KB5012170 for Windows 10 & 11: Important security patch in August

On August 12, 2022By Garmin Philip

Install now!

Anyone who delays or blocks the patch day updates is currently missing out on an important Windows security patch with KB5012170. You can install it separately.

News

Hacker Cyber Attack Malware - Security (icon image)

In the current patch day updates for August for Windows 10, 11, the predecessors and server variants, Microsoft has closed a critical security gap. Specifically, Microsoft has patched the UEFI leak called GRUB-Loader (Grand Unified Boot Loader), also known as BootHole. The patch with the designation KB5012170 blocks known malware for the UEFI. This is done through additions to the Secure Boot Forbidden Signature Database (DBX).

Put simply, these are potentially dangerous programs that can cause damage even before Windows starts. Patch KB5012170 can be found as part of the cumulative updates that Microsoft distributes month by month for Windows. Anyone who has already installed the current downloads is on the safe side. But Windows allows currently critical environments to defer updates. Updates can even be blocked with tricks.

There is a possibility that security update with the patch designation KB5012170 separately via Windows Update Catalog import. The patch is available for the following Microsoft systems:

Windows Server 2012
Windows 8.1 and Windows Server 2012 R2
Windows 10 version 1507
Windows 10 Version 1607 and Windows Server 2016
Windows 10 Version 1809 and Windows Server 2019
Windows 10 version 20H2
Windows 10 release 21H1
Windows 10 release 21H2
Windows Server 2022
Windows 11 version 21H2
Azure Stack HCI version 1809
Azure Stack Data Box Version 1809 (ASDB)

For a successful attack, cybercriminals would first have to obtain admin rights over a system. On the other hand, if Secure Boot is set in the UEFI in such a way that certain Microsoft certificates should be trusted, damage can be added via a bypass.