May's Patch Tuesday updates for Windows 8.1 (KB5014011) and Windows 7 (KB5014012) out now

Microsoft has released the Patch Tuesday update for Windows 8.1 (KB5014011) and Windows 7 (KB5014012) today as it’s the second Tuesday of the month. Installing them will protect your system against certain vulnerabilities but both also come with known issues. Here’s what each release contains and their known issues.

Windows 8.1

Improvements

This cumulative security update contains improvements that are part of update KB5012670 (released April 12, 2022) and includes new improvements for the following issues:

  • The Key Distribution Center (KDC) code incorrectly returns error message KDC_ERR_TGT_REVOKED during Domain Controller shutdown.
  • After installing the January 2022 Windows update or a later Windows update on the Primary Domain Controller emulator (PDCe), listing or modifying name suffixes routing by using Netdom.exe or "Active Directory Domains and Trusts" snap-in may fail and you receive the following error message: "Insufficient system resources exist to complete the requested service."
  • The Primary Domain Controller (PDC) for the root domain incorrectly logs warning and error events in the System log when trying to scan outbound-only trusts.

Known issues in this update

Symptom Workaround

Certain operations, such as rename, that you perform on files or folders that are on a Cluster Shared Volume (CSV) may fail with the error, “STATUS_BAD_IMPERSONATION_LEVEL (0xC00000A5)”. This occurs when you perform the operation on a CSV owner node from a process that doesn’t have administrator privilege.

Do one of the following:

Perform the operation from a process that has administrator privilege.

Perform the operation from a node that doesn’t have CSV ownership.

Microsoft is working on a resolution and will provide an update in an upcoming release.

After installing updates released January 11, 2022 or later updates, apps using Microsoft .NET Framework to acquire or set Active Directory Forest Trust Information might fail, close, or you might receive an error from the app or Windows. You might also receive an access violation (0xc0000005) error.

To resolve this issue manually, apply the out-of-band updates for the version of .NET Framework used by the app.

Windows 7

Improvements

This cumulative security update contains improvements that are part of update KB5012626 (released April 12, 2022) and includes new improvements for the following issues:

  • The Key Distribution Center (KDC) code incorrectly returns error message KDC_ERR_TGT_REVOKED during Domain Controller shutdown.
  • After installing the January 2022 Windows update or a later Windows update on the Primary Domain Controller emulator (PDCe), listing or modifying name suffixes routing by using Netdom.exe or "Active Directory Domains and Trusts" snap-in may fail and you receive the following error message: "Insufficient system resources exist to complete the requested service."
  • The Primary Domain Controller (PDC) for the root domain incorrectly logs warning and error events in the System log when trying to scan outbound-only trusts.

Known issues in this update

Symptom Workaround

After installing this update and restarting your device, you might receive the error, “Failure to configure Windows updates. Reverting Changes. Do not turn off your computer,” and the update might show as Failed in Update History.

This is expected in the following circumstances:

  • If you are installing this update on a device that is running an edition that is not supported for ESU. For a complete list of which editions are supported, see KB4497181.
  • If you do not have an ESU MAK add-on key installed and activated.
  • If you have purchased an ESU key and have encountered this issue, please verify you have applied all prerequisites and that your key is activated. For information on activation, please see this blog post. For information on the prerequisites, see the How to get this update section of this article.

Certain operations, such as rename, that you perform on files or folders that are on a Cluster Shared Volume (CSV) may fail with the error, "STATUS_BAD_IMPERSONATION_LEVEL (0xC00000A5)". This occurs when you perform the operation on a CSV owner node from a process that doesn’t have administrator privilege.

Do one of the following:

  • Perform the operation from a process that has administrator privilege.
  • Perform the operation from a node that doesn’t have CSV ownership.

Microsoft is working on a resolution and will provide an update in an upcoming release.

You can get these updates through Windows Update or download them manually: Windows 8.1 KB5014011, Windows 7 KB5014012.

Report a problem with article
Next Article

Windows 10 May Patch Tuesday (KB5013942) is out — here's what's new and what's broken

Previous Article

Microsoft has released its May Patch Tuesday update (KB5013943) for Windows 11