Patchday: Windows 10 Updates (March 13, 2018)

[German]Microsoft released various cumulative updates for the supported Windows 10 builds on March 13, 2018. Here are some details about the updates.

A list of updates is available on this Microsoft web site. I have drawn out some details below.

Antivirus compatibility check removed

As of March 2018, Microsoft has removed the installation lockout with the mandatory compatibility requirement with the installed antivirus solution for Windows 10. The registry entry described in previous updates and in the blog article Security Updates for Windows 7/8.1 (March 13, 2018) is no longer required under Windows 10.

Updates for Windows 10 Version 1709

Various updates are available for Windows 10 Fall Creators Update (version 1709).

Update KB4088776 for Windows 10 Version 1709

Cumulative Update KB4088776 for Windows 10 Version 1709 (Fall Creators Update) contains quality improvements and the following fixes:

• Addresses issue where Internet Explorer stops working when using F12-based developer tools.
• Addresses issue with printing XML documents with Internet Explorer and Microsoft Edge.
• Updates legacy Document Mode cell visibility in Internet Explorer.
• Addresses issue with pinch and zoom gestures on some hardware in Internet Explorer.
• Addresses issue where Internet Explorer is unresponsive in certain scenarios when a Browser Helper Object is installed.
• Addresses issue to prevent media and other applications from becoming unresponsive or failing when upgrading graphics drivers.
• Addresses issue where customers receive "Check your account, you don't own this content" errors when attempting to play or install owned content. This issue can also result in customers getting kicked out of a game in the middle of play.
• Addresses issue where, after installing KB4056892,KB4073291, KB4058258, KB4077675, or KB4074588 on a server, you may not be able to access SMB shared files in directory junction points or volume mount points hosted on that server. The error is "ERROR_INVALID_REPARSE_DATA". As a result, editing some group policies using GPMC or AGPM 4.0 may fail with the error "The data present in the reparse point buffer is invalid. (Exception from HRESULT: 0x80071128)".
• Addresses issue where an AD FS server issue causes the WID AD FS database to become unusable after a restart. This might prevent the AD FS service from starting. Dieser Bug war mit dem im Artikel Windows 10 Version 1709: Update KB4090913 fixt USB-Bug beschriebenen Update verursacht worden.
• Addresses issue where, after installing KB4090913, the Mixed Reality Portal may fail to initialize. This results in an "SXXXXXXX-X" error or a "We couldn't download the Windows Mixed Reality Software" message may appear after the software is successfully downloaded. Den Fehler hatte ich im Blog-Beitrag Windows 10 V1709: Hotfix KB4094047 für Mixed Reality-Bug adressiert.
• Lifts the Anti-Virus (AV) compatibility check to expand the number of Windows 10 devices that are offered cumulative Windows security updates. This includes cumulative Spectre and Meltdown protections for 32-Bit (x86) and 64-Bit (x64) versions of Windows, except the KB4078130 update that was offered to disable mitigation against Spectre Variant 2.
• Addresses issue that only affects some versions of antivirus software and only applies to computers on which the antivirus ISV updated the ALLOW REGKEY.
• Security updates to Internet Explorer, Microsoft Edge, Microsoft Scripting Engine, Windows Desktop Bridge, Windows Kernel, Windows Shell, Windows MSXML, Device Guard, Windows Hyper-V, Windows Installer, and the Microsoft Scripting Engine.

This update is delivered via Windows Update, but may also dowloaded via Microsoft Update Catalog. This update changes the build to 16299.309.

Known update issues

Windows Update History reports that KB4054517 failed to install because of error 0x80070643. Windows Update incorrectly reports that the update failed to install. Select Check for Updates to confirm that there are no additional updates available.

Users with Windows 10 Version 1709 Enterprise that have installed the January 2018 Delta package may encounter failure issues when installing the February and March 2018 updates from the Microsoft Update Catalog. Specifically, the Windows 10, version 1709 February Delta Update may silently fail. Microsoft is aware of this issue and has expired the the Windows 10 version 1709 Delta Update KBs mentioned here on the Microsoft Catalog on March 13, 2018:

Microcode update KB4090007 for Windows 10 Version 1709

Update KB4090007 contains the Intel Microcode updates to mitigate Spectre 2 (CVE 2017-5715). At the beginning of March I had already mentioned this update in the article Intel Spectre/Meltdown Microcode Updates (March 11, 2018). The revised version now includes the Intel Microcode updates for CPUs from the Skylake, Kaby Lake and Coffee Lake families. The exact processor specifications can be found in KB4090007.

Updates for Windows 10 Version 1703

For Windows 10 Creators Update (Version 1703) the following Updates are available.

Update KB4088782 for Windows 10 Version 1703

Cumulative Update KB4088782 for Windows 10 Version 1703 (Creators Update) brings quality improvements and subsequent problem solving:

• Addresses issue with printing XML documents in Internet Explorer and Microsoft Edge.
• Addresses issue where Internet Explorer stops working when using F12-based developer tools.
• Updates legacy Document Mode cell visibility in Internet Explorer.
• Addresses issue where Internet Explorer is unresponsive in certain scenarios when a Browser Helper Object is installed.
• Addresses issue that causes online video playback to stop responding.
• Addresses issue where, after installing KB4056891, KB4057144, or KB4074592 on a server, you may not be able to access SMB shared files in directory junction points or volume mount points hosted on that server. The error is "ERROR_INVALID_REPARSE_DATA". As a result, editing some group policies using GPMC or AGPM 4.0 may fail with the error "The data present in the reparse point buffer is invalid. (Exception from HRESULT: 0x80071128)".
• Lifts the Anti-Virus (AV) compatibility check to expand the number of Windows 10 devices that are offered cumulative Windows security updates. This includes cumulative Spectre and Meltdown protections for 32-Bit (x86) and 64-Bit (x64) versions of Windows, except the KB4078130 update that was offered to disable mitigation against Spectre Variant 2.
• Addresses issue that only affects some versions of antivirus software and only applies to computers on which the antivirus ISV updated the ALLOW REGKEY.
• Security updates to Internet Explorer, Microsoft Edge, Microsoft Scripting Engine, Windows Desktop Bridge, Microsoft Graphics component, Windows Kernel, Windows Shell, Windows MSXML, Windows Installer, and Windows Hyper-V.

See the Security Update Guide for details on security patches. This update raises the Windows version to build 15063.966. The update will be installed automatically by Windows Update. It is also available via Microsoft Update Catalog.

Microsoft has released an update directly to the Windows Update client to improve reliability. Any device running Windows 10 configured to receive updates automatically from Windows Update, including Enterprise and Pro editions, will be offered the latest Windows 10 Feature Update based on device compatibility and Windows Update for Business deferral policy. This does not apply to long-term servicing editions.

Update KB4088787 for Windows 10 Version 1607

Cumulative Update KB4088787 for Windows 10 Version 1607 (Anniversary Update) and Windows Server 2016 brings quality improvements as well as the following problem solving:

• Addresses issue with printing XML documents with Internet Explorer and Microsoft Edge.
• Addresses issue where Internet Explorer stops working when using F12-based developer tools.
• Updates legacy Document Mode cell visibility in Internet Explorer.
• Addresses issue where Internet Explorer is unresponsive in certain scenarios when a Browser Helper Object is installed.
• Addresses issue that causes online video playback to stop responding.
• Addresses issue where an AD FS server issue causes the WID AD FS database to become unusable after a restart. This might prevent the AD FS service from starting.
• Lifts the Anti-Virus (AV) compatibility check to expand the number of Windows 10 devices that are offered cumulative Windows security updates. This includes cumulative Spectre and Meltdown protections for 32-Bit (x86) and 64-Bit (x64) versions of Windows, except the KB4078130 update that was offered to disable mitigation against Spectre Variant 2.
• Addresses issue that only affects some versions of antivirus software and only applies to computers on which the antivirus ISV updated the ALLOW REGKEY.
• Security updates to Internet Explorer, Microsoft Edge, Microsoft Scripting Engine, Microsoft Windows Search component, Windows Desktop Bridge, Microsoft Graphics component, Windows Kernel, Windows Shell, Windows MSXML, Windows Datacenter Networking, Windows Installer, and Windows Hyper-V.

See the Security Update Guide or details on security patches. This update raises the Windows version to build 14393.2125 and the update will be installed automatically by Windows Update. It is also available via Microsoft Update Catalog.

In this version of Windows, Microsoft has also rolled out an direct update mentioned in the previous section to improve the update client. As long as there are no restrictions, the machines will be upgraded to the latest Windows 10 build by feature update (or even not, if the compatibility is not given with a few machines then, by way of exception.

Update KB4088779 for Windows 10 Version 1511

Cumulative Update KB4088779 for Windows 10 Version 1511 contains the following Quality improvements and issue fixes.

• Addresses issue where Internet Explorer stops working when using F12-based developer tools.
• Lifts the Anti-Virus (AV) compatibility check to expand the number of Windows 10 devices that are offered cumulative Windows security updates. This includes cumulative Spectre and Meltdown protections for 32-Bit (x86) and 64-Bit (x64) versions of Windows, except the KB4078130 update that was offered to disable mitigation against Spectre Variant 2.
• Addresses issue that only affects some versions of antivirus software and only applies to computers on which the antivirus ISV updated the ALLOW REGKEY.
• Security updates to Internet Explorer, Microsoft Edge, Microsoft Scripting Engine, Microsoft Graphics component, Windows Kernel, Windows Shell, Windows MSXML, Device Guard, Windows Installer, and Windows Hyper-V.

This update can only be applied to Windows 10 Enterprise and Windows 10 Education editions. See the Security Update Guide for details on security patches. This update lifts the Windows version to build 10586.1478. The update will be installed automatically by Windows Update. It is also available via Microsoft Update Catalog.

In this version of Windows, Microsoft has also rolled out an direct update mentioned in the previous section to improve the update client. As long as there are no restrictions, the machines will be upgraded to the latest Windows 10 build by feature update (or even not, if the compatibility is not given with a few machines then, by way of exception.

Update KB4088786 for Windows 10 Version 1507

Cumulative Update KB4088786 for Windows 10 Version 1507 brings quality improvemnts and fixes issues:

• Addresses issue with printing XML documents with Internet Explorer and Microsoft Edge.
• Addresses issue with Internet Explorer and Microsoft Outlook integration.
• Addresses issue where Internet Explorer stops working when using F12-based developer tools.
• Updates legacy Document Mode cell visibility in Internet Explorer.
• Addresses issue where Internet Explorer is unresponsive in certain scenarios when a Browser Helper Object is installed.
• Addresses issue where files protected with the Encrypting File System (EFS) may become corrupted during BitLocker decryption or drive encryption.
• Addresses issue where booting with Unified Write Filter (UWF) enabled may lead to stop error 0xE1 on embedded devices, particularly when using a USB hub.
• Addresses issue where IoT devices may stop working because of an "unmountable_boot_volume" error when UWF is enabled.
• Lifts the Anti-Virus (AV) compatibility check to expand the number of Windows 10 devices that are offered cumulative Windows security updates. This includes cumulative Spectre and Meltdown protections for 32-Bit (x86) and 64-Bit (x64) versions of Windows, except the KB4078130 update that was offered to disable mitigation against Spectre Variant 2.
• Addresses issue that only affects some versions of antivirus software and only applies to computers on which the antivirus ISV updated the ALLOW REGKEY.
• Security updates to Internet Explorer, Microsoft Edge, Microsoft Scripting Engine, Microsoft Graphics component, Windows Kernel, Windows Shell, Windows MSXML, Windows Installer, Device Guard, and Windows Hyper-V.

This update can only be applied to Windows 10 Enterprise and Windows 10 Education editions. See the Security Update Guide for details on security patches. This update lifts the Windows version to build 10240.17797. The update will be installed automatically by Windows Update. It is also available via Microsoft Update Catalog.

In this version of Windows, Microsoft has also rolled out the direct update mentioned in the previous section to improve the update client. As long as no restrictions apply, the machines are upgraded to the latest Windows 10 build by feature update.

These were the updates for Windows 10 that I found on Microsoft. Compared to the updates for Windows 7 SP1 and Windows 8.1, there are hardly any known problems in the KB articles. And restrictions such as the AV compatibility requirement (still present in older versions of Windows) have been removed in Windows 10.

Similar articles
Adobe Flash Player Update to Version 29.0.0.113
Microsoft Patchday Summary March 13, 2018
Security Updates for Windows 7/8.1 (March 13, 2018)
Patchday: Windows 10 Updates (March 13, 2018)
Microsoft Office Patchday (March 13, 2018)
Network issues with Updates KB4088875 / KB4088878