To start off the new year, Microsoft just released Cumulative update KB4480966 for April 2018 update users. If you are on October 2018 update, you will see KB4480116 update. KB4480966 update brings several security updates to Ie, Windows app platform and frameworks, Windows kernel, storage and file system, Windows virtualization, Edge browser, etc.

Additionally, the KB4480966 update also fixes a burglar vulnerability in PowerShell remote point session isolation. Simply put, following this update, you can no longer configure PowerShell remote endpoints without administrator rights.

Typically, you can install the update from the Settings app. Just open the Settings app by clicking on the All Settings button in the Action Center, visit "Update and Security -> Windows Update" and then click the "Check for updates" button. Windows will now automatically download KB4480966.

If you pause Windows 10 updates or facing issues with automatic updates, you can manually install the update by download the KB4480966 offline install from the Windows update catalog. The download link for KB4480966 offline install can found below.

Download links for KB4480966 Offline installer

This is actually the direct download connect to download KB4480966 update. This link contains download links for both x86 (32-bit) and x64 (64-bit) systems. Depending on the body architecture, download the one you need. You can install KB4480966 like any other software. Be sure to restart Windows to use the update.

Changes in KB4480966

This update includes quality improvements. No new operating system features are now being introduced in this update. Key changes include:

Addresses a security vulnerability in session isolation that affects PowerShell remote endpoints. By default, PowerShell remoting is only for administrator accounts but can be configured to work with non-administrator accounts. Starting with this release, you cannot configure PowerShell remote endpoints to utilize non-administrator accounts. When attemping to use a non-administrator account, the following error can look:
"New-PSSession: [computerName] Connecting to remote server localhost failed using the following error message: The WSMan service couldn't launch a number process to process the given request. Make sure the WSMan provider host server and proxy are properly registered. For more information, see the about_Remote_Troubleshooting Help topic."
Security updates to Internet Explorer, Microsoft Edge, Windows App Platform and Frameworks, the Microsoft Scripting Engine, Windows Kernel, Windows Storage and Filesystems, Windows Virtualization, Windows Linux, Windows MSXML, and the Microsoft JET Database Engine.

That is it for the time being.