SOLVED

Internet Explorer 11 hangs on start after installing KB5005565

%3CLINGO-SUB%20id%3D%22lingo-sub-2756247%22%20slang%3D%22en-US%22%3EInternet%20Explorer%2011%20hangs%20on%20start%20after%20installing%20KB5005565%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2756247%22%20slang%3D%22en-US%22%3E%3CP%3EHello%2C%3C%2FP%3E%3CP%3ENot%20sure%20if%20this%20is%20the%20correct%20place%20to%20report%20this%2C%20but%20we%20found%20that%20after%20installing%26nbsp%3BKB5005565%20on%20a%20number%20of%20computers%20(Windows%2010%2021H1%2C%20Intune%20managed)%20that%20Internet%20Explorer%20would%20hang%20on%20start.%20After%20removing%20the%20update%2C%20Internet%20Explorer%20would%20start%20again.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThe%20computers%20use%20Internet%20Explorer%2011%20for%20accessing%20a%20RemoteApps%20site%20and%20using%20the%20RDP%20ActiveX%20control.%20It%20had%20worked%20fine%20with%20the%20ActiveX%20workaround%20mitigations%20for%20the%20recent%20MSHTML%20issue%2C%20but%20after%20removing%20the%20workarounds%20and%20installing%20the%20update%2C%20IE%20stopped%20responding%20on%20start.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2758142%22%20slang%3D%22en-US%22%3ERe%3A%20Internet%20Explorer%2011%20hangs%20on%20start%20after%20installing%20KB5005565%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2758142%22%20slang%3D%22en-US%22%3EHaving%20the%20same%20issue%20on%201000%2B%20computers.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2758163%22%20slang%3D%22en-US%22%3ERe%3A%20Internet%20Explorer%2011%20hangs%20on%20start%20after%20installing%20KB5005565%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2758163%22%20slang%3D%22en-US%22%3E%3COL%3E%3CLI%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F635973%22%20target%3D%22_blank%22%3E%40rsitzejr%3C%2FA%3E%26nbsp%3B%20I%20think%20I%20posted%20this%20in%20the%20wrong%20forum%20(it%20looks%20like%20this%20is%20related%20to%20Microsoft%20Launcher)%2C%20but%20I%20cannot%20find%20the%20correct%20way%20to%20report%20it%20for%20the%20life%20of%20me.%3C%2FLI%3E%3C%2FOL%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2760058%22%20slang%3D%22en-US%22%3ERe%3A%20Internet%20Explorer%2011%20hangs%20on%20start%20after%20installing%20KB5005565%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2760058%22%20slang%3D%22en-US%22%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F310774%22%20target%3D%22_blank%22%3E%40AaronRothstein%3C%2FA%3E%20I%20think%20we've%20narrowed%20it%20down%20to%20a%20group%20policy%2C%20just%20not%20which%20one.%20Makes%20no%20sense.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2761641%22%20slang%3D%22en-US%22%3ERe%3A%20Internet%20Explorer%2011%20hangs%20on%20start%20after%20installing%20KB5005565%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2761641%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F310774%22%20target%3D%22_blank%22%3E%40AaronRothstein%3C%2FA%3E%26nbsp%3B%20-%20same%20issue%20here%2C%20and%20I%20can%20confirm%20uninstalling%20KB5005565%20resolves%20the%20issue.%26nbsp%3B%20Only%20one%20person%20reported%20it%20so%20far%2C%20but%20something%20tells%20me%20as%20machines%20are%20forced%20to%20reboot%20over%20the%20weekend%20we'll%20have%20a%20lot%20more%20complaints.%26nbsp%3B%20Anyone%20open%20a%20ticket%20with%20Microsoft%20yet%3F%26nbsp%3B%20Please%20update%20here%20if%20you%20can.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2766630%22%20slang%3D%22en-US%22%3ERe%3A%20Internet%20Explorer%2011%20hangs%20on%20start%20after%20installing%20KB5005565%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2766630%22%20slang%3D%22en-US%22%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F310774%22%20target%3D%22_blank%22%3E%40AaronRothstein%3C%2FA%3E%20-%20We%20had%20the%20same%20issue%2C%20it%20turns%20out%20it%20is%20linked%20to%20endpoint%20protection%20exploit%20protection.%20Adobe%20reader%20was%20also%20affected%20by%20this%20issue%20-%20%3CA%20href%3D%22https%3A%2F%2Fcommunity.adobe.com%2Ft5%2Facrobat-reader-discussions%2Fadobe-reader-not-opening%2Fm-p%2F12383418%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fcommunity.adobe.com%2Ft5%2Facrobat-reader-discussions%2Fadobe-reader-not-opening%2Fm-p%2F12383418%3C%2FA%3E%3CBR%20%2F%3EUpdating%20the%20security%20baseline%20in%20intune%20resolved%20it%20for%20us%3C%2FLINGO-BODY%3E
New Contributor

Hello,

Not sure if this is the correct place to report this, but we found that after installing KB5005565 on a number of computers (Windows 10 21H1, Intune managed) that Internet Explorer would hang on start. After removing the update, Internet Explorer would start again.

 

The computers use Internet Explorer 11 for accessing a RemoteApps site and using the RDP ActiveX control. It had worked fine with the ActiveX workaround mitigations for the recent MSHTML issue, but after removing the workarounds and installing the update, IE stopped responding on start.

9 Replies
Having the same issue on 1000+ computers.
  1. @rsitzejr  I think I posted this in the wrong forum (it looks like this is related to Microsoft Launcher), but I cannot find the correct way to report it for the life of me.
@AaronRothstein I think we've narrowed it down to a group policy, just not which one. Makes no sense.

@AaronRothstein  - same issue here, and I can confirm uninstalling KB5005565 resolves the issue.  Only one person reported it so far, but something tells me as machines are forced to reboot over the weekend we'll have a lot more complaints.  Anyone open a ticket with Microsoft yet?  Please update here if you can.

@AaronRothstein - We had the same issue, it turns out it is linked to endpoint protection exploit protection. Adobe reader was also affected by this issue - https://community.adobe.com/t5/acrobat-reader-discussions/adobe-reader-not-opening/m-p/12383418
Updating the security baseline in intune resolved it for us
best response confirmed by AaronRothstein (New Contributor)
Solution

@AaronRothstein & @Eric Hepinstall I updated these settings in Intune, this can also be done via Powershell and GPO

Windows Device Configuration Policy -> Windows Defender Endpoint Protection settings -> Windows Defender Exploit Guard -> Exploit Protection Settings.

The mitigation Policy XML was updated with a version taken from the latest Security Windows 10 Security Baseline.
Reference file - https://github.com/gunnarhaslinger/Windows-Defender-Exploit-Guard-Configuration/blob/master/Windows1...
MS Baseline
https://techcommunity.microsoft.com/t5/microsoft-security-baselines/security-baseline-final-for-wind...

Thank you Matthew and HuwWigley - we will try this out and report back in the next day or so.
Confirming that this indeed fixes the issue. For future reference, what would the appropriate discussion be for these types of issues?

@AaronRothstein I would think this hub would be better as it was a general update that broke multiple apps (we had issues with Adobe Reader as well)

Windows 10 - Microsoft Tech Community