V2R7 changes
Microsoft Internet Explorer 11 STIG V2R7 (2026-04-01) replaced V2R6 (2026-01-05): 1 check updated. It has 137 checks, against 137 in V2R6.
V2R7 checklistV2R6 checklist Compare V2R6 and V2R7 in STIG Compare
- 0 added
- 0 removed
- 1 updated
Updated fields: Check text 1Fix text 1
Updated in V2R7 (1)
V-252910CAT IThe version of Internet Explorer running on the system must be a supported version.Check text, Fix text
Check text
Internet Explorer 11 is no longer supported by the vendor with the exception of some operating system versions under extended support (Ex: Windows Server 2019).
IfTo determine the status of Internet Explorer 11 on the system, open PowerShell as an Administrator and run the command:
dism /online /get-capabilityinfo /capabilityname:Browser.InternetExplorer~~~~0.0.11.0
Within the returned results, if "State : Installed", this is installeda finding.
Within the returned results, if "State : Not Present", this is not a finding.
If the host operating system is supported under an extended support agreement, and "State : Installed", this is not a finding.
If nothing related to Internet Explorer is returned, this is not a finding.
Fix text
RemoveDisable the Internet Explorer 11 application. Open PowerShell as an Administrator and run the command (this is irreversible):
dism /online /Remove-Capability /CapabilityName:Browser.InternetExplorer~~~~0.0.11.0
Restart the system for the changes to take effect.
How these changes are found
Checks are matched across the two releases by V-number. A check counts as updated when DISA gave it a new rule revision (the r number in its SV-…_rule id) and its title, severity, check text, fix text, discussion, CCIs or other fields changed — the same comparison STIG Compare makes. Added checks are new V-numbers; removed checks are V-numbers V2R7 no longer has.
Comparing other releases, or this one against an older release? Pick any two in STIG Compare.