[German]On February 9, 2021, Microsoft released a whole load of security updates for Windows, Office and so on on February Patchday. In this article, I would like to take a look at some of the bugs that were fixed and also (surprisingly few) problems that I encountered. For admins whose Windows Server 2016 gets stuck at 24% during update installation, Microsoft has withdrawn KB4601392 and released a new SSU KB5001078.
[German]Administrators of Windows 10 version 1607 clients and Windows Server 1607 systems are complaining that installation of the Feb. 9, 2021 security update is stuck at 24%. Microsoft has withdrawn an update and has now released a revised servicing stack update KB5001078 as a solution.
[German]Microsoft also released security updates for a Denial of Service vulnerability in .NET Core and Visual Studio on February 9, 2021 (Patchday). Now a revision of the information as of February 11, 2021 has been followed up.
[German]Administrators of a WordPress installation who use the Responsive Menu plugin should update it urgently (if not done automatically). The developers have fixed several serious vulnerabilities that allow WordPress installation takeover.
[German]Security researchers have found vulnerabilities in nine TCP/IP stacks (according to Amnesia:33), and issued a warning. Microsoft has closed three critical vulnerabilities in the Windows TCP/IP stack as of February 9, 2021, on the occasion of February Patchday.
[Sponsored Post]In the rapidly evolving IT world, choosing the right remote desktop software is critical for organizations that value security, ease of use and reliability. One provider of secure remote access that has been on the market since 2001 is ISL Online, which presents some considerations for choosing such software below. More ...
[German]Microsoft has re-released on Feb. 11, 2021 an updated version of the reliability update KB4023057 for machines with Windows 10. The update is supposed to improve the reliability of the Windows Update service.
[German]On patchday (February 9, 2021), Microsoft also fixed the CVE-2021-24092 vulnerability in Defender, which has probably existed for at least 12 years. This allows an attacker to elevate privileges under Windows, and this without the user's intervention. However, there is no known exploitation.
There is a 0-day vulnerability in Internet Explorer 11 that was not fixed with the February 2021 updates. ACROS Security has now released a micropatch to close this vulnerability in Internet Explorer. I have added the relevant notes in the article 0patch fixes 0-day in Internet Explorer.
[German]Windows Server Update Services (WSUS) 3.0 SP2 seems to have lost its synchronization feature a few days ago, as blog reader Martin B. just told me via email (thanks for that). Addendum: It seems that the issue has been fixed since a couple of hours.
[English]Microsoft has released a special update KB5001028 for Windows 10 version 1909 on February 11, 2020. This is supposed to fix a problem with WLAN connections that leads to a stop error.
MVP:
2013 – 2016
WIMVP:
2017 – 2020
