Microsoft release Cumulative Updates for all supported versions of Windows 10

Home » Microsoft

15 min. read

Published on July 9, 2019

by Surur Davids

published on July 9, 2019

Share this article

Improve this guide

Readers help support MSpoweruser. We may get a commission if you buy through our links.

It’s the second Tuesday of the month, which means Patch Tuesday and a series of Cumulative Updates for all supported versions of Windows 10, which currently excludes Windows 10 version 1511.

Those on Windows 10 May 2019 Update (1903) will receive KB4507453, taking the OS to Build 18362.239.

The update brings the following improvements:

Updates an issue with a tilted world some Mixed Reality users may see after connecting their headsets.

Updates the visual quality issues some users may have when using Windows Mixed Reality (WMR) headsets with SteamVR content.

Updates an issue with BitLocker encryption recovery mode.

Updates to improve security when using Internet Explorer, Microsoft Edge, wireless technologies, and Microsoft Office products.

It also includes the following fixes:

Addresses an issue that may cause BitLocker to go into recovery mode if BitLocker is being provisioned at the same time as updates are being installed.

Addresses an issue that may cause Mixed Reality users to see a tilted world after connecting their headsets.

Addresses visual quality issues some users may have seen with Windows Mixed Reality (WMR) headsets and Steam®VR content.

Security updates to Windows Wireless Networking, Microsoft Scripting Engine, Windows Server, Windows Storage and Filesystems, Windows Kernel, Microsoft HoloLens, Internet Explorer, Windows Input and Composition, Windows Virtualization, Windows App Platform and Frameworks, Microsoft Graphics Component, Microsoft Edge, and Windows Cryptography.

The update comes with the following known issues:

Symptom	Workaround
Windows Sandbox may fail to start with “ERROR_ FILE_NOT_ FOUND (0x80070002)” on devices in which the operating system language is changed during the update process when installing Windows 10, version 1903.	Microsoft is working on a resolution and will provide an update in an upcoming release.
The Remote Access Connection Manager (RASMAN) service may stop working and you may receive the error “0xc0000005” on devices where the diagnostic data level is manually configured to the non-default setting of 0. You may also receive an error in the Application section of Windows Logs in Event Viewer with Event ID 1000 referencing “svchost.exe_RasMan” and “rasman.dll”. This issue only occurs when a VPN profile is configured as an Always On VPN (AOVPN) connection with or without device tunnel. This does not affect manual only VPN profiles or connections.	To mitigate this issue, use one of the steps below, either the group policy step or the registry step, to configure one of the default telemetry settings. Set the value for the following group policy settings: Group Policy Path: Computer Configuration\Administrative Templates\Windows Components\Data Collection and Preview Builds\Allow Telemetry Safe Policy Setting: Enabled and set to 1 (Basic) or 2 (Enhanced) or 3 (Full) Or set the following registry value: SubKey: HKEY_LOCAL_ MACHINE\SOFTWARE\ Policies\Microsoft\ Windows\DataCollection Setting: AllowTelemetry Type: REG_DWORD Value: 1, 2 or 3 Note If the Remote Access Connection Manager service is not running after setting the Group Policy or registry key, you will need to manually start the service or restart the device. We are working on a resolution and estimate a solution will be available in late July.
After installing this Update opening or using the Window-Eyes screen reader app may result in an error and some features may not function as expected. Note Users who have already migrated from Window-Eyes to Freedom Scientific’s other screen reader, JAWS, should not be affected by this issue.	We are working on a resolution and will provide an update in an upcoming release.

Symptom

Workaround

Windows Sandbox may fail to start with “ERROR_ FILE_NOT_ FOUND (0x80070002)” on devices in which the operating system language is changed during the update process when installing Windows 10, version 1903.

Microsoft is working on a resolution and will provide an update in an upcoming release.

The Remote Access Connection Manager (RASMAN) service may stop working and you may receive the error “0xc0000005” on devices where the diagnostic data level is manually configured to the non-default setting of 0. You may also receive an error in the Application section of Windows Logs in Event Viewer with Event ID 1000 referencing “svchost.exe_RasMan” and “rasman.dll”.

This issue only occurs when a VPN profile is configured as an Always On VPN (AOVPN) connection with or without device tunnel. This does not affect manual only VPN profiles or connections.

To mitigate this issue, use one of the steps below, either the group policy step or the registry step, to configure one of the default telemetry settings.

Set the value for the following group policy settings:

Group Policy Path: Computer Configuration\Administrative Templates\Windows Components\Data Collection and Preview Builds\Allow Telemetry
Safe Policy Setting: Enabled and set to 1 (Basic) or 2 (Enhanced) or 3 (Full)

Or set the following registry value:

SubKey: HKEY_LOCAL_ MACHINE\SOFTWARE\ Policies\Microsoft\ Windows\DataCollection

Setting: AllowTelemetry

Type: REG_DWORD

Value: 1, 2 or 3

Note If the Remote Access Connection Manager service is not running after setting the Group Policy or registry key, you will need to manually start the service or restart the device.

We are working on a resolution and estimate a solution will be available in late July.

After installing this Update opening or using the Window-Eyes screen reader app may result in an error and some features may not function as expected.

Note Users who have already migrated from Window-Eyes to Freedom Scientific’s other screen reader, JAWS, should not be affected by this issue.

We are working on a resolution and will provide an update in an upcoming release.

You can manually download it here.

Those on Windows 10 October 2018 Update (1809) will receive KB4507469, taking the OS to Build 17763.615.

The update brings the following improvements:

Updates an issue with BitLocker encryption recovery mode.

Updates an issue that may cause the system to become unresponsive when an application uses the CameraCaptureUI API.

Updates to improve security when using Internet Explorer, Microsoft Edge, wireless technologies, and Microsoft Office products.

It also includes the following fixes:

Addresses an issue that may cause the system to become unresponsive when an application uses the CameraCaptureUI API.

Addresses an issue that may cause BitLocker to go into recovery mode if BitLocker is being provisioned at the same time as updates are being installed.

Security updates to Windows Server, Microsoft Scripting Engine, Microsoft Graphics Component, Internet Explorer, Windows Input and Composition, Windows Virtualization, Windows App Platform and Frameworks, Windows Kernel, Microsoft Edge, Windows Cryptography, and Windows Fundamentals.

The update comes with the following known issues:

Symptom	Workaround
Certain operations, such as rename, that you perform on files or folders that are on a Cluster Shared Volume (CSV) may fail with the error, “STATUS_ BAD_IMPERSONATION _LEVEL (0xC00000A5)”. This occurs when you perform the operation on a CSV owner node from a process that doesn’t have administrator privilege.	Do one of the following: Perform the operation from a process that has administrator privilege. Perform the operation from a node that doesn’t have CSV ownership. Microsoft is working on a resolution and will provide an update in an upcoming release.
After installing KB4493509, devices with some Asian language packs installed may receive the error, “0x800f0982 – PSFX_E_ MATCHING_COMPONENT _ NOT_FOUND.”	Uninstall and reinstall any recently added language packs. For instructions, see Manage the input and display language settings in Windows 10. Select Check for Updates and install the April 2019 Cumulative Update. For instructions, see Update Windows 10. Note If reinstalling the language pack does not mitigate the issue, reset your PC as follows: Go to the Settings app > Recovery. Select Get Started under the Reset this PC recovery option. Select Keep my Files. Microsoft is working on a resolution and will provide an update in an upcoming release.
We are investigating reports that a small number of devices may startup to a black screen during the first logon after installing updates.	To mitigate this issue, press Ctrl+Alt+Delete, then select the Power button in the lower right corner of the screen and select Restart. Your device should now restart normally. We are working on a resolution and will provide an update in an upcoming release.
After installing this Update opening or using the Window-Eyes screen reader app may result in an error and some features may not function as expected. Note Users who have already migrated from Window-Eyes to Freedom Scientific’s other screen reader, JAWS, should not be affected by this issue.	We are working on a resolution and will provide an update in an upcoming release.

You can manually download it here.

Those on the Windows 10 April 2018 Update ( 1803) will receive KB4507435, taking the OS to Build 17134.885.

It comes with the following improvements:

Updates an issue with BitLocker encryption recovery mode.

Updates to improve security when using Internet Explorer, Microsoft Edge, wireless technologies, and Microsoft Office products.

It also includes the following fixes:

Addresses an issue that may cause BitLocker to go into recovery mode if BitLocker is being provisioned at the same time as updates are being installed.

Security updates to Windows Wireless Networking, Windows Server, Microsoft Scripting Engine, Windows Storage and Filesystems, Microsoft Graphics Component, Windows Kernel, Internet Explorer, Windows Input and Composition, Windows Virtualization, Windows App Platform and Frameworks, Microsoft Edge, Windows Cryptography, and Windows Fundamentals.

The update comes with the following known issues:

Symptom	Workaround
Certain operations, such as rename, that you perform on files or folders that are on a Cluster Shared Volume (CSV) may fail with the error, “STATUS_BAD_ IMPERSONATION _LEVEL (0xC00000A5)”. This occurs when you perform the operation on a CSV owner node from a process that doesn’t have administrator privilege.	Do one of the following: Perform the operation from a process that has administrator privilege. Perform the operation from a node that doesn’t have CSV ownership. Microsoft is working on a resolution and will provide an update in an upcoming release.
We are investigating reports that a small number of devices may startup to a black screen during the first logon after installing updates.	To mitigate this issue, press Ctrl+Alt+Delete, then select the Power button in the lower right corner of the screen and select Restart. Your device should now restart normally. We are working on a resolution and will provide an update in an upcoming release.
To mitigate this issue, press Ctrl+Alt+Delete, then select the Power button in the lower right corner of the screen and select Restart. Your device should now restart normally. We are working on a resolution and will provide an update in an upcoming release.	We are working on a resolution and will provide an update in an upcoming release.

Symptom

Workaround

Certain operations, such as rename, that you perform on files or folders that are on a Cluster Shared Volume (CSV) may fail with the error, “STATUS_BAD_ IMPERSONATION _LEVEL (0xC00000A5)”. This occurs when you perform the operation on a CSV owner node from a process that doesn’t have administrator privilege.

Do one of the following:

Perform the operation from a process that has administrator privilege.
Perform the operation from a node that doesn’t have CSV ownership.

Microsoft is working on a resolution and will provide an update in an upcoming release.

We are investigating reports that a small number of devices may startup to a black screen during the first logon after installing updates.

To mitigate this issue, press Ctrl+Alt+Delete, then select the Power button in the lower right corner of the screen and select Restart. Your device should now restart normally.

We are working on a resolution and will provide an update in an upcoming release.

To mitigate this issue, press Ctrl+Alt+Delete, then select the Power button in the lower right corner of the screen and select Restart. Your device should now restart normally.

We are working on a resolution and will provide an update in an upcoming release.

You can manually download it here.

Those on the Windows 10 Fall Creators Update ( 1709) will receive KB4507455, taking the OS to Build 16299.1268. This version is only supported by Enterprise and Education SKUs.

It includes the following improvements:

Updates an issue with BitLocker encryption recovery mode.

Updates to improve security when using Internet Explorer, Microsoft Edge, wireless technologies, and Microsoft Office products.

It also includes the following fixes:

Addresses an issue that may cause BitLocker to go into recovery mode if BitLocker is being provisioned at the same time as updates are being installed.

Security updates to Windows Wireless Networking, Windows Server, Microsoft Scripting Engine, Windows Storage and Filesystems, Microsoft Graphics Component, Internet Explorer, Windows Input and Composition, Windows Virtualization, Windows App Platform and Frameworks, Windows Fundamentals, Windows Kernel, Microsoft Edge, and Windows Cryptography.

The update comes with the following known issues:

Symptom	Workaround
Certain operations, such as rename, that you perform on files or folders that are on a Cluster Shared Volume (CSV) may fail with the error, “STATUS_BAD_ IMPERSONATION _ LEVEL (0xC00000A5)”. This occurs when you perform the operation on a CSV owner node from a process that doesn’t have administrator privilege.	Do one of the following: Perform the operation from a process that has administrator privilege. Perform the operation from a node that doesn’t have CSV ownership. Microsoft is working on a resolution and will provide an update in an upcoming release.
After installing this Update opening or using the Window-Eyes screen reader app may result in an error and some features may not function as expected. Note Users who have already migrated from Window-Eyes to Freedom Scientific’s other screen reader, JAWS, should not be affected by this issue.	We are working on a resolution and will provide an update in an upcoming release.

Symptom

Workaround

Certain operations, such as rename, that you perform on files or folders that are on a Cluster Shared Volume (CSV) may fail with the error, “STATUS_BAD_ IMPERSONATION _ LEVEL (0xC00000A5)”. This occurs when you perform the operation on a CSV owner node from a process that doesn’t have administrator privilege.

Do one of the following:

Perform the operation from a process that has administrator privilege.
Perform the operation from a node that doesn’t have CSV ownership.

Microsoft is working on a resolution and will provide an update in an upcoming release.

After installing this Update opening or using the Window-Eyes screen reader app may result in an error and some features may not function as expected.

Note Users who have already migrated from Window-Eyes to Freedom Scientific’s other screen reader, JAWS, should not be affected by this issue.

We are working on a resolution and will provide an update in an upcoming release.

You can manually download it here.

Those on the Windows 10 Creators Update ( 1703), will receive KB4507450, taking the OS to Build 15063.1928.

It comes with the following improvements:

Updates an issue with BitLocker encryption recovery mode.

Updates to improve security when using Internet Explorer, Microsoft Edge, wireless technologies, and Microsoft Office products.

It also includes the following fixes:

Addresses an issue that may cause BitLocker to go into recovery mode if BitLocker is being provisioned at the same time as updates are being installed.

Addresses an issue that may cause some devices with Hyper-V enabled to enter BitLocker recovery mode and receive the error, “0xC0210000”.

Security updates to Windows Server, Microsoft Scripting Engine, Windows Storage and Filesystems, Microsoft Graphics Component, Windows Input and Composition, Windows Virtualization, Windows App Platform and Frameworks, Windows Kernel, Internet Explorer, and Microsoft Edge.

The update comes with the following known issues:

Symptom	Workaround
Certain operations, such as rename, that you perform on files or folders that are on a Cluster Shared Volume (CSV) may fail with the error, “STATUS_BAD_ IMPERSONATION _LEVEL (0xC00000A5)”. This occurs when you perform the operation on a CSV owner node from a process that doesn’t have administrator privilege.	Do one of the following: Perform the operation from a process that has administrator privilege. Perform the operation from a node that doesn’t have CSV ownership. Microsoft is working on a resolution and will provide an update in an upcoming release.
After installing this Update opening or using the Window-Eyes screen reader app may result in an error and some features may not function as expected. Note Users who have already migrated from Window-Eyes to Freedom Scientific’s other screen reader, JAWS, should not be affected by this issue.	We are working on a resolution and will provide an update in an upcoming release.

Symptom

Workaround

Do one of the following:

Perform the operation from a process that has administrator privilege.
Perform the operation from a node that doesn’t have CSV ownership.

Microsoft is working on a resolution and will provide an update in an upcoming release.

After installing this Update opening or using the Window-Eyes screen reader app may result in an error and some features may not function as expected.

Note Users who have already migrated from Window-Eyes to Freedom Scientific’s other screen reader, JAWS, should not be affected by this issue.

We are working on a resolution and will provide an update in an upcoming release.

You can manually download it here.

Those onWindows 10 Anniversary Update ( 1607) will receive KB4507460, taking the OS to Build 14393.3085. This is only supported in the Long-Term Servicing Channel and for Windows Server 2016 customers.

It comes with the following improvements:

Updates an issue with BitLocker encryption recovery mode.

Updates to improve security when using Internet Explorer, Microsoft Edge, wireless technologies, and Microsoft Office products.

It also includes the following fixes:

Addresses an issue that may cause BitLocker to go into recovery mode if BitLocker is being provisioned at the same time as updates are being installed.

Addresses an issue that may cause some devices with Hyper-V enabled to enter BitLocker recovery mode and receive the error, “0xC0210000”.

Security updates to Windows Wireless Networking, Windows Server, Microsoft Scripting Engine, Windows Storage and Filesystems, Microsoft Graphics Component, Internet Explorer, Windows Input and Composition, Windows Virtualization, Windows App Platform and Frameworks, Windows Kernel, Microsoft Edge, and Windows Cryptography.

The update comes with the following known issues:

Symptom	Workaround
For hosts managed by System Center Virtual Machine Manager (SCVMM), SCVMM cannot enumerate and manage logical switches deployed on the host after installing the update. Additionally, if you do not follow the best practices, a stop error may occur in vfpext.sys on the hosts.	Run mofcomp on the following mof files on the affected host: Scvmmswitchportsettings.mof VMMDHCPSvr.mof Follow the best practices while patching to avoid a stop error in vfpext.sys in an SDN v2 environment (NC managed hosts).
After installing KB4467684, the cluster service may fail to start with the error “2245 (NERR_PasswordTooShort)” if the group policy “Minimum Password Length” is configured with greater than 14 characters.	Set the domain default “Minimum Password Length” policy to less than or equal to 14 characters. Microsoft is working on a resolution and will provide an update in an upcoming release.
Certain operations, such as rename, that you perform on files or folders that are on a Cluster Shared Volume (CSV) may fail with the error, “STATUS_BAD_ IMPERSONATION_ LEVEL (0xC00000A5)”. This occurs when you perform the operation on a CSV owner node from a process that doesn’t have administrator privilege.	Do one of the following: Perform the operation from a process that has administrator privilege. Perform the operation from a node that doesn’t have CSV ownership. Microsoft is working on a resolution and will provide an update in an upcoming release.
Some applications may fail to run as expected on clients of Active Directory Federation Services 2016 (AD FS 2016) after installation of this update on the server. Applications that may exhibit this behavior use an IFRAME during non-interactive authentication requests and receive X-Frame Options set to DENY.	You can use the Allow-From value of the header if the IFRAME is only accessing pages from a single-origin URL. On the affected server, open a PowerShell window as an administrator and run the following command: set-AdfsResponseHeaders – SetHeader Name X-Frame-Options -SetHeaderValue “allow-from https://example.com” Microsoft is working on a resolution and will provide an update in an upcoming release.
After installing this Update opening or using the Window-Eyes screen reader app may result in an error and some features may not function as expected. Note Users who have already migrated from Window-Eyes to Freedom Scientific’s other screen reader, JAWS, should not be affected by this issue.	We are working on a resolution and will provide an update in an upcoming release.

You can manually download it here.

Those on the original version of Windows 10 will receive KB4507458, taking the OS to Build 10240.18275. This is only supported for LTSC customers.

It comes with the following improvements:

Updates an issue with BitLocker encryption recovery mode.

Updates to improve security when using Internet Explorer, Microsoft Edge, wireless technologies, and Microsoft Office products.

It also includes the following fixes:

Addresses an issue that may display the error, “MMC has detected an error in a snap-in and will unload it.” when you try to expand, view, or create Custom Views in Event Viewer. Additionally, the application may stop responding or close. You may also receive the same error when using Filter Current Log in the Action menu with built-in views or logs.

Addresses an issue that prevents the Calculator application from following the Gannen setting when it is enabled. For more information, see KB4469068.

Addresses an issue that may cause BitLocker to go into recovery mode if BitLocker is being provisioned at the same time as updates are being installed.

Security updates to Windows Server, Microsoft Scripting Engine, Windows Storage and Filesystems, Microsoft Graphics Component, Internet Explorer, Windows Kernel, Windows App Platform and Frameworks, Windows Input and Composition, and Microsoft Edge.

The update comes with the following known issues:

Symptom	Workaround
Certain operations, such as rename, that you perform on files or folders that are on a Cluster Shared Volume (CSV) may fail with the error, “STATUS_BAD_ IMPERSONATION _LEVEL (0xC00000A5)”. This occurs when you perform the operation on a CSV owner node from a process that doesn’t have administrator privilege.	Do one of the following: Perform the operation from a process that has administrator privilege. Perform the operation from a node that doesn’t have CSV ownership. Microsoft is working on a resolution and will provide an update in an upcoming release.
After installing this Update opening or using the Window-Eyes screen reader app may result in an error and some features may not function as expected. Note Users who have already migrated from Window-Eyes to Freedom Scientific’s other screen reader, JAWS, should not be affected by this issue.	We are working on a resolution and will provide an update in an upcoming release.

Symptom

Workaround

Do one of the following:

Perform the operation from a process that has administrator privilege.
Perform the operation from a node that doesn’t have CSV ownership.

Microsoft is working on a resolution and will provide an update in an upcoming release.

After installing this Update opening or using the Window-Eyes screen reader app may result in an error and some features may not function as expected.

Note Users who have already migrated from Window-Eyes to Freedom Scientific’s other screen reader, JAWS, should not be affected by this issue.

We are working on a resolution and will provide an update in an upcoming release.

You can manually download the update here.

To download the updates Check for Updates in Settings or manually download the packages at the links provided.

Via Neowin