Patch Tuesday!

Windows 10 update KB4016871 (OS Build 15063.297) releases

As part of May 2017 Patch Tuesday, Microsoft is releasing new updates for the Windows 10 Creators Update and previous versions with a slew of fixes and improvements.

Windows 10 update KB4016871

Microsoft is patching the Windows 10 Creators Update again with cumulative update KB4016871. This new release doesn’t include new features, but it addresses a few issues with version 1703, which is still rolling out to PCs.

KB4016871 bumps the version number of Windows 10 to build 15063.296 (or 15063.297), and it fixes a big issue with the OS that can lead to data loss. In addition, it addresses problems with Surface Hub devices, Bluetooth connectivity, and security holes with Microsoft Edge.

What’s new on Windows 10 build 15063.296 (15063.297)

Microsoft has announced KB4016871 in its support site, and it’s referred as “May 9, 2017—KB4016871 (OS Build 15063.296 and 15063.297)”. If you’re already running the Windows 10 Creators Update (version 1703) on your PC and phone, this update will only address these issues with OS:

  • Fixed issue with Surface Hub devices waking from sleep approximately every four minutes after the first two hours. 
  • Addressed problem where autochk.exe can randomly skip drive checks and not fix corruptions, which may lead to data loss. 
  • Fixes an issue where Microsoft Edge users in networking environments that do not fully support the TCP Fast Open standard may have problems connecting to some websites.
  • Addressed problems with Arc Touch mouse Bluetooth connectivity.
  • Security updates to Microsoft Edge, Internet Explorer, Microsoft Graphics Component, Windows SMB Server, Windows COM, Microsoft Scripting Engine, Windows kernel, Windows Server, and the .NET Framework.

What’s new on Windows 10 build 14393.1198

Microsoft has also published update KB4019472 for Windows 10 Anniversary Update (version 1607), which bumps the version number to build 14393.1198, and it delivers the following fixes and improvements:

  • Fixes issue where the PC Settings pages do not display the correct options after the installation of KB3213986 and a language pack. 
  • Addressed problem where fonts appear differently based on whether an app uses Graphics Device Interface (GDI) or GDI Plus. 
  • Fixes issue where applications that use msado15.dll stop working after installing security update KB4015550. 
  • Addressed problem that causes a device to become unresponsive when users try to enable end-user-defined characters (EUDCs).
  • Fixes issue that causes a device to crash every time a user logs off from a remote session using a Virtual Desktop Agent (VDA).
  • Addressed problem where changes the scaling setting when using the Japanese IME.
  • Fixed issue that causes Windows Explorer CPU usage to be at 20%.
  • Addressed problem where Windows Event Forwarding between two 2012 R2 servers makes reports incompatible with third-party Security Information and Event Management software.
  • Fixed issue where the BitLocker Drive Encryption wizard shows the “Choose which encryption mode to use” page even when the BitLocker GPO is enabled.
  • Addressed problem where AppLocker fails to block binaries with revoked certificates.
  • Fixed issue where a virtual machine loses network connectivity. 
  • Addressed problem that causes the loss of a VPN connection on PCs with an integrated WAN card. 
  • Fixed issue where multipath I/O did not properly restore service after the check condition “Illegal request, LUN not available (sense codes 05/25/00)” occurs. 
  • Addressed problem where a Stop 0x27 error occurs after a user provides the domain username and password. 
  • Fixed issue where users can create folders on a USB flash drive when “Deny write access” is set for Removable Storage Access. 
  • Addressed an issue where crash dump generation hangs at 0% on a system with over 750GB of physical memory and Hyper-V enabled.  
  • Fixed an issue with a paging file space leak that leads Windows to a crash, blue screen, or data loss.
  • Addressed problem that prevents access to a website when Automatic Rebind of Renewed Certificate and Directory Service Mapper are enabled. 
  • Fixed a crash in Services.exe with the error code “0xc0000374 – A heap has been corrupted,” and requires a system restart.
  • Addressed issue where Windows Defender anti-virus definitions, which are regulated by the network, prevent other updates (LCU, drivers) from being downloaded. 
  • Fixed issue where Internet Explorer 11 does not save JavaScript files when exporting to an MHT file. 
  • Addressed problem that prevents Internet Explorer 11 from following redirects when the Include-Referer-Token-Binding-ID header is set to “true.” 
  • Fixed issue that causes users to get logged out from a Web-application intermittently. 
  • Updated Internet Explorer 11 New Tab Page with an integrated news feed. 
  • Deprecated SHA-1 Microsoft Edge and Internet Explorer 11 for SSL/TLS Server Authentication.
  • Addressed issues with the Windows Shell, enterprise security, Datacenter Networking, storage networking, Internet Information Services, Active Directory, clustering, Windows Server, the client platform, and Internet Explorer.
  • Security updates to Windows COM, Windows SMB Server, Windows server, Internet Explorer, and Microsoft Edge.

Alongside the updates for Windows 10 version 1703 and 1607, Microsoft is also rolling out a cumulative update KB4019473 (build 10586.916) for Windows 10 version 1511 fixing a number of issues, including high CPU and RAM usage, VPN, and BitLocker. Finally, the original release of Windows 10 (version 1507) is getting patched with cumulative update KB4019474 that addresses a number of issues and bumping the build number to 10240.17394.

It should also be noted that KB4019474 is the last update for Windows 10, as Microsoft is ending support for the original version of the OS. In order to continue receiving updates, you must update to the latest release of Windows 10.

How to download this Windows 10 update

Windows 10 build 15063.297 (KB4016871) — and the updates for previous versions — for PC and mobile is available immediately. The new update will download and install automatically, but you can always force the update from Settings > Update & security > Windows Update and clicking the Check for updates button.

For more details about the most recent Windows update, check out this list with release dates, KB and build numbers, and more.

You can download this update directly from Microsoft using these links: