Need a complete list of patches released (precede and supersedes) for DCOM.

Question

Guys I am working on OT systems to get the DCOM patch identified which may cause disruption in plant operation as many applications may not work properly after the MS patch release which is required to overcome the issue with CVE-2021-26414. It has become quite difficult for us to identify the patches (KBs) related to the DCOM settings change. Please help me to a list of the DCOM patches for MS Windows 2016 & MS Windows 2019.

Answer 1

Hello there, The first phase of DCOM updates was released on June 8, 2021. In that update, DCOM hardening was disabled by default. You can enable them by modifying the registry as described in the “Registry setting to enable or disable the hardening changes” section below. The second phase of DCOM updates was released on June 14, 2022. That changed the hardening to enabled by default but retained the ability to disable the changes using registry key settings. The final phase of DCOM updates will be released in March 2023. It will keep the DCOM hardening enabled and remove the ability to disable it. https://support.microsoft.com/en-us/topic/kb5004442-manage-changes-for-windows-dcom-server-security-feature-bypass-cve-2021-26414-f1400b52-c141-43d2-941e-37ed901c769c Hope this resolves your Query !! --If the reply is helpful, please Upvote and Accept it as an answer--