Microsoft Out-of-Band Security Update Released

[Corrine]

Microsoft has released an Out-of-Band security update addressing CVE-2019-1367.  This CVE addresses a scripting engine memory corruption vulnerability.  An update is available for each of Windows 10 versions 1903 through version 1607, Windows 8.1 and Windows 7. 

The following important notice is provided for each version of Windows 10 and a similar notice for Windows 8.1 and Windows 7:

"IMPORTANT This is a required security update that expands the out-of-band update dated September 23, 2019. This security update includes the Internet Explorer scripting engine security vulnerability (CVE-2019-1367) mitigation and corrects a recent printing issue some users have experienced. Customers using Windows Update or Windows Server Update Services (WSUS) will be offered this update automatically. To help secure your devices, we recommend that you install this update as soon as a possible and restart your PC to fully apply the mitigations. Like all cumulative updates, this update supersedes any preceding update.

Note This update does not replace the upcoming October 2019 monthly update, which is scheduled to release on October 8, 2019."

Updates provided for the latest Windows 10 version 1903 through version 1607:

• Windows 10, Version 1903:  https://support.microsoft.com/en-us/help/4524147
• Windows 10, Version 1809:  https://support.microsoft.com/en-us/help/4524148
• Windows 10, Version 1803:  https://support.microsoft.com/en-us/help/4524149
• Windows 10, Version 1709:  https://support.microsoft.com/en-us/help/4524150
• Windows 10, Version 1703:  https://support.microsoft.com/en-us/help/4524151
• Windows 10, Version 1607:  https://support.microsoft.com/en-us/help/4524152
• Windows 8.1:  https://support.microsoft.com/en-us/help/4524156
• Windows 7:  https://support.microsoft.com/en-gb/help/4524157

[Corrine]

Based on the BC article, Windows 10 KB4524147 Cumulative Update Breaks the Start Menu, although you can uninstall it if you run into the Start Menu issue, it wouldn't hurt to also create a restore point if you haven't installed the update yet.