Patch Tuesday: Microsoft Security Bulletin Summary for January 2016

Microsoft Patch Tuesday January 2016 bring nine security bulletins which is addressing 25 vulnerabilities. Six are rated as Critical and 3 are Important. Detect vulnerabilities with the help of a vulnerability management tool.

Six Bulletins are rated as Critical , MS16-001 for Internet Explorer. MS16-002 for Microsoft Edge, MS16-003for JScript and VBScript, MS16-004for Microsoft Office, MS16-005 for Windows Drivers and MS16-006for Silverlight.

MS 16-001 : Vulnerabilities in Internet Explorer (3124903)
Severity Rating: Critical
Affected Software: Internet Explorer
Impact: Remote Code Execution.

MS16-002 : Vulnerabilities in Microsoft Edge (3124904)
Severity Rating: Critical
Affected Software: Microsoft Edge
Impact: Remote Code Execution.

MS16-003 : Vulnerability in VBScript and JScript scripting engines (3125540)
Severity Rating: Critical
Affected Software: JScript and VBScript
Impact: Remote Code Execution.

MS16-004 : Vulnerabilities in Microsoft Office (3124585)
Severity Rating: Critical
Affected Software: Microsoft Office
Impact: Remote Code Execution.

MS16-005 : Vulnerabilities in Windows Kernel-Mode Drivers (3124584)
Severity Rating: Critical
Affected Software: Windows Kernel-Mode Drivers
Impact: Remote Code Execution.

MS16-006 : Vulnerabilities in Silverlight (3126036)
Severity Rating: Critical
Affected Software: Microsoft Silverlight
Impact: Remote Code Execution.

MS16-007 : Vulnerabilities in Microsoft Windows (3124901)
Severity Rating: Important
Affected Software: Microsoft Windows
Impact: Remote Code Execution

MS16-008 : Vulnerabilities in Windows Kernel (3124605)
Severity Rating: Important
Affected Software: Microsoft Windows
Impact: Privilege Elevation .

MS16-010 : Vulnerabilities in Exchange Server (3124557)
Severity Rating: Important
Affected Software: Exchange Server
Impact:Address Spoofing.

SecPod Saner detects these vulnerabilities and automatically fixes by applying security updates. Download Saner now and keep your systems updated and secure.

– AnTu

Operation CameraSwarm: Inside the Toolkit Behind 14,530 Compromised Dahua Cameras

A single operator compromised 14,530+ Dahua cameras across Ukraine and Russia in 35 days, chaining credential brute-force, a CVE-2021-33044/33045 authentication bypass, and P2P relay abuse to plant a persistent backdoor and harvest transferable admin access.

Aug 21, 2026

CVE Research

Critical GitLab Flaw Exposes Public Projects to Deletion — Two CVEs Patched, Including High-Severity CSRF

CVE-2026-19478 is a critical code injection vulnerability in GitLab CE/EE that allows an unauthenticated attacker to modify or delete public projects and user data by abusing a GraphQL directive. A second high-severity issue, CVE-2026-19650, involves cross-site request forgery in the GraphQL multiplex query handler. This article examines how the critical vulnerability works, the availability of a public proof-of-concept, the potential impact on self-managed instances, the affected versions, and the security updates released to remediate both issues.

Aug 19, 2026

CVE Research

No Password Needed: macOS Screen Sharing Flaw (CVE-2026-65400) Used to Deploy Monero Miners

Aug 19, 2026

CVE Research

Evooo1Bot: Mirai-Based Linux Botnet Turns Edge Devices Into SOCKS5 Proxies

Aug 19, 2026

Search across all Learn content

Patch Tuesday: Microsoft Security Bulletin Summary for January 2016

Featured Posts

Operation CameraSwarm: Inside the Toolkit Behind 14,530 Compromised Dahua Cameras

Critical GitLab Flaw Exposes Public Projects to Deletion — Two CVEs Patched, Including High-Severity CSRF

No Password Needed: macOS Screen Sharing Flaw (CVE-2026-65400) Used to Deploy Monero Miners

Evooo1Bot: Mirai-Based Linux Botnet Turns Edge Devices Into SOCKS5 Proxies

Customers

Learn

Support