Lucene search

K
mskbMicrosoftKB4036586
HistorySep 12, 2017 - 7:00 a.m.

Cumulative security update for Internet Explorer: September 12, 2017

2017-09-1207:00:00
Microsoft
support.microsoft.com
5054

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

7.5 High

AI Score

Confidence

Low

7.6 High

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

0.069 Low

EPSS

Percentile

93.8%

Cumulative security update for Internet Explorer: September 12, 2017

Summary

This security update resolves several reported vulnerabilities in Internet Explorer. The most severe of these vulnerabilities could allow remote code execution if a user views a specially crafted webpage in Internet Explorer. To learn more about these vulnerabilities, see Microsoft Common Vulnerabilities and Exposures. Additionally, see the following articles for more information about this cumulative update:

  • Windows 7 SP1 and Windows Server 2008 R2 SP1 update history

  • Windows Server 2012 update history

  • Windows 8.1 and Windows Server 2012 R2 update history

  • Windows 10 and Windows Server 2016 update history
    Important

  • The fixes that are included in this Security Update for Internet Explorer 4036586 are also included in the September 2017 Security Monthly Quality Rollup. Installing either the Security Update for Internet Explorer or the Security Monthly Quality Rollup installs the fixes that are resolved in this update.

  • If you use update management processes other than Windows Update and you automatically approve all security updates classifications for deployment, this Security Update for Internet Explorer 4036586, the September 2017 Security Only Quality Update, and the September 2017 Security Monthly Quality Rollup are deployed. We recommend that you review your update deployment rules to make sure that the desired updates are deployed.

  • This Security Update for Internet Explorer is not applicable for installation on a computer where the Security Monthly Quality Rollup or the Preview of Monthly Quality Rollup from September 2017 (or a later month) is already installed. This is because those updates contain all fixes that are in this Security Update for Internet Explorer.
    If you install a language pack after you install this update, you must reinstall this update. Therefore, we recommend that you install any language packs that you need before you install this update. For more information, see Add language packs to Windows.Note With the rerelease of CVE-2017-8529 Microsoft has addressed previously known print issues related to this vulnerability; however, to prevent the potential for any further print regressions, the solution for CVE-2017-8529 is turned off by default. To be fully protected from this vulnerability, you need to apply a registry change after installing the update. For more information, go to CVE-2017-8529.

Deployment information

For deployment details for this security update, see the following article in the Microsoft Knowledge Base:Security update deployment information: September 12, 2017

How to get and install the update

Method 1: Microsoft Update

This update is available through Microsoft Update. When you turn on automatic updating, this update will be downloaded and installed automatically.For more information about how to get security updates automatically, see Windows Update: FAQ.

Note For Windows RT and Windows RT 8.1, this update is available through Microsoft Update only.

Method 2: Microsoft Update Catalog

To get the stand-alone package for this update, go to the Microsoft Update Catalog website.

More Information

__

How to get help and support for this security update

Help for installing updates: Windows Update: FAQ

Security solutions for IT professionals: TechNet Security Support and Troubleshooting

Help for protecting your Windows-based computer from viruses and malware: Microsoft Secure

Local support according to your country: International Support

File informationFor a list of the files that are provided in this cumulative update, download the file information for cumulative update 4036586.

File hash information

File name SHA1 hash SHA256 hash
Windows8.1-KB4036586-x86.msu 2CCE23B908D860C489D1E12127291FDCEBE4B8FC 715083B8FCA497173FB6D77B458566A5FF94547548531E5687A7ACC3401DA8E3
Windows8.1-KB4036586-arm.msu 23E0797B4F2F2B5046482607E4A0E7FB64FB512A 33ABF4AEF8A8CE7B17ADC095BA7F37048C5741A967D378EA4F1ED097C0181721
Windows8.1-KB4036586-x64.msu B6B49D1BC62F547698325BA6945A1B7B6E630725 54A3A99677CE1D9C1BD5557F33481F4F9C0966F164F17C93F239C7248431A238
IE11-Windows6.1-KB4036586-X86.msu A1EB4F1BCBF003890D20287D15C8864A5B574930 45FFAE70123C5DCA3DC3AC3C583A0F1E62FEBC422F378B563C66DA63C4366657
IE11-Windows6.1-KB4036586-X64.msu 0214C0DE68AAB4A4DC1D350AF5BC289561528193 22BF654C7B9674F268C18D1B84F31D973E24167ABB651DB848E6CE5D4F94CF08
IE9-Windows6.0-KB4036586-X86.msu 668DB855D0EAB1C135F2C4A544C4081644309514 F1D02B01C7721C029096459F3A4C87E6AD54CF4999A779F0F8056E8CFA36ADF6
IE9-Windows6.0-KB4036586-X64.msu C7EAD6911FDF5DBF9AF675E2A665FB8668453A8F 5FD7553406BD257C3143F4E181748D49B7EEB0358BA12AA732BE701D05551872
Windows8-RT-KB4036586-x64.msu FBFCEA3DCA759E317FB36123722539687E790429 A3DBFC64746103E5A080A31DBE32507AF43926DCF865B0E9195CC5F2199F5D2B

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

7.5 High

AI Score

Confidence

Low

7.6 High

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

0.069 Low

EPSS

Percentile

93.8%