Windows 10: Microsoft Windows Security Updates November 2021 overview

This guide offers an overview of the security updates and non-security updates that Microsoft released for its products on the November 2021 Patch Day. Microsoft released updates for all supported client and server versions of Windows, including Windows 11, and for other company products such as Microsoft Office.

Most Windows updates are cumulative, and the most recent updates for Windows includes the patches of the optional updates that Microsoft released after the October 2021 Patch Day.

The overview begins with an executive summary that summarizes the most important information. Then you find the operating system distribution, information about all updates for client versions of Windows, including known issues confirmed by Microsoft, lists of other security and non security updates, and download information.

The Microsoft Windows Security Updates: October 2021


Click here to download a spreadsheet that includes all released security updates by Microsoft on today's Patch Day: Security Updates 2021-11-09-microsoft-windows

Executive Summary

• All Windows 10 and 11 systems have patches for critical vulnerabilities.
• Windows versions with known issues: Windows 7, Windows 8.1, Windows 10 version 1607, 1809, and 1909, Windows 10 versions 2004, 20H2, 21H1, Windows Server 2022, Windows Server 2008 R2, Windows Server 2012, Windows Server 2012 R2, Windows Server 2008.
• Microsoft released updates for other products, including 3D Viewer, Azure, Azure RTOS and Sphere, Microsoft Dynamics, Microsoft Office, and Visual Studio and Visual Studio Code.
• Windows 10, version 2004 will reach end of servicing on December 14, 2021

Operating System Distribution

• Windows 7 (extended support only): 11 vulnerabilities: 1 critical and 10 important
  • Remote Desktop Client Remote Code Execution Vulnerability -- CVE-2021-38666
• Windows 8.1: 13 vulnerabilities: 1 critical and 12 important
  • Same as Windows 7.
• Windows 10 version 1909: 22 vulnerabilities: 3 critical and 19 important
  • Chakra Scripting Engine Memory Corruption Vulnerability -- CVE-2021-42279
  • Microsoft Virtual Machine Bus (VMBus) Remote Code Execution Vulnerability -- CVE-2021-26443
  • Remote Desktop Client Remote Code Execution Vulnerability -- CVE-2021-38666
• Windows 10 version 2004, 20H2 and 21H1 : 24 vulnerabilities, 3 critical and 21 important
  • same as Windows 10 version 1909
• Windows 11: 21 vulnerabilities, 3 critical and 18 important
  • same as Windows 10 version 1909

Windows Server products

• Windows Server 2008 R2 (extended support only): 15 vulnerabilities: 1 critical and 14 important
  • Remote Desktop Client Remote Code Execution Vulnerability -- CVE-2021-38666
• Windows Server 2012 R2: 17 vulnerabilities: 1 critical and 16 important
  • same as Windows Server 2008 R2.
• Windows Server 2016: 24 vulnerabilities: 2 critical and 22 important
  • Chakra Scripting Engine Memory Corruption Vulnerability -- CVE-2021-42279
  • Remote Desktop Client Remote Code Execution Vulnerability -- CVE-2021-38666
• Windows Server 2019: 27 vulnerabilities: 2 critical and 25 important
  • same as Windows Server 2016
• Windows Server 2022: 26 vulnerabilities: 3 critical and 23 important
  • Microsoft Virtual Machine Bus (VMBus) Remote Code Execution Vulnerability -- CVE-2021-26443
  • Remote Desktop Client Remote Code Execution Vulnerability -- CVE-2021-38666
  • Chakra Scripting Engine Memory Corruption Vulnerability -- CVE-2021-42279

Windows Security Updates


Windows 7 SP1 and Windows Server 2008 R2

• Monthly Rollup: KB5007236
• Security-Only: KB5007233

Updates and improvements:

• Fixes an issue that could prevent devices from downloading and installing printer drivers "when the devices attempt to connect to a network printer for the first time".
• Fixes a printing issue that prevents an "Internet print server from properly packaging modified printer properties before sending the package to the client".
• Addresses an issue of a 0 (zero) width Pen to render one pixel regardless of transformation. (monthly rollup only)
• Security updates

Windows 8.1 and Windows Server 2012 R2

• Monthly Rollup: KB5007247
• Security-only: KB5007255

Updates and improvements:

• Same as Windows 7 above.

Windows 10 version 1909

• Support Page: KB5007189

Updates and improvements:

• Fixes an issue that might prevent the installation of printers using IPP (Internet Printing Protocol).
• Addresses an issue of a 0 (zero) width Pen to render one pixel regardless of transformation.
• Adds a feature to facilitate certain cross-browser data transfers.
• Addresses an issue in JScript9.dll with PropertyGet.
• Fixes an issue with Assigned Access Kiosks and Microsoft Edge, which caused Edge to fail to restart.
• Improved Microsoft Defender for Endpoint's ability to identify and intercept ransomware and advanced attacks.
• Fixed a File Explorer stops responding issue.
• Security updates.

Windows 10 version 2004, 20H2 and 21H1

• Support Page: KB5007186

Updates and improvements:

• Addresses an issue of a 0 (zero) width Pen to render one pixel regardless of transformation.
• Security updates.

Windows 11

• Support Page: KB5007215

Updates and improvements:

• Fixes the application startup issue.
• Addresses an issue "in which certain apps might have unexpected results when rendering some user interface elements or when drawing within the app".
• Security updates.

Other security updates

2021-11 Security Only Quality Update for Windows Embedded 8 Standard and Windows Server 2012 (KB5007245)

2021-11 Security Only Quality Update for Windows Server 2008 (KB5007246)

2021-11 Security Monthly Quality Rollup for Windows Embedded 8 Standard and Windows Server 2012 (KB5007260)

2021-11 Security Monthly Quality Rollup for Windows Server 2008 (KB5007263)

2021-11 Dynamic Cumulative Update for Windows 10 Version 20H2, Windows Server, version 2004, Windows 10 Version 2004, Windows 10 Version 1909, and Windows 10 Version 1903 (KB5007186)

2021-11 Cumulative Update for Windows Server 2016 and Windows 10 Version 1607 (KB5007192)

2021-11 Cumulative Update for Microsoft server operating system version 21H2 for x64-based Systems (KB5007205)

2021-11 Cumulative Update for Windows Server 2019 and Windows 10 Version 1809 (KB5007206)

2021-11 Cumulative Update for Windows 10 (KB5007207)

Servicing Stack Updates

Known Issues


Windows 7 SP1 and Windows Server 2008 R2

• Updates may be rolled back if the machine that is not supported for ESU.
• Operations may fail on Cluster Shared Volumes.
  • Workaround 1: perform the operations from a process with administrative privileges.
  • Workaround 2: perform the operation from a node that does not have CSV ownership.
• Print clients may throw errors when connecting to a remote printer shared on a Windows print server. Errors that Microsoft lists are: 0x000006e4 (RPC_S_CANNOT_SUPPORT), 0x0000007c (ERROR_INVALID_LEVEL), 0x00000709 (ERROR_INVALID_PRINTER_NAME)
  • Microsoft is investigating the issue.

Windows 8.1 and Windows Server 2012 R2

• Operations may fail on Cluster Shared Volumes.
  • Workaround 1: perform the operations from a process with administrative privileges.
  • Workaround 2: perform the operation from a node that does not have CSV ownership.
• Print clients may throw errors when connecting to a remote printer shared on a Windows print server. Errors that Microsoft lists are: 0x000006e4 (RPC_S_CANNOT_SUPPORT), 0x0000007c (ERROR_INVALID_LEVEL), 0x00000709 (ERROR_INVALID_PRINTER_NAME)
  • Microsoft is investigating the issue.

Windows 10 version 1909

• Print clients may throw errors when connecting to a remote printer shared on a Windows print server. Errors that Microsoft lists are: 0x000006e4 (RPC_S_CANNOT_SUPPORT), 0x0000007c (ERROR_INVALID_LEVEL), 0x00000709 (ERROR_INVALID_PRINTER_NAME)
  • Microsoft is investigating the issue.

Windows 10 versions 2004, 20H2 and 21H1

• Microsoft Edge Chromium may not replace Microsoft Edge Legacy if custom offline media or custom ISO images were used to install or upgrade Windows.
  • Workarounds available on the support page.
• Some devices can't update after installing the June 21, 2021 update. The error "PSFX_E_MATCHING_BINARY_MISSING" is thrown in this case.
  • Check out Microsoft's support page for the issue here.
• Connections may fail to authenticate when using smart card authentication when connecting to devices in an untrusted domain using Remote Desktop. The error our credentials did not work. The credentials that were used to connect to [device name] did not work. Please enter new credentials." and "The login attempt failed" in red may be displayed.
  • Microsoft has executed a Known Issue Rollback, which should take care of the issue.
• Print clients may throw errors when connecting to a remote printer shared on a Windows print server. Errors that Microsoft lists are: 0x000006e4 (RPC_S_CANNOT_SUPPORT), 0x0000007c (ERROR_INVALID_LEVEL), 0x00000709 (ERROR_INVALID_PRINTER_NAME)
  • Microsoft is investigating the issue.

Security advisories and updates


ADV 990001 -- Latest Servicing Stack Updates

Non-security updates


2021-11 Security and Quality Rollup for .NET Framework 4.8 for Windows Embedded Standard 7, Windows 7, and Windows Server 2008 R2 (KB5007149)

2021-11 Security and Quality Rollup for .NET Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows Embedded Standard 7, Windows 7, Windows Server 2008 R2, and Windows Server 2008 (KB5007150)

2021-11 Security and Quality Rollup for .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Embedded Standard 7, Windows 7, and Windows Server 2008 R2 (KB5007299)

2021-11 Security and Quality Rollup for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Embedded 8 Standard and Windows Server 2012 (KB5007300)

2021-11 Security and Quality Rollup for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows 8.1 and Windows Server 2012 R2 (KB5007301)

2021-11 Security and Quality Rollup for .NET Framework 2.0, 3.0, 4.5.2, 4.6 and 4.6.2 for Windows Server 2008 (KB5007302)

2021-11 Security and Quality Rollup for .NET Framework 4.8 for Windows Embedded 8 Standard and Windows Server 2012 (KB5007153)

2021-11 Security and Quality Rollup for .NET Framework 4.8 for Windows 8.1 and Windows Server 2012 R2 (KB5007154)

2021-11 Security and Quality Rollup for .NET Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows Embedded 8 Standard and Windows Server 2012 (KB5007156)

2021-11 Security and Quality Rollup for .NET Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows 8.1 and Windows Server 2012 R2 (KB5007157)

2021-11 Security and Quality Rollup for .NET Framework 4.5.2 for Windows Embedded Standard 7, Windows 7, Windows Server 2008 R2, and Windows Server 2008 (KB5007167)

2021-11 Cumulative Update for .NET Framework 3.5 and 4.8 for (KB5006363)

2021-11 Cumulative Update for .NET Framework 3.5 and 4.8 for Microsoft server operating system version 21H2 for x64 (KB5006364)

2021-11 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows Server, version 20H2, Windows 10 Version 20H2, Windows Server, version 2004, Windows 10 Version 2004, Windows 10 Version 1909, and Windows 10 Version 1903 (KB5006365)

2021-11 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows Server 2019 and Windows 10 Version 1809 (KB5006366)

2021-11 Cumulative Update for .NET Framework 3.5 and 4.7.2 for Windows Server 2019 and Windows 10 Version 1809 (KB5006368)

2021-11 Update for Windows 10 Version 1909 (KB5007114)

2021-11 Cumulative Update for .NET Framework 4.8 for Windows Server 2016 and Windows 10 Version 1607 (KB5007152)

2021-11 Cumulative Update for .NET Framework 3.5, 4.7.2 and 4.8 for Windows Server 2019 and Windows 10 Version 1809 (KB5007298)

Microsoft Office Updates

You find Office update information here.

How to download and install the November 2021 security updates




Security updates are distributed automatically to most Home versions of Windows. Windows Update is set to download and install security updates automatically. Organizations may use update management systems, e.g. WSUS, to manage updating on company machines.

Updates are not delivered in real-time, and that means that you may get them early by searching for them manually. In any event, it is advised to create a system backup before updates are installed.

Here is how you may check for updates manually:

1. Select Start, type Windows Update and load the Windows Update item that is displayed.
2. Select check for updates to run a manual check for updates.

Direct update downloads


Below are resource pages with direct download links, if you prefer to download the updates to install them manually.

Windows 7 and Server 2008 R2

• KB5007236 -- 2021-11 Security Monthly Quality Rollup for Windows 7
• KB5007233 -- 2021-11 Security Only Quality Update for Windows 7

Windows 8.1 and Windows Server 2012 R2

• KB5007247-- 2021-11 Security Monthly Quality Rollup for Windows 8.1
• KB5007255 -- 2021-11 Security Only Quality Update for Windows 8.1

Windows 10 (version 1909)

• KB5007189 -- 2021-11 Cumulative Update for Windows 10 Version 1909

Windows 10 (version 2004)

• KB5007186 -- 2021-11 Cumulative Update for Windows 10 Version 2004

Windows 10 (version 20H2)

• KB5007186 -- 2021-11 Cumulative Update for Windows 10 Version 20H2

Windows 10 (version 21H1)

• KB5007186 -- 2021-11 Cumulative Update for Windows 10 Version 21H1

Windows 11

• KB5007215 -- 2021-11 Cumulative Update for Windows 11

Additional resources

• November 2021 Security Updates release notes
• List of software updates for Microsoft products
• List of the latest Windows Updates and Services Packs
• Security Updates Guide
• Microsoft Update Catalog site
• Our in-depth Windows update guide
• How to install optional updates on Windows 10
• Windows 10 Update History
• Windows 8.1 Update History
• Windows 7 Update History

Thank you for being a Ghacks reader. The post Microsoft Windows Security Updates November 2021 overview appeared first on gHacks Technology News.

read more...

 

Microsoft August 2021 Security Updates

August 2021 Security Updates

Updates this Month


This release consists of security updates for the following products, features and roles.

• .NET Core & Visual Studio
• ASP .NET
• Azure
• Azure Sphere
• Microsoft Azure Active Directory Connect
• Microsoft Dynamics
• Microsoft Graphics Component
• Microsoft Office
• Microsoft Office SharePoint
• Microsoft Office Word
• Microsoft Scripting Engine
• Microsoft Windows Codecs Library
• Remote Desktop Client
• Windows Bluetooth Service
• Windows Cryptographic Services
• Windows Defender
• Windows Event Tracing
• Windows Media
• Windows MSHTML Platform
• Windows NTLM
• Windows Print Spooler Components
• Windows Services for NFS ONCRPC XDR Driver
• Windows Storage Spaces Controller
• Windows TCP/IP
• Windows Update
• Windows Update Assistant
• Windows User Profile Service

Please note the following information regarding the security updates:


Security Update Guide Blog Posts
Date Blog Post
February 9, 2021 Continuing to Listen: Good News about the Security Update Guide API
January 13, 2021 Security Update Guide Supports CVEs Assigned by Industry Partners
December 8, 2020 Security Update Guide: Let’s keep the conversation going
November 9, 2020 Vulnerability Descriptions in the New Version of the Security Update Guide
Relevant Information

• Windows 10 updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows 10, in addition to non-security updates. The updates are available via the Microsoft Update Catalog. For information on lifecycle and support dates for Windows 10 operating systems, please see Windows Lifecycle Facts Sheet.
• Microsoft is improving Windows Release Notes. For more information, please see What's next for Windows release notes.
• A list of the latest servicing stack updates for each operating system can be found in ADV990001. This list will be updated whenever a new servicing stack update is released. It is important to install the latest servicing stack update.
• In addition to security changes for the vulnerabilities, updates include defense-in-depth updates to help improve security-related features.
• Customers running Windows 7, Windows Server 2008 R2, or Windows Server 2008 need to purchase the Extended Security Update to continue receiving security updates. See 4522133 for more information.

FAQs, Mitigations, and Workarounds
The following CVEs have FAQs, Mitigations, or Workarounds. You can see these in more detail from the Vulnerabilities tab by selecting FAQs, Mitigations and Workarounds columns in the Edit Columns panel.

• CVE-2021-26428
• CVE-2021-26429
• CVE-2021-26430
• CVE-2021-26433
• CVE-2021-34478
• CVE-2021-34485
• CVE-2021-34532
• CVE-2021-36926
• CVE-2021-36932
• CVE-2021-36933
• CVE-2021-36938
• CVE-2021-36941
• CVE-2021-36949

Known Issues
You can see these in more detail from the Deployments tab by selecting Known Issues column in the Edit Columns panel.


For more information about Windows Known Issues, please see Windows message center (links to currently-supported versions of Windows are in the left pane).


KB Article Applies To
5005030 Windows 10, Version 1809, Windows Server 2019
5005031 Windows 10, Version 1909
5005033 Windows 10, Version 2004, Windows Server, Version 2004, Windows 10, Version 20H2, Windows Server, Version 20H2, Windows 10, Version 21H1
5005040 Windows 10
5005076 Windows 8.1, Windows RT 8.1, Windows Server 2012 R2 (Monthly Rollup)
5005088 Windows 7 SP1, Windows Server 2008 R2 SP1 (Monthly Rollup)
5005089 Windows 7 SP1, Windows Server 2008 R2 SP1 (Security-only update)
5005090 Windows Server 2008 SP2 (Monthly Rollup)
5005094 Windows Server 2012 (Security-only update)
5005095 Windows Server 2008 SP2 (Security-only update)
5005099 Windows Server 2012 (Monthly Rollup)
5005106 Windows 8.1, Windows RT 8.1, Windows Server 2012 R2 (Security-only update)

Released: Aug 10, 2021
August 2021 Security Updates - Release Notes - Security Update Guide - Microsoft

 

Microsoft June 2021 Security Updates

June 2021 Security Updates


Updates this Month


This release consists of security updates for the following products, features and roles.

• .NET Core & Visual Studio
• 3D Viewer
• Microsoft DWM Core Library
• Microsoft Intune
• Microsoft Office
• Microsoft Office Excel
• Microsoft Office Outlook
• Microsoft Office SharePoint
• Microsoft Scripting Engine
• Microsoft Windows Codecs Library
• Paint 3D
• Role: Hyper-V
• Visual Studio Code - Kubernetes Tools
• Windows Bind Filter Driver
• Windows Common Log File System Driver
• Windows Cryptographic Services
• Windows DCOM Server
• Windows Defender
• Windows Drivers
• Windows Event Logging Service
• Windows Filter Manager
• Windows HTML Platform
• Windows Installer
• Windows Kerberos
• Windows Kernel
• Windows Kernel-Mode Drivers
• Windows Network File System
• Windows NTFS
• Windows NTLM
• Windows Print Spooler Components
• Windows Remote Desktop
• Windows TCP/IP

Please note the following information regarding the security updates:


Security Update Guide Blog Posts
Date Blog Post
February 9, 2021 Continuing to Listen: Good News about the Security Update Guide API
January 13, 2021 Security Update Guide Supports CVEs Assigned by Industry Partners
December 8, 2020 Security Update Guide: Let’s keep the conversation going
November 9, 2020 Vulnerability Descriptions in the New Version of the Security Update Guide
Relevant Information

• Windows 10 updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows 10, in addition to non-security updates. The updates are available via the Microsoft Update Catalog. For information on lifecycle and support dates for Windows 10 operating systems, please see Windows Lifecycle Facts Sheet.
• Microsoft is improving Windows Release Notes. For more information, please see What's next for Windows release notes.
• A list of the latest servicing stack updates for each operating system can be found in ADV990001. This list will be updated whenever a new servicing stack update is released. It is important to install the latest servicing stack update.
• In addition to security changes for the vulnerabilities, updates include defense-in-depth updates to help improve security-related features.
• Customers running Windows 7, Windows Server 2008 R2, or Windows Server 2008 need to purchase the Extended Security Update to continue receiving security updates. See 4522133 for more information.

FAQs, Mitigations, and Workarounds
The following CVEs have FAQs, Mitigations, or Workarounds. You can see these in more detail from the Vulnerabilities tab by selecting FAQs, Mitigations and Workarounds columns in the Edit Columns panel.

• CVE-2021-26414
• CVE-2021-31199
• CVE-2021-31201
• CVE-2021-31938
• CVE-2021-31939
• CVE-2021-31940
• CVE-2021-31941
• CVE-2021-31942
• CVE-2021-31943
• CVE-2021-31944
• CVE-2021-31945
• CVE-2021-31946
• CVE-2021-31949
• CVE-2021-31955
• CVE-2021-31956
• CVE-2021-31958
• CVE-2021-31959
• CVE-2021-31960
• CVE-2021-31962
• CVE-2021-31965
• CVE-2021-31967
• CVE-2021-31971
• CVE-2021-31972
• CVE-2021-31975
• CVE-2021-31976
• CVE-2021-31977
• CVE-2021-31978
• CVE-2021-31980
• CVE-2021-31983
• CVE-2021-31985
• CVE-2021-33739
• CVE-2021-33741
• CVE-2021-33742

Known Issues
You can see these in more detail from the Deployments tab by selecting Known Issues column in the Edit Columns panel.


For more information about Windows Known Issues, please see Windows message center (links to currently-supported versions of Windows are in the left pane).


KB Article Applies To
5001944 SharePoint Server 2019
5001946 SharePoint Enterprise Server 2016
5001962 SharePoint Foundation 2013
5003635 Windows 10, Version 1909
5003637 Windows 10, version 21H1, Windows 10, Version 2004, Windows Server, Version 2004, Windows 10, Version 20H2, Windows Server, Version 20H2
5003646 Windows 10, Version 1809, Windows Server 2019
5003661 Windows Server 2008 Service Pack 2 ((Monthly Rollup)
5003667 Windows 7 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Monthly Rollup)
5003671 Windows 8.1, Windows Server 2012 R2 (Monthly Rollup)
5003681 Windows 8.1, Windows Server 2012 R2 (Security-only update)
5003694 Windows 7 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Security-only update)
5003695 Windows Server 2008 Service Pack 2 (Security-only update)
5003696 Windows Server 2012 (Security-only update)
5003697 Windows Server 2012 (Monthly Rollup)


June 2021 Security Updates - Release Notes - Security Update Guide - Microsoft

 

Microsoft January 2021 Security Updates

January 2021 Security Updates




The January 2021 security release consists of security updates for the following software:

• Microsoft Windows
• Microsoft Edge (EdgeHTML-based)
• Microsoft Office and Microsoft Office Services and Web Apps
• Microsoft Windows Codecs Library
• Visual Studio
• SQL Server
• Microsoft Malware Protection Engine
• .NET Core
• .NET Repository
• ASP .NET
• Azure

Please note the following information regarding the security updates:

• CVE-2020-0689 has been re-released. For further information see Security update for Secure Boot DBX: January 12, 2021.
• For information regarding enabling Windows 10, version 1909 features, please see Windows 10, version 1909 delivery options. Note that Windows 10, versions 1903 and 1909 share a common core operating system with an identical set of system files. They will also share the same security update KBs.
• Windows 10 updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows 10, in addition to non-security updates. The updates are available via the Microsoft Update Catalog.
• For information on lifecycle and support dates for Windows 10 operating systems, please see Windows Lifecycle Facts Sheet.
• A list of the latest servicing stack updates for each operating system can be found in ADV990001. This list will be updated whenever a new servicing stack update is released. It is important to install the latest servicing stack update.
• Updates for Windows RT 8.1 and Microsoft Office RT software are only available via Windows Update.
• In addition to security changes for the vulnerabilities, updates include defense-in-depth updates to help improve security-related features.
• Customers running Windows 7, Windows Server 2008 R2, or Windows Server 2008 need to purchase the Extended Security Update to continue receiving security updates. See 4522133 for more information.

The following CVEs have FAQs with additional information. Please note that this is not a complete list of CVEs for this release.

• CVE-2020-26870
• CVE-2021-1636
• CVE-2021-1637
• CVE-2021-1643
• CVE-2021-1644
• CVE-2021-1645
• CVE-2021-1647
• CVE-2021-1648
• CVE-2021-1656
• CVE-2021-1663
• CVE-2021-1669
• CVE-2021-1670
• CVE-2021-1672
• CVE-2021-1676
• CVE-2021-1677
• CVE-2021-1694
• CVE-2021-1696
• CVE-2021-1699
• CVE-2021-1707
• CVE-2021-1708
• CVE-2021-1711
• CVE-2021-1713
• CVE-2021-1714
• CVE-2021-1715
• CVE-2021-1716
• CVE-2021-1725

Known Issues


The following KBs contain information about known issues with the security updates. For a complete list of security update KBs, please see 20210112. For more information about Windows Known Issues, please see Windows message center (links to currently-supported versions of Windows are in the left pane).


KB Article Applies To
4598229 Windows 10, Version 1903, Windows Server, Version 1903, Windows 10, Version 1909, Windows Server, Version 1909
4598230 Windows 10, Version 1809, Windows Server 2019
4598242 Windows 10, Version 2004, Windows Server, Version 2004, Windows 10, Version 20H2, Windows Server, Version 20H2
4598275 Windows 8.1, Windows Server 2012 R2 (Security-only update)
4598278 Windows Server 2012 (Monthly Rollup)
4598279 Windows 7, Windows Server 2008 R2 (Monthly Rollup)
4598285 Windows 8.1, Windows Server 2012 R2 (Monthly Rollup)
4598287 Windows Server 2008 (Security-only update)
4598288 Windows Server 2008 (Monthly Rollup)
4598289 Windows 7, Windows Server 2008 R2 (Security-only update)
4598297 Windows Server 2012 (Security-only update)


January 2021 Security Updates - Release Notes - Security Update Guide - Microsoft