概要
此安全更新修复了 Microsoft Windows 的一个漏洞。如果攻击者在目标设备上安装受影响的策略，该漏洞允许绕过安全启动安全功能。若要安装策略并绕过安全启动，攻击者必须具有管理权限或物理访问权限。
若要详细了解此类漏洞，请参阅 Microsoft 安全公告 MS16-094。
更多信息
重要提示
-
今后所有适用于 Windows RT 8.1、Windows 8.1 和 Windows Server 2012 R2 的安全更新和非安全更新均要求安装更新 2919355。我们建议在基于 Windows RT 8.1、Windows 8.1 或 Windows Server 2012 R2 的计算机上安装更新 2919355，以便今后持续接收更新。
-
如果在安装此更新程序后安装语言包，则必须重新安装此更新程序。因此，我们建议先安装所需的全部语言包，然后再安装此更新程序。有关详细信息，请参阅将语言包添加到 Windows。
如何获取和安装此更新程序
方法 1：Windows Update
可以通过 Windows Update 获取此更新。在你开启自动更新后，系统会自动下载并安装此更新程序。有关如何开启自动更新的详细信息，请参阅自动获取安全更新。
注意 对于 Windows RT 8.1，此更新程序仅通过 Windows 更新提供。
可以通过 Microsoft 下载中心获取独立的更新程序包。若要安装此更新程序，请按照下载页上的安装说明操作。
单击 Microsoft 安全公告 MS16-094 中与您运行的 Windows 版本相对应的下载链接。
更多信息
帮助安装更新程序：Microsoft Update 支持
IT 专业人员安全解决方案：TechNet 安全疑难解答与支持
帮助保护您基于 Windows 的计算机不受病毒和恶意软件的侵害：病毒解决方案和安全中心
基于国家/地区的本地支持：国际支持
文件信息
|
File name |
Package hash SHA1 |
Package hash SHA2 |
|---|---|---|
|
Windows8.1-KB3172727-x86.msu |
9B3A9404F262B22ADA0434E5432CDDDCCA344E91 |
BFC8B9D4B8298D691931E4EA2C876D0B394DFDE0A781CC4EAE2392A44318C747 |
|
Windows8.1-KB3172727-x64.msu |
881DFB1EE768A4DFCAAA6DFE67A9A59072577349 |
BC424D3016EB7DE18D9F96717BBCB91F260E64938AAB5D36893CEC15268C0031 |
|
Windows8-RT-KB3172727-x64.msu |
B2BBDE1BCBCAE514A5149618B8AA401A3022FBB3 |
6AA77FE04F7EC823AB0EB16079E06936FFB713FCB0C2205F4C5287BDEC1BC1AD |
此软件更新的英语（美国）版本将安装具有下表所列属性的文件。
Windows 8.1 和 Windows Server 2012 R2 文件信息
注意
-
通过检查在下表中显示的文件版本号，可以识别应用于特定产品、里程碑（RTM、SPn)和服务分支（LDR、GDR）的文件：
版本
产品
里程碑
服务分支
6.3.960 0.16xxx
Windows RT 8.1、Windows 8.1 和 Windows Server 2012 R2
RTM
GDR
6.3.960 0.17xxx
Windows RT 8.1、Windows 8.1 和 Windows Server 2012 R2
RTM
GDR
6.3.960 0.18xxx
Windows RT 8.1、Windows 8.1 和 Windows Server 2012 R2
RTM
GDR
-
GDR 服务分支仅包含那些广泛发布以解决广泛分布的关键问题的修补程序。除广泛发布的修补程序以外，LDR 服务分支还包含其他修补程序。
-
已安装的 MANIFEST 文件 (.manifest) 和 MUM 文件 (.mum) 没有列出。
对于所有受支持的基于 x86 的版本
|
File name |
File version |
File size |
Date |
Time |
Platform |
|---|---|---|---|---|---|
|
Boot.stl |
Not applicable |
4,669 |
24-Jun-2016 |
13:35 |
Not applicable |
|
Ci.dll |
6.3.9600.17550 |
485,544 |
08-Dec-2014 |
19:46 |
x86 |
|
Driver.stl |
Not applicable |
4,538 |
24-Jun-2016 |
13:35 |
Not applicable |
对于所有受支持的基于 x64 版本
|
File name |
File version |
File size |
Date |
Time |
Platform |
|---|---|---|---|---|---|
|
Boot.stl |
Not applicable |
4,669 |
24-Jun-2016 |
13:46 |
Not applicable |
|
Ci.dll |
6.3.9600.17550 |
531,616 |
08-Dec-2014 |
19:42 |
x64 |
|
Driver.stl |
Not applicable |
4,652 |
24-Jun-2016 |
13:46 |
Not applicable |
Windows Server 2012 文件信息
注意
-
通过检查在下表中显示的文件版本号，可以识别应用于特定产品、里程碑（RTM、SPn)和服务分支（LDR、GDR）的文件：
版本
产品
里程碑
服务分支
6.2.920 0.17xxx
Windows 8、Windows RT 或 Windows Server 2012
RTM
GDR
6.2.920 0.21xxx
Windows 8、Windows RT 或 Windows Server 2012
RTM
LDR
-
GDR 服务分支仅包含那些广泛发布以解决广泛分布的关键问题的修补程序。除广泛发布的修补程序以外，LDR 服务分支还包含其他修补程序。
-
已安装的 MANIFEST 文件 (.manifest) 和 MUM 文件 (.mum) 没有列出。
对于所有受支持的基于 x64 版本
|
File name |
File version |
File size |
Date |
Time |
Platform |
SP requirement |
Service branch |
|---|---|---|---|---|---|---|---|
|
Winload.efi |
6.2.9200.21638 |
1,405,408 |
22-Sep-2015 |
21:46 |
Not applicable |
None |
Not applicable |
|
Winload.exe |
6.2.9200.21638 |
1,273,184 |
22-Sep-2015 |
21:46 |
x64 |
None |
Not applicable |
|
Winresume.efi |
6.2.9200.20726 |
1,217,352 |
25-May-2013 |
00:17 |
Not applicable |
None |
Not applicable |
|
Winresume.exe |
6.2.9200.20726 |
1,093,904 |
25-May-2013 |
00:17 |
x64 |
None |
Not applicable |
|
Boot.stl |
Not applicable |
4,629 |
24-Jun-2016 |
13:10 |
Not applicable |
None |
Not applicable |
|
Ci.dll |
6.2.9200.20679 |
503,080 |
04-Apr-2013 |
22:04 |
x64 |
None |
Not applicable |
|
Driver.stl |
Not applicable |
4,367 |
24-Jun-2016 |
13:10 |
Not applicable |
None |
Not applicable |
|
Ksecdd.sys |
6.2.9200.21473 |
100,184 |
02-May-2015 |
06:23 |
x64 |
None |
Not applicable |
|
Lsass.exe |
6.2.9200.20521 |
35,840 |
20-Sep-2012 |
06:33 |
x64 |
None |
Not applicable |
|
Sspicli.dll |
6.2.9200.21703 |
164,352 |
17-Nov-2015 |
08:00 |
x64 |
None |
Not applicable |
|
Sspisrv.dll |
6.2.9200.20521 |
27,648 |
20-Sep-2012 |
06:32 |
x64 |
None |
Not applicable |
|
Cng.sys |
6.2.9200.21637 |
566,072 |
22-Sep-2015 |
13:43 |
x64 |
None |
Not applicable |
|
Ksecpkg.sys |
6.2.9200.21858 |
171,360 |
10-May-2016 |
19:18 |
x64 |
None |
Not applicable |
|
Lsasrv.dll |
6.2.9200.21830 |
1,280,000 |
09-Apr-2016 |
16:01 |
x64 |
None |
Not applicable |
|
Adtschema.dll |
6.2.9200.21289 |
719,360 |
10-Nov-2014 |
04:43 |
x64 |
None |
Not applicable |
|
Msaudite.dll |
6.2.9200.21269 |
146,944 |
11-Oct-2014 |
05:38 |
x64 |
None |
Not applicable |
|
Msobjs.dll |
6.2.9200.16384 |
61,952 |
26-Jul-2012 |
02:36 |
x64 |
None |
Not applicable |
|
Ocspsvcctrs.ini |
Not applicable |
2,960 |
26-Jul-2012 |
05:07 |
Not applicable |
SPS |
AMD64_MICROSOFT-WINDOWS-OCSP |
|
Ocspsvcctrs.ini |
Not applicable |
3,134 |
26-Jul-2012 |
08:00 |
Not applicable |
SPS |
AMD64_MICROSOFT-WINDOWS-OCSP |
|
Ocspsvcctrs.ini |
Not applicable |
2,918 |
26-Jul-2012 |
04:43 |
Not applicable |
SPS |
AMD64_MICROSOFT-WINDOWS-OCSP |
|
Ocspsvcctrs.ini |
Not applicable |
3,210 |
26-Jul-2012 |
07:59 |
Not applicable |
SPS |
AMD64_MICROSOFT-WINDOWS-OCSP |
|
Ocspsvcctrs.ini |
Not applicable |
3,098 |
26-Jul-2012 |
08:00 |
Not applicable |
SPS |
AMD64_MICROSOFT-WINDOWS-OCSP |
|
Ocspsvcctrs.ini |
Not applicable |
3,028 |
26-Jul-2012 |
07:59 |
Not applicable |
SPS |
AMD64_MICROSOFT-WINDOWS-OCSP |
|
Ocspsvcctrs.ini |
Not applicable |
3,140 |
26-Jul-2012 |
05:21 |
Not applicable |
SPS |
AMD64_MICROSOFT-WINDOWS-OCSP |
|
Ocspsvcctrs.ini |
Not applicable |
2,642 |
26-Jul-2012 |
08:11 |
Not applicable |
SPS |
AMD64_MICROSOFT-WINDOWS-OCSP |
|
Ocspsvcctrs.ini |
Not applicable |
2,576 |
26-Jul-2012 |
05:20 |
Not applicable |
SPS |
AMD64_MICROSOFT-WINDOWS-OCSP |
|
Ocspsvcctrs.ini |
Not applicable |
3,026 |
26-Jul-2012 |
07:36 |
Not applicable |
SPS |
AMD64_MICROSOFT-WINDOWS-OCSP |
|
Ocspsvcctrs.ini |
Not applicable |
3,028 |
26-Jul-2012 |
07:48 |
Not applicable |
SPS |
AMD64_MICROSOFT-WINDOWS-OCSP |
|
Ocspsvcctrs.ini |
Not applicable |
3,188 |
26-Jul-2012 |
05:30 |
Not applicable |
SPS |
AMD64_MICROSOFT-WINDOWS-OCSP |
|
Ocspsvcctrs.ini |
Not applicable |
3,126 |
26-Jul-2012 |
05:08 |
Not applicable |
SPS |
AMD64_MICROSOFT-WINDOWS-OCSP |
|
Ocspsvcctrs.ini |
Not applicable |
3,064 |
26-Jul-2012 |
07:49 |
Not applicable |
SPS |
AMD64_MICROSOFT-WINDOWS-OCSP |
|
Ocspsvcctrs.ini |
Not applicable |
3,092 |
26-Jul-2012 |
07:52 |
Not applicable |
SPS |
AMD64_MICROSOFT-WINDOWS-OCSP |
|
Ocspsvcctrs.ini |
Not applicable |
2,828 |
26-Jul-2012 |
05:12 |
Not applicable |
SPS |
AMD64_MICROSOFT-WINDOWS-OCSP |
|
Ocspsvcctrs.ini |
Not applicable |
2,464 |
26-Jul-2012 |
08:05 |
Not applicable |
SPS |
AMD64_MICROSOFT-WINDOWS-OCSP |
|
Ocspsvcctrs.ini |
Not applicable |
2,480 |
26-Jul-2012 |
05:13 |
Not applicable |
SPS |
AMD64_MICROSOFT-WINDOWS-OCSP |
|
Ocspsvcctrs.ini |
Not applicable |
2,460 |
26-Jul-2012 |
08:11 |
Not applicable |
SPS |
AMD64_MICROSOFT-WINDOWS-OCSP |
|
Ocspsvc.exe |
6.2.9200.21345 |
272,384 |
15-Jan-2015 |
05:27 |
x64 |
SPS |
AMD64_MICROSOFT-WINDOWS-OCSP |
|
Ocspsvcctrs.h |
Not applicable |
1,569 |
02-Jun-2012 |
14:34 |
Not applicable |
SPS |
AMD64_MICROSOFT-WINDOWS-OCSP |
|
Ocspsvcctrs.ini |
Not applicable |
2,918 |
02-Jun-2012 |
14:34 |
Not applicable |
SPS |
AMD64_MICROSOFT-WINDOWS-OCSP |
|
Ntoskrnl.exe |
6.2.9200.21914 |
6,937,952 |
01-Jul-2016 |
16:27 |
x64 |
None |
Not applicable |
|
Credssp.dll |
6.2.9200.21703 |
20,480 |
17-Nov-2015 |
07:59 |
x64 |
SP_ |
AMD64_MICROSOFT-WINDOWS-SECURITY-CREDSSP |
|
Tspkg.dll |
6.2.9200.21703 |
94,720 |
17-Nov-2015 |
08:01 |
x64 |
SP_ |
AMD64_MICROSOFT-WINDOWS-SECURITY-CREDSSP |
|
Tspkg.mof |
Not applicable |
964 |
02-Jun-2012 |
14:33 |
Not applicable |
SP_ |
AMD64_MICROSOFT-WINDOWS-SECURITY-CREDSSP |
|
Wdigest.dll |
6.2.9200.21858 |
208,896 |
10-May-2016 |
17:07 |
x64 |
None |
Not applicable |
|
Kerberos.dll |
6.2.9200.21830 |
829,952 |
09-Apr-2016 |
16:01 |
x64 |
None |
Not applicable |
|
Msv1_0.dll |
6.2.9200.21830 |
317,952 |
09-Apr-2016 |
16:01 |
x64 |
None |
Not applicable |
|
Shcore.dll |
6.2.9200.21703 |
590,848 |
17-Nov-2015 |
08:00 |
x64 |
None |
Not applicable |
|
Mrxsmb10.sys |
6.2.9200.21529 |
281,600 |
25-Jun-2015 |
18:52 |
x64 |
None |
Not applicable |
|
Mrxsmb20.sys |
6.2.9200.21548 |
205,312 |
11-Jul-2015 |
17:07 |
x64 |
None |
Not applicable |
|
Mrxsmb.sys |
6.2.9200.21342 |
396,800 |
06-Jan-2015 |
23:17 |
x64 |
None |
Not applicable |
|
Lsm.dll |
6.2.9200.21703 |
439,808 |
17-Nov-2015 |
08:00 |
x64 |
None |
Not applicable |
|
Workerdd.dll |
6.2.9200.21012 |
14,848 |
12-Apr-2014 |
06:58 |
x64 |
None |
Not applicable |
|
Usercpl.dll |
6.2.9200.21703 |
1,043,968 |
17-Nov-2015 |
08:01 |
x64 |
None |
Not applicable |
|
Usercpl.ptxml |
Not applicable |
789 |
11-Oct-2012 |
00:40 |
Not applicable |
None |
Not applicable |
|
Winlogon.exe |
6.2.9200.21703 |
578,048 |
17-Nov-2015 |
08:01 |
x64 |
None |
Not applicable |
|
Sspicli.dll |
6.2.9200.20984 |
99,840 |
10-Mar-2014 |
01:34 |
x86 |
None |
Not applicable |
|
Wdigest.dll |
6.2.9200.21858 |
176,640 |
10-May-2016 |
17:55 |
x86 |
None |
Not applicable |
|
Kerberos.dll |
6.2.9200.21830 |
666,112 |
09-Apr-2016 |
16:48 |
x86 |
None |
Not applicable |
|
Msv1_0.dll |
6.2.9200.21830 |
274,944 |
09-Apr-2016 |
16:48 |
x86 |
None |
Not applicable |
|
Adtschema.dll |
6.2.9200.21289 |
719,360 |
10-Nov-2014 |
03:40 |
x86 |
None |
Not applicable |
|
Msaudite.dll |
6.2.9200.21269 |
146,944 |
11-Oct-2014 |
04:35 |
x86 |
None |
Not applicable |
|
Msobjs.dll |
6.2.9200.16384 |
61,952 |
26-Jul-2012 |
02:47 |
x86 |
None |
Not applicable |
|
Credssp.dll |
6.2.9200.21703 |
17,408 |
17-Nov-2015 |
08:08 |
x86 |
SP_ |
X86_MICROSOFT-WINDOWS-SECURITY-CREDSSP |
|
Tspkg.dll |
6.2.9200.21703 |
76,800 |
17-Nov-2015 |
08:09 |
x86 |
SP_ |
X86_MICROSOFT-WINDOWS-SECURITY-CREDSSP |
|
Tspkg.mof |
Not applicable |
964 |
02-Jun-2012 |
14:33 |
Not applicable |
SP_ |
X86_MICROSOFT-WINDOWS-SECURITY-CREDSSP |
|
Shcore.dll |
6.2.9200.21703 |
460,800 |
17-Nov-2015 |
08:09 |
x86 |
None |
Not applicable |
|
Usercpl.dll |
6.2.9200.21703 |
961,536 |
17-Nov-2015 |
08:09 |
x86 |
None |
Not applicable |
|
Usercpl.ptxml |
Not applicable |
789 |
11-Oct-2012 |
00:42 |
Not applicable |
None |
Not applicable |
