August 2024 Patch Tuesday: Essential Security Updates for Windows 10 and 11

  • Thread Author
Every second Tuesday of the month, Microsoft rolls out significant updates for Windows, known as "Patch Tuesday." This regular schedule allows the software giant to address security vulnerabilities and improve system stability across its operating systems, particularly Windows 10 and Windows 11. The latest round of updates, scheduled for August 2024, brings several important security fixes aimed at enhancing user protection while addressing some prior bugs that had been reported.

Overview of August's Updates​

This month, the updates seem rather uneventful on the surface, especially compared to some of the earlier, more extensive releases. However, given the constant evolution of threats in the cybersecurity landscape, any update is significant for maintaining system integrity. Microsoft provides the updates under various knowledge base (KB) identifiers, and users are encouraged to apply them promptly.

Key Fixes for Windows 11​

For users on Windows 11, the important updates include KB5041585 for version 23H2 and 22H2, and KB5041592 for version 21H2. The update spots a succinct focus on addressing specific security vulnerabilities, reflecting a continued commitment to safeguarding user data and system functionality. Below are some of the key highlights from this update:
  • Protected Process Light (PPL) Protections: Enhanced measures against potential bypassing of these protections.
  • Windows Kernel Vulnerable Driver Blocklist: This update expands the blocklist of drivers at risk of exploitation via Bring Your Own Vulnerable Driver (BYOVD) attacks.
  • BitLocker Recovery Issues: An issue where users encounter a BitLocker recovery screen upon startup post-update has been identified. This occurrence is more common when Device Encryption is activated, and users may need to enter a recovery key upon trying to unlock their drives.
  • Lock Screen Connectivity Bug: Fixes related to CVE-2024-38143 have been included, particularly affecting the checkbox for using Windows account credentials for Wi-Fi connectivity.
  • NetJoinLegacyAccountReuse Registry Key: This troublesome key has been removed based on Microsoft’s domain join hardening changes (KB5020276).
  • Secure Boot Advanced Targeting (SBAT): The implementation of SBAT aims to prevent the execution of vulnerable Linux EFI bootloaders, ensuring that only secure systems interact with the operating system. After applying this update, users attempting to boot older Linux ISO images may face issues, for which updated ISO images should be sought from Linux vendors. Unfortunately, users experiencing the 0x80070520 error when attempting to change their profile pictures in Windows 11 21H2 may face ongoing challenges. Microsoft has acknowledged this issue and directed affected users to contact support for assistance.

    Updates for Windows 10​

    Switching gears to Windows 10, the latest updates are tagged with KB5041580 for versions 22H2 and 21H2. Surprisingly, the updates for Windows 10 parallel those highlighted for Windows 11, reaffirming the synchronized nature of security measures across both operating systems. Here’s a recap of relevant fixes:
  • Similar BitLocker Recovery Issues: Like Windows 11, users of Windows 10 may also encounter BitLocker recovery prompts after installing previous updates.
  • Lock Screen Connectivity Fixes: Microsoft has also patched the aforementioned lock screen issue in Windows 10, mirroring the efforts seen in the Windows 11 update.
  • Removal of the NetJoinLegacyAccountReuse Key: This registry adjustment aligns with the overarching efforts from Microsoft to enhance system robustness against potentially harmful conditions.
  • Implementation of SBAT: The application of SBAT to Windows 10 ensures the same layer of protection against vulnerable Linux EFI bootloaders as in Windows 11. As with Windows 11, Microsoft has noted the existence of the 0x80070520 error in Windows 10 and reassured users that a resolution is being actively pursued.

    Moving Forward​

    Given the rising cybersecurity threats targeting operating systems, it is essential for Windows users to stay proactive regarding updates. Although August's Patch Tuesday may appear relatively subdued, the importance of regular maintenance and patching cannot be overstated. Each update serves as a layer of defense against emerging vulnerabilities that could potentially compromise user systems, thus improving overall security posture.

    Conclusion​

    In conclusion, while this month may not present sweeping changes or new features, the security fixes addressing critical vulnerabilities in both Windows 10 and 11 are vital for preserving system integrity. Users are encouraged to download and install these updates through the Microsoft Update Catalog to maintain optimum system performance and safeguard against potential exploits. For further details on the updates, you can check out the complete notes on XDA-Developers .