KB4284880

Provides protections from an additional subclass of speculative execution side channel vulnerability known as Speculative Store Bypass (CVE-2018-3639). These protections aren't enabled by default. For Windows client (IT pro) guidance, follow the instructions in KB4073119. For Windows Server guidance, follow the instructions in KB4072698. Use this guidance document to enable mitigations for Speculative Store Bypass (CVE-2018-3639) in addition to the mitigations that have already been released for Spectre Variant 2 (CVE-2017-5715) and Meltdown (CVE-2017-5754).

Addresses an issue in which booting with Unified Write Filter and a connected USB hub may lead to stop error E1.

Addresses an issue where firmware updates cause devices to go into BitLocker recovery mode when BitLocker is enabled but Secure Boot is disabled or not present. This update prevents firmware installation on devices in this state. Administrators can install firmware updates by:

1. Temporarily suspending BitLocker.

2. Immediately installing firmware updates before the next OS startup.

3. Immediately restarting the device so that BitLocker doesn’t remain in the suspended state.

Permits a band-capable disk that has only one partition, which is an MSR partition, to convert to a dynamic disk.

Increased the Internet Explorer cookie limit from 50 to better align with industry standards.

Addresses an issue that blocked the creation of shielded VMs and the creation of the required artifacts necessary to deploy shielded VMs. We also address the fact that the Shielding Data file wizard stops working and that the System Center Virtual Machine Manager didn’t work with Shielded VMs.

Addresses a binary serialization compatibility issue for the CultureAwareComparer class.

Security updates to Internet Explorer, Microsoft Edge, Microsoft scripting engine, Windows Desktop Bridge, Windows apps, Windows datacenter networking, Windows wireless networking, Windows Server, Windows virtualization and kernel, and Windows app platform and frameworks.