Hotfixes for Windows Vista SP2
If you do not have Service Pack 2 for Windows Vista, you can download the update for free from Microsoft. Unlike previous versions of Windows, the service packs for Windows Vista do not stack. This means that, if you do not have Windows Vista SP1 installed, you must install it before you can install SP2.
Windows Vista Service Pack 1
Windows Vista Service Pack 2
If you have downloaded a bunch of hotfixes, you can install them with no user interaction. Just open an elevated command prompt, navigate to the folder containing the hotfixes, and run:
for %i in (*) do start /wait wusa "%i" /quiet /norestart
You can replace the “*” with “*x86*” or “*x64*” to pick only one type of hotfix, if the folder contains both.
Stay up to date
- If you would like to be notified when hotfixes are added to this list, you may use this RSS feed.
Here is the hotfix list for Windows Vista SP2:
| Applies to | Date | KB | Description | Download | WU? | |
| Vista SP2 | January 10, 2012 | 2584146 |  | Vulnerability in Microsoft Windows could allow remote code execution | x86 x64 | Yes |
| Vista SP2 | January 10, 2012 | 2585542 | | Security update for Webio, Winhttp, and schannel in Windows | x86 x64 | Yes |
| Vista SP2 | January 10, 2012 | 2598479 | | Security update for Windows Multimedia Library for Windows Vista | x86 x64 | Yes |
| Vista SP2 | January 10, 2012 | 2631813 | | Security update for DirectShow | x86 x64 | Yes |
| Vista SP2 | January 10, 2012 | 2632503 | | Array elements in very large loops may be returned as undefined in JScript 5.8 | x86 x64 | Yes |
| Vista SP2 | January 10, 2012 | 2644615 | | Vulnerability in Windows Kernel could allow security Feature bypass | x86 x64 | Yes |
| Vista SP2 | January 10, 2012 | 2646524 | | Vulnerability in Windows client/server run-time subsystem could allow elevation of privilege | x86 x64 | Yes |
| Vista SP2 | December 13, 2011 | 2618444 | | Cumulative Security Update for Internet Explorer | x86 x64 | Yes |
| Vista SP2 | December 13, 2011 | 2618451 | | Cumulative Security Update for ActiveX Kill Bits | x86 x64 | Yes |
| Vista SP2 | December 13, 2011 | 2619339 | | Security update for Windows Vista | x86 x64 | Yes |
| Vista SP2 | December 13, 2011 | 2620712 | | Vulnerability in Windows Client/Server Runtime Subsystem could allow elevation of privilege | x86 x64 | Yes |
| Vista SP2 | December 13, 2011 | 2621146 | | Security update for Active Directory | x86 x64 | Yes |
| Vista SP2 | December 13, 2011 | 2633171 | | Vulnerability in Windows Kernel could allow elevation of privilege | x86 | Yes |
| Vista SP2 | December 13, 2011 | 2639417 | | Vulnerability in Windows kernel-mode drivers could allow elevation of privilege | x86 x64 | Yes |
| Vista SP2 | November 22, 2011 | 2633952 | | December 2011 cumulative time zone update for Windows operating systems | x86 x64 | Yes |
| Vista SP2 | November 10, 2011 | 2641690 | | Fraudulent digital certificates could allow spoofing | x86 x64 | Yes |
| Vista SP2 | November 8, 2011 | 2588516 | | Vulnerability in TCP/IP could allow remote code execution | x86 x64 | Yes |
| Vista SP2 | November 8, 2011 | 2601626 | | Security update for Active Directory | x86 x64 | Yes |
| Vista SP2 | November 8, 2011 | 2620704 | | Vulnerability in Windows Mail and Windows Meeting Space could allow remote code execution | x86 x64 | Yes |
| Vista SP2 | October 25, 2011 | 2578214 | | An application crashes when it tries to retrieve file information from an invalid or corrupted file in Windows Vista | x86 x64 | No |
| Vista SP2 | October 25, 2011 | 2619572 | | "HTTP Error 401.1" error message when Msiexec.exe updates an MSI file in Windows Vista | x86 x64 | No |
| Vista SP2 | October 11, 2011 | 2564958 | | Security update for Active Accessibility in Windows | x86 x64 | Yes |
| Vista SP2 | October 11, 2011 | 2567053 | | Vulnerabilities in Windows kernel-mode drivers could allow remote code execution | x86 x64 | Yes |
| Vista SP2 | October 11, 2011 | 2579686 | | Security update for Windows Media Center | x86 x64 | Yes |
| Vista SP2 | October 11, 2011 | 2604521 | | An update is available to update the country codes of Curaçao, of Bonaire, Sint Eustatius and Saba, or of Sint Maarten (Dutch part) in Windows Vista | x86 x64 | No |
| Vista SP2 | September 13, 2011 | 2570947 | | Vulnerability in Windows Components could allow remote code execution | x86 x64 | Yes |
| Vista SP2 | September 13, 2011 | 2616676 | | Fraudulent digital certificates could allow spoofing | x86 x64 | Yes |
| Vista SP2 | August 23, 2011 | 2569391 | | IPv6 DAD state does not switch back to Preferred state from Deprecated state in Windows Vista | x86 | No |
| Vista SP2 | August 9, 2011 | 2556532 | | Vulnerability in Windows Kernel could allow denial of service | x86 x64 | Yes |
| Vista SP2 | August 9, 2011 | 2563227 | | An SVG graphic that has attributes that use large values may not be parsed correctly | x86 x64 | Yes |
| Vista SP2 | August 9, 2011 | 2563894 | | Vulnerabilities in TCP/IP Stack Could Allow Denial of Service | x86 x64 | Yes |
| Vista SP2 | August 9, 2011 | 2567680 | | Vulnerability in Windows Client/Server Run-time subsystem could allow elevation of privilege | x86 x64 | Yes |
| Vista SP2 | July 12, 2011 | 2507938 | | Vulnerabilities in Windows CSRSS could allow elevation of privilege | x86 x64 | Yes |
| Vista SP2 | July 12, 2011 | 2532531 | | Update for Bluetooth Stack for Windows Vista Service Pack 2 | x86 x64 | Yes |
| Vista SP2 | July 12, 2011 | 2533623 | | Insecure library loading could allow remote code execution | x86 x64 | Yes |
| Vista SP2 | July 12, 2011 | 2555917 | | Vulnerabilities in Windows kernel-mode drivers could allow elevation of privilege | x86 x64 | Yes |
| Vista SP2 | June 28, 2011 | 2541763 | | A update that enables Internet Explorer to parse fragmented TLS/SSL handshake messages is available | x86 x64 | Yes |
| Vista SP2 | June 28, 2011 | 2545698 | | Text displayed in some core fonts appears blurred in Internet Explorer 9 | x86 x64 | Yes |
| Vista SP2 | June 14, 2011 | 2476490 | | Vulnerability in OLE Automation could allow remote code execution | x86 x64 | Yes |
| Vista SP2 | June 14, 2011 | 2503665 | | Vulnerability in Windows AFD.sys could allow elevation of privilege | x86 x64 | Yes |
| Vista SP2 | June 14, 2011 | 2525694 | | Vulnerabilities in Windows kernel-mode drivers could allow elevation of privilege | x86 x64 | Yes |
| Vista SP2 | June 14, 2011 | 2535512 | | Vulnerabilities in Distributed File System could allow remote code execution | x86 x64 | Yes |
| Vista SP2 | June 14, 2011 | 2536275 | | Vulnerability in SMB Server could allow denial of service | x86 x64 | Yes |
| Vista SP2 | June 14, 2011 | 2536276 | | Vulnerability in SMB Client could allow remote code execution | x86 x64 | Yes |
| Vista SP2 | June 14, 2011 | 2544893 | | Vulnerability in MHTML could allow information disclosure | x86 x64 | Yes |
| Vista SP2 | April 26, 2011 | 2492386 | | Application Compatibility Update for Windows Vista: April 2011 | x86 x64 | Yes |
| Vista SP2 | April 12, 2011 | 2412687 | | Security update for Windows GDI+ | x86 x64 | Yes |
| Vista SP2 | April 12, 2011 | 2491683 | | Security update for Windows Fax Cover Page Editor | x86 x64 | Yes |
| Vista SP2 | April 12, 2011 | 2503658 | | Vulnerability in MHTML could allow information disclosure | x86 x64 | Yes |
| Vista SP2 | April 12, 2011 | 2506014 | | Update for the Windows Operating System Loader | x64 | Yes |
| Vista SP2 | April 12, 2011 | 2506212 | | Security update for Windows Fax Cover Page Editor MFC components | x86 x64 | Yes |
| Vista SP2 | April 12, 2011 | 2506223 | | Vulnerabilities in Windows Kernel-Mode drivers could allow elevation of privilege | x86 x64 | Yes |
| Vista SP2 | April 12, 2011 | 2507618 | | Vulnerability in the OpenType Compact Font Format (CFF) driver could allow remote code execution | x86 x64 | Yes |
| Vista SP2 | April 12, 2011 | 2508429 | | Vulnerabilities in SMB Server could allow remote code execution | x86 x64 | Yes |
| Vista SP2 | April 12, 2011 | 2509553 | | Vulnerability in DNS Resolution could allow remote code execution | x86 x64 | Yes |
| Vista SP2 | April 12, 2011 | 2511455 | | Vulnerabilities in SMB Client could allow remote code execution | x86 x64 | Yes |
| Vista SP2 | March 23, 2011 | 2524375 | | Fraudulent Digital Certificates could allow spoofing | x86 x64 | Yes |
| Vista SP2 | March 22, 2011 | 2496898 | | An update to support the new currency symbol for the Indian Rupee in Windows Vista | x86 x64 | No |
| Vista SP2 | March 22, 2011 | 2505189 | | An update for some DirectWrite and XPS issues in Windows Vista SP2 or in Windows Server 2008 SP2 is available | x86 x64 | Yes |
| Vista SP2 | March 15, 2011 | 2522422 | | Cannot print from Internet Explorer 9 by using a Canon printer | x86 x64 | Yes |
| Vista SP2 | March 14, 2011 | 982861 | | Internet Explorer 9 | x86 x64 | No |
| Vista SP2 | March 8, 2011 | 2479943 | | Security update for Microsoft Windows: March 8, 2011 | x86 x64 | Yes |
| Vista SP2 | March 8, 2011 | 2481109 | | Security update for Remote Desktop client 6.1 and Remote Desktop client 6.0: March 8, 2011 | x86 x64 | Yes |
| Vista SP2 | March 8, 2011 | 2494132 | | Security update for Windows Media Center TV Pack 2008 for Windows Vista: March 8, 2011 | x86 x64 | Yes |
| Vista SP2 | February 8, 2011 | 2117917 | | Platform Update Supplement for Windows Vista and for Windows Server 2008 | x86 x64 | Yes |
| Vista SP2 | February 8, 2011 | 2393802 | | Vulnerabilities in Windows Kernel could allow elevation of privilege | x86 x64 | Yes |
| Vista SP2 | February 8, 2011 | 2479628 | | Vulnerabilities in Windows kernel-mode drivers could allow elevation of privilege | x86 x64 | Yes |
| Vista SP2 | February 8, 2011 | 2483185 | | Vulnerability in Windows Shell Graphics Processing could allow remote code execution | x86 x64 | Yes |
| Vista SP2 | February 8, 2011 | 2485376 | | Vulnerability in the OpenType Compact Font Format CFF driver could allow remote code execution | x86 x64 | Yes |
| Vista SP2 | January 11, 2011 | 2419640 | | Security update for Windows Data Access Components 6.0 | x86 x64 | Yes |
| Vista SP2 | January 11, 2011 | 2446496 | | An update is available that changes the currency symbol of Estonia to the euro (€) in Windows | x86 x64 | No |
| Vista SP2 | January 11, 2011 | 2478935 | | Vulnerability in Windows Backup Manager could allow remote code execution | x86 x64 | Yes |
| Vista SP2 | December 14, 2010 | 2296199 | | Vulnerabilities in the OpenType Font (OTF) format driver could allow remote code execution | x86 x64 | Yes |
| Vista SP2 | December 14, 2010 | 2305420 | | Vulnerability in Task Scheduler could allow for elevation of privilege | x86 x64 | Yes |
| Vista SP2 | December 14, 2010 | 2423089 | | Vulnerability in Windows Address Book could allow remote code execution | x86 x64 | Yes |
| Vista SP2 | December 14, 2010 | 2436673 | | Vulnerabilities in Windows Kernel could allow elevation of privilege | x86 x64 | Yes |
| Vista SP2 | December 14, 2010 | 2442962 | | Vulnerability in Consent User Interface could allow elevation of privilege | x86 x64 | Yes |
| Vista SP2 | December 14, 2010 | 2467659 | | An update is available for Internet Explorer: December 14, 2010 | x86 x64 | Yes |
| Vista SP2 | November 23, 2010 | 981319 | | An update is available that enables the support of Enhanced Storage devices in Windows Vista and in Windows Server 2008 | x86 x64 | No |
| Vista SP2 | November 23, 2010 | 2458828 | | The RPC over HTTP connection cannot be set up when you try to access certain services on a computer that is running Windows Vista or Windows Server 2008 | x86 x64 | No |
| Vista SP2 | October 26, 2010 | 2388210 | | Application Compatibility Update: October 2010 | x86 x64 | Yes |
| Vista SP2 | October 12, 2010 | 979687 | | Security update for WordPad: October 12, 2010 | x86 x64 | Yes |
| Vista SP2 | October 12, 2010 | 979688 | | Security update for Windows Shell: October 12, 2010 | x86 x64 | Yes |
| Vista SP2 | October 12, 2010 | 981957 | | Vulnerabilities in Windows kernel-mode drivers could allow elevation of privilege | x86 x64 | Yes |
| Vista SP2 | October 12, 2010 | 982132 | | Vulnerability in the Embedded OpenType Font Engine could allow remote code execution | x86 x64 | Yes |
| Vista SP2 | October 12, 2010 | 2207566 | | Vulnerabilities in SChannel could allow denial of service | x86 x64 | Yes |
| Vista SP2 | October 12, 2010 | 2281679 | | Vulnerability in Media Player Network Sharing service could allow remote code execution | x86 x64 | Yes |
| Vista SP2 | October 12, 2010 | 2296011 | | Vulnerability in the Windows common control library could allow remote code execution | x86 x64 | Yes |
| Vista SP2 | October 12, 2010 | 2345886 | | Update that implements Extended Protection for Authentication in the Server service | x86 x64 | Yes |
| Vista SP2 | October 12, 2010 | 2378111 | | Vulnerability in Windows Media Player could allow remote code execution | x86 x64 | Yes |
| Vista SP2 | October 12, 2010 | 2387149 | | Vulnerability in Microsoft Foundation Classes could allow remote code execution | x86 x64 | Yes |
| Vista SP2 | September 14, 2010 | 975558 | | Vulnerability in MPEG-4 Codec could allow remote code execution | x86 x64 | Yes |
| Vista SP2 | September 14, 2010 | 981322 | | Security update for Windows Unicode Scripts Processor: September 14, 2010 | x86 x64 | Yes |
| Vista SP2 | September 14, 2010 | 981550 | | Security update for Active Directory: September 2010 | x86 x64 | Yes |
| Vista SP2 | September 14, 2010 | 2124261 | | Security update for Internet Information Services ASP: September 14, 2010 | x86 x64 | Yes |
| Vista SP2 | September 14, 2010 | 2141007 | | An update is available to implement Extended Protection for Authentication for Outlook Express and Windows Mail | x86 x64 | Yes |
| Vista SP2 | September 14, 2010 | 2347290 | | Vulnerability in Print Spooler Service could allow remote code execution | x86 x64 | Yes |
| Vista SP2 | August 10, 2010 | 978886 | | Vulnerabilities in TCP/IP could allow elevation of privilege | x86 x64 | Yes |
| Vista SP2 | August 10, 2010 | 980436 | | Vulnerabilities in SChannel could allow remote code execution | x86 x64 | Yes |
| Vista SP2 | August 10, 2010 | 981852 | | Vulnerabilities in Windows Kernel could allow elevation of privilege | x86 x64 | Yes |
| Vista SP2 | August 10, 2010 | 981997 | | Vulnerability in Movie Maker could allow remote code execution | x86 x64 | Yes |
| Vista SP2 | August 10, 2010 | 982214 | | Vulnerabilities in SMB Server could allow remote code execution | x86 x64 | Yes |
| Vista SP2 | August 10, 2010 | 982316 | | An update is available for the Windows Telephony Application Programming Interface (TAPI) | x86 x64 | Yes |
| Vista SP2 | August 10, 2010 | 982665 | | Vulnerability in Cinepak codec could allow remote code execution | x86 x64 | Yes |
| Vista SP2 | August 10, 2010 | 982799 | | Vulnerabilities in the Tracing Feature for Services could allow an elevation of privilege | x86 x64 | Yes |
| Vista SP2 | August 10, 2010 | 2079403 | | Vulnerability in Microsoft XML Core Services could allow remote code execution | x86 x64 | Yes |
| Vista SP2 | August 10, 2010 | 2160329 | | Vulnerabilities in Windows kernel-mode drivers could allow elevation of privilege | x86 x64 | Yes |
| Vista SP2 | August 2, 2010 | 2286198 | | Vulnerability in Windows Shell could allow remote code execution | x86 x64 | Yes |
| Vista SP2 | July 13, 2010 | 976323 | | Security update for Windows SMTP Service: April 13, 2010 and July 13, 2010 | x86 x64 | Yes |
| Vista SP2 | July 13, 2010 | 2264107 | | This update helps protect against DLL preloading vulnerabilities in software applications on the Windows platform. | x86 x64 | No |
| Vista SP2 | June 22, 2010 | 982480 | | June 2010 Cumulative Update for Media Center for Windows Vista | x86 x64 | Yes |
| Vista SP2 | June 22, 2010 | 982519 | | Application Compatibility Update for Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2: June 2010 | x86 x64 | Yes |
| Vista SP2 | June 8, 2010 | 979482 | | Security update for Asycfilt.dll (COM component): June 8, 2010 | x86 x64 | Yes |
| Vista SP2 | June 8, 2010 | 979559 | | Vulnerabilities in Windows Kernel-Mode drivers could allow remote code execution | x86 x64 | Yes |
| Vista SP2 | June 8, 2010 | 980218 | | Vulnerability in the OpenType Compact Font Format (CFF) driver could allow elevation of privilege | x86 x64 | Yes |
| Vista SP2 | June 8, 2010 | 982666 | | Vulnerability in Internet Information Services could allow remote code execution | x86 x64 | Yes |
| Vista SP2 | June 3, 2010 | 982926 | | Silverlight 4.0 | x86 x64 | Yes |
| Vista SP2 | May 11, 2010 | 978542 | | Vulnerability in Outlook Express and Windows Mail could allow remote code execution | x86 x64 | Yes |
| Vista SP2 | April 27, 2010 | 980248 | | Some font files are not updated when you install Microsoft Office 2010 on a computer that is running Windows Vista or Windows Server 2008 | x86 x64 | Yes |
| Vista SP2 | April 27, 2010 | 980368 | | A update is available that enables certain IIS 7.0 or IIS 7.5 handlers to handle requests whose URLs do not end with a period | x86 x64 | No |
| Vista SP2 | April 13, 2010 | 977816 | | Vulnerability in Microsoft MPEG Layer-3 codec could allow remote code execution | x86 x64 | Yes |
| Vista SP2 | April 13, 2010 | 978338 | | Vulnerability in Windows ISATAP Component could allow spoofing | x86 x64 | Yes |
| Vista SP2 | April 13, 2010 | 978601 | | Security update for Windows Authenticode Signature Verification: April 13, 2010 | x86 x64 | Yes |
| Vista SP2 | April 13, 2010 | 979309 | | Security update for Windows Cabinet File Viewer Shell Extension: April 13, 2010 | x86 x64 | Yes |
| Vista SP2 | April 13, 2010 | 979683 | | Vulnerabilities in Windows Kernel could allow elevation of privilege | x86 x64 | Yes |
| Vista SP2 | April 13, 2010 | 980232 | | Vulnerabilities in SMB client could allow remote code execution | x86 x64 | Yes |
| Vista SP2 | April 13, 2010 | 981332 | | Security update for Visual Basic Scripting (VBScript) 5.8: April 13, 2010 | x86 x64 | Yes |
| Vista SP2 | March 23, 2010 | 962975 | | Dynamic disks are marked as "Invalid" on a computer that is running Windows Server 2008 or Windows Vista when you bring the disks online, take the disks offline, or restart the computer if Data Protection Manager is installed | x86 x64 | No |
| Vista SP2 | March 9, 2010 | 975561 | | Vulnerability in Windows Movie Maker could allow remote code execution | x86 x64 | Yes |
| Vista SP2 | March 9, 2010 | 975823 | | The capacity of a Secure Digital (SD) card that is larger than 32 GB is reported incorrectly in Windows Vista and in Windows Server 2008 | x86 x64 | No |
| Vista SP2 | March 9, 2010 | 980363 | | A hotfix is available that adds features to the FastCGI module in IIS 7.0 | x86 x64 | No |
| Vista SP2 | March 9, 2010 | 980423 | | You experience several issues when you use Powershell cmdlets or AppFabric features in IIS 7.0 or IIS 7.5 | x86 x64 | No |
| Vista SP2 | February 23, 2010 | 976264 | | Application Compatibility Update for Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2: February 2010 | x86 x64 | Yes |
| Vista SP2 | February 23, 2010 | 976662 | | An update is available for the native JSON feature in Internet Explorer 8 | x86 x64 | Yes |
| Vista SP2 | February 23, 2010 | 977864 | | Cumulative Update for Windows Media Center TV Pack for Windows Vista | x86 x64 | Yes |
| Vista SP2 | February 9, 2010 | 928201 | | BitLocker Repair Tool to help recover data from an encrypted volume in Windows Vista or in Windows Server 2008 | x86 x64 | No |
| Vista SP2 | February 9, 2010 | 928202 | | BitLocker Recovery Password Viewer for Active Directory Users and Computers tool to view recovery passwords for Windows Vista | x86 x64 | No |
| Vista SP2 | February 9, 2010 | 933246 | | BitLocker Drive Preparation Tool | x86 x64 | No |
| Vista SP2 | February 9, 2010 | 971468 | | Vulnerabilities in SMB Server could allow remote code execution | x86 x64 | Yes |
| Vista SP2 | February 9, 2010 | 974145 | | Vulnerabilities in Windows TCP/IP could allow remote code execution | x86 x64 | Yes |
| Vista SP2 | February 9, 2010 | 975560 | | Security update for Quartz: February 9, 2010 | x86 x64 | Yes |
| Vista SP2 | February 9, 2010 | 977165 | | Vulnerabilities in Windows kernel could allow elevation of privilege | x86 x64 | Yes |
| Vista SP2 | February 9, 2010 | 977377 | | Vulnerability in TLS/SSL could allow spoofing | x86 x64 | No |
| Vista SP2 | February 9, 2010 | 978251 | | Vulnerabilities in SMB client could allow remote code execution | x86 x64 | Yes |
| Vista SP2 | February 9, 2010 | 979099 | | An update is available to remove the application manifest expiry feature from AD RMS clients | x86 x64 | Yes |
| Vista SP2 | January 26, 2010 | 947821 | | Description of the System Update Readiness Tool for Windows Vista | x86 x64 | Yes |
| Vista SP2 | January 26, 2010 | 970807 | | An update is available for Bluetooth pairing in Windows Vista | x86 x64 | No |
| Vista SP2 | January 12, 2010 | 972270 | | Vulnerability in the Embedded OpenType Font Engine could allow remote code execution | x86 x64 | Yes |
| Vista SP2 | December 8, 2009 | 970430 | | Update that implements Extended Protection for Authentication in the HTTP Protocol Stack (http.sys) | x86 x64 | Yes |
| Vista SP2 | December 8, 2009 | 971737 | | Update that implements Extended Protection for Authentication in Microsoft Windows HTTP Services (WinHTTP) | x86 x64 | Yes |
| Vista SP2 | December 8, 2009 | 973917 | | Update that implements Extended Protection for Authentication in Internet Information Services (IIS) | x86 x64 | Yes |
| Vista SP2 | December 8, 2009 | 974318 | | Vulnerabilities in the Internet Authentication service could allow remote code execution | x86 x64 | Yes |
| Vista SP2 | November 24, 2009 | 973687 | | When an application uses MSXML to process XHTML, redundant retrieval requests for well-known DTD files from the W3C Web server cause XHTML parsing to fail on a Windows-based computer | x86 x64 | Yes |
| Vista SP2 | November 17, 2009 | 976470 | | The "Date and Time" window shows "Date out of range" error message | x86 x64 | Yes |
| Vista SP2 | November 16, 2009 | 975929 | | The Meiryo UI font is available for Windows Vista and for Windows Server 2008 | x86 x64 | Yes |
| Vista SP2 | November 10, 2009 | 969947 | | Vulnerabilities in Windows kernel-mode drivers could allow remote code execution | x86 x64 | Yes |
| Vista SP2 | November 10, 2009 | 973565 | | Vulnerability in Web Service on devices could allow remote code execution | x86 x64 | Yes |
| Vista SP2 | November 2, 2009 | 976749 | | An update is available for Internet Explorer that resolves issues that occur after you apply security update 974455 | x86 x64 | Yes |
| Vista SP2 | October 27, 2009 | 960362 | | Windows Ribbon and Animation Manager Library | x86 x64 | Yes |
| Vista SP2 | October 27, 2009 | 960568 | | Windows Management Framework BITS | x86 x64 | No |
| Vista SP2 | October 27, 2009 | 968930 | | Windows Management Framework Core package (Windows PowerShell 2.0 and WinRM 2.0) | x86 x64 | Yes |
| Vista SP2 | October 27, 2009 | 969084 | | Remote Desktop Connection 7.0 client update for Remote Desktop Services (RDS) for Windows XP SP3, Windows Vista SP1, and Windows Vista SP2 | x86 x64 | No |
| Vista SP2 | October 27, 2009 | 971035 | | Your mini-DVD based camcorder is not recognized on a computer that is running Windows Vista or Windows Server 2008 | x86 x64 | No |
| Vista SP2 | October 27, 2009 | 971512 | | Windows Graphics, Imaging, and XPS Library | x86 x64 | Yes |
| Vista SP2 | October 27, 2009 | 971513 | | Windows Automation API | x86 x64 | Yes |
| Vista SP2 | October 27, 2009 | 971514 | | Windows Portable Devices Platform | x86 x64 | Yes |
| Vista SP2 | October 27, 2009 | 972145 | | "Internet Explorer" is mentioned in several UI phrases for Windows Media Player even though you disable Internet Explorer in Windows Vista | x86 x64 | Yes |
| Vista SP2 | October 27, 2009 | 975889 | | October 2009 update is available for the Customer Experience Improvement Program (CEIP) in Windows Vista and in Windows Server 2008 | x86 x64 | No |
| Vista SP2 | October 13, 2009 | 954155 | | Security update for Windows Media Audio Voice Decoder: October 13, 2009 | x86 x64 | Yes |
| Vista SP2 | October 13, 2009 | 971486 | | Vulnerabilities in Windows kernel could allow elevation of privilege | x86 x64 | Yes |
| Vista SP2 | October 13, 2009 | 974571 | | Vulnerabilities in CryptoAPI could allow spoofing | x86 x64 | Yes |
| Vista SP2 | October 13, 2009 | 975254 | | Vulnerabilities in FTP Service for Internet Information Services could allow remote code execution | x86 x64 | Yes |
| Vista SP2 | October 13, 2009 | 975467 | | Vulnerability in the Local Security Authority Subsystem Service could allow denial of service | x86 x64 | Yes |
| Vista SP2 | October 13, 2009 | 975517 | | Vulnerabilities in SMB could allow remote code execution | x86 x64 | Yes |
| Vista SP2 | September 8, 2009 | 967723 | | MS09-048: Vulnerabilities in Windows TCP/IP could allow remote code execution | x86 x64 | Yes |
| Vista SP2 | September 8, 2009 | 968816 | | MS09-047: Security update for Windows Media Format Runtime, Windows Media Services, and Media Foundation: September 8, 2009 | x86 x64 | Yes |
| Vista SP2 | September 8, 2009 | 970710 | | MS09-049: Vulnerability in Wireless LAN AutoConfig Service could allow remote code execution | x86 x64 | Yes |
| Vista SP2 | September 8, 2009 | 971961 | | MS09-045: Vulnerability in JScript Scripting Engines could allow remote code execution | x86 x64 | Yes |
| Vista SP2 | September 8, 2009 | 973768 | | MS09-037: Security update for Microsoft HtmlInput Object ActiveX Control in Windows XP Media Center Edition, Windows Vista, and Windows Server 2008: August 11, 2009 | x86 x64 | Yes |
| Vista SP2 | September 1, 2009 | 972036 | | August 2009 Windows Vista and Windows Server 2008 Application Compatibility Update | x86 x64 | Yes |
| Vista SP2 | September 1, 2009 | 973879 | | You receive a "Stop 0x0000003E" error message when you try to install Windows Vista Service Pack 2 or Windows Server 2008 Service Pack 2 on a computer that has certain multiple processors | x64 | No |
| Vista SP2 | August 25, 2009 | 958911 | | An update for GDI+ for Windows operating systems | x86 x64 | No |
| Vista SP2 | August 25, 2009 | 968912 | | An update is available for Windows Vista and for Windows Server 2008 to extend KMS activation support for Windows 7 and for Windows Server 2008 R2 | x86 x64 | No |
| Vista SP2 | August 25, 2009 | 971029 | | Update to the AutoPlay functionality in Windows | x86 x64 | Yes |
| Vista SP2 | August 11, 2009 | 956744 | | Security update for Remote Desktop Client version 6.0 and 6.1: August 11, 2009 | x86 x64 | Yes |
| Vista SP2 | August 11, 2009 | 970436 | | Internet Explorer 8 stops responding when you use the IME Pad to enter East Asian characters in an Internet Explorer 8 window in Windows Vista or in Windows Server 2008 | x86 x64 | No |
| Vista SP2 | August 11, 2009 | 971032 | | Vulnerability in Message Queuing could allow elevation of privilege | x86 x64 | Yes |
| Vista SP2 | August 11, 2009 | 971557 | | Vulnerabilities in Windows Media file processing could allow remote code execution | x86 x64 | Yes |
| Vista SP2 | August 11, 2009 | 971657 | | Vulnerability in the Workstation Service could allow elevation of privilege | x86 x64 | Yes |
| Vista SP2 | August 11, 2009 | 973540 | | Security update for Windows Media Player: August 11, 2009 | x86 x64 | Yes |
| Vista SP2 | August 7, 2009 | 960859 | | Vulnerability in Telnet could allow remote code execution | x86 x64 | Yes |
| Vista SP2 | August 7, 2009 | 968389 | | Extended Protection for Authentication | x86 x64 | Yes |
| Vista SP2 | July 17, 2009 | 952627 | | Windows Vista Management Tools update for the release version of Hyper-V | x86 x64 | No |
| Vista SP2 | July 14, 2009 | 961371 | | Vulnerabilities in the Embedded OpenType Font Engine could allow remote code execution | x86 x64 | Yes |
| Vista SP2 | July 14, 2009 | 970408 | | A Bluetooth device stops working intermittently on a computer that is running Windows Vista Service Pack 2 | x86 x64 | No |
| Vista SP2 | June 23, 2009 | 937286 | | Windows Vista service pack stand-alone packages do not contain the updated Windows Vista Help files | x86 x64 | No |
| Vista SP2 | June 23, 2009 | 943729 | | Group Policy Preference Client Side Extensions for Windows Vista | x86 x64 | Yes |
| Vista SP2 | June 23, 2009 | 970203 | | Hyper-V Management Tools update for Windows Vista Service Pack 2 | x86 x64 | No |
| Vista SP2 | June 9, 2009 | 961501 | | Vulnerabilities in the Windows Print Spooler could allow remote code execution | x86 x64 | Yes |
| Vista SP2 | June 9, 2009 | 968537 | | Vulnerabilities in Windows Kernel could allow elevation of privilege | x86 x64 | Yes |
| Vista SP2 | June 9, 2009 | 970238 | | Vulnerability in RPC could allow elevation of privilege | x86 x64 | Yes |
| Vista SP2 | March 19, 2009 | 944036 | | Internet Explorer 8 | x86 x64 | No |
| Vista SP2 | March 7, 2007 | 917607 | | A download is available for Windows Vista and Windows Server 2008 that resolves an issue in which you cannot open Help files that require the Windows Help (WinHlp32.exe) program | x86 x64 | No |
Aaron, thank you for your reply. If that is the case, I wonder whether Microsoft will reinstate the hotfix, or it is just an unnecessary update. Your list of Windows hotfixes has been very helpful indeed, Aaron. Keep up the good work!
Hi, I just verified that the link is correct. The download must have been taken down by MS.
Why isn’t hotfix KB 2264107 available for download? Is there a problem for the direct link for this hotfix?
[...] Windows Vista Service Pack 2 [...]
Experimenting around with it, I notice some patches work, other’s do not. From what I can tell (not sure if I’m correct), if it comes across an update it doesn’t like, it stops processing any patches and finishes the install. The trick would be to find which one’s stop it, and which one’s actually do work. That method is very time consuming, Windows 7 may be as not so bad with it’s quick install, and lack of massive updates.
Thank you for that link on WAIK, I do think it’s the best route to go, but felt in the past it was a bit daunting to figure out, that guide is very good.
Yeah, that was a feature that I saw mentioned in an article by one Paul Thurrott (dump all of the hotfixes into an “updates” folder on the DVD), but upon further reading and experimentation, I don’t think it actually works. If it really is that simple, let me know, and I’ll try it again.
I find that since new hotfixes usually come out every other week, it’s too much of a hassle to keep an “up to date” DVD. So these days, I just install using a regular Vista SP2 DVD, and then update the machine using the command prompt method that I have up on the top of this page.
Maybe if you were deploying a lot of machines at once, it would help to have an install DVD with all of the hotfixes integrated. So, here is a guide on integrating hotfixes using WAIK.
Great Site, and appreciate the work you put in to it.
On the old site, there were instructions where if you can alter the vista iso, you can create a folder and put updates in to it, and vista will pick them up and install them automatically. Do you still have those instructions?
Thanks Aaron for this service. I have sent countless people here after learning that their update module was not working properly . So until we fixed the problem , I had them download and install those missing hotfixes to keep their Windows safer.
Again thanks for hard work.
Flashorn.