October’s Patch Tuesday includes 84 fixes for Microsoft products including Windows, Windows Server, Edge browser, .NET Framework and Exchange Server. The breakdown of vulnerabilities found and fixed is as follows: To go through each vulnerability in detail, please open the following Google Sheets document: Microsoft Vulnerability list for October 2022 You can find more details on Microsoft’s MSRC vulnerability guide. Just make sure you set the time period to October 2022.
Windows security updates for October 2022
KB5018427/KB5018418 update for Windows 11 (22H2 + 21H2)
This is the first ever Patch Tuesday for Windows 11 22H2 or 2022 Update. After installing KB5018427, your OS build will become 22621.674.
Windows security updates for October 2022 KB5018427/KB5018418 update for Windows 11 (22H2 + 21H2) KB5018410 update for Windows 10 20H2, 21H1 and 21H2 KB5018419 update for Windows Server 2019 and Windows 10 Version 1809 KB5018411 update for Windows Server 2016 and Windows 10 Version 1607 Block any Windows Update from installing Conclusion
According to Microsoft’s help doc for KB5018427, this update comes with security improvements and fixes for Windows. Some known issues are still present. For example, if you copy large files over the network, the copy speed will decrease by up to 40%. Using provisioning packages on Windows 11 22H2 may not work as expected. This issue only affects the enterprise or corporate users. This update will be automatically downloaded and installed through Windows Update. However, if you want to install it manually, you can download it from the following links: Download KB5018427 for Windows 11 22H2 64-bit Download KB5018418 for Windows 11 21H2 64-bit
KB5018410 update for Windows 10 20H2, 21H1 and 21H2
After installing KB5018410, your OS build will become:
Windows 10 20H2 Build 19042.2130Windows 10 21H1 Build 19043.2130Windows 10 21H2 Build 19044.2130
This update includes security updates and fixes, especially for internal operating system functionality. It doesn’t come with new features. There are a couple of known issues that were also present in previous updates. If you have Windows 10 installed from a custom ISO, the Edge legacy browser may not be uninstalled automatically. You will need to manually install Chromium Edge on your computer. After installing this update, file copies using Group Policy Preferences might fail or might create empty shortcuts or files using 0 (zero) bytes. Microsoft suggests one of the following workarounds: This update will be automatically downloaded and installed through Windows Update. However, if you want to install it manually, you can download it from the following links: Download KB5018410 updates for Windows 10 20H2, 21H1 & 21H2 (32-bit + 64-bit)
KB5018419 update for Windows Server 2019 and Windows 10 Version 1809
After installing this update, your operating system build will become build 17763.3532. Please note that Microsoft has already discontinued support for Windows 10 Version 1809 and Windows Server 2019. As a result, users will only get security updates for these versions on LTSB branches. Make sure you’re on the latest supported version of Windows. The fixes included in this update are: You schedule a task every two weeks, but there is a problem. Instead of every two weeks, it runs every week. Some security fixes are also included in this update. You can go through the Google Sheets list (link above) to check each vulnerability and it’s fix by Microsoft. Download KB5018419 for Windows Server 2019 and Windows 10 1809
KB5018411 update for Windows Server 2016 and Windows 10 Version 1607
Installing KB5018411 will take your OS build to 14393.5427. Support for Windows Server 2016 and Windows 10 Version 1607 is long gone. Microsoft only releases essential security fixes for these Operating Systems. After January 2023, Microsoft will stop releasing security updates, leaving customers vulnerable to active security threats. It is advisable to update your OS to the latest supported version of Windows. After installing KB5018411, you will get the following improvements: Download KB5018411 for Windows Server 2016 and Windows 10 1607
Block any Windows Update from installing
Since Patch Tuesday for October 2022 is a mandatory update, it will download and install itself on the schedule. If you want to block it from temporarily or permanently installing, you can follow the steps below: If you want to unhide or show hidden updates, run the tool again and select Show hidden updates instead of Hide updates. The rest of the process is the same.
Conclusion
Since Patch Tuesday updates are mandatory updates, we should always install them when they are available. However, you should always delay the update installation to an extent to make sure there’s no critical problem with the update. If you want to dig deeper into Microsoft Patch Tuesday updates, you can go through the following references: Ghacks summarizes the patch Tuesday updates including Windows as well as other product updates. Tenable provides a graphical way of explaining the patches. Rapid7 provides a summary charts and tables of October 2022 Patch Tuesday vulnerability fixes. I hope this will be helpful in understanding all the security fixes included in Patch Tuesday’s update. Are we missing something that you want included in our Patch Tuesday coverage? Please share your thoughts with us in the comments or contact us directly.
