April 2015 security updates for Internet Explorer


Microsoft Security Bulletin MS15-032 (3038314)This critical security update resolves vulnerabilities in Internet Explorer. For more information, please see Microsoft Security Bulletin MS15-032.

Security Update for Flash Player (3049508)

This security update for Adobe Flash Player in Internet Explorer 10 and 11 on supported editions of Windows 8, Windows 8.1 and Windows Server 2012 and Windows Server 2012 R2 is also available. The details of the vulnerabilities are documented in Adobe security bulletin APSB15-06. This update addresses the vulnerabilities in Adobe Flash Player by updating the affected Adobe Flash binaries contained within Internet Explorer 10 and Internet Explorer 11. For more information, please see Microsoft Security Advisory 2755801.

Disabling SSL 3.0

As communicated in our February 2015 security updates blog, today we’re releasing an update that disables SSL 3.0 by default in Internet Explorer 11. Enterprise customers can choose to enable SSL 3.0 for compatibility with their web applications, however we strongly recommend instead that they update their web servers and web applications to use latest security protocols such as TLS 1.2. For more information, please see Microsoft Security Advisory 3009008.

Staying up-to-date

Most customers have automatic updates enabled and will not need to take any action because these updates will be downloaded and installed automatically. Customers who have automatic updates disabled need to check for updates and install this update manually.

– Maliha Qureshi, Senior Program Manager, Customer Experience Quality

[Updated on 4/15/2015 at 11:00 AM to include Security Update for Flash Player (3049508). – ed]

Comments (22)

  1. Jim says:

    What about the new flash update? When will it be incorporated in IE for Windows 8.1"

  2. aaa says:

    Flash Player 17.0.0.169

  3. 127 says:

    still no 17.0.0.169 for Win8/IE10 and Win8.1/IE11

    Also no Advisory from MS about new Flash this month

    technet.microsoft.com/…/en-us

    what's going on ??

  4. domin says:

    does IE in this context include project spartan

  5. Jim says:

    I just got it through Windows Update

  6. ieblog says:

    Updated on 4/15/2015 at 11:00 AM to include Security Update for Flash Player (3049508).

  7. Randy says:

    What about the IE blocking the entire machine and freezing the mouse bug?  Go to WSJ.com wall street journal and right click open in new tab on each news headline one at a time waiting for each to load.  One or more of them will freeze IE for 10 – 30 seconds.  This happens on other sites all when opening link in a new tab – Windows 7 64 bit machines with the latest OS and IE patches as of March 2015.

  8. @Randy says:

    Mayby try a anti malware scanner for your computer?

  9. Lari says:

    Internet Explorer 9?

  10. Norman Diamond says:

    "Microsoft Security Bulletin MS15-032 (3038314)

    This critical security update resolves vulnerabilities in Internet Explorer."

    I hope it will.  Is there any word yet on when it will be possible to install this critical security update?

  11. noname says:

    日本語で失礼します。(KB3038314について)

    今月のIE月例パッチ入れてから検索プロバイダーが追加できなくなりました。

    具体的に言えば、関連操作をしても無反応だったりエラーになったりです。

    またインストールそのものに失敗するという話もあるようでした。

    大至急、修正パッチの作成・提供をなさって下さい。

    アンインストールすればセキュリティ上のリスクが…どちらも賛同できません

    あと先月から同じパッチが来るのもIE関連(クリーンアップするなどすると発生)ですね。

    こちらもあわせて対応願います。

  12. Norman Diamond says:

    noname 様

    IE 11 をアンインストールして、Windows 7 元の IE8 で検索プロバイダを追加して、IE 11 を再インストールしたら検索設定は継続する経験があります。KB3038314 のインストールにそのまま失敗しましたけど。noname 様は KB3038314 をインストールした方法はどう出来ましたか。

    When I uninstalled IE 11, used Windows 7's original IE 8 to add a search provider, and reinstalled IE 11, the search settings remained in place.  But KB3038314 still failed to install.  How did you get KB3038314 to install?

  13. noname says:

    >>Norman Diamond   さん、色々ありがとうございます。

    ちなみに自分は KB3038314 インストールは成功しました。

    普通Windows Updateでインストール成功です(Win7SP1の32ビット+IE11)。

    つまり毎月やる標準の方法で行けていて、失敗しませんでした。

    環境やら入れる順番等によって、成功やら失敗があるようですね。

    検索設定はもちろん普通に維持されてます(自分はyahoojapan)。

  14. Norman Diamond says:

    noname 様

    Windows 7 SP1 32bit vs. 64bit の異なりは大切かも知れませんね。私は 64bit です。

    Maybe the difference between 32bit and 64bit is important.  I have 64bit.

    それながら、IE11 アンインストール → IE8 で設定 → IE11 の再インストールを実験すれば、設定は残りますか。

  15. Norman Diamond 様 says:

    少なくともIE10→IE11に昨年上げた時は維持されてたと思いますが…。

    IE8からIE11へのバージョン飛ばしはやったことがないのでよくわかりません。

    今更バージョンを戻すことはやろうと思わないですので、ごめんなさい…。

    ちなみにIE11は一度インストールするも不具合が多く一度IE10に戻して、昨年に再度IE11に上げました。

    その時の設定は多分、検索だけじゃなくてホームページの設定も含め維持されてたはずです。

    参考になれば幸いです、よろしくお願いします。ではこのへんにて今回の件は失礼致します。

  16. Norman Diamond says:

    noname 様

    ダイアモンドです。

    noname 様は投稿するとき、投稿者の名前は Norman Diamond 様ではなくて、私の名前を Name 項目に入力しないでください。

    When Mr./Ms. noname posts, the poster's name is not Mr./Ms. Norman Diamond, so please don't input my name in the Name field.

    別の2台のコンピュータには IE11 の影響は Outlook 2003 を壊せたから一旦 IE10 に戻ったが最近に IE11 を再インストールしました。

    On 2 other PCs I also had trouble with IE11 so I reverted to IE10, but later reinstalled IE11 again, and settings were preserved.

    For me, IE11's biggest problem was that IE11 broke Outlook 2003.

    So, maybe you can experiment by uninstalling IE11, setting your search provider in IE10, and reinstalling IE11.

    只今、もう1つの考えが発生しました。

    先日私が KB3038314 のインストールに失敗したコンピュータは直接 IE8 から IE11 へ切り替えました。

    別の2台のコンピュータは過去で IE8 → IE9 → IE10 → IE11 → IE10 → IE11 の切り替えをしました。

    当2台には、KB3038314 のインストールは成功しました。

    KB3038314 後に検索プロバイダを変更していません。実験すれば失敗の可能性が高いですね。実験していませんけど。

    Just now, I had another thought.

    A few days ago KB3038314 failed to install on one PC, but that PC had switched directly from IE8 to IE11.

    Previously 2 other computers had switched IE8 → IE9 → IE10 → IE11 → IE10 → IE11.

    On those 2 computers, KB3038314 installed properly.

    After KB3038314 I didn't change search providers.  If I experiment, maybe it will fail.  I haven't experimented though.

  17. TD says:

    The performance of replacing a large innerHtml element and the replaceChild method are significantly slower across all IE versions now. The size of the innerHtml element content being replaced is 1MB, where previously it took 300ms to execute the call now takes 40 seconds.

  18. Tim Reitzell, RaboAg says:

    LATENCY ISSUES WITH WEB BASED APPLICATION NORMALLY 5-10 SECONDS, NOW 1.5 – 2 MINUTES  BOTH ie11 AND IE8.   APPLICATION UN-USABLE

  19. Tim Reitzell, RaboAg says:

    Cut and paste from Ms Word 2010 and 2013 only takes information up to the first carriage return.  IE11

  20. TD says:

    Run this test in IE below with 1000000 on node.innerHtml, it takes 3 s in Chrome, 40 in IE

    blogger.ziesemer.com/…/innerhtml-and-innertext-slow.html

  21. Hippie says:

    It would appear the April Patches have been causing network delays with some web applications; they have been postponed in my environment until further notice.  However, I would like to add the new feature "IE 7 Enterprise Mode" is actually addressing issues for some legacy web apps where IE 8 EM alone wasn't getting the job done.  Being able to trigger 'Compat View' at the site level rather than the domain level is a nice addition to the EMIE suite.  Good Job!