Microsoft Defender Updates for Windows 11/10: Install Images, Ransomware Patches, and More

On September 9, 2024, Microsoft released its Patch Tuesday updates, identified under KB5043064, KB5043050, KB5043051, and KB5043083 for Windows 10; KB5043076 and KB5043067 for Windows 11 versions 22H2 and 21H2; and KB5043080 for Windows 11 version 24H2. These updates primarily target security vulnerabilities but also introduce new features and resolve various bugs. Additionally, the company released an Out-of-Box Experience (OOBE) update (KB5043939) specifically for version 24H2, along with a Setup update (KB5043353) and a Windows Recovery Environment (WinRE) update (KB5043355) for the same version.

As part of these improvements, Microsoft introduced a vital Defender update. This update is crucial because Windows installation images may still house outdated anti-malware definitions and software binaries. Consequently, these updates not only enhance security but can also deliver performance improvements in certain scenarios.

The latest security definitions for Windows images are provided through the security intelligence update version 1.417.472.0, while the current Defender package version stands at 1.413.494.0. A support document released by Microsoft details:

The initial hours following a fresh Windows installation can render the system vulnerable due to a gap in Microsoft Defender’s protection. This vulnerability arises because OS installation images might contain outdated anti-malware software binaries.

[..] Devices utilizing either Windows’ built-in antivirus or alternative security solutions can gain advantages from these updates. Furthermore, Defender updates deliver essential performance patches that enhance user experience.

[..] This article pertains to the antimalware update package for Microsoft Defender within OS installation images (WIM and VHD files). The following OS installation images are supported:

• Windows 11
• Windows 10 (Enterprise, Pro, and Home editions)
• Windows Server 2022
• Windows Server 2019
• Windows Server 2016

Version Information

• Defender Package Version: 1.417.472.0

This package updates the anti-malware client, engine, and signature versions in the OS installation images to the following:

• Platform Version: 4.18.24080.9
• Engine Version: 1.1.24080.9
• Security Intelligence Version: 1.417.472.0

According to Microsoft’s security bulletin, the security intelligence update version 1.417.472.0 was issued last month. This update enhances threat detection capabilities for various types of trojans, ransomware, adware, and backdoor exploits, among others. For those interested, the most recent intelligence update is version 1.419.109.0 as of this writing.

Source