The Redmond giant has been testing the KB5004237 update with Windows 10 Insiders on the Beta and Release Preview channels. After having passed the tests now comes as a upgrade cumulative to all versions of Windows 10.
What’s new in Windows 10 patch KB50004237
The KB5004237 patch raises the version of Windows 10 in 2004, 20H2, and 21H1 to Build 19041.1110, 19042.1110 and 19042.1110 respectively. This patch includes the following improvements:
- Fixed an issue that could make it difficult to print on certain printers. This issue affects several makes and models, but primarily receipt or label printers that are connected via a USB port.
- Removed configuration support PerformTicketSignature and permanently enable application mode for CVE-2020-17049. For more information and steps to enable full protection on domain controller servers, see Kerberos S4U Change Deployment Management for CVE-2020-17049.
- Added Advanced Encryption Standard (AES) encryption protection for CVE-2021-33757. For more information, see KB5004605.
- Fixed a vulnerability where major refresh tokens are not highly encrypted. This issue could allow tokens to be reused until the token expires or is renewed. For more information about this issue, see CVE-2021-33779.
- Windows Application Security Updates, Windows Administration, Windows Fundamentals, Windows Authentication, Windows User Account Control (UAC), Operating System Security, Windows Virtualization, Windows Linux, Windows Kernel, Windows Engine Microsoft scripting, Windows HTML Platforms, Windows MSHTML Platform, and Windows Graphics.
Cumulative update known issues
- Devices with Windows installations created from custom offline media or a custom ISO image could lose Microsoft Edge Legacy after upgrading and without being replaced by the new Microsoft Edge. This issue only occurs when creating ISO images or custom offline media by integrating this update into the image without first installing the Independent Servicing Stack (SSU) update released on March 29, 2021 or later.
- To avoid this issue, make sure to first embed the SSU released on March 29, 2021 or later into the custom offline media or ISO image before embedding the LCU. To do this with the SSU and LCU combo packages now used for Windows 10 version 20H2 and Windows 10 version 2004, you will need to extract the SSU from the combo package.