Windows Critical update vs Windows Security Upate - update management center Azure

Question

Hello Team,

I hope you guys are doing well,

I'm working on a patching Infrastructure on azure using update management center,

I want to know what are the windows Critical updates ? and if it is a must to deploy on my Azure Prod VMs along side with Security Updates ? And if they have any potential harm to my Prod VMs (Application VMs, SQL VMs,...)?

Unfortunatly, i couldn't find helpful articles on windows critical updates on the internet so that i can learn about them

Answer 1

Hi there,

Critical update
A widely released fix for a specific problem that addresses a critical, non-security-related bug.

Security update
A widely released fix for a product-specific, security-related vulnerability. Security vulnerabilities are rated by their severity. The severity rating is indicated in the Microsoft security bulletin as critical, important, moderate, or low.

https://learn.microsoft.com/en-us/troubleshoot/windows-client/deployment/standard-terminology-software-updates

Actually, both of them are recommended to be installed as soon as possible (I would prefer to say immediately)

Both of them could impact on your applications, but in this case, you need to leverage BCDR practice as well, which is mostly a customer's responsibility.