{"id":16728,"date":"2019-10-29T12:30:05","date_gmt":"2019-10-29T20:30:05","guid":{"rendered":"http:\/\/www.palada.net\/index.php\/2019\/10\/29\/news-10467\/"},"modified":"2019-10-29T12:30:05","modified_gmt":"2019-10-29T20:30:05","slug":"news-10467","status":"publish","type":"post","link":"http:\/\/www.palada.net\/index.php\/2019\/10\/29\/news-10467\/","title":{"rendered":"Microsoft Patch Alert: October updates bring problems with Start, RDP, Ethernet, older VB programs"},"content":{"rendered":"<p><img decoding=\"async\" src=\"https:\/\/images.idgesg.net\/images\/article\/2017\/09\/windows_patch_security14-100734743-large.3x2.jpg\"\/><\/p>\n<p><strong>Credit to Author: Woody Leonhard| Date: Tue, 29 Oct 2019 12:18:00 -0700<\/strong><\/p>\n<p>October started out on an extraordinarily low note. On Oct. 3, Microsoft released an \u201cout of band\u201d security update to protect all Windows users from an Internet Explorer scripting engine bug, <a href=\"https:\/\/portal.msrc.microsoft.com\/en-US\/security-guidance\/advisory\/CVE-2019-1367\" rel=\"noopener nofollow\" target=\"_blank\">CVE-2019-1367<\/a>, once thought to be an imminent danger to all things (and all versions) Windows.<\/p>\n<p>It was the third attempt to fix that security hole and each of the versions <a href=\"https:\/\/www.computerworld.com\/article\/3444177\/microsoft-releases-even-more-patches-for-the-cve-2019-1367-ie-zero-day-and-the-bugs-are-having-a-fi.html\">brought its own set of bugs<\/a>.<\/p>\n<p>What? You haven\u2019t heard of any CVE-2019-1367 exploits in the wild? Me, neither. What was once the bogeyman <em>du jour<\/em>, topic of many local TV station warnings and plenty of PC-busting online screams of terror, turned into another&#8230;meh.<\/p>\n<p>Since then, we\u2019ve had the usual crop of two cumulative updates (security and \u201coptional\u201d) for each current version of Windows 10, as well as monthly rollups, security-only patches and monthly rollup previews for Win7 and 8.1. Pretty typical.<\/p>\n<p>Here\u2019s the rest of the story.<\/p>\n<p>G\u00fcnter Born <a href=\"https:\/\/borncity.com\/win\/2019\/10\/10\/windows-10-october-2019-patchday-start-menu-issues\/\" rel=\"noopener nofollow\" target=\"_blank\">opines<\/a> that this bug is a retrograde mistake from an earlier buggier patch, KB 4512941, the second (\u201coptional,\u201d non-security) August Win10 1903 patch released on August 30. Whatever its origin \u2013 and in spite of Microsoft\u2019s claim that it has fixed the bug \u2013 I\u2019m seeing lots of reports that it\u2019s still breaking systems.<\/p>\n<p>Here\u2019s what <a href=\"https:\/\/docs.microsoft.com\/en-us\/windows\/release-information\/resolved-issues-windows-10-1903#331msgdesc\" rel=\"noopener nofollow\" target=\"_blank\">Microsoft posted on Sept. 19<\/a>:<\/p>\n<p><strong>Some users report issues related to the Start menu and Windows Desktop Search<\/strong><\/p>\n<p>&#8220;Microsoft has received reports that a small number of users are having issues related to the Start menu and Windows Desktop Search.<\/p>\n<p>&#8220;Affected platforms: Client: Windows 10, version 1903<\/p>\n<p>&#8220;Resolution: At this time, Microsoft has not found a Search or Start issue significantly impacting users originating from KB4515384 <em>[the first cumulative update for September -WL]<\/em>. We will continue monitoring to ensure users have a high-quality experience when interacting with these areas.&#8221;<\/p>\n<p>You don\u2019t need to look very far to see complaints that Start in particular \u2013 and for some, Search \u2013 don\u2019t work right after installing any of the most recent patches. On Oct. 11, MS engineer Paul Sey said <a href=\"https:\/\/answers.microsoft.com\/en-us\/windows\/forum\/all\/kb-4517389-causes-critical-error-when-using-start\/ae473b3c-ae57-4e1a-8c55-c727cd16fabd?auth=1\" rel=\"noopener nofollow\" target=\"_blank\">on the Answers Forum<\/a>, \u201cWe are aware of this issue and estimate a resolution to be released in late October.\u201d<\/p>\n<p>At this point, KB 4522355, the only Win10 1903 patch \u201creleased in late October,\u201d still throws both Start and Search errors, as Lawrence Abrams <a href=\"https:\/\/www.bleepingcomputer.com\/news\/microsoft\/windows-10-start-menu-search-issues-continue-after-kb4522355-update\/\" rel=\"noopener nofollow\" target=\"_blank\">discusses in BleepingComputer<\/a>.<\/p>\n<p><strong>Continuing problems with RDP, disconnects and unresponsive VMs<\/strong><\/p>\n<p>Microsoft has had another lingering problem \u2013 this one with disconnected Remote Desktop connections <a href=\"https:\/\/www.askwoody.com\/2019\/another-win10-version-1903-redline-bug-disconnected-rdp-sessions-peg-dwm-exe-at-100-utilization\/\" rel=\"noopener nofollow\" target=\"_blank\">triggering big time redline<\/a> spikes \u2013 that may be solved in this month\u2019s second (\u201coptional\u201d non-security) cumulative update for Win10 version 1903. That bug, and one <a href=\"https:\/\/www.askwoody.com\/2019\/carboni-jittery-mouse-when-controlling-win10-version-1903-via-rdp-theres-a-solution\/\" rel=\"noopener nofollow\" target=\"_blank\">described by Noel Carboni<\/a> as triggering jitters in mice running over RDP, may be connected to a change in display driver model used in RDP.<\/p>\n<p>There\u2019s a post on the Microsoft Answers forum <a href=\"https:\/\/answers.microsoft.com\/en-us\/windows\/forum\/all\/dwmexe-high-cpu-one-core-on-target-system-after\/dbce0938-60c5-4051-81ef-468e51d743ab?page=4&amp;tm=1571715946066&amp;auth=1\" rel=\"noopener nofollow\" target=\"_blank\">from Kevin Marchant<\/a> that complains about the \u201chigh CPU after disconnecting\u201d problem on Win10 1903, which is now marked \u201c*** PROBLEM RESOLVED BY KB4522355 RELEASED OCTOBER 24TH 2019. ***\u201d<\/p>\n<p>It\u2019s possible that the KB 4522355 cumulative update may have fixed the problem. This is one (of many!) changes listed in the KB article:<\/p>\n<p>&#8220;Addresses an issue with high CPU usage in Desktop Window Manager (dwm.exe) when you disconnect from a Remote Desktop Protocol (RDP) session.&#8221;<\/p>\n<p>It\u2019s still too early to tell, but that may have finally fixed the bug.<\/p>\n<p><strong>Older programs using Visual Basic on Win10 1903 throw \u201cunexpected error\u201d<\/strong><\/p>\n<p>It took a while for this one to surface, but it appears as if older programs running on 32-bit Win10 Home version 1903 may fall over with the error \u201c<a href=\"https:\/\/www.askwoody.com\/2019\/getting-the-error-unexpected-error-quitting-in-win10-version-1903-blame-the-latest-cumulative-update\/\" rel=\"noopener nofollow\" target=\"_blank\">unexpected error; quitting<\/a>.\u201d Granted, there aren\u2019t many people running programs on Win10 1903 that use VBRUN300.CLL \u2013 the apparent proximate cause of the error message \u2013 but Microsoft hasn\u2019t acknowledged the problem.<\/p>\n<p>I\u2019m also seeing reports of the Win10 version 1903 cumulative updates for both September and October causing a <a href=\"https:\/\/www.askwoody.com\/forums\/topic\/realtek-lan-error-10-issue-with-kb4515384-and-kb4524147\/\" rel=\"noopener nofollow\" target=\"_blank\">Realtek LAN adapter<\/a> to stop working with an Error 10. Again, the problem hasn\u2019t been officially acknowledged.<\/p>\n<p>Don\u2019t get me started on the <a href=\"https:\/\/www.computerworld.com\/article\/3448576\/microsoft-pushes-then-yanks-rogue-kinda-security-patch-kb-4523786-ostensibly-for-autopilot.html\">Autopilot sorta-security patch<\/a> that was pushed out the automatic update chute then pulled without any warning or description. A Microsoft engineer <a href=\"https:\/\/www.askwoody.com\/2019\/microsoft-says-they-made-a-mistake-with-that-autopilot-sorta-security-patch-rollout\/\" rel=\"noopener nofollow\" target=\"_blank\">has confessed<\/a> that they made a mistake in releasing it \u2013 and, no, you don\u2019t need to uninstall it.<\/p>\n<p><em>We\u2019re still shaking our fists at clouds <\/em><a href=\"https:\/\/www.askwoody.com\/2019\/where-we-stand-with-the-october-patches\/\" rel=\"noopener nofollow\" target=\"_blank\"><em>on AskWoody<\/em><\/a><em>.<\/em><\/p>\n<p><a href=\"https:\/\/www.computerworld.com\/article\/3216425\/microsoft-patch-alert-october-updates-bring-problems-with-start-rdp-ethernet-older-vb-programs.html#tk.rss_security\" target=\"bwo\" >http:\/\/www.computerworld.com\/category\/security\/index.rss<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p><img decoding=\"async\" src=\"https:\/\/images.idgesg.net\/images\/article\/2017\/09\/windows_patch_security14-100734743-large.3x2.jpg\"\/><\/p>\n<p><strong>Credit to Author: Woody Leonhard| Date: Tue, 29 Oct 2019 12:18:00 -0700<\/strong><\/p>\n<article>\n<section class=\"page\">\n<p>October started out on an extraordinarily low note. On Oct. 3, Microsoft released an \u201cout of band\u201d security update to protect all Windows users from an Internet Explorer scripting engine bug, <a href=\"https:\/\/portal.msrc.microsoft.com\/en-US\/security-guidance\/advisory\/CVE-2019-1367\" rel=\"noopener nofollow\" target=\"_blank\">CVE-2019-1367<\/a>, once thought to be an imminent danger to all things (and all versions) Windows.<\/p>\n<p>It was the third attempt to fix that security hole and each of the versions <a href=\"https:\/\/www.computerworld.com\/article\/3444177\/microsoft-releases-even-more-patches-for-the-cve-2019-1367-ie-zero-day-and-the-bugs-are-having-a-fi.html\">brought its own set of bugs<\/a>.<\/p>\n<p class=\"jumpTag\"><a href=\"\/article\/3216425\/microsoft-patch-alert-october-updates-bring-problems-with-start-rdp-ethernet-older-vb-programs.html#jump\">To read this article in full, please click here<\/a><\/p>\n<\/section>\n<\/article>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"colormag_page_container_layout":"default_layout","colormag_page_sidebar_layout":"default_layout","footnotes":""},"categories":[11062,10643],"tags":[10516,10909,13764,714,10525],"class_list":["post-16728","post","type-post","status-publish","format-standard","hentry","category-computerworld","category-independent","tag-microsoft","tag-microsoft-office","tag-pcs","tag-security","tag-windows"],"_links":{"self":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/16728","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/comments?post=16728"}],"version-history":[{"count":0,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/16728\/revisions"}],"wp:attachment":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/media?parent=16728"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/categories?post=16728"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/tags?post=16728"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}