Microsoft releases new cumulative updates for Windows 10 users

Microsoft today released cumulative updates for Windows 10 Fall Creators Update (Windows 10 Version 1709), Windows 10 Creators Update (Windows 10 Version 1703), Windows 10 Anniversary Update (Windows 10 Version 1607) and Windows 10 RTM users. These updates does not include any new features, but they include several bug fixes. Find the full change log below.

 April 10, 2018—KB4093112 (OS Build 16299.371):

• Provides support to control usage of Indirect Branch Prediction Barrier (IBPB) within some AMD processors (CPUs) for mitigating CVE-2017-5715, Spectre Variant 2 when switching from user context to kernel context (See AMD Architecture Guidelines around Indirect Branch Control and AMD Security Updates for more details). Follow instructions outlined in KB4073119 for Windows Client (IT Pro) guidance to enable usage of IBPB within some AMD processors (CPUs) for mitigating Spectre Variant 2 when switching from user context to kernel context.
• Addresses an issue that causes an access violation in Internet Explorer when it runs on the Microsoft Application Virtualization platform.
• Addresses an issue in Enterprise Mode related to redirects in Internet Explorer and Microsoft Edge.
• Addresses an issue that generates an access violation on certain pages in Internet Explorer when it renders SVGs under a high load.
• Addresses additional issues with updated time zone information.
• Addresses an issue that might cause the App-V service to stop working on an RDS server that hosts many users.
• Addresses an issue where user accounts are locked when applications are moved to a shared platform using App-V (e.g., XenApp 7.15+ with Windows Server 2016, where Kerberos authentication isn’t available).
• Addresses an issue with printing content generated by ActiveX in Internet Explorer.
• Addresses an issue that causes document.execCommand(“copy”) to always return False in Internet Explorer.
• Addresses an issue that, in some instances, prevents Internet Explorer from identifying custom controls.
• Security updates to Internet Explorer, Microsoft Edge, Windows kpp platform and frameworks, Microsoft scripting engine, Windows graphics, Windows Server, Windows kernel, Windows datacenter networking, Windows wireless networking, Windows virtualization and Kernel, and Windows Hyper-V.

April 10, 2018—KB4093119 (OS Build 14393.2189):

• Addresses an issue that generates an access violation on certain pages in Internet Explorer when it renders SVGs under a high load.
• Addresses an issue with printing content generated by ActiveX in Internet Explorer.
• Addresses additional issues with updated time zone information.
• Addresses an issue where user accounts are locked when applications are moved to a shared platform using App-V (e.g., XenApp 7.15+ with Windows Server 2016, where Kerberos authentication isn’t available).
• Addresses an issue that might cause the App-V service to stop working on an RDS server that hosts many users.
• Addresses an issue that, in some instances, prevents Internet Explorer from identifying custom controls.
• Security updates to Internet Explorer, Windows app platform and frameworks, Microsoft scripting engine, Microsoft Edge, Windows graphics, Windows Server, Windows wireless networking, Windows Hyper-V, Windows kernel, and Windows virtualization and kernel.

April 10, 2018—KB4093109 (OS Build 10586.1540):

• Addresses additional issues with updated time zone information.
• Addresses an issue that, in some instances, prevents Internet Explorer from identifying custom controls.
• Security updates to Internet Explorer, Microsoft scripting engine, Windows RDP, Windows kernel, Windows IIS, Windows datacenter networking, Microsoft scripting engine, Microsoft Edge, Windows Hyper-V , and Windows virtualization and kernel.

April 10, 2018—KB4093111 (OS Build 10240.17831):

• Addresses an issue that generates an access violation on certain pages in Internet Explorer when it renders SVGs under a high load.
• Addresses an issue with printing content generated by ActiveX in Internet Explorer.
• Addresses additional issues with updated time zone information.
• Addresses an issue where AppLocker publisher rules that are applied to MSI files don’t match the files correctly.
• Addresses an issue that prevents the system from booting when you enable LSA (lsass.exe) to run as a protected process by setting the “RunAsPPL” registry entry. Additionally, the Automatic Repair screen may appear.
• Addresses an issue that blocks failed NTLM authentications instead of only logging them when using an authentication policy with Audit mode turned on. Netlogon.log may show the following:SamLogon: Transitive Network logon of <domain>\<user> from <machine2> (via <machine1>) EnteredNlpVerifyAllowedToAuthenticate: AuthzAccessCheck failed for A2ATo 0x5. This can be due to the lack of claims and compound support in NTLM

  SamLogon: Transitive Network logon of <domain>\<user> from <machine2> (via <machine1>) Returns 0xC0000413

• Addresses an issue that generates a certificate validation error (0x800B0109 (CERT_E_UNTRUSTEDROOT)) from http.sys.
• Addresses an issue that prevents PIV smart cards from being recognized.
• Addresses an issue that, in some instances, prevents Internet Explorer from identifying custom controls.
• Security updates to Internet Explorer, Windows app platform and frameworks, Microsoft scripting engine, Windows kernel, Windows graphics, Windows Server, Windows datacenter networking, Windows wireless hetworking, and Windows Hyper-V.

Source: Microsoft