Microsoft has released April’s Patch Tuesday update. It has also launched new Windows 10 21H1 builds to both the Window Insider Beta and Release Preview Channels.
Yesterday, Microsoft Patch Tuesday download had covered 114 CVEs. This included new Exchange server bugs. Microsoft said that the NSA had found two remote code execution vulnerabilities.
The Tuesday patches cover everything that needs to be covered including
- Windows
- Edge
- Azure
- Microsoft Office
- SharePoint Server
- Exchange Server
It has fixed the vulnerability in the Kerberos Key Distribution Center (KDC) security feature. This was a pending issue from last November.
The tech giant has removed RemoteFX vGPU in this Patch Tuesday. It has also removed it from all future updates as a researcher found security issues. This was a useful feature as multiple virtual machines could share a physical GPU but the security issues were multiple too.
Security updates in Windows included updates in
- Window App Platform and Frameworks
- Window Apps
- Window Input and Composition
- Windows Office Media
- Windows Fundamentals
- Windows Cryptography
- Windows AI Platform
- Windows Kernel
- Windows Visualization
- Internet Explorer
- Windows Media
When some insiders were trying to install an early version of KB5000842, they got a 0x800f081f error. Microsoft has fixed this error. If the error reappears after the installation of the new build, Microsoft has asked those users to contact the company through its Feedback Hub.
Microsoft has also published a mitigation guide and a one-click mitigation tool. This contains a URL rewrite for one of the vulnerabilities and this would stop the formation of an attack chain.
Microsoft has also released
- New builds for Window 10 versions 2004 that bumped the latest buildups to 19041.928 and 20H2 to 928
- Fixed a printer issue in Windows 10 21H1
- Removed the legacy Edge browser on Windows 10 20H2
These are some but not all of the fixes that have been released by Microsoft on April 2021 Patch Tuesday.