Patchday: Windows 10-Updates (August 10, 2021)

[German]On August 10, 2021 (second Tuesday of the month, Patchday at Microsoft), several cumulative updates were released for the supported Windows 10 builds (from the RTM version to the current version 21H1). Here are some details about the respective patchday security updates.

A list of the updates can be found on this Microsoft website. I have pulled out the details below. Since March 2021, Microsoft has integrated the Servicing Stack Updates (SSUs) into the cumulative update. But that only applies to Windows 10 version 2004 and above, so there are still separate SSU installation for older Windows 10 versions.

Updates for Windows 10 Version 2004/20H2/21H1

For Windows 10 version 2004 released in May 2020, as well as Windows 10 version 20H2 offered in October 2020 and Windows 10 version 21H1 released in May 2021, Microsoft provides the same update packages mentioned below.

Update 5005033 for Windows 10 Version 2004/20H2/21H1

Cumulative Update KB5005033 raises the OS build to 19041.1165 for Windows 10 version 2004 and to 19042.1165 for Windows 10 version 20H2. For Windows 10 version 21H1, it becomes OS build 19043.1165. The update is available for Windows 10 version 2004, Windows 10 version 20H2, Windows 10 version 21H1, and for Windows Server version 2004, Windows Server version 20H2, and Windows Server version 21H1. It includes quality improvements but no new operating system features. The point-and-print vulnerability has been addressed. Here's the list of improvements, called highlights by Microsoft:

Updates the default installation privilege requirement so that you must be an administrator to install drivers when using Point and Print.

Microsoft notes that this update makes quality improvements to the servicing stack (is responsible for Microsoft updates). In addition, there are the following general fixes and improvements:

Changes the default privilege requirement for installing drivers when using Point and Print. After installing this update, you must have administrative privileges to install drivers. If you use Point and Print, see KB5005652, Point and Print Default Behavior Change, and CVE-2021-34481 for more information.

Important: Prerequisite for installation is an installed update KB5003173 from May 11, 2021. This was already the case with the Preview Update from May 2021 – so you can save the "cumulative" for Windows 10 2004 to 21H1 for the foreseeable future (thanks to Martin E. for the hint). This update is automatically downloaded and installed by Windows Update, but is also available in the Microsoft Update Catalog and via WSUS and WUfB. For the update, Microsoft states several known issues in the support article.

In addition, Microsoft has released an update directly for the Windows Update client to improve its reliability. This is rolled out outside of Windows Update if the machine is compatible and not an LTSC variant and updates were not blocked via GPO.

Notes: Windows Subsystem for Linux (wsl) has been backported to Windows 10 version 2004 and above (see). This causes issues with Eclipse (see Github WSL issues 7268, Eclipse bugs). And regarding the point-and-print issue, I would like to point to this tweet, it doesn't seem to be fixed at all.

Updates for Windows 10 Version 1909

The following updates are available for Windows 10 version 1909 released in 2019.

Update KB5005031 for Windows 10 Version 1909

Cumulative update KB5005031 raises the Windows 10 V1909 OS build to 18363.1734. The update is available for Windows 10 Enterprise/Education version 1909 and Windows Server version 1909. The update includes quality improvements but no new OS features. Here's the list of improvements, described by Microsoft as highlights:

Updates the default installation privilege requirement so that you must be an administrator to install drivers when using Point and Print.

In addition, there are the following fixes and improvements to Windows 10 version 1909:

Changes the default privilege requirement for installing drivers when using Point and Print. After installing this update, you must have administrative privileges to install drivers. If you use Point and Print, see KB5005652, Point and Print Default Behavior Change, and CVE-2021-34481 for more information.

This update is automatically downloaded and installed by Windows Update. This update is also available from the Microsoft Update Catalog and via WSUS and WUfB. Microsoft strongly recommends that you install the latest Service Stack Update (SSU) for your operating system before installing the latest Cumulative Update (LCU). For the update, Microsoft gives an issue that is documented in the support article.

In addition, Microsoft has released an update directly to the Windows Update client to improve its reliability. This is rolled out outside of Windows Update if the machine is compatible and not an LTSC variant and updates have not been blocked via GPO.

Updates for Windows 10 Version 1809

Windows 10 October 2018 Update (version 1809) has fallen out of support, but the following update is available for Windows 10 Enterprise 2019 LTSC and Windows Server 2019.

Update KB5005030 for Windows 10 Version 1809

Cumulative Update KB5005030 raises the OS build (according to MS) to 17763.2114 and includes quality improvements but no new OS features. Also for this Windows 10 version, which only receives updates for Enterprise, Education, IoT Enterprise LTSC (the rest of the variants are out of the supply of security updates on May 11, 2021), Microsoft provided the following improvements, called highlights:

Updates the default installation privilege requirement so that you must be an administrator to install drivers when using Point and Print.

In addition, there are the following fixes and improvements to the Windows version:

Changes the default privilege requirement for installing drivers when using Point and Print. After installing this update, you must have administrative privileges to install drivers. If you use Point and Print, see KB5005652, Point and Print Default Behavior Change, and CVE-2021-34481 for more information.

This update is automatically downloaded and installed by Windows Update, but is also available from the Microsoft Update Catalog,  via WSUS, and WUfB. Microsoft strongly recommends that you install the latest Service Stack Update (SSU) for your operating system before installing the latest Cumulative Update (LCU). Microsoft lists the known issue that the update causes. Error 0x800f0982 – PSFX_E_MATCHING_COMPONENT_NOT_FOUND may occur during the update installation. Details can be found in the KB article.

In addition, Microsoft has released an update directly for the Windows Update client to improve its reliability. This is rolled out outside of Windows Update if the machine is compatible and not an LTSC variant and updates have not been blocked via GPO.

Updates for Windows 10 Version 1507 till 1607

Updates for the Enterprise LTSC versions are available for Windows 10 RTM up to version 1607. These updates are automatically downloaded and installed by Windows Update, but are available for download from the Microsoft Update Catalog (search by KB number). Before manual installation, the latest Servicing Stack Update (SSU) must be installed. Details can be found in the respective KB article.

• Windows 10 Version 1607: Update KB5005043 is only available for Enterprise LTSC. The update upgrades the OS build to 14393.4583.
• Windows 10 Version 1507: Update KB5005040 is available for the RTM version (LTSC). The update raises the OS build to 10240.19022.

There was no update for the remaining Windows 10 versions, as these versions have fallen out of support. Details about the above updates can be found in the respective Microsoft KB articles if in doubt.

Similar article:
Microsoft Office Patchday (August 3, 2021)
Microsoft Security Update Summary (August 10, 2021)
Patchday: Windows 10-Updates (August 10, 2021)
Patchday: Updates for Windows 7/Server 2008 R2 (August 10, 2021)
Patchday: Windows 8.1/Server 2012-Updates (August 10, 2021)