Updates KB4480970 and KB4480964 for Windows 7 and 8.1: Everything You Need to Know - How-To Geek
Microsoft Releases Updates KB4480970 and KB4480964 for Windows 7 and 8.1
If you are still using Windows 7 or Windows 8.1 on your device, you might want to check for some important updates that Microsoft released on January 8, 2019. These updates are KB4480970 and KB4480964, which are part of the monthly security patch cycle that Microsoft follows for its supported operating systems.
Microsoft Releases Updates KB4480970 and KB4480964 for Windows 7 and 8.1
In this article, we will explain what these updates are, why they are important, how to get them, how to check if they are installed on your device, and how to uninstall them if you encounter any problems.
What are these updates and why are they important?
These updates are cumulative updates that contain security fixes and improvements for various components of Windows 7 and Windows 8.1. They also include some non-security enhancements that improve the performance and reliability of these operating systems.
These updates are important because they address some critical vulnerabilities that could allow remote code execution, elevation of privilege, information disclosure, or denial of service attacks on your device. These vulnerabilities affect various components such as Windows Kernel, Windows Storage and Filesystems, Windows Wireless Networking, Microsoft JET Database Engine, Microsoft Graphics Component, Microsoft Edge, Internet Explorer, ChakraCore, Windows DHCP Server, .NET Framework, ASP.NET Core MVC Frameworks Components.
By installing these updates, you can protect your device from potential exploits that could compromise your data or damage your system. KB4480970: Monthly Rollup for Windows 7 SP1 and Windows Server 2008 R2 SP1
This update is a monthly rollup that applies to devices running Windows 7 Service Pack 1 (SP1) or Windows Server 2008 R2 SP1. It includes all the security and non-security fixes that were released since the previous monthly rollup in December 2018, as well as some new improvements.
What does this update do?
This update addresses the following security issues:
A remote code execution vulnerability in Windows DHCP Server that could allow an attacker to run arbitrary code on a DHCP server by sending specially crafted packets. This vulnerability is rated as critical and has been assigned the CVE-2019-0547 identifier.
An elevation of privilege vulnerability in Windows Kernel that could allow an attacker to execute code with higher privileges by exploiting a race condition in the memory management. This vulnerability is rated as important and has been assigned the CVE-2019-0539 identifier.
An information disclosure vulnerability in Windows Kernel that could allow an attacker to obtain information about the system memory layout by exploiting a flaw in the handling of page fault exceptions. This vulnerability is rated as important and has been assigned the CVE-2019-0540 identifier.
A denial of service vulnerability in Windows Wireless Networking that could allow an attacker to cause a system crash by sending specially crafted wireless packets. This vulnerability is rated as important and has been assigned the CVE-2019-0541 identifier.
A remote code execution vulnerability in Microsoft JET Database Engine that could allow an attacker to execute arbitrary code on a system by exploiting a flaw in the parsing of database files. This vulnerability is rated as important and has been assigned the CVE-2019-0538 identifier.
A remote code execution vulnerability in Microsoft Graphics Component that could allow an attacker to execute arbitrary code on a system by exploiting a flaw in the handling of embedded fonts. This vulnerability is rated as important and has been assigned the CVE-2019-0565 identifier.
A remote code execution vulnerability in Microsoft Edge that could allow an attacker to execute arbitrary code on a system by exploiting a flaw in the scripting engine. This vulnerability is rated as critical and has been assigned the CVE-2019-0567 identifier.
A remote code execution vulnerability in Internet Explorer that could allow an attacker to execute arbitrary code on a system by exploiting a flaw in the scripting engine. This vulnerability is rated as critical and has been assigned the CVE-2019-0568 identifier.
A remote code execution vulnerability in ChakraCore that could allow an attacker to execute arbitrary code on a system by exploiting a flaw in the scripting engine. This vulnerability is rated as critical and has been assigned the CVE-2019-0566 identifier.
This update also includes some non-security improvements, such as:
Improving the reliability of Windows Update Agent, Shared drives, Virtual Private Network (VPN), Network File System (NFS), Server Message Block (SMB), and Group Policy.
Fixing an issue that prevented some users from pinning a web link to the Start menu or taskbar.
Fixing an issue that caused some devices to fail during startup when Secure Boot was enabled.
Fixing an issue that caused some applications to have difficulty authenticating with certificate-based authentication when using Kerberos Constrained Delegation (KCD).
How to get this update?
This update is available through Windows Update, Microsoft Update Catalog, or Windows Server Update Services (WSUS). If you have automatic updates enabled, you will receive this update automatically. If you want to check for updates manually, you can follow these steps:
Click Start, and then click Control Panel.
Under System and Security, click Check for updates.
If any updates are available, click Install updates.
You can also download this update from the Microsoft Update Catalog website or from the WSUS website. You will need to restart your device after installing this update.
What are the known issues with this update?
Microsoft has acknowledged some issues with this update, such as:
After installing this update, some users may experience network interface controller (NIC) failures on devices with Intel Broadwell-E Stepping 4 processors. Microsoft is working on a resolution and will provide an update when more information is available.
After installing this update, some users may encounter errors when accessing network shares that have the SMBv2 protocol enabled. Microsoft is working on a resolution and will provide an update when more information is available.
After installing this update, some users may experience authentication issues for services that require unconstrained delegation after the Kerberos ticket expires. Microsoft is working on a resolution and will provide an update when more information is available.
If you encounter any of these issues, you can try to uninstall this update and wait for a revised version to be released.
KB4480964: Security Only Quality Update for Windows 8.1 and Windows Server 2012 R2
This update is a security only quality update that applies to devices running Windows 8.1 or Windows Server 2012 R2. It includes only the security fixes that were released in January 2019, and does not include any non-security enhancements.
What does this update do?
This update addresses the following security issues:
A remote code execution vulnerability in Windows DHCP Server that could allow an attacker to run arbitrary code on a DHCP server by sending specially crafted packets. This vulnerability is rated as critical and has been assigned the CVE-2019-0547 identifier.
An elevation of privilege vulnerability in Windows Kernel that could allow an attacker to execute code with higher privileges by exploiting a race condition in the memory management. This vulnerability is rated as important and has been assigned the CVE-2019-0539 identifier.
An information disclosure vulnerability in Windows Kernel that could allow an attacker to obtain information about the system memory layout by exploiting a flaw in the handling of page fault exceptions. This vulnerability is rated as important and has been assigned the CVE-2019-0540 identifier.
A denial of service vulnerability in Windows Wireless Networking that could allow an attacker to cause a system crash by sending specially crafted wireless packets. This vulnerability is rated as important and has been assigned the CVE-2019-0541 identifier.
A remote code execution vulnerability in Microsoft JET Database Engine that could allow an attacker to execute arbitrary code on a system by exploiting a flaw in the parsing of database files. This vulnerability is rated as important and has been assigned the CVE-2019-0538 identifier.
A remote code execution vulnerability in Microsoft Graphics Component that could allow an attacker to execute arbitrary code on a system by exploiting a flaw in the handling of embedded fonts. This vulnerability is rated as important and has been assigned the CVE-2019-0565 identifier.
A remote code execution vulnerability in Microsoft Edge that could allow an attacker to execute arbitrary code on a system by exploiting a flaw in the scripting engine. This vulnerability is rated as critical and has been assigned the CVE-2019-0567 identifier.
A remote code execution vulnerability in Internet Explorer that could allow an attacker to execute arbitrary code on a system by exploiting a flaw in the scripting engine. This vulnerability is rated as critical and has been assigned the CVE-2019-0568 identifier.
A remote code execution vulnerability in ChakraCore that could allow an attacker to execute arbitrary code on a system by exploiting a flaw in the scripting engine. This vulnerability is rated as critical and has been assigned the CVE-2019-0566 identifier.
How to get this update?
This update is available through Windows Update, Microsoft Update Catalog, or Windows Server Update Services (WSUS). If you have automatic updates enabled, you will receive this update automatically. If you want to check for updates manually, you can follow these steps:
Swipe in from the right edge of the screen, tap Settings, and then tap Change PC settings. (If you're using a mouse, point to the lower-right corner of the screen, move the mouse pointer up, click Settings, and then click Change PC settings.)
Tap or click Update and recovery, and then tap or click Windows Update.
Tap or click Check now.
If updates are found, tap or click View details.
In the list of updates, select KB4480964, and then tap or click Install.
You can also download this update from the Microsoft Update Catalog website or from the WSUS website. You will need to restart your device after installing this update.
What are the known issues with this update?
Microsoft has acknowledged some issues with this update, such as:
After installing this update, some users may encounter errors when accessing network shares that have the SMBv2 protocol enabled. Microsoft is working on a resolution and will provide an update when more information is available.
After installing this update, some users may experience authentication issues for services that require unconstrained delegation after the Kerberos ticket expires. Microsoft is working on a resolution and will provide an update when more information is available.
If you encounter any of these issues, you can try to uninstall this update and wait for a revised version to be released.
How to check if these updates are installed on your device?
There are several ways to check if these updates are installed on your device. You can use Windows Update, Control Panel, or Command Prompt.
Using Windows Update
You can use Windows Update to see the list of installed updates on your device. To do this, follow these steps:
For Windows 7, click Start, and then click Control Panel. Under System and Security, click View installed updates.
For Windows 8.1, swipe in from the right edge of the screen, tap Settings, and then tap Change PC settings. (If you're using a mouse, point to the lower-right corner of the screen, move the mouse pointer up, click Settings, and then click Change PC settings.) Tap or click Update and recovery, and then tap or click View your update history.
In the list of updates, look for KB4480970 or KB4480964. If you see them, it means they are installed on your device.
Using Control Panel
You can also use Control Panel to see the list of installed updates on your device. To do this, follow these steps:
For Windows 7, click Start, and then click Control Panel. Under Programs, click Uninstall a program.
For Windows 8.1, swipe in from the right edge of the screen, tap Search (or if you're using a mouse, point to the upper-right corner of the screen, move the mouse pointer down, and then click Search), enter Control Panel in the search box, and then tap or click Control Panel. Under Programs, click Uninstall a program.
In the left pane, click View installed updates.
In the list of updates, look for KB4480970 or KB4480964. If you see them, it means they are installed on your device.
Using Command Prompt
You can also use Command Prompt to see the list of installed updates on your device. To do this, follow these steps:
For Windows 7, click Start, type cmd in the search box, right-click cmd.exe, and then click Run as administrator.
For Windows 8.1, swipe in from the right edge of the screen, tap Search (or if you're using a mouse, point to the upper-right corner of the screen, move the mouse pointer down, and then click Search), enter cmd in the search box, right-click Command Prompt, and then click Run as administrator.
In the Command Prompt window, type wmic qfe list brief /format:table and press Enter.
In the output table, look for KB4480970 or KB4480964 in the HotFixID column. If you see them, it means they are installed on your device.
How to uninstall these updates if you encounter any problems?
If you encounter any problems after installing these updates, such as network issues or authentication failures, you can try to uninstall them and see if that resolves the issue. You can use Windows Update, Control Panel, or Command Prompt to uninstall these updates. Using Windows Update
You can use Windows Update to uninstall these updates from your device. To do this, follow these steps:
For Windows 7, click Start, and then click Control Panel. Under System and Security, click View installed updates.
For Windows 8.1, swipe in from the right edge of the screen, tap Settings, and then tap Change PC settings. (If you're using a mouse, point to the lower-right corner of the screen, move the mouse pointer up, click Settings, and then click Change PC settings.) Tap or click Update and recovery, and then tap or click View your update history.
In the list of updates, select KB4480970 or KB4480964, and then click Uninstall.
Follow the instructions on the screen to complete the uninstallation process.
Using Control Panel
You can also use Control Panel to uninstall these updates from your device. To do this, follow these steps:
For Windows 7, click Start, and then click Control Panel. Under Programs, click Uninstall a program.
For Windows 8.1, swipe in from the right edge of the screen, tap Search (or if you're using a mouse, point to the upper-right corner of the screen, move the mouse pointer down, and then click Search), enter Control Panel in the search box, and then tap or click Control Panel. Under Programs, click Uninstall a program.
In the left pane, click View installed updates.
In the list of updates, select KB4480970 or KB4480964, and then click Uninstall.
Follow the instructions on the screen to complete the uninstallation process.
Using Command Prompt
You can also use Command Prompt to uninstall these updates from your device. To do this, follow these steps:
For Windows 7, click Start, type cmd in the search box, right-click cmd.exe, and then click Run as administrator.
For Windows 8.1, swipe in from the right edge of the screen, tap Search (or if you're using a mouse, point to the upper-right corner of the screen, move the mouse pointer down, and then click Search), enter cmd in the search box, right-click Command Prompt, and then click Run as administrator.
In the Command Prompt window, type wusa /uninstall /kb:4480970 or wusa /uninstall /kb:4480964 and press Enter.
Follow the instructions on the screen to complete the uninstallation process.
Conclusion
In this article, we have discussed what are the updates KB4480970 and KB4480964 that Microsoft released for Windows 7 and Windows 8.1 on January 8, 2019. We have explained what they do, why they are important, how to get them, how to check if they are installed on your device, and how to uninstall them if you encounter any problems. We have also provided some links to the official Microsoft websites where you can find more details about these updates and their known issues.
We hope that this article has been helpful and informative for you. If you have any questions or feedback, please feel free to leave a comment below. Thank you for reading!
FAQs
Here are some frequently asked questions about these updates:
Are these updates mandatory or optional?
These updates are optional, but highly recommended, as they contain important security fixes and improvements for your device. If you have automatic updates enabled, you will receive these updates automatically. If you want to install them manually, you can follow the steps we have provided in this article.
Do these updates affect Windows 10 devices?
No, these updates only apply to devices running Windows 7 or Windows 8.1. If you are using Windows 10, you will receive different updates that are specific to your operating system version.
How long does it take to install these updates?
The installation time may vary depending on your device specifications, internet speed, and the number of updates you have to install. Generally, it should not take more than a few minutes to install these updates. However, you will need to restart your device after installing them, so make sure you save your work and close any open applications before proceeding.
What if I encounter any errors or issues after installing these updates?
If you encounter any errors or issues after installing these updates, such as network problems or authentication failures, you can try to uninstall them and see if that resolves the issue. You can follow the steps we have provided in this article to uninstall these updates using Windows Update, Control Panel, or Command Prompt. Alternatively, you can contact Microsoft Support for further assistance.
Where can I find more information about these updates and their known issues?
You can find more information about these updates and their known issues on the official Microsoft websites. Here are some links that you can visit:
KB4480970: Monthly Rollup for Windows 7 SP1 and Windows Server 2008 R2 SP1
KB4480964: Security Only Quality Update for Windows 8.1 and Windows Server 2012 R2
<a href