ms16-003

MS16-003 is a critical security update from Microsoft that resolves a remote code execution vulnerability in the VBScript scripting engine. The vulnerability could be exploited if a user visits a specially crafted website, potentially allowing an attacker to gain the same user rights as the current user. If the user has administrative privileges, the attacker could take complete control of the affected system, install programs, or modify data. This update was published on January 12, 2016, and applies to Microsoft Windows systems. It is part of Microsoft's regular security bulletin release cycle and addresses a vulnerability that could be used in drive-by download attacks.