Microsoft has released a new optional update for Windows 10 users. The patch KB5055612 applies to Windows 10, version 22H2, the last supported one, and raises the OS version to Build 19045.5796. It only includes quality of life improvements, which are as follows.
What's new in Windows 10 Build 19045.5796
According to Microsoft, the update contains miscellaneous security improvements to internal Windows OS functionality. Those include.
Advertisеment
Graphics Fix
Resolved an issue where the GPU paravirtualization check in Windows Subsystem for Linux 2 (WSL2) was case-sensitive, which could potentially lead to failures in GPU paravirtualization support.
OS Security Update
Updated the Windows Kernel Vulnerable Driver Blocklist (DriverSiPolicy.p7b) to include drivers with known security vulnerabilities that have been exploited in Bring Your Own Vulnerable Driver (BYOVD) attacks.
Known issues
Citrix
Symptoms
Devices that have certain Citrix components installed might be unable to complete installation of the January 2025 Windows security update. This issue was observed on devices with Citrix Session Recording Agent (SRA) version 2411. The 2411 version of this application was released in December 2024. Affected devices might initially download and apply the January 2025 Windows security update correctly, such as via the Windows Update page in Settings. However, when restarting the device to complete the update installation, an error message with text similar to “Something didn’t go as planned. No need to worry – undoing changes” appears. The device will then revert to the Windows updates previously present on the device. This issue likely affects a limited number of organizations as version 2411 of the SRA application is a new version. Home users are not expected to be affected by this issue.
Workaround
Citrix has documented this issue, including a workaround, which can be performed prior to installing the January 2025 Windows security update. For details, see Citrix’s documentation.
Microsoft is working with Citrix to address this issue and will update this documentation once a resolution is available.
System Guard Runtime Monitor Broker service
Symptoms
The Windows Event Viewer might display an error related to SgrmBroker.exe, on devices that have installed Windows updates released January 14, 2025, or later. This error can be found under Windows Logs > System as Event 7023, with text similar to ‘The System Guard Runtime Monitor Broker service terminated with the following error: %%3489660935’.
This error is only observable if the Windows Event Viewer is monitored closely. It is otherwise silent and does not appear as a dialog box or notification.
SgrmBroker.exe refers to the System Guard Runtime Monitor Broker Service. This service was originally created for Microsoft Defender, but it has not been a part of its operation for a very long time. Although Windows updates released January 14, 2025, conflict with the initialization of this service, no impact to performance or functionality should be observed. There is no change to the security level of a device resulting from this issue. This service has already been disabled in other supported versions of Windows, and SgrmBroker.exe presently serves no purpose.
Note: There is no need to manually start this service or configure it in any way (doing so might trigger errors unnecessarily). Future Windows updates will adjust the components used by this service and SgrmBroker.exe. For this reason, please do not attempt to manually uninstall or remove this service or its components.
Workaround
No specific action is required; however, the service can be safely disabled in order to prevent the error from appearing in Event Viewer. To do so, you can follow these steps:
- Open a Command Prompt window. This can be accomplished by opening the Start menu and typing 'cmd'. The results will include “Command Prompt” as a System application. Select the arrow to the right of “Command Prompt” and select “Run as administrator.”
- Once the window is open, carefully enter the following text: sc.exe config sgrmagent start=disabled
- A message may appear afterwards. Next, enter the following text: reg add HKLM\System\CurrentControlSet\Services\SgrmBroker /v Start /d 4 /t REG_DWORD
- Close the Command Prompt window.
This will prevent the related error from appearing in the Event Viewer on subsequent device start up. Note that some of these steps might be restricted by group policy set by your organization.
Microsoft is working to address this issue.
Support us
Winaero greatly relies on your support. You can help the site keep bringing you interesting and useful content and software by using these options:
