Lucene search

K
mskbMicrosoftKB4048958
HistoryNov 14, 2017 - 8:00 a.m.

November 14, 2017—KB4048958 (Monthly Rollup)

2017-11-1408:00:00
Microsoft
support.microsoft.com
44

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.759 High

EPSS

Percentile

98.1%

November 14, 2017—KB4048958 (Monthly Rollup)

Improvements and fixes

This security update includes improvements and fixes that were a part of update KB4041685 (released October 17, 2017) and resolves the following issues:

  • Addressed issue where the virtual smart card doesn’t assess the Trusted Platform Module (TPM) vulnerability correctly.
  • Addressed issue where applications based on the Microsoft JET Database Engine (Microsoft Access 2007 and older or non-Microsoft applications) fail when creating or opening Microsoft Excel .xls files. The error message is: “Unexpected error from external database driver (1). (Microsoft JET Database Engine)".
  • Addressed a crash in Internet Explorer that was seen in machines that used large font-size settings.
  • Addressed issue that caused SharePoint Online sites to stop working in Internet Explorer.
  • Security updates to Microsoft Windows Search Component, Microsoft Graphics Component, Windows kernel-mode drivers, Windows Media Player, and Windows kernel.
    For more information about the resolved security vulnerabilities, see the Security Update Guide.

Prerequisites

You must have the following update installed:2919355 Windows RT 8.1, Windows 8.1, and Windows Server 2012 R2 update: April 2014

Known issues in this update

Symptom Workaround
After installing this KB, Internet Explorer 11 users who use SQL Server Reporting Services (SSRS) may not be able to scroll through a drop-down menu using the scroll bar. This issue is resolved in KB4054519.
After you install this update, some Epson SIDM (Dot Matrix) and TM (POS) printers cannot print on x86 and x64-based systems. This issue is resolved in KB4055038.

How to get this update

This update will be downloaded and installed automatically from Windows Update. To get the standalone package for this update, go to the Microsoft Update Catalog website.File informationFor a list of the files that are provided in this update, download the file information for update 4048958.

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.759 High

EPSS

Percentile

98.1%