Adjust version checks for GetCertificate* patching

sandbox/win/src/process_mitigations_win32k_dispatcher.cc

Index: sandbox/win/src/process_mitigations_win32k_dispatcher.cc
diff --git a/sandbox/win/src/process_mitigations_win32k_dispatcher.cc b/sandbox/win/src/process_mitigations_win32k_dispatcher.cc
index 36db4267e0f3f50bb0fc5ac8ef94180c8f8f2440..347cdf14e730ccb14fc123e1967f147a3f19edd0 100644
--- a/sandbox/win/src/process_mitigations_win32k_dispatcher.cc
+++ b/sandbox/win/src/process_mitigations_win32k_dispatcher.cc
@@ -193,7 +193,7 @@ bool ProcessMitigationsWin32KDispatcher::SetupService(
                          GETCERTIFICATE_ID, 20)) {
         return false;
       }
-      if (base::win::GetVersion() < base::win::VERSION_WIN10)
+      if (base::win::GetVersion() < base::win::VERSION_WIN10_TH2)
         return true;
       if (!INTERCEPT_EAT(manager, L"gdi32.dll", GetCertificateByHandle,
                          GETCERTIFICATEBYHANDLE_ID, 20)) {
@@ -206,7 +206,7 @@ bool ProcessMitigationsWin32KDispatcher::SetupService(
                          GETCERTIFICATESIZE_ID, 16)) {
         return false;
       }
-      if (base::win::GetVersion() < base::win::VERSION_WIN10)
+      if (base::win::GetVersion() < base::win::VERSION_WIN10_TH2)
         return true;
       if (!INTERCEPT_EAT(manager, L"gdi32.dll", GetCertificateSizeByHandle,
                          GETCERTIFICATESIZEBYHANDLE_ID, 16)) {