Applies ToWindows 7 Service Pack 1 Windows Server 2008 R2 Service Pack 1

Release Date:

10/07/2018

Version:

Monthly Rollup

Improvements and fixes

This security update includes improvements and fixes that were a part of update KB4284842 (released June 21, 2018) and addresses the following issues:

  • Provides protections for an additional vulnerability involving side-channel speculative execution known as Lazy Floating Point (FP) State Restore (CVE-2018-3665) for 64-Bit (x64) versions of Windows.

  • Updates Internet Explorer's Inspect Element feature to conform to the policy that disables the launch of Developer Tools.

  • Addresses an issue where DNS requests disregard proxy configurations in Internet Explorer and Microsoft Edge.

  • Security updates to Internet Explorer, Windows apps, Windows graphics, Windows Shell, Windows datacenter networking, Windows wireless networking, and Windows virtualization.

For more information about the resolved security vulnerabilities, see the Security Update Guide.

Known issues in this update

Symptom

Workaround

After you apply this update, the network interface controller may stop working on some client software configurations. This occurs because of an issue related to a missing file, oem<number>.inf. The exact problematic configurations are currently unknown.

  1. To locate the network device, launch devmgmt.msc; it may appear under Other Devices.

  2. To automatically rediscover the NIC and install drivers, select Scan for Hardware Changes from the Action menu.

a. Alternatively, install the drivers for the network device by right-clicking the device and selecting Update. Then select Search automatically for updated driver software or Browse my computer for driver software.

After installing this update, some devices running network monitoring workloads may receive the 0xD1 Stop error because of a race condition.

This issue is resolved in KB4338821.

Restarting the SQL Service may fail occasionally with the error, “Tcp port is already in use”.

This issue is resolved in KB4338821.

When an administrator tries to stop the World Wide Web Publishing Service (W3SVC), the W3SVC remains in a "stopping" state, but cannot fully stop or be restarted.

This issue is resolved in KB4338821.

How to get this update

This update will be downloaded and installed automatically from Windows Update. To get the standalone package for this update, go to the Microsoft Update Catalog website.

File information

For a list of the files that are provided in this update, download the file information for update 4338818

Need more help?

Want more options?

Explore subscription benefits, browse training courses, learn how to secure your device, and more.

Communities help you ask and answer questions, give feedback, and hear from experts with rich knowledge.