Patchday: Windows 10/11 Updates (January 14, 2025)

[German]On January 14, 2024 (second Tuesday of the month, Patchday at Microsoft), Microsoft also released cumulative updates for the still supported versions of the client operating systems Windows 10 and Windows 11. Here are some details about these updates, which are intended to fix vulnerabilities and problems.

Updates for Windows 11

A list of Windows 11 updates can be found on this Microsoft website. I have extracted the details below. Microsoft is now providing the following updates for the Windows 11 version mentioned above.

Update KB5050009 for Windows 11 24H2

Cumulative Update KB5050009 raises the OS build for Windows 11 to 26100.2894 and includes quality improvements and security patches. The following applies to the update:

Windows Kernel Vulnerable Driver Blocklist file (DriverSiPolicy.p7b): This update expands the list of drivers that are vulnerable to BYOVD (Bring Your Own Vulnerable Driver) attacks.

This update is automatically downloaded and installed by Windows Update, but is also available in the Microsoft Update Catalog and via WSUS and WUfB. The Windows 11 Servicing Stack Update is integrated in the patch. Any problems caused by the update are listed in the support article.

Update KB5050021 for Windows 11 22H2-23H2

Cumulative Update KB5050021 raises the OS build for Windows 11 to 226×1.4851 and includes quality improvements and security patches. There is also an update of the Windows Kernel Vulnerable Driver Blocklist file (DriverSiPolicy.p7b).

This update is automatically downloaded and installed by Windows Update, but is also available in the Microsoft Update Catalog and via WSUS and WUfB. The Windows 11 Servicing Stack Update is integrated in the patch. Any problems caused by the update are listed in the support article.

Windows 11 version 22H2 Home and Pro are no longer supported. The Enterprise and Education versions will continue to receive security updates.

Updates for Windows 10

A list of the updates can be found on this Microsoft website. I have extracted the details below.

Update KB5049981 for Windows 10 Version 21H2 – 22H2

Cumulative Update KB5049981 raises the OS build for all Windows 10 versions to 1904x.5371. With version 21H2, only the Enterprise, Edcuation and IoT versions are still supported. The update contains security fixes and updates the Windows Kernel Vulnerable Driver Blocklist file (DriverSiPolicy.p7b).

Microsoft also points out that this update makes quality improvements to the Servicing Stack (responsible for Microsoft updates). This update is automatically downloaded and installed by Windows Update, but is also available in the Microsoft Update Catalog and via WSUS and WUfB. Please note the information on installation and any known problems described in the support article.

The problem of repeated update installation described in the article Windows 10: Win RE-Update KB5048239 causes re-install loop (Jan. 2025) may have been resolved according to initial reader reports.

Update KB5050008 foür Windows 10 Enterprise 2019 LTS

Cumulative Update KB5050008 (is sorted under Windows 10 v1809, but refers to Windows 10 2019 Enterprise LTSC and IoT Enterprise LTSC) includes quality improvements and updates the Windows Kernel Vulnerable Driver Blocklist file (DriverSiPolicy.p7b).

The update is automatically downloaded and installed by Windows Update, but is also available in the Microsoft Update Catalog, via WSUS and WUfB. Microsoft has also updated the Service Stack Update (SSU). Please note the installation sequence described in the support article and, if applicable, the notes on further requirements and any existing problems.

Updates for Windows 10 1507 and 1607

Updates for the Enterprise LTSC versions are available for Windows 10 RTM and version 1607. These updates are automatically downloaded and installed by Windows Update, but are available for download in the Microsoft Update Catalog (search for the KB number). The latest Servicing Stack Update (SSU) must be installed before manual installation. Details can be found in the respective KB article.

• Windows 10 Version 1607: Update KB5049993 is only available for Enterprise LTSC and Windows Server 2016. The update addresses security issues.
• Windows 10 Version 1507: Update KB5050013 is available for the RTM version (LTSC). The update fixes vulnerabilities.

Both updates update the Windows Kernel Vulnerable Driver Blocklist file (DriverSiPolicy.p7b). There was no update for the remaining Windows 10 versions, as these versions are no longer supported. If in doubt, details on the above updates can be found in the respective Microsoft KB articles.

Similar articles
Microsoft Security Update Summary (January 14, 2025)
Patchday: Windows 10/11 Updates (January 14, 2025)
Patchday: Windows Server Updates (January 14, 2025)
Patchday: Microsoft Office Updates (January 14, 2025)