Windows 10 Windows 10 cumulative update history

[kemical]

Microsoft has released a new Cumulative Update for Windows 10 version 1809.

May 1, 2019—KB4501835 (OS Build 17763.439)

Applies to: Windows 10, version 1809Windows Server 2019, all versions
Release Date:
May 1, 2019
Version:
OS Build 17763.439

Improvements and fixes
This update includes quality improvements. Key changes include:

• Addresses an issue that prevents the CALDATETIME structure from handling more than four Japanese Eras. For more information, see KB4469068.
• Updates the NLS registry to support the new Japanese Era. For more information, see KB4469068.
• Addresses an issue that causes the DateTimePicker to display the date incorrectly in the Japanese date format. For more information, see KB4469068.
• Addresses an issue that causes the Date and Time Settings control to cache old Eras and prevents the control from refreshing when the time enters the new Japanese Era. For more information, see KB4469068.
• Updates fonts to support the new Japanese Era. For more information, see KB4469068.
• Addresses an issue that prevents an input method editor (IME) from supporting the new Japanese Era character. For more information, see KB4469068.
• Addresses an issue that causes the Clock and Calendar flyout control to display the day of the week incorrectly mapped to a date in the month of the new Japanese Era. For more information, see KB4469068.
• Adds alternative fonts for the new Japanese Era fonts. For more information, see KB4469068.
• Enables Text-To-Speech (TTS) functionality to support new Japanese Era characters. For more information, see KB4469068.
• Addresses an issue in Unified Write Filter (UWF) that prevents Hibernate Once/Resume Many (HORM) from working as expected on Unified Extensible Firmware Interface (UEFI) systems.

If you installed earlier updates, only the new fixes contained in this package will be downloaded and installed on your device.

 

[kemical]

Microsoft has released a new Cumulative Update for Windows 10 version 1809.

May 3, 2019—KB4495667 (OS Build 17763.475)

Applies to: Windows 10, version 1809Windows Server 2019, all versions
Release Date:
May 3, 2019
Version:
OS Build 17763.475

Improvements and fixes
This update includes quality improvements. Key changes include:

• Allows the built-in Administrator account to run Microsoft Office setup after downloading the installer in Microsoft Edge.
• Addresses an issue that causes Internet Explorer Automation to fail in certain instances.
• Addresses an issue that may prevent Custom URI Schemes for Application Protocol handlers from starting the corresponding application for local intranet and trusted sites on Internet Explorer.
• Addresses an issue that prevents certain apps from launching when you set folder redirection for the Roaming AppData folder to a network path.
• Addresses an issue in Gdi32full.dll that causes an application to stop responding.
• Addresses an issue that may cause the UI to stop responding for several seconds when scrolling in windows that have many child windows.
• Addresses an issue that may cause a touch screen to stop working after restart.
• Enables a touch keyboard to support new Japanese Era characters. For more information, see KB4469068.
• Addresses an issue that causes ShellExperienceHost.exe to stop working when the start date for the Japanese Era is not on the first day of the month. For more information, see KB4469068.
• Addresses an issue that prevents the CALDATETIME structure from handling more than four Japanese Eras. For more information, see KB4469068.
• Updates the NLS registry to support the new Japanese Era. For more information, see KB4469068.
• Addresses an issue that causes the DateTimePicker to display the date incorrectly in the Japanese date format. For more information, see KB4469068.
• Addresses an issue that causes the Date and Time Settings control to cache old Eras and prevents the control from refreshing when the time enters the new Japanese Era. For more information, see KB4469068.
• Updates fonts to support the new Japanese Era. For more information, see KB4469068.
• Addresses an issue that prevents an input method editor (IME) from supporting the new Japanese Era character. For more information, see KB4469068.
• Addresses an issue that causes the Clock and Calendar flyout control to display the day of the week incorrectly mapped to a date in the month of the new Japanese Era. For more information, see KB4469068.
• Adds alternative fonts for the new Japanese Era fonts. For more information, see KB4469068.
• Enables Text-To-Speech (TTS) functionality to support new Japanese Era characters. For more information, see KB4469068.
• Allows existing devices that are managed by Configuration Manager to be enrolled in Microsoft Intune using Co-management without any user interaction. It does not require an active user to be logged in, and there are no Multi Factor Authentication (MFA) prompts. This update also allows the Co-managed mobile device management (MDM) enrollment to use the device credential it received when the device is enabled to join Hybrid Azure Active Directory (AADJ).
• Improves access to detailed troubleshooting and diagnostic logs from managed devices, such as business PCs, when using a PC cloud management service. PC cloud management services include Microsoft Intune or other Mobile Device Management (MDM) providers for Windows.
• Addresses an issue that may allow a user to continue logging on to an account using a smart card after disabling the account.
• Addresses an issue that prevents access to enterprise resources when using Kerberos with Windows Hello for Business (WHfB) credentials. This causes users to receive multiple prompts to provide their credentials.
• Addresses an issue that occasionally causes a PostScript printer to use the wrong font.
• Addresses an issue that causes Lightweight Directory Access Protocol (LDAP) client applications to stop responding for at least 30 seconds when many LDAP queries are requested through multiple connections. This occurs because of a race condition in wldap32.dll. You must install this update on the LDAP client that calls wldap32.dll.
• Addresses an issue that causes a roaming profile user to lose customized Start menu settings after upgrading the operating system (OS). After installing this update, administrators must enable the UseProfilePathMinorExtensionVersion registry setting described in KB4493782 for roaming user profiles (RUP). This key allows you to create a new RUP for an upgraded OS and prevents the loss of a custom Startmenu. The RUP must be stored locally, and you must restart the device to enable the feature.
• Addresses an issue that causes connection requests to the Remote Desktop Session Host (RDSH) servers in the deployment to fail. This issue occurs because of a deadlock in the Connection Broker.
• Addresses an issue that may prevent Cluster Aware Update from restarting nodes when a cluster's credentials are reset. Cluster Aware Update must restart nodes after installing an update. The error is the following:

”Failed to restart "NODENAME": (ClusterUpdateException) Failed to restart "NODENAME": (Win32Exception) The user name or password is incorrect.”

• Addresses a gradual memory leak in LSASS.exe on systems that have cached logon enabled. This issue mainly affects servers that process many interactive logon requests, such as web servers.
• Addresses an issue that may cause a Lightweight Directory Access Protocol (LDAP) query to return incorrect results. This occurs if a filter clause contains an attribute that has a syntax of Large Integer type and the filter uses the rule, LDAP_MATCHING_RULE_BIT_AND. For example, a simple filter, such as “msExchRoleAssignmentFlags:1.2.840.113556.1.4.803:=51539607552” may return no matches when it should.
• Addresses an issue that prevents Print Workflow Applications from launching for Point and Print.
• Addresses an issue that may prevent Universal Windows Platform (UWP) apps from receiving keyboard input when its user interface thread becomes too busy. This issue occurs when the UWP app has an embedded WebView control.

If you installed earlier updates, only the new fixes contained in this package will be downloaded and installed on your device.

 

[kemical]

Microsoft has released a new Cumulative Update for Windows 10 version 1809.

May 19, 2019—KB4505056 (OS Build 17763.504)

Applies to: Windows 10, version 1809Windows Server 2019, all versions
Release Date:
May 19, 2019
Version:
OS Build 17763.504

Improvements and fixes
This update includes quality improvements. Key changes include:

• Addresses an issue that may prevent access to some gov.uk websites that don’t support HTTP Strict Transport Security (HSTS) when using Internet Explorer 11 or Microsoft Edge.

If you installed earlier updates, only the new fixes contained in this package will be downloaded and installed on your device.

 

[kemical]

Microsoft has released a new Cumulative Update for 1809:

May 21, 2019—KB4497934 (OS Build OS 17763.529)

Applies to: Windows 10, version 1809Windows Server 2019, all versions
Release Date:
May 21, 2019
Version:
OS Build OS 17763.529

Starting with update KB4497934, we are introducing functionality that allows you to decide when to install a feature update. You control when you get a feature update while simultaneously keeping your devices up to date. Feature updates that are available for eligible devices will appear in a separate module on the Windows Update page (Settings > Update & Security > Windows Update). If you would like to get an available update right away, select Download and install now. To find out more about this feature, please go to this blog.
When Windows 10 devices are at, or within several months of reaching, end of service, Windows Update will begin to automatically initiate a feature update. This keeps those devices supported and receiving the monthly updates that are critical to device security and ecosystem health.
Improvements and fixes
This update includes quality improvements. Key changes include:

• Allows users to go back to a host browser from a Windows Defender Application Guard (WDAG) container.
• Addresses an issue with looping redirects between Microsoft Edge and Internet Explorer 11.
• Updates wininet.dll to prevent the re-creation of File Transfer Protocol (FTP) control sessions.
• Addresses an issue that may cause Microsoft Edge to hide annotations added to a PDF file, such as inked notes, highlights, and comments.
• Addresses an issue that removes UserRights policies from all users in a security group when you remove a device from a mobile device management (MDM) server or Microsoft Intune deletes a UserRights policy.
• Addresses an issue that disconnects a remote desktop session when you lock the session using a third-party credential provider.
• Addresses an issue that causes Microsoft Office and other applications to prompt for a password after you change a user account password. This issue occurs on hybrid Azure Active Directory (AD) joined systems.
• Addresses an issue that prevents ActiveX controls from automatically installing through a proxy server.
• Addresses an issue that prevents you from signing in to a Microsoft Surface Hub device with an Azure Active Directory account. This issue occurs because the previous sign-out did not complete successfully.
• Addresses an issue that causes a sign-in to fail with the error, “Incorrect Username or password” when using an empty or null password and Windows Defender Credential Guard is enabled.
• Addresses an issue that may cause a temporary KRB_AP_ERR_MODIFIED Kerberos sign-in failure in applications and services configured to use a Group Managed Service Account (GMSA). This issue occurs after the automatic update of the service account password.
• Addresses an issue that may prevent BitLocker from encrypting data drives when the "Enforce drive encryption on fixed data drives" Group Policy is configured.
• Addresses an issue that prevents updates from downloading from a Windows Server Update Services (WSUS) server when a Windows Defender Application Control policy is set to manage which updates can be deployed.
• Addresses an issue that may cause event 7600 in the Domain Name System (DNS) server event log to contain an unreadable server name.
• Addresses an issue that fails to record a local user’s last logon time even when the user has accessed the server’s network share.
• Addresses an issue that prevents NumLock from working properly in a Remote Assistance session when the Remote Assistance window gains and loses focus.
• Updates time zone information for Morocco.
• Updates time zone information for the Palestinian Authority.
• Addresses an issue with the International Components for Unicode (ICU) data, which were not updated for the time zone and the new Japanese Era.
• Addresses an issue with the "Allow uninstallation of language features when a language is uninstalled." Group Policy.
• Addresses an issue in which a File Share Witness does not remove Server Message Block (SMB) handles, which causes a server to eventually stop accepting SMB connections.
• Addresses an issue in which Windows attempts to renew Azure Active Directory (AAD) token certificates when there is no internet connectivity. This issue occurs during AAD authentication and slows the performance of applications.
• Addresses an issue with scrollLeft in Internet Explorer.
• Addresses an issue that causes rendering to stop working for <svg> elements.
• Addresses an issue with Assigned Access deployments (formerly Kiosk Mode) that prevents a user from logging on to an Assigned Access profile. This affects all locales and occurs when the local administrator’s group is not named using the English spelling of “Administrators”. In the Event Viewer, Event 31000 shows the source as “Microsoft-Windows-AssignedAccess/Admin” and displays the error message, “The group used to assign the application can’t be found.”
• Addresses an issue that prevents a Generation 2 virtual machine from starting on a Windows Server 2019 Hyper-V host. In the Microsoft-Windows-Hyper-V-Worker-Admin event log, Event ID 18560 displays, “VM name was reset because an unrecoverable error occurred on a virtual processor that caused a triple fault.”

If you installed earlier updates, only the new fixes contained in this package will be downloaded and installed on your device.

 

[kemical]

Microsoft has released a new Cumulative Update for Windows 10 version 1903.

May 29, 2019—KB4497935 (OS Build 18362.145)

Applies to: Windows 10, version 1903Windows Server, version 1903
Release Date:
May 29, 2019
Version:
OS Build 18362.145

Improvements and fixes
This update includes quality improvements. Key changes include:

• Addresses an issue that may prevent Custom URI Schemes for Application Protocol handlers from starting the corresponding application for local intranet and trusted sites on Internet Explorer.
• Addresses an issue that prevents certain apps from launching when you set folder redirection for the Roaming AppData folder to a network path.
• Addresses an issue that my turn off Night light mode during display mode changes.
• Addresses an issue that may distort the rendering of a full-screen game when the Microsoft Game bar is visible on top of the game.
• Addresses an issue that prevents the removal of Bluetooth® peripheral devices from some systems with specific Bluetooth radios.
• Addresses an issue that may cause event 7600 in the Domain Name System (DNS) server event log to contain an unreadable server name.
• Addresses an issue in which the dots per inch (DPI) of the guest does not match the host.
• Addresses an issue that may cause an external USB device or SD memory card to be reassigned to an incorrect drive during installation. For more information, see "This PC can't be upgraded to Windows 10" error on a computer that has a USB device or SD card attached.
• Addresses an issue in which a File Share Witness does not remove Server Message Block (SMB) handles, which causes a server to eventually stop accepting SMB connections.
• Addresses an issue that prevents an application protocol URL from being opened when hosted on an intranet page.
• Addresses an issue with BranchCache when it is in distributed cache mode. BranchCache may use more disk space than assigned for the republication cache. To fully address the issue, devices that have exceeded the disk space assignments should empty BranchCache using the netsh branchcache flushcommand.
• Addresses an issue that may prevent some Direct3D applications and games from entering full-screen mode if the display’s orientation has been changed from the default.
• Addresses an issue with creating a Windows catalog file on an x64 system using Windows System Image Manager. For more information, see What's new in ADK kits and tools.
• Addresses an issue that causes a delay when loading many unsigned Domain Name System (DNS) zones related to the Domain Name System Security Extensions (DNSSEC) feature. This issue occurs after configuring the following registry setting:

Path: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DNS\Parameters
Setting: EnableFastLoadUnsignedZones
Type: DWORD Value: A value of 1 enables the feature. A value of 0 disables the feature.
Restart the operating system or the DNS server after changing the registry values.
If you installed earlier updates, only the new fixes contained in this package will be downloaded and installed on your device.

 

[kemical]

Microsoft has released a new Cumulative Update for Windows 10 version 1903.

June 11, 2019—KB4503293 (OS Build 18362.175)

Applies to: Windows 10, version 1903Windows Server version 1903

Improvements and fixes
This update includes quality improvements. Key changes include:

• Addresses a security vulnerability by intentionally preventing connections between Windows and Bluetooth devices that are not secure and use well-known keys to encrypt connections, including security fobs. If BTHUSB Event 22 in the Event Viewer states, “Your Bluetooth device attempted to establish a debug connection….”, then your system is affected. Contact your Bluetooth device manufacturer to determine if a device update exists. For more information, see CVE-2019-2102 and KB4507623.
• Security updates to Windows Virtualization, Microsoft Scripting Engine, Internet Explorer, Windows App Platform and Frameworks, Windows Input and Composition, Windows Media, Windows Shell, Windows Server, Windows Authentication, Windows Cryptography, Windows Storage and Filesystems, Windows SQL Components, the Microsoft JET Database Engine, and Internet Information Services.

If you installed earlier updates, only the new fixes contained in this package will be downloaded and installed on your device.
For more information about the resolved security vulnerabilities, please refer to the Security Update Guide.

 

[kemical]

Microsoft has released new Cumulative Updates for Windows 10

June 27, 2019—KB4501375 (OS Build 18362.207)

Applies to: Windows 10, version 1903Windows Server version 1903
Release Date:
June 27, 2019
Version:
OS Build 18362.207

Note Follow Link Removed to find out when new content is published to the release information dashboard.
Improvements and fixes
This update includes quality improvements. Key changes include:

• Addresses an issue that fails to display the cursor when you hover over the keyboard magnifier.
• Addresses an issue with looping redirects between Microsoft Edge and Internet Explorer 11.
• Addresses an issue with Scalable Vector Graphics (SVG) marker display.
• Addresses an issue with programmatic scrolling in Internet Explorer 11.
• Addresses an issue with displaying portions of a webpage that has many elements and multiple nesting levels under certain conditions in Internet Explorer.
• Addresses an issue that may cause “Error 1309” while installing or uninstalling certain types of .msi or .msp files on a virtual drive.
• Addresses an issue that may cause Night light, Color Management profiles, or gamma correction to stop working after shutting down a device.
• Addresses an issue that only shows grey scale in the camera during Windows Hello enrollment.
• Addresses an issue that may cause playback of some video content generated by iOS devices to fail.
• Addresses a desktop and taskbar flickering issue on Windows Server 2019 Terminal Server that occurs when using User Profile Disks.
• Addresses an issue that allows users to disable the sign-in background image when the "Computer\Administrative Templates\Control Panel\Personalization\Prevent changing lock screen and logon image" policy is enabled.
• Addresses a disconnection issue when using fitness software on an Android phone that has the Your Phone application installed.
• Addresses an issue that prevents the Windows Event Log service from processing notifications that the log is full. This makes event log behaviors, such as archiving the log when it reaches a maximum file size, impossible. Additionally, the Local Security Authority (LSA) cannot handle CrashOnAuditFail scenarios when the Security log is full, and events cannot be written.
• Addresses an issue that causes Office 365 applications to stop working after opening when they are deployed as App-V packages.
• Addresses an issue that may prevent Container Hosts from receiving an address from a Dynamic Host Configuration Protocol (DHCP) server.
• Addresses an issue that may prevent some upgrades from Windows 7 from completing successfully when third-party antivirus software is installed.
• Reinforces the Certificate Revocation List (CRL) on Internet Key Exchange version 2 (IKEv2) machines for certificate-based virtual private network (VPN) connections, such as Device Tunnel, in an Always On VPN deployment.
• Addresses an issue that triggers a Group Policy update even when there are no policy changes. This issue occurs when using the client-side extension (CSE) for folder redirection.
• Addresses an issue that may prevent the Preboot Execution Environment (PXE) from starting a device from a Windows Deployment Services (WDS) server configured to use Variable Window Extension. This may cause the connection to the WDS server to terminate prematurely while downloading the image. This issue does not affect clients or devices that are not using Variable Window Extension.
• Addresses an issue that may display the error, “MMC has detected an error in a snap-in and will unload it.” when you try to expand, view, or create Custom Views in Event Viewer. Additionally, the application may stop responding or close. You may also receive the same error when using Filter Current Log in the Action menu with built-in views or logs.
• Addresses an issue with WinHTTP registrations that increase the registry size and delay the operating system’s startup. This occurs on devices that use proxy auto-config (PAC) files to define how web browsers and agents select an appropriate proxy server. To stop the incremental growth of the registry, update the following:

Path: HKEY_CURRENTUSER\"Software\Classes\Localettings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings"
Setting: CleanupLeakedContainerRegistrations
Type: DWORD
Value: 1
A value of 1 removes preexisting registrations; a value of 0 (default) retains existing registrations.
If you installed earlier updates, only the new fixes contained in this package will be downloaded and installed on your device.

 

[kemical]

Microsoft has released its monthly Windows 10 Cumulative Updates.

July 9, 2019—KB4507453 (OS Build 18362.239)

Applies to: Windows 10, version 1903Windows Server version 1903
Release Date:
July 9, 2019
Version:
OS Build 18362.239

Note Follow Link Removed to find out when new content is published to the release information dashboard.
Note This release also contains updates for Microsoft HoloLens (OS Build 18362.1024) released July 9, 2019. Microsoft will release an update directly to the Windows Update Client to improve Windows Update reliability on Microsoft HoloLens that have not updated to this most recent OS Build.
For more information about the various types of Windows updates, such as critical, security, driver, service packs, etc., please see the following article.
Highlights

• Updates an issue with a tilted world some Mixed Reality users may see after connecting their headsets.
• Updates the visual quality issues some users may have when using Windows Mixed Reality (WMR) headsets with Steam®VR content.
• Updates an issue with BitLocker encryption recovery mode.
• Updates to improve security when using Internet Explorer, Microsoft Edge, wireless technologies, and Microsoft Office products.

Improvements and fixes
This update includes quality improvements. Key changes include:

• Addresses an issue that may cause BitLocker to go into recovery mode if BitLocker is being provisioned at the same time as updates are being installed.
• Addresses an issue that may cause Mixed Reality users to see a tilted world after connecting their headsets.
• Addresses visual quality issues some users may have seen with Windows Mixed Reality (WMR) headsets and Steam®VR content.
• Security updates to Windows Wireless Networking, Microsoft Scripting Engine, Windows Server, Windows Storage and Filesystems, Windows Kernel, Microsoft HoloLens, Internet Explorer, Windows Input and Composition, Windows Virtualization, Windows App Platform and Frameworks, Microsoft Graphics Component, Microsoft Edge, and Windows Cryptography.

If you installed earlier updates, only the new fixes contained in this package will be downloaded and installed on your device.
For more information about the resolved security vulnerabilities, please refer to the Security Update Guide.

 

[kemical]

Microsoft has released a new Cumulative Update for Windows 10 version 1903.

July 26, 2019—KB4505903 (OS Build 18362.267)

Applies to: Windows 10, version 1903Windows Server version 1903
Release Date:
July 26, 2019
Version:
OS Build 18362.267

Note Follow Link Removed to find out when new content is published to the release information dashboard.
For more information about the various types of Windows updates, such as critical, security, driver, service packs, etc., please see the following article.
Highlights

• Updates an issue that prevents Windows Hello face recognition from working after you restart a device.
• Allows Microsoft Edge to print PDF documents that contain landscape and portrait-oriented pages correctly.
• Allows Microsoft Edge to open PDFs that are configured to be opened only once correctly.
• Updates an issue that may display colors incorrectly when viewing an image on 10-bit display panels.
• Updates an issue that may prevent you from changing the display brightness after your device resumes from Sleep or Hibernation.
• Updates an issue that may prevent a device from going to Sleep mode when some applications that rely on Bluetooth are open.
• Improves Bluetooth audio quality when using certain audio profiles for extended periods.
• Improves compatibility with the Window-Eyes screen reader application.
• Ensures that the Start menu works as expected when new users sign in to Windows.
• Updates the Windows Ink Workspace by simplifying the menu and adding direct integration with the Link Removed app for a richer collaboration experience.

Improvements and fixes
This update includes quality improvements. Key changes include:

• Addresses an issue that fails to record a local user’s last sign in time even when the user has accessed the server’s network share.
• Addresses an issue that may sever the domain trust relationship when you enable Recycle Bin in the domain that established the trust relationship.
• Addresses an issue that prevents Windows Hello face authentication from working after a restart.
• Updates time zone information for Brazil.
• Addresses an issue to enable Microsoft Edge to print PDF documents that contain landscape and portrait-oriented pages correctly.
• Addresses an issue with PDFs that are configured to be opened only once in Microsoft Edge.
• Addresses an issue that may display colors incorrectly when viewing an image on 10-bit display panels.
• Addresses an issue that may prevent you from changing the display brightness when using certain graphics drivers after resuming from Sleep or Hibernation.
• Addresses an issue in which Windows Graphics Device Interface (GDI+) returns an empty font family name for Bahnschrift.ttf.
• Addresses an issue that may cause a mouse press and release event to sometimes produce an extra mouse move event.
• Addresses an issue that may cause the UI to stop responding for several seconds when scrolling in windows that have many child windows.
• Addresses an issue that fails to bypass automatic sign in (Autologon) when you press and hold the Shift key during startup.
• Addresses an issue that may prevent a device from going to Sleep mode when certain applications that rely on Bluetooth are open.
• Addresses an issue that may reduce Bluetooth audio quality when using certain audio profiles for extended periods.
• Addresses an issue that prevents Microsoft Application Virtualization (App-V) scripting from working if you run it when you’re not connected to a domain controller (DC). App-V scripting also fails when you run it in an environment that only contains Microsoft Azure Active Directory.
• Addresses an issue that causes an error if you open Microsoft OneDrive files on demand when User Experience Virtualization (UE-V) is enabled. To apply this solution, set the following DWORD to 1: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\UEV\Agent\Configuration\ApplyExplorerCompatFix
• Addresses an issue with UE-V that may sometimes prevent exclusion paths from working.
• Addresses an issue that may cause a system that has a Trusted Platform Module (TPM) to stop working.
• Addresses an issue that prevents a system from recognizing a Microsoft account or Azure Active Directory account until the user signs out and signs in again.
• Addresses an issue that may prevent the Netlogon service from establishing a secure channel and reports the error, “0xC000007A – ERROR_PROC_NOT_FOUND.”
• Addresses an issue that fails to update the personal identification number (PIN) policy (minimum length, required digits and special characters, etc.) for Windows Hello for Business when a PIN already exists on the machine.
• Addresses an issue that causes failures to create a recovery drive (USB key) with the error, ”0x80042405[gle=0x00000715].”
• Addresses an issue that prevents an Android emulator based on the virtual machine platform from starting on some systems.
• Addresses an issue that uses a temporary profile to sign in a local user account when the account is configured with a mandatory roaming user profile. The error, “We can’t sign in to your account” appears. The Application event log contains Event 1521, and the event’s source is listed as the Microsoft-Windows-User Profiles Service.
• Addresses an issue that changes the status for Work Folders in File Explorer to 0x80C802A0 (ECS_E_SYNC_UPLOAD_PLACEHOLDER_FAILURE) after selecting Free up space.
• Addresses an issue that may cause a Remote Desktop Server to stop responding when someone who is using drive redirection disconnects.
• Addresses an issue that may cause the Remote Access Connection Manager (RASMAN) service to stop working. You may receive the error “0xc0000005” on devices that have the diagnostic data level manually configured to the non-default setting of 0. You may also receive an error in the Application section of Windows Logs in Event Viewer with Event ID 1000 referencing “svchost.exe_RasMan” and “rasman.dll”. This issue only occurs when a virtual private network (VPN) profile is configured as an Always On VPN (AOVPN) connection with or without a device tunnel.
• Addresses an issue that causes applications on a container host to intermittently lose connectivity because of a port conflict with applications running on a container.<
• Addresses an issue that intermittently prevents connections to a corporate network when using Always On VPN with the IKEv2 protocol. Connections are not always automatically established, and manual connections sometimes fail. In this scenario, when you call the RasDialfunction from the command line for the target VPN connection, you receive the error, “ERROR_PORT_NOT_AVAILABLE(633)”.
• Adds limited support for Windows voice dictation for Chinese Simplified, English (Australia, Canada, India, United Kingdom), French (France), German (Germany), Italian (Italy), Portuguese (Brazil), and Spanish (Mexico, Spain).
• Addresses an issue with opening or using the Window-Eyes screen reader application that may result in an error and prevent some features from functioning as expected.
• Addresses an issue that prevents an App-V application from opening and displays a network failure error. This issue occurs under certain circumstances, such as when a system's battery is low or there is an unexpected power failure.
• Addresses an issue that prevents an App-V application from opening if the client is offline and a startup script is defined for the App-V application.
• Addresses a rare issue that causes Windows Defender Advanced Threat Protection (ATP) to temporarily prevent other processes from accessing files.
• Addresses an issue that causes the Start menu to stop responding when new users sign in to Windows 10, version 1903.
• Updates the Windows Ink Workspace by simplifying the menu and adding direct integration with the Link Removed app for a richer collaboration experience.

 

[kemical]

Microsoft has released a new Cumulative Update for Windows 10 version 1903.

August 13, 2019—KB4512508 (OS Build 18362.295)

Applies to: Windows 10, version 1903Windows Server version 1903
Release Date:
August 13, 2019
Version:
OS Build 18362.295

Note Follow Link Removed to find out when new content is published to the release information dashboard.
Note This release also contains updates for Microsoft HoloLens (OS Build 18362.1028) released August 13, 2019. Microsoft will release an update directly to the Windows Update Client to improve Windows Update reliability on Microsoft HoloLens that have not updated to this most recent OS Build.
For more information about the various types of Windows updates, such as critical, security, driver, service packs, etc., please see the following article.
Highlights

• Updates to improve security when using Internet Explorer, Microsoft Edge, Bluetooth, networking technologies, and input devices such as a mouse, keyboard, or stylus.

Improvements and fixes
This security update includes quality improvements. Key changes include:

• Security updates to Windows App Platform and Frameworks, Windows Storage and Filesystems, Microsoft Scripting Engine, Windows Input and Composition, Windows Wireless Networking, Windows Cryptography, Windows Datacenter Networking, Windows Virtualization, Windows Storage and Filesystems, the Microsoft JET Database Engine, Windows Linux, Windows Kernel, Windows Server, Windows MSXML, Internet Explorer, and Microsoft Edge.

If you installed earlier updates, only the new fixes contained in this package will be downloaded and installed on your device.
For more information about the resolved security vulnerabilities, please refer to the Security Update Guide.

 

[kemical]

Microsoft has issued a new Cumulative Update for Windows 10 version 1903

August 30, 2019—KB4512941 (OS Build 18362.329)

Applies to: Windows 10, version 1903Windows Server version 1903
Release Date:
August 30, 2019
Version:
OS Build 18362.329

Note Follow Link Removed to find out when new content is published to the release information dashboard.
For more information about the various types of Windows updates, such as critical, security, driver, service packs, and so on, please see the following article.
ePub support ending in Microsoft Edge
Microsoft Edge will end support for e-books that use the .epub file extension over the next several months. For more information, see Download an ePub app to keep reading e-books.
Highlights

• Updates an issue that prevents certain games from leveraging Spatial Audio capabilities.
• Updates an issue that fails to provide a cursor when you select a text input box using touch.
• Updates an issue that may cause the name of an unsupported application to appear as default text, such as “ms-resource:AppName/Text” in the Start menu after upgrading the operating system.
• Updates an issue with downloading copyrighted digital media (music, TV shows, movies, and so on) from certain websites using Microsoft Edge and Internet Explorer.
• Improves the user experience and app compatibility so that more Win32 apps will work with Windows Mixed Reality.

Improvements and fixes
This non-security update includes quality improvements. Key changes include:

• Addresses an issue that displays a black screen when you use Remote Desktop to connect to a machine running Windows 10, version 1903.
• Addresses an issue that may prevent the Windows Sandbox from starting with the error, "ERROR_FILE_NOT_FOUND (0x80070002)." This occurs on devices in which the operating system language is changed during the update process when installing Windows 10, version 1903.
• Increases the number of supported interrupts per device to 512 on systems that have x2APIC enabled.
• Addresses an issue that prevents some Trusted Platform Module (TPM) devices from being used for Next Generation Credentials.
• Addresses an issue that causes a workstation to stop working when you sign in using an updated user principal name (UPN) (for example, changing UserN@contoso.com to User.Name@contoso.com).
• Addresses an issue that prevents Windows Defender Advanced Threat Protection (ATP) from running automated forensic data collection when using registry-based proxy configuration.
• Addresses an issue that prevents Windows Defender Advanced Threat Protection (ATP) from sending cyberspace events for paths beginning with \\tsclient.
• Addresses a possible compatibility issue when Windows Defender Advanced Threat Protection (ATP) accesses case-sensitive Server Message Block (SMB) shares.
• Addresses a rare issue that occurs when the mssecflt.sys driver takes too much space on the kernel stack. This results in the error, "STOP 0x7F: UNEXPECTED_KERNEL_MODE_TRAP", and Parameter 1 is set to “EXCEPTION_DOUBLE_FAULT.”
• Addresses an issue that leads to excessive memory utilization in Windows Defender Advanced Threat Protection (ATP).
• Improves the detection accuracy of Microsoft Defender ATP Threat & Vulnerability Management.
• Addresses an issue in which Windows Defender Application Control will not allow third-party binaries to be loaded from a Universal Windows Platform application. CodeIntegrity event error 3033 appears as, “Code Integrity determined that a process (<process name>) attempted to load <binary name> that did not meet the Store signing level requirements.”
• Addresses an issue that causes devices to have truncated device names when Autopilot provisioning automatically assigns a name to them.
• Addresses an issue in which the product description of Windows Server 2019 was incorrect when queried using slmgr /dlv.
• Addresses an issue that causes the Windows Management Instrumentation (WMI) class Win32_PhysicalMemory to report that 32 GB memory chips have a missing Capacity value.
• Addresses an issue that prevents you from copying and pasting compound documents (formerly OLE objects) between an application that hosts the RichEdit control and other applications.
• Addresses an issue that prevents certain games from leveraging Spatial Audio capabilities.
• Addresses an issue that fails to provide a cursor when you select a text input element using touch.
• Addresses an issue that may cause the name of an unsupported application to appear as default text, such as “ms-resource:AppName/Text” in the Start menu after upgrading the operating system.
• Addresses an issue that may prevent the personal identification number (PIN) prompt from appearing when authenticating in Internet Explorer.
• Addresses an issue with downloading digital rights management (DRM) files from certain websites using Microsoft Edge and Internet Explorer.
• Improves the user experience and app compatibility so that more Win32 apps will work with Windows Mixed Reality.
• Addresses an issue with LdapPermissiveModify requests, which fail to make Active Directory (AD) group membership changes if the Lightweight Directory Access Protocol (LDAP) client uses the Security Identifier (SID) syntax. In this scenario, Active Directory returns a “SUCCESS” status even though the change did not occur.
• Addresses an issue that may prevent devices from starting when they start up using Preboot Execution Environment (PXE) images from Windows Deployment Services (WDS) or System Center Configuration Manager (SCCM). The error is, "Status: 0xc0000001, Info: A required device isn't connected or can't be accessed."
• Addresses an issue that may prevent devices from starting up or cause them to continue restarting if they are connected to a domain that is configured to use MIT Kerberos realms. Domain controllers and domain members are both affected.
• Addresses an issue that may cause the following to stop responding:
  • Applications that were made using Visual Basic 6 (VB6).
  • Macros that use Visual Basic for Applications (VBA).
  • Scripts or apps that use Visual Basic Scripting Edition (VBScript).

You may also receive an "Invalid procedure call” error.
If you installed earlier updates, only the new fixes contained in this package will be downloaded and installed on your device.

 

[kemical]

Microsoft has issued a new Cumulative Update for Windows 10 version 1903:

September 10, 2019—KB4515384 (OS Build 18362.356)

Applies to: Windows 10, version 1903Windows Server version 1903
Release Date:
September 10, 2019
Version:
OS Build 18362.356

Note Follow Link Removed to find out when new content is published to the release information dashboard.
Note This release also contains updates for Microsoft HoloLens (OS Build 18362.1031) released September 10, 2019. Microsoft will release an update directly to the Windows Update Client to improve Windows Update reliability on Microsoft HoloLens that have not updated to this most recent OS Build.
ePub support ending in Microsoft Edge
Microsoft Edge will end support for e-books that use the .epub file extension over the next several months. For more information, see Download an ePub app to keep reading e-books.
For more information about the various types of Windows updates, such as critical, security, driver, service packs, and so on, please see the following article.
Highlights

• Updates to improve security when using Internet Explorer, Microsoft Edge, networking technologies, and input devices such as a mouse, keyboard, or stylus.
• Updates for verifying user names and passwords.
• Updates for storing and managing files.

Improvements and fixes
This security update includes quality improvements. Key changes include:

• Provides protections against a new subclass of speculative execution side-channel vulnerabilities, known as Microarchitectural Data Sampling, for 32-Bit (x86) versions of Windows (CVE-2019-11091, CVE-2018-12126, CVE-2018-12127, CVE-2018-12130). Use the registry settings as described in the Windows Client and Windows Server articles. (These registry settings are enabled by default for Windows Client OS editions and Windows Server OS editions.)
• Addresses an issue that causes high CPU usage from SearchUI.exe for a small number of users. This issue only occurs on devices that have disabled searching the web using Windows Desktop Search.
• Security updates to Microsoft Edge, Internet Explorer, Microsoft Scripting Engine, Windows App Platform and Frameworks, Windows Input and Composition, Windows Media, Windows Fundamentals, Windows Authentication, Windows Cryptography, Windows Datacenter Networking, Windows Storage and Filesystems, Windows Wireless Networking, the Microsoft JET Database Engine, Windows Kernel, Windows Virtualization, and Windows Server.

If you installed earlier updates, only the new fixes contained in this package will be downloaded and installed on your device.
For more information about the resolved security vulnerabilities, please refer to the Security Update Guide.

 

[kemical]

Microsoft has released a Cumulative Update for Windows 10 version 1903.

September 26, 2019—KB4517211 (OS Build 18362.387)

Applies to: Windows 10, version 1903Windows Server version 1903
Release Date:
September 26, 2019
Version:
OS Build 18362.387

Note Follow Link Removed to find out when new content is published to the release information dashboard.
ePub support ending in Microsoft Edge
Microsoft Edge will end support for e-books that use the .epub file extension over the next several months. For more information, see Download an ePub app to keep reading e-books.
For more information about the various types of Windows updates, such as critical, security, driver, service packs, and so on, please see the following article.
Highlights

• Updates an issue that causes vertical fonts to be larger when printing to a PostScript printer.
• Updates an issue that may cause you to disconnect from a virtual private network (VPN) on cellular networks.
• Updates an issue that may cause audio playback and recording to fail when connecting to a remote virtual machine.
• Updates an issue that may prevent older systems from upgrading to the latest operating systems because a display driver error on older versions.
• Updates an issue that may cause the screen color to turn white on laptops that have built-in, high-dynamic-range (HDR) screens.
• Updates an issue that causes audio in certain games to be quieter or different than expected.

Improvements and fixes
This non-security update includes quality improvements. Key changes include:

• Addresses an issue that causes vertical fonts to be larger when printing to a PostScript printer.
• Addresses an issue that causes printing from 32-bit applications to fail with an “Access is denied” error when you select Run as different user for the application.
• Addresses an issue that may give write access to a removable USB disk when a user switches from a privileged user to an unprivileged user.
• Addresses an issue that causes the lsass.exe service to stop working, which causes the system to shut down. This occurs when migrating Data Protection API (DPAPI) credentials using dpapimig.exe with the -domain option.
• Addresses an issue that gives a Windows Hello for Business user two certificates for authentication during certificate renewal instead of one certificate.
• Addresses an issue that prevents a web browser from connecting securely to Windows Server. This occurs when using a client authentication certificate, such as a SHA512-based certificate, and the web browser does not support a signature algorithm that matches the certificate.
• Addresses an issue that may cause authentication to fail for certificate-based authentication when the certificate authentication includes a cname as part of the pre-authentication request.
• Addresses an issue that prevents a Microsoft App-V application from opening and displays a network failure error. This issue occurs under certain circumstances, such as when a system's battery is low or there is an unexpected power failure.
• Addresses an issue that causes a query request of the Win32_LogonSession class for the StartTime to display the value of the epoch (for example, 1-1-1601 1:00:00) instead of the actual logon time. This occurs when a user who isn’t an administrator creates the query request.
• Addresses an issue that causes File Explorer to show a regular file icon for files marked with FILE_ATTRIBUTE_OFFLINE instead of the expected placeholder icon.
• Addresses an issue with intermittent virtual private network (VPN) disconnections on cellular networks.
• Addresses an issue that may cause audio playback and recording to fail when connecting to a remote virtual machine.
• Addresses an issue with MSCTF.dll that causes an application to stop working.
• Addresses an issue with the input and display of special characters that occurs when an app uses imm32.dll.
• Addresses an issue with resizing Windows Presentation Foundation (WPF) applications; they may not respond to being resized using the mouse until you release the mouse button.
• Addresses an issue that may prevent older systems from upgrading to the latest operating systems because of an error in the display driver of older versions.
• Addresses an issue that may cause the screen color to turn white on laptops that have built-in, high-dynamic-range (HDR) screens.
• Addresses an issue with converting an application from 32-bit to 64-bit architecture.
• Addresses an issue that prevents you from running the Active Directory Diagnostics Data Collector Set from the Performance Monitor for Domain Controllers. This causes the Data Collector Set name to appear empty. Running the Active Directory Diagnostics Data Collector Set returns the error, “The system cannot find the file specified.” Event ID 1023 is logged with the source as Perflib and the following messages:
  • “Windows cannot load the extensible counter DLL “C:\Windows\system32\ntdsperf.dll.”
  • “The specified module could not be found.”
• Addresses an issue that causes audio in certain games to be quieter or different than expected.
• Addresses an issue that prevents Microsoft App-V from handling a parameter of the CreateProcess API properly, which prevents the virtual process from opening.
• Addresses an issue in which the maximum central processing unit (CPU) performance is not enabled when you select the High Performance power plan.
• Provides a way to configure the read buffer size. This allows you to address an issue with slow upload times when uploading a file to a Universal Naming Convention (UNC) share using the Internet Information Services (IIS) Web Distributed Authoring and Versioning (WebDAV) feature.
• Addresses an issue that causes a device to stop working when opening files from a network drive that has client-side caching enabled. This issue may occur when the device has certain third-party antivirus products installed and the drive is backed by a server that is not a Microsoft Server Message Block (SMB) server. The error code is, “0x27 RDR_FILE_SYSTEM.”
• Facilitates the configuration of devices that are managed by mobile device management (MDM) settings, which are created by ADMX ingestion. You can update a previously ingested ADMX file with a newer version, and you are not required to delete the previous ADMX file. This solution applies to all applications that use ADMX ingestion.

If you installed earlier updates, only the new fixes contained in this package will be downloaded and installed on your device.

 

[kemical]

Microsoft has released a Cumulative Update for Windows 10 version 1903.

October 3, 2019—KB4524147 (OS Build 18362.388)

Applies to: Windows 10, version 1903Windows Server version 1903
Release Date:
October 3, 2019
Version:
OS Build 18362.388

IMPORTANT This is a required security update that expands the out-of-band update dated September 23, 2019. This security update includes the Internet Explorer scripting engine security vulnerability (CVE-2019-1367) mitigation and corrects a recent printing issue some users have experienced. Customers using Windows Update or Windows Server Update Services (WSUS) will be offered this update automatically. To help secure your devices, we recommend that you install this update as soon as a possible and restart your PC to fully apply the mitigations. Like all cumulative updates, this update supersedes any preceding update.
Note This update does not replace the upcoming October 2019 monthly update, which is scheduled to release on October 8, 2019.

Note Follow Link Removed to find out when new content is published to the release information dashboard.
ePub support ending in Microsoft Edge
Microsoft Edge will end support for e-books that use the .epub file extension over the next several months. For more information, see Download an ePub app to keep reading e-books.
For more information about the various types of Windows updates, such as critical, security, driver, service packs, and so on, please see the following article.
Highlights

• Updates an intermittent issue with the print spooler service that may cause print jobs to fail.

Improvements and fixes
This security update includes quality improvements. Key changes include:

• Addresses an intermittent issue with the print spooler service that may cause print jobs to fail. Some apps may close or generate errors, such as the remote procedure call (RPC) error.
• Addresses an issue that may result in an error when you install Features On Demand (FOD), such as .Net 3.5. The error is, "The changes couldn’t be complete. Please reboot your computer and try again. Error code: 0x800f0950.”

If you installed earlier updates, only the new fixes contained in this package will be downloaded and installed on your device.
For more information about the resolved security vulnerabilities, please refer to the Security Update Guide.
Windows Update Improvements
Microsoft has released an update directly to the Windows Update client to improve reliability. Any device running Windows 10 configured to receive updates automatically from Windows Update, including Enterprise and Pro editions, will be offered the latest Windows 10 feature update based on device compatibility and Windows Update for Business deferral policy. This doesn't apply to long-term servicing editions.
Known issues in this update
Microsoft is not currently aware of any issues with this update.

 

[kemical]

Microsoft has released a Cumulative Update for Windows 10 version 1903.

October 8, 2019—KB4517389 (OS Build 18362.418)

Applies to: Windows 10, version 1903Windows Server version 1903
Release Date:
October 8, 2019
Version:
OS Build 18362.418

Note Follow Link Removed to find out when new content is published to the release information dashboard.
Note This release also contains updates for Microsoft HoloLens (OS Build 18362.1034) released October 8, 2019. Microsoft will release an update directly to the Windows Update Client to improve Windows Update reliability on Microsoft HoloLens that have not updated to this most recent OS Build.
ePub support ending in Microsoft Edge
Microsoft Edge will end support for e-books that use the .epub file extension over the next several months. For more information, see Download an ePub app to keep reading e-books.
For more information about the various types of Windows updates, such as critical, security, driver, service packs, and so on, please see the following article.
Highlights

• Updates to improve security when using Internet Explorer and Microsoft Edge.
• Updates for verifying user names and passwords.
• Updates for storing and managing files.

Improvements and fixes
This security update includes quality improvements. Key changes include:

• Addresses an issue in security bulletin CVE-2019-1318 that may cause client or server computers that don’t support Extended Master Secret (EMS) RFC 7627 to have increased connection latency and CPU utilization. This issue occurs while performing full Transport Layer Security (TLS) handshakes from devices that don’t support EMS, especially on servers. EMS support has been available for all the supported versions of Windows since calendar year 2015 and is being incrementally enforced by the installation of the October 8, 2019 and later monthly updates.
• Addresses an issue with applications and printer drivers that utilize the Windows JavaScript engine (jscript.dll) for processing print jobs.
• Security updates to Windows Shell, Internet Explorer, Microsoft Edge, Windows App Platform and Frameworks, Windows Cryptography, Windows Authentication, Windows Storage and Filesystems, Windows Kernel, Microsoft Scripting Engine, and Windows Server.

If you installed earlier updates, only the new fixes contained in this package will be downloaded and installed on your device.
For more information about the resolved security vulnerabilities, please refer to the Security Update Guide.

 

[kemical]

Microsoft has released a Cumulative Update for Windows 10 Version 1903.

October 24, 2019—KB4522355 (OS Build 18362.449)

Applies to: Windows 10, version 1903Windows Server version 1903
Release Date:
October 24, 2019
Version:
OS Build 18362.449

Note Follow Link Removed to find out when new content is published to the release information dashboard.
ePub support ended in Microsoft Edge
Microsoft Edge has ended support for e-books that use the .epub file extension. For more information, see Download an ePub app to keep reading e-books.
For more information about the various types of Windows updates, such as critical, security, driver, service packs, and so on, please see the following article.
Highlights

• Updates an issue that prevents Microsoft Narrator from working in certain touch mode scenarios.
• Updates an issue that starts assistive technology (AT) (such as Microsoft Narrator, Magnifier, or NVDA) after signing in when you've configured it to start before signing in.
• Updates an issue that causes Magnifier to stop working in certain scenarios, and you have to restart it manually.
• Updates an issue that causes Microsoft Narrator to stop working in the middle of a session in certain scenarios.
• Updates an issue that might prevent a scroll bar from being selected.
• Updates an issue that allows a device to go to Sleep (S3) even if you configure the device to never sleep.
• Updates an issue that prevents you from shrinking a window in some cases.
• Updates an issue that prevents you from connecting to a virtual private network (VPN).
• Updates an issue that causes screen flickering or is slow to display the screen when you show application thumbnails on a monitor that has high dots per inch (DPI).
• Updates an issue that causes the tile for the Photos app to appear larger than expected in the Start menu under certain conditions.
• Updates an issue that causes the system to stop responding at the sign-in screen.
• Updates an issue that might cause a black screen to appear the first time you sign in after installing a feature or quality update.
• Updates an issue that causes the Start menu, the Cortana Search bar, Tray icons, or Microsoft Edge to stop responding in certain scenarios after installing a monthly update.

Improvements and fixes
This non-security update includes quality improvements. Key changes include:

• Addresses an issue with the behavior of the Origin HTTP header when you use Internet Explorer to make cross-origin resource sharing (CORS) requests to redirect resources in internal subnets.
• Addresses an issue that prevents Microsoft Narrator from working in certain touch mode scenarios.
• Addresses an issue with syncing settings from the Accounts page when the "Continue experiences on this device" Group Policy is disabled.
• Addresses an issue that starts assistive technology (AT) (such as Microsoft Narrator, Magnifier, or NVDA) after signing in when the Ease of Access Center setting requires AT to start before signing in.
• Addresses an error message that appears when you open an app after enabling NT Virtual DOS Machine (NTVDM) and the legacy console mode. The error message is, "OACClearArry: Cannot connect to Trace32 OLE Automation server. Error code: -2147483645."
• Addresses an issue that causes Magnifier to stop working in certain scenarios, and the user must restart it manually.
• Updates time zone information for Norfolk Island, Australia.
• Updates time zone information for the Fiji Islands.
• Addresses an issue that causes Microsoft Narrator to stop working in the middle of a user session in certain scenarios.
• Addresses an issue that fails to set the default Command Prompt window color when you use the color command without a parameter.
• Addresses an issue that causes the Microsoft Windows Search Indexer (searchindexer.exe) to add or repair required access control lists (ACLs) without checking if ACLs exist.
• Addresses an issue in which controls in Win32 applications intermittently fail to render correctly when started from a logoff script using the "Run shutdown scripts visible" policy.
• Addresses an issue in which installing many fonts in the system causes applications to stop responding.
• Addresses an issue with high CPU usage in Desktop Window Manager (dwm.exe) when you disconnect from a Remote Desktop Protocol (RDP) session.
• Addresses an issue that might prevent a scroll bar from being selected when an ActiveX control implements the CScrollView class. This occurs if you move the Internet Explorer window, which then moves the scroll bar to the left.
• Addresses an issue that allows the system to go to Sleep (S3) after two minutes of inactivity even if you configure the sleep timer to never sleep.
• Addresses an issue that prevents users from reducing the size of a window in some cases.
• Addresses an issue that causes Microsoft SharePoint file names to appear incorrectly in the Quick access and Recent items folders.
• Addresses an issue that prevents you from establishing virtual private network (VPN) connections.
• Addresses an issue that causes screen flickering or is slow to display the screen when you show application thumbnails on high dots per inch (DPI) monitors.
• Addresses an issue with incorrect permissions on a user’s class registry keys that prevents users from opening files, links, and applications.
• Addresses an issue that causes the tile for the Photos app to appear larger than expected in the Start menu under certain conditions.
• Addresses an issue that causes the system to stop responding at the sign-in screen.
• Addresses an issue with the multifactor unlock policy of Windows Hello for Business, which fails to show the default sign-in option on Windows 10 devices.
• Addresses an issue that causes Windows Search to close unexpectedly when a Group Policy applies sub-groups to the Start menu layout.
• Addresses an issue that prevents you from retrieving the correct Dynamic Host Configuration Protocol (DHCP) information by setting the DHCP LeaseTerminatesTime and LeaseObatinedTime parameters to the correct format.
• Addresses an issue with diagnostic data processing when a device has the Diagnostic data setting enabled and set to Basic.
• Addresses an issue that prevents Internet Explorer from opening when Microsoft User Experience Virtualization (UE-V) is being used to roam many favorites.
• Addresses an issue that improves the reliability of the UE-V AppMonitor.
• Addresses an issue in which Microsoft AppLocker might prevent an application from running or log a false positive error instead of running the application.
• Addresses an issue that prevents netdom.exe from displaying the new ticket-granting ticket (TGT) delegation bit for the display or query mode.
• Addresses an issue that might cause Direct Access servers to use a large amount of non-paged pool memory (pooltag: NDnd).
• Addresses an issue with AppContainer firewall rules that leak when guest users or mandatory user profile users sign in and sign out from Windows Server.
• Addresses an issue that prevents the Unified Write Filter (UWF) servicing mode of Windows Update from working with the Windows Server Update Services (WSUS) server.
• Addresses an issue that causes all Transmission Control Protocol (TCP) dynamic ports to be consumed. As a result, network communications will fail for any protocol or operation using dynamic ports.
• Addresses an issue with applications and scripts that call the NetQueryDisplayInformation API or the WinNT provider equivalent. They might fail to return results after the first page of data, often 50 or 100 entries. When requesting additional pages, you might receive the error, “1359: an internal error occurred.”
• Addresses an issue that disrupts window ordering after tooltips appear in the RemoteApp window.
• Improves an access control list (ACL) check for Known Folders to prevent a black screen that appears the first time a user signs in after installing a feature or quality update.
• Addresses an issue with evaluating the compatibility status of the Windows ecosystem to help ensure application and device compatibility for all updates to Windows.
• Addresses issue with Autopilot self-deploying mode and White glove deployments.
• Addresses an issue in which the pszTargetName parameter was set incorrectly in the InitializeSecurityContext() API.
• Addresses an issue that causes the Start menu, the Cortana Search bar, Tray icons, or Microsoft Edge to stop responding in certain scenarios after installing a monthly update.

If you installed earlier updates, only the new fixes contained in this package will be downloaded and installed on your device.