Lucene search

K
mskbMicrosoftKB4038783
HistorySep 12, 2017 - 7:00 a.m.

September 12, 2017—KB4038783 (OS Build 10586.1106)

2017-09-1207:00:00
Microsoft
support.microsoft.com
29

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7.5 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.972 High

EPSS

Percentile

99.8%

September 12, 2017—KB4038783 (OS Build 10586.1106)

Improvements and fixes

This update includes quality improvements. No new operating system features are being introduced in this update. Key changes include:

  • Updates to Internet Explorer 11’s navigation bar with search box.
  • Addressed issue in Internet Explorer where undo is broken if character conversion is canceled using IME.
  • Addressed issue where spoolsv.exe crashes.
  • Addressed issue where using a smart card to log on to a Remote Desktop Server sometimes stops responding.
  • Updated the BitLocker.psm1PowerShell script to not log passwords when logging is enabled.
  • Addressed issue where a service using a Managed Service Account (MSA) fails to connect to the domain after an automatic password update.
  • Addressed issue where revoking a certificate associated with a disabled user account in the CA management console fails. The error is "The user name or password is incorrect. 0x8007052e (WIN32: 1326 ERROR_LOGON_FAILURE)”.
  • Addressed issue where LSASS deadlocks with the Server Message Block 2.0 (SMB 2.0) client redirector. All attempts to log on to a Remote Desktop Server fail.
  • Addressed issue where Windows Error Reporting doesn’t clean up temporary files when there is a redirection on a folder.
  • Re-release of MS16-087 - Security update for Windows print spooler components.
  • Security updates to Internet Explorer, Microsoft Edge, Windows Hyper-V, Device Guard, Windows kernel, Windows Virtualization and Base, Windows Cryptography, Windows scripting, Microsoft Edge, Windows shell, Microsoft Uniscribe, Windows kernel-mode drivers, Microsoft Graphics Component, and the Microsoft Scripting Engine.
    If you installed earlier updates, only the new fixes contained in this package will be downloaded and installed on your device.For more information about the resolved security vulnerabilities, please refer to the Security Update Guide.

Windows Update Client ImprovementMicrosoft will release an update directly to the Windows Update Client to improve Windows Update reliability. It will only be offered to devices that have not installed the most recent updates and are not currently managed (e.g., domain joined).

Known issues in this update

Symptom Workaround
Some users who have the text size for icons set to a larger size (using Display Settings in Control Panel) may have issues launching Internet Explorer. Reducing the text size for icons to a smaller value or using theChange the size of all items setting should alleviate this issue.Microsoft is working on a resolution and will provide an update in an upcoming release.

How to get this update

This update will be downloaded and installed automatically from Windows Update. To get the standalone package for this update, go to the Microsoft Update Catalog website. File informationFor a list of the files that are provided in this update, download the file information for cumulative update 4038783.

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7.5 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.972 High

EPSS

Percentile

99.8%