Windows 10: KB4598298 Cumulative Update for Windows 10 v1909 18363.1350 - Jan. 21

Brink · Jan 22, 2021

January 21, 2021 - KB4598298 (OS Build 18363.1350) Preview

Windows Server version 1909 Windows 10, version 1909, all editions

Important: 12/8/20
Adobe Flash Player went out of support on December 31, 2020. For more information, see Adobe Flash end of support on December 31, 2020. Adobe started blocking Flash content from running in Flash Player on January 12, 2021. For more information, see Adobe Flash Player EOL General Information Page.

Important: 12/8/20
Windows 10, version 1903 reached end of servicing on December 8, 2020. To continue receiving security and quality updates, Microsoft recommends that you update to the latest version of Windows 10. If you want to update to Windows 10, version 1909, you must use the Enablement Package KB4517245 (EKB). Using the EKB makes updating faster and easier and requires a single restart. For more information, see Windows 10, version 1909 delivery options.

Notes:

11/17/20
For information about Windows update terminology, see the article about the types of Windows updates and the monthly quality update types. To view other notes and messages, see the Windows 10, version 1909 update history home page.

Note Follow @WindowsUpdate to find out when new content is published to the release information dashboard.

Highlights

Updates an issue with some special key combinations used in DaYi, Yi, and Array IMEs that might cause an application to stop working.

Updates an issue that prevents you from opening a document that is on the Windows desktop and generates the error, âThe directory name is invalid.â

Updates an issue that displays a blank lock screen after a device wakes up from Hibernate.

Corrects historical daylight savings time (DST) information for the Palestinian Authority.

Adds a notification that tells you when your device is close to end of service (EOS). At EOS, your device will stop receiving important quality and security updates.

Updates an issue that fails to show Extract all on the shortcut menu when you right-click an online-only ZIP file.

Improvements and fixes

This non-security update includes quality improvements. Key changes include:

Enables administrators to disable standalone Internet Explorer using a Group Policy while continuing to use Microsoft Edge's IE Mode.

Enables you to configure certain policies that support Microsoft Edge IE Mode using mobile device management (MDM).

Addresses an issue that displays a User Account Control (UAC) dialog box unexpectedly when you turn on speech recognition.

Addresses an issue that fails to notify the target application when you select the Copy link command on the Share menu.

Changes the way DirectX 12 runtime components load by splitting the d3d12.dll binary into two pieces: d3d12.dll and d3d12core.dll. This change improves versioning and updating for these components.

Addresses an issue that prevents JumpList items from functioning. This occurs when you create them using the Windows Runtime (WinRT) Windows.UI.StartScreen API for desktop applications that are packaged in the MSIX format.

Addresses an issue that occurs when the Mandatory Profile check box is selected when you copy a user profile.

Addresses an issue with some special key combinations used in DaYi, Yi, and Array IMEs that might cause an application to stop working.

Addresses an issue that prevents you from opening a document that is on the Windows desktop and generates the error, âThe directory name is invalid.â This issue occurs after changing the desktop location in the Location tab of the Desktop Properties dialog box (File Explorer > This PC > Desktop).

Addresses an issue that displays a blank lock screen after a device wakes up from Hibernate.

Corrects historical daylight savings time (DST) information for the Palestinian Authority.

Addresses an issue with German translations of Central European Time.

Adds support for serial number control using the registry.

Addresses an issue that causes the upload of diagnostic logs to a management service, such as Microsoft Intune, to fail. The failure occurs because of a network time-out on a slow network.

Displays a notification to a user when an administrator signs in to an MDM service, such as Microsoft Intune, to find the location of a managed device.

Addresses an issue that causes the silent mode deployment of BitLocker to fail with the error 0x80310001. This issue occurs when deploying BitLocker encryption to Hybrid Azure Active Directory (Azure AD) joined devices.

Addresses an issue that causes an unexpected system restart because of exception code 0xc0000005 (Access Violation) in LSASS.exe; the faulting module is webio.dll.

Addresses an issue that might cause systems that use BitLocker to stop working with the error 0x120 (BITLOCKER_FATAL_ERROR).

Addresses an issue that causes a device to stop working when deploying Microsoft Endpoint Configuration Manager if AppLocker is enabled on the device.

Addresses an issue that might cause a black screen to appear or delay signing in to Hybrid Azure Active Directory joined machines. Additionally, there is no access to login.microsoftonline.com.

Addresses an issue that cause the LSASS.exe process to leak memory on a server that is under a heavy authentication load when Kerberos Armoring (Flexible Authentication Secure Tunneling (FAST)) is enabled.

Addresses a memory leak on Windows servers that are configured as Active Directory domain controllers. This issue occurs when the Key Distribution Center (KDC) attempts to fetch the Service for User (S4U) client name during certificate authentication.

Addresses an issue that causes LSASS.exe to stop working because of a race condition that results in a double free error in Schannel. The exception code is c0000374, and the Event Log displays Schannel event 36888, fatal error code 20, and error state 960. This issue occurs after installing Windows updates from September 2020 and later.

Addresses an issue in which a principal in a trusted MIT realm fails to obtain a Kerberos service ticket from Active Directory domain controllers (DC). This occurs on devices that installed Windows Updates that contain CVE-2020-17049 protections and configured PerfromTicketSignature to 1 or higher. These updates were released between November 10, 2020 and December 8, 2020. Ticket acquisition also fails with the error, âKRB_GENERIC_ERRORâ, if callers submit a PAC-less Ticket Granting Ticket (TGT) as an evidence ticket without providing the USER_NO_AUTH_DATA_REQUIRED flag.

Addresses an issue with HTTP caching that interferes with kiosk mode that targets Azure AD groups.

Addresses an issue with using Windows Defender Application Control (WDAC) and running a file while Managed Installer (MI) or Intelligent Security Graph (ISG) is enabled. You can now use fsutil to look for the $KERNEL.SMARTLOCKER.ORIGINCLAIM extended-attribute (EA) on a file. If this EA is present, then MI or ISG can run the file. You can use fsutil in conjunction with Enabling ISG and MI diagnostic events.

Addresses an issue that allows an app that has been blocked from hydrating files to continue hydrating files in some cases.

Addresses an issue that prevents access to a Volume Shadow Copy Service (VSS) snapshot of Resilient File System (ReFS) volumes for 30 minutes. This occurs when the ReFS volumes contain 100,000 or more concurrently open files. As a result, a time-out occurs, which causes backups of the first and third applications to fail.

Adds a notification that tells you when your device is close to end of service (EOS). At EOS, your device will stop receiving important quality and security updates.

Addresses an issue with Administrative Template settings you configure using a Group Policy Object (GPO). When you change the value of the policy settings to NOT CONFIGURED, the system fails to remove the previous settings. This issue is most noticeable with roaming user profiles.

Addresses an issue that fails to show Extract all on the shortcut menu when you right-click an online-only ZIP file.

Updates the process for enrolling in online speech recognition. If you are already enrolled, you will see a message that asks you to review the new settings. If you choose not to contribute your speech data for human review, you can still use online speech recognition. The new settings contain one button to turn on online speech recognition and another button that turns on the collection of your voice clips. If you turn on the collection of your voice clips, you can turn it off at any time using the same button in the new settings page.

If you installed earlier updates, only the new fixes contained in this package will be downloaded and installed on your device.

Notes:

Windows Update Improvements

Microsoft has released an update directly to the Windows Update client to improve reliability. Any device running Windows 10 configured to receive updates automatically from Windows Update, including Enterprise and Pro editions, will be offered the latest Windows 10 feature update based on device compatibility and Windows Update for Business deferral policy. This doesn't apply to long-term servicing editions.

Known issues in this update

Symptom Workaround System and user certificates might be lost when updating a device from Windows 10, version 1809 or later to a later version of Windows 10. Devices will only be impacted if they have already installed any Latest cumulative update (LCU) released September 16, 2020 or later and then proceed to update to a later version of Windows 10 from media or an installation source which does not have an LCU released October 13, 2020 or later integrated. This primarily happens when managed devices are updated using outdated bundles or media through an update management tool such as Windows Server Update Services (WSUS) or Microsoft Endpoint Configuration Manager. This might also happen when using outdated physical media or ISO images that do not have the latest updates integrated.

Note Devices using Windows Update for Business or that connect directly to Windows Update are not impacted. Any device connecting to Windows Update should always receive the latest versions of the feature update, including the latest LCU, without any extra steps. If you have already encountered this issue on your device, you can mitigate it within the uninstall window by going back to your previous version of Windows using the instructions here. The uninstall window might be 10 or 30 days depending on the configuration of your environment and the version youâre updating to. You will then need to update to the later version of Windows 10 after the issue is resolved in your environment.

Note Within the uninstall window, you can increase the number of days you have to go back to your previous version of Windows 10 by using the DISM command /Set-OSUninstallWindow. You must make this change before the default uninstall window has lapsed. For more information, see DISM operating system uninstall command-line options.

We are working on a resolution and will provide updated bundles and refreshed media in the coming weeks. How to get this update

Before installing this update

Microsoft strongly recommends you install the latest servicing stack update (SSU) for your operating system before installing the latest cumulative update (LCU). SSUs improve the reliability of the update process to mitigate potential issues while installing the LCU. For general information about SSUs, see Servicing stack updates and Servicing Stack Updates (SSU): Frequently Asked Questions.

If you are using Windows Update, the latest SSU (KB4598479) will be offered to you automatically. To get the standalone package for the latest SSU, search for it in the Microsoft Update Catalog.

Install this update

Release Channel Available Next Step Windows Update or Microsoft Update Yes Go to Settings > Update & Security > Windows Update. In the Optional updates available area, youâll find the link to download and install the update. Microsoft Update Catalog Yes To get the standalone package for this update, go to the Microsoft Update Catalog website. Windows Server Update Services (WSUS) No You can import this update into WSUS manually. See the Microsoft Update Catalog for instructions. File information

For a list of the files that are provided in this update, download the file information for cumulative update 4598298.

Note: Some files erroneously have âNot applicableâ in the âFile versionâ column of the CSV file. This might lead to false positives or false negatives when using some third-party scan detection tools to validate the build.
Click to expand...

Source: https://support.microsoft.com/en-us/...e-42f288c02511

See also: https://techcommunity.microsoft.com/...ce/ba-p/222376

Direct download links for KB4598298 MSU file from Microsoft Update Catalog:

Download KB4598298 MSU for Windows 10 v1909 32-bit (x86) - 221.1 MB

Download KB4598298 MSU for Windows 10 v1909 64-bit (x64) - 449.7 MB

Download KB4598298 MSU for Windows 10 v1909 ARM64 - 541.3 MB

:)

Brink · Jan 22, 2021

Cumulative Update KB4517245 Windows 10 v1909 Build 18363.329 - Sept. 5 Insider

broken pixel · Jan 22, 2021

Cumulative Update for Windows 10 for x64-based Systems (KB3156387) will not install

Anyone else having problems getting the Cumulative Update for Windows 10 for x64-based Systems (KB3156387) installed? This update has been failing for me & doing a failed to update after downloading & reboot, then rebooting & removing the update.

V 10.0 build 10240

AsRock · Jan 22, 2021

Windows 10 Update

Well just noticed a pretty large one pop up coming in at 914MB, seems it makes some pretty serous updates.

KB3172985
Cumulative update for Windows 10 Version 1511 and Windows Server 2016 Technical Preview 4: July 12, 2016

This security update includes improvements and fixes in the functionality of Windows 10 Version 1511 and Windows Server 2016 Technical Preview 4. It also resolves the following vulnerabilities in Windows:

3175677 MS16-094: Security update for secure boot: July 12, 2016

3174060 MS16-093: Security update for Adobe Flash Player: July 12, 2016

3171910 MS16-092: Security update for Windows Kernel: July 12, 2016

3170048 MS16-091: Security update for .Net Framework: July 12, 2016

3171481 MS16-090: Security update for Kernel Mode Drivers: July 12, 2016

3170050 MS16-089: Security update for Windows secure kernel mode: July 12, 2016

3170005 MS16-087: Security update for the Microsoft Print Spooler: July 12, 2016

3169999 MS16-085: Cumulative security update for Microsoft Edge: July 12, 2016

3169991 MS16-084: Cumulative security update for Internet Explorer: July 12, 2016

Windows 10: KB4598298 Cumulative Update for Windows 10 v1909 18363.1350 - Jan. 21

KB4598298 Cumulative Update for Windows 10 v1909 18363.1350 - Jan. 21

KB4598298 Cumulative Update for Windows 10 v1909 18363.1350 - Jan. 21

KB4598298 Cumulative Update for Windows 10 v1909 18363.1350 - Jan. 21

KB4598298 Cumulative Update for Windows 10 v1909 18363.1350 - Jan. 21 - Similar Threads - KB4598298 Cumulative Update

Windows 10 22H2 Cumulative update preview Stuck at 21%

New Cumulative Update For Windows 11 KB5006746 Available Today 10/21/21

New Cumulative Update For Windows 11 KB5006746 Available Today 10/21/21

windows 10 problem after kb4598298 update

KB4589211 Intel Microcode Updates Windows 10 v1903 and v1909 - Jan. 25

KB4598479 Servicing Stack Update for Windows 10 v1903 and v1909 Jan.12

KB4598229 Cumulative Update for Windows 10 v1909 18363.1316 - Jan. 12

Can't install Cumulative Updates for v1909

Cumulative update - April 21 2020