Lucene search

MicrosoftKB4041693

HistoryOct 16, 2017 - 7:00 a.m.

October 10, 2017—KB4041693 (Monthly Rollup)

2017-10-1607:00:00

Microsoft

support.microsoft.com

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.5

Confidence

Low

EPSS

0.9

Percentile

98.9%

JSON

October 10, 2017—KB4041693 (Monthly Rollup)

Improvements and fixes

This security update includes improvements and fixes that were a part of update KB4038774 (released September 19, 2017) and resolves the following issues:

Addressed issue with docking and undocking Internet Explorer windows.
Addressed issue with form submissions in Internet Explorer.
Addressed issue where Internet Explorer stops responding to a navigation request.
Addressed issue that occurs in the WebView Control of Internet Explorer in certain scenarios.
Addressed issue with URL encoding in Internet Explorer.
Addressed issue that prevents an element from receiving focus in Internet Explorer.
Addressed issue caused by a pop-up window in Internet Explorer.
Addressed issue with the rendering of a graphics element in Internet Explorer.
Addressed issue in Internet Explorer caused by a redirection link.
Addressed issue where messages that should be in a non-English language display in English in Internet Explorer.
Addressed issue where USBHUB.SYS randomly causes memory corruption that results in random system crashes that are extremely difficult to diagnose.
Security updates to Microsoft Windows Search Component, Windows kernel-mode drivers, Microsoft Graphics Component, Internet Explorer, Windows kernel, Windows Wireless Networking, Windows Storage and Filesystems, Microsoft Windows DNS, Windows Server, Microsoft JET Database Engine, and the Windows SMB Server.

For more information about the resolved security vulnerabilities, see the Security Update Guide.

Known issues in this update

Symptom	Workaround
After installing KB 4041693, package users may receive an error message that states that an application exception has occurred when some applications are closed. This can affect applications that use mshtml.dll to load web content. This problem occurs only when a process is already shutting down. It does not affect application functionality.	This issue is resolved in KB4048958.
Installing this update may cause applications based on the Microsoft JET Database Engine (Microsoft Access 2007 and older or non-Microsoft applications) to fail when creating or opening Microsoft Excel .xls files. The error message is, “Unexpected error from external database driver (1). (Microsoft JET Database Engine)".	Download and install the Microsoft Access Database Engine 2010 Redistributable, and then modify the DB connection strings in Microsoft Excel to use ACE as a provider. Example: Change Provider=Microsoft.Jet.OLEDB.4.0 to Provider=Microsoft.ACE.OLEDB.12.0.Microsoft is working on a resolution and will provide an update in an upcoming release.
Some users who have the text size for icons set to a larger size (using Display Settings in Control Panel) may have issues launching Internet Explorer.	Reducing the text size for icons to a smaller value or using theChange the size of all items setting should alleviate this issue.Microsoft is working on a resolution and will provide an update in an upcoming release.
After installing this KB, Internet Explorer 11 users who use SQL Server Reporting Services (SSRS) may not be able to scroll through a drop-down menu using the scroll bar.	This issue is resolved in KB4054519.

How to get this update

This update will be downloaded and installed automatically from Windows Update. To get the standalone package for this update, go to the Microsoft Update Catalog website.File information For a list of the files that are provided in this update, download the file information for update 4041693.