Patchday: Windows 10-Updates (March 9, 2021)

[German]On March 9, 2021 (second Tuesday of the month, Patchday at Microsoft), several cumulative updates were released for the supported Windows 10 builds. Here are some details about each update.

A list of the updates can be found on this Microsoft website. I have pulled out the details below. Since last month Microsoft integrates the Servicing Stack Updates (SSUs) into the cumulative update. But that only applies to Windows 10 version 2004 and above, so – there are still separate SSU installation for older Windows 10 versions.

Addendum: See my blog post Windows 10 Updates KB5000802/KB5000808 causes BSOD when printing in win32kfull.sys – pulled? in case you are affected.

Updates for Windows 10 Version 2004/20H2

For Windows 10 version 2004 released in May 2020 and Windows 10 version 20H2 offered via update search in October 2020, Microsoft provides the same update packages mentioned below.

Update KB5000802 for Windows 10 Version 2004/20H2

Cumulative Update KB5000802 raises the OS build to 19041.867 for Windows 10 version 2004 and to 19042.867 for Windows 10 version 20H2. The update is available for Windows 10 version 2004, Windows 10 version 20H2, and Windows Server version 2004 and Windows Server version 20H2. It includes quality improvements but no new operating system features. Here is the list of improvements, called highlights by Microsoft:

• Updates to improve security when Windows performs basic operations.
• Updates to improve security when using Microsoft Office products.
• Updates security for the Windows user interface.

Microsoft notes that this update makes quality improvements to the servicing stack (is responsible for Microsoft updates). The SSU versions are raised to 19041.860 and 19042.860. In addition, the following fixes and improvements are made:

• Addresses an elevation of privilege security vulnerability documented in CVE-2021-1640 related to print jobs submitted to "FILE:" ports. After installing Windows updates from March 9, 2021 and later, print jobs that are in a pending state before restarting the print spooler service or restarting the OS will remain in an error state. Manually delete the affected print jobs and resubmit them to the print queue when the print spooler service is online.
• Security updates to the Windows Shell, Windows Fundamentals, Windows Management, Windows Apps, Windows User Account Control (UAC), Windows Virtualization, the Windows Kernel, the Microsoft Graphics Component, Internet Explorer, Microsoft Edge Legacy, and Windows Media.

This update is automatically downloaded and installed by Windows Update. This update is also available from the Microsoft Update Catalog and via WSUS. If error 0x800f0823 – CBS_E_NEW_SERVICING_STACK_REQUIRED occurs during installation, the latest standalone SSU (KB4598481) must be installed. For the update, Microsoft continues to state as a known issue that users of the Microsoft Input Method Editor (IME) for Chinese and Japanese may receive an error, or the application stops responding or closes when trying to drag with the mouse. The certificate issue is also still present.

In addition, Microsoft has released an update directly to the Windows Update client to improve its reliability. This is rolled out outside of Windows Update if the machine is compatible and not an LTSC variant, and updates have not been blocked via GPO.

Updates for Windows 10 Version 1909

Windows 10 version 1903 is out of support on December 8, 2020. For Windows 10 version 1909 released in 2019, the following updates are available.

Update KB5000808 foür Windows 10 Version 1909

Cumulative Update KB5000808 raises the Windows 10 V1909 OS build to 18363.1440. The update is available for Windows 10 version 1909 as well as Windows Server version 1909. It includes quality improvements but no new operating system features. Here's the list of improvements, called highlights by Microsoft:

• Updates security for the Windows user interface.
• Updates to improve security when Windows performs basic operations.
• Updates to improve security when using Microsoft Office products.

In addition, the following fixes and improvements to Windows 10 version 1909 are shipped:

• Addresses an elevation of privilege security vulnerability documented in CVE-2021-1640 related to print jobs submitted to "FILE:" ports. After installing Windows updates from March 9, 2021 and later, print jobs that are in a pending state before restarting the print spooler service or restarting the OS will remain in an error state. Manually delete the affected print jobs and resubmit them to the print queue when the print spooler service is online.
• Security updates to the Windows Shell, Windows Fundamentals, Windows Management, Windows Apps, Windows User Account Control (UAC), Windows Core Networking, Windows Hybrid Cloud Networking, Windows Virtualization, the Windows Kernel, the Microsoft Graphics Component, Internet Explorer, Microsoft Edge Legacy, and Windows Media.

This update is automatically downloaded and installed by Windows Update. This update is also available from the Microsoft Update Catalog and via WSUS. Microsoft strongly recommends that you install the latest Service Stack Update (SSU) for your operating system before installing the latest Cumulative Update (LCU). For the update, Microsoft states the certificate issue mentioned above, which is documented in the support article.

In addition, Microsoft has released an update directly to the Windows Update client to improve its reliability. This is rolled out outside of Windows Update if the machine is compatible and not an LTSC variant, and updates have not been blocked via GPO.

Updates for Windows 10 Version 1809

The following updates are available for Windows 10 October 2018 Update (version 1809) and Windows Server 2019.

Update KB5000822 for Windows 10 Version 1809

Cumulative Update KB5000822 raises the OS build (according to MS) to 17763.1817 and includes quality improvements but no new OS features. Here is the list of improvements, called highlights by Microsoft:

• Updates security for the Windows user interface.
• Updates to improve security when Windows performs basic operations.
• Updates to improve security when using Microsoft Office products.

In addition, there are the following fixes and improvements to the Windows version are shipped:

• Addresses an elevation of privilege security vulnerability documented in CVE-2021-1640 related to print jobs submitted to "FILE:" ports. After installing Windows updates from March 9, 2021 and later, print jobs that are in a pending state before restarting the print spooler service or restarting the OS will remain in an error state. Manually delete the affected print jobs and resubmit them to the print queue when the print spooler service is online.
• Security updates to the Windows Shell, Windows Fundamentals, Windows Management, Windows Apps, Windows User Account Control (UAC), Windows Core Networking, Windows Hybrid Cloud Networking, the Windows Kernel, Windows Virtualization, the Microsoft Graphics Component, Internet Explorer, Microsoft Edge Legacy, and Windows Media.

This update is automatically downloaded and installed by Windows Update, but is also available from the Microsoft Update Catalog. Microsoft strongly recommends that you install the latest Service Stack Update (SSU) for your operating system before installing the latest Cumulative Update (LCU). Microsoft lists the known issue that the update causes. Error 0x800f0982 – PSFX_E_MATCHING_COMPONENT_NOT_FOUND may occur during the update installation. Details can be found in the KB article.

In addition, Microsoft has released an update directly to the Windows Update client to improve its reliability. This is rolled out outside of Windows Update if the machine is compatible and not an LTSC variant, and updates have not been blocked via GPO.

Updates for Windows 10 Version 1507 till 1803

For Windows 10 RTM up to version 1803, various updates are available for the LTSC versions and possibly the Enterprise versions. The Home and Pro variants, on the other hand, have fallen out of support. These updates are automatically downloaded and installed by Windows Update, but are available for download from the Microsoft Update Catalog (search for the KB number). Before manual installation, the latest Servicing Stack Update (SSU) must be installed. Details can be found in the respective KB article.

• Windows 10 Version 1803: Update KB5000809 is only available for Enterprise and Education. The update raises the OS build  to 17134.2087.
• Windows 10 Version 1703: Update KB5000812 is only available for Enterprise and Education. The update raises the OS build  to 15063.2679.
• Windows 10 Version 1607: Update KB5000812 is only available for Enterprise and Education. The update raises the OS build  to 14393.4283.
• Windows 10 Version 1507: Update KB5000807 is only available for Enterprise and Education. The update raises the OS build  to 10240.18874.

There was no update for the remaining Windows 10 versions, as these versions are no longer supported. Details about the above updates can be found in the respective Microsoft KB articles.

Similar articles:
Microsoft Office Patchday (March 2, 2021)
Microsoft Security Update Summary (March 9, 2021)
Patchday: Windows 10-Updates (March 9, 2021)
Patchday: Updates for Windows 7/Server 2008 R2 (March 9, 2021)