July 11, 2023—KB5028168 (OS Build 17763.4645)

Highlights 

• The update addresses an issue that affects a site that is in Microsoft Edge IE mode. The site does not transition out of IE mode when it is expected. 

• This update addresses an issue that affects Microsoft Edge IE mode. The text on the status bar is not always visible.

• The update addresses an intermittent issue that affects an audio stream. The issue disrupts the stream.

Improvements

This security update includes improvements. When you install this KB:

• New! This update improves several simplified Chinese fonts and the Microsoft Pinyin Input Method Editor (IME). They now support GB18030-2022. Characters in the Standard Chinese Characters List (GB18030-2022 implementation level 2) are available in Microsoft Yahei (regular, light, and bold), Dengxian (optional font: regular, light, and bold), and Simsun. The Simsun Ext-B font (GB18030-2022 implementation level 3) now supports Unicode CJK Unified Ideographs Extensions E and F.

• New! This update adds many new features and improvements to Microsoft Defender for Endpoint. For more information, see Microsoft Defender for Endpoint.

• This update adds the ability to share cookies between Microsoft Edge IE mode and Microsoft Edge. To learn more, see Cookie sharing between Microsoft Edge and Internet Explorer.

• This update addresses an issue that affects dot sourcing. It fails for files that contain a class definition in Windows PowerShell.

• This update addresses an issue that affects all the registry settings under the Policies paths. They might be deleted. This occurs when you do not rename the local temporary user policy file during Group Policy processing.

• This update affects the Desktop Window Manager (DWM). It improves its reliability.

• The update addresses a memory leak in MSCTF.dll. The leak occurs when focus is changed in edit controls.

• This update addresses an issue that affects NCryptGetProperty(). When you call it with NCRYPT_KEY_TYPE_PROPERTY, the system returns 0x1 instead of 0x20. This occurs when the key is a machine key.

• The update addresses a random issue that affects svchost.exe. There is significant memory growth in a system. This occurs when svchost.exe contains the User Access Logging Service (UALSVC).

• The update addresses an issue that affects win32kfull.sys. It dereferences an already freed queue entry. This causes a stop error.

• This update addresses an issue that affects a tib.sys driver. It does not load. This occurs when HyperVisor-protected Code Integrity (HVCI) is enabled.

• This update addresses an issue that affects Active Directory Users & Computers. It stops responding. This occurs when you use TaskPad view to enable or disable many objects at the same time.

• This update addresses an issue that affects MySQL commands. The commands fail on Windows Xenon containers.

• This update addresses an issue that affects cluster name object of failover clustering. You cannot repair it on Azure Virtual Machines.

• This update addresses a known issue that affects kiosk device profiles. If you have enabled automatic logon, it might not work. After Autopilot completes provisioning, these devices stay on the credential screen. This issue occurs after you install updates dated January 10, 2023, and later.

If you installed earlier updates, only the new updates contained in this package will be downloaded and installed on your device.

For more information about security vulnerabilities, please refer to the new Security Update Guide website and the July 2023 Security Updates.

Windows 10 servicing stack update - 17763.4640

This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. Servicing stack updates (SSU) ensure that you have a robust and reliable servicing stack so that your devices can receive and install Microsoft updates. 

How to get this update

Before installing this update

Microsoft now combines the latest servicing stack update (SSU) for your operating system with the latest cumulative update (LCU). SSUs improve the reliability of the update process to mitigate potential issues while installing the LCU. For general information about SSUs, see Servicing stack updates and Servicing Stack Updates (SSU): Frequently Asked Questions. 

Prerequisite:

You must install the August 10, 2021 SSU (KB5005112) before installing the LCU. 

Install this update

File information

For a list of the files that are provided in this update, download the file information for cumulative update 5028168.

For a list of the files that are provided in the servicing stack update, download the file information for the SSU - version 17763.4640.