AKB2000003 Ongoing list of “Group B” monthly Security-only updates for Win7 and 8.1

By @pkcano

Published December 10 2019 rev 2.87

IMPORTANT: Most Win7 and 8.1 customers would be well advised to install the Monthly Rollups as they appear. Your life will be much simpler. If you’re willing to bite the hand that feeds you, though, you can consider joining “Group B” and installing monthly Security-Only updates. There’s a full description of Group A and Group B in the patchocalypse article.

“Group B” Security-Only patches are not cumulative. In order to be protected, you must install all of them. Every. Single. One. By hand. More than that, you have to install them in chronological order — the October patch, followed by the November patch, followed by the December patch, and so on.

If you’re in Group B, you want to minimize Microsoft’s snooping. Turn off the Customer Experience Improvement Program before you begin. You’ll only have to do this once.
Click Start > Control Panel > Action Center. On the left, click the link to Change Action Center settings. Under Related settings, click Customer Experience Improvement Program settings. Choose No, I don’t want to participate in the program. Click Save changes.

If you’re in Group B, you want to avoid telemetry patches.

The most obvious offenders for Win7 are

KB2952664/KB3150513
KB3021917
KB3022345
KB3068708
KB3080149
KB4493132/KB4524752 EOL nags

And for Win 8.1, avoid:

KB2976978/KB3150513
KB3044374
KB3068708
KB3080149

If you see one of those patches in your list of updates, UNCHECK the box next to the patch, so it won’t be installed.

Here are the Security-only patches, starting in October 2016, when the “patchocalypse” took effect. Make sure you download and install the version that matches the “bittedness” of your machine. As of March 1, 2017 there is also a download patch for IE11. The patches for IE11 ARE CUMULATIVE.

In general, when the time comes (which is to say, when the MS-DEFCON level reaches 3, 4 or 5), here’s how to install the Security-Only patches for Win 7 and 8.1.

Step B1: Get your settings right.

In Win7, click Start > Control Panel. In Win 8.1, press Win-X and choose Control Panel. Click System and Security. Under Windows Update, click the link marked “Turn automatic updating on or off.” Make sure Windows Update is set to “Never check for updates (not recommended),” then check the box marked “Give me updates for Microsoft products and check for new optional Microsoft software when I update Windows.” Uncheck the box marked “Give me recommended updates the same way I receive important updates” (yes, Group B is different from Group A), and click OK.

Step B2. Get the Security-only patches and the Cumulative Update for IE11. 

Download any patches in the following list that you haven’t yet installed. Choose Control Panel\Administrative Tools\Services. Scroll down, highlight the Windows Update Service, then at the top left click “Stop.” Double-click on the downloaded MSU file, and let the installer run its course. IF you have multiple security-only updates to install you do not have to reboot between installations, just close the box and install the next. Install the IE11 update last. Reboot the computer.

Step B3: Check for updates.

Back in the Control Panel, under Windows Update, click the link to Check for Updates. (You may have to click Check for Updates a second time.) The check takes many minutes. If it takes many hours, follow these steps.

Step B4: Get rid of the Monthly Rollup.

Click the links to look at the Important and Optional updates. Don’t check any unchecked boxes. If you see any entries marked “Monthly Quality Rollup,” uncheck the boxes — if you’re in Group B, you don’t want them. For heaven’s sake don’t ever check anything marked “Preview.” Be sure to uncheck any telemetry-related updates listed above. If you see any “Security and Quality Rollup for .Net Framework” boxes checked, leave them checked.

Step B5: Get rid of problematic updates.

The list of problematic updates changes every month, so you’ll have to watch the main AskWoody blog page for details. Look for MS-DEFCON posts; they’re clearly marked. In general, if you have no intention of updating this machine to Win10 in the near future, look for KB3150513 and uncheck the box.

Step B6: Install the patches.

Click the button marked Install Updates and follow the instructions. You’ll end up with Office patches, .Net patches, possible Adobe Flash fixes, Security Essentials update, and the usual MSRT scanner. Reboot the computer.

Step B7: Wash, rinse, repeat.

Go through Steps B3 to B6 again, to see if Windows Update picked up any new patches. Repeat until there aren’t any more additional (new) patches. When you’re done, you’re done, but be sure to watch this site next month to see when the unpaid beta testers are done.

* * * * * * * * * * *

For Windows 7:

Oct 2016 KB 3192391 – Download 32-bit or 64-bit

Nov 2016 KB 3197867 – Download 32-bit or 64-bit

Dec 2016 KB 3205394 – Download 32-bit or 64-bit

Jan 2017 KB 3212642 – Download 32-bit or 64-bit

Feb 2017 – No security-only patches were issued

Mar 2017 KB 4012212 – Download 32-bit or 64-bit
Mar 2017 (IE11) KB 4012204 – Download 32-bit or 64-bit
Mar 2017 (IE11 Hotfix if you run CRM 2011) KB 4016446 – Download 32-bit or 64-bit

Apr 2017 KB 4015546 – Download 32-bit or 64-bit
Apr 2017 (IE11) KB 4014661 – Download 32-bit or 64-bit

May 2017 KB 4019263 – Download 32-bit or 64-bit
May 2017 (IE11) KB 4018271 – Download 32-bit or 64-bit

Jun 2017 KB 4022722 – Download 32-bit or 64-bit
Jun 2017 (IE11) KB 4021558 – Download 32-bit or 64-bit

Jul 2017 KB 4025337 – Download 32bit or 64bit
Jul 2017 (IE11) KB 4025252 – Download 32bit or 64bit

Aug 2017 KB 4034679 – Download 32-bit or 64-bit
Aug 2017 KB 4039884 (dual monitor hotfix 8/30/17) – Download 32-bit or 64-bit
Aug 2017 (IE11) KB 4034733 – Download 32-bit or 64-bit

Sep 2017 KB 4038779 – Download 32-bit or 64-bit
Sep 2017 (IE11) KB 4036586 – Download 32-bit or 64-bit

Oct 2017 KB 4041678 – Download 32-bit or 64-bit
Oct 2017 (IE11) KB 4040685 – Download 32-bit or 64-bit

Nov 2017 KB 4048960 – Download 32-bit or 64-bit
Nov 2017 (IE11) KB 4047206 – Download 32-bit or 64-bit
Nov 2017 KB 4055038 (fix for dot matrix printers) – Download 32-bit or 64-bit

Dec 2017 KB 4054521 – Download 32-bit or 64-bit
Dec 2017 (IE11) KB 4052978 – Download 32-bit or 64-bit

Jan 2018 KB 4056897 – Download 32-bit or 64-bit
Jan 2018 KB 4073578 (released 1/12 for unbootable state AMD) – Download 32-bit or 64-bit
Jan 2018 (IE11) KB 4056568 – Download 32-bit or 64-bit

Feb 2018 KB 4074587 – Download 32-bit or 64-bit
Feb 2018 (IE11) KB 4074736 – Download 32-bit or 64-bit
Feb 2018 (IE11) KB 4088835 (released 2/22 fix MS Outlook Web App) – Download 32-bit or 64-bit

Mar 2018 KB 4088878 – Download 32-bit or 64-bit
Mar 2018 (IE11) KB 4089187 – Download 32-bit or 64-bit
Mar 2018 (IE11) KB 4096040 (released 3/23/2018, replaces KB 4089187, fixes “IE11 doesn’t start after installing KB4089187) – Download 32-bit or 64-bit

Apr 2018 KB 4093108 – Download 32-bit or 64-bit
Apr 2018 (IE11) KB 4092946 – Download 32-bit or 64-bit

May 2018 KB 4103712 – Download 32-bit or 64-bit
May 2018 (IE11) KB 4103768 – Download 32-bit or 64-bit

Jun 2018 KB 4284867 – Download 32-bit or 64-bit
Jun 2018 KB 4230450 (IE11) – Download 32-bit or 64-bit

Jul 2018 KB 4338823 – Download 32-bit or 64-bit
Jul 2018 KB 4345459 (released 7/16/2018, replaces KB 4338823, fixes 0xD1 error, W3SVC, tcpip.sys) – Download 32-bit or 64-bit
Jul 2018 KB 4339093 (IE11) – Download 32-bit or 64-bit

Aug 2018 KB 4343899 – Download 32-bit or 64-bit
Aug 2018 KB 4343205 (IE11) – Download 32-bit or 64-bit

Sep 2018 KB 4457145 – Download 32-bit or 64-bit
Sep 2018 (IE11) KB 4457426 – Download 32-bit or 64-bit
Sep 2018 (IE11) KB 4463376 – Download 32-bit or 64-bit (Released 9/14/2018 fixes preformance decrease using roaming profiles or not using MS Compat List)

Oct 2018 KB 4462915 – Download 32-bit or 64-bit
Oct 2018 (IE11) KB 4462949 – Download 32-bit or 64-bit

Nov 2018 KB 4467106 – Download 32-bit or 64-bit
Nov 2018 (IE11) KB 4466536 – Download 32-bit or 64-bit

Dec 2018 KB 4471328 – Download 32-bit or 64-bit
Dec 2018 (IE11) KB 4470199 – Download 32-bit or 64-bit
Dec 2018 (IE11) KB 4483187 – Download 32-bit or 64-bit (Released 12/19/2018 replaces KB4470199, fixes CVE-2018-8653 Scripting Engine Memory Corruption Vulnerability)

Jan 2019 KB 4480960 – Download 32-bit or 64-bit
Jan 2019 (IE11) KB 4480965 – Download 32-bit or 64-bit

Feb 2019 KB 4486564 – Download 32-bit or 64-bit
Feb 2019 (IE11) KB 4486474 – Download 32-bit or 64-bit
Feb 2019 (IE11) KB 4491113 – Download 32-bit or 64-bit (Released 2/19/2019 fixes IE cannot load images with (\) in their relative sources path.

Mar 2019 KB 4489885 – Download 32-bit or 64-bit
Mar 2019 (IE11) KB 4489873 – Download 32-bit or 64-bit

Apr 2019 KB 4493448 – Download 32-bit or 64-bit
Apr 2019 (IE11) KB 4493435 – Download 32-bit or 64-bit

May 2019 KB 4499175 – Download 32-bit or 64-bit
May 2019 pciclearstalecache – Download 32-bit or 64-bit
May 2019 (IE11) KB 4498206 – Download 32-bit or 64-bit
May 2019 (IE11) KB 4505050 – Download 32-bit or 64-bit (Released 5/18/2019 fixes  (HSTS) HTTP Strict Transport Security for gov.uk websites)

Jun 2019 KB 4503269 – Download 32-bit or 64-bit
Jun 2019 KB 4508772 – Download 32-bit or 64-bit (Released 6/20/2019 fixes MMC error, Custom Views in Event Viewer)
Jun 2019 (IE11) KB 4503259 – Download 32-bit or 64-bit
Jun 2019 (IE11) KB 4508646 – Download 32-bit or 64-bit (Released 6/20/2019 fixes error with SVG markers, Power BI)

Jul 2019 KB 4507456 – Download 32-bit or 64-bit (NOTE: contains KB2952664 functionality known as the “Compatibility Appraiser”)
Jul 2019 (IE11) KB 4507434 – Download 32-bit or 64-bit
Jul 2019 (IE11) KB4510979 – Download 32-bit or 64-bit (Released 7/16/2019 fixes Windows-Eyes screen reader app error)

Aug 2019 KB 4512486 – Download 32-bit or 64-bit
Aug 2019 KB 4517297 – Download 32-bit or 64-bit (Released 8/16 fixes VB6, VBA,VBScript. If you install this you do not need KB4512486)
Aug 2019 (IE11) KB 4511872 – Download 32-bit or 64-bit

Sep 2019 KB 4516033 – Download 32-bit or 64-bit (NOTE: contains KB2952664 functionality known as the “Compatibility Appraiser”)
Sep 2019 (IE11) KB 4516046 – Download 32-bit or 64-bit
Sep 2019 (IE11) KB 4522007 – Download 32-bit or 64-bit (Released 9/23/2019 fixes remote code execution vulnerability CVE-2019-1367, prerequsites SSU KB 4516655 and KB 4474419 SHA-2 Code Signing Support )

Oct 2019 (IE11) KB 4524135 – Download 32-bit or 64-bit (Released 10/3/2019 fixes remote code execution vulnerability CVE-2019-1367)

Oct 2019 KB 4520003 – Download 32-bit or 64-bit
Oct 2019 (IE11) KB 4519974 – Download 32-bit or 64-bit

Nov 2019 KB 4525233 – Download 32-bit or 64-bit
Nov 2019 (IE11) KB 4525106 – Download 32-bit or 64-bit

Dec 2019 KB 4530692 – Download 32-bit or 64-bit (Contains KB4493132 Windows 7 EOS nagware)
Dec 2019 (IE11) KB 4530677 – Download 32-bit or 64-bit

For Windows 8.1:

Oct 2016 KB 3192392  – Download 32-bit or 64-bit

Nov 2016 KB 3197873 – Download 32-bit or 64-bit

Dec 2016 KB 3205400 – Download 32-bit or 64-bit

Jan 2017 – No security-only patches were issued

Feb 2017 – No security-only patches were issued

Mar 2017 KB 4012213 – Download 32-bit or 64-bit
Mar 2017 (IE) KB 4012204 – Download 32-bit or 64-bit
Mar 2017 (IE Hotfix if you run CRM 2011) KB 4016446 – Download 32-bit or 64-bit

Apr 2017 KB 4015547 – Download 32-bit or 64-bit
Apr 2017 (IE11) KB4014661 – Download 32-bit or 64-bit

May 2017 KB 4019213 – Download 32-bit or 64-bit
May 2017 (IE11) KB 4018271 – Download 32-bit or 64-bit

Jun 2017 KB 4022717 – Download 32-bit or 64-bit
Jun 2017 (IE11) KB 4021558 – Download 32-bit or 64-bit

Jul 2017 KB 4025333 – Download 32bit or 64bit
Jul 2017 (IE11) KB 4025252 – Download 32bit or 64bit

Aug 2017 KB 4034672 – Download 32-bit or 64-bit
Aug 2017 (IE11) KB 4034733 – Download 32-bit or 64-bit

Sep 2017 KB 4038793 – Download 32-bit or 64-bit
Sep 2017 (IE11) KB 4036586 – Download 32-bit or 64-bit

Oct 2017 KB 4041687 – Download 32-bit or 64-bit
Oct 2017 (IE11) KB 4040685 – Download 32-bit or 64-bit

Nov 2017 KB 4048961 – Download 32-bit or 64-bit
Nov 2017 (IE11) KB 4047206 – Download 32-bit or 64-bit
Nov 2017 KB 4055038 (fix for dot matrix printers) – Download 32-bit or 64-bit

Dec 2017 KB 4054522 – Download 32-bit or 64-bit
Dec 2017 (IE11) KB 4052978 – Download 32-bit or 64-bit

Jan 2018 KB 4056898 – Download 32-bit or 64-bit
Jan 2018 KB 4073576 (released 1/10 for unbootable state AMD) – Download 32-bit or 64-bit
Jan 2018 KB 4077561 (release 1/24 for PIC/APIC stop errors) – Download 32-bit or 64-bit
Jan 2018 (IE11) KB 4056568 – Download 32-bit or 64-bit

Feb 2018 KB 4074597 – Download 32-bit or 64-bit
Feb 2018 (IE11) KB 4074736 – Download 32-bit or 64-bit

Mar 2018 KB 4088879 – Download 32-bit or 64-bit
Mar 2018 (IE11) KB 4089187 – Download 32-bit or 64-bit

Apr 2018 KB 4093115 – Download 32-bit or 64-bit
Apr 2018 (IE11) KB 4092946 – Download 32-bit or 64-bit

May 2018 KB 4103715 – Download 32-bit or 64-bit
May 2018 (IE11) KB 4103768 – Download 32-bit or 64-bit

Jun 2018 KB 4284878 – Download 32-bit or 64-bit
Jun 2018 KB 4230450 (IE11) – Download 32-bit or 64-bit

Jul 2018 KB 4338824 – Download 32-bit or 64-bit
Jul 2018 KB 4345424 (released 7/16/2018, replaces KB 4338824, fixes 0xD1 error, W3SVC, tcpip.sys) – Download 32-bit or 64-bit
Jul 2018 KB 4339093 (IE11) – Download 32-bit or 64-bit

Aug 2018 KB 4343888 – Download 32-bit or 64-bit
Aug 2018 KB 4343205 (IE11) – Download 32-bit or 64-bit

Sep 2018 KB 4457143 – Download 32-bit or 64-bit
Sep 2018 (IE11) KB 4457426 – Download 32-bit or 64-bit
Sep 2018 (IE11) KB 4463376 – Download 32-bit or 64-bit (Released 9/14/2018 fixes preformance decrease using roaming profiles or not using MS Compat List)

Oct 2018 KB 4462941 – Download 32-bit or 64-bit
Oct 2018 (IE11) KB 4462949 – Download 32-bit or 64-bit

Nov 2018 KB 4467703 – Download 32-bit or 64-bit
Nov 2018 (IE11) KB 4466536 – Download 32-bit or 64-bit

Dec 2018 KB 4471322 – Download 32-bit or 64-bit
Dec 2018 (IE11) KB 4470199 Download 32-bit or 64-bit
Dec 2018 (IE11) KB 4483187 – Download 32-bit or 64-bit (Released 12/19/2018 replaces KB4470199, fixes CVE-2018-8653 Scripting Engine Memory Corruption Vulnerability)

Jan 2019 KB 4480964 – Download 32-bit or 64-bit
Jan 2019 (IE11) KB 4480965 – Download 32-bit or 64-bit

Feb 2019 KB 4487028 – Download 32-bit or 64-bit
Feb 2019 (IE11) KB 4486474 – Download 32-bit or 64-bit
Feb 2019 (IE11) KB 4491113 – Download 32-bit or 64-bit (Released 2/19/2019 fixes IE cannot load images with (\) in their relative sources path.

Mar 2019 KB 4489883 – Download 32-bit or 64-bit
Mar 2019 (IE11) KB 4489873 – Download 32-bit or 64-bit

Apr 2019 KB 4493467 – Download 32-bit or 64-bit
Apr 2019 (IE11) KB 4493435 – Download 32-bit or 64-bit

May 2019 KB 4499165 – Download 32-bit or 64-bit
May 2019 (IE11) KB 4498206 – Download 32-bit or 64-bit
May 2019 (IE11) KB 4505050 – Download 32-bit or 64-bit (Released 5/18/2019 fixes  (HSTS) HTTP Strict Transport Security for gov.uk websites)

Jun 2019 KB 4503290 – Download 32-bit or 64-bit
Jun 2019 KB 4508773 – Download 32-bit or 64-bit (Released 6/20/2019 fixes MMC error, Custom Views in Event Viewer)
Jun 2019 (IE11) KB 4503259 – Download 32-bit of 64-bit
Jun 2019 (IE11) KB 4508646 – Download 32-bit or 64-bit (Released 6/20/2019 fixes error with SVG markers, Power BI)

Jul 2019 KB 4507457 – Download 32-bit or 64-bit
Jul 2019 (IE11) KB 4507434 – Download 32-bit or 64-bit
Jul 2019 (IE11) KB4510979 – Download 32-bit or 64-bit (Released 7/16/2019 fixes Windows-Eyes screen reader app error)

Aug 2019 KB 4512489 – Download 32-bit or 64-bit
Aug 2019 KB 4517298 – Download 32-bit or 64-bit (Released 8/16 fixes VB6, VBA,VBScript. If you install this you do not need KB4512489)
Aug 2019 (IE11) KB 4511872 – Download 32-bit or 64-bit

Sep 2019 KB 4516064 – Download 32-bit or 64-bit (NOTE: contains telemetry functionality known as the “Compatibility Appraiser”)
Sep 2019 (IE11) KB 4516046 – Download 32-bit or 64-bit
Sep 2019 (IE11) KB 4522007 – Download 32-bit or 64-bit (Released 9/23/2019 fixes remote code execution vulnerability CVE-2019-1367)

Oct 2019 (IE11) KB 4524135 – Download 32-bit or 64-bit (Released 10/3/2019 fixes remote code execution vulnerability CVE-2019-1367)

Oct 2019 KB 4519990 – Download 32-bit or 64-bit
Oct 2019 (IE11) KB 4519974 – Download 32-bit or 64-bit

Nov 2019 KB 4525250 – Download 32-bit or 64-bit
Nov 2019 (IE11) KB 4525106 – Download 32-bit or 64-bit

Dec 2019 KB 4530730 – Download 32-bit or 64-bit
Dec 2019 (IE11) KB 4530677 – Download 32-bit or 64-bit

This is the official list. Comments are always welcome, but I’ve moved them to a separate Topic so folks won’t get confused.

• This topic was modified 6 months, 2 weeks ago by  PKCano.
• This topic was modified 6 months ago by  PKCano.
• This topic was modified 6 months ago by  PKCano.
• This topic was modified 5 months, 3 weeks ago by  PKCano.
• This topic was modified 5 months ago by  PKCano.
• This topic was modified 4 months, 3 weeks ago by  PKCano.
• This topic was modified 4 months, 3 weeks ago by  PKCano.
• This topic was modified 4 months, 2 weeks ago by  PKCano.
• This topic was modified 3 months, 4 weeks ago by  PKCano.
• This topic was modified 3 months, 3 weeks ago by  PKCano.
• This topic was modified 3 months ago by  PKCano.
• This topic was modified 3 months ago by  PKCano.
• This topic was modified 3 months ago by  PKCano.
• This topic was modified 2 months, 2 weeks ago by  PKCano.
• This topic was modified 2 months, 1 week ago by  PKCano.
• This topic was modified 2 months ago by  PKCano.
• This topic was modified 2 months ago by  PKCano.
• This topic was modified 4 weeks ago by  PKCano.
• This topic was modified 20 hours, 52 minutes ago by  PKCano.
• This topic was modified 20 hours, 44 minutes ago by  PKCano.
• This topic was modified 20 hours, 43 minutes ago by  PKCano.

Total of 60 users thanked author for this post. Here are last 20 listed.

Sword2012, Christa S, bradam, geekdom, rowrbazzle, Kate, Slowpoke47, lanceboil, GoneToPlaid, ojiisang, Klaas Vaak, StruldBrug, Laptop Boy, OscarCP, Fritz, Sessh, ryegrass, lizzytish, Psylii