The September cumulative security update for Internet Explorer 6, 7, 8, 9, 10, and 11 is available on Windows Update. It fixes one publicly known vulnerability and 36 potentially dangerous vulnerabilities that were reported early before they were publicly disclosed. The most serious vulnerabilities relate to remote code execution if a user visits an attacker’s website. The user can then gain the same rights as the user.
An update to Adobe Flash Player for Internet Explorer 2987114 has also been released, which is rated as critical.
Users who have automatic updates enabled do not need to take any action.
For more information, see Security Bulletins MS14-052 and APSB14-21.