To start off the new year, Microsoft just released Cumulative update KB4480966 for April 2018 update users. If you are on October 2018 update, you’ll see KB4480116 update. KB4480966 update brings several security updates to Internet Explorer, Windows app platform and frameworks, Windows kernel, storage and file system, Windows virtualization, Edge browser, etc.
Additionally, the KB4480966 update also fixes a security vulnerability in PowerShell remote point session isolation. To put it simply, after this update, you can no longer configure PowerShell remote endpoints without administrator rights.
Typically, you can install the update directly from the Settings app. Just open the Settings app by clicking on the All Settings button in the Action Center, go to “Update and Security -> Windows Update” and click on the “Check for updates” button. Windows will now automatically download KB4480966.
If you pause Windows 10 updates or facing issues with automatic updates, you can manually install the update by download the KB4480966 offline install from the Windows update catalog. The download link for KB4480966 offline install can found below.
Download links for KB4480966 Offline installer
Here is the direct download link to download KB4480966 update. This link contains download links for both x86 (32-bit) and x64 (64-bit) systems. Depending on your system architecture, download the one you need. You can install KB4480966 like any other software. Don’t forget to restart Windows to apply the update.
Changes in KB4480966
This update includes quality improvements. No new operating system features are being introduced in this update. Key changes include:
- Addresses a security vulnerability in session isolation that affects PowerShell remote endpoints. By default, PowerShell remoting only works with administrator accounts but can be configured to work with non-administrator accounts. Starting with this release, you cannot configure PowerShell remote endpoints to work with non-administrator accounts. When attempting to use a non-administrator account, the following error will appear:
- “New-PSSession: [computerName] Connecting to remote server localhost failed with the following error message: The WSMan service could not launch a host process to process the given request. Make sure the WSMan provider host server and proxy are properly registered. For more information, see the about_Remote_Troubleshooting Help topic.”
- Security updates to Internet Explorer, Microsoft Edge, Windows App Platform and Frameworks, the Microsoft Scripting Engine, Windows Kernel, Windows Storage and Filesystems, Windows Virtualization, Windows Linux, Windows MSXML, and the Microsoft JET Database Engine.
That is it for now.
