework, see Microsoft Knowledge Base article 2844699

Update log file

Not applicable

Restart requirement

This update does not require a restart. The installer stops the required services, applies the update, and then restarts the services. However, if the required services cannot be stopped for any reason, or if required files are being used, this update will require a restart. If this behavior occurs, a message appears that advises you to restart.

Removal information

Click Control Panel, click System and Security. Under Windows Update, click View installed updates, and then select from the list of updates.

File information

See Microsoft Knowledge Base article 3188740

Registry key verification

For Microsoft .NET Framework 3.5.1:
This update does not add a registry key to validate its installation. Use WMI to detect this update.

Windows 8.1 (.NET Framework Installations)Reference table

The following table contains the security update information for .NET Framework installations running on all supported versions of Windows 8.1 for the Monthly Rollup.

Security update file name

For Microsoft .NET Framework 3.5 on Windows 8.1 for 32-bit Systems:
Windows8.1-KB3188743-x86.msu

For Microsoft .NET Framework 3.5 on Windows 8.1 for x64-based Systems:
Windows8.1-KB3188743-x64.msu

Installation switches

For Microsoft .NET Framework, see Microsoft Knowledge Base article 2844699

Restart requirement

This update does not require a restart. The installer stops the required services, applies the update, and then restarts the services. However, if the required services cannot be stopped for any reason, or if required files are being used, this update will require a restart. If this behavior occurs, a message appears that advises you to restart.

Removal information

Click Control Panel, click System and Security. Under Windows Update, click View update history, and then select from the list of updates.

File information

See Microsoft Knowledge Base article 3188743

Registry key verification

These updates do not add a registry key to validate their installation.

Windows Server 2012 and Windows Server 2012 R2 (.NET Framework Installations)Reference table

The following table contains the security update information for .NET Framework installations running on all supported versions of Windows Server 2012 and Windows Server 2012 R2 for the Monthly Rollup.

Security update file name

For Microsoft .NET Framework 3.5 on Windows Server 2012:
Windows8-RT-KB3188741-x64.msu

For Microsoft .NET Framework 3.5 on Windows Server 2012 R2:
Windows8.1-KB3188743-x64.msu

Installation switches

For Microsoft .NET Framework, see Microsoft Knowledge Base article 2844699

Restart requirement

This update does not require a restart. The installer stops the required services, applies the update, and then restarts the services. However, if the required services cannot be stopped for any reason, or if required files are being used, this update will require a restart. If this behavior occurs, a message appears that advises you to restart.

Removal information

Click Control Panel, click System and Security. Under Windows Update, click View update history, and then select from the list of updates.

File information

See Microsoft Knowledge Base article 3188741
See Microsoft Knowledge Base article 3188743

Registry key verification

These updates do not add a registry key to validate their installation.

Windows 10 (.NET Framework Installations)Reference table

The following table contains the security update information for .NET Framework installations running on all supported versions of Windows 10 for the Monthly Rollup.

Security update file name

For Microsoft .NET Framework 3.5 on all supported 32-bit editions of Windows 10:
Windows10.0-KB3192440-x86.msu

For Microsoft .NET Framework 3.5 on all supported x64-based editions of Windows 10:
Windows10.0-KB3192440-x64.msu

For Microsoft .NET Framework 3.5 on all supported 32-bit editions of Windows 10 version 1511:
Windows10.0-KB3192441-x86.msu

For Microsoft .NET Framework 3.5 on all supported x64-based editions of Windows 10 Version 1511:
Windows10.0-KB3192441-x64.msu

For Microsoft .NET Framework 3.5 on all supported 32-bit editions of Windows 10 version 1607:
Windows10.0-KB3194798-x86.msu

For Microsoft .NET Framework 3.5 on all supported x64-based editions of Windows 10 Version 1607:
Windows10.0-KB3194798-x64.msu

Installation switches

For Microsoft .NET Framework, see Microsoft Knowledge Base article 2844699

Restart requirement

Yes, you must restart your system after you apply this security update.

Removal information

To uninstall an update that is installed by WUSA, use the /Uninstall setup switch or click Control Panel, click System and Security. Under Windows Update, click View installed updates, and then select from the list of updates.

File information

See Microsoft Knowledge Base article 3192440
See Microsoft Knowledge Base article 3192441
See Microsoft Knowledge Base article 3194798

Registry key verification

These updates do not add a registry key to validate their installation.

Microsoft Word Viewer (all editions)Reference table

The following table contains the security update information for this software.

Security update file name

For Microsoft Word Viewer:
office2003-kb3118394-fullfile-enu.exe

Installation switches

See Microsoft Knowledge Base article 912203

Restart requirement

In some cases, this update does not require a restart. If the required files are being used, this update will require a restart. If this behavior occurs, a message appears that advises you to restart.

To help reduce the chance that a restart will be required, stop all affected services and close all applications that may use the affected files prior to installing the security update. For more information about the reasons why you may be prompted to restart, see Microsoft Knowledge Base article 887012.

Removal information

Use Add or Remove Programs item in Control Panel.

File information

See Microsoft Knowledge Base article 3118394

Registry key verification

Not applicable

Microsoft Office 2007 (all editions)Reference table

The following table contains the security update information for this software.

Security update file name

For all supported editions of Microsoft Office 2007:
ogl2007-KB3118301-fullfile-x86-glb.exe

Installation switches

See Microsoft Knowledge Base article 912203

Restart requirement

In some cases, this update does not require a restart. If the required files are being used, this update will require a restart. If this behavior occurs, a message appears that advises you to restart.

To help reduce the chance that a restart will be required, stop all affected services and close all applications that may use the affected files prior to installing the security update. For more information about the reasons why you may be prompted to restart, see Microsoft Knowledge Base article 887012.

Removal information

Use Add or Remove Programs item in Control Panel.

File information

See Microsoft Knowledge Base article 3118301

Registry key verification

Not applicable

Microsoft Office 2010 (all editions)Reference table

The following table contains the security update information for this software.

Security update file name

For all supported editions of Microsoft Office 2010 (32-bit editions):
ogl2010-KB3118317-fullfile-x86-glb.exe

For all supported editions of Microsoft Office 2010 (64-bit editions):
ogl2010-KB3118317-fullfile-x64-glb.exe

Installation switches

See Microsoft Knowledge Base article 912203

Restart requirement

In some cases, this update does not require a restart. If the required files are being used, this update will require a restart. If this behavior occurs, a message appears that advises you to restart.

To help reduce the chance that a restart will be required, stop all affected services and close all applications that may use the affected files prior to installing the security update. For more information about the reasons why you may be prompted to restart, see Microsoft Knowledge Base article 887012.

Removal information

Use Add or Remove Programs item in Control Panel.

File information

See Microsoft Knowledge Base article 3118317

Registry key verification

Not applicable

Microsoft Live Meeting 2007, Microsoft Lync 2010, Microsoft Lync 2010 Attendee, Microsoft Lync 2013 (Skype for Business), and Microsoft Lync Basic 2013 (Skype for Business Basic)Reference table

The following table contains the security update information for this software.

Security update file name

For Microsoft Live Meeting 2007 Console (3189647):
LMSetup.exe

For Microsoft Lync 2010 (32-bit) (3188397):
lync.msp

For Microsoft Lync 2010 (64-bit) (3188397):
lync.msp

For Microsoft Lync 2010 Attendee (user level install) (3188399):
AttendeeUser.msp

For Microsoft Lync 2010 Attendee (admin level install) (3188400):
AttendeeAdmin.msp

For all supported editions of Microsoft Lync 2013 (Skype for Business) (32-bit) and Microsoft Lync Basic 2013 (Skype for Business Basic) (32-bit):
lync2013-KB3118348-fullfile-x86-glb.exe

For all supported editions of Microsoft Lync 2013 (Skype for Business) (64-bit) and Microsoft Lync Basic 2013 (Skype for Business Basic) (64-bit):
lync2013-KB3118348-fullfile-x64-glb.exe

For all supported 32-bit editions of Skype for Business 2016 and Skype for Business Basic 2016:
lync2016-KB3118327-fullfile-x86-glb.exe

For all supported 64-bit editions of Skype for Business 2016 and Skype for Business Basic 2016:
lync2016-KB3118327-fullfile-x64-glb.exe

Installation switches

See Microsoft Knowledge Base article 912203

Restart requirement

In some cases, this update does not require a restart. If the required files are being used, this update will require a restart. If this behavior occurs, a message appears that advises you to restart.

To help reduce the chance that a restart will be required, stop all affected services and close all applications that may use the affected files prior to installing the security update. For more information about the reasons why you may be prompted to restart, see Microsoft Knowledge Base article 887012.

Removal Information

Use Add or Remove Programs item in Control Panel.

File Information

For Microsoft Live Meeting 2007 Console:
See Microsoft Knowledge Base article xxxxxx

For all supported editions of Microsoft Lync 2010:
See Microsoft Knowledge Base article xxxxxx

For Microsoft Lync 2010 Attendee (user level install):
See Microsoft Knowledge Base article xxxxxx

For Microsoft Lync 2010 Attendee (admin level install):
See Microsoft Knowledge Base article xxxxxx

For Microsoft Lync 2013 (Skype for Business) and Microsoft Lync Basic 2013 (Skype for Business Basic):
See Microsoft Knowledge Base article 3118348

For Skype for Business 2016 and Skype for Business Basic 2016:
See Microsoft Knowledge Base article 3118327

Registry Key Verification

For Microsoft Live Meeting 2007 Console:
Not applicable

For Microsoft Lync 2010 (32-bit):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{0EEB34F6-991D-4a1b-8EEB-772DA0EADB22}
Version = 7577.4498

For Microsoft Lync 2010 (64-bit):
HKEY_LOCAL_MACHINE\ SOFTWARE\Wow6432Node\Microsoft\Active Setup\Installed Components\{0EEB34F6-991D-4a1b-8EEB-772DA0EADB22}
Version = 7577.4498

For Microsoft Lync 2010 Attendee (user level install):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{0EEB34F6-991D-4a1b-8EEB-772DA0EADB22}
Version = 7577.4498

For Microsoft Lync 2010 Attendee (admin level install):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\94E53390F8C13794999249B19E6CFE33\InstallProperties\DisplayVersion = 4.0.7577.4498

For Microsoft Lync 2013 (Skype for Business) and Microsoft Lync Basic 2013 (Skype for Business Basic):
Not applicable

For Skype for Business 2016 and Skype for Business Basic 2016:
Not applicable

Silverlight 5 for Mac (all editions)Reference table

The following table contains the security update information for this software.

Security update file names

For Microsoft Silverlight 5 when installed on Mac:
Silverlight.dmg

For Microsoft Silverlight 5 Developer Runtime when installed on Mac:
silverlight_developer.dmg

Restart requirement

This update does not require a restart.

Removal information

Open the Finder, select the system drive, go to the folder Internet Plug-ins - Library, and delete the file Silverlight.Plugin. (Note that the update cannot be removed without removing the Silverlight plug-in.)

File information

See Microsoft Knowledge Base article 2932677

Installation verification

See the Update FAQ section in this bulletin that addresses the question, "How do I know which version and build of Microsoft Silverlight is currently installed?"

Silverlight 5 for Windows (all supported releases)Reference table

The following table contains the security update information for this software.

Security update file names

For Microsoft Silverlight 5 when installed on all supported 32-bit releases of Microsoft Windows:
silverlight.exe

For Microsoft Silverlight 5 Developer Runtime when installed on all supported 32-bit releases of Microsoft Windows:
silverlight_developer.exe

For Microsoft Silverlight 5 when installed on all supported 64-bit releases of Microsoft Windows:
silverlight_x64.exe

For Microsoft Silverlight 5 Developer Runtime when installed on all supported 64-bit releases of Microsoft Windows:
silverlight_developer_x64.exe

Installation switches

See the Silverlight Enterprise Deployment Guide

Restart requirement

This update does not require a restart.

Removal information

Use Add or Remove Programs item in Control Panel. (Note that the update cannot be removed without removing Silverlight.)

File information

See Microsoft Knowledge Base article 3193713

Registry key verification

For 32-bit installations of Microsoft Silverlight 5:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Silverlight "Version" = "5.1.50901.0"

For 64-bit installations of Microsoft Silverlight 5:
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Silverlight "Version" = "5.1.50901.0"
and
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Silverlight "Version" = "5.1.50901.0"


Help for installing updates: Support for Microsoft Update

Security solutions for IT professionals: TechNet Security Troubleshooting and Support

Help for protecting your Windows-based computer from viruses and malware: Virus Solution and Security Center

Local support according to your country: International Support

Need more help?

Expand your skills
Explore Training
Get new features first
Join Microsoft Insiders

Was this information helpful?

Thank you for your feedback!

Thank you for your feedback! It sounds like it might be helpful to connect you to one of our Office support agents.

×