Windows 10 Windows 10 cumulative update history

Applies to: Windows 10, version 1803

Improvements and fixes
This update includes quality improvements. No new operating system features are being introduced in this update. Key changes include:

• Addresses an issue that causes devices within Active Directory or Hybrid AADJ++ domains to unexpectedly unenroll from Microsoft Intune or third-party MDM services after installing provisioning package updates (PPKG). This issue occurs on devices that are subject to the Auto MDM Enrollment with AAD Token Group Policy. If you ran the script Disable-AutoEnrollMDMCSE.PS1 as a workaround for this issue, run Enable-AutoEnrollMDMCSE.PS1 from a PowerShell window in Administrator mode after installing this update.
• Addresses additional issues with updated time zone information.
• Improves the ability of the Universal CRT Ctype family of functions to handle EOF as valid input.
• Addresses an issue with registration in the "Push to Install" service.
• Addresses an issue with Roaming User Profiles where the AppData\Local and AppData\Locallow folders are incorrectly synchronized at user logon and logoff. For more information, see KB4340390.
• Addresses issues related to peripherals that use Quality of Service (QoS) parameters for Bluetooth connections.
• Addresses an issue that causes SQL Server memory usage to grow over time when encrypting data using a symmetric key that has a certificate. Then, you execute queries that open and close the symmetric key in a recursive loop.
• Addresses an issue where using an invalid password in a wireless PEAP environment that has SSO enabled submits two authentication requests with the invalid password. The excess authentication request may cause premature account lockouts in environments with low account lockout thresholds. To enable the changes, add the new registry key DisableAuthRetry (Dword) on HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RasMan\PPP\EAP\26 using regedit, and set it to 1.
• Addresses an issue that prevents OpenType fonts from printing in Win32 applications.
• Addresses an issue with DNS Response Rate Limiting that causes a memory leak when enabled with LogOnly mode.
• Addresses an issue in a RemoteApp session that may result in a black screen when maximizing an app window on a secondary monitor.
• Addresses an issue in IME that causes unexpected finalization of strings during Japanese input in applications such as Microsoft Outlook.
• If you installed earlier updates, only the new fixes in this package will be downloaded and installed on your device.

Known issues in this update
Symptom Workaround
After you install any of the July 2018 .NET Framework Security Updates, a COM component fails to load because of “access denied,” “class not registered,” or “internal failure occurred for unknown reasons” errors. The most common failure signature is the following:

Exception type: System.UnauthorizedAccessException

Message: Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))

For more information, see KB4345913.

Microsoft is working on a resolution and will provide an update in an upcoming release.

Click to expand...

Applies to: Windows 10, version 1803
Release Date:
July 24, 2018
Version:
OS Build 17134.191

Improvements and fixes
This update includes quality improvements. No new operating system features are being introduced in this update. Key changes include:

• Addresses an issue that causes devices within Active Directory or Hybrid AADJ++ domains to unexpectedly unenroll from Microsoft Intune or third-party MDM services after installing provisioning package updates (PPKG). This issue occurs on devices that are subject to the Auto MDM Enrollment with AAD Token Group Policy. If you ran the script Disable-AutoEnrollMDMCSE.PS1 as a workaround for this issue, run Enable-AutoEnrollMDMCSE.PS1 from a PowerShell window in Administrator mode after installing this update.
• Addresses additional issues with updated time zone information.
• Improves the ability of the Universal CRT Ctype family of functions to handle EOF as valid input.
• Addresses an issue with registration in the "Push to Install" service.
• Addresses an issue with Roaming User Profiles where the AppData\Local and AppData\Locallow folders are incorrectly synchronized at user logon and logoff. For more information, see KB4340390.
• Addresses issues related to peripherals that use Quality of Service (QoS) parameters for Bluetooth connections.
• Addresses an issue that causes SQL Server memory usage to grow over time when encrypting data using a symmetric key that has a certificate. Then, you execute queries that open and close the symmetric key in a recursive loop.
• Addresses an issue where using an invalid password in a wireless PEAP environment that has SSO enabled submits two authentication requests with the invalid password. The excess authentication request may cause premature account lockouts in environments with low account lockout thresholds. To enable the changes, add the new registry key DisableAuthRetry (Dword) on HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RasMan\PPP\EAP\26 using regedit, and set it to 1.
• Addresses an issue that prevents OpenType fonts from printing in Win32 applications.
• Addresses an issue with DNS Response Rate Limiting that causes a memory leak when enabled with LogOnly mode.
• Addresses an issue in a RemoteApp session that may result in a black screen when maximizing an app window on a secondary monitor.
• Addresses an issue in IME that causes unexpected finalization of strings during Japanese input in applications such as Microsoft Outlook.

If you installed earlier updates, only the new fixes in this package will be downloaded and installed on your device.

Click to expand...

Symptom
After you install any of the July 2018 .NET Framework Security Updates, a COM component fails to load because of “access denied,” “class not registered,” or “internal failure occurred for unknown reasons” errors. The most common failure signature is the following:
Exception type: System.UnauthorizedAccessException
Message: Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))

Workaround
This issue is resolved in KB4343909.

Click to expand...

Applies to: Windows 10, version 1803
Release Date:
August 30, 2018
Version:
OS Build 17134.254

Improvements and fixes
This update includes quality improvements. No new operating system features are being introduced in this update. Key changes include:

• Addresses an issue in Microsoft Foundation Class applications that may cause applications to flicker.
• Addresses an issue where touch and mouse events were handled differently in Windows Presentation Foundation (WPF) applications that have a transparent overlay window.
• Addresses a reliability issue in applications that have extensive window nesting.
• Addresses an issue in the Universal CRT that sometimes causes the AMD64 FMOD to return an incorrect result when given very large inputs.
• Addresses an issue in the Universal CRT that causes the _get_pgmptr() function to return an empty string.
• Addresses an issue in the Universal CRT that causes isprint() to return TRUE for a tab when using the C locale.
• Addresses an issue where Microsoft Edge or other UWP applications can't perform client authentication when the private key is stored on a TPM 2.0 device.
• Addresses an issue that causes computer certificate enrollment or renewal to fail with an "Access denied" error after installing the April 2018 update. This issue occurs when the registry process has a lower process ID (PID) than all other processes except SYSTEM.
• Addresses an issue that, in some cases, failed to clear decrypted data from memory after a CAPI decryption operation was completed.
• Addresses an issue that prevented the Device Guard PackageInspector.exe application from including all the files needed for an application to run correctly once the Code Integrity policy was completed.
• Addresses an issue where not all network printers are connected after a user signs in. The HKEY_USERS\User\Printers\Connections key shows the correct network printers for the affected user; however, the missing list for network printers from this registry key isn't populated in any app, including Microsoft Notepad, or in Devices and Printers. Printers may disappear or stop functioning.
• Addresses an issue that prevents printing on a 64-bit OS when 32-bit applications impersonate other users (typically by calling LogonUser). This issue occurs after installing monthly updates starting with KB4034681, released in August 2017. To resolve the issue for the affected applications, install this update, and then do one of the following:
  • Use Link Removed to globally enable the Splwow64Compat App Compat Shim
  • Use the following registry setting, and then restart the 32-bit application:HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Print Setting: Splwow64Compat

Type: DWORD
Value1: 1

• Addresses an issue that causes the Wi-Fi EAP-TTLS (CHAP) authentication to fail if a user saves credential information before authentication.
• Addresses an issue that causes devices that have 802.1x Extensible Authentication Protocol (EAP) enabled to randomly stop working with the stop code ”0xD1 DRIVER_IRQL_NOT_LESS_OR_EQUAL”. The issue occurs when the kernel memory pool becomes corrupted. Crashes will generally occur in nwifi.sys.
• Addresses an issue that may remove a Dynamic Host Configuration Protocol (DHCP) option from a reservation after changing the DHCP scope settings.
• Extends the Key Management Service (KMS) to support the upcoming Windows 10 client Enterprise LTSC and Windows Server editions. For more information, see KB4347075.
• Addresses an issue that may cause Microsoft Edge to fail to launch when using the New Application GuardWindow.

If you installed earlier updates, only the new fixes in this package will be downloaded and installed on your device.
For more information about the resolved security vulnerabilities, see the Security Update Guide.
Known issues in this update
Microsoft is not currently aware of any issues with this update.

Click to expand...

Applies to: Windows 10, version 1803
Release Date:
September 20, 2018
Version:
OS Build 17134.319

Improvements and fixes
This update includes quality improvements. No new operating system features are being introduced in this update. Key changes include:

• Addresses an issue that causes the prompt “You'll need a new app to open" to appear. This occurs when reloading a website on a non-standard port by pressing Enter .
• Addresses an issue that causes downloads to fail because Mark of the Web (MOTW) isn't supported at the download location.
• Addresses an issue that prevents the DefaultSearchProvider policy from working when the FirstRunPage policy is in use.
• Addresses issue that causes the address bar to lose focus when a new tab is opened and the Allow web content on New Tab page policy is off.
• Addresses an issue that prevents the Microsoft Edge Configure Password Manager policy from suppressing the Save password prompt when the policy is disabled.
• Addresses an issue that causes downloads to WebDAV locations to fail.
• Addresses an issue with the file previewer for .html, .mht, and email (MIME) attachments in Microsoft Outlook.
• Addresses an issue that causes Internet Explorer security and certificate dialogs to display prompts in the background instead of the foreground in certain circumstances.
• Addresses an issue that may cause the system to become unresponsive when applications call the EnableEUDC API.
• Addresses an issue in multi-monitor scenarios that causes a spell checker context menu to appear on the wrong monitor. This issue occurs when the customer right-clicks a misspelled word in Internet Explorer.
• Addresses an issue that occurs when entering Japanese characters in a remote desktop session (mstsc.exe).
• Addresses an issue that occurs when using low-level mouse hooks with high integrity-level processes.
• Addresses an issue that prevents custom keyboard layouts from working correctly.
• Makes the visibility policy for the Settings Page available under User Configuration. The GPO is at the following path: User Configuration/Administrative Template/Control Panel/Settings Page Visibility
• Addresses an issue that prevents some Bluetooth devices from pairing with Windows.
• Addresses an issue in the Universal CRT that returns the expected output or a null character when calling _getch().
• Addresses an issue in the Universal CRT that returns unexpected characters when calling the _findfirst() or _findnext() functions.
• Addresses an issue in the Universal CRT that prevents some functions from accepting narrow input or producing proper output with certain ANSI Code Pages. This issue affects setargv.obj when using wildcard parsing and calls to get the current module name for debug windows. The issue also affects the following functions:
• _chdir()
• _exec()
• _fullpath()
• _loaddll
• _popen()
• _system()
• _spawn() (and variants)
• Addresses an issue with evaluating the compatibility status of the Windows ecosystem to help ensure application and device compatibility for all updates to Windows.
• Addresses an issue with the diagnostic pipeline for devices enrolled in Windows Analytics when the CommercialID registry key, "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\DataCollection" is present.
• Addresses an issue that prevents the App-V client’s scheduled task from syncing if the Device Guard lockdown policy is enabled.
• Addresses an issue that may cause the Local Security Authority Subsystem Service (LSASS) process to stop working when attempting to process a malformed security identifier (SID).
• Addresses an issue that causes a delay in unlocking or signing in to a computer that was moved to a different network. For example, a delay occurs when moving from a corporate LAN or WLAN to a home LAN where domain controllers can't be reached.
• Addresses an issue on some laptops that prevents sign-out from completing. The issue occurs when a customer signs out and immediately closes the laptop. As a result, when the laptop is reopened, the device must be restarted.
• Addresses an issue that occurs when enabling BitLocker from a local administrator account.
• Addresses an issue on devices with fingerprint sensors that were upgraded from Windows 10, version 1709. After the upgrade, users can't use the fingerprint sensor to log in.
• Addresses an issue that causes some systems to take as much as 60 seconds longer to start. This occurs on systems that don't have a smart card reader installed.
• Addresses an issue that prevents customers from logging in to a Windows 10S device with a PIN after upgrading to Windows 10, version 1803. Customers see the error “Your PIN is no longer available due to a change to the security settings on this device.”
• Addresses an issue that causes a Direct Access connection to fail when the client authentication certificate is stored in the TPM device.
• Addresses an issue that causes the system to log negative events for drivers that are valid and should be trusted. The issue occurs when running Windows Defender Application Control (Device Guard) in audit mode.
• Addresses an issue that causes a third-party VPN provider's user interface to stop working after dynamically unloading Cryptui.dll.
• Addresses an issue that causes logging on to a Remote Desktop Session Host Server to occasionally stop responding.
• Addresses an issue that causes printing to an open or existing file to fail without displaying an error. This issue occurs when using Microsoft Print to PDF or XPS Document Writer.
• Addresses an issue where a daily, repetitive task starts unexpectedly when the task is first created or starts when the task is updated.
• Addresses an issue that prevents running subsequent actions when you create multiple actions in a task using Task Scheduler and the task is scheduled under the Stop the existing instance rule.
• Addresses an issue with a task that has a repetition setting. The task fails to be scheduled and doesn't start after disabling and re-enabling the task. The Next Run Time in Task Scheduler displays the correct time, but the task doesn't start at that time.
• Addresses an issue that prevents the debugging of minimized UWP applications.
• Addresses an issue with Visual Studio UWP Deployments that displays the error "The operation could not be completed because an unexpected host ID was encountered".
• Addresses an issue that ignores the MM_DONT_ZERO_ALLOCATION flag. This issue leads to degraded performance, and, occasionally, error 0x139 appears.
• Addresses an issue that causes NTLTEST, DCLOCATOR, or joining an Active Directory and SAMBA domain to fail when using the NetBIOS domain name. The error is “An Active Directory domain Controller (AD DC) for the domain %domain% could not be contacted”. This also addresses connection issues for applications that use mailslots to communicate.
• Addresses an issue that occurs when using encrypted email. If the customer selects Cancel when first asked for a PIN, multiple PIN prompts appear before the prompt finally goes away.
• Addresses an issue that prevents the Microsoft Help Viewer from rendering HTML content inside a Windows Help .chm file when the .chm file is stored on a network location.
• Addresses an issue in which the lock screen shows a solid color instead of an image specified by a policy before a customer signs in for the first time.
• Addresses an issue that causes Microsoft Edge to stop working when printing a PDF in a size 0 window.
• Addresses an issue that causes Microsoft Edge to stop working and to close associated webpage tabs. This occurs when certain PDF documents have timing issues when loading.
• Addresses an issue with a scheduled task that has an indefinite duration. The task starts immediately after it is created instead of starting at the time specified in the Triggers tab.
• Addresses an issue where GetSystemTime() may sometimes return an invalid value after using SetSystemTime() immediately before.
• Addresses an issue that occurs when using the “X509HintsNeeded” group policy to prepopulate the Username hint field. The Username hint field is unexpectedly empty when unlocking a machine after a successful logon. Username hint caching is expected to only work for lock and unlock scenarios and is not designed for logoff and logon scenarios.
• Addresses an issue that fails to maintain the tile layout after upgrading to Windows 10, version 1803 from Windows 10, versions 1703 and 1607.
• Addresses an issue that returns temporary values for the new Japanese Calendar Era.
• Addresses an issue in which Background Apps settings the user configured are lost when the device restarts because of incorrect registry ACLs.
• Addresses an issue that prevents Microsoft Centennial apps and some OS apps from displaying toast notifications.
• Addresses an issue in which all Guest Virtual Machines running Unicast NLB fail to respond to NLB requests after the Virtual Machines restart.
• Addresses an issue that prevents dual tunnel AlwaysOn VPN configurations that use trusted network detection from having both tunnels operational.

If you installed earlier updates, only the new fixes in this package will be downloaded and installed on your device.

Known issues in this update
Microsoft is not currently aware of any issues with this update.

Click to expand...

Applies to: Windows 10, version 1803
Release Date:
September 26, 2018
Version:
OS Build 17134.320

Note This update has been re-released because of a missing solution. If you installed build 17134.319, please install this newer version of OS build 17134.320.
Improvements and fixes
This update includes quality improvements. No new operating system features are being introduced in this update. Key changes include:

• Addresses an issue that causes the prompt “You'll need a new app to open" to appear. This occurs when reloading a website on a non-standard port by pressing Enter .
• Addresses an issue that causes downloads to fail because Mark of the Web (MOTW) isn't supported at the download location.
• Addresses an issue that prevents the DefaultSearchProvider policy from working when the FirstRunPage policy is in use.
• Addresses issue that causes the address bar to lose focus when a new tab is opened and the Allow web content on New Tab page policy is off.
• Addresses an issue that prevents the Microsoft Edge Configure Password Manager policy from suppressing the Save password prompt when the policy is disabled.
• Addresses an issue that causes downloads to WebDAV locations to fail.
• Addresses an issue with the file previewer for .html, .mht, and email (MIME) attachments in Microsoft Outlook.
• Addresses an issue that causes Internet Explorer security and certificate dialogs to display prompts in the background instead of the foreground in certain circumstances.
• Addresses an issue that may cause the system to become unresponsive when applications call the EnableEUDC API.
• Addresses an issue in multi-monitor scenarios that causes a spell checker context menu to appear on the wrong monitor. This issue occurs when the customer right-clicks a misspelled word in Internet Explorer.
• Addresses an issue that occurs when entering Japanese characters in a remote desktop session (mstsc.exe).
• Addresses an issue that occurs when using low-level mouse hooks with high integrity-level processes.
• Addresses an issue that prevents custom keyboard layouts from working correctly.
• Makes the visibility policy for the Settings Page available under User Configuration. The GPO is at the following path: User Configuration/Administrative Template/Control Panel/Settings Page Visibility
• Addresses an issue that prevents some Bluetooth devices from pairing with Windows.
• Addresses an issue in the Universal CRT that returns the expected output or a null character when calling _getch().
• Addresses an issue in the Universal CRT that returns unexpected characters when calling the _findfirst() or _findnext() functions.
• Addresses an issue in the Universal CRT that prevents some functions from accepting narrow input or producing proper output with certain ANSI Code Pages. This issue affects setargv.obj when using wildcard parsing and calls to get the current module name for debug windows. The issue also affects the following functions:
• _chdir()
• _exec()
• _fullpath()
• _loaddll
• _popen()
• _system()
• _spawn() (and variants)
• Addresses an issue with evaluating the compatibility status of the Windows ecosystem to help ensure application and device compatibility for all updates to Windows.
• Addresses an issue with the diagnostic pipeline for devices enrolled in Windows Analytics when the CommercialID registry key, "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\DataCollection" is present.
• Addresses an issue that prevents the App-V client’s scheduled task from syncing if the Device Guard lockdown policy is enabled.
• Addresses an issue that may cause the Local Security Authority Subsystem Service (LSASS) process to stop working when attempting to process a malformed security identifier (SID).
• Addresses an issue that causes a delay in unlocking or signing in to a computer that was moved to a different network. For example, a delay occurs when moving from a corporate LAN or WLAN to a home LAN where domain controllers can't be reached.
• Addresses an issue on some laptops that prevents sign-out from completing. The issue occurs when a customer signs out and immediately closes the laptop. As a result, when the laptop is reopened, the device must be restarted.
• Addresses an issue that occurs when enabling BitLocker from a local administrator account.
• Addresses an issue on devices with fingerprint sensors that were upgraded from Windows 10, version 1709. After the upgrade, users can't use the fingerprint sensor to log in.
• Addresses an issue that causes some systems to take as much as 60 seconds longer to start. This occurs on systems that don't have a smart card reader installed.
• Addresses an issue that prevents customers from logging in to a Windows 10S device with a PIN after upgrading to Windows 10, version 1803. Customers see the error “Your PIN is no longer available due to a change to the security settings on this device.”
• Addresses an issue that causes a Direct Access connection to fail when the client authentication certificate is stored in the TPM device.
• Addresses an issue that causes the system to log negative events for drivers that are valid and should be trusted. The issue occurs when running Windows Defender Application Control (Device Guard) in audit mode.
• Addresses an issue that causes a third-party VPN provider's user interface to stop working after dynamically unloading Cryptui.dll.
• Addresses an issue that causes logging on to a Remote Desktop Session Host Server to occasionally stop responding.
• Addresses an issue that causes printing to an open or existing file to fail without displaying an error. This issue occurs when using Microsoft Print to PDF or XPS Document Writer.
• Addresses an issue where a daily, repetitive task starts unexpectedly when the task is first created or starts when the task is updated.
• Addresses an issue that prevents running subsequent actions when you create multiple actions in a task using Task Scheduler and the task is scheduled under the Stop the existing instance rule.
• Addresses an issue with a task that has a repetition setting. The task fails to be scheduled and doesn't start after disabling and re-enabling the task. The Next Run Time in Task Scheduler displays the correct time, but the task doesn't start at that time.
• Addresses an issue that prevents the debugging of minimized UWP applications.
• Addresses an issue with Visual Studio UWP Deployments that displays the error "The operation could not be completed because an unexpected host ID was encountered".
• Addresses an issue that ignores the MM_DONT_ZERO_ALLOCATION flag. This issue leads to degraded performance, and, occasionally, error 0x139 appears.
• Addresses an issue that causes NTLTEST, DCLOCATOR, or joining an Active Directory and SAMBA domain to fail when using the NetBIOS domain name. The error is “An Active Directory domain Controller (AD DC) for the domain %domain% could not be contacted”. This also addresses connection issues for applications that use mailslots to communicate.
• Addresses an issue that occurs when using encrypted email. If the customer selects Cancel when first asked for a PIN, multiple PIN prompts appear before the prompt finally goes away.
• Addresses an issue that prevents the Microsoft Help Viewer from rendering HTML content inside a Windows Help .chm file when the .chm file is stored on a network location.
• Addresses an issue in which the lock screen shows a solid color instead of an image specified by a policy before a customer signs in for the first time.
• Addresses an issue that causes Microsoft Edge to stop working when printing a PDF in a size 0 window.
• Addresses an issue that causes Microsoft Edge to stop working and to close associated webpage tabs. This occurs when certain PDF documents have timing issues when loading.
• Addresses an issue with a scheduled task that has an indefinite duration. The task starts immediately after it is created instead of starting at the time specified in the Triggers tab.
• Addresses an issue where GetSystemTime() may sometimes return an invalid value after using SetSystemTime() immediately before.
• Addresses an issue that occurs when using the “X509HintsNeeded” group policy to prepopulate the Username hint field. The Username hint field is unexpectedly empty when unlocking a machine after a successful logon. Username hint caching is expected to only work for lock and unlock scenarios and is not designed for logoff and logon scenarios.
• Addresses an issue that fails to maintain the tile layout after upgrading to Windows 10, version 1803 from Windows 10, versions 1703 and 1607.
• Addresses an issue that returns temporary values for the new Japanese Calendar Era.
• Addresses an issue in which Background Apps settings the user configured are lost when the device restarts because of incorrect registry ACLs.
• Addresses an issue that prevents Microsoft Centennial apps and some OS apps from displaying toast notifications.
• Addresses an issue in which all Guest Virtual Machines running Unicast NLB fail to respond to NLB requests after the Virtual Machines restart.
• Addresses an issue that prevents dual tunnel AlwaysOn VPN configurations that use trusted network detection from having both tunnels operational.

If you installed earlier updates, only the new fixes in this package will be downloaded and installed on your device.

Known issues in this update
Microsoft is not currently aware of any issues with this update.

Click to expand...

Applies to: Windows 10, version 1809
Release Date:
October 9, 2018
Version:
OS Build 17763.55

Improvements and fixes
This update includes quality improvements. No new operating system features are being introduced in this update. Key changes include:

• Addresses an issue where an incorrect timing calculation may prematurely delete user profiles on devices subject to the "Delete user profiles older than a specified number of day” group policy.
• Security updates to Windows Kernel, Microsoft Graphics Component, Microsoft Scripting Engine, Internet Explorer, Windows Storage and Filesystems, Windows Linux, Windows Wireless Networking, Windows MSXML, the Microsoft JET Database Engine, Windows Peripherals, Microsoft Edge, Windows Media Player, and Internet Explorer.

If you installed earlier updates, only the new fixes contained in this package will be downloaded and installed on your device.
For more information about the resolved security vulnerabilities, please refer to the Security Update Guide.
Known issues in this update
Microsoft is not currently aware of any issues with this update.

Click to expand...

Applies to: Windows 10, version 1809
Release Date:
November 13, 2018
Version:
OS Build 17763.107

Improvements and fixes
This update includes quality improvements. No new operating system features are being introduced in this update. Key changes include:

• Addresses an issue that incorrectly implies that user policies have not been applied after configuring a user rights Group Policy setting. Reporting tools, such as RSOP.MSC or Gpresult.exe /h, do not show the user rights policies or display a red “X” instead.
• Addresses an issue that degrades Internet Explorer performance when you use roaming profiles or you don't use the Microsoft Compatibility List.
• Addresses additional issues with updated time zone information.
• Addresses an issue that causes a black screen to appear after turning on the display on some servers.
• Addresses an issue that causes a long delay in taking a photo using the Camera app in certain lighting conditions.
• Addresses a performance issue with vSwitch on network interface cards (NIC) that do not support Large Send Offload (LSO) and Checksum Offload (CSO).
• Addresses an issue that may cause applications to lose IPv4 connectivity when IPv6 is unbound.
• Addresses an issue that may break connectivity on guest VMs on the server when applications inject the low-resource flag on packets.

If you installed earlier updates, only the new fixes contained in this package will be downloaded and installed on your device.

Click to expand...

November 27, 2018—KB4467682 (OS Build 17134.441)
Applies to: Windows 10, version 1803

Version: OS Build 17134.441

Improvements and fixes
This update includes quality improvements. No new operating system features are being introduced in this update. Key changes include:

• Addresses an issue that prevents the deletion of word spellings from the Microsoft Office dictionary using settings.
• Addresses an issue that causes the GetCalendarInfo function to return an incorrect era name on the first day of the Japanese era.
• Addresses time zone changes for Russian daylight standard time.
• Addresses time zone changes for Moroccan daylight standard time.
• Addresses an issue to allow the use of the previous barrel button and drag functionality and ensure that shim choices have priority over the registry.
• Addresses an issue that causes the precision touchpad or keyboard to stop responding because of some combination of docking and undocking or shutdown or restart operations.
• Addresses an issue that may sometimes cause the system to stop responding after turning on, which prevents logon.
• Addresses an issue that causes Microsoft Word Immersive Reader to skip the first part of a selected word when using Microsoft Word Online in Microsoft Edge.
• Addresses an issue with missing URL shortcuts from the Start menu.
• Addresses an issue that allows users to uninstall apps from the Start menu when the “Prevent users from uninstalling applications from Start menu” policy is set.
• Addresses an issue that causes File Explorer to stop working when you click the Turn on button for the Timeline feature. This issue occurs when the "Allow upload of user activities" group policy is disabled.
• Addresses an issue that prevents users from accessing the Ease of Access Cursor & pointer size page in the Settings app with the URI “ms-settings:easeofaccess-cursorandpointersize”.
• Addresses an issue that causes the audio service to stop working or become unresponsive while using call control, controlling volume, and streaming music to Bluetooth audio devices. Error messages that appear include:
  • Exception error 0x8000000e in btagservice.dll.
  • Exception error 0xc0000005 or 0xc0000409 in bthavctpsvc.dll.
  • Stop 0xD1 BSOD error in btha2dp.sys.
• Addresses an issue in which a third-party antivirus software may receive an “ERROR_NO_SYSTEM_RESOURCES” error.
• Addresses an issue that may cause excessive memory usage when using smart cards.
• Addresses an issue that causes the system to stop working with the error code, “0x120_fvevol!FveEowFinalSweepConvertSpecialRangesChunk”.
• Addresses an issue that prevents Application Guard from browsing the internet if the proxy auto-config (PAC) file on a device uses IP literals to specify a web proxy.
• Addresses an issue that prevents a Wi-Fi client from connecting to Miracast® devices when the allowed service set identifier (SSID) is specified in Wireless Network Policies.
• Addresses an issue that causes Event Tracing for Windows (ETW) profiling to fail when using custom profiling frequencies.
• Addresses a power state transition issue that causes the system to become unresponsive when connecting to eXtensible Host Controller Interface (xHCI) devices.
• Addresses an issue that may lead to a blue screen on the system when running disk benchmark software.
• Addresses an issue that causes the RemoteApp window to always be active and in the foreground after closing a window.
• Allows a Bluetooth® Low Energy (LE) random address to rotate periodically even when Bluetooth LE passive scan is enabled.
• Addresses an issue that causes the installation and client activation of Windows Server 2019 and 1809 LTSC Key Management Service (KMS) host keys (CSVLK) to not work as expected. For more information about the original feature, see KB4347075.
• Addresses an issue that prevents some users from setting Win32 program defaults for certain app and file type combinations using the Open with…command or Settings > Apps > Default apps.
• Addresses an issue that prevents users from opening presentation (.pptx) files exported from a Google presentation.
• Addresses an issue that prevents some users from connecting to some older devices, such as printers, over Wi-Fi because of the introduction of multicast DNS (mDNS). If you did not experience device connectivity issues and prefer the new mDNS functionality, you can enable mDNS by creating the following registry key: “HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\ mDNSEnabled (DWORD) = 1”.

If you installed earlier updates, only the new fixes contained in this package will be downloaded and installed on your device.

Click to expand...

Applies to: Windows 10, version 1809
Release Date:
December 5, 2018
Version:
OS Build 17763.168

Improvements and fixes
This update includes quality improvements. No new operating system features are being introduced in this update. Key changes include:

• Addresses an issue in Microsoft Edge with using the drag-and-drop feature to upload folders from the Windows desktop to a file hosting service website, such as Microsoft OneDrive. In some scenarios, files contained in the folders fail to upload, with possibly no error reported on the web page to the user.
• Addresses an issue that degrades Internet Explorer performance when you use roaming profiles or you don't use the Microsoft Compatibility List.
• Addresses updated time zone information for Fiji.
• Addresses time zone changes for Moroccan daylight standard time.
• Addresses time zone changes for Russian daylight standard time.
• Addresses an issue that causes display settings to stop working when changing a multi-monitor configuration.
• Addresses an issue that displays a black screen on some servers when waking a display from sleep.
• Addresses an issue with long delays in taking a photo when using the Camera app in certain lighting conditions.
• Addresses an issue that prevents live TV Hulu content from playing in Microsoft Edge; instead, a black screen appears.
• Addresses an issue that stops Bluetooth® headsets from receiving audio input after several minutes of listening.
• Addresses an issue that causes the Brightness slider preference to be reset to 50% when the device restarts.
• Addresses an issue with the OEM manufacturing processes when running sysprep /generalize.
• Addresses an issue with Microsoft Intune that causes devices to be incorrectly marked as not compliant because a firewall incorrectly returns a 'Poor' status. As a result, the affected devices will not receive conditional access compliance approval and may be blocked from access to corporate resources such as email.
• Addresses a performance issue with vSwitch on network interface cards (NIC) that do not support Large Send Offload (LSO) and Checksum Offload (CSO).
• Updates the Wi-Fi policy for service set identifier (SSID) filtering to avoid filtering out Wi-Fi Direct devices.
• Addresses an issue that causes rasman.exe to stop responding.
• Addresses an issue in which regedit.exe fails to add double null terminator to REG_MULTI_SZ values in the Windows registry. The missing terminator may prevent services and applications from reading REG_MULTI_SZ values that regedit.exe adds after installing the operating system.
• Addresses an issue with RemoteApp visibility that may cause the main window to disappear until the user clicks the screen.
• Addresses an issue that prevents some users from setting Win32 program defaults for certain app and file type combinations using the Open with…command or Settings > Apps > Default apps.
• Addresses an issue that may cause mapped drives to fail to reconnect after starting and logging onto a Windows device.

If you installed earlier updates, only the new fixes contained in this package will be downloaded and installed on your device.

Click to expand...

Applies to: Windows 10, version 1809
Release Date:
November 13, 2018
Version:
OS Build 17763.134

Note
This release also contains updates for Microsoft HoloLens (OS Build 17763.134) released November 13, 2018.

Improvements and fixes
This update includes quality improvements. No new operating system features are being introduced in this update. Key changes include:

• Provides protections against an additional subclass of speculative execution side-channel vulnerability known as Link Removed (CVE-2018-3639) for AMD-based computers. These protections aren't enabled by default. For Windows client (IT pro) guidance, follow the instructions in KB4073119. For Windows Server guidance, follow the instructions in KB4072698. Use these guidance documents to enable mitigations for Speculative Store Bypass (CVE-2018-3639). Additionally, use the mitigations that have already been released for Spectre Variant 2 (CVE-2017-5715) and Meltdown (CVE-2017-5754).
• Addresses an issue that prevents users from signing in to a Microsoft account (MSA) as a different user if signing in a second time.
• Addresses an issue that denies file system access to Internet of Things (IoT) Universal Windows Platform (UWP) apps that require this capability.
• Addresses an issue that causes the on-screen keyboard to appear when running automated tests or when you install a physical keyboard.
• Security updates to Microsoft Edge, Windows Scripting, Internet Explorer, Windows App Platform and Frameworks, Windows Graphics, Windows Media, Windows Kernel, Windows Server, and Windows Wireless Networking.

If you installed earlier updates, only the new fixes contained in this package will be downloaded and installed on your device.
For more information about the resolved security vulnerabilities, please refer to the Security Update Guide.

Click to expand...

Applies to: Internet Explorer 11 on Windows 10 Internet Explorer 11 on Windows 8.1 Update Internet Explorer 11 on Windows 7 SP1 More

Summary
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. To learn more about the vulnerability, go to CVE-2018-8653.
Important

• If you install a language pack after you install this update, you must reinstall this update. Therefore, we recommend that you install any language packs that you need before you install this update. For more information, see Add language packs to Windows.

Known issues in this security update
After you install this security update on a computer that is running Windows Server 2012 R2 or Windows 8.1, the About Internet Explorer 11dialog box will show KB4470199 (the December 11, 2018 security update for Internet Explorer) instead of KB4483187. Users can confirm they are protected by verifying that the version of jscript.dll is 5.8.9600.19230.
How to get and install the update
Method 1: Microsoft Update
This update is available through Microsoft Update. When you turn on automatic updating, this update will be downloaded and installed automatically.
For more information about how to get security updates automatically, see Windows Update: FAQ.
Note For Windows RT and Windows RT 8.1, this update is available through Microsoft Update only.
Method 2: Microsoft Update Catalog
To get the standalone package for this update, go to the Microsoft Update Catalog website.
Deployment information
For deployment details for this security update, go to the following article in the Microsoft Knowledge Base:
Security update deployment information: December 19, 2018
More information

How to get help and support for this security update
Help for installing updates: Windows Update: FAQ
Help for protecting your Windows-based computer from viruses and malware: Microsoft Secure
Local support according to your country: Link Removed

Click to expand...

Applies to: Windows 10, version 1809Windows Server 2019, all versions
Release Date:
January 8, 2019
Version: OS Build 17763.253

Improvements and fixes
This update includes quality improvements. No new operating system features are being introduced in this update. Key changes include:

• Addresses a security vulnerability in session isolation that affects PowerShell remote endpoints. By default, PowerShell remoting only works with administrator accounts, but can be configured to work with non-administrator accounts. Starting with this release, you cannot configure PowerShell remote endpoints to work with non-administrator accounts. When attempting to use a non-administrator account, the following error will appear:
  “New-PSSession: [computerName] Connecting to remote server localhost failed with the following error message: The WSMan service could not launch a host process to process the given request. Make sure the WSMan provider host server and proxy are properly registered. For more information, see the about_Remote_Troubleshooting Help topic.”
• Addresses an issue in which using esentutl /p to repair a corrupt Extensible Storage Engine (ESE) database results in a mostly empty database. The ESE database is corrupted and cannot be mounted.
• Security updates to Microsoft Edge, Internet Explorer, Windows App Platform and Frameworks, Windows MSXML, Windows Kernel, Windows Storage and Filesystems, Windows Wireless Networking, Microsoft JET Database Engine, Windows Linux, Windows Virtualization, and the Microsoft Scripting Engine.

If you installed earlier updates, only the new fixes contained in this package will be downloaded and installed on your device.
For more information about the resolved security vulnerabilities, please refer to the Security Update Guide.

Click to expand...

Applies to: Windows 10, version 1809
Windows Server 2019, all versions
Release Date:
January 22, 2019
Version:
OS Build 17763.292

Improvements and fixes
This update includes quality improvements. No new operating system features are being introduced in this update. Key changes include:

• Addresses an issue that may cause Microsoft Edge to stop working with certain display drivers.
• Addresses an issue that may cause third-party applications to have difficulty authenticating hotspots.
• Addresses an issue that causes promotions of non-root domains to fail with the error, “The replication operation encountered a database error.” The issue occurs in Active Directory forests in which optional features like Active Directory recycle have been enabled.
• Addresses an issue related to the date format for the Japanese era calendar. For more information, see KB4469068.
• Addresses a compatibility issue with AMD R600 and R700 display chipsets.
• Addresses an audio compatibility issue when playing newer games with 3D Spatial Audio mode enabled through multichannel audio devices or Windows Sonic for Headphones.
• Addresses an issue that may cause audio playback to stop responding when playing Free Lossless Audio Codec (FLAC) audio content after using a Seek operation such as rewind.
• Addresses an issue that allows users to uninstall apps from the Start menu when the “Prevent users from uninstalling applications from Start menu” group policy is set.
• Addresses an issue that causes File Explorer to stop working when you click the Turn On button for the timeline feature. This issue occurs when the "Allow upload of user activities" group policy is disabled.
• Addresses an issue that prevents users from installing a Local Experience Pack from the Microsoft Store when that language is already set as the active Windows display language.
• Addresses an issue that causes some symbols to appear in a square box on a text control.
• Addresses an issue with two-way audio that occurs during phone calls for some Bluetooth headsets.
• Addresses an issue that may turn off TCP Fast Open by default on some systems.
• Addresses an issue that may cause applications to lose IPv4 connectivity when IPv6 is unbound.
• Addresses an issue on Windows Server 2019 that may break connectivity on guest virtual machines (VMs) when applications inject the low-resource flag on packets.
• Addresses an issue that occurs if you create a page file on a drive with FILE_PORTABLE_DEVICE characteristics. The “Windows created a temporary warning” message appears.
• Addresses an issue that causes Remote Desktop Services to stop accepting connections after accepting several connections.
• Addresses an issue in Windows Server 2019 that causes a Hyper-V VM to remain at the bootloader screen for OS selection when restarting the machine. This issue occurs when Virtual Machine Connection (VMConnect) is attached.
• Addresses an issue with rendering of end-user-defined characters (EUDC) in Microsoft Edge.
• Updates the Ltotape.sys driver to add native support for Linear Tape-Open 8 (LTO-8) tape drives.
• Addresses an issue that causes SYSPREP to fail with the error, "Sysprep was not able to validate your Windows installation...". The issue occurs if you run SYSPREP after performing an in-place upgrade to Windows 10, version 1809 and then remove the Windows.old folder using Disk Cleanup (cleanmgr.exe) or Storage Sense.

If you installed earlier updates, only the new fixes contained in this package will be downloaded and installed on your device.

Click to expand...

Applies to: Windows 10, version 1809Windows Server 2019, all versions
Release Date:
February 12, 2019
Version:
OS Build 17763.316

Note
This release also contains updates for Microsoft HoloLens (OS Build 17763.316) released February 12, 2019.
Microsoft will release an update directly to the Windows Update Client to improve Windows Update reliability on Microsoft HoloLens that have not updated to this most recent OS Build.
Improvements and fixes
This update includes quality improvements. No new operating system features are being introduced in this update. Key changes include:

• Addresses an issue that fails to set the LmCompatibilityLevel value correctly. LmCompatibilityLevel specifies the authentication mode and session security.
• Addresses an issue that may prevent applications that use a Microsoft Jet database with the Microsoft Access 97 file format from opening. This issue occurs if the database has column names greater than 32 characters. The database fails to open with the error, “Unrecognized Database Format”.
• Addresses an issue that prevents Microsoft Edge from connecting using an IP address.
• Addresses an issue that causes the Windows Hello for Business Hybrid Key Trust deployment sign-in to fail if Windows 2019 Server domain controllers (DC) are used for authentication. The error is, "That option is temporarily unavailable. For now, please use a different method to sign in”. If Active Directory (AD) activity tracing is enabled, a Local Security Authority Subsystem Service (LSASS) exception may occur in the Windows 2019 DC when processing a user’s sign in.
  
  Note
  The AD Data Collector Set and Microsoft Azure Advanced Threat Protection (AATP) enable Active Directory activity tracing by default.
• Addresses an issue in Microsoft HoloLens that allows users to bypass the lock screen sign in process in some work flows.
• Security updates to Microsoft Scripting Engine, Microsoft Edge, Windows Server, the Microsoft JET Database Engine, Internet Explorer, Windows Wireless Networking, Windows Storage and Filesystems, Windows Input and Composition, Windows Graphics, and Windows App Platform and Frameworks.

If you installed earlier updates, only the new fixes contained in this package will be downloaded and installed on your device.
For more information about the resolved security vulnerabilities, please refer to the Security Update Guide.
Known issues in this update
Microsoft is not currently aware of any issues with this update.

Click to expand...

Applies to: Windows 10, version 1809Windows Server 2019, all versions
Release Date:
March 1, 2019
Version:
OS Build 17763.348

Improvements and fixes
This update includes quality improvements. No new operating system features are being introduced in this update. Key changes include:

• Enables “Retpoline" for Windows on certain devices, which may improve performance of Spectre variant 2 mitigations (CVE-2017-5715). For more information, see our blog post, "Mitigating Spectre variant 2 with Retpoline on Windows".
• Addresses an issue that may cause the Action Center to suddenly appear on the wrong side of the screen before appearing on the correct side.
• Addresses an issue that may fail to save some inked content in a PDF in Microsoft Edge. This occurs if you erased some ink quickly after starting the inking session and then added more ink.
• Addresses an issue that displays the media type as “Unknown” in the Server Manager for storage class memory (SCM) disks.
• Addresses an issue with Remote Desktop access to Hyper-V Server 2019.
• Addresses an issue that causes the republication BranchCache to take more space than it’s been assigned.
• Addresses a performance issue when establishing a Remote Desktop connection from a web Remote Desktop client to Windows Server 2019.
• Addresses a reliability issue that may cause the screen to remain black after resuming from Sleep if you close a laptop lid while disconnecting the laptop from a docking station.
• Addresses an issue that causes the overwriting of file on a shared folder to fail because of an Access Denied error. This issue occurs when a filter driver is installed.
• Enables peripheral role support for some Bluetooth radios.
• Addresses an issue that may cause printing to PDF to fail during a Remote Desktop session. This issue occurs while attempting to save the file and redirect drives from the client system.
• Addresses a reliability issue that may cause the main laptop screen to flash when resuming from Sleep. This issue occurs if the laptop is connected to a docking station that has an indirect display.
• Addresses an issue that displays a black screen and causes a Remote Desktop session to stop responding when using certain VPN connections.
• Updates time zone information for Chile.
• Addresses an issue that fails to register USB cameras correctly for Windows Hello after the out of box experience (OOBE) setup.
• Addresses an issue that prevents the Microsoft enhanced Point and Print compatibility driver from installing on Windows 7 clients.
• Addresses an issue that causes Termservice to stop working when Remote Desktop is configured to use a hardware encoder for Advanced Video Coding (AVC).
• Addresses an issue that locks a user account when you move applications to a shared platform using App-V.
• Improves the reliability of the UE-VAppmonitor.
• Addresses an issue that prevents App-V applications from starting and generates error 0xc0000225 in the log. Set the following DWORD to customize the maximum time for the driver to wait for a volume to be available:”HKLM\Software\Microsoft\AppV\MAV\Configuration\MaxAttachWaitTimeInMilliseconds”.
• Addresses an issue with evaluating the compatibility status of the Windows ecosystem to help ensure application and device compatibility for all updates to Windows.
• Addresses an issue that may prevent some applications from displaying the Help (F1) window correctly.
• Addresses an issue that causes flickering of the desktop and taskbar on Windows Server 2019 Terminal Server after using the User Profile Disk setup.
• Addresses an issue that fails to update a user hive when you publish an optional package in a Connection Group after the Connection Group was previously published.
• Improves performance related to case-insensitive string comparison functions such as _stricmp() in the Universal C Runtime.
• Addresses a compatibility issue with parsing and playback of certain MP4 content.
• Addresses an issue that occurs with the Internet Explorer proxy setting and the out of box experience (OOBE) setup. The initial logon stops responding after Sysprep.
• Addresses an issue in which the desktop lock screen image set by a Group Policy will not update if the image is older than or has the same name as the previous image.
• Addresses an issue in which the desktop wallpaper image set by a Group Policy will not update if the image has the same name as the previous image.
• Addresses an issue that causes the TabTip.exe touchscreen keyboard to stop working in certain conditions. This issue occurs when you use the keyboard in a kiosk scenario after replacing the default shell.
• Addresses an issue that may cause the new Miracast connection banner to remain open after a connection is closed.
• Addresses an issue that may cause virtual disks to go offline when upgrading a 2-node Storage Space Direct (S2D) cluster from Windows Server 2016 to Windows Server 2019.
• Addresses an issue that fails to recognize the first character of the Japanese Era name as an abbreviation and may cause date parsing issues.
• Addresses an issue that may prevent Internet Explorer from loading images that have a backslash (\) in their relative source path.
• Addresses an issue that may cause applications that use a Microsoft Jet database with the Microsoft Access 95 file format to randomly stop working.
• Addresses an issue in Windows Server 2019 that causes input and output timeouts when querying for SMART Data using Get-StorageReliabilityCounter().

If you installed earlier updates, only the new fixes contained in this package will be downloaded and installed on your device.

Click to expand...

Applies to: Windows 10, version 1809Windows Server 2019, all versions
Release Date:
March 12, 2019
Version:
OS Build 17763.379

Note
This release also contains updates for Microsoft HoloLens (OS Build 17763.379) released March 12, 2019.
Microsoft will release an update directly to the Windows Update Client to improve Windows Update reliability on Microsoft HoloLens that have not updated to this most recent OS Build.
Improvements and fixes
This update includes quality improvements. No new operating system features are being introduced in this update. Key changes include:

• Addresses an issue in Microsoft HoloLens with tracking and device calibration that has affected some users. You may notice improvement 10-15 minutes after installing this update, but we recommend resetting the holograms for best results.
• Addresses an issue that may cause users to receive “Error 1309” while installing or uninstalling certain types of MSI and MSP files.
• Addresses an issue that may degrade graphics and mouse performance with desktop gaming when playing certain games, such as Destiny 2, after installing KB4482887.
• Security updates to Microsoft Edge, Internet Explorer, Microsoft Scripting Engine, Windows Shell, Windows App Platform and Frameworks, Windows Kernel-Mode Drivers, Windows Server, Windows Linux, Windows Hyper-V, Windows Datacenter Networking, Windows Storage and Filesystems, Windows Wireless Networking, the Microsoft JET Database Engine, Windows Kernel, Windows, and Windows Fundamentals.

If you installed earlier updates, only the new fixes contained in this package will be downloaded and installed on your device.
For more information about the resolved security vulnerabilities, please refer to the Security Update Guide.

Click to expand...

Applies to: Windows 10, version 1809Windows Server 2019, all versions
Release Date:
April 2, 2019
Version:
OS Build 17763.404

Improvements and fixes
This update includes quality improvements. Key changes include:

• Addresses an issue that occurs on machines that have multiple audio devices. Applications that provide advanced options for internal or external audio output devices may stop working unexpectedly. This issue occurs for users that select an audio output device different from the “Default Audio Device”. Examples of applications that may stop working include Windows Media Player, Realtek HD Audio Manager, and the Sound Blaster Control Panel.
• Includes a fix for Game Mode that ensures the feature will no longer impact your experiences when using the industry’s top streaming and recording software.
• Enables activation of insider builds of Windows 10 Enterprise for Virtual Desktops in Microsoft Azure. Microsoft Azure is the only tested and supported platform to host Windows 10 Enterprise for Virtual Desktops, which is a key part of Windows Virtual Desktop.
• Addresses an issue that may cause the loss of Favorites or the Reading List in Microsoft Edge after updating the operating system.
• Addresses an issue that causes Internet Explorer to randomly stop working while browsing.
• Addresses an issue with scrolling ActiveX content in a window in Internet Explorer 11 during a user-triggered scroll operation.
• Addresses an issue that prevents the operating system from loading new icon files if it encounters a badly formatted icon file.
• Updates time zone information for São Tomé and Príncipe.
• Updates time zone information for Kazakhstan.
• Updates time zone information for Buenos Aires, Argentina.
• Addresses an issue that prevents the “Turn off app notifications on the lock screen" policy from working. The path is "Computer Configuration\Administrative Templates\System\Logo".
• Addresses an issue in which the graphics device interface (GDI) DeleteObject() may cause the calling process to stop working when both of the following conditions are true:
  • The calling process is a WOW64 process that handles memory addresses larger than 2 GB.
  • The DeleteObject() is called with a device context that is compatible with a printer device context.
• Addresses an issue that prevents applications and callers from connecting to destination endpoints when they use network interfaces that don’t have a default gateway. This issue affects the following:
  • Internet access fails on devices with DSL modems and PPPoE dial-up Internet connections (commonly used with DSL modems).
  • Modern and Microsoft Store apps behave as if there is no Internet access on devices with DSL modems.

Web browsers and Win32 applications that are connected to the Internet are not affected by this issue.

• Addresses an issue that causes Windows to reuse an expired Dynamic Host Configuration Protocol (DHCP) lease if the lease expired while the OS was shutdown.
• Addresses an issue that causes the RemoteApp window to come to the foreground and to always remain active after closing a window.
• Addresses an issue that prevents the authentication credentials dialog from appearing when an enterprise web server attempts to connect to the Internet.
• Addresses an issue that may prevent Modern apps icons from appearing in the Taskbar and the Task Switcher during a RemoteApps connection.
• Addresses an issue that causes certain Microsoft Store applications to fail to launch or stop working, including WeChat on the Universal Windows Platform (UWP).
• Addresses an issue that fails to register USB cameras correctly for Windows Hello after the out of box experience (OOBE) setup.
• Adds a new Group Policy setting called “Enable Windows to soft-disconnect a computer from a network”. This determines how Windows will disconnect a computer from a network when it determines that the computer should no longer be connected to the network.
  • If enabled, Windows will soft-disconnect (disconnection is not immediate or abrupt) a computer from a network.
  • If disabled, Windows disconnects a computer from a network immediately.
  • If not configured, the default behavior is soft-disconnect. For more information about soft-disconnect, see Understanding and configuring Windows Connection Manager.

Path: Computer Configuration\Policies\Administrative Templates\Network\Windows Connection Manager

• Addresses an issue that prevents a virtual smart card from starting when running in conjunction with Citrix 7.15.2000 Workstation VDA software.
• Addresses an issue that prevents users from configuring their screens for high-dynamic-range (HDR) video playback.
• Addresses an issue with the Windows lock screen that prevents users from unlocking a device after multiple smart card users have used the same device. This issue occurs when you attempt to use a workstation that another user has locked.
• Addresses a memory leak that occurs when a system processes logon sessions.
• Addresses an issue that causes Always-On VPN exclusion routes to only work for link-local exclusions.
• Addresses an issue that causes certificate renewal to fail when using CERT_RENEWAL_PROP_ID with the ICertPropertyRenewal interface.
• Addresses an issue that mutes the sound of single-use applications, typically used in kiosk scenarios, after the system resumes from Sleep.
• Addresses an issue to meet GB18030 certificate requirements.
• Addresses an issue that slows server performance or causes the server to stop responding because of numerous Windows firewall rules. To enable this solution, use regedit to modify the following and set it to 1:
  • Type: “DeleteUserAppContainersOnLogoff” (DWORD)
  • Path: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy
• Addresses an issue that prevents the decryption of data using Windows 10, version 1703 or later versions of Windows. This issue occurs if you encrypted that data using DPAPI-NG or a group-protected PFX file on Windows 10, version 1607, Windows Server 2016, or earlier versions of Windows.
• Addresses an issue with evaluating the compatibility status of the Windows ecosystem to help ensure application and device compatibility for all updates to Windows.
• Addresses minor issues with unknown options (unknown OPT) in the Extension Mechanisms for DNS (EDNS) for the Windows DNS Server role.
• Addresses a timing issue that may result in an access violation when configuring Switch Embedded Teaming (SET).
• Addresses an issue with the Remove-StoragePool PowerShell cmdlet that fails to clear pool metadata on NVDIMM physical disks.
• Enables X2APIC support for AMD platforms to support 256 or more logical processors on Windows Server 2019.
• Addresses an issue that prevents date parsers from converting future and past dates (Gregorian and Japanese) in compound documents (formerly OLE) to a relevant Japanese Era date. For more information, see KB4469068.
• Addresses an issue that prevents users from enabling gan-nen support for the Japanese Era. For more information, see KB4469068.
• Addresses an issue that causes slow screen refresh rates when an application creates and destroys many child windows.
• Address an issue that causes the Start menu layout to reset or reset at every logon after an in-place upgrade to Windows 10, version 1809 from previous versions of Windows.
• Addresses an issue that causes Wdiwifi.SYS to stop working with the error “7E (0xc0000005)”. This issue occurs when a client device is roaming between wireless access points (WAP) that have the same BSSIDs on the 2.4 Ghz and 5 Ghz bands.

If you installed earlier updates, only the new fixes contained in this package will be downloaded and installed on your device.

Known issues in this update

Symptom	Workaround
After installing this update, Internet Explorer 11 and other applications that use WININET.DLL may have authentication issues. This occurs when two or more people use the same user account for multiple, concurrent login sessions on the same Windows Server machine, including Remote Desktop Protocol (RDP) and Terminal Server logons. Symptoms reported by customers include, but may not be limited to: Cache size and location show zero or empty. Keyboard shortcuts may not work properly. Webpages may intermittently fail to load or render correctly. Issues with credential prompts. Issues when downloading files.	Create unique user accounts so that two people don’t share the same user account when logging on to a Windows Server machine. Additionally, disable multiple RDP sessions for a single user account for a specific Windows Server. Microsoft is working on a resolution and will provide an update in an upcoming release.
After installing this update, MSXML6 causes applications to stop responding if an exception was thrown during node operations, such as appendChild(), insertBefore(), and moveNode(). The Group Policy editor may stop responding when editing a Group Policy Object (GPO) that contains Group Policy Preferences (GPP) for Internet Explorer 10 settings.	Microsoft is working on a resolution and will provide an update in an upcoming release.
After installing this update, Custom URI Schemes for Application Protocol handlers may not start the corresponding application for local intranet and trusted sites on Internet Explorer.	Right-click the URL link to open it in a new window or tab. Or Enable Protected Mode in Internet Explorer for local intranet and trusted sites. Go to Tools > Internet options > Security. Within Select a zone to view or change security settings, selectLocal intranet and then select Enable Protected Mode. Select Trusted sites and then select Enable Protected Mode. Select OK. You must restart the browser after making these changes. Microsoft is working on a resolution and will provide an update in an upcoming release.
After installing this update, there may be issues using the Preboot Execution Environment (PXE) to start a device from a Windows Deployment Services (WDS) server configured to use Variable Window Extension. This may cause the connection to the WDS server to terminate prematurely while downloading the image. This issue does not affect clients or devices that are not using Variable Window Extension.	To mitigate the issue, disable the Variable Window Extension on WDS server using one of the following options: Option 1: Open an Administrator Command prompt and type the following: Wdsutil /Set-TransportServer /EnableTftpVariableWindowExtension:No Option 2: Use the Windows Deployment Services UI. Open Windows Deployment Services from Windows Administrative Tools. Expand Servers and right-click a WDS server. Open its properties and clear the Enable Variable Window Extension box on the TFTP tab. Option 3: Set the following registry value to 0: “HKLM\System\CurrentControlSet\Services\WDSServer\Providers\WDSTFTP\EnableVariableWindowExtension”. Restart the WDSServer service after disabling the Variable Window Extension. Microsoft is working on a resolution and will provide an update in an upcoming release.
If you enable per font end-user-defined characters (EUDC), the system will stop working and a blue screen will appear at startup. This is not a common setting in non-Asian regions.	To avoid this issue, don’t enable per font EUDC. As an alternative, you can edit the registry to mitigate this issue; for more information, see KB4496149. Microsoft is working on a resolution and will provi

Click to expand...

Applies to: Windows 10, version 1809Windows Server 2019, all versions
Release Date:
April 9, 2019
Version:
OS Build 17763.437

Improvements and fixes
This update includes quality improvements. Key changes include:

• Addresses an issue that occurs when you enable per font end-user-defined characters (EUDC). The system will stop working and a blue screen will appear at startup. This is not a common setting in non-Asian regions.
• Addresses an issue that may cause applications that use MSXML6 to stop responding if an exception was thrown during node operations.
• Addresses an issue that causes the Group Policy editor to stop responding when editing a Group Policy Object (GPO) that contains Group Policy Preferences (GPP) for Internet Explorer 10 Internet settings.
• Addresses an issue that may cause authentication issues for Internet Explorer 11 and other applications that use WININET.DLL. This occurs when two or more people use the same user account for multiple, concurrent login sessions on the same Windows Server machine, including Remote Desktop Protocol (RDP) and Terminal Server logons.
• Security updates to Windows Datacenter Networking, Windows Server, the Microsoft JET Database Engine, Windows Kernel, Windows Input and Composition, Microsoft Scripting Engine, Windows App Platform and Frameworks, Windows Storage and Filesystems, Microsoft Graphics Component, Windows Virtualization, Windows MSXML, Windows SQL components, and Microsoft Edge.

If you installed earlier updates, only the new fixes contained in this package will be downloaded and installed on your device.
For more information about the resolved security vulnerabilities, please refer to the Security Update Guide.

Click to expand...