Patchday: Windows 10-Updates (September 8, 2020)

[German]On September 8, 2020 (second Tuesday of the month, Patchday at Microsoft) several cumulative updates for the supported Windows 10 builds were released. Here are some details about the respective updates.

A list of the updates can be found on this Microsoft website. I have pulled out the details below. The update installation requires an existing current Servicing Stack Updates (SSUs). Meanwhile, Microsoft publishes an overview of current Servicing Stack Updates (SSUs) under ADV990001 (if it is not up to date, please check the Microsoft Update Catalog for Servicing Stack Updates).

Important: From July 2020 all Windows updates disable the RemoteFX vGPU feature due to the CVE-2020-1036 vulnerability (see also KB4570006). After installing this update, attempts to start virtual machines (VM) with RemoteFX vGPU enabled will fail. More information can be found here.

Updates for Windows 10 Version 2004

Microsoft provides the following update packages for the Windows 10 version 2004 released in May 2020.

Update KB4571756 foür Windows 10 Version 2004

Cumulative Update KB4571756 reaises the OS build to 19041.508. The update is available for Windows 10 version 2004 and for Windows Server version 2004. It contains quality improvements but no new operating system features. Here is the list of improvements, called highlights by Microsoft:

• Updates to improve security when using input devices (such as a mouse, keyboard, or pen).
• Updates to improve security when Windows performs basic operations.
• Updates for storing and managing files.
• Updates to improve security when using Microsoft Office products.

The following fixes and improvements are added:

• Addresses an issue with a possible elevation of privilege in windowmanagement.dll.
• Addresses a security vulnerability issue with user proxies and HTTP-based intranet servers. After installing this update, HTTP-based intranet servers cannot leverage a user proxy by default to detect updates. Scans using these servers will fail if the clients do not have a configured system proxy. If you must leverage a user proxy, you must configure the behavior using the Windows Update policy "Allow user proxy to be used as a fallback if detection using system proxy fails." This change does not affect customers who secure their Windows Server Update Services (WSUS) servers with the Transport Layer Security (TLS) or Secure Sockets Layer (SSL) protocols. For more information, see Improving security for devices receiving updates via WSUS.
• Security updates to Windows App Platform and Frameworks, Microsoft Graphics Component, Windows Input and Composition, Windows Media, Windows Shell, Windows Cloud Infrastructure, Windows Fundamentals, Windows Management, Windows Kernel, Windows Virtualization, Windows Storage and Filesystems, the Microsoft Scripting Engine, and the Microsoft JET Database Engine.

This update is automatically downloaded and installed by Windows Update. This update is also available in the Microsoft Update Catalog and via WSUS. Microsoft strongly recommends that you install the latest service stack update (SSU) KB4577266 for your operating system before you install the latest cumulative update (LCU).

For this update, Microsoft indicates that users of the Microsoft Input Method Editor (IME) for Chinese and Japanese may receive an error, or the application may stop responding or close when they try to drag the mouse.

Microsoft has also released an update directly to the Windows Update Client to improve its reliability. This is rolled out outside of Windows Update if the machine is compatible and not an LTSC variant and updates have not been blocked by GPO.

On Facebook a user wrote: Windows 10: Today update KB4571756 causes big problems: The Windows-Explorer has become extremely slow. Each opening of a file leads to a forced pause of several seconds, also the Windows-Explorer crashes again and again. Update KB4571756 uninstalled, they are gone. Does anyone have the same experience?

Updates for Windows 10 Version 190x

Microsoft provides the same update packages for the Windows 10 builds 1903 and 1909 released in 2019. The following updates are available for the Windows 10 May 2019 Update (Version 1903) and the Windows 10 November 2019 Update (Version 1909).

Update KB4574727 for Windows 10 Version 190x

Cumulative Update KB4574727 raises the OS build to 18362.1082 (Windows 10 V1903) and  to 18363.1082 (Windows 10 V1909). The update is available for Windows 10 version 1903, for Windows 10 version 1909 and for Windows Server version 1903 and Windows Server version 1909. It contains quality improvements but no new operating system features. Here is the list of improvements, called highlights by Microsoft:

• Updates to improve security when Windows performs basic operations.
• Updates to improve security when using input devices (such as a mouse, keyboard, or pen).
• Updates to improve security when using Microsoft Office products.

In addition, the following fixes and improvements to Windows 10 version 1909, which are identical to version 1903 (update is also available for the Hololens):

• Addresses a security vulnerability issue with user proxies and HTTP-based intranet servers. After installing this update, HTTP-based intranet servers cannot leverage a user proxy by default to detect updates. Scans using these servers will fail if the clients do not have a configured system proxy. If you must leverage a user proxy, you must configure the behavior using the Windows Update policy "Allow user proxy to be used as a fallback if detection using system proxy fails." This change does not affect customers who secure their Windows Server Update Services (WSUS) servers with the Transport Layer Security (TLS) or Secure Sockets Layer (SSL) protocols. For more information, see Improving security for devices receiving updates via WSUS.
• Security updates to Windows App Platform and Frameworks, Microsoft Graphics Component, Windows Input and Composition, Windows Media, Windows Shell, Windows Cloud Infrastructure, Windows Fundamentals, Windows Management, Windows Kernel, Windows Virtualization, the Microsoft Scripting Engine, and the Microsoft JET Database Engine.

This update is automatically downloaded and installed by Windows Update. This update is also available in the Microsoft Update Catalog and via WSUS. Microsoft strongly recommends that you install the latest service stack update (SSU) for your operating system before you install the latest cumulative update (LCU). For this update, Microsoft states that no known issues are reported.

Microsoft has also released an update directly to the Windows Update Client to improve its reliability. This is rolled out outside of Windows Update if the machine is compatible and not an LTSC variant and updates have not been blocked by GPO.

Updates for Windows 10 Version 1809

The following updates are available for Windows 10 October 2018 Update (Version 1809) and Windows Server 2019.

Update KB4570333 for Windows 10 Version 1809

Cumulative Update KB4570333 raised the OS build to 17763.1457 and includes quality improvements but no new operating system features. Here is the list of improvements, called highlights by Microsoft:

• Updates to improve security when using Microsoft Office products.
• Updates to improve security when using input devices such as a mouse, keyboard, or pen.
• Updates to improve security when Windows performs basic operations.
• Updates for storing and managing files.

Added the following fixes and improvements to the Windows version:

• Addresses a security vulnerability issue with user proxies and HTTP-based intranet servers. After installing this update, HTTP-based intranet servers cannot leverage a user proxy by default to detect updates. Scans using these servers will fail if the clients do not have a configured system proxy. If you must leverage a user proxy, you must configure the behavior using the Windows Update policy "Allow user proxy to be used as a fallback if detection using system proxy fails." This change does not affect customers who secure their Windows Server Update Services (WSUS) servers with the Transport Layer Security (TLS) or Secure Sockets Layer (SSL) protocols. For more information, see Improving security for devices receiving updates via WSUS.
• Security updates to Windows App Platform and Frameworks, Microsoft Graphics Component, Windows Input and Composition, Windows Media, Windows Shell, Windows Cloud Infrastructure, Windows Fundamentals, Windows Management, Windows Kernel, Windows Virtualization, Windows Storage and Filesystems, the Microsoft Scripting Engine, and the Microsoft JET Database Engine.

This update is automatically downloaded and installed by Windows Update, but is also available in the Microsoft Update Catalog. icrosoft strongly recommends that you install the latest service stack update (SSU) for your operating system before you install the latest cumulative update (LCU). Microsoft lists the known issue that the update causes. When you install the update, you may receive the error 0x800f0982 – PSFX_E_MATCHING_COMPONENT_NOT_FOUND Also the Edge Browser may crash. Details can be found in the KB article.

Microsoft has also released an update directly for the Windows Update Client to improve its reliability. This is rolled out outside of Windows Update if the machine is compatible and not an LTSC variant and updates were not blocked by GPO.

Updates for Windows 10 Version 1507 bis 1803

For Windows 10 RTM up to version 1803, various updates are available for the LTSC versions and, if necessary, the Enterprise versions. The Home and Pro versions on the other hand have been dropped from support. These updates are automatically downloaded and installed by Windows Update, but are available for download in the Microsoft Update Catalog (search for the KB number). Before manual installation, the latest Servicing Stack Update (SSU) must be installed. Details can be found in the respective KB article.

• Windows 10 Version 1803: Update KB4577032 is only available for Enterprise and Education. The update raises the OS build to 17134.1726.
• Windows 10 Version 1709: Update KB4577041 is only available for Enterprise and Education. The update raises the OS build to 16299.2107.
• Windows 10 Version 1703: Update KB4577021 is only available for Enterprise and Education. The update raises the OS build to 16299.2500.
• Windows 10 Version 1607: Update KB4577015 is only available for Enterprise and Education. The update raises the OS build to 14393.3930.
• Windows 10 Version 1507: Update KB4577049 is only available for Enterprise and Education. The update raises the OS build to 10240.18696.

There was no update for Windows 10 V1511 and V1703, because these versions were dropped from support. Details about the above updates can be found in the respective Microsoft KB articles in case of doubt.

Similar articles:
Microsoft Office Patchday (September 1, 2020)
Microsoft Security Update Summary (September 1, 2020)
Patchday: Windows 10-Updates (September 8, 2020)
Patchday: Windows 8.1/Server 2012-Updates (September 8, 2020)
Patchday: Updates für Windows 7/Server 2008 R2 (September 8, 2020)
Patchday Microsoft Office Updates (September 8, 2020)