The second Tuesday of the month has just passed and Microsoft has released updates to all its products including Windows 10, Windows Server, Microsoft Office etc. Since these are important updates, they should be installed automatically if the automatic update is enabled on your computer.
As always, we always recommend to wait for a while and take a backup of your important files before installing the updates. There is no guarantee from Microsoft that the updates will be installed smoothly on the computer. Although Microsoft does extensive testing before releasing the updates, it is possible that the update may make your computer unusable.
In this article, we will mostly talk about Windows 10 cumulative updates for July 2021.
Table of contents
Since Windows 10 Version 2004, Version 20H2 and Version 21H1 share the same core Operating System, their updates are similar. This is the same update KB5004237 has been released for all three Windows 10 versions.
KB5004237 fixes a bunch of serious security flaws in Windows 10. A total of 68 vulnerabilities have been fixes in which 4 are critical and 64 are important. The four critical vulnerabilities include the following:
- Print Spooler Remote Code Execution
- MSHTML Platform Remote Code Execution
- Hyper-V Remote Code Execution
- Scripting Engine Memory Corruption
When we look at the Microsoft support page, they specify the following as highlights:
- Updates regarding the verification of usernames and passwords.
- Updates designed to enhance the security of Windows when it performs basic functions.
- This update resolves a printing problem with certain printers. This issue affects a variety of models and brands, but primarily printers that are connected via a USB port.
Other fixes and updates include the following:
- Added enforcement mode for CVE-2020-17049. Removes support for the PerformTicketSignature setting.
- Provides Advanced Encryption Standard (AES) encryption protection.
- Fixes a vulnerability in which Primary Refresh Tokens are not strongly encrypted. The tokens could be reused until they expire or are renewed.
- Security updates to Windows Apps, Windows Management, Windows Fundamentals, Windows Authentication, Windows User Account Control (UAC), Operating System Security, Windows Virtualization, Windows Linux, Windows Kernel, Microsoft Scripting Engine, Windows HTML Platform, Windows MSHTML Platform, and Windows Graphics.
After installing this update, the updated OS build for all three Windows versions will become:
- Windows 10 Version 21H1 >> 19043.1110
- Windows 10 Version 20H2 >> 19042.1110
- Windows 10 Version 2004 >> 19041.1110
KB5004245 has been released for Windows 10 Version 1909. You can check out the support page for information from Microsoft. Since Windows 10 Version 1909 has already reached the end of service on May 11, 2021, you may expect it to be less secure than the later versions. Although Windows 10 Version 21H1 is the latest version of stable Windows, you can also try out Windows 11, the upcoming version of Windows.
KB5004245 fixes almost identical vulnerabilities like KB5004237.
- Updates to verify usernames and passwords.
- Updates to improve security when Windows performs basic operations.
- Adds Advanced Encryption Standard (AES) encryption protections for CVE-2021-33757.
- Security updates to Windows Apps, Windows Management, Windows Fundamentals, Windows Authentication, Windows User Account Control (UAC), Operating System Security, Windows Virtualization, Windows Linux, Windows Kernel, the Microsoft Scripting Engine, the Windows HTML Platform, the Windows MSHTML Platform, and Windows Graphics.
Download offline installers
These updates can also be installed on any computer that has the relevant version of Windows 10, without having an internet connection. Download the offline installers below as per your Windows 10 version and platform requirements:
For Windows 10 Version 21H1
For Windows 10 Version 20H2
For Windows 10 Version 1909
To install the update, simply run the downloaded MSU file and Windows will automatically install the cumulative update.
You can check out your current Windows build by launching Run and then typing winver.
To download any other updates related to any of the above, please check the Microsoft Catalog.
Uninstall the cumulative updates
Here is a quick guide on how you can uninstall the updates on your computer if you face any issues with them:
Uninstall updates using Windows Update History tool
- Navigate to the following:
Start Menu ->Settings –> Update & Security –> Windows Update.
- From the right-hand pane, click on View Update History.
- Now click on Uninstall updates.
- Select Update for Microsoft Windows with the relevant update name and press the Uninstall button.
Uninstall updates using command-line
You can also delete the update by entering several commands in the Command Prompt. Here is how:
- Open Command Prompt (Run –> cmd)
- Run the following command:
wmic qfe list brief /format:table
- This will show all the updates installed on the computer. Make sure the relevant updates are on the list.
- To uninstall the update, run the following command
wusa /uninstall /kb:UpdateName
Replace UpdateName with the number from the update. For example, if the update you want to uninstall is KB5001337, you will enter the following command:
wusa /uninstall /kb:5001337
Restart your computer once the update is uninstalled.
Cleanup after installing Windows Updates
If you want to save space after installing Windows updates, you can run the following commands:
dism.exe /Online /Cleanup-Image /AnalyzeComponentStore
dism.exe /Online /Cleanup-Image /StartComponentCleanup