March 13, 2018—KB4088875 (Monthly Rollup)

View products that this article applies to.

Release Date:

Mar 13, 2018

Version:

Monthly Rollup

Improvements and fixes

This security update includes improvements and fixes that were a part of update KB4075211 (released February 21, 2018) and addresses the following issues:

Addresses an issue in which Internet Explorer is unresponsive in certain scenarios when a Browser Helper Object is installed.
Updates legacy Document Mode cell visibility in Internet Explorer.
Addresses an issue in which Internet Explorer stops working in certain printing scenarios.
Addresses an issue in which Internet Explorer stops working when using F12-based developer tools.
Provides cumulative Spectre and Meltdown protections for 32-Bit (x86) and 64-Bit (x64) versions of Windows except the KB4078130 update that was offered to disable mitigation against Spectre Variant 2.
Provides security updates to Internet Explorer, the Microsoft Graphics component, Windows Kernel, Windows Shell, Windows MSXML, Windows Installer, and Windows Hyper-V.

For more information about the resolved security vulnerabilities, see the Security Update Guide.

↑ Back to the top

Notes

Important Please apply KB4100480 immediately after applying this update. KB4100480 resolves an elevation of privilege vulnerability in the Windows Kernel for the 64-Bit (x64) version of Windows. This vulnerability is documented in CVE-2018-1038.

↑ Back to the top

Known issues in this update

Symptom	Workaround
After you install this update, security settings in some organizations that are running Windows 7 SP1 or Windows Server 2008 R2 may prevent Internet Explorer 11 from starting because of an invalid SHA1 certificate.	Whitelist the SHA1 certificate to allow Internet Explorer 11 to start. - OR - Install Cumulative update for Internet Explorer: March 23, 2018.
After installing KB4056897 or any other recent monthly updates, SMB servers may experience a memory leak for some scenarios. This occurs when the requested path traverses a symbolic link, mount point, or directory junction and the registry key is set to 1: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\LanManServer\Parameters\EnableEcp	This issue is resolved in KB4103718.
A Stop error occurs if this update is applied to a 32-Bit (x86) machine with the Physical Address Extension (PAE) mode disabled.	This issue is resolved in KB4093118.
A Stop error occurs on computers that don't support Streaming Single Instructions Multiple Data (SIMD) Extensions 2 (SSE2).	Upgrade your machines with a processor that supports SSE2 or virtualize those machines.
Because of an issue that affects some versions of antivirus software, this fix applies only to computers on which the antivirus ISV updated the ALLOW REGKEY.	This issue is resolved in KB4093118. You no longer need the following ALLOW REGKEY to detect and be offered this update: HKEY_LOCAL_MACHINE"Subkey="SOFTWARE\Microsoft\Windows\CurrentVersion\QualityCompat\cadca5fe-87d3-4b96-b7fb-a231484277cc
A new Ethernet Network Interface Card (NIC) that has default settings may replace the previously existing NIC, causing network issues after you apply this update. Any custom settings on the previous NIC persist in the registry but are unused.	This issue has been resolved in KB4093118.
Static IP address settings are lost after you apply this update.	This issue has been resolved in KB4093118.
After you install this update, you may receive a Stop error message that resembles the following when you log off the computer: SESSION_HAS_VALID_POOL_ON_EXIT (ab)	To resolve this issue, apply update KB4099467.
After you apply this update, the network interface controller may stop working on some client software configurations. This occurs because of an issue related to a missing file, oem<number>.inf. The exact problematic configurations are currently unknown.	To locate the network device, launch devmgmt.msc; it may appear under Other Devices. To automatically rediscover the NIC and install drivers, select Scan for Hardware Changes from the Action menu. a. Alternatively, install the drivers for the network device by right-clicking the device and choosing Update. Then choose Search automatically for updated driver software or Browse my computer for driver software.

↑ Back to the top

How to get this update

This update will be downloaded and installed automatically from Windows Update. To get the standalone package for this update, go to the Microsoft Update Catalog website.

File information

For a list of the files that are provided in this update, download the file information for update 4088875.

↑ Back to the top