November 2014 updates for Internet Explorer


In addition to improvements to the Enterprise Mode Site List announced today, the November update also includes the following security related updates.

Updates to out-of-date ActiveX control blocking

As we shared back in October, and as part of our ongoing commitment to delivering a more secure browser, we have two updates to the out-of-date ActiveX control blocking feature going live today.

Out-of-date ActiveX control blocking on Windows Vista SP2 and Windows Server 2008 SP2

With the November update, out-of-date ActiveX control blocking is being expanded to work with Internet Explorer 9 on Windows Vista SP2 and Windows Server 2008 SP2. You can view the complete list of configurations that this feature works with here on TechNet. Note that all existing manageability settings for this feature will also apply to these new configurations.

Out-of-date Silverlight blocking

Starting today, in addition to blocking outdated versions of Java, this feature will be expanded to block outdated versions of Silverlight. This means that if a Web page tries to load an out-of-date version of the Silverlight ActiveX control, you’ll get an out-of-date ActiveX control blocking notice.

This update is being deployed to the Microsoft-hosted XML list and doesn’t require updates to the client. Also note that all currently deployed manageability settings for enterprises will continue to apply to Silverlight as they did to Java.

You can continue to view the complete list of out-of-date ActiveX controls being blocked by this feature here.

Security updates

  • Microsoft Security Bulletin MS14-065 – This critical security update resolves seventeen privately reported vulnerabilities in Internet Explorer. For more information see the full bulletin.
  • Security Update for Flash Player (3004150) – This security update for Adobe Flash Player in Internet Explorer 10 and 11 on supported editions of Windows 8, Windows 8.1 and Windows Server 2012 and Windows Server 2012 R2 is also available. The details of the vulnerabilities are documented in Adobe security bulletin APSB14-24. This update addresses the vulnerabilities in Adobe Flash Player by updating the affected Adobe Flash binaries contained within Internet Explorer 10 and Internet Explorer 11..

Staying up-to-date

Most customers have automatic updating enabled and will not need to take any action because these updates will be downloaded and installed automatically. Customers who have automatic updating disabled need to check for updates and install this update manually.

— Jasika Bawa, Program Manager, Internet Explorer

— Alec Oot, Program Manager, Internet Explorer

Comments (26)

  1. pmbAustin says:

    Now if only you guys would fix the blank/white/flashing/crashing tabs problem that plagues IE….

    connect.microsoft.com/…/926585

  2. @pmbAustin says:

    If only you guy would stop spamming this forum with your one-of-a-kind problem.

  3. pmbAustin says:

    It's not a one-of-a-kind problem.  MANY people reproduce it, and it happens on EVERY machine I use.  And Microsoft needs to stop ignoring it as it's just getting worse and worse as time goes one.

    I'm not spamming in the least.  I'm trying to focus attention on a SERIOUS PROBLEM.

  4. @pmbAustin says:

    OK! Have fun spamming this forum! Your forum name is easily recognized, so it is equally easy to jump to the next entry and ignore yours.

  5. Simon says:

    I often see the same problem as pmbAustin. Just saying…

  6. Viktor Krammer [quero.at] says:

    @pmbAustin: I also have the same issue here on several Win 8.1 IE11 machines. Happens usually on facebook if the tab is running several hours / days. Have seen the white flashing bug also on Windows Phone 8.1 IE11 (Cyan update).

  7. Yannick says:

    These updates are great, Enterprise Mode Site List is a nice improvement. When are the new F12 tools coming? Is that vor IE11 or will we have to wait for IE12? Also, Windows 10 now has IE 11.0.8, will this get updated to 11.0.14 or will we continue to receive only security updates, since 11.0.8, a couple of nice features have been added (while other post-11.0.8 did get added).

  8. Ron says:

    It'd help to give an end of mainstream support and end of extended support for running any Windows XP compatible ActiveX under IE 11+.  

  9. ralnavman says:

    rdp stopped working same as KB2984927.  Which one has repeated this?

  10. pmbAustin says:

    I'd certainly appreciate it if all those who have experienced the blank/white/flashing/crashing tab issue would visit the IE Connect link above and click the "me too" link to let Microsoft know that you have also experienced the issue.  We really need to get their attention to focus on this serious problem.

  11. AAA says:

    Still having issues with Java being blocked even with all these blocking disabled both in GP and through registry. This started yesterday. Anyone else having issues?

  12. Role says:

    My IE (under Windows 7) was regularly unresponsive for several seconds with high CPU load on all cores from IE9 on, when Chakra was released. The issue was happening when clicking a link in the Facebook News feed for example, which resulted in opening the link in a new tab. It would take several seconds with high CPU load until the Facebook tab was responsive again (scrolling was blocked, for example). The latest update (IE11.0.14) finally fixed this issue for me – no more hangs and lags – fantastic!! Thank you!

  13. YB says:

    As per the instructions given to managed environments, I implemented a GPO to ignore the IE check for those (web) applications for certain domain.  This worked from Septemeber, until yesterday.  For some reason, the new updates are ignoring my Group Policy.  I was forced to create a new GPP that adds the VersionCheckEnabled Dword with a  0 value, to the registry.

    Any input as to why this might be happening.

  14. @YB says:

    I'm having the same issue since yesterday. Site is in trusted zone, also implemented GPO but java is still being blocked since Nov update.

  15. brewski says:

    After these updates auto-installed IE 11 opens a window and crashes.  I eagerly await the fix.

  16. Arieta says:

    After the updates, the mouse gestures plugin no longer works… it crashes the tab if you right click on an image or a link.

  17. JIm says:

    Like Brewski After these updates auto-installed IE 11 opens a window and crashes.  I also eagerly await the fix.

  18. Silverlight says:

    If I open the "Microsoft Silverlight Configuration" and go to the updates tab, the top option is selected "Install updates automatically (recommended)".  I have restarted the machine a few times, but each time I launch a Silverlight enabled website I get the error message "Silverlight was blocked because it is out of data and needs to be updated". [This is the same error with the red box that is displayed above]

    How do I:

    1) ensure Silverlight automatically updates? (silently)

    2) get this update message to go away?

  19. Adaxl says:

    HP has recently introduced the HP Stream 11 notebook, a machine that is to compete against Googles "chromebooks". Will Microsoft support this strategy with the new versions of Internet Explorer? The Stream 11 has only a meagre hardware set, just like the cheaper Chromebooks, but the Chromebooks do not need to run a full-sized OS like Windows. To be a successful Chromebook competitor, the Stream 11 needs a very fast, powerful browser. Will the next version of Internet Explorer fit this role?

  20. @Arieta says:

    I am having the same exact issue with my work computer after it automatically updated last week.  When is this right-click issue going to be fixed… it is getting really annoying.

  21. Flitzr says:

    I also have this annoying issue. Please get rid of the security warning if it isn't relative….

  22. Craig says:

    IE 11.0.14 doesnt work with our Sophos web appliance.  All users access is now blocked on machines that have upgraded to IE 11.0.14

  23. Adam says:

    Clicking on links that are coded to open new tabs tends to crash IE after this update. Noted examples are Google Web Sites when clicking on links set to open a new tab, and Chase.com when clicking on the '?' icon next to certain account items. IE 11.0.14 Windows 8.1. Might be what Brewski was saying.

  24. Farrukh Momin says:

    I too find flashing problems like @pmbAustin found and I am not a spammer. I got it while surfing Facebook. Thought I should report. Thanks.

  25. pmbAustin says:

    @Farrukh Momin, be sure to visit the link above to connect, log in with your Microsoft ID, and click "Me Too" so MS knows you also experience it.  And feel free to add a comment.

    Thanks!