Microsoft has rolled out Windows 10 Build 19042.746 (20H2) to Windows Insiders in the beta and release preview channels. The update will be available only to those Windows Insiders who are on Windows 10 October 2020 20H2 build. The latest update primarily includes security features and enhancements.
Microsoft has resolved a security vulnerability issue associated with HTTPS-based Intranet servers in Windows 10 Build 19042.746 update. The HTTPS-based Intranet servers will not be able to make use of a user proxy to detect updates.
You should configure the behavior using the policy “Allow user proxy to be used as a fallback if detection using system proxy fails.” if you make use of a user proxy. You should try to make use of Windows Server Update Services (WSUS) Transport Layer Security (TLS) certificate pinning on all devices to ensure highest levels of security. However, these changes do not affect customers who are using HTTP WSUS servers.
The Windows 10 Build 19042.742 addresses security bypass vulnerability that exists in the Printer Remote Procedure Call (RPC) that binds handles authentication for the remote Winspool interface. The latest update also ships with security updates to Windows App Platform and Frameworks, Windows Media, Windows Fundamentals, Windows Cryptography, Windows Virtualization, Windows Peripherals, and Windows Hybrid Storage Services. Microsoft has advised users to refer to the security Update Guide about the resolved security vulnerabilities.
If you are on the beta and release preview channel under Windows Insiders program, you will receive the Windows 10 Build 19042.746 update. You should check the Windows Update page settings dashoard.
