Download Windows 10 Cumulative Updates For July 2021 (KB5004237 + KB5004245)

The second Tuesday of the month has just passed and Microsoft has released updates to all its products including Windows 10, Windows Server, Microsoft Office etc. Since these are important updates, they should be installed automatically if the automatic update is enabled on your computer.

As always, we always recommend to wait for a while and take a backup of your important files before installing the updates. There is no guarantee from Microsoft that the updates will be installed smoothly on the computer. Although Microsoft does extensive testing before releasing the updates, it is possible that the update may make your computer unusable.

In this article, we will mostly talk about Windows 10 cumulative updates for July 2021.

kb5004237 and kb5004245

KB5004237

Since Windows 10 Version 2004, Version 20H2 and Version 21H1 share the same core Operating System, their updates are similar. This is the same update KB5004237 has been released for all three Windows 10 versions .

KB5004237 fixes a bunch of serious security flaws in Windows 10. A total of 68 vulnerabilities have been fixes in which 4 are critical and 64 are important. The four critical vulnerabilities include the following:

  • Print Spooler Remote Code Execution
  • MSHTML Platform Remote Code Execution
  • Hyper-V Remote Code Execution
  • Scripting Engine Memory Corruption

When we look at the Microsoft support page, they specify the following as highlights:

  • Updates regarding the verification of usernames and passwords.
  • Updates designed to enhance the security of Windows when it performs basic functions.
  • This update resolves a printing problem with certain printers. This issue affects a variety of models and brands, but primarily printers that are connected via a USB port.

Other fixes and updates include the following:

  • Added enforcement mode for CVE-2020-17049. Removes support for the PerformTicketSignature setting. 
  • Provides Advanced Encryption Standard (AES) encryption protection.
  • Fixes a vulnerability in which Primary Refresh Tokens are not strongly encrypted. The tokens could be reused until they expire or are renewed. 
  • Security updates to Windows Apps, Windows Management, Windows Fundamentals, Windows Authentication, Windows User Account Control (UAC), Operating System Security, Windows Virtualization, Windows Linux, Windows Kernel, Microsoft Scripting Engine, Windows HTML Platform, Windows MSHTML Platform, and Windows Graphics.

After installing this update, the updated OS build for all three Windows versions will become:

  • Windows 10 Version 21H1 >> 19043.1110
  • Windows 10 Version 20H2 >> 19042.1110
  • Windows 10 Version 2004 >> 19041.1110

KB5004245

KB5004245 has been released for Windows 10 Version 1909. You can check out the support page for information from Microsoft. Since Windows 10 Version 1909 has already reached the end of service on May 11, 2021, you may expect it to be less secure than the later versions. Although Windows 10 Version 21H1 is the latest version of stable Windows, you can also try out Windows 11, the upcoming version of Windows.

KB5004245 fixes almost identical vulnerabilities like KB5004237.

  • Updates to verify usernames and passwords.
  • Updates to improve security when Windows performs basic operations. 
  • Adds Advanced Encryption Standard (AES) encryption protections for CVE-2021-33757.
  • Security updates to Windows Apps, Windows Management, Windows Fundamentals, Windows Authentication, Windows User Account Control (UAC), Operating System Security, Windows Virtualization, Windows Linux, Windows Kernel, the Microsoft Scripting Engine, the Windows HTML Platform, the Windows MSHTML Platform, and Windows Graphics.

Download offline installers

These updates can also be installed on any computer that has the relevant version of Windows 10, without having an internet connection. Download the offline installers below as per your Windows 10 version and platform requirements:

For Windows 10 Version 21H1

Download KB5004237 for Windows 10 Version 21H1 64-Bit [587.6 MB]

Download KB5004237 for Windows 10 Version 21H1 32-Bit [271.3 MB]

For Windows 10 Version 20H2

Download KB5004237 for Windows 10 Version 20H2 64-Bit [587.6 MB]

Download KB5004237 for Windows 10 Version 20H2 32-Bit [271.3 MB]

For Windows 10 Version 1909

Download KB5004245 for Windows 10 Version 1909 64-Bit [526.3 MB]

Download KB5004245 for Windows 10 Version 1909 32-Bit [327.2 MB]

To install the update, simply run the downloaded MSU file and Windows will automatically install the cumulative update.

You can check out your current Windows build by launching Run and then typing winver.

To download any other updates related to any of the above, please check the Microsoft Catalog.

Uninstall the cumulative updates

Here is a quick guide on how you can uninstall the updates on your computer if you face any issues with them:

Uninstall updates using Windows Update History tool

  1. Navigate to the following:
    Start Menu ->Settings –> Update & Security –> Windows Update.
  2. From the right-hand pane, click on View Update History.
  3. Now click on Uninstall updates.
  4. Select Update for Microsoft Windows with the relevant update name and press the Uninstall button.

Uninstall updates using command-line

You can also delete the update by entering several commands in the Command Prompt. Here is how:

  1. Open Command Prompt (Run –> cmd)
  2. Run the following command:
    wmic qfe list brief /format:table
  3. This will show all the updates installed on the computer. Make sure the relevant updates are on the list.
  4. To uninstall the update, run the following command
    wusa /uninstall /kb:UpdateName
    Replace UpdateName with the number from the update. For example, if the update you want to uninstall is KB5001337, you will enter the following command:
    wusa /uninstall /kb:5001337

Restart your computer once the update is uninstalled.

Cleanup after installing Windows Updates

If you want to save space after installing Windows updates, you can run the following commands:

dism.exe /Online /Cleanup-Image /AnalyzeComponentStore
dism.exe /Online /Cleanup-Image /StartComponentCleanup
If you liked this post, Share it on:

Get Updates in Your Inbox

Sign up for the regular updates and be the first to know about the latest tech information

Usman Khurshid
Usman Khurshid is a seasoned IT Pro with over 15 years of experience in the IT industry. He has experience in everything from IT support, helpdesk, sysadmin, network admin, and cloud computing. He is also certified in Microsoft Technologies (MCTS and MCSA) and also Cisco Certified Professional in Routing and Switching.

1 comment

  • AHMAD MASAID
    AHMAD MASAID

    hello, thanks bro

    can you tell me how you get these updates?

Leave your comment