KB4586839

• Updates an issue that causes the Chromium-based Microsoft Edge browser to open in the background when a device is in tablet mode.

• Updates an issue that causes the hard drive to fill up in certain error situations.

• Updates Internet Explorer’s About dialog to use the standard modern dialog.

• Addresses an issue that causes the Chromium-based Microsoft Edge browser to open in the background when a device is in tablet mode.

• Addresses an issue that causes the hard drive to fill up in certain error situations.

• Addresses an issue that generates a 0x57 error when the wecutil ss /c: command is used to update an Event Forwarding subscription.

• Addresses an issue that causes applications to fail when they call the LookupAccountSid() API. This occurs after migrating accounts to a new domain whose name is shorter than the name of the previous domain.

• Addresses an issue that causes Windows Defender Application Control to generate too many events related to dynamic code generation.

• Addresses an issue that causes the “I forgot my Pin" functionality on the lock screen to fail. This failure occurs if the user has signed in using a username and password and the DontDisplayLastUserName or HideFastUserSwitching policy settings are enabled.

• Addresses an issue that causes a system to stop working during startup. This occurs when the CrashOnAuditFail policy is set to 1 and command-line argument auditing is turned on.

• Addresses an issue that prevents access to Azure Active Directory (AD) using the Google Chrome browser because of a Conditional Access policy error.

• Addresses an issue that causes the Microsoft Management Console (MMC) Group Policy application to stop working when you are editing the Group Policy Security settings. The error message is, “MMC cannot initialize the snap-in.”

• Addresses an issue that fails to free a system’s non-paged pool and requires a restart of the system. This occurs when running 32-bit applications with the Federal Information Processing Standard (FIPS) mode enabled.

• Extends Microsoft Defender for Endpoint support to new regions.

• Addresses high memory and CPU utilization in Microsoft Defender for Endpoint.

• Addresses an issue in the Microsoft Remote Procedure Call (RPC) runtime that causes the Distributed File System Replication (DFSR) service to stop responding. This issue generates log events for DFS Replication (5014), RPC (1726), and no reconnection (5004) for a default timeout of 24 hours with no replication.

• Addresses an issue that might cause Dynamic Host Configuration Protocol (DHCP) servers to ignore Link Selection information (DHCP Option 82, sub-option 5) in DHCP Request packets from clients.

• Addresses an issue that prevents the PDF24 app, version 9.1.1, from opening .txt files.

• Addresses an issue that might cause a non-paged pool memory leak in a Remote Desktop Protocol (RDP) over virtual private network (VPN) scenario.

• Addresses an issue that might cause a memory leak in bindflt.sys when copying files in a container scenario.

• Addresses an issue with Active Directory Certificate Services (AD CS) that might prevent Certificate Transparency (CT) logs from being submitted, if enabled.

• Addresses an issue that fails to implement the terminal services (termsrv.dll) idle timeout settings.

• Addresses an issue with the User Datagram Protocol (UDP) rate controller feature that causes Remote Desktop Services (Terminal Services) to intermittently stop working. As a result, all RDP connections are lost.

• Addresses an issue with incorrect Canonical Display Driver (CDD) buffer flushing, which degrades performance in Remote Desktop Protocol (RDP) Windows 2000 Display Driver Model (XDDM) scenarios. This issue affects applications that use graphics processing units (GPU) to operate, such as Microsoft Teams, Microsoft Office, and web browsers.