Windows Server
OS · products/windows-server.yaml · RSS
Latest 26100.33650 Oct 13, 2026
Latest per track
| Track | Latest | Released |
|---|---|---|
| 2025 | 26100.33650 | Oct 13, 2026 |
| 2022 | 20348.5761 | Oct 13, 2026 |
| 2019 | 17763.9376 | Oct 13, 2026 |
| 2016 | 14393.9612 | Oct 13, 2026 |
Lifecycle
| Branch | Latest | Released | End of life |
|---|---|---|---|
| 26100 (2025) LTS | 26100.33650 | Nov 1, 2024 | Nov 14, 2034 · maintained |
| 20348 (2022) LTS | 20348.5761 | Aug 18, 2021 | Oct 14, 2031 · maintained |
| 17763 (2019) LTS | 17763.9376 | Nov 13, 2018 | Jan 9, 2029 · maintained |
| 14393 (2016) LTS | 14393.9612 | Oct 15, 2016 | Jan 12, 2027 · maintained |
Recent releases
securityFixes CVE-2026-96951: Windows Shell Security Feature Bypass Vulnerability
securityFixes CVE-2026-100202: Windows Message Queuing Queue Manager Remote Code Execution Vulnerability
securityFixes CVE-2026-100219: Microsoft QUIC Remote Code Execution Vulnerability
security[Remote Desktop Services (known issue)] Fixed: This update addresses an issue affecting Remote Desktop Services (RDS) after installing the September 2026 Windows security update (KB5122871). In affected environments, RDS might become unstable, causing RDP connection and sign-in failures or servers…
securityFixes CVE-2026-81963: Windows Update Stack Elevation of Privilege Vulnerability
securityFixes CVE-2026-69579: Windows Message Queuing Remote Code Execution Vulnerability
securityFixes CVE-2026-69590: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
securityFixes CVE-2026-68820: Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
securityFixes CVE-2026-62815: Microsoft QUIC Remote Code Execution Vulnerability
securityFixes CVE-2026-62878: Windows DNS Server Remote Code Execution Vulnerability
securityFixes CVE-2026-56155: Active Directory Federation Services Elevation of Privilege Vulnerability
securityFixes CVE-2026-57092: Microsoft Windows VMSwitch Elevation of Privilege Vulnerability
securityFixes CVE-2026-50518: Windows DHCP Server Remote Code Execution Vulnerability
securityFixes CVE-2026-44815: DHCP Client Service Remote Code Execution Vulnerability
securityFixes CVE-2026-45657: Windows Kernel Remote Code Execution Vulnerability
securityFixes CVE-2026-47291: HTTP.sys Remote Code Execution Vulnerability
securityFixes CVE-2026-41089: Windows Netlogon Remote Code Execution Vulnerability
securityFixes CVE-2026-41096: Windows DNS Client Remote Code Execution Vulnerability
securityFixes CVE-2026-40403: Windows Graphics Component Remote Code Execution Vulnerability
security[Active Directory] Fixed: After installing the April 2026 Windows security update and restarting, domain controllers (DCs) with multi-domain forests that use Privileged Access Management (PAM), might experience startup issues. In some cases, Local Security Authority Subsystem Service (LSASS) might…
security[Windows update installation] Fixed: A small number of Windows Server 2025 devices might fail to install the April 14, 2026, Windows security update (KB5082063). When this issue occurs, affected devices might display one of the following error messages: “Install error: 0x800F0983” or “Some update…
security[Graphics] Fixed: This update addresses an issue where certain GPU configurations might recently have experienced a system error related to dxgmms2.sys, resulting in the KERNEL_SECURITY_CHECK_FAILURE error.
security[Remote Desktop] Fixed: After installing the January 2026 Windows security update (KB5073379), some users experienced sign-in failures during Remote Desktop connections. This issue affected authentication steps for different Remote Desktop applications on Windows such as the Windows App.
security[Credentials autofill] This update introduces a security hardening behavior restricting certain applications to autofill credentials during remote support sessions or automated authentication workflows. With this change, credential dialogs do not respond to virtual keyboard input from remote…
security[WinSqlite3.dll] Fixed: The Windows core component, WinSqlite3.dll, has been updated. Previously, some security software might have detected this component as vulnerable. Note WinSqlite3.dll is a separate component from sqlite3.dll, which is found in application-specific directories and is not a…
security[PowerShell 5.1] Invoke-WebRequest now includes a confirmation prompt with a security warning of script execution risk. You can choose to continue or cancel the request. For additional details, see CVE-2025-54100 and KB5074596: PowerShell 5.1: Preventing script execution from web content.
Security advisories
7.0 CVE-2026-102211 Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
7.8 CVE-2026-108130 Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
8.8 CVE-2026-108471 Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
7.5 CVE-2026-69789 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability