- Windows 7 for 32-bit Systems Service Pack 1
- Windows 7 for x64-based Systems Service Pack 1
- Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1
- Windows Server 2008 R2 for x64-based Systems Service Pack 1
- Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)
This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. Servicing stack updates (SSU) makes sure that you have a robust and reliable servicing stack so that your devices can receive and install Microsoft updates.
This update also addresses an elevation of privilege vulnerability that exists when the Windows Modules Installer improperly handles file operations. An attacker who successfully exploited this vulnerability could gain elevated privileges. The security update addresses the vulnerability by ensuring the Windows Modules Installer properly handles file operations. For more information, see CVE-2020-1346 | Windows Modules Installer Elevation of Privilege Vulnerability.
Important Before you install this update, see the Prerequisites section.
How to get this update
Method 1: Windows Update
This update is available through Windows Update. It will be downloaded and installed automatically.
Method 2: Microsoft Update Catalog
To get the stand-alone package for this update, go to the Microsoft Update Catalog website.
Method 3: Windows Server Update Services
This update is also available through Windows Server Update Services (WSUS).
You must have the following updates installed before you apply this update. If you use Windows Update, these updates will be offered automatically as needed.
- You must have the SHA-2 update (KB4474419) that is dated September 23, 2019 or a later SHA-2 update installed and then restart your device before you apply this update. If you use Windows Update, the latest SHA-2 update will be offered to you automatically. For more information about SHA-2 updates, see 2019 SHA-2 Code Signing Support requirement for Windows and WSUS.
- You must have the servicing stack update (SSU) (KB4490628) that is dated March 12, 2019 or a later SSU update installed. For more information about the latest SSU updates, see ADV990001 | Latest Servicing Stack Updates.
You do not have to restart your device after you apply this update.
Servicing stack updates (SSUs) make changes to how updates are installed and cannot be uninstalled from the device.
Update replacement information
This update replaces the previously released update KB4562030.
For information on SSUs, see the following articles:
- Servicing stack updates
- Servicing Stack Updates (SSU): Frequently Asked Questions
- ADV990001 | Latest Servicing Stack Updates
Learn about the terminology that Microsoft uses to describe software updates.