July 13, 2021—KB5004245 (OS Build 18363.1679)
Applies To
Windows 10 Enterprise, version 1909 Windows 10 Enterprise and Education, version 1909 Windows 10 IoT Enterprise, version 1909Release Date:
7/13/2021
Version:
OS Build 18363.1679
EXPIRATION NOTICE As of 9/12/2023, KB5004245 is only available from Windows Update. This update is no longer available from the Microsoft Update Catalog, or other release channels. We recommend that you update your devices to the latest security quality update. |
5/11/21
REMINDER Windows 10, version 1909 reached end of service on May 11, 2021 for devices running the Home, Pro, Pro for Workstation, Nano Container, and Server SAC editions. After May 11, 2021, these devices will no longer receive monthly security and quality updates that contain protection from the latest security threats. To continue receiving security and quality updates, Microsoft recommends updating to the latest version of Windows 10.We will continue to service the following editions: Enterprise, Education, and IoT Enterprise.
11/19/20 types of Windows updates and the monthly quality update types. To view other notes and messages, see the Windows 10, version 1909 update history home page.
For information about Windows update terminology, see the article about theNote Follow @WindowsUpdate to find out when new content is published to the release information dashboard.
Highlights
-
Updates for verifying usernames and passwords.
-
Updates to improve security when Windows performs basic operations.
Improvements and fixes
This security update includes quality improvements. Key changes include:
-
Adds Advanced Encryption Standard (AES) encryption protections for CVE-2021-33757. For more information, see KB5004605.
-
Security updates to Windows Apps, Windows Management, Windows Fundamentals, Windows Authentication, Windows User Account Control (UAC), Operating System Security, Windows Virtualization, Windows Linux, the Windows Kernel, the Microsoft Scripting Engine, the Windows HTML Platforms, the Windows MSHTML Platform, and Windows Graphics.
If you installed earlier updates, only the new fixes contained in this package will be downloaded and installed on your device.
For more information about the resolved security vulnerabilities, please refer to the new Security Update Guide website.
Windows Update Improvements
Microsoft has released an update directly to the Windows Update client to improve reliability. Any device running Windows 10 configured to receive updates automatically from Windows Update, including Enterprise and Pro editions, will be offered the latest Windows 10 feature update based on device compatibility and Windows Update for Business deferral policy. This doesn't apply to long-term servicing editions.
Known issues in this update
Symptom |
Workaround |
After installing updates released July 13, 2021 on domain controllers (DCs) in your environment, printers, scanners, and multifunction devices that are not compliant with section 3.2.1 of RFC 4556 spec might fail to print when using smart card (PIV) authentication. |
For more information, see KB5005408. |
How to get this update
Before installing this update
Prerequisite:
You must install the April 13, 2021 servicing stack update (SSU) (KB5001406) or the latest SSU (KB5004748) before installing the latest cumulative update (LCU). SSUs improve the reliability of the update process to mitigate potential issues while installing the LCU and applying Microsoft security fixes. For general information about SSUs, see Servicing stack updates and Servicing Stack Updates (SSU): Frequently Asked Questions.
If you are using Windows Update, the latest SSU will be offered to you automatically. To get the standalone package for the latest SSU, search for it in the Microsoft Update Catalog.
Prerequisite for IoT Enterprise only:
You must install the July 13, 2021 servicing stack update (SSU) (KB5004748) before installing the latest cumulative update (LCU).
Install this update
Release Channel |
Available |
Next Step |
Windows Update and Microsoft Update |
Yes |
None. This update will be downloaded and installed automatically from Windows Update. |
Windows Update for Business |
No |
No longer available. |
Microsoft Update Catalog |
No |
No longer available. |
Windows Server Update Services (WSUS) |
No |
No longer available. |
File information
For a list of the files that are provided in this update, download the file information for cumulative update 5004245.