Skip to content
Naked Security Naked Security

Windows 10 Mobile receives its last security patches

If you’re one of the tiny hardcore still using Windows 10 Mobile, 10 December 2019 is probably a day you’ve been dreading for nearly a year.

If you’re one of the tiny contingent still using Windows 10 Mobile, 10 December 2019 is probably a day you’ve been dreading for nearly a year.

As announced by Microsoft in January 2019, it’s the end of life date for version 1709 of the OS, which means that November’s Build 15254.597 (KB4522811) was its last ever software update and therefore its last set of security patches.

After this date, users are on their own, warming themselves in the fading heat of a dying star which began life with some fanfare what seems like a long time ago but was in fact only 2015.

It’s a death that’s been well-rehearsed by Microsoft – Windows 10 Mobile version 1703 users reached this end-of-life moment earlier this year, on 11 June.

From what we can tell, no new Windows 10 Mobile devices were released after early 2016, which means affected devices running version 1709 will be among the following models:

  • Microsoft Lumia 550
  • Microsoft Lumia 650
  • Microsoft Lumia 950/950 XL
  • HP Elite x3 (Verizon, Telstra),
  • Wileyfox Pro
  • Alcatel IDOL 4S
  • Alcatel IDOL 4S Pro
  • Alcatel OneTouch Fierce XL
  • Softbank 503LV
  • VAIO Phone Biz
  • MouseComputer MADOSMA Q601
  • Trinity NuAns Neo

Bad news too for anyone still running the unsupported (as of 11 July 2017) Windows Phone 8.1 which sees the end of its app store support on 16 December 2019. No feature updates, no security fixes and now no software of any kind.

Security fixes

Build 15254.597 fixes some Intel chip issues plus a small pile of other flaws Microsoft doesn’t identify in detail, some of which were included in previous updates:

  • Intel Processor Machine Check Error vulnerability (CVE-2018-12207).
  • Protections against the Intel Transactional Synchronization Extensions (TSX) Transaction Asynchronous Abort vulnerability (CVE-2019-11135).
  • Security fixes for Microsoft Scripting Engine, Internet Explorer, Windows App Platform and Frameworks, Microsoft Graphics Component, Windows Input and Composition, Microsoft Edge, Windows Fundamentals, Windows Cryptography, Windows Virtualization, Windows Linux, Windows Kernel, Windows Datacenter Networking, Windows Peripherals, and the Microsoft JET Database Engine.

Safe to say, if you run this OS, you’ll want the update, which should happen automatically.

Ironically, not many Microsoft employees will download this update because it seems that not many people inside Microsoft use Windows 10 Mobile. That includes figurehead Bill Gates himself, who in 2017 admitted he used an unspecified Android smartphone.

Phrases like ‘end of an era’ are easy to throw around but this does feel like one. Microsoft’s dream of a Windows for mobile devices is finally past tense.

17 Comments

a real shame this never took off. leaps and bounds ahead of the other mobile operating systems, just the lack of app support killed it. shame i can’t get live tiles on my iPhone as it was the slickest and cleanest mobile home screen ever released, and neither iOS or Android still get close in terms of UI.

Reply

I think you’re right, but the funny thing is; lack of apps can be a major selling point for some highly security conscious organizations. I wonder if MS pursued them at all.

Reply

Unless they get their head in the right place, they will be loosing the desktop, server, cooperate network (domain) environment too. Licensee and support gouging, unwanted built in apps, occasional bricking of systems from updates. I give MS 5 to 10 years max to stay as a mainstream OS supplier.
Now that the world is fairly comfortable with Android use, Linux is only a step and not a leap anymore for desktop users.

Reply

I love Windows Phone, myself. It’s clean. Android is the next best thing, but the OS code is fragmented and dirty, and the app store has thousands of bad apps. I will never ever purchase anything from Apple, so I guess that’s what I’m stuck with until MS comes up with something else. I’ve heard rumors that it’s already in the works.

Reply

Microsoft has already written off the Windows desktop. They don’t care how I access Office or from what device as long as I pay for it. Everything’s going to end up back-ended in Azure and corporations are going to continue to pay for it until someone comes along and provides a better productivity suite alternative. Google knows how easy that is.

Reply

Well since I’m in no position to afford a new phone and rarely use mobile data, what do I need to disable to carry on using it as a dumb phone?

Reply

I guess turning off mobile data *and* Wi-Fi might be worth trying, because that should leave you with 3G (or 4G depending on model) voice and text messsages only… you won’t be able to connect to the internet and therefore will keep the internet-flavoured software (Edge etc.) away from any potentially rogue content. You probably also want to remove any non-built-in apps for saftey’s sake, and maybe do a firmware reset to wipe the data you already have on there. Then you would have a kind-of phone. (Or get an old-school phone that really is just a phone. In the UK you can get an new-old Samsung G1200 [?] for about £5, or one of the re-made old-style Nokias for very little more. You’re getting voice, txt and (if a Nokia) probably Snake…

Reply

I’m not sure how concerned you need to be, even if you did use it for mobile data, since it won’t run unsigned code and it’s not going to be a platform targeted by attackers.

Reply

I moved to Android a few years ago now – after being a MS Phone fan – but I have always run the Windows 10 Launcher to keep the best tile display (with live tiles) of any phone OS.
Why all the negativity about having to pay for a desktop OS?

Reply

I agree with Mahhn,
Microsoft will lose a lot more then just it’s presence in the mobile market. Yes for now they will be selling a few apps to Android and iOS users but effectively, on the long run they’ll simply vanish from all ecosystems (there will be many more in the future).
They will fade except maybe with the “big Corporate” market where MS is strongly implanted.
They not only killed a amazing and marvelous Mobile OS system (Win10Mobile) they eventually killed themselves along the way, somewhere in the future.
It’s an extraordinary lack of vision : They are a software editor, THE software editor, and they where unable to understand that the future of software editing would be ON stores like App-Store or Google Play under the form of Apps !
They (MS) said the OS died because the lack of apps. Yes it’s true. But what ? A dozen of apps would have permitted Win10Mobile to thrive and flourish ? Facebook, Whatsapp, Twitter, Instagram, Shazam, and a few others ? And they (MS) are the biggest software editor waiting for some mysterious “app writers” to do the job ?
Bravo MS : 7 billions (Nokia tag price) down the drain plus an uncertain far future (5-10 years).

Reply

Hey, I still love my Lumia 822 running 8.1 (this one didn’t support 10). It just always worked, always connected to Exchange, tile GUI was smart and intuitive, and custom tile size and layout was handy. Interestingly, I stopped using Facebook once the mobile app was no longer supported on this phone. Downside: Every time I went into my bank they suggested I download their app. When I said I have a Windows phone, they said, “Is that Android or Apple?” Another woman in the office just traded in her Windows Phone for Apple, so I thought I was the last one on the planet :)

Reply

Still running my Lumia 950. I don’t do much on it besides voice and text, and the occasional browsing (mostly the MS rewards page). So I’ll be hanging onto this phone until it dies on me.

Reply

In competition with android & ios, windows have to step up their game to survive in the mobile Os world. Although windows have their separate fan base, that number is just not enough to compete compared to android & ios.

Reply

Leave a Reply

Your email address will not be published. Required fields are marked *

Subscribe to get the latest updates in your inbox.
Which categories are you interested in?
You’re now subscribed!