July 13, 2021 Public preview security update (KB5004243)

2021-06-0200:00:00

Microsoft

support.microsoft.com

9 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

6.6 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

7.7 High

AI Score

Confidence

High

0.027 Low

EPSS

Percentile

90.6%

JSON

July 13, 2021 Public preview security update (KB5004243)

Improvements and fixes

This public preview security update includes quality improvements. Key changes include:

Removes support for the PerformTicketSignature setting and permanently enables Enforcement mode for CVE-2020-17049. For more information and steps to enable full protection on domain controller servers, see Managing deployment of Kerberos S4U changes for CVE-2020-17049.
Security updates to Windows Apps, Windows Management, Windows Fundamentals, Windows Authentication, Windows User Account Control (UAC), Operating System Security, Windows Graphics, and Windows Storage and Filesystems.
For more information about the resolved security vulnerabilities, please refer to the Security Update Guide.To return to the Azure Stack HCI documentation site

Known issues in this update

Microsoft is not currently aware of any issues with this update.

How to get this update

The July 13, 2021 security update public preview (KB5004243) for Azure Stack HCI, version 21H2 is delivered from the release channels below. To install it on your Azure Stack HCI cluster, see Update Azure Stack HCI clusters.Install this update****Release Channel	Available	Next Step
Windows Update and Microsoft Update	Yes	None. This update will be downloaded and installed automatically from Windows Update.
Windows Update for Business	Yes	None. This update will be downloaded and installed automatically from Windows Update in accordance with configured policies.
Microsoft Update Catalog	Yes	To get the standalone package for this update, go to the Microsoft Update Catalog website.
Windows Server Update Services (WSUS)	Yes	This update will automatically sync with WSUS if you configure Products and Classifications as follows:Product: Azure Stack HCIClassification: Security Updates
File InformationFor a list of the files that are provided in this update, download the file information for cumulative update 5004243.