Windows 10: The first Windows security updates of 2024 are here

Welcome to the Microsoft Windows January 2024 security updates overview. It is the first Patch Day of the year for Microsoft. The company has addressed a total of 48 unique vulnerabilities in Microsoft products and 5 unique vulnerabilities in non-Microsoft products.

Our overview provides system administrators and home users with actionable information about the released security updates. It includes an Excel spreadsheet with a list of updates, information about affected products, known issues, and lists of other security updates that Microsoft released for its products.

You also find resource links, including download links, and instructions to download and install the patches on Windows devices.

Check out the December 2023 Security update overview here.

Microsoft Windows Security Updates: January 2024


Here is a link to an Excel spreadsheet that lists information about the released security updates on the January 2024 Microsoft Patch Day. Follow this link to download an archive file that contains the spreadsheet: Windows security updates January 2024

Executive Summary

• All Windows client and server versions are affected by at least 1 critical issue, most are affected by 2 critical issues.
• Windows clients with issues are: Windows 10 version 1809, Windows 10 version 21H2 and 22H2, Windows 11 version 21H2, 22H2 and 23H2
• Windows Server clients: Windows Server 2008 and 2008 R2, Windows Server 2019

Product overview


Each supported version of Windows and their critical vulnerabilities are listed below.

• Windows 10 version 22H2: 34 vulnerabilities, 2 critical and 32 important.
  • Windows Kerberos Security Feature Bypass Vulnerability -- CVE-2024-20674
  • Windows Hyper-V Remote Code Execution Vulnerability -- CVE-2024-20700
• Windows 11 version 22H2: 35 vulnerabilities, 2 critical and 33 important
  • same as Windows 10 version 22H2
• Windows 11 version 23H2: 35 vulnerabilities, 2 critical and 33 important
  • same as Windows 10 version 22H2

Windows Server products

• Windows Server 2008 R2 (extended support only): 19 vulnerabilities: 1 critical and 18 important
  • Windows Kerberos Security Feature Bypass Vulnerability -- CVE-2024-20674
• Windows Server 2012 R2 (extended support only): vulnerabilities: critical and important
  • No information
• Windows Server 2016: 26 vulnerabilities: 1 critical and 25 important
  • same as Windows Server 2008 R2
• Windows Server 2019: 33 vulnerabilities: 2 critical and 31 important
  • same as Windows Server 2008 R2, plus
  • Windows Hyper-V Remote Code Execution Vulnerability -- CVE-2024-20700
• Windows Server 2022: 36 vulnerabilities: 2 critical and 34 important.
  • same as Windows Server 2019

Windows Security Updates


Windows 10 version 22H2

• Support Page: KB5034122

Updates and improvements:

• Fixes an issue that caused the device to shut down after 60 seconds after using a smart card to authenticate on a remote system.
• The update addresses an issue that affects the display of a smart card icon. It does not appear when signing in.
• Security updates.

Windows 11 version 22H2 and 23H2

• Support Page: KB5034123

Updates and improvements:

• Fixes an issue that caused the device to shut down after 60 seconds after using a smart card to authenticate on a remote system.
• The update addresses an issue that affects the display of a smart card icon. It does not appear when signing in.
• The update addresses a Wi-Fi adapter issue that may cause them to not connect to some networks.

Security updates

2024-01 Security Update for Windows 11 (KB5034440)

2024-01 Security Update for Microsoft server operating system, version 22H2 for x64-based Systems (KB5034439)

2024-01 Security Update for Windows 10 Version 22H2 and Windows 10 Version 21H2 (KB5034441)

2024-01 Cumulative Security Update for Internet Explorer Windows Server 2012 R2, Windows Server 2012, Windows Embedded Standard 7, Windows Server 2008 R2, and Windows Server 2008 (KB5034120)

2024-01 Security Only Quality Update for Windows Embedded Standard 7 and Windows Server 2008 R2 (KB5034167)

2024-01 Security Monthly Quality Rollup for Windows Embedded Standard 7 and Windows Server 2008 R2 (KB5034169)

2024-01 Security Monthly Quality Rollup for Windows Server 2012 R2 (KB5034171)

2024-01 Security Monthly Quality Rollup for Windows Server 2008 (KB5034173)

2024-01 Security Only Quality Update for Windows Server 2008 (KB5034176)

2024-01 Security Monthly Quality Rollup for Windows Server 2012 (KB5034184)

2024-01 Cumulative Update for Windows Server 2016 and Windows 10 Version 1607 (KB5034119)

2024-01 Dynamic Cumulative Update for Windows 11 (KB5034121)

2024-01 Dynamic Cumulative Update for Windows 10 Version 22H2 and Windows 10 Version 21H2 (KB5034122)

2024-01 Cumulative Update for Windows 10 Version 1809 (KB5034127)

2024-01 Cumulative Update for Microsoft server operating system version 21H2 for x64-based Systems (KB5034129)

2024-01 Cumulative Update for Windows 10 Version 1507 (KB5034134)

2024-01 Servicing Stack Update for Windows Server 2012 R2 for x64-based Systems (KB5034587)

2024-01 Servicing Stack Update for Windows Server 2012 for x64-based Systems (KB5034588)

Microsoft .NET

2024-01 Security and Quality Rollup for .NET Framework 3.5 for Windows Server 2012 for x64 (KB5033897)

2024-01 Security and Quality Rollup for .NET Framework 2.0, 3.0 for Windows Server 2008 (KB5033898)

2024-01 Security and Quality Rollup for .NET Framework 3.5.1 for Windows Embedded Standard 7 and Windows Server 2008 R2 (KB5033899)

2024-01 Security and Quality Rollup for .NET Framework 3.5 for Windows Server 2012 R2 for x64 (KB5033900)

2024-01 Security and Quality Rollup for .NET Framework 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows Server 2012 for x64 (KB5033905)

2024-01 Security and Quality Rollup for .NET Framework 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows Server 2012 R2 for x64 (KB5033906)

2024-01 Security and Quality Rollup for .NET Framework 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows Embedded Standard 7, Windows Server 2008 R2, and Windows Server 2008 (KB5033907)

2024-01 Security and Quality Rollup for .NET Framework 4.8 for Windows Server 2012 for x64 (KB5033913)

2024-01 Security and Quality Rollup for .NET Framework 4.8 for Windows Server 2012 R2 for x64 (KB5033915)

2024-01 Security and Quality Rollup for .NET Framework 4.8 for Windows Embedded Standard 7 and Windows Server 2008 R2 (KB5033916)

2024-01 Security Only Update for .NET Framework 2.0, 3.0 for Windows Server 2008 (KB5033945)

2024-01 Security Only Update for .NET Framework 3.5.1 for Windows Embedded Standard 7 and Windows Server 2008 R2 (KB5033946)

2024-01 Security Only Update for .NET Framework 4.6.2 for Windows Embedded Standard 7, Windows Server 2008 R2, and Windows Server 2008 (KB5033947)

2024-01 Security Only Update for .NET Framework 4.8 for Windows Embedded Standard 7 and Windows Server 2008 R2 (KB5033948)

2024-01 Security Only Update for .NET Framework 3.5 SP1 for Windows Server 2008 (KB5033952)

2024-01 Security and Quality Rollup for .NET Framework 3.5 SP1 for Windows Server 2008 (KB5034008)

2024-01 Security Only Update for .NET Framework 3.5.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Embedded Standard 7 and Windows Server 2008 R2 (KB5034269)

2024-01 Security Only Update for .NET Framework 2.0, 3.0, 3.5 SP1, 4.6.2 for Windows Server 2008 (KB5034270)

2024-01 Security and Quality Rollup for .NET Framework 3.5.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Embedded Standard 7 and Windows Server 2008 R2 (KB5034277)

2024-01 Security and Quality Rollup for .NET Framework 3.5, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 for x64 (KB5034278)

2024-01 Security and Quality Rollup for .NET Framework 3.5, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 R2 for x64 (KB5034279)

2024-01 Security and Quality Rollup for .NET Framework 2.0, 3.0, 3.5 SP1, 4.6.2 for Windows Server 2008 (KB5034280)

2024-01 Cumulative Update for .NET Framework 3.5 and 4.7.2 for Windows Server 2019 and Windows 10 Version 1809 (KB5033904)

2024-01 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows 10 Version 22H2 and Windows 10 Version 21H2 (KB5033909)

2024-01 Cumulative Update for .NET Framework 4.8 for Windows Server 2016 and Windows 10 Version 1607 (KB5033910)

2024-01 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows Server 2019 and Windows 10 Version 1809 (KB5033911)

2024-01 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows 11 (KB5033912)

2024-01 Cumulative Update for .NET Framework 3.5 and 4.8 for Microsoft server operating system version 21H2 for x64 (KB5033914)

2024-01 Cumulative Update for .NET Framework 3.5 and 4.8.1 for Microsoft server operating system, version 23H2 for x64 (KB5033917)

2024-01 Cumulative Update for .NET Framework 3.5 and 4.8.1 for Windows 10 Version 22H2 and Windows 10 Version 21H2 (KB5033918)

2024-01 Cumulative Update for .NET Framework 3.5 and 4.8.1 for Windows 11 (KB5033919)

2024-01 Cumulative Update for .NET Framework 3.5 and 4.8.1 for Windows 11 (KB5033920)

2024-01 Cumulative Update for .NET Framework 3.5 and 4.8.1 for Microsoft server operating system version 21H2 for x64 (KB5033922)

2024-01 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Microsoft server operating system version 21H2 for x64 (KB5034272)

2024-01 Cumulative Update for .NET Framework 3.5 and 4.7.2 for Windows Server 2019 and Windows 10 Version 1809 (KB5034273)

2024-01 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows 10 Version 21H2 (KB5034274)

2024-01 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows 10 Version 22H2 (KB5034275)

2024-01 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 11 (KB5034276)

Non-Security updates

2024-01 Dynamic Update for Windows 10 Version 1607 (KB5034230)

2024-01 Dynamic Update for Windows 10 Version 1809 (KB5034231)
2024-01 Dynamic Update for Windows 10 Version 21H2 (KB5034232)
2024-01 Dynamic Update for Windows 10 Version 1507 (KB5034233)
2024-01 Dynamic Update for Microsoft server operating system, version 22H2 for x64-based Systems (KB5034235)
2024-01 Dynamic Update for Windows 11 (KB5034236)
Known Issues


Windows 10 version 22H2

Description: Using the FixedDrivesEncryptionType or SystemDrivesEncryptionType policy settings in the BitLocker configuration service provider (CSP) node in mobile device management (MDM) apps might incorrectly show a 65000 error in the "Require Device Encryption" setting for some devices in your environment.

Workaround: Set "Enforce drive encryption type on operating system drives" or "Enforce drive encryption on fixed drives" policies in Microsoft Intune.

(OLD) Description: Desktop icons may be moved around unexpectedly between monitors when using Copilot on more than one monitor. Users may also experience "other alignment issues" according to Microsoft.

Workaround: none. Microsoft may disable Copilot on multimonitor devices.

(OLD) Description: Copilot in Windows is not supported if the taskbar is located vertically on the right or left side of the screen.

Workaround: align the taskbar horizontally, either at the top or bottom of the screen.

(OLD) Description: Using the FixedDrivesEncryptionType or SystemDrivesEncryptionType policy settings in the BitLocker configuration service provider (CSP) node in mobile device management (MDM) apps might incorrectly show a 65000 error in the "Require Device Encryption" setting for some devices in your environment.

Workaround: this is a reporting issue only according to Microsoft. Microsoft suggests to set the "Enforce drive encryption type on operating system drives" or the "Enforce drive encryption on fixed drives" policies to not configured as a workaround.

Windows 11 version 22H2 and 23H2

(OLD) Description: Users who use multiple monitors on their Windows devices may notice that desktop icons move around unexpectedly. They may, for instance, move between monitors.

Workaround: Microsoft "may" have disabled Windows Copilot on multi-monitor devices until a solution is found.

(OLD) Description: The color font format COLRv1 does not render properly. It is used to display emoji with a 3D-like appearance.

Workaround: none at the time. Microsoft is working on a solution.

(OLD) Description: Using the FixedDrivesEncryptionType or SystemDrivesEncryptionType policy settings in the BitLocker configuration service provider (CSP) node in mobile device management (MDM) apps might incorrectly show a 65000 error in the "Require Device Encryption" setting for some devices in your environment.

Workaround: this is a reporting issue only according to Microsoft. Microsoft suggests to set the "Enforce drive encryption type on operating system drives" or the "Enforce drive encryption on fixed drives" policies to not configured as a workaround.

Security advisories and updates

• ADV 990001 -- Latest Servicing Stack Updates

Microsoft Office Updates

You find Office update information here.

How to download and install the January 2024 security updates




All security updates get downloaded and installed automatically on non-managed Windows systems by default. It may take some time before these are installed and you may speed up the process. This is recommended in some cases, including when security issues are exploited in the wild already or when non-security updates address major bugs.

Tip: create a backup before you install updates

To update using Windows Update, use the following guide:

1. Select Start, type Windows Update and load the Windows Update item that is displayed.
2. Select check for updates to run a manual check for updates.

Direct update downloads


Below are resource pages with direct download links, if you prefer to download the updates to install them manually.

Windows 10 version 22H2

• KB5034122 -- 2024-1 Cumulative Update for Windows 10 Version 21H2

Windows 11 version 22H2

• KB5034123 -- 2024-1 Cumulative Update for Windows 11 version 22H2

Windows 11 version 23H2

• KB5034123 -- 2024-1 Cumulative Update for Windows 11 version 23H2

Additional resources

• January 2024 Security Updates release notes
• List of software updates for Microsoft products
• List of the latest Windows Updates and Services Packs
• Security Updates Guide
• Microsoft Update Catalog site
• Our in-depth Windows update guide
• How to install optional updates on Windows 10
• Windows 11 Update History
• Windows 10 Update History

Thank you for being a Ghacks reader. The post The first Windows security updates of 2024 are here appeared first on gHacks Technology News.

read more...

 

Windows 7 Ultimate (64) Security updates not installing.

I have been having problems in installing the updates that I have listed below. For each update I attempted to install them individually but they would not install. I also downloaded the SURT 6.1 KB947821 v27. The problem has been going on now for about 2 months. (whenever the issue with the updates comes to mind I am never near my pc). Thank you in advance.


Cumulative Security Update for Internet Explorer 9 for Windows 7 for x64-based Systems (KB2838727)
Security Update for Windows 7 for x64-based Systems (KB2757638)
Security Update for Windows 7 for x64-based Systems (KB2785220)
Security Update for Windows 7 for x64-based Systems (KB2790113)
Security Update for Windows 7 for x64-based Systems (KB2813170)
Security Update for Windows 7 for x64-based Systems (KB2813430)
Security Update for Windows 7 for x64-based Systems (KB2839894)
Update for Windows 7 for x64-based Systems (KB2726535)
Update for Windows 7 for x64-based Systems (KB2773072)
Update for Windows 7 for x64-based Systems (KB2786400)
Update for Windows 7 for x64-based Systems (KB2798162)
Update for Windows 7 for x64-based Systems (KB2808679)

 

Win10: windows update stuck at never ending loop ?

When in win10:

• Update&security -> Windows update -> Finding update... .... .... ....

Planning to download the latest Win10.ISO (vers.1803) and manually update:
- Then wait that my ordered new SSD arrives and clone the old HDD to it.

 

Windows 10 Update

Well just noticed a pretty large one pop up coming in at 914MB, seems it makes some pretty serous updates.

KB3172985
Cumulative update for Windows 10 Version 1511 and Windows Server 2016 Technical Preview 4: July 12, 2016 - Microsoft Support

This security update includes improvements and fixes in the functionality of Windows 10 Version 1511 and Windows Server 2016 Technical Preview 4. It also resolves the following vulnerabilities in Windows:

• 3175677 MS16-094: Security update for secure boot: July 12, 2016
• 3174060 MS16-093: Security update for Adobe Flash Player: July 12, 2016
• 3171910 MS16-092: Security update for Windows Kernel: July 12, 2016
• 3170048 MS16-091: Security update for .Net Framework: July 12, 2016
• 3171481 MS16-090: Security update for Kernel Mode Drivers: July 12, 2016
• 3170050 MS16-089: Security update for Windows secure kernel mode: July 12, 2016
• 3170005 MS16-087: Security update for the Microsoft Print Spooler: July 12, 2016
• 3169999 MS16-085: Cumulative security update for Microsoft Edge: July 12, 2016
• 3169991 MS16-084: Cumulative security update for Internet Explorer: July 12, 2016