Microsoft closes critical security vulnerabilities on Patchday

Microsoft has released important updates for Windows 10 and Windows 11. These include numerous security vulnerabilities, one of which is being actively exploited.

Microsoft has closed a total of 79 security vulnerabilities for Windows 10 and Windows 11. Seven of these vulnerabilities are classified as critical. On the so-called Patch Day, updates are made available to users on the second Tuesday of every month.

Particularly serious is a so-called zero-day vulnerability in Windows Update that is already being actively exploited. This affects older versions of Windows 10 and allows attackers to remove certain security updates, making the systems vulnerable.

In addition, Microsoft has fixed issues with the Windows Installer that caused errors related to user account control. It has also corrected unstable connections with Bluetooth headphones in Windows 11. The company has also improved the “servicing stack”, which is responsible for installing updates.

For the Home and Pro editions of Windows 11 version 22H2, Microsoft points out that only security updates will be provided starting October 8, 2024. Users are advised to update to the latest version. Critical vulnerabilities have also been fixed for Windows Server and various other products such as Azure Stack Hub and SharePoint Server.

In version 1809 of Windows 10, Microsoft has resolved problems with printer connections and Remote Desktop. Difficulties with decrypting drives using BitLocker have also been resolved. Despite many gaps being closed, Microsoft does not classify any others as critical.

The patches are distributed via Windows Update, Windows Server Update Services and the Microsoft Update Catalog. Users of older system versions need to take special steps: First, the servicing stack update KB5043936 must be installed, then the September security update KB5043083.

The availability of updates may appear at different times on devices as the updates are rolled out in waves. However, users have the option to manually check for updates in Windows Settings or use automatic updates – provided they are not disabled or paused.