Every month, Microsoft rolls out various Windows 10/11 updates in batches. These updates patch security vulnerabilities, fix functional bugs, add new features, or refresh system components. For non-expert users, however, telling these updates apart is a genuine chore. The naming terminology Microsoft uses is inherently messy. In fact, it even confuses seasoned IT administrators.
In a newly published technical blog post, Microsoft admits that people routinely mix or swap the different update names. Naturally, the company hopes everyone will understand what each term actually means. Yet Microsoft itself loves to rename things on a regular or irregular basis. Consequently, getting all users to converge on a single vocabulary is a tall order.
Quality Updates, Security Updates, and Monthly Cumulative Updates
For Windows 10/11, the most important release is the security update Microsoft ships on the second Tuesday of every month. This release is also known as the B release or the monthly cumulative update. Out of habit, we refer to it as the routine monthly update, since it arrives on a fixed monthly cadence.
In the blog post, Microsoft notes that people use “B release,” “quality update,” “security update,” “monthly cumulative update,” and “latest cumulative update” interchangeably. Clearly, the company understands that this tangle of names can bewilder users. For now, however, Microsoft does not appear ready to standardize the terminology. Perhaps that is for the best. After all, a revised naming scheme might simply get renamed again a while later.
What Each Update Type Actually Means
- Monthly security updates: These are the B releases, which target the stable channel. They primarily fix security vulnerabilities and bugs. Moreover, each release is cumulative.
- Former C and D optional updates: The C and D labels are now deprecated. Microsoft calls them optional non-security preview updates instead. They mainly exist to test new features or fix errors.
- OOB (out-of-band) updates: In special circumstances, Microsoft ships OOB updates outside the monthly security cycle. These resolve certain urgent problems.
- CFR (Controlled Feature Rollout): Microsoft frequently pushes experimental features to a subset of devices through CFR. Strictly speaking, these are cloud-side rollouts rather than updates.
Support Our Threat Intelligence
If you find our CVE report and cybersecurity news helpful, consider supporting our work.