Patches Microsoft released in October 2018
- KB4462917 – 2018-10 Cumulative Update for Windows Server 2016 for x64-based systems
- KB4462926 – 2018-10 Security Monthly Quality Rollup for Windows Server 2012 R2 for x64-based Systems
- KB4462923 – 2018-10 Security Monthly Quality Rollup for Windows Server 2008 R2 for x64-based Systems
- KB4463097 – 2018-10 Security Monthly Quality Rollup for Windows Server 2008 for x86-based Systems
Impacted Products:
- Internet Explorer
- Microsoft Edge
- Microsoft Windows
- Microsoft Office and Microsoft Office Services and Web Apps
- .NET Core
- PowerShell Core
- SQL Server Management Studio
- Microsoft Exchange Server
- Azure IoT Edge
Please note the following information regarding the security updates:
- Customers running Windows 7 or Windows Server 2008 R2 need to ensure they have Servicing Stack Update (SSU) 3177467 installed before installing the October 2018 security updates, to avoid a failure to install. See Microsoft Knowledge Base Article 3177467for more information about this SSU.
- Windows 10 updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows 10, in addition to non-security updates. The updates are available via the Microsoft Update Catalog.
- Starting in March 2017, a delta package will be available on the Microsoft Update Catalog for Windows 10 version 1607 and newer. This delta package contains just the delta changes between the previous month and the current release.
- Updates for Windows RT 8.1 and Microsoft Office RT software are only available via Windows Update.
- For information on lifecycle and support dates for Windows 10 operating systems, please see Windows Lifecycle Facts Sheet.
- In addition to security changes for the vulnerabilities, updates include defense-in-depth updates to help improve security-related features.
Microsoft Security Advisories:
- ADV180026 | Microsoft Office Defense in Depth Update
https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/ADV180026
Known Issues:
KB4459266, KB4462917, KB4462923, KB4092470, KB4461450
KB4459266 Applies to: Exchange Server 2016, Exchange Server 2013
Symptoms: When you try to manually install this security update in “normal mode” (not running the update as an administrator) by double-clicking the update file (.msp), some files are not correctly updated. When this issue occurs, you do not receive an error message or any indication that the security update was not correctly installed. Also, Outlook Web Access (OWA) and the Exchange Control Panel (ECP) may stop working. This issue occurs on servers that are using user account control (UAC). The issue occurs because the security update does not correctly stop certain Exchange-related services.
Workaround: To avoid this issue, run the security update in elevated mode, as an administrator. To do this, right-click the update file, and then click Run as administrator.
KB4462917 Applies to: Windows 10, version 1607; Windows Server 2016
https://support.microsoft.com/en-us/help/4462917/windows-10-update-kb4462917
Symptoms: After installing this update, installing Window Server 2019 Key Management Service (KMS) host keys (CSVLK) on Window Server 2016 KMS hosts does not work as expected.
Workaround: Microsoft is working on a resolution and will provide an update in an upcoming release.
KB4462923 Applies to: Applies to: Windows 7 Service Pack 1; Windows Server 2008 R2 Service Pack 1
https://support.microsoft.com/en-us/help/4462923/windows-7-update-kb4462923
Symptoms: After you apply this update, the network interface controller may stop working on some client software configurations. This occurs because of an issue related to a missing file, oem<number>.inf. The exact problematic configurations are currently unknown.
Workaround:
- To locate the network device, launch devmgmt.msc. It may appear under Other Devices.
- To automatically rediscover the NIC and install drivers, select Scan for Hardware Changes from the Action menu.
- Alternatively, install the drivers for the network device by right-clicking the device and choosing Update. Then choose Search automatically for updated driver software or Browse my computer for driver software.
KB4092470 Applies to: Microsoft SharePoint Server 2013 Service Pack 1
Symptoms: When you try to move document sets to a records center after applying KB4092470, you may see an unexpected error.
Workaround: To resolve this issue, install the October 9, 2018, cumulative update for SharePoint Enterprise Server 2013 (KB4461458).
KB4461450 Applies to: Microsoft SharePoint Server 2013 Service Pack 1
Symptoms: When you try to move document sets to a records center after applying KB4461450, you may see an unexpected error.
Workaround: To resolve this issue, install the October 9, 2018, cumulative update for SharePoint Enterprise Server 2013 (KB4461458).