9.3 - MS16-006

Severity Rating: Critical
Revision Note: V1.1 (January 14, 2016): Revised the exploit status of CVE-2016-0034. At the time this security bulletin was originally issued, Microsoft received a report that could indicate a limited attack attempting to exploit this vulnerability. This is an informational change only. Customers who have successfully installed the update do not need to take any further action.
Summary: This security update resolves a vulnerability in Microsoft Silverlight. The vulnerability could allow remote code execution if a user visits a compromised website that contains a specially crafted Silverlight application. An attacker would have no way to force users to visit a compromised website. Instead, an attacker would have to convince users to visit the website, typically by getting them to click a link in an email or instant message that takes users to the attacker's website.