Windows 10: Microsoft Windows Security Updates July 2021 overview

It is the second Tuesday of the month and that means it is Microsoft Patch Day. Microsoft released security and non-security updates for all supported client and server versions of its Windows operating system as well as for other company products such as Microsoft Office.

Our overview starts with an executive summary; the operating system distribution and list of critical security updates follow. Below that are the main cumulative updates for all client and server versions of Windows and the list of other security updates.

The list of known issues includes only those confirmed by Microsoft. You will also find links to security advisories and other, non-security updates, as well as download information and additional resource links on this page.

Here is the link to the June 2021 Patch Day overview in case you missed it.

The Microsoft Windows Security Updates: June 2021


Here is an Excel spreadsheet with the released security updates for client and server versions of Windows: Security Updates 2021-07-13-071231pm

Executive Summary

• Microsoft released security updates for all supported versions of its Windows operating system.
• Security updates are also available for Microsoft Office, Power BI and Visual Studio Code.
• The following products have known issues: Windows 7 SP1, Windows 8.1, Windows 10 version 1809, 2004, 20H2, 21H1, Windows Server 2008 R2, Windows Server 2012, Windows Server 2012 R2, Windows Server 2019, ,and Windows Server 2004 and 20H2, Microsoft Exchange Server 2013, 2016 and 2019

Operating System Distribution

• Windows 7 (extended support only): 30 vulnerabilities: 3 critical and 27 important
  • Windows Print Spooler Remote Code Execution Vulnerability -- CVE-2021-34527
  • Windows MSHTML Platform Remote Code Execution Vulnerability -- CVE-2021-34497
  • Scripting Engine Memory Corruption Vulnerability -- CVE-2021-34448
• Windows 8.1: 39 vulnerabilities: 3 critical and 36 important
  • same as Windows 7
• Windows 10 version 1903 and 1909: 67 vulnerabilities: 5 critical and 62 important
  • same as Windows 7, plus
  • Windows Hyper-V Remote Code Execution Vulnerability -- CVE-2021-34450
  • Microsoft Windows Media Foundation Remote Code Execution Vulnerability -- CVE-2021-34503
• Windows 10 version 2004, 20H2 and 21H1 : 68 vulnerabilities, 4 critical and 64 important
  • Windows Print Spooler Remote Code Execution Vulnerability -- CVE-2021-34527
  • Windows MSHTML Platform Remote Code Execution Vulnerability -- CVE-2021-34497
  • Windows Hyper-V Remote Code Execution Vulnerability -- CVE-2021-34450
  • Scripting Engine Memory Corruption Vulnerability -- CVE-2021-34448

Windows Server products

• Windows Server 2008 R2 (extended support only): 37 vulnerabilities: 1 critical and 11 important
  • Windows DNS Server Remote Code Execution Vulnerability -- CVE-2021-34494
  • Windows Print Spooler Remote Code Execution Vulnerability -- CVE-2021-34527
  • Windows MSHTML Platform Remote Code Execution Vulnerability -- CVE-2021-34497
• Windows Server 2012 R2: 50 vulnerabilities: 4 critical and 46 important
  • Scripting Engine Memory Corruption Vulnerability -- CVE-2021-34448
  • Windows MSHTML Platform Remote Code Execution Vulnerability -- CVE-2021-34497
  • Windows DNS Server Remote Code Execution Vulnerability -- CVE-2021-34494
  • Windows Print Spooler Remote Code Execution Vulnerability -- CVE-2021-34527
• Windows Server 2016: 60 vulnerabilities: 6 critical and 54 important.
  • same as Windows Server 2021 R2 plus
  • Windows Kernel Remote Code Execution Vulnerability -- CVE-2021-34458
  • Microsoft Windows Media Foundation Remote Code Execution Vulnerability -- CVE-2021-34439
• Windows Server 2019: 77 vulnerabilities: 2 critical and 22 important
  • Microsoft Windows Media Foundation Remote Code Execution Vulnerability -- CVE-2021-34439
  • Windows MSHTML Platform Remote Code Execution Vulnerability -- CVE-2021-34497
  • Windows DNS Server Remote Code Execution Vulnerability -- CVE-2021-34494
  • Windows Kernel Remote Code Execution Vulnerability -- CVE-2021-34458
  • Windows Hyper-V Remote Code Execution Vulnerability -- CVE-2021-34450
  • Scripting Engine Memory Corruption Vulnerability -- CVE-2021-34448
  • Windows Media Remote Code Execution Vulnerability -- CVE-2021-33740
  • Windows Print Spooler Remote Code Execution Vulnerability -- CVE-2021-34527

Windows Security Updates


Windows 7 SP1 and Windows Server 2008 R2

• Monthly Rollup: KB5004289
• Security-Only: KB5004307

Updates and improvements:

• Fixes an issue that is causing 16-bit applications to fail with error messages that indicate VBRUN300.DLL (Monthly-Rollup only)
• Fixed an EMF rendering issue caused by third-party applications using ExtCreatePen and ExtCreateFontIndirect. (Monthly-Rollup only)
• Advanced Encryption Standard (AES) encryption protections for CVE-2021-33757. See KB5004605.
• Removes support for the PerformTicketSignature setting and permanently enables Enforcement mode. See this support article for additional information.
• Security updates.

Windows 8.1 and Windows Server 2012 R2

• Monthly Rollup: KB5004298
• Security-only: KB5004285

Updates and improvements:

• Fixes an issue that is causing 16-bit applications to fail with error messages that indicate VBRUN300.DLL (Monthly-Rollup only)
• Fixed an EMF rendering issue caused by third-party applications using ExtCreatePen and ExtCreateFontIndirect. (Monthly-Rollup only)
• Advanced Encryption Standard (AES) encryption protections for CVE-2021-33757. See KB5004605.
• Removes support for the PerformTicketSignature setting and permanently enables Enforcement mode. See this support article for additional information.
• Security updates.

Windows 10 version 1909

• Support Page: KB5004245

Updates and improvements:

• Advanced Encryption Standard (AES) encryption protections for CVE-2021-33757. See KB5004605.
• Security updates

Windows 10 version 2004, 20H2 and 21H1

• Support Page: KB5004237

Updates and improvements:

• Fixed a printing issue that made printing to affected printers difficult. Affected receipt and label printers mostlz.
• Removes support for the PerformTicketSignature setting and permanently enables Enforcement mode. See this support article for additional information.
• Advanced Encryption Standard (AES) encryption protections for CVE-2021-33757. See KB5004605.
• Fixed a vulnerability that caused Primary Refresh Tokens to be encrypted weakly.
• Security updates

Other security updates

2021-07 Cumulative Security Update for Internet Explorer (KB5004233)

2021-07 Security Monthly Quality Rollup for Windows Server 2008 (KB5004305)

2021-07 Security Only Quality Update for Windows Server 2008 (KB5004299)

2021-07 Security Monthly Quality Rollup for Windows Embedded 8 Standard and Windows Server 2012 (KB5004294)

2021-07 Security Only Quality Update for Windows Embedded 8 Standard and Windows Server 2012 (KB5004302)

2021-07 Cumulative Update for Windows 10 Version 1507 (KB5004249)

2021-07 Cumulative Update for Windows 10 Version 1607 and Windows Server 2016 (KB5004238)

2021-07 Cumulative Update for Windows Server 2019 and Windows 10 Version 1809 (KB5004244)

2021-07 Cumulative Update for Azure Stack HCI, version 20H2 and Windows Server 2019 Datacenter: Azure Edition for x64-based Systems (KB5004235)

Servicing Stack Updates

2021-07 Servicing Stack Update for Windows Embedded Standard 7, Windows 7, and Windows Server 2008 R2 (KB5004378)

2021-07 Servicing Stack Update for Windows 10 Version 1909 (KB5004748)

Known Issues


Windows 7 SP1 and Server 2008 R2

• Updates may fail to install if the system is not an ESU system.
  • Expected behavior.
• Operations may fail on Cluster Shared Volumes.
  • Run the operations with administrative privileges.
  • Run the operations from a node that does not have CSV ownership.

Windows 8.1 and Windows Server 2012 R2

• Operations may fail on Cluster Shared Volumes.
  • Run the operations with administrative privileges.
  • Run the operations from a node that does not have CSV ownership.

Windows 10 versions 2004, 20H2 and 21H1

• An issue with output characters when using the Microsoft Japanese Input Method Editor to enter Kanji characters.
  • Microsoft is still working on a solution.
• Issue with Edge Legacy being removed but the new Edge not installed on devices that were installed using custom offline media or custom ISO images.
  • See the workaround on the support page.

Security advisories and updates


ADV 990001 -- Latest Servicing Stack Updates

Other updates


2021-07 Security and Quality Rollup for .NET Framework 4.8 for Windows Embedded Standard 7, Windows 7, and Windows Server 2008 R2 (KB5004116)

2021-07 Security and Quality Rollup for .NET Framework 4.8 for Windows Embedded 8 Standard and Windows Server 2012 (KB5004117)
2021-07 Security and Quality Rollup for .NET Framework 4.8 for Windows 8.1 and Windows Server 2012 R2 (KB5004118)

2021-07 Security and Quality Rollup for .NET Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows Embedded Standard 7, Windows 7, Windows Server 2008 R2, and Windows Server 2008 (KB5004120)

2021-07 Security and Quality Rollup for .NET Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows Embedded 8 Standard and Windows Server 2012 (KB5004121)

2021-07 Security and Quality Rollup for .NET Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows 8.1 and Windows Server 2012 R2 (KB5004122)

2021-07 Security and Quality Rollup for .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Embedded Standard 7, Windows 7, and Windows Server 2008 R2 (KB5004229)

2021-07 Security and Quality Rollup for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Embedded 8 Standard and Windows Server 2012 (KB5004230)

2021-07 Security and Quality Rollup for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows 8.1 and Windows Server 2012 R2 (KB5004231)

2021-07 Security and Quality Rollup for .NET Framework 2.0, 3.0, 4.5.2, 4.6 and 4.6.2 for Windows Server 2008 (KB5004232)

2021-07 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows Server, version 20H2, Windows 10 Version 20H2, Windows Server, version 2004, Windows 10 Version 2004 (KB5003537)

2021-07 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows Server 2019 and Windows 10 Version 1809 (KB5003538)

2021-07 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows 10 Version 1909 (KB5003539)

2021-07 Cumulative Update for .NET Framework 3.5 and 4.7.2 for Windows Server 2019 and Windows 10 Version 1809 (KB5003541)

2021-07 Cumulative Update for .NET Framework 4.8 for Windows Server 2016 and Windows 10 Version 1607 (KB5004115)

2021-07 Cumulative Update for .NET Framework 3.5, 4.7.2 and 4.8 for Windows Server 2019 and Windows 10 Version 1809 (KB5004228)

Microsoft Office Updates

You find Office update information here.

How to download and install the June 2021 security updates




Security updates are downloaded and installed automatically on client versions of Windows by default. Updates can also be downloaded directly from the Microsoft Update Catalog website, and you may also check for updates manually to install them as quickly as possible.

System administrators who manage update management systems such as WSUS may also install the updates using these systems.

To check for updates manually, do the following:

1. Select Start, type Windows Update and load the Windows Update item that is displayed.
2. Select check for updates to run a manual check for updates.

Direct update downloads


Below are resource pages with direct download links, if you prefer to download the updates to install them manually.

Windows 7 and Server 2008 R2

• KB5004289 -- 2021-07 Security Monthly Quality Rollup for Windows 7
• KB5004307 -- 2021-07 Security Only Quality Update for Windows 7

Windows 8.1 and Windows Server 2012 R2

• KB5004298 -- 2021-07 Security Monthly Quality Rollup for Windows 8.1
• KB5004285 -- 2021-07 Security Only Quality Update for Windows 8.1

Windows 10 (version 1909)

• KB5004245 -- 2021-07 Cumulative Update for Windows 10 Version 1909

Windows 10 (version 2004)

• KB5004237 -- 2021-07 Cumulative Update for Windows 10 Version 2004

Windows 10 (version 20H2)

• KB5004237 -- 2021-07 Cumulative Update for Windows 10 Version 20H2

Windows 10 (version 21H1)

• KB5004237 -- 2021-07 Cumulative Update for Windows 10 Version 21H1

Additional resources

• July 2021 Security Updates release notes
• List of software updates for Microsoft products
• List of the latest Windows Updates and Services Packs
• Security Updates Guide
• Microsoft Update Catalog site
• Our in-depth Windows update guide
• How to install optional updates on Windows 10
• Windows 10 Update History
• Windows 8.1 Update History
• Windows 7 Update History

Thank you for being a Ghacks reader. The post Microsoft Windows Security Updates July 2021 overview appeared first on gHacks Technology News.

read more...

 

Windows 10 Update

Well just noticed a pretty large one pop up coming in at 914MB, seems it makes some pretty serous updates.

KB3172985
Cumulative update for Windows 10 Version 1511 and Windows Server 2016 Technical Preview 4: July 12, 2016

This security update includes improvements and fixes in the functionality of Windows 10 Version 1511 and Windows Server 2016 Technical Preview 4. It also resolves the following vulnerabilities in Windows:

• 3175677 MS16-094: Security update for secure boot: July 12, 2016
• 3174060 MS16-093: Security update for Adobe Flash Player: July 12, 2016
• 3171910 MS16-092: Security update for Windows Kernel: July 12, 2016
• 3170048 MS16-091: Security update for .Net Framework: July 12, 2016
• 3171481 MS16-090: Security update for Kernel Mode Drivers: July 12, 2016
• 3170050 MS16-089: Security update for Windows secure kernel mode: July 12, 2016
• 3170005 MS16-087: Security update for the Microsoft Print Spooler: July 12, 2016
• 3169999 MS16-085: Cumulative security update for Microsoft Edge: July 12, 2016
• 3169991 MS16-084: Cumulative security update for Internet Explorer: July 12, 2016

 

Microsoft January 2021 Security Updates

January 2021 Security Updates




The January 2021 security release consists of security updates for the following software:

• Microsoft Windows
• Microsoft Edge (EdgeHTML-based)
• Microsoft Office and Microsoft Office Services and Web Apps
• Microsoft Windows Codecs Library
• Visual Studio
• SQL Server
• Microsoft Malware Protection Engine
• .NET Core
• .NET Repository
• ASP .NET
• Azure

Please note the following information regarding the security updates:

• CVE-2020-0689 has been re-released. For further information see Security update for Secure Boot DBX: January 12, 2021.
• For information regarding enabling Windows 10, version 1909 features, please see Windows 10, version 1909 delivery options. Note that Windows 10, versions 1903 and 1909 share a common core operating system with an identical set of system files. They will also share the same security update KBs.
• Windows 10 updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows 10, in addition to non-security updates. The updates are available via the Microsoft Update Catalog.
• For information on lifecycle and support dates for Windows 10 operating systems, please see Windows Lifecycle Facts Sheet.
• A list of the latest servicing stack updates for each operating system can be found in ADV990001. This list will be updated whenever a new servicing stack update is released. It is important to install the latest servicing stack update.
• Updates for Windows RT 8.1 and Microsoft Office RT software are only available via Windows Update.
• In addition to security changes for the vulnerabilities, updates include defense-in-depth updates to help improve security-related features.
• Customers running Windows 7, Windows Server 2008 R2, or Windows Server 2008 need to purchase the Extended Security Update to continue receiving security updates. See 4522133 for more information.

The following CVEs have FAQs with additional information. Please note that this is not a complete list of CVEs for this release.

• CVE-2020-26870
• CVE-2021-1636
• CVE-2021-1637
• CVE-2021-1643
• CVE-2021-1644
• CVE-2021-1645
• CVE-2021-1647
• CVE-2021-1648
• CVE-2021-1656
• CVE-2021-1663
• CVE-2021-1669
• CVE-2021-1670
• CVE-2021-1672
• CVE-2021-1676
• CVE-2021-1677
• CVE-2021-1694
• CVE-2021-1696
• CVE-2021-1699
• CVE-2021-1707
• CVE-2021-1708
• CVE-2021-1711
• CVE-2021-1713
• CVE-2021-1714
• CVE-2021-1715
• CVE-2021-1716
• CVE-2021-1725

Known Issues


The following KBs contain information about known issues with the security updates. For a complete list of security update KBs, please see 20210112. For more information about Windows Known Issues, please see Windows message center (links to currently-supported versions of Windows are in the left pane).


KB Article Applies To
4598229 Windows 10, Version 1903, Windows Server, Version 1903, Windows 10, Version 1909, Windows Server, Version 1909
4598230 Windows 10, Version 1809, Windows Server 2019
4598242 Windows 10, Version 2004, Windows Server, Version 2004, Windows 10, Version 20H2, Windows Server, Version 20H2
4598275 Windows 8.1, Windows Server 2012 R2 (Security-only update)
4598278 Windows Server 2012 (Monthly Rollup)
4598279 Windows 7, Windows Server 2008 R2 (Monthly Rollup)
4598285 Windows 8.1, Windows Server 2012 R2 (Monthly Rollup)
4598287 Windows Server 2008 (Security-only update)
4598288 Windows Server 2008 (Monthly Rollup)
4598289 Windows 7, Windows Server 2008 R2 (Security-only update)
4598297 Windows Server 2012 (Security-only update)


January 2021 Security Updates - Release Notes - Security Update Guide - Microsoft

 

Microsoft Download Center Updates

Quite a few new downloads popped up today on the Microsoft Download Center. Here's a list:
* Windows Media Center Software Development Kit
* Windows CE 5.0 Networked Media Device Feature Pack Monthly Update (July 2007)
* Microsoft Forefront Server Security for SharePoint 10.x Management Pack for Operations Manager 2007
* Microsoft Server Network Load Balancing Management Pack for Operations Manager 2007
* Microsoft Identity Integration Server 2003 Management Pack for Operations Manager 2007
* Microsoft Office Project Server 2007 Management Pack for Operations Manager 2007
* Windows Embedded CE 6.0 Monthly Update (July 2007)
* Microsoft Forefront Server Security for Exchange 10.0 Management Pack for Operations Manager 2007
* Windows CE .NET 4.2 Platform Builder Monthly Update (July 2007)

MS Download Center