Windows 10: Microsoft Windows Security Updates December 2021 overview

Microsoft released security updates for all supported versions of the Windows operating system and other company products, such as Microsoft Office, on the December 14, 2021 Patch Day.



Updates are already available via Windows Update, WSUS and other update management solutions, and as direct downloads from the Microsoft Update Catalog.

Our guide links to all released support pages for the December 2021 security updates for Windows. It includes information about critical updates (with links), lists known issues, includes direct download links and lists other updates released on the December 2021 Patch Tuesday.

The Microsoft Windows Security Updates: October 2021


The following Excel spreadsheet lists all security updates for Windows that Microsoft released on the December 2021 Patch Day. Download it with a click on the following link: microsoft-windows-security-updates-december-2021

Executive Summary

• Microsoft released security updates for all supported versions of Windows
• Other Microsoft products with security updates include: Remote Desktop Client, Microsoft Defender for IoT, Azure Bot Framework SDK, Microsoft Office, Visual Studio Code, Microsoft PowerShell, Office Developer Platform.
• Microsoft fixed six 0-day security vulnerabilities in its products.
• The following products have known issues:
  • Client: Windows 10 version 1607, 1809, 2004, 20H2, 21H1, Windows 8.1, Windows 7
  • Server: Server 2008, 2008 R2, 2012, 2012 R2, 2016, 2019, 2022

Operating System Distribution

• Windows 7 (extended support only): 19 vulnerabilities: 3 critical and 16 important
  • Remote Desktop Client Remote Code Execution Vulnerability -- CVE-2021-43233
  • Windows Encrypting File System (EFS) Remote Code Execution Vulnerability -- CVE-2021-43217
  • iSNS Server Memory Corruption Vulnerability Can Lead to Remote Code Execution -- CVE-2021-43215
• Windows 8.1: 21 vulnerabilities: 3 critical and 18 important
  • Same as Windows 7.
• Windows 10 version 1909: 29 vulnerabilities: 3 critical and 26 important
  • Same as Windows 7.
• Windows 10 version 2004, 20H2, 21H1 and 21H2 : 30 vulnerabilities, 3 critical and 27 important
  • Same as Windows 7.
• Windows 11: 28 vulnerabilities, 2 critical and 26 important
  • Remote Desktop Client Remote Code Execution Vulnerability -- CVE-2021-43233
  • Windows Encrypting File System (EFS) Remote Code Execution Vulnerability -- CVE-2021-43217

Windows Server products

• Windows Server 2008 R2 (extended support only): 18 vulnerabilities: 3 critical and 15 important
  • Remote Desktop Client Remote Code Execution Vulnerability -- CVE-2021-43233
  • Windows Encrypting File System (EFS) Remote Code Execution Vulnerability -- CVE-2021-43217
  • iSNS Server Memory Corruption Vulnerability Can Lead to Remote Code Execution -- CVE-2021-43215
• Windows Server 2012 R2: 21 vulnerabilities: 3 critical and 18 important
  • same as Windows Server 2008 R2.
• Windows Server 2016: 22 vulnerabilities: 3 critical and 19 important
  • same as Windows Server 2008 R2.
• Windows Server 2019: 27 vulnerabilities: 3 critical and 24 important
  • same as Windows Server 2008 R2.
• Windows Server 2022: 29 vulnerabilities: 2 critical and 27 important
  • Remote Desktop Client Remote Code Execution Vulnerability -- CVE-2021-43233
  • Windows Encrypting File System (EFS) Remote Code Execution Vulnerability -- CVE-2021-43217

Windows Security Updates


Windows 7 SP1 and Windows Server 2008 R2

• Monthly Rollup: KB5008244
• Security-Only: KB5008282

Updates and improvements:

• Fixes the error codes 0x000006e4, 0x0000007c, or 0x00000709 caused by connecting to a remote printer that is shared on a Windows print server.
• Fixes a compatibility issue with some apps, including Kaspersky apps, that could prevent the apps from opening after attempts were made to update the affected app or repair it using Microsoft Installer.
• Cancellation of Daylight savings time for 2021 for the Republic of Fiji.
• Security updates.

Windows 8.1 and Windows Server 2012 R2

• Monthly Rollup: KB5008263
• Security-only: KB5008285

Updates and improvements:

• Same as Windows 7

Windows 10 version 1909

• Support Page: KB5008206

Updates and improvements:

• Same as Windows 7, plus
• Fixes an unnamed issue in Internet Explorer that occurs when a dialog opens.
• Fixes a variable font issue that rendered them incorrectly.

Windows 10 version 2004, 20H2, 21H1 and 21H2

• Support Page: KB5008212

Updates and improvements:

• Security updates
• Check the November 2021 Preview Update for fixes.

Windows 11

• Support Page: KB5008215

Updates and improvements:

• Security updates
• Check the November 2021 Preview Update for fixes.

Other security updates

2021-12 Security Only Quality Update for Windows Server 2008 (KB5008271)

2021-12 Security Monthly Quality Rollup for Windows Server 2008 (KB5008274)

2021-12 Security Only Quality Update for Windows Embedded 8 Standard and Windows Server 2012 (KB5008255)

2021-12 Security Monthly Quality Rollup for Windows Embedded 8 Standard and Windows Server 2012 (KB5008277)

2021-12 Cumulative Update for Windows 10 Version 1607 (KB5008207)

2021-12 Dynamic Cumulative Update for Windows Server, version 20H2, Windows 10 Version 20H2, Windows 10 Version 2004, Windows 10 Version 1909, Windows 10 Version 1903, Windows 10 Version 1809, and Windows 10 Version 1607 (KB5008212)

2021-12 Cumulative Update for Windows Server 2019 and Windows 10 Version 1809 (KB5008218)

2021-12 Cumulative Update for Microsoft server operating system version 21H2 for x64-based Systems (KB5008223)

Known Issues


Windows 7 SP1 and Windows Server 2008 R2

• Updates may show as failed and may be uninstalled because the machine is not on ESU.
  • Expected behavior.
• Certain operations such as rename may fail on Cluster Shared Volumes.
  • Perform the operation from a process with administrator privileges.
  • Perform the operation from a node that does not have CSV ownership.

Windows 8.1 and Server 2012 R2

• Certain operations such as rename may fail on Cluster Shared Volumes.
  • Perform the operation from a process with administrator privileges.
  • Perform the operation from a node that does not have CSV ownership.

Windows 10 versions 2004, 20H2, 21H1 and 21H2

• Custom installations may not receive the new Microsoft Edge web browser, while the old version may be removed.
  • Workaround described on the support page.
• Some devices can't install updates after installation of KB5003690 (June 21, 2021). Error PSFX_E_MATCHING_BINARY_MISSING is displayed.
  • Workaround instructions are available here.
• Connections may fail to authentication when using smart card authentication in Remote Desktop Connections.
  • Resolved according to Microsoft, should not be experienced anymore.

Security advisories and updates


ADV 990001 -- Latest Servicing Stack Updates

Non-security updates


2021-12 Dynamic Update for Microsoft server operating system for x64-based Systems (KB5009340)

Microsoft Office Updates

You find Office update information here.

How to download and install the December 2021 security updates




Home PCs and devices get updates automatically via Windows Update. Organizations may use update management solutions such as WSUS to distribute updates.

Windows administrators may run manual checks for updates to install the updates earlier. Another option is to download updates manually to install them this way.

Here is how you may check for updates manually:

1. Select Start, type Windows Update and load the Windows Update item that is displayed.
2. Select check for updates to run a manual check for updates.

Direct update downloads


Below are resource pages with direct download links, if you prefer to download the updates to install them manually.

Windows 7 and Server 2008 R2

• KB5008244 -- 2021-12 Security Monthly Quality Rollup for Windows 7
• KB5008282 -- 2021-12 Security Only Quality Update for Windows 7

Windows 8.1 and Windows Server 2012 R2

• KB5008263 -- 2021-12 Security Monthly Quality Rollup for Windows 8.1
• KB5008285 -- 2021-12 Security Only Quality Update for Windows 8.1

Windows 10 (version 1909)

• KB5008206 -- 2021-12 Cumulative Update for Windows 10 Version 1909

Windows 10 (version 2004)

• KB5008212 -- 2021-12 Cumulative Update for Windows 10 Version 2004

Windows 10 (version 20H2)

• KB5008212 -- 2021-12 Cumulative Update for Windows 10 Version 20H2

Windows 10 (version 21H1)

• KB5008212 -- 2021-12 Cumulative Update for Windows 10 Version 21H1

Windows 10 (version 21H2)

• KB5008212 -- 2021-12 Cumulative Update for Windows 10 Version 21H2

Windows 11

• KB5008215 -- 2021-12 Cumulative Update for Windows 11

Additional resources

• December 2021 Security Updates release notes
• List of software updates for Microsoft products
• List of the latest Windows Updates and Services Packs
• Security Updates Guide
• Microsoft Update Catalog site
• Our in-depth Windows update guide
• How to install optional updates on Windows 10
• Windows 11 Update History
• Windows 10 Update History
• Windows 8.1 Update History
• Windows 7 Update History

Thank you for being a Ghacks reader. The post Microsoft Windows Security Updates December 2021 overview appeared first on gHacks Technology News.

read more...

 

Microsoft January 2021 Security Updates

January 2021 Security Updates




The January 2021 security release consists of security updates for the following software:

• Microsoft Windows
• Microsoft Edge (EdgeHTML-based)
• Microsoft Office and Microsoft Office Services and Web Apps
• Microsoft Windows Codecs Library
• Visual Studio
• SQL Server
• Microsoft Malware Protection Engine
• .NET Core
• .NET Repository
• ASP .NET
• Azure

Please note the following information regarding the security updates:

• CVE-2020-0689 has been re-released. For further information see Security update for Secure Boot DBX: January 12, 2021.
• For information regarding enabling Windows 10, version 1909 features, please see Windows 10, version 1909 delivery options. Note that Windows 10, versions 1903 and 1909 share a common core operating system with an identical set of system files. They will also share the same security update KBs.
• Windows 10 updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows 10, in addition to non-security updates. The updates are available via the Microsoft Update Catalog.
• For information on lifecycle and support dates for Windows 10 operating systems, please see Windows Lifecycle Facts Sheet.
• A list of the latest servicing stack updates for each operating system can be found in ADV990001. This list will be updated whenever a new servicing stack update is released. It is important to install the latest servicing stack update.
• Updates for Windows RT 8.1 and Microsoft Office RT software are only available via Windows Update.
• In addition to security changes for the vulnerabilities, updates include defense-in-depth updates to help improve security-related features.
• Customers running Windows 7, Windows Server 2008 R2, or Windows Server 2008 need to purchase the Extended Security Update to continue receiving security updates. See 4522133 for more information.

The following CVEs have FAQs with additional information. Please note that this is not a complete list of CVEs for this release.

• CVE-2020-26870
• CVE-2021-1636
• CVE-2021-1637
• CVE-2021-1643
• CVE-2021-1644
• CVE-2021-1645
• CVE-2021-1647
• CVE-2021-1648
• CVE-2021-1656
• CVE-2021-1663
• CVE-2021-1669
• CVE-2021-1670
• CVE-2021-1672
• CVE-2021-1676
• CVE-2021-1677
• CVE-2021-1694
• CVE-2021-1696
• CVE-2021-1699
• CVE-2021-1707
• CVE-2021-1708
• CVE-2021-1711
• CVE-2021-1713
• CVE-2021-1714
• CVE-2021-1715
• CVE-2021-1716
• CVE-2021-1725

Known Issues


The following KBs contain information about known issues with the security updates. For a complete list of security update KBs, please see 20210112. For more information about Windows Known Issues, please see Windows message center (links to currently-supported versions of Windows are in the left pane).


KB Article Applies To
4598229 Windows 10, Version 1903, Windows Server, Version 1903, Windows 10, Version 1909, Windows Server, Version 1909
4598230 Windows 10, Version 1809, Windows Server 2019
4598242 Windows 10, Version 2004, Windows Server, Version 2004, Windows 10, Version 20H2, Windows Server, Version 20H2
4598275 Windows 8.1, Windows Server 2012 R2 (Security-only update)
4598278 Windows Server 2012 (Monthly Rollup)
4598279 Windows 7, Windows Server 2008 R2 (Monthly Rollup)
4598285 Windows 8.1, Windows Server 2012 R2 (Monthly Rollup)
4598287 Windows Server 2008 (Security-only update)
4598288 Windows Server 2008 (Monthly Rollup)
4598289 Windows 7, Windows Server 2008 R2 (Security-only update)
4598297 Windows Server 2012 (Security-only update)


January 2021 Security Updates - Release Notes - Security Update Guide - Microsoft

 

Microsoft August 2021 Security Updates

August 2021 Security Updates

Updates this Month


This release consists of security updates for the following products, features and roles.

• .NET Core & Visual Studio
• ASP .NET
• Azure
• Azure Sphere
• Microsoft Azure Active Directory Connect
• Microsoft Dynamics
• Microsoft Graphics Component
• Microsoft Office
• Microsoft Office SharePoint
• Microsoft Office Word
• Microsoft Scripting Engine
• Microsoft Windows Codecs Library
• Remote Desktop Client
• Windows Bluetooth Service
• Windows Cryptographic Services
• Windows Defender
• Windows Event Tracing
• Windows Media
• Windows MSHTML Platform
• Windows NTLM
• Windows Print Spooler Components
• Windows Services for NFS ONCRPC XDR Driver
• Windows Storage Spaces Controller
• Windows TCP/IP
• Windows Update
• Windows Update Assistant
• Windows User Profile Service

Please note the following information regarding the security updates:


Security Update Guide Blog Posts
Date Blog Post
February 9, 2021 Continuing to Listen: Good News about the Security Update Guide API
January 13, 2021 Security Update Guide Supports CVEs Assigned by Industry Partners
December 8, 2020 Security Update Guide: Let’s keep the conversation going
November 9, 2020 Vulnerability Descriptions in the New Version of the Security Update Guide
Relevant Information

• Windows 10 updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows 10, in addition to non-security updates. The updates are available via the Microsoft Update Catalog. For information on lifecycle and support dates for Windows 10 operating systems, please see Windows Lifecycle Facts Sheet.
• Microsoft is improving Windows Release Notes. For more information, please see What's next for Windows release notes.
• A list of the latest servicing stack updates for each operating system can be found in ADV990001. This list will be updated whenever a new servicing stack update is released. It is important to install the latest servicing stack update.
• In addition to security changes for the vulnerabilities, updates include defense-in-depth updates to help improve security-related features.
• Customers running Windows 7, Windows Server 2008 R2, or Windows Server 2008 need to purchase the Extended Security Update to continue receiving security updates. See 4522133 for more information.

FAQs, Mitigations, and Workarounds
The following CVEs have FAQs, Mitigations, or Workarounds. You can see these in more detail from the Vulnerabilities tab by selecting FAQs, Mitigations and Workarounds columns in the Edit Columns panel.

• CVE-2021-26428
• CVE-2021-26429
• CVE-2021-26430
• CVE-2021-26433
• CVE-2021-34478
• CVE-2021-34485
• CVE-2021-34532
• CVE-2021-36926
• CVE-2021-36932
• CVE-2021-36933
• CVE-2021-36938
• CVE-2021-36941
• CVE-2021-36949

Known Issues
You can see these in more detail from the Deployments tab by selecting Known Issues column in the Edit Columns panel.


For more information about Windows Known Issues, please see Windows message center (links to currently-supported versions of Windows are in the left pane).


KB Article Applies To
5005030 Windows 10, Version 1809, Windows Server 2019
5005031 Windows 10, Version 1909
5005033 Windows 10, Version 2004, Windows Server, Version 2004, Windows 10, Version 20H2, Windows Server, Version 20H2, Windows 10, Version 21H1
5005040 Windows 10
5005076 Windows 8.1, Windows RT 8.1, Windows Server 2012 R2 (Monthly Rollup)
5005088 Windows 7 SP1, Windows Server 2008 R2 SP1 (Monthly Rollup)
5005089 Windows 7 SP1, Windows Server 2008 R2 SP1 (Security-only update)
5005090 Windows Server 2008 SP2 (Monthly Rollup)
5005094 Windows Server 2012 (Security-only update)
5005095 Windows Server 2008 SP2 (Security-only update)
5005099 Windows Server 2012 (Monthly Rollup)
5005106 Windows 8.1, Windows RT 8.1, Windows Server 2012 R2 (Security-only update)

Released: Aug 10, 2021
August 2021 Security Updates - Release Notes - Security Update Guide - Microsoft

 

Microsoft June 2021 Security Updates

June 2021 Security Updates


Updates this Month


This release consists of security updates for the following products, features and roles.

• .NET Core & Visual Studio
• 3D Viewer
• Microsoft DWM Core Library
• Microsoft Intune
• Microsoft Office
• Microsoft Office Excel
• Microsoft Office Outlook
• Microsoft Office SharePoint
• Microsoft Scripting Engine
• Microsoft Windows Codecs Library
• Paint 3D
• Role: Hyper-V
• Visual Studio Code - Kubernetes Tools
• Windows Bind Filter Driver
• Windows Common Log File System Driver
• Windows Cryptographic Services
• Windows DCOM Server
• Windows Defender
• Windows Drivers
• Windows Event Logging Service
• Windows Filter Manager
• Windows HTML Platform
• Windows Installer
• Windows Kerberos
• Windows Kernel
• Windows Kernel-Mode Drivers
• Windows Network File System
• Windows NTFS
• Windows NTLM
• Windows Print Spooler Components
• Windows Remote Desktop
• Windows TCP/IP

Please note the following information regarding the security updates:


Security Update Guide Blog Posts
Date Blog Post
February 9, 2021 Continuing to Listen: Good News about the Security Update Guide API
January 13, 2021 Security Update Guide Supports CVEs Assigned by Industry Partners
December 8, 2020 Security Update Guide: Let’s keep the conversation going
November 9, 2020 Vulnerability Descriptions in the New Version of the Security Update Guide
Relevant Information

• Windows 10 updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows 10, in addition to non-security updates. The updates are available via the Microsoft Update Catalog. For information on lifecycle and support dates for Windows 10 operating systems, please see Windows Lifecycle Facts Sheet.
• Microsoft is improving Windows Release Notes. For more information, please see What's next for Windows release notes.
• A list of the latest servicing stack updates for each operating system can be found in ADV990001. This list will be updated whenever a new servicing stack update is released. It is important to install the latest servicing stack update.
• In addition to security changes for the vulnerabilities, updates include defense-in-depth updates to help improve security-related features.
• Customers running Windows 7, Windows Server 2008 R2, or Windows Server 2008 need to purchase the Extended Security Update to continue receiving security updates. See 4522133 for more information.

FAQs, Mitigations, and Workarounds
The following CVEs have FAQs, Mitigations, or Workarounds. You can see these in more detail from the Vulnerabilities tab by selecting FAQs, Mitigations and Workarounds columns in the Edit Columns panel.

• CVE-2021-26414
• CVE-2021-31199
• CVE-2021-31201
• CVE-2021-31938
• CVE-2021-31939
• CVE-2021-31940
• CVE-2021-31941
• CVE-2021-31942
• CVE-2021-31943
• CVE-2021-31944
• CVE-2021-31945
• CVE-2021-31946
• CVE-2021-31949
• CVE-2021-31955
• CVE-2021-31956
• CVE-2021-31958
• CVE-2021-31959
• CVE-2021-31960
• CVE-2021-31962
• CVE-2021-31965
• CVE-2021-31967
• CVE-2021-31971
• CVE-2021-31972
• CVE-2021-31975
• CVE-2021-31976
• CVE-2021-31977
• CVE-2021-31978
• CVE-2021-31980
• CVE-2021-31983
• CVE-2021-31985
• CVE-2021-33739
• CVE-2021-33741
• CVE-2021-33742

Known Issues
You can see these in more detail from the Deployments tab by selecting Known Issues column in the Edit Columns panel.


For more information about Windows Known Issues, please see Windows message center (links to currently-supported versions of Windows are in the left pane).


KB Article Applies To
5001944 SharePoint Server 2019
5001946 SharePoint Enterprise Server 2016
5001962 SharePoint Foundation 2013
5003635 Windows 10, Version 1909
5003637 Windows 10, version 21H1, Windows 10, Version 2004, Windows Server, Version 2004, Windows 10, Version 20H2, Windows Server, Version 20H2
5003646 Windows 10, Version 1809, Windows Server 2019
5003661 Windows Server 2008 Service Pack 2 ((Monthly Rollup)
5003667 Windows 7 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Monthly Rollup)
5003671 Windows 8.1, Windows Server 2012 R2 (Monthly Rollup)
5003681 Windows 8.1, Windows Server 2012 R2 (Security-only update)
5003694 Windows 7 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Security-only update)
5003695 Windows Server 2008 Service Pack 2 (Security-only update)
5003696 Windows Server 2012 (Security-only update)
5003697 Windows Server 2012 (Monthly Rollup)


June 2021 Security Updates - Release Notes - Security Update Guide - Microsoft