As part of the monthly security update release cycle, we provide advance notification to our Premier and Unified Support customers concerning new security updates planned for release, the products affected in the release, and the aggregate maximum severity. This is intended to help our customers plan for the deployment of these security updates more effectively.
Security Update Overview
On February 8, 2022 (Pacific), we are planning to release security updates affecting the following products.
| Product Family | Maximum Severity | Maximum Impact | Servicing Notes | ||||
| Windows 11 | Important | Remote Code Execution | Updates for Windows 11 will be cumulative and will include both security and non-security updates. For deployment and update information, see https://docs.microsoft.com/windows/deployment. | ||||
| Windows 10 v21H2, v21H1, v20H2, and v1909 | Important | Remote Code Execution | Updates for Windows 10 will be cumulative and will include both security and non-security updates. For deployment and update information, see https://docs.microsoft.com/windows/deployment. | ||||
| Windows Server 2022 (including Server Core installation and Azure Edition Core Hotpatch) | Important | Remote Code Execution | Updates for modern Windows Server products will be cumulative and will include both security fixes and non-security updates. For more information, see https://docs.microsoft.com/windows-server. | ||||
| Windows Server 2019, Windows Server 2016, and Server Core installations (2019, 2016, v20H2) | Important | Remote Code Execution | Updates for modern Windows Server products will be cumulative and will include both security fixes and non-security updates. For more information, see https://docs.microsoft.com/windows-server. | ||||
| Windows 8.1, Windows Server 2012 R2, and Windows Server 2012 | Important | Elevation of Privilege | Updates for these down-level versions of Windows will be offered via monthly rollups. For each version of Windows, two rollups will be offered: The Security Monthly Quality Update (aka the Monthly Rollup) will contain both security and reliability fixes. The Security Only Quality Update (aka the Security Only update) will contain only security fixes for the month. For more details, see Simplified servicing for Windows 7 and Windows 8.1: the latest improvements. | ||||
| Microsoft Office | Important | Remote Code Execution | For more information about updates for Office, please visit https://docs.microsoft.com/officeupdates. | ||||
| Microsoft SharePoint | Important | Remote Code Execution | For more information about updates for SharePoint, please visit https://docs.microsoft.com/officeupdates/sharepoint-updates. | ||||
| Microsoft Dynamics | Important | Remote Code Execution | For more information about updates for Dynamics 365 and Dynamics, please visit https://docs.microsoft.com/dynamics365 and https://docs.microsoft.com/dynamics respectively. | ||||
| Microsoft Visual Studio | Important | Remote Code Execution | For more information about updates for Visual Studio, please visit https://docs.microsoft.com/visualstudio. | ||||
| Microsoft .NET | Important | Denial of Service | For more information about updates for .NET, please visit https://docs.microsoft.com/dotnet. | ||||
| Microsoft Power BI Desktop | Important | Elevation of Privilege | For more information about updates for Power BI Desktop, please visit https://docs.microsoft.com/power-bi. | ||||
| Microsoft Teams | Important | Denial of Service | For more information about updates for Teams, please visit https://docs.microsoft.com/MicrosoftTeams. | ||||
| Azure Data Explorer | Important | Spoofing | For more information about updates for Azure Data Explorer, please visit https://docs.microsoft.com/azure/data-explorer | ||||
| SQL Server for Linux Containers | Important | Elevation of Privilege | For more information about updates for SQL Server for Linux Containers, please visit https://msrc.microsoft.com/update-guide. |
The summary above is an overview of updates for commonly used software. Updates for older versions, apps, and open source software may not be listed. Although we do not anticipate any changes, the information detailed above is subject to change until the release.