Windows 10: Microsoft Windows Security Updates February 2021 overview

Microsoft released security updates for all supported versions of the company's Windows operating system on the February 2021 patch day. Updates have been released for other company products such as Microsoft Office as well.

Our guide provides system administrators and home users with information on the released updates. It provides details on the released updates, links to official support articles, as well as information about known issues and download options.

Click here to open the January 2021 Patch overview if you missed it or want to revisit it.

The Microsoft Windows Security Updates February 2021


Download the following Excel spreadsheet that lists the released security updates for Microsoft's Windows operating system and other company products. Click on the following link to start the download:

Executive Summary

• Microsoft released security updates for all supported client and server Windows products.
• Microsoft released security updates for many other company products as well including Microsoft Office, Visual Studio, SysInternals, Skype for Business, DirectX, PowerShell, or Azure IoT.
• The legacy version of Microsoft Edge will run out of support after next month's Patch Tuesday. It will be replaced by the Chromium-based Edge browser.

Operating System Distribution

• Windows 7 (extended support only): 5 vulnerabilities: 2 critical and 3 important
  • CVE-2021-1722 -- Windows Fax Service Remote Code Execution Vulnerability
  • CVE-2021-24094 -- Windows TCP/IP Remote Code Execution Vulnerability
• Windows 8.1: 6 vulnerabilities: 2 rated critical and 4 rated important
  • CVE-2021-1722 -- Windows Fax Service Remote Code Execution Vulnerability
  • CVE-2021-24094 -- Windows TCP/IP Remote Code Execution Vulnerability
• Windows 10 version 1809: 11 vulnerabilities: 2 critical and 11 important
  • CVE-2021-1722 -- Windows Fax Service Remote Code Execution Vulnerability
  • CVE-2021-24081 -- Microsoft Windows Codecs Library Remote Code Execution Vulnerability
• Windows 10 version 1903 and 1909: 10 vulnerabilities: 3 critical and 7 important
  • CVE-2021-24081 -- Microsoft Windows Codecs Library Remote Code Execution Vulnerability
  • CVE-2021-1722 -- Windows Fax Service Remote Code Execution Vulnerability
  • CVE-2021-24094 -- Windows TCP/IP Remote Code Execution Vulnerability
• Windows 10 version 2004 and 20H2: 12 vulnerabilities, 2 critical, 10 important
  • CVE-2021-1722 -- Windows Fax Service Remote Code Execution Vulnerability
  • CVE-2021-24081 -- Microsoft Windows Codecs Library Remote Code Execution Vulnerability

Windows Server products

• Windows Server 2008 R2 (extended support only): 5 vulnerabilities: 2 critical and 3 important
  • CVE-2021-1722 -- Windows Fax Service Remote Code Execution Vulnerability
  • CVE-2021-24094 -- Windows TCP/IP Remote Code Execution Vulnerability
• Windows Server 2012 R2: 6 vulnerabilities: 2 critical and 4 important
  • CVE-2021-1722 -- Windows Fax Service Remote Code Execution Vulnerability
  • CVE-2021-24094 -- Windows TCP/IP Remote Code Execution Vulnerability
• Windows Server 2016: 9 vulnerabilities: 3 critical and 6 important.
  • CVE-2021-24081 -- Microsoft Windows Codecs Library Remote Code Execution Vulnerability
  • CVE-2021-1722 -- Windows Fax Service Remote Code Execution Vulnerability
  • CVE-2021-24094 -- Windows TCP/IP Remote Code Execution Vulnerability
• Windows Server 2019: 11 vulnerabilities: 3 critical and 8 important.
  • CVE-2021-24081 -- Microsoft Windows Codecs Library Remote Code Execution Vulnerability
  • CVE-2021-1722 -- Windows Fax Service Remote Code Execution Vulnerability
  • CVE-2021-24094 -- Windows TCP/IP Remote Code Execution Vulnerability

Windows Security Updates


Microsoft has not released the support articles yet. Will update once they become available.

Windows 7 SP1 and Windows Server 2008 R2

• Monthly Rollup:
• Security-only:

Updates and improvements:

Windows 8.1 and Windows Server 2012 R2

• Monthly Rollup:
• Security-only:

Updates and improvements:

Windows 10 version 1809

• Support Page:

Updates and improvements:

Windows 10 version 1903 and 1909

• Support Page:

Updates and improvements:

Windows 10 version 2004 and 20H2

• Support Page:

Updates and improvements:

Other security updates

Known Issues

Security advisories and updates


ADV 990001 -- Latest Servicing Stack Updates

Non-security related updates

Microsoft Office Updates


You find Office update information here.

How to download and install the February 2021 security updates




Most home devices running Windows will receive the security updates automatically thanks to the built-in automatic updating functionality of the operating system. Updates are also provided as direct downloads and via management systems such as WSUS.

Note: we recommend that you back up the system and important date before the installation of updates. Windows' own recovery functionality is not 100% reliable and it is always better to have an independent backup that you can restore should things turn out wrong during or after the installation of updates.

To run a manual update check, do the following:

1. Select Start, type Windows Update and load the Windows Update item that is displayed.
2. Select check for updates to run a manual check for updates.

Direct update downloads


Below are resource pages with direct download links, if you prefer to download the updates to install them manually.

Windows 7 and Server 2008 R2

• -- 2021-02 Security Monthly Quality Rollup for Windows 7
• -- 2021-02 Security Only Quality Update for Windows 7

Windows 8.1 and Windows Server 2012 R2

• -- 2021-02 Security Monthly Quality Rollup for Windows 8.1
• -- 2021-02 Security Only Quality Update for Windows 8.1

Windows 10 (version 1809)

• -- 2021-02 Cumulative Update for Windows 10 Version 1809

Windows 10 (version 1903)

• -- 2021-02 Cumulative Update for Windows 10 Version 1903

Windows 10 (version 1909)

• -- 2021-02 Cumulative Update for Windows 10 Version 1909

Windows 10 (version 2004)

• -- 2021-02 Cumulative Update for Windows 10 Version 2004

Windows 10 (version 20H2)

• -- 2021-02 Cumulative Update for Windows 10 Version 20H2

Additional resources

• February 2021 Security Updates release notes
• List of software updates for Microsoft products
• List of the latest Windows Updates and Services Packs
• Security Updates Guide
• Microsoft Update Catalog site
• Our in-depth Windows update guide
• How to install optional updates on Windows 10
• Windows 10 Update History
• Windows 8.1 Update History
• Windows 7 Update History

Thank you for being a Ghacks reader. The post Microsoft Windows Security Updates February 2021 overview appeared first on gHacks Technology News.

read more...

 

Microsoft January 2021 Security Updates

January 2021 Security Updates




The January 2021 security release consists of security updates for the following software:

• Microsoft Windows
• Microsoft Edge (EdgeHTML-based)
• Microsoft Office and Microsoft Office Services and Web Apps
• Microsoft Windows Codecs Library
• Visual Studio
• SQL Server
• Microsoft Malware Protection Engine
• .NET Core
• .NET Repository
• ASP .NET
• Azure

Please note the following information regarding the security updates:

• CVE-2020-0689 has been re-released. For further information see Security update for Secure Boot DBX: January 12, 2021.
• For information regarding enabling Windows 10, version 1909 features, please see Windows 10, version 1909 delivery options. Note that Windows 10, versions 1903 and 1909 share a common core operating system with an identical set of system files. They will also share the same security update KBs.
• Windows 10 updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows 10, in addition to non-security updates. The updates are available via the Microsoft Update Catalog.
• For information on lifecycle and support dates for Windows 10 operating systems, please see Windows Lifecycle Facts Sheet.
• A list of the latest servicing stack updates for each operating system can be found in ADV990001. This list will be updated whenever a new servicing stack update is released. It is important to install the latest servicing stack update.
• Updates for Windows RT 8.1 and Microsoft Office RT software are only available via Windows Update.
• In addition to security changes for the vulnerabilities, updates include defense-in-depth updates to help improve security-related features.
• Customers running Windows 7, Windows Server 2008 R2, or Windows Server 2008 need to purchase the Extended Security Update to continue receiving security updates. See 4522133 for more information.

The following CVEs have FAQs with additional information. Please note that this is not a complete list of CVEs for this release.

• CVE-2020-26870
• CVE-2021-1636
• CVE-2021-1637
• CVE-2021-1643
• CVE-2021-1644
• CVE-2021-1645
• CVE-2021-1647
• CVE-2021-1648
• CVE-2021-1656
• CVE-2021-1663
• CVE-2021-1669
• CVE-2021-1670
• CVE-2021-1672
• CVE-2021-1676
• CVE-2021-1677
• CVE-2021-1694
• CVE-2021-1696
• CVE-2021-1699
• CVE-2021-1707
• CVE-2021-1708
• CVE-2021-1711
• CVE-2021-1713
• CVE-2021-1714
• CVE-2021-1715
• CVE-2021-1716
• CVE-2021-1725

Known Issues


The following KBs contain information about known issues with the security updates. For a complete list of security update KBs, please see 20210112. For more information about Windows Known Issues, please see Windows message center (links to currently-supported versions of Windows are in the left pane).


KB Article Applies To
4598229 Windows 10, Version 1903, Windows Server, Version 1903, Windows 10, Version 1909, Windows Server, Version 1909
4598230 Windows 10, Version 1809, Windows Server 2019
4598242 Windows 10, Version 2004, Windows Server, Version 2004, Windows 10, Version 20H2, Windows Server, Version 20H2
4598275 Windows 8.1, Windows Server 2012 R2 (Security-only update)
4598278 Windows Server 2012 (Monthly Rollup)
4598279 Windows 7, Windows Server 2008 R2 (Monthly Rollup)
4598285 Windows 8.1, Windows Server 2012 R2 (Monthly Rollup)
4598287 Windows Server 2008 (Security-only update)
4598288 Windows Server 2008 (Monthly Rollup)
4598289 Windows 7, Windows Server 2008 R2 (Security-only update)
4598297 Windows Server 2012 (Security-only update)


January 2021 Security Updates - Release Notes - Security Update Guide - Microsoft

 

Microsoft Security Bulletin for February 2008 Released

As promised Microsoft today rolled out 11 security updates that patch 17 vulnerabilities in Windows, Office, Internet Explorer, Internet Information Server (IIS) and several other components and technologies. That's Microsoft's biggest patch update in a year, with six of the 11 fixes ranked as "critical" and the other five ranked "important". Check the full Microsoft Security Bulletin summary for February 2008 here or start the Automatic Update feature.

Source: Microsoft

 

Microsoft February 2019 Security Updates

Release Notes
February 2019 Security Updates
Release Date: February 12, 2019

The February security release consists of security updates for the following software:


Adobe Flash Player
Internet Explorer
Microsoft Edge
Microsoft Windows
Microsoft Office and Microsoft Office Services and Web Apps
ChakraCore
.NET Framework
Microsoft Exchange Server
Microsoft Visual Studio
Azure IoT SDK
Microsoft Dynamics
Team Foundation Server
Visual Studio Code
Please note the following information regarding the security updates:


A list of the latest servicing stack updates for each operating system can be found in ADV990001. This list will be updated whenever a new servicing stack update is released. It is important to install the latest servicing stack update.
Windows 10 updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows 10, in addition to non-security updates. The updates are available via the Microsoft Update Catalog.
Updates for Windows RT 8.1 and Microsoft Office RT software are only available via Windows Update.
For information on lifecycle and support dates for Windows 10 operating systems, please see Windows Lifecycle Facts Sheet.
In addition to security changes for the vulnerabilities, updates include defense-in-depth updates to help improve security-related features.
The following CVEs have FAQs with additional information and may include * further steps to take after installing the updates.


ADV190003
ADV190007 *
ADV990001
CVE-2019-0540 *
CVE-2019-0600
CVE-2019-0601
CVE-2019-0602
CVE-2019-0615
CVE-2019-0616
CVE-2019-0619
CVE-2019-0621
CVE-2019-0628
CVE-2019-0635
CVE-2019-0636
CVE-2019-0643
CVE-2019-0648
CVE-2019-0658
CVE-2019-0660
CVE-2019-0661
CVE-2019-0664
CVE-2019-0669
CVE-2019-0676
CVE-2019-0686 *
CVE-2019-0724 *
CVE-2019-0741
Known Issues


4487026
4487020
4486996
4487017
4487044
4483452
4345836
4471392
4471391
4487052
https://portal.msrc.microsoft.com/en...3-000d3a33c573