New
#10
well f14tomcat, KB4532695 has been RTMed on MS Update Catalog as of 1/28, 10:10am pacific local time:
https://www.catalog.update.microsoft...px?q=KB4532695
direct MSU links to KB4532695:
(32bit/x86) (64bit/x64) (ARM64)
so KB4532695 will eventually show up on WU/MU as RTM
It's now on WU as an optional update. KB4532695 CU Win 10 v1903 build 18362.628 & v1909 build 18363.628
The flaw is in jscript.dll, not jscript9.dll:
By default, IE11, IE10, and IE9 uses Jscript9.dll which is not impacted by this vulnerability.
This vulnerability only affects certain websites that utilize jscript as the scripting engine.
ADV200001 | Microsoft Guidance on Scripting Engine Memory Corruption Vulnerability | Security Advisory