Patchday: Windows 10-Updates (June 9, 2020)

[German]On June 9, 2020 (second Tuesday of the month, Patchday at Microsoft) several cumulative updates for the supported Windows 10 builds were released. Here are some details about the respective updates.

A list of the updates can be found on this Microsoft website. I have extracted the details below. The update installation requires an existing current Servicing Stack Updates (SSUs). Meanwhile, Microsoft publishes an overview of current Servicing Stack Updates (SSUs) under ADV990001 (if it is not up to date, have the Microsoft Update Catalog search for Servicing Stack Updates).

Updates for Windows 10 Version 2004

For Windows 10 version 2004 that was released in May 2020, Microsoft provides the following update packages.

Update KB4557957 for Windows 10 Version 2004

Cumulative Update KB4557957 raises the OS build to 19041.329. The update is available for Windows 10 version 2004 and for Windows Server version 1903 and Windows Server version 2004. It includes quality improvements but no new operating system features. Here is the list of improvements, referred to by Microsoft as highlights:

• Updates an issue that prevents you from using some voice commands in Windows Mixed Reality when the default Windows language is Canadian or Australian English.
• Improves the reliability of the keywords used for voice assistants, including Cortana.
• Updates to improve security when using Internet Explorer and Microsoft Edge.
• Updates to improve security when Windows performs basic operations.
• Updates to improve security when using Microsoft Office products.
• Updates to improve security when using external devices (such as game controllers, printers, and web cameras) and input devices (such as a mouse, keyboard, or stylus).
• Improves security in Microsoft Xbox and the Microsoft Store.
• Updates for verifying usernames and passwords.
• Updates for storing and managing files.
• Optimizes the touch experience when you detach the keyboard.

The following fixes and improvements are added

• Addresses an issue that prevents users from updating .msi files from a network folder.
• Addresses an issue that prevents you from using some voice commands in Windows Mixed Reality when the preferred Windows display language is English (Canada) or English (Australia).
• Improves the reliability of voice assistants that use Windows voice activation (Settings > Privacy > Voice Activation) for keywords.
• Improves the reliability of Cortana's voice activation when using the "Cortana" keyword on devices that support low-power keywords.
• Optimizes the touch experience and keeps the familiar desktop experience when you detach the keyboard.
• Security updates to the Microsoft Scripting Engine, Microsoft Edge, Internet Explorer, Windows App Platform and Frameworks, Windows Media, Windows Kernel, Microsoft Graphics Component, Windows Input and Composition, Windows Shell, Windows Silicon Platform, Microsoft Xbox, the Microsoft Store, Windows Cloud Infrastructure, Windows Fundamentals, Windows Management, Windows Authentication, Windows Cryptography, Microsoft HoloLens, Windows Virtualization, Windows Peripherals, Windows Storage and Filesystems, Windows File Server and Clustering, Windows Hybrid Storage Services, the Microsoft JET Database Engine, and the Windows Update Stack.

This update is automatically downloaded and installed by Windows Update. This update is also available in the Microsoft Update Catalog and via WSUS. Microsoft strongly recommends that you install the latest service stack update (SSU) for your operating system before you install the latest cumulative update (LCU). For this update, Microsoft indicates that there are no known issues.

Microsoft has also released an update directly to the Windows Update client to improve its reliability. This is rolled out outside of Windows Update if the machine is compatible and is not an LTSC variant and updates have not been blocked by GPO.

Updates for Windows 10 Version 190x

Microsoft provides the same update packages for the Windows 10 builds 1903 and 1909 that were released in 2019. The following updates are available for the Windows 10 May 2019 Update (version 1903) and the Windows 10 November 2019 Update (version 1909).

Update KB4560960 for Windows 10 Version 190x

Cumulative Update KB4560960 raises the OS build to 18362.900 (Windows 10 V1903) and to 18363.900 (Windows 10 V1909). The update is available for Windows 10 version 1903, for Windows 10 version 1909, and for Windows Server version 1903 and Windows Server version 1909. It contains quality improvements but no new operating system features. Here is the list of enhancements, referred to by Microsoft as highlights:

• Updates to improve security when using Internet Explorer and Microsoft Edge.
• Updates to improve security when Windows performs basic operations.
• Updates to improve security when using Microsoft Office products.
• Updates to improve security when using external devices (such as game controllers, printers, and web cameras) and input devices (such as a mouse, keyboard, or stylus).
• Improves security in Microsoft Xbox and the Microsoft Store.
• Updates for verifying usernames and passwords.

Added the following fixes and improvements to Windows 10 version 1909, which are identical to version 1903 (update is also available for the Hololens):

• Addresses an issue that prevents users from updating .msi files from a network folder.
• Addresses a security issue described in CVE-2018-0886 by adding support for the "Encryption Oracle Remediation" policy setting and changing the default value from Vulnerable to Mitigated. For more information about how this might affect your environment if you are using Remote Desktop, see KB4093492.
• Security updates to the Microsoft Scripting Engine, Microsoft Edge, Internet Explorer, Windows App Platform and Frameworks, Windows Media, Windows Kernel, Microsoft Graphics Component, Windows Input and Composition, Windows Shell, Windows Silicon Platform, Microsoft Xbox, the Microsoft Store, Windows Cloud Infrastructure, Windows Fundamentals, Windows Management, Windows Authentication, Windows Cryptography, Microsoft HoloLens, Windows Virtualization, Windows Peripherals, Windows File Server and Clustering, Windows Hybrid Storage Services, and the Microsoft JET Database Engine.

This update is automatically downloaded and installed by Windows Update. This update is also available in the Microsoft Update Catalog and via WSUS. Microsoft strongly recommends that you install the latest service stack update (SSU) for your operating system before you install the latest cumulative update (LCU).

For this update, Microsoft indicates that it may not be possible to access the Internet using a Wireless Wide Area Network (WWAN) LTE modem. However, the Network Connectivity Status Indicator (NCSI) in the notification area may still indicate that you are connected to the Internet. The problem is being investigated and should be fixed at some point.

Microsoft has also released an update directly to the Windows Update Client to improve its reliability. This is rolled out outside of Windows Update if the machine is compatible and is not an LTSC variant and updates have not been blocked by GPO.

Updates for Windows 10 Version 1809

The following updates are available for Windows 10 October 2018 Update (version 1809) and Windows Server 2019.

Update KB4561608 for Windows 10 Version 1809

Cumulative Update KB4561608 raises the OS build (according to MS) to 17763.1282 and includes quality improvements but no new operating system features. Here is the list of improvements, called highlights by Microsoft:

• Updates to improve security when using Internet Explorer and Microsoft Edge.
• Updates to improve security when Windows performs basic operations.
• Updates to improve security when using Microsoft Office products.
• Updates to improve security when using input devices (such as a mouse, keyboard, or stylus).
• Improves security in Microsoft Xbox and the Microsoft Store.
• Updates for verifying usernames and passwords.
• Updates for storing and managing files.

The following fixes and improvements to the Windows version are added:

• Addresses an issue that prevents users from updating .msi files from a network folder.
• Addresses an issue that causes the promotion of a server to a domain controller to fail. This occurs when the Local Security Authority Subsystem Service (LSASS) process is set as Protected Process Light (PPL).
• Addresses a security issue described in CVE-2018-0886 by adding support for the "Encryption Oracle Remediation" policy setting and changing the default value from Vulnerable to Mitigated. For more information about how this might affect your environment if you are using Remote Desktop, see KB4093492.
• Security updates to the Microsoft Scripting Engine, Microsoft Edge, Internet Explorer, Windows App Platform and Frameworks, Windows Media, Windows Kernel, Microsoft Graphics Component, Windows Input and Composition, Windows Shell, Microsoft Xbox, the Microsoft Store, Windows Cloud Infrastructure, Windows Fundamentals, Windows Management, Windows Authentication, Windows Cryptography, Microsoft HoloLens, Windows Virtualization, Windows Storage and Filesystems, Windows File Server and Clustering, Windows Hybrid Storage Services, the Microsoft JET Database Engine, and the Windows Update Stack.

This update is automatically downloaded and installed by Windows Update. This update is also available in the Microsoft Update Catalog. Microsoft strongly recommends that you install the latest service stack update (SSU) for your operating system before you install the latest cumulative update (LCU). Microsoft lists a known issue that this update causes. When you install the update, you may receive the error 0x800f0982 – PSFX_E_MATCHING_COMPONENT_NOT_FOUND For details, see the KB article.

Microsoft has also released an update directly to the Windows Update Client to improve its reliability. This will be rolled out outside of Windows Update if the machine is compatible and not an LTSC variant and updates have not been blocked by GPO.

Updates for Windows 10 Version 1507 till 1803

For Windows 10 RTM up to version 1803, various updates are available for the LTSC versions and, if necessary, the Enterprise versions. The Home and Pro versions on the other hand have been dropped from support. Here is a short overview.

• Windows 10 Version 1803: Update KB4561621 is only available for Enterprise and Education. The update raises the OS build to 17134.1550. The fixes mentioned in the KB article are included. This update is automatically downloaded and installed by Windows Update, but is available for download from the Microsoft Update Catalog. Before manual installation, the latest Servicing Stack Update (SSU) must be installed. Details, including known issues, can be found in the KB article.
• Windows 10 Version 1709: Update KB4561602 is only available for Enterprise and Education. The update raises the OS build to 16299.1932. The fixes mentioned in the KB article are included. This update is automatically downloaded and installed by Windows Update, but is available for download from the Microsoft Update Catalog. Before manual installation, the latest Servicing Stack Update (SSU) must be installed. Details, including known issues, can be found in the KB article.
• Windows 10 Version 1703: Update KB4561605 is only available for the Surface Hub. The update raises the OS build to 16299.2409. The fixes mentioned in the KB article are included.
• Windows 10 Version 1607: Update KB4561616 is now available only to Enterprise LTSC. The update raises the OS build to 14393.3750. The fixes mentioned in the KB article are included. This update is automatically downloaded and installed by Windows Update, but is available for download from the Microsoft Update Catalog.  Before manual installation, the latest Servicing Stack Update (SSU) must be installed. Details, including known issues, can be found in the KB article.
• Windows 10 Version 1507: Update KB4561649 is available for the RTM version (LTSC). The update raises the OS build to 10240.18608. The fixes mentioned in the KB article are included. This update is automatically downloaded and installed by Windows Update, but is available for download in the Microsoft Update Catalog. Before manual installation, the latest Servicing Stack Update (SSU) must be installed. Details, including known issues, can be found in the KB article. Details can be found in the KB article.

There was no update for Windows 10 V1511 and V1703, because these versions have been dropped from support. If in doubt, details about the above updates can be found in the respective Microsoft KB articles.

Similar articles:
Microsoft Office Patchday (June 2, 2020)
Microsoft Security Update Summary (June 9, 2020)
Patchday: Windows 10-Updates (June 9, 2020)
Patchday: Windows 8.1/Server 2012 Updates (June 9, 2020)
Patchday: Windows 7/Server 2008 R2 Updates (June 9, 2020)
Patchday Microsoft Office Updates (June 9, 2020)