Lucene search

K
mskbMicrosoftKB4462949
HistoryOct 09, 2018 - 7:00 a.m.

Cumulative security update for Internet Explorer: October 09, 2018

2018-10-0907:00:00
Microsoft
support.microsoft.com
87

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

8.1 High

AI Score

Confidence

High

7.6 High

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

0.205 Low

EPSS

Percentile

96.3%

Cumulative security update for Internet Explorer: October 09, 2018

Summary

This security update resolves several reported vulnerabilities in Internet Explorer. The most severe of these vulnerabilities could allow remote code execution if a user views a specially crafted webpage in Internet Explorer. To learn more about these vulnerabilities, see Microsoft Common Vulnerabilities and Exposures. Additionally, see the following articles for more information about this cumulative update:

  • Windows Server 2008 SP2 update history

  • Windows 7 SP1 and Windows Server 2008 R2 SP1 update history

  • Windows Server 2012 update history

  • Windows 8.1 and Windows Server 2012 R2 update history

  • Windows 10 and Windows Server 2016 update history
    Important

  • The fixes that are included in this Security Update for Internet Explorer (KB 4462949) are also included in the October 2018 Security Monthly Quality Rollup. Installing either the Security Update for Internet Explorer or the Security Monthly Quality Rollup installs the fixes that are in this update.

  • If you use update management processes other than Windows Update and you automatically approve all security updates classifications for deployment, this Security Update for Internet Explorer (KB 4462949), the October 2018 Security Only Quality Update, and the October 2018 Security Monthly Quality Rollup are deployed. We recommend that you review your update deployment rules to make sure that the desired updates are deployed.

  • This Security Update for Internet Explorer is not applicable for installation on a computer on which the Security Monthly Quality Rollup or the Preview of Monthly Quality Rollup from October 2018 (or a later month) is already installed. This is because those updates contain all the fixes that are in this Security Update for Internet Explorer.

  • If you install a language pack after you install this update, you must reinstall this update. Therefore, we recommend that you install any language packs that you need before you install this update. For more information, see Add language packs to Windows.

How to get and install the update

Method 1: Microsoft Update

This update is available through Microsoft Update. When you turn on automatic updating, this update will be downloaded and installed automatically.For more information about how to get security updates automatically, see Windows Update: FAQ.Note For Windows RT and Windows RT 8.1, this update is available through Microsoft Update only.

Method 2: Microsoft Update Catalog

To get the stand-alone package for this update, go to the Microsoft Update Catalog website.

Deployment information

For deployment details for this security update, see the following article in the Microsoft Knowledge Base:Security update deployment information: October 9, 2018

More Information

__

How to get help and support for this security update

Help for installing updates: Protect yourself onlineHelp for protecting your Windows-based computer from viruses and malware: Microsoft SecureLocal support according to your country: International Support

File informationFor a list of the files that are provided in this cumulative update, download the file information for cumulative update 4462949.

File hash information

File name SHA1 hash SHA256 hash
Windows8.1-KB4462949-arm.msu 8E321F16299A706DB2E539D9CEFD0972099403BE 9F37204831446A48DCBA49001870219FEE0F8D75A57740553C0F8A7B0BE3A36A
Windows8.1-KB4462949-x86.msu BA76CAF636D117043C449A661DE8D4A867734DAB CD8433F7950AE6EB4FF0C5118632CD586C23223CC4E22C36CA3E2543B08713D2
Windows8.1-KB4462949-x64.msu C38DEC7A0FC5A8973C4F4C47493DCEE927924D1F F7F657A7265B9CEC629BA97BD595B2A5A5FF8B502484169F695BB91783DFB3AE
Windows8-RT-KB4462949-x64.msu 217F07B0AD19A4EB809278966DFD86478DF8C299 A2F0AA18CF932224B465442A06518160350170AD3E269C83630F1239597BC823
IE11-Windows6.1-KB4462949-X64.msu 135A2501673B9B877DE0153ADB3A4F3ADD43508A FFDFA4D234F64BA6103E51A5510F8C12CC61AD600B74419206F8FF32A404101C
IE11-Windows6.1-KB4462949-X86.msu 1F4F41093410D9995EA9649A2376BC8B69E7A367 3A62A2BF04656ED0D9A41EC849A7D6AF19E103AD3AEDFE42C8B9D2C79D719F5F
IE9-Windows6.0-KB4462949-X86.msu A8E361A5A7BC3CCCBFF3E99A890EA14D032E16C0 1A5196C2E7AAB88B104EF7D6027F9E6651B60A48AD192F69EBA0EF3C8E72CAAC
IE9-Windows6.0-KB4462949-X64.msu 74097A7CAA021696D920DF4216302438243B3B72 541545AB2E775A06B7025107BDE8F517098067250A89DC72914A83A1CBF1E17E
IE8-WindowsXP-KB4462949-x86-Embedded-ENU.exe 1D397F10668187DEFCC5126C952D70DB36F20ABE 27A1BFB1F9C5EF6297B2085443781868DE5AD414E57E45B3F65104D1B8486A71

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

8.1 High

AI Score

Confidence

High

7.6 High

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

0.205 Low

EPSS

Percentile

96.3%