The Redmond giant tested the KB5004237 update with Windows 10 Insiders on the Beta and Release Preview channels. After passing the tests, it now comes as a cumulative update to all versions of Windows 10.
What’s new in Windows 10 hotfix KB50004237
Patch KB5004237 elevates Windows 10 version 2004, 20H2, and 21H1 to Build 19041.1110, 19042.1110, and 19042.1110 respectively. This patch includes the following improvements:
Fixed an issue that could make printing difficult on some printers. This issue affects many makes and models, but primarily receipt or label printers connected through a USB port. Removed support for the PerformTicketSignature parameter and permanently enabled Enforcement Mode for CVE-2020-17049. For more information and the steps to enable full protection on domain controller servers, see Kerberos S4U Change Deployment Management for CVE-2020-17049. Added Advanced Encryption Standard (AES) encryption protection for CVE-2021-33757. For more information, see article KB5004605. Fixed a vulnerability where major refresh tokens are not highly encrypted. This issue could allow tokens to be reused until the token expires or is renewed. For more information about this issue, see CVE-2021-33779. Windows Application Security Updates, Windows Administration, Windows Basics, Windows Authentication, Windows User Account Control (UAC), Operating System Security, Windows Virtualization, Windows Linux, Windows Kernel, Windows Microsoft Engine Scripting, Windows HTML platforms, Windows MSHTML platform and Windows Graphics.
Cumulative update known issues
Devices with Windows installations created from custom offline media or custom ISO image could lose Microsoft Edge Legacy after upgrading and not being replaced with the new Microsoft Edge. This issue only occurs when creating ISO images or custom offline media by embedding this update in the image without first installing the Independent Servicing Stack (SSU) update released on March 29 2021 or later. To avoid this problem, make sure to first integrate the SSU released on March 29, 2021 or later into the custom offline media or ISO image before integrating the LCU. To do this with the combined SSU and LCU packages now used for Windows 10 version 20H2 and Windows 10 version 2004, you will need to extract the SSU from the combo package.