Windows 10: Microsoft December 2021 Security Updates

December 2021 Security UpdatesUpdates this MonthThis release consists of security updates for the following products, features and roles.AppsASP.NET Core & Visual StudioAzure Bot Framework SDKBizTalk ESB ToolkitInternet Storage Name ServiceMicrosoft Defender for IoTMicrosoft DevicesMicrosoft Edge Chromium-basedMicrosoft Local Security Authority Server lsasrvMicrosoft Message QueuingMicrosoft OfficeMicrosoft Office AccessMicrosoft Office ExcelMicrosoft Office SharePointMicrosoft PowerShellMicrosoft Windows Codecs LibraryOffice Developer PlatformRemote Desktop ClientRole: Windows Fax Ser

:)

 

Microsoft January 2021 Security Updates

January 2021 Security Updates




The January 2021 security release consists of security updates for the following software:

• Microsoft Windows
• Microsoft Edge (EdgeHTML-based)
• Microsoft Office and Microsoft Office Services and Web Apps
• Microsoft Windows Codecs Library
• Visual Studio
• SQL Server
• Microsoft Malware Protection Engine
• .NET Core
• .NET Repository
• ASP .NET
• Azure

Please note the following information regarding the security updates:

• CVE-2020-0689 has been re-released. For further information see Security update for Secure Boot DBX: January 12, 2021.
• For information regarding enabling Windows 10, version 1909 features, please see Windows 10, version 1909 delivery options. Note that Windows 10, versions 1903 and 1909 share a common core operating system with an identical set of system files. They will also share the same security update KBs.
• Windows 10 updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows 10, in addition to non-security updates. The updates are available via the Microsoft Update Catalog.
• For information on lifecycle and support dates for Windows 10 operating systems, please see Windows Lifecycle Facts Sheet.
• A list of the latest servicing stack updates for each operating system can be found in ADV990001. This list will be updated whenever a new servicing stack update is released. It is important to install the latest servicing stack update.
• Updates for Windows RT 8.1 and Microsoft Office RT software are only available via Windows Update.
• In addition to security changes for the vulnerabilities, updates include defense-in-depth updates to help improve security-related features.
• Customers running Windows 7, Windows Server 2008 R2, or Windows Server 2008 need to purchase the Extended Security Update to continue receiving security updates. See 4522133 for more information.

The following CVEs have FAQs with additional information. Please note that this is not a complete list of CVEs for this release.

• CVE-2020-26870
• CVE-2021-1636
• CVE-2021-1637
• CVE-2021-1643
• CVE-2021-1644
• CVE-2021-1645
• CVE-2021-1647
• CVE-2021-1648
• CVE-2021-1656
• CVE-2021-1663
• CVE-2021-1669
• CVE-2021-1670
• CVE-2021-1672
• CVE-2021-1676
• CVE-2021-1677
• CVE-2021-1694
• CVE-2021-1696
• CVE-2021-1699
• CVE-2021-1707
• CVE-2021-1708
• CVE-2021-1711
• CVE-2021-1713
• CVE-2021-1714
• CVE-2021-1715
• CVE-2021-1716
• CVE-2021-1725

Known Issues


The following KBs contain information about known issues with the security updates. For a complete list of security update KBs, please see 20210112. For more information about Windows Known Issues, please see Windows message center (links to currently-supported versions of Windows are in the left pane).


KB Article Applies To
4598229 Windows 10, Version 1903, Windows Server, Version 1903, Windows 10, Version 1909, Windows Server, Version 1909
4598230 Windows 10, Version 1809, Windows Server 2019
4598242 Windows 10, Version 2004, Windows Server, Version 2004, Windows 10, Version 20H2, Windows Server, Version 20H2
4598275 Windows 8.1, Windows Server 2012 R2 (Security-only update)
4598278 Windows Server 2012 (Monthly Rollup)
4598279 Windows 7, Windows Server 2008 R2 (Monthly Rollup)
4598285 Windows 8.1, Windows Server 2012 R2 (Monthly Rollup)
4598287 Windows Server 2008 (Security-only update)
4598288 Windows Server 2008 (Monthly Rollup)
4598289 Windows 7, Windows Server 2008 R2 (Security-only update)
4598297 Windows Server 2012 (Security-only update)


January 2021 Security Updates - Release Notes - Security Update Guide - Microsoft

 

Microsoft August 2021 Security Updates

August 2021 Security Updates

Updates this Month


This release consists of security updates for the following products, features and roles.

• .NET Core & Visual Studio
• ASP .NET
• Azure
• Azure Sphere
• Microsoft Azure Active Directory Connect
• Microsoft Dynamics
• Microsoft Graphics Component
• Microsoft Office
• Microsoft Office SharePoint
• Microsoft Office Word
• Microsoft Scripting Engine
• Microsoft Windows Codecs Library
• Remote Desktop Client
• Windows Bluetooth Service
• Windows Cryptographic Services
• Windows Defender
• Windows Event Tracing
• Windows Media
• Windows MSHTML Platform
• Windows NTLM
• Windows Print Spooler Components
• Windows Services for NFS ONCRPC XDR Driver
• Windows Storage Spaces Controller
• Windows TCP/IP
• Windows Update
• Windows Update Assistant
• Windows User Profile Service

Please note the following information regarding the security updates:


Security Update Guide Blog Posts
Date Blog Post
February 9, 2021 Continuing to Listen: Good News about the Security Update Guide API
January 13, 2021 Security Update Guide Supports CVEs Assigned by Industry Partners
December 8, 2020 Security Update Guide: Let’s keep the conversation going
November 9, 2020 Vulnerability Descriptions in the New Version of the Security Update Guide
Relevant Information

• Windows 10 updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows 10, in addition to non-security updates. The updates are available via the Microsoft Update Catalog. For information on lifecycle and support dates for Windows 10 operating systems, please see Windows Lifecycle Facts Sheet.
• Microsoft is improving Windows Release Notes. For more information, please see What's next for Windows release notes.
• A list of the latest servicing stack updates for each operating system can be found in ADV990001. This list will be updated whenever a new servicing stack update is released. It is important to install the latest servicing stack update.
• In addition to security changes for the vulnerabilities, updates include defense-in-depth updates to help improve security-related features.
• Customers running Windows 7, Windows Server 2008 R2, or Windows Server 2008 need to purchase the Extended Security Update to continue receiving security updates. See 4522133 for more information.

FAQs, Mitigations, and Workarounds
The following CVEs have FAQs, Mitigations, or Workarounds. You can see these in more detail from the Vulnerabilities tab by selecting FAQs, Mitigations and Workarounds columns in the Edit Columns panel.

• CVE-2021-26428
• CVE-2021-26429
• CVE-2021-26430
• CVE-2021-26433
• CVE-2021-34478
• CVE-2021-34485
• CVE-2021-34532
• CVE-2021-36926
• CVE-2021-36932
• CVE-2021-36933
• CVE-2021-36938
• CVE-2021-36941
• CVE-2021-36949

Known Issues
You can see these in more detail from the Deployments tab by selecting Known Issues column in the Edit Columns panel.


For more information about Windows Known Issues, please see Windows message center (links to currently-supported versions of Windows are in the left pane).


KB Article Applies To
5005030 Windows 10, Version 1809, Windows Server 2019
5005031 Windows 10, Version 1909
5005033 Windows 10, Version 2004, Windows Server, Version 2004, Windows 10, Version 20H2, Windows Server, Version 20H2, Windows 10, Version 21H1
5005040 Windows 10
5005076 Windows 8.1, Windows RT 8.1, Windows Server 2012 R2 (Monthly Rollup)
5005088 Windows 7 SP1, Windows Server 2008 R2 SP1 (Monthly Rollup)
5005089 Windows 7 SP1, Windows Server 2008 R2 SP1 (Security-only update)
5005090 Windows Server 2008 SP2 (Monthly Rollup)
5005094 Windows Server 2012 (Security-only update)
5005095 Windows Server 2008 SP2 (Security-only update)
5005099 Windows Server 2012 (Monthly Rollup)
5005106 Windows 8.1, Windows RT 8.1, Windows Server 2012 R2 (Security-only update)

Released: Aug 10, 2021
August 2021 Security Updates - Release Notes - Security Update Guide - Microsoft

 

Microsoft June 2021 Security Updates

June 2021 Security Updates


Updates this Month


This release consists of security updates for the following products, features and roles.

• .NET Core & Visual Studio
• 3D Viewer
• Microsoft DWM Core Library
• Microsoft Intune
• Microsoft Office
• Microsoft Office Excel
• Microsoft Office Outlook
• Microsoft Office SharePoint
• Microsoft Scripting Engine
• Microsoft Windows Codecs Library
• Paint 3D
• Role: Hyper-V
• Visual Studio Code - Kubernetes Tools
• Windows Bind Filter Driver
• Windows Common Log File System Driver
• Windows Cryptographic Services
• Windows DCOM Server
• Windows Defender
• Windows Drivers
• Windows Event Logging Service
• Windows Filter Manager
• Windows HTML Platform
• Windows Installer
• Windows Kerberos
• Windows Kernel
• Windows Kernel-Mode Drivers
• Windows Network File System
• Windows NTFS
• Windows NTLM
• Windows Print Spooler Components
• Windows Remote Desktop
• Windows TCP/IP

Please note the following information regarding the security updates:


Security Update Guide Blog Posts
Date Blog Post
February 9, 2021 Continuing to Listen: Good News about the Security Update Guide API
January 13, 2021 Security Update Guide Supports CVEs Assigned by Industry Partners
December 8, 2020 Security Update Guide: Let’s keep the conversation going
November 9, 2020 Vulnerability Descriptions in the New Version of the Security Update Guide
Relevant Information

• Windows 10 updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows 10, in addition to non-security updates. The updates are available via the Microsoft Update Catalog. For information on lifecycle and support dates for Windows 10 operating systems, please see Windows Lifecycle Facts Sheet.
• Microsoft is improving Windows Release Notes. For more information, please see What's next for Windows release notes.
• A list of the latest servicing stack updates for each operating system can be found in ADV990001. This list will be updated whenever a new servicing stack update is released. It is important to install the latest servicing stack update.
• In addition to security changes for the vulnerabilities, updates include defense-in-depth updates to help improve security-related features.
• Customers running Windows 7, Windows Server 2008 R2, or Windows Server 2008 need to purchase the Extended Security Update to continue receiving security updates. See 4522133 for more information.

FAQs, Mitigations, and Workarounds
The following CVEs have FAQs, Mitigations, or Workarounds. You can see these in more detail from the Vulnerabilities tab by selecting FAQs, Mitigations and Workarounds columns in the Edit Columns panel.

• CVE-2021-26414
• CVE-2021-31199
• CVE-2021-31201
• CVE-2021-31938
• CVE-2021-31939
• CVE-2021-31940
• CVE-2021-31941
• CVE-2021-31942
• CVE-2021-31943
• CVE-2021-31944
• CVE-2021-31945
• CVE-2021-31946
• CVE-2021-31949
• CVE-2021-31955
• CVE-2021-31956
• CVE-2021-31958
• CVE-2021-31959
• CVE-2021-31960
• CVE-2021-31962
• CVE-2021-31965
• CVE-2021-31967
• CVE-2021-31971
• CVE-2021-31972
• CVE-2021-31975
• CVE-2021-31976
• CVE-2021-31977
• CVE-2021-31978
• CVE-2021-31980
• CVE-2021-31983
• CVE-2021-31985
• CVE-2021-33739
• CVE-2021-33741
• CVE-2021-33742

Known Issues
You can see these in more detail from the Deployments tab by selecting Known Issues column in the Edit Columns panel.


For more information about Windows Known Issues, please see Windows message center (links to currently-supported versions of Windows are in the left pane).


KB Article Applies To
5001944 SharePoint Server 2019
5001946 SharePoint Enterprise Server 2016
5001962 SharePoint Foundation 2013
5003635 Windows 10, Version 1909
5003637 Windows 10, version 21H1, Windows 10, Version 2004, Windows Server, Version 2004, Windows 10, Version 20H2, Windows Server, Version 20H2
5003646 Windows 10, Version 1809, Windows Server 2019
5003661 Windows Server 2008 Service Pack 2 ((Monthly Rollup)
5003667 Windows 7 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Monthly Rollup)
5003671 Windows 8.1, Windows Server 2012 R2 (Monthly Rollup)
5003681 Windows 8.1, Windows Server 2012 R2 (Security-only update)
5003694 Windows 7 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Security-only update)
5003695 Windows Server 2008 Service Pack 2 (Security-only update)
5003696 Windows Server 2012 (Security-only update)
5003697 Windows Server 2012 (Monthly Rollup)


June 2021 Security Updates - Release Notes - Security Update Guide - Microsoft