Secure Boot certificate rollout expands; COM allowlisting works as expected
The update expands the phased delivery of new Secure Boot certificates and improves COM allowlisting in Windows Defender Application Control. It also includes 40 Important-severity security fixes.
Check the newer update, KB5079489Key changes 40 CVEs · 5 changes
- Improved Secure Boot: More eligible devices can receive new Secure Boot certificates automatically, after showing enough successful update signals.
- Improved Windows Defender Application Control: COM objects are allowed as expected when the endpoint security policy is set higher than the allowlisting policy.
- Improved Windows System Image Manager: A warning dialog helps you check that a catalog file you select comes from a trusted source.