Skip to content
Trending
Simplify Windows Devices to Run Only the Required Applications using Intune Enhance macOS Compliance with Custom Security and Compliance Checks to Improve Device Security using Microsoft Intune Manage Samsung Galaxy Firmware Versions to Improve Security and Compliance using Microsoft Intune MS Intune Adds Windows Registry Data Collection to Device Inventory for Single Values All Key Values and Subkeys Updated Windows Device Sync Experience Enhances Per-Device Troubleshooting Configure Windows Sandbox vGPU Policy using Intune for Better Graphics Performance or Reduced Attack Surface Simplify Windows Devices to Run Only the Required Applications using Intune Enhance macOS Compliance with Custom Security and Compliance Checks to Improve Device Security using Microsoft Intune Manage Samsung Galaxy Firmware Versions to Improve Security and Compliance using Microsoft Intune MS Intune Adds Windows Registry Data Collection to Device Inventory for Single Values All Key Values and Subkeys Updated Windows Device Sync Experience Enhances Per-Device Troubleshooting Configure Windows Sandbox vGPU Policy using Intune for Better Graphics Performance or Reduced Attack Surface
Windows Server 2012 Vulnerability MSHTML Platform Security Feature Bypass

Windows Server 2012 Vulnerability MSHTML Platform Security Feature Bypass

Written By Sumitha P
Last Updated September 26, 2023
Posted In Windows
SHARE

Server 2008 and Windows Server 2012 were added to the affected operating systems table for the Vulnerability CVE-2023-36805. Earlier, these operating systems were not on the list for MSHTML Platform Security Feature Bypass Vulnerability.

Microsoft revised the list of impacted operating systems for Internet Explorer 11 related component MSHTML. Even though Microsoft has announced the retirement of the IE 11 application on certain platforms, the underlying MSHTML, EdgeHTML, and scripting platforms are still supported.

Some Windows versions still support the IE11 browser even after 15 June 2022. This applies mainly to server operating systems such as 2012 and 2008. Microsoft also supports IE mode in the Microsoft Edge browser to help organizations run legacy apps.

Microsoft has also revised the following CVEs recently – CVE-2023-24936, CVE-2023-27909, and CVE-2023-27911. There was an update to PowerShell 7.2, and 7.3 is affected by 5 Critical Vulnerabilities published in September.

Patch My PC
Windows Server 2012 Vulnerability MSHTML Platform Security Feature Bypass Fig.1
Windows Server 2012 Vulnerability MSHTML Platform Security Feature Bypass Fig.1

Windows Server 2012 Extended Security Updates (ESUs)

Server 2012 and 2012 R2 are going out of support by the end of October 10, 2023. However, you can still get hotfixes if you purchase Extended Security Updates (ESUs) for Windows Server 2012 and make it secure for some time.

NOTE! – ESUs will continue for three years, renewable annually, until the final date on October 13, 2026.

Windows Server 2012 Vulnerability MSHTML Platform Security Feature Bypass Fig.2

Server 2012 and Server 2008 Vulnerability

Let’s understand more about the Windows Server 2012 and Server 2008 Vulnerability CVE-2023-36805. This is related to Windows MSHTML, and to stay fully protected, Microsoft recommends that customers who install Security Only updates install the IE Cumulative updates for this vulnerability.

The MSHTML platform is used by IE mode in Microsoft Edge and other applications through WebBrowser control. WebView and some UWP applications use the EdgeHTML platform.

Windows Server 2012 Vulnerability MSHTML Platform Security Feature Bypass Fig.3
Windows Server 2012 Vulnerability MSHTML Platform Security Feature Bypass Fig.3

FIX Windows Server 2012 and Server 2008 Vulnerability using KB5030209

Microsoft also released a fix for this vulnerability with 2008 and 2012 server operating systems. You can install the IE CU for September 2023 – KB5030209.

FIX: Updates to address vulnerabilities in the MSHTML platform and scripting engine are included in the IE Cumulative Updates.

  • Internet Explorer 11 on Windows Server 2012 R2
  • Internet Explorer 11 on Windows Server 2012
  • Internet Explorer 11 on Windows Server 2008 R2 SP1

Author

Sumitha was introduced to the world of computers when she was very young. She loves to help users with their Windows 11 and related queries. She is here to share quick news, tips and tricks with Windows security.

Written by

Sumitha was introduced to the world of computers when she was very young. She loves to help users with their Windows 11 and related queries. She is here to share quick tips and tricks with Windows security.

Discussion

Join the discussion

Your email address will not be published. Required fields are marked *

Related guides

Intune

Windows 11 KB5101650 KB5099414 July 2026 Patch and 3 Zero Day Vulnerabilities and 570 Flaws

Key Takeaways Windows 11 KB5101650 KB5099414 July 2026 Patch and 3 Zero Day Vulnerabilities and 570 Flaws! In the July 2026 Patch, Microsoft introduced new features designed to improve the overall Windows experience. The update adds enhancements to Windows Update for more flexible update management and introduces Point-in-Time Restore, providing an additional recovery option for […]

AC Anoop C Nair 9 min read
Intune

BitLocker Prompt Issue After June Patch KB5094126 Secure Boot UEFI 2023 Certificate Update

Key Takeaways BitLocker Prompt Issue After June Patch KB5094126 Secure Boot UEFI 2023 Certificate Update! After deploying the June 2026 Windows update (KB5094126), some HP EliteDesk 800 G6 devices began prompting for the BitLocker recovery key after every reboot. Based on our investigation, the Secure Boot UEFI 2023 certificate update does not appear to be […]

AC Anoop C Nair 5 min read
Microsoft Defender for Endpoint

Microsoft Defender for Endpoint EDR Updates are now Separate from Monthly Windows Security Updates for Faster Protection

Key Takeaways In this post, we are discussing how Microsoft Defender for Endpoint EDR Updates Will Be Delivered Through Microsoft Update. Microsoft has introduced a new update model for Microsoft Defender for Endpoint Detection and Response (EDR) security updates. Previously, these updates were included with the monthly Windows security updates. This change enables Microsoft to […]

AC Anoop C Nair 5 min read