Servicing stack update for Windows 10 version 1703: November 13, 2018

A security feature bypass vulnerability exists when Windows improperly suspends BitLocker Device Encryption. An attacker with physical access to a powered off system could exploit this vulnerability to gain access to encrypted data.

To exploit the vulnerability, an attacker must gain physical access to the target system prior to the next system reboot.

The security update fixes the vulnerability by ensuring Windows resumes BitLocker Device Encryption.

To learn more about the vulnerability, go to CVE-2018-8566.

Microsoft strongly recommends you install the latest servicing stack update (SSU) for your operating system before installing the latest cumulative update (LCU). SSUs improve the reliability of the update process to mitigate potential issues while installing the LCU and applying Microsoft security fixes. For more information, see Servicing stack updates.

For deployment details for this security update, see the following article in the Microsoft Knowledge Base:

Security update deployment information: November 13, 2018

Prerequisites

There are no prerequisites for installing this update.

Restart information

You do not have to restart the computer after you apply this update.

Update replacement information

This update replaces Servicing stack update for Windows 10 Version 1703: May 17, 2018 (4132649.

Learn about the terminology that Microsoft uses to describe software updates.

File information
The English (United States) version of this software update installs files that have the attributes that are listed in the following tables. The dates and the times for these files are listed in Coordinated Universal Time (UTC). The dates and the times for these files on your local computer are displayed in your local time together with your current daylight saving time (DST) bias. Additionally, the dates and the times may change when you perform certain operations on the files.

Windows 10 file information