Regular security and maintenance updates
The updates are recommended for all users as they close security gaps and introduce improvements. The patches start for all users of the still fully supported versions of Windows 10 and Windows 11. Microsoft lists all changes and available variants for desktop and server in the Windows update history and has published the corresponding knowledge base articles. We have compiled the available updates.
The updates can be obtained via the Windows Update function, via the Microsoft Update Catalog or via Windows Server Update Services (WSUS).
Security-related changes
Microsoft combines the latest Servicing Stack Update (SSU) for the operating system with the latest cumulative update (LCU). If you use an older LCU update, you must first carry out the separately offered SSU updates.
A little tip: At the start of the release, the KB articles may not yet be directly accessible from Microsoft. But that usually changes quite quickly. You can already find all new versions by searching in the Microsoft Update catalog. The following list will help you check whether you have installed the latest version.
There you will find the latest build numbers for the individual Windows versions. Check your installed version number using the keyboard shortcut Windows + R to open the Run dialog, typing “WinVer” will then bring up the version display.
Windows 10 versions:
- Version 21H2, 22H2 KB5048652 (Build 19044.5247, 19045.5247)
- Version 1809, KB5048661 (Build 17763.6659)
- Version 1607, Windows Server 2016, KB5048671 (Build 14393.7606)
- Version 1507, KB5048703 (Build 10240.20857)
Windows 11 versions:
- Windows 11 Version 24H2, KB5048667 (Build 26100.2605)
- Windows 11 Version 22H2 and 23H2 KB5048685 (Build 22621.4602 and 22631.4602)
Microsoft has already summarized the most important changes for the new version. We have translated and summarized the highlights of the updates for you. As usual, there is an article about the patch in the knowledge base.
Highlights Windows 10
This security update includes quality improvements that were part of update KB5046714 (released on November 21, 2024). If you install this KB:
- Fixed: This command [Sysprep /generalize] fails with error 0x80073cf. This occurs when you try to remove a package after you have already removed its dependencies.
- Overview of changes in the knowledge base article: KB5048652.
Highlights Windows 11 22H2/23H2
This security update includes improvements that were part of update KB KB5046732 (released on November 21, 2024). If you install this KB:
- This update makes various security improvements to internal operating system features. No additional issues have been documented for this release.
- Overview of changes in the knowledge base article: KB5048685.
Windows 11 Servicing Stack Update – 22621.4539 and 22631.4539
- This update makes quality improvements to the Service Stack, the component that installs Windows Updates. Service Stack Updates (SSU) ensure that you have a stable and reliable service stack so that your devices can receive and install Microsoft updates.
Vulnerability details
There were some vulnerabilities in Defender, VBS, Windows Secure Boot, Windows Registry and File Explorer. The update also addresses vulnerabilities in the kernel as well as the Windows kernel mode driver, the remote desktop client and several vulnerabilities in Office.
For more information about the fixed vulnerabilities, see the Security Update Guide and December 2024 security updates.
Windows 11 FAQ – frequently asked questions Instructions, tips & tricks in the FAQ area
- Microsoft releases December Patch Day updates for Windows
- New builds fix bugs and security vulnerabilities in Windows
- Updates recommended for supported Windows versions
- Obtaining patches via Windows Update, Update Catalog, WSUS
- Combination of latest SSU and LCU in updates
- Latest build numbers can be checked via Windows + R and “WinVer”.
See also:
