March 12, 2019—KB4489885 (Security-only update)

2019-03-1207:00:00

Microsoft

support.microsoft.com

139

7.5 High

AI Score

Confidence

High

0.188 Low

EPSS

Percentile

96.3%

JSON

March 12, 2019—KB4489885 (Security-only update)

Improvements and fixes

This security update includes quality improvements. No new operating system features are being introduced in this update. Key changes include:

Addresses an issue that causes the abbreviated Japanese Era names to be incorrect. For more information, see KB4469068.
Addresses an issue that may prevent the Event Viewer from showing some event descriptions for network interface cards (NIC).
Security updates to Windows App Platform and Frameworks, Windows Cryptography, Windows Hyper-V, Windows Storage and Filesystems, Windows Fundamentals, Windows Server, Windows Kernel, Windows MSXML, and the Microsoft JET Database Engine.
For more information about the resolved security vulnerabilities, please refer to the Security Update Guide.

Known issues in this update

Symptom	Workaround
After installing this update, Internet Explorer 11 and other applications that use WININET.DLLmay have authentication issues. This occurs when two or more people use the same user account for multiple, concurrent login sessions on the same Windows Server machine, including Remote Desktop Protocol (RDP) and Terminal Server logons. Symptoms reported by customers include, but may not be limited to:

Symptom

Workaround

After installing this update, Internet Explorer 11 and other applications that use WININET.DLLmay have authentication issues. This occurs when two or more people use the same user account for multiple, concurrent login sessions on the same Windows Server machine, including Remote Desktop Protocol (RDP) and Terminal Server logons. Symptoms reported by customers include, but may not be limited to:

Cache size and location show zero or empty.
Keyboard shortcuts may not work properly.
Webpages may intermittently fail to load or render correctly.
Issues with credential prompts.
Issues when downloading files.
| This issue is resolved in KB4493448.
After installing this update, NETDOM.EXE fails to run, and the on-screen error, “The command failed to complete successfully.” appears.| This issue is resolved in KB4493448.
After installing this update, some customers report that authentication fails for services that require unconstrained delegation after the Kerberos ticket expires (the default is 10 hours). For example, the SQL server service fails.| This issue is resolved in KB4499175.
Any compound document (OLE) server application that places embedded objects into the Windows Metafile (WMF) using the PatBltAPI may display embedded objects incorrectly.For example, if you paste a Microsoft Excel worksheet object into a Microsoft Word document, the cells may render with a different background color.| This issue is resolved in KB4493448.

How to get this update

Before installing this updateMicrosoft strongly recommends you install the latest servicing stack update (SSU) for your operating system before installing the latest Rollup. SSUs improve the reliability of the update process to mitigate potential issues while installing the Rollup and applying Microsoft security fixes. If you are using Windows Update, the latest SSU (KB4490628) will be offered to you automatically. To get the standalone package for the latest SSU, go to the Microsoft Update Catalog.Install this updateThis update is now available for installation through WSUS. To get the standalone package for this update, go to the Microsoft Update Catalog website.File informationFor a list of the files that are provided in this update, download the file information for update 4489885.