Microsoft Launches Windows 10 Cumulative Updates KB3135173 and KB3135174

Exterminator

Community Manager
Thread author
Verified
Staff Member
Well-known
Oct 23, 2012
12,527
Today it’s Patch Tuesday, so Microsoft used this important monthly rollout to release new cumulative updates for Windows 10.

Fortunately, this time cumulative updates actually come with release notes, so we’ll finally know what they bring new when installing them on Windows 10.

But before anything, it’s worth mentioning that Microsoft published two different updates, namely KB3135173 and KB3135174, for Windows 10 1511 (November Update) and RTM (10240), respectively.

Both updates come with quality improvements and security fixes, and Microsoft says that neither include new features for the operating system. But what’s more important is that KB3135173 bumps Windows 10 version to 10586.104, while KB3135174 updates the OS to 10240.16682.

You can find the included fixes in these cumulative updates in the box after the jump.

Update to Windows 10 1511 ASAP
While Microsoft delivers cumulative updates for two different branches of Windows 10, the company recommends users to update to the new 1511 version because it includes significant improvements and new features.

“We introduced new operating system features in November after having previewed, or ‘flighted’, them with our Windows Insiders between July and November. Most customers have already been moved automatically from the July branch to the November branch. Windows 10 Professional, Enterprise, and Education edition customers can defer the update to the November branch and stay on the July feature set longer — as long as 10 years for some Enterprise customers. For more info, see Windows 10 servicing options,” the company explained.

The November Update is obviously offered free of charge and can be installed on any Windows 10 device through Windows Update. And yet, there are users whose computers encountered various issues when trying to update to 1511, such as freezes and crashes during the installer, so proceed with caution if you do decide to install it. A backup before anything could really come in handy.

KB3135173
  • Fixed issues with authentication, update installation, and operating system installation.
  • Fixed issue with Microsoft Edge browser caching visited URLs while using InPrivate browsing.
  • Fixed issue that didn't allow simultaneous install of apps from the Windows Store and updates from Windows Update.
  • Fixed issue that delayed the availability of songs added to the Groove Music app in Windows 10 Mobile.
  • Improved security in the Windows kernel.
  • Fixed security issues that could allow remote code execution when malware is run on a target system.
  • Fixed security issues in Microsoft Edge and Internet Explorer 11 that could allow code from a malicious website to be installed and run on a device.
  • Fixed additional issues with the Windows UX, Windows 10 Mobile, Internet Explorer 11, Microsoft Edge, and taskbar.
  • Fixed additional security issues with .NET Framework, Windows Journal, Active Directory Federation Services, NPS Radius Server, kernel-mode drivers, and WebDAV.

KB3135174

  • Improved installation time of updates.
  • Fixed issue with Microsoft Edge browser caching visited URLs while using InPrivate browsing.
  • Improved Silverlight performance.
  • Fixed issue that didn't allow a Windows 10 PC to remotely configure a server.
  • Fixed issue with pictures and tables not displaying in Windows Journal.
  • Fixed security issues that could allow remote code execution when malware is run on a target system.
  • Fixed security issues in Microsoft Edge and Internet Explorer 11 that could allow code from a malicious website to be installed and run on a device.
  • Fixed additional issues with Input Method Editors (IMEs), Direct Access, assigned access, peripheral device detection, barcode scanning, Windows Explorer, Internet Explorer 11, Microsoft Edge, and scripting.
  • Fixed additional security issues with .NET Framework, PDF library, Windows Journal, kernel-mode drivers, Remote Desktop, and WebDAV.
 

Exterminator

Community Manager
Thread author
Verified
Staff Member
Well-known
Oct 23, 2012
12,527
Microsoft to Release Windows 10 Update Change Logs

Microsoft to Release Windows 10 Update Change Logs

Microsoft has just launched a new website called “Windows 10 update history” that comes to address one of the biggest problems since the release of the new operating system: the lack of information regarding system updates.

Microsoft rolls out Windows 10 cumulative updates on a regular basis, but information on what was included has never been provided, with users criticizing the company for a rather tight-lipped approach that forced them to install patches without knowing what was inside.

Based on consumer feedback
But starting today, the company will provide such information, promising to detail every single update on the new website. This is a result of the feedback they received, Microsoft says in an attempt to show that it’s tweaking the way it improves Windows 10 based on user suggestions.

“We're committed to our customers and strive to incorporate their feedback, both in how we deliver Windows as a service and the info we provide about Windows 10,” Microsoft said in an announcement today.

“In response to this feedback, we’re providing more details about the Windows 10 updates we deliver through Windows Update. You'll see a summary of important product developments included in each update, with links to more details. This page will be regularly refreshed, as new updates are released.”

Previously, Microsoft said that it didn’t release any change log with Windows 10 updates because it wanted the whole process to be very straightforward for everyone and explained that the majority of users didn’t want such information anyway.

The company added that release notes wouldn’t be provided unless there was something big inside a specific update, but most cumulative updates released till now brought important changes without release notes.

Fortunately, Microsoft has changed its mind already, so starting today, we’ll always know what we install with those cumulative update. If only every update deploys correctly on our computers.

 

jamescv7

Level 85
Verified
Honorary Member
Mar 15, 2011
13,070
I'm not sure if this is weird but haven't received any cumulative updates even though the setting is set to automatic. But anyways my experience with cumulative updates are smooth and indeed reduce many issues as possible on my system.
 

safe1st

Level 17
Verified
Top Poster
Well-known
Jan 29, 2016
812
I'm not sure if this is weird but haven't received any cumulative updates even though the setting is set to automatic. But anyways my experience with cumulative updates are smooth and indeed reduce many issues as possible on my system.

Just getting 2 updates, installing it now...
 
  • Like
Reactions: Der.Reisende

Der.Reisende

Level 45
Honorary Member
Top Poster
Content Creator
Malware Hunter
Dec 27, 2014
3,423
Got me 3 (2 updates for Win, one for the Malicious Software Removal Tool - Feb' 2016). Took longer than usual to install, but worked fine.
 
  • Like
Reactions: frogboy

Exterminator

Community Manager
Thread author
Verified
Staff Member
Well-known
Oct 23, 2012
12,527
Microsoft: You Must Install This Patch No Matter Your Windows Version

Microsoft: You Must Install This Patch No Matter Your Windows Version

One of the updates that Microsoft rolled out as part of this month’s Patch Tuesday cycle comes to address a critical security flaw in absolutely all Windows versions that are still being supported, starting with Windows Vista Service Pack 2 and ending with Windows 10.

MS16-013 is an update flagged by Microsoft as critical and fixes a Windows Journal vulnerability that would allow an attacker to get control of an unpatched system.

Microsoft explains:

“This security update resolves a vulnerability in Microsoft Windows. The vulnerability could allow remote code execution if a user opens a specially crafted Journal file. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.”

“For an attack to be successful, this vulnerability requires that a user open a specially crafted Journal file with an affected version of Windows Journal. In an email attack scenario, an attacker could exploit the vulnerability by sending a specially crafted Journal file to the user and then convincing the user to open the file.”

What to do until the patch is installed
In case you haven’t yet installed the patch, Microsoft recommends users to avoid opening suspicious file attempts, but also to remove the .jnt file type association to make sure that Windows Journal won’t be launched to allow cybercriminals to exploit the flaw. Needless to say, if you still want to open .jnt files, you need a third-party solution with support for this extension.

Additionally, you can remove Windows Journal by disabling the Windows feature that installs it (which is called Tablet PC Components in Windows 7 and 8.1) or deny access to Journal.exe through a firewall.

Obviously, the best way to remain protected is to install the new patch, which is currently being shipped via Windows Update to Windows computers, but as a general recommendation, it’s better not to open any files coming from unknown sources anyway.

 

Exterminator

Community Manager
Thread author
Verified
Staff Member
Well-known
Oct 23, 2012
12,527
Another update to hide
Microsoft Relaunches Mystery Update Pushing Windows 10 on Windows 7 and 8.1
In addition to the security updates that Microsoft rolled out this Patch Tuesday, the company has also released a handful of non-security updates that bring new functionality on Windows computers.

But what’s more worrying for some Windows 7 and 8.1 users is that the company has re-released the mystery KB3123862 update that seems to be pushing harder for the Windows 10 upgrade on these computers.

As we told you last week, when the KB3123862 patch first showed up, Microsoft says only little about the update, which could make some people worry that it’s related to the way the Windows 10 upgrade might be pushed to their PCs.

Improved upgrade experience for Windows 7 and 8.1 PCs
And undoubtedly, this update is related to the Windows 10 upgrade experience, but it’s not yet known in what way. Microsoft only claims that this “update adds capabilities to some computers that lets users easily learn about Windows 10 or start an upgrade to Windows 10,” so it’s hard to tell what changes it could make to your PC.

And on this month’s Patch Tuesday (February 10), the company re-released the update, and as you can see in the screenshot included in the article, it’s already at version 3.0.

What this means is yet to be determined because nobody knows for sure what are the updates that Microsoft implemented with this new version, but if you just want to stick with Windows 7 or 8.1 for now, it might be a good idea to hide this update and avoid installing it until more information surfaces.

The Windows 10 upgrade will continue to be available for these users completely free of charge until July 29, 2016, so there’s still enough time to install it if you wish to delay the move a little bit longer. Hiding the update can be done from Windows Update > right-click on the KB3123862 patch > Hide update.

 
  • Like
Reactions: Der.Reisende

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top