Microsoft has released KB5004244 for Windows 10 Enterprise 2019 LTSC, Windows 10 IoT Enterprise 2019 LTSC, Windows 10 IoT Core 2019 LTSC, and Windows Server 2019.

July 13, 2021—KB5004244 (OS Build 17763.2061)

Highlights

• Updates to improve security when Windows performs basic operations.

• Updates for verifying usernames and passwords.

Improvements and fixes

This security update includes quality improvements. Key changes include:

• Removes support for the PerformTicketSignature setting and permanently enables Enforcement mode for CVE-2020-17049. For more information and steps to enable full protection on domain controller servers, see  Managing deployment of Kerberos S4U changes for CVE-2020-17049. 

• Adds Advanced Encryption Standard (AES) encryption protections for  CVE-2021-33757. For more information, see  KB5004605.

• Addresses a vulnerability in which Primary Refresh Tokens are not strongly encrypted. This issue might allow the tokens to be reused until the token expires or is renewed. For more information about this issue, see  CVE-2021-33779.

• Security updates to Windows Apps, Windows Management, Windows Fundamentals, Windows Authentication, Windows User Account Control (UAC), Operating System Security, Windows Fundamentals, Windows Virtualization, Windows Linux, the Windows Kernel, the Microsoft Scripting Engine, the Windows HTML Platforms, the Windows MSHTML Platform, and Windows Graphics.

If you installed earlier updates, only the new fixes contained in this package will be downloaded and installed on your device.

For more information about the resolved security vulnerabilities, please refer to the new  Security Update Guide website. 

July 13, 2021—KB5004244 (OS Build 17763.2061)