Windows Server 14393.9612 → 26100.33650

Breaking changes

None in the release notes.

Security changes

• security Fixes CVE-2026-96951: Windows Shell Security Feature Bypass Vulnerability in 26100.33650
• security Fixes CVE-2026-100202: Windows Message Queuing Queue Manager Remote Code Execution Vulnerability in 26100.33650
• security Fixes CVE-2026-100219: Microsoft QUIC Remote Code Execution Vulnerability in 26100.33650
• security Fixes CVE-2026-105016: Microsoft QUIC Remote Code Execution Vulnerability in 26100.33650
• security Fixes CVE-2026-70147: Microsoft PostScript Printer Driver Remote Code Execution Vulnerability in 26100.33650
• security Fixes CVE-2026-70153: Microsoft PostScript Printer Driver Remote Code Execution Vulnerability in 26100.33650
• security Fixes CVE-2026-96934: Windows DHCP Server Remote Code Execution Vulnerability in 26100.33650
• security Fixes CVE-2026-97814: Windows Text Shaping Remote Code Execution Vulnerability in 26100.33650
• security Fixes CVE-2026-100220: Windows Media Video Decoder Remote Code Execution Vulnerability in 26100.33650
• security Fixes CVE-2026-102214: Windows Hyper-V Remote Code Execution Vulnerability in 26100.33650
• security Fixes CVE-2026-102225: Windows Text Shaping Remote Code Execution Vulnerability in 26100.33650
• security Fixes CVE-2026-105733: Windows Hyper-V Remote Code Execution Vulnerability in 26100.33650
• security Fixes CVE-2026-108467: Microsoft PostScript Printer Driver Remote Code Execution Vulnerability in 26100.33650
• security Fixes CVE-2026-70250: Windows DHCP Client Remote Code Execution Vulnerability in 26100.33650
• security Fixes CVE-2026-83934: Windows GDI+ Remote Code Execution Vulnerability in 26100.33650
• security Fixes CVE-2026-88073: Windows Graphics Kernel Elevation of Privilege Vulnerability in 26100.33650
• security Fixes CVE-2026-96913: Windows Kernel Elevation of Privilege Vulnerability in 26100.33650
• security Fixes CVE-2026-96914: Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability in 26100.33650
• security Fixes CVE-2026-96952: Microsoft Windows Media Foundation Remote Code Execution Vulnerability in 26100.33650
• security Fixes CVE-2026-108457: Microsoft Windows PDF Remote Code Execution Vulnerability in 26100.33650
• security Fixes CVE-2026-108460: Windows Message Queuing Remote Code Execution Vulnerability in 26100.33650
• security Fixes CVE-2026-69802: Network Device Enrollment Service (NDES) Remote Code Execution Vulnerability in 26100.33650
• security Fixes CVE-2026-70187: Windows Remote Desktop Services Remote Code Execution Vulnerability in 26100.33650
• security Fixes CVE-2026-70229: Windows Active Directory Domain Services Remote Code Execution Vulnerability in 26100.33650
• security Fixes CVE-2026-88117: Windows DHCP Server Remote Code Execution Vulnerability in 26100.33650
• security Fixes CVE-2026-88119: Windows DHCP Server Remote Code Execution Vulnerability in 26100.33650
• security Fixes CVE-2026-88120: Windows DHCP Server Remote Code Execution Vulnerability in 26100.33650
• security Fixes CVE-2026-88171: Windows DHCP Server Remote Code Execution Vulnerability in 26100.33650
• security Fixes CVE-2026-88174: Windows Deployment Services Remote Code Execution Vulnerability in 26100.33650
• security Fixes CVE-2026-100215: Microsoft Graphics Component Remote Code Execution Vulnerability in 26100.33650
• security Fixes CVE-2026-108130: Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability in 26100.33650
• security Fixes CVE-2026-108131: Active Directory Federation Services (AD FS) Spoofing Vulnerability in 26100.33650
• security Fixes CVE-2026-96222: Active Directory Federation Services (AD FS) Spoofing Vulnerability in 26100.33650
• security Fixes CVE-2026-108399: Windows Hyper-V Elevation of Privilege Vulnerability in 26100.33650
• security Fixes CVE-2026-102211: Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability in 26100.33650
• security Fixes CVE-2026-83917: Windows ALPC Elevation of Privilege Vulnerability in 26100.33650
• security Security update: includes the October 2026 Security Updates in 26100.33650
• security [ReFS security] This update adds auditing and optional policy controls for ReFS volumes on externally attached storage devices. Auditing is enabled by default, while enforcement controls remain disabled by default to give administrators time to evaluate and prepare for future security hardening… in 26100.33650
• security [Security] This update adds support for ML-KEM post-quantum key exchange in Transport Layer Security (TLS) 1.3, helping protect encrypted connections against future quantum-computing threats. in 26100.33650
• security [Security] This update upgrades the version of cURL included with Windows to version 8.21.0. in 26100.33650
• security [Emoji] This update improves security for emoji search in the Expressive Input Panel by updating the libraries used by EmojiSearchData. in 26100.33650
• security [Distributed Key Manager (DKM)] This update automatically remediates insecure DKM container ACL configurations in AD FS by default. Administrators can opt out of automatic remediation by setting RemediateDkmAcl to 0. This change helps address an elevation of privilege vulnerability that can occur… in 26100.33650
• security [Remote Desktop Services (known issue)] Fixed: This update addresses an issue affecting Remote Desktop Services (RDS) after installing the September 2026 Windows security update (KB5122871). In affected environments, RDS might become unstable, causing RDP connection and sign-in failures or servers… in 26100.33451
• security Fixes CVE-2026-81963: Windows Update Stack Elevation of Privilege Vulnerability in 26100.33438
• security Fixes CVE-2026-69579: Windows Message Queuing Remote Code Execution Vulnerability in 26100.33438
• security Fixes CVE-2026-69590: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability in 26100.33438
• security Fixes CVE-2026-69595: Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability in 26100.33438
• security Fixes CVE-2026-69730: Windows DNS Server Remote Code Execution Vulnerability in 26100.33438
• security Fixes CVE-2026-69769: Windows HTTP Print Provider Remote Code Execution Vulnerability in 26100.33438
• security Fixes CVE-2026-69829: Windows Shell Remote Code Execution Vulnerability in 26100.33438
• security Fixes CVE-2026-69845: Windows DHCP Server Remote Code Execution Vulnerability in 26100.33438
• security Fixes CVE-2026-70296: Windows Imaging Component Remote Code Execution Vulnerability in 26100.33438
• security Fixes CVE-2026-72979: Windows DHCP Server Remote Code Execution Vulnerability in 26100.33438
• security Fixes CVE-2026-72982: Windows Netlogon Remote Code Execution Vulnerability in 26100.33438
• security Fixes CVE-2026-72983: Internet Connection Sharing (ICS) Remote Code Execution Vulnerability in 26100.33438
• security Fixes CVE-2026-73009: Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability in 26100.33438
• security Fixes CVE-2026-73010: Microsoft Failover Cluster Remote Code Execution Vulnerability in 26100.33438
• security Fixes CVE-2026-77493: Windows Graphics Component Remote Code Execution Vulnerability in 26100.33438
• security Fixes CVE-2026-78445: Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability in 26100.33438
• security Fixes CVE-2026-69499: Windows Imaging Component Remote Code Execution Vulnerability in 26100.33438
• security Fixes CVE-2026-69518: Windows Remote Desktop Remote Code Execution Vulnerability in 26100.33438
• security Fixes CVE-2026-69601: Microsoft Windows Media Foundation Remote Code Execution Vulnerability in 26100.33438
• security Fixes CVE-2026-69603: Windows Hyper-V Remote Code Execution Vulnerability in 26100.33438
• security Fixes CVE-2026-69676: Windows Kerberos Remote Code Execution Vulnerability in 26100.33438
• security Fixes CVE-2026-69712: Windows Key Distribution Center Remote Code Execution Vulnerability in 26100.33438
• security Fixes CVE-2026-69860: Windows Imaging Component Remote Code Execution Vulnerability in 26100.33438
• security Fixes CVE-2026-70203: Windows Media Player Remote Code Execution Vulnerability in 26100.33438
• security Fixes CVE-2026-70586: Windows Paint Remote Code Execution Vulnerability in 26100.33438
• security Fixes CVE-2026-72950: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability in 26100.33438
• security Fixes CVE-2026-72959: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability in 26100.33438
• security Fixes CVE-2026-72960: Windows Media Player Remote Code Execution Vulnerability in 26100.33438
• security Fixes CVE-2026-72986: Graphic Fonts Remote Code Execution Vulnerability in 26100.33438
• security Fixes CVE-2026-73006: DirectWrite Remote Code Execution Vulnerability in 26100.33438
• security Fixes CVE-2026-73013: Windows Imaging Component Remote Code Execution Vulnerability in 26100.33438
• security Fixes CVE-2026-73018: Graphic Fonts Remote Code Execution Vulnerability in 26100.33438
• security Fixes CVE-2026-73023: Windows Imaging Component Remote Code Execution Vulnerability in 26100.33438
• security Fixes CVE-2026-77495: Windows Imaging Component Remote Code Execution Vulnerability in 26100.33438
• security Fixes CVE-2026-77504: Microsoft Office Word Remote Code Execution Vulnerability in 26100.33438
• security Fixes CVE-2026-80083: Windows Hyper-V Remote Code Execution Vulnerability in 26100.33438
• security Fixes CVE-2026-81955: Windows Graphics Component Remote Code Execution Vulnerability in 26100.33438
• security Fixes CVE-2026-69846: Windows Secure Kernel Mode Elevation of Privilege Vulnerability in 26100.33438
• security Fixes CVE-2026-69874: Windows ALPC Elevation of Privilege Vulnerability in 26100.33438
• security Fixes CVE-2026-69906: Windows Secure Kernel Mode Elevation of Privilege Vulnerability in 26100.33438
• security Fixes CVE-2026-72958: Windows Credential Guard Elevation of Privilege Vulnerability in 26100.33438
• security Fixes CVE-2026-72961: Windows Hyper-V Elevation of Privilege Vulnerability in 26100.33438
• security Fixes CVE-2026-72962: Windows USB Video Driver Elevation of Privilege Vulnerability in 26100.33438
• security Fixes CVE-2026-69530: Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability in 26100.33438
• security Fixes CVE-2026-69813: Windows DNS Server Remote Code Execution Vulnerability in 26100.33438
• security Fixes CVE-2026-69827: Windows DNS Server Remote Code Execution Vulnerability in 26100.33438
• security Fixes CVE-2026-69858: Windows DNS Server Remote Code Execution Vulnerability in 26100.33438
• security Fixes CVE-2026-72981: IP Helper Remote Code Execution Vulnerability in 26100.33438
• security Fixes CVE-2026-72987: Windows DNS Remote Code Execution Vulnerability in 26100.33438
• security Fixes CVE-2026-77505: Windows DNS Server Remote Code Execution Vulnerability in 26100.33438
• security Fixes CVE-2026-78444: Microsoft Failover Cluster Remote Code Execution Vulnerability in 26100.33438
• security Fixes CVE-2026-78449: Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability in 26100.33438
• security Fixes CVE-2026-78450: Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability in 26100.33438
• security Fixes CVE-2026-72957: Windows Deployment Services Remote Code Execution Vulnerability in 26100.33438
• security Fixes CVE-2026-83498: Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability in 26100.33438
• security Fixes CVE-2026-69789: Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability in 26100.33438
• security Fixes CVE-2026-69852: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability in 26100.33438
• security Fixes CVE-2026-69890: Windows Virtual Trusted Platform Module Elevation of Privilege Vulnerability in 26100.33438
• security Fixes CVE-2026-72954: Windows Deployment Services Remote Code Execution Vulnerability in 26100.33438
• security Fixes CVE-2026-73017: Graphics Kernel Remote Code Execution Vulnerability in 26100.33438
• security Fixes CVE-2026-81355: Virtual Hard Disk (VHD) Miniport Driver Remote Code Execution Vulnerability in 26100.33438
• security Fixes CVE-2026-69501: Windows Secure Kernel Mode Elevation of Privilege Vulnerability in 26100.33438
• security Fixes CVE-2026-70585: Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability in 26100.33438
• security Fixes CVE-2026-83501: Windows Virtualization-Based Security (VBS) Information Disclosure Vulnerability in 26100.33438
• security Fixes CVE-2026-72980: Windows Hello Security Feature Bypass Vulnerability in 26100.33438
• security Security update: includes the September 2026 Security Updates in 26100.33438
• security Fixes CVE-2026-68820: Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability in 26100.33296
• security Fixes CVE-2026-62815: Microsoft QUIC Remote Code Execution Vulnerability in 26100.33296
• security Fixes CVE-2026-62878: Windows DNS Server Remote Code Execution Vulnerability in 26100.33296
• security Fixes CVE-2026-62893: Windows Deployment Services TFTP Server Remote Code Execution Vulnerability in 26100.33296
• security Fixes CVE-2026-65791: Windows iSCSI Target Service Remote Code Execution Vulnerability in 26100.33296
• security Fixes CVE-2026-62816: Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability in 26100.33296
• security Fixes CVE-2026-62817: Windows DNS Server Remote Code Execution Vulnerability in 26100.33296
• security Fixes CVE-2026-62818: Windows Active Directory Certificate Services (AD CS) Remote Code Execution Vulnerability in 26100.33296
• security Fixes CVE-2026-62822: Windows GDI+ Remote Code Execution Vulnerability in 26100.33296
• security Fixes CVE-2026-62823: Windows DHCP Server Remote Code Execution Vulnerability in 26100.33296
• security Fixes CVE-2026-62819: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability in 26100.33296
• security Fixes CVE-2026-62820: Windows DNS Server Remote Code Execution Vulnerability in 26100.33296
• security Fixes CVE-2026-62889: Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability in 26100.33296
• security Fixes CVE-2026-65679: Windows iSCSI Target Service Remote Code Execution Vulnerability in 26100.33296
• security Fixes CVE-2026-65789: Windows DNS Server Remote Code Execution Vulnerability in 26100.33296
• security Fixes CVE-2026-65796: Windows iSCSI Target Service Remote Code Execution Vulnerability in 26100.33296
• security Fixes CVE-2026-66802: Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability in 26100.33296
• security Fixes CVE-2026-71331: Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability in 26100.33296
• security Fixes CVE-2026-62890: Windows GDI+ Elevation of Privilege Vulnerability in 26100.33296
• security Fixes CVE-2026-66799: Windows Key Guard Elevation of Privilege Vulnerability in 26100.33296
• security Security update: includes the August 2026 Security Updates in 26100.33296
• security Fixes CVE-2026-56155: Active Directory Federation Services Elevation of Privilege Vulnerability in 26100.33158
• security Fixes CVE-2026-57092: Microsoft Windows VMSwitch Elevation of Privilege Vulnerability in 26100.33158
• security Fixes CVE-2026-50518: Windows DHCP Server Remote Code Execution Vulnerability in 26100.33158
• security Fixes CVE-2026-56159: DHCP Server Service Remote Code Execution Vulnerability in 26100.33158
• security Fixes CVE-2026-56188: Windows Server Network driver Remote Code Execution Vulnerability in 26100.33158
• security Fixes CVE-2026-50380: Windows GDI+ Remote Code Execution Vulnerability in 26100.33158
• security Fixes CVE-2026-48564: DHCP Server Service Remote Code Execution Vulnerability in 26100.33158
• security Fixes CVE-2026-50370: DHCP Server Service Remote Code Execution Vulnerability in 26100.33158
• security Fixes CVE-2026-50382: DirectX Graphics Kernel Remote Code Execution Vulnerability in 26100.33158
• security Fixes CVE-2026-50444: Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability in 26100.33158
• security Fixes CVE-2026-50474: Remote Desktop Client Remote Code Execution Vulnerability in 26100.33158
• security Fixes CVE-2026-54121: Active Directory Certificate Services Elevation of Privilege Vulnerability in 26100.33158
• security Fixes CVE-2026-54982: Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability in 26100.33158
• security Fixes CVE-2026-54999: Windows TCP/IP Remote Code Execution Vulnerability in 26100.33158
• security Fixes CVE-2026-57087: Microsoft Windows Media Foundation Remote Code Execution Vulnerability in 26100.33158
• security Fixes CVE-2026-57090: Microsoft Windows Media Foundation Remote Code Execution Vulnerability in 26100.33158
• security Fixes CVE-2026-57094: Microsoft Windows Media Foundation Remote Code Execution Vulnerability in 26100.33158
• security Fixes CVE-2026-58608: Windows Print Spooler Remote Code Execution Vulnerability in 26100.33158
• security Fixes CVE-2026-54128: Windows DHCP Client Remote Code Execution Vulnerability in 26100.33158
• security Fixes CVE-2026-54992: Microsoft Message Queuing Queue Manager Remote Code Execution Vulnerability in 26100.33158
• security Fixes CVE-2026-50680: Windows Hyper-V Elevation of Privilege Vulnerability in 26100.33158
• security Fixes CVE-2026-49164: Windows Active Directory Domain Services Remote Code Execution Vulnerability in 26100.33158
• security Fixes CVE-2026-50694: Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability in 26100.33158
• security Fixes CVE-2026-54995: Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability in 26100.33158
• security Fixes CVE-2026-42982: Windows Secure Kernel Mode Elevation of Privilege Vulnerability in 26100.33158
• security Fixes CVE-2026-49796: Windows GDI+ Remote Code Execution Vulnerability in 26100.33158
• security Fixes CVE-2026-50327: Windows Media Remote Code Execution Vulnerability in 26100.33158
• security Fixes CVE-2026-50655: Microsoft Windows Media Foundation Remote Code Execution Vulnerability in 26100.33158
• security Fixes CVE-2026-56189: Microsoft Windows Media Foundation Remote Code Execution Vulnerability in 26100.33158
• security Fixes CVE-2026-58542: Windows Media Remote Code Execution Vulnerability in 26100.33158
• security Fixes CVE-2026-54127: Windows Hyper-V Elevation of Privilege Vulnerability in 26100.33158
• security Fixes CVE-2026-50392: Windows Secure Kernel Mode Elevation of Privilege Vulnerability in 26100.33158
• security Fixes CVE-2026-44815: DHCP Client Service Remote Code Execution Vulnerability in 26100.32995
• security Fixes CVE-2026-45657: Windows Kernel Remote Code Execution Vulnerability in 26100.32995
• security Fixes CVE-2026-47291: HTTP.sys Remote Code Execution Vulnerability in 26100.32995
• security Fixes CVE-2026-42985: Remote Desktop Client Remote Code Execution Vulnerability in 26100.32995
• security Fixes CVE-2026-45648: Windows Active Directory Domain Services Remote Code Execution Vulnerability in 26100.32995
• security Fixes CVE-2026-47289: Remote Desktop Client Remote Code Execution Vulnerability in 26100.32995
• security Fixes CVE-2026-44810: Microsoft Cryptographic Services Elevation of Privilege Vulnerability in 26100.32995
• security Fixes CVE-2026-45607: Windows Hyper-V Remote Code Execution Vulnerability in 26100.32995
• security Fixes CVE-2026-45641: Windows Hyper-V Remote Code Execution Vulnerability in 26100.32995
• security Fixes CVE-2026-47652: Windows Hyper-V Remote Code Execution Vulnerability in 26100.32995
• security Fixes CVE-2026-42987: Windows Deployment Services (WDS) Remote Code Execution in 26100.32995
• security Fixes CVE-2026-33828: Windows Device Health Attestation (DHA) Elevation of Privilege Vulnerability in 26100.32995
• security Fixes CVE-2026-44803: Windows Graphics Component Remote Code Execution Vulnerability in 26100.32995
• security Fixes CVE-2026-44812: Windows Graphics Component Remote Code Execution Vulnerability in 26100.32995
• security Fixes CVE-2026-48574: Windows Media Remote Code Execution Vulnerability in 26100.32995
• security Fixes CVE-2026-42992: Remote Desktop Client Remote Code Execution Vulnerability in 26100.32995
• security Fixes CVE-2026-44799: Remote Desktop Client Remote Code Execution Vulnerability in 26100.32995
• security Fixes CVE-2026-44801: Remote Desktop Client Remote Code Execution Vulnerability in 26100.32995
• security Fixes CVE-2026-47654: Remote Desktop Client Remote Code Execution Vulnerability in 26100.32995
• security Fixes CVE-2026-48563: Remote Desktop Client Remote Code Execution Vulnerability in 26100.32995
• security Fixes CVE-2026-47288: Windows Kerberos Key Distribution Center (KDC) Remote Code Execution in 26100.32995
• security Fixes CVE-2026-41089: Windows Netlogon Remote Code Execution Vulnerability in 26100.32860
• security Fixes CVE-2026-41096: Windows DNS Client Remote Code Execution Vulnerability in 26100.32860
• security Fixes CVE-2026-40403: Windows Graphics Component Remote Code Execution Vulnerability in 26100.32860
• security Fixes CVE-2026-35421: Windows GDI Remote Code Execution Vulnerability in 26100.32860
• security Fixes CVE-2026-32161: Windows Native WiFi Miniport Driver Remote Code Execution Vulnerability in 26100.32860
• security [Active Directory] Fixed: After installing the April 2026 Windows security update and restarting, domain controllers (DCs) with multi-domain forests that use Privileged Access Management (PAM), might experience startup issues. In some cases, Local Security Authority Subsystem Service (LSASS) might… in 26100.32698
• security [Windows update installation] Fixed: A small number of Windows Server 2025 devices might fail to install the April 14, 2026, Windows security update (KB5082063). When this issue occurs, affected devices might display one of the following error messages: “Install error: 0x800F0983” or “Some update… in 26100.32698
• security [Graphics] Fixed: This update addresses an issue where certain GPU configurations might recently have experienced a system error related to dxgmms2.sys, resulting in the KERNEL_SECURITY_CHECK_FAILURE error. in 26100.32370
• security [Remote Desktop] Fixed: After installing the January 2026 Windows security update (KB5073379), some users experienced sign-in failures during Remote Desktop connections. This issue affected authentication steps for different Remote Desktop applications on Windows such as the Windows App. in 26100.32234
• security [Credentials autofill] This update introduces a security hardening behavior restricting certain applications to autofill credentials during remote support sessions or automated authentication workflows. With this change, credential dialogs do not respond to virtual keyboard input from remote… in 26100.32230
• security [WinSqlite3.dll] Fixed: The Windows core component, WinSqlite3.dll, has been updated. Previously, some security software might have detected this component as vulnerable. Note WinSqlite3.dll is a separate component from sqlite3.dll, which is found in application-specific directories and is not a… in 26100.32230
• security [PowerShell 5.1] Invoke-WebRequest now includes a confirmation prompt with a security warning of script execution risk. You can choose to continue or cancel the request. For additional details, see CVE-2025-54100 and KB5074596: PowerShell 5.1: Preventing script execution from web content. in 26100.7462
• security [App compatibility (known issue)] Fixed: This update addresses an issue that created unexpected User Account Control (UAC) prompts for some apps, including Autodesk AutoCAD. For more information, see Unexpected UAC prompts when running MSI repair operations after installing the August 2025 Windows… in 26100.7171
• security [Authentication] Fixed: This update addresses an issue that affects the Local Security Authority Subsystem Service (LSASS). LSASS might stop responding during machine password changes with specific audit settings. in 26100.7171
• security [Stability issue] This update addresses an issue observed in rare cases after installing the May 2025 security update and subsequent updates causing devices to experience stability issues. Some devices became unresponsive and stopped responding in specific scenarios. in 26100.7171
• security [Windows Firewall (known issue)] Fixed: This update addresses an issue found in Event Viewer as Event 2042 for Windows Firewall with Advanced Security. The event appears as "Config Read Failed" with the message "More data is available." For more information about this issue, see "Error events are… in 26100.7171
• security [Windows Server Update Services (WSUS)] Fixed: This update addresses a remote code execution (RCE) vulnerability that was identified in WSUS reporting web services. For more information about the security fix, see CVE-2025-59287. in 26100.6905
• security [USB] Fixed: After installing the Windows security update released on October 14, 2025 (KB5066835), USB devices, such as keyboards and mice, do not function in the Windows Recovery Environment (WinRE). This issue prevents navigation of any of the recovery options within WinRE. Note that the USB… in 26100.6901
• security New! After installing this update, File Explorer automatically disables the preview feature for files downloaded from the internet. This change is designed to enhance security by preventing a vulnerability when users preview potentially unsafe files. For details, including steps to unblock files,… in 26100.6899
• security [Cryptography] This update enforces a security hardening improvement by requiring use of Key Storage Provider (KSP) instead of Cryptographic Service Provider {CSP) for RSA-based smart card certificates. If you experience problems with smart card authentication as a result of this design change,… in 26100.6899
• security [Print] To meet security goals and support new print capabilities, this update transitions Windows printing components from MSVCRT to a modern Universal C Runtime Library. As a result of this change, print clients running versions of Windows prior to Windows 10, version 2004 and Windows Server,… in 26100.6584
• security [App compatibility (known issue)] Fixed: Addresses an issue that caused non-admin users to receive unexpected User Account Control (UAC) prompts when MSI installers perform certain custom actions. These actions might include configuration or repair operations in the foreground or background,… in 26100.6584
• security [File server] This update enabled auditing SMB client compatibility for SMB Server signing as well as SMB Server EPA. This allows customers to assess their environment and identify any potential device or software incompatibility issues before deploying the hardening measures that are already… in 26100.6584
• security [Fix for Azure Virtual Machines with Trusted Launch disabled] This update addresses an issue that prevented some virtual machines (VMs) from starting when Virtualization-Based Security (VBS) was enabled. It affected VMs using version 8.0 (a non-default version) where VBS was offered by the host.… in 26100.4656
• security Security update: includes the July 2025 Security Updates in 26100.4652
• security [Wi-Fi] Fixed: The Windows Security dialog might stop responding when you sign into certain Wi-Fi networks. This issue might also occur in some other options in Settings. in 26100.4061
• security [Windows Kernel Vulnerable Driver Blocklist file (DriverSiPolicy.p7b)] This update adds to the list of drivers that are at risk for Bring Your Own Vulnerable Driver (BYOVD) attacks. in 26100.4061
• security [Microsoft RPC Netlogon protocol]⁠ This update includes a security hardening change to the Microsoft RPC Netlogon protocol. This change improves security by tightening access checks for a set of remote procedure call (RPC) requests. After this update is installed, Active Directory domain… in 26100.4061
• security Security update: includes the April 2025 Security Updates in 26100.3775
• security [Performance] Fixed: After installing the Windows security update (KB5051987), released February 11, 2025, and later updates, on Windows Server 2025 devices, the SQL Server Launchpad service might not start if SQL Server Machine Learning Services is installed. in 26100.3775
• security [OS Security] After installing this update or a later Windows update, a new %systemdrive%\inetpub folder will be created on your device. This folder should not be deleted regardless of whether Internet Information Services (IIS) is enabled on the target device. This behavior is part of changes… in 26100.3775
• security [Kerberos Authentication] Change of behavior: Adds protections for a vulnerability which occurs when a certificate authority is part of the Windows root store but not the NTAuth store. This change enabled by default might cause Event ID: 45 events to be logged on the domain controller. For more… in 26100.3775
• security [Windows Hello] After installing this update or a later Windows update, for enhanced security, Windows Hello facial recognition requires color cameras to see a visible face when signing in. For more information, see CVE-2025-26644. in 26100.3775
• security Security update: includes the March 2025 Security Updates in 26100.3476
• security [Windows Kernel Vulnerable Driver Blocklist file (DriverSiPolicy.p7b)] This update adds more drivers to the list that are at risk for Bring Your Own Vulnerable Driver (BYOVD) attacks. in 26100.3476
• security Security update: includes the February 2025 Security Updates in 26100.3194
• security [USB cameras] Fixed: Your device does not recognize the camera is on. This issue occurs after you install the January 2025 security update. in 26100.3194
• security Security update: includes the January 2025 Security Updates in 26100.2894
• security [Windows Kernel Vulnerable Driver Blocklist file (DriverSiPolicy.p7b)] This update adds to the list of drivers that are at risk for Bring Your Own Vulnerable Driver (BYOVD) attacks. in 26100.2894
• security Security update: includes the December 2024 Security Updates in 26100.2605
• security This update makes miscellaneous security improvements to internal OS functionality. No additional issues were documented for this release. in 26100.2605
• security Security update: includes the November 2024 Security Updates in 26100.2314
• security Fixes CVE-2026-96951: Windows Shell Security Feature Bypass Vulnerability in 20348.5761
• security Fixes CVE-2026-100202: Windows Message Queuing Queue Manager Remote Code Execution Vulnerability in 20348.5761
• security Fixes CVE-2026-100219: Microsoft QUIC Remote Code Execution Vulnerability in 20348.5761
• security Fixes CVE-2026-105016: Microsoft QUIC Remote Code Execution Vulnerability in 20348.5761
• security Fixes CVE-2026-70147: Microsoft PostScript Printer Driver Remote Code Execution Vulnerability in 20348.5761
• security Fixes CVE-2026-70153: Microsoft PostScript Printer Driver Remote Code Execution Vulnerability in 20348.5761
• security Fixes CVE-2026-96934: Windows DHCP Server Remote Code Execution Vulnerability in 20348.5761
• security Fixes CVE-2026-97814: Windows Text Shaping Remote Code Execution Vulnerability in 20348.5761
• security Fixes CVE-2026-100220: Windows Media Video Decoder Remote Code Execution Vulnerability in 20348.5761
• security Fixes CVE-2026-102214: Windows Hyper-V Remote Code Execution Vulnerability in 20348.5761
• security Fixes CVE-2026-102225: Windows Text Shaping Remote Code Execution Vulnerability in 20348.5761
• security Fixes CVE-2026-105733: Windows Hyper-V Remote Code Execution Vulnerability in 20348.5761
• security Fixes CVE-2026-108467: Microsoft PostScript Printer Driver Remote Code Execution Vulnerability in 20348.5761
• security Fixes CVE-2026-70250: Windows DHCP Client Remote Code Execution Vulnerability in 20348.5761
• security Fixes CVE-2026-83934: Windows GDI+ Remote Code Execution Vulnerability in 20348.5761
• security Fixes CVE-2026-96913: Windows Kernel Elevation of Privilege Vulnerability in 20348.5761
• security Fixes CVE-2026-96914: Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability in 20348.5761
• security Fixes CVE-2026-96952: Microsoft Windows Media Foundation Remote Code Execution Vulnerability in 20348.5761
• security Fixes CVE-2026-108457: Microsoft Windows PDF Remote Code Execution Vulnerability in 20348.5761
• security Fixes CVE-2026-108460: Windows Message Queuing Remote Code Execution Vulnerability in 20348.5761
• security Fixes CVE-2026-69802: Network Device Enrollment Service (NDES) Remote Code Execution Vulnerability in 20348.5761
• security Fixes CVE-2026-70187: Windows Remote Desktop Services Remote Code Execution Vulnerability in 20348.5761
• security Fixes CVE-2026-70229: Windows Active Directory Domain Services Remote Code Execution Vulnerability in 20348.5761
• security Fixes CVE-2026-88117: Windows DHCP Server Remote Code Execution Vulnerability in 20348.5761
• security Fixes CVE-2026-88119: Windows DHCP Server Remote Code Execution Vulnerability in 20348.5761
• security Fixes CVE-2026-88120: Windows DHCP Server Remote Code Execution Vulnerability in 20348.5761
• security Fixes CVE-2026-88171: Windows DHCP Server Remote Code Execution Vulnerability in 20348.5761
• security Fixes CVE-2026-88174: Windows Deployment Services Remote Code Execution Vulnerability in 20348.5761
• security Fixes CVE-2026-100215: Microsoft Graphics Component Remote Code Execution Vulnerability in 20348.5761
• security Fixes CVE-2026-108131: Active Directory Federation Services (AD FS) Spoofing Vulnerability in 20348.5761
• security Fixes CVE-2026-96222: Active Directory Federation Services (AD FS) Spoofing Vulnerability in 20348.5761
• security Fixes CVE-2026-108399: Windows Hyper-V Elevation of Privilege Vulnerability in 20348.5761
• security Fixes CVE-2026-102211: Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability in 20348.5761
• security Fixes CVE-2026-83917: Windows ALPC Elevation of Privilege Vulnerability in 20348.5761
• security Security update: includes the October 2026 Security Updates in 20348.5761
• security [Security] This update upgrades the version of cURL included with Windows to version 8.21.0. in 20348.5761
• security [ReFS security] This update adds auditing and optional policy controls for ReFS volumes on externally attached storage devices. Auditing is enabled by default, while enforcement controls remain disabled by default to give administrators time to evaluate and prepare for future security hardening… in 20348.5761
• security [Distributed Key Manager (DKM)] This update automatically remediates insecure DKM container ACL configurations in AD FS by default. Administrators can opt out of automatic remediation by setting RemediateDkmAcl to 0. This change helps address an elevation of privilege vulnerability that can occur… in 20348.5761
• security [Remote Desktop Services (known issue)] Fixed: This update addresses an issue affecting Remote Desktop Services (RDS) after installing the September 2026 Windows security update (KB5122882). In affected environments, RDS might become unstable, causing RDP connection and sign-in failures or servers… in 20348.5631
• security Fixes CVE-2026-85880: Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability in 20348.5622
• security Fixes CVE-2026-69579: Windows Message Queuing Remote Code Execution Vulnerability in 20348.5622
• security Fixes CVE-2026-69590: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability in 20348.5622
• security Fixes CVE-2026-69595: Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability in 20348.5622
• security Fixes CVE-2026-69730: Windows DNS Server Remote Code Execution Vulnerability in 20348.5622
• security Fixes CVE-2026-69769: Windows HTTP Print Provider Remote Code Execution Vulnerability in 20348.5622
• security Fixes CVE-2026-69829: Windows Shell Remote Code Execution Vulnerability in 20348.5622
• security Fixes CVE-2026-69845: Windows DHCP Server Remote Code Execution Vulnerability in 20348.5622
• security Fixes CVE-2026-70296: Windows Imaging Component Remote Code Execution Vulnerability in 20348.5622
• security Fixes CVE-2026-72979: Windows DHCP Server Remote Code Execution Vulnerability in 20348.5622
• security Fixes CVE-2026-72982: Windows Netlogon Remote Code Execution Vulnerability in 20348.5622
• security Fixes CVE-2026-72983: Internet Connection Sharing (ICS) Remote Code Execution Vulnerability in 20348.5622
• security Fixes CVE-2026-73009: Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability in 20348.5622
• security Fixes CVE-2026-73010: Microsoft Failover Cluster Remote Code Execution Vulnerability in 20348.5622
• security Fixes CVE-2026-77493: Windows Graphics Component Remote Code Execution Vulnerability in 20348.5622
• security Fixes CVE-2026-78445: Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability in 20348.5622
• security Fixes CVE-2026-69499: Windows Imaging Component Remote Code Execution Vulnerability in 20348.5622
• security Fixes CVE-2026-69518: Windows Remote Desktop Remote Code Execution Vulnerability in 20348.5622
• security Fixes CVE-2026-69601: Microsoft Windows Media Foundation Remote Code Execution Vulnerability in 20348.5622
• security Fixes CVE-2026-69603: Windows Hyper-V Remote Code Execution Vulnerability in 20348.5622
• security Fixes CVE-2026-69676: Windows Kerberos Remote Code Execution Vulnerability in 20348.5622
• security Fixes CVE-2026-69712: Windows Key Distribution Center Remote Code Execution Vulnerability in 20348.5622
• security Fixes CVE-2026-69860: Windows Imaging Component Remote Code Execution Vulnerability in 20348.5622
• security Fixes CVE-2026-70203: Windows Media Player Remote Code Execution Vulnerability in 20348.5622
• security Fixes CVE-2026-70586: Windows Paint Remote Code Execution Vulnerability in 20348.5622
• security Fixes CVE-2026-72950: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability in 20348.5622
• security Fixes CVE-2026-72959: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability in 20348.5622
• security Fixes CVE-2026-72960: Windows Media Player Remote Code Execution Vulnerability in 20348.5622
• security Fixes CVE-2026-72986: Graphic Fonts Remote Code Execution Vulnerability in 20348.5622
• security Fixes CVE-2026-73006: DirectWrite Remote Code Execution Vulnerability in 20348.5622
• security Fixes CVE-2026-73013: Windows Imaging Component Remote Code Execution Vulnerability in 20348.5622
• security Fixes CVE-2026-73018: Graphic Fonts Remote Code Execution Vulnerability in 20348.5622
• security Fixes CVE-2026-73023: Windows Imaging Component Remote Code Execution Vulnerability in 20348.5622
• security Fixes CVE-2026-77495: Windows Imaging Component Remote Code Execution Vulnerability in 20348.5622
• security Fixes CVE-2026-77504: Microsoft Office Word Remote Code Execution Vulnerability in 20348.5622
• security Fixes CVE-2026-80083: Windows Hyper-V Remote Code Execution Vulnerability in 20348.5622
• security Fixes CVE-2026-81955: Windows Graphics Component Remote Code Execution Vulnerability in 20348.5622
• security Fixes CVE-2026-69846: Windows Secure Kernel Mode Elevation of Privilege Vulnerability in 20348.5622
• security Fixes CVE-2026-69874: Windows ALPC Elevation of Privilege Vulnerability in 20348.5622
• security Fixes CVE-2026-69906: Windows Secure Kernel Mode Elevation of Privilege Vulnerability in 20348.5622
• security Fixes CVE-2026-72961: Windows Hyper-V Elevation of Privilege Vulnerability in 20348.5622
• security Fixes CVE-2026-72962: Windows USB Video Driver Elevation of Privilege Vulnerability in 20348.5622
• security Fixes CVE-2026-69530: Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability in 20348.5622
• security Fixes CVE-2026-69813: Windows DNS Server Remote Code Execution Vulnerability in 20348.5622
• security Fixes CVE-2026-69827: Windows DNS Server Remote Code Execution Vulnerability in 20348.5622
• security Fixes CVE-2026-69858: Windows DNS Server Remote Code Execution Vulnerability in 20348.5622
• security Fixes CVE-2026-72981: IP Helper Remote Code Execution Vulnerability in 20348.5622
• security Fixes CVE-2026-72987: Windows DNS Remote Code Execution Vulnerability in 20348.5622
• security Fixes CVE-2026-77505: Windows DNS Server Remote Code Execution Vulnerability in 20348.5622
• security Fixes CVE-2026-78444: Microsoft Failover Cluster Remote Code Execution Vulnerability in 20348.5622
• security Fixes CVE-2026-78449: Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability in 20348.5622
• security Fixes CVE-2026-78450: Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability in 20348.5622
• security Fixes CVE-2026-72957: Windows Deployment Services Remote Code Execution Vulnerability in 20348.5622
• security Fixes CVE-2026-69789: Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability in 20348.5622
• security Fixes CVE-2026-69852: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability in 20348.5622
• security Fixes CVE-2026-69890: Windows Virtual Trusted Platform Module Elevation of Privilege Vulnerability in 20348.5622
• security Fixes CVE-2026-72954: Windows Deployment Services Remote Code Execution Vulnerability in 20348.5622
• security Fixes CVE-2026-73017: Graphics Kernel Remote Code Execution Vulnerability in 20348.5622
• security Fixes CVE-2026-81355: Virtual Hard Disk (VHD) Miniport Driver Remote Code Execution Vulnerability in 20348.5622
• security Fixes CVE-2026-69501: Windows Secure Kernel Mode Elevation of Privilege Vulnerability in 20348.5622
• security Fixes CVE-2026-70585: Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability in 20348.5622
• security Fixes CVE-2026-72980: Windows Hello Security Feature Bypass Vulnerability in 20348.5622
• security Security update: includes the September 2026 Security Updates in 20348.5622
• security Fixes CVE-2026-68820: Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability in 20348.5499
• security Fixes CVE-2026-62815: Microsoft QUIC Remote Code Execution Vulnerability in 20348.5499
• security Fixes CVE-2026-62878: Windows DNS Server Remote Code Execution Vulnerability in 20348.5499
• security Fixes CVE-2026-62893: Windows Deployment Services TFTP Server Remote Code Execution Vulnerability in 20348.5499
• security Fixes CVE-2026-65791: Windows iSCSI Target Service Remote Code Execution Vulnerability in 20348.5499
• security Fixes CVE-2026-62816: Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability in 20348.5499
• security Fixes CVE-2026-62817: Windows DNS Server Remote Code Execution Vulnerability in 20348.5499
• security Fixes CVE-2026-62818: Windows Active Directory Certificate Services (AD CS) Remote Code Execution Vulnerability in 20348.5499
• security Fixes CVE-2026-62822: Windows GDI+ Remote Code Execution Vulnerability in 20348.5499
• security Fixes CVE-2026-62823: Windows DHCP Server Remote Code Execution Vulnerability in 20348.5499
• security Fixes CVE-2026-62819: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability in 20348.5499
• security Fixes CVE-2026-62820: Windows DNS Server Remote Code Execution Vulnerability in 20348.5499
• security Fixes CVE-2026-62889: Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability in 20348.5499
• security Fixes CVE-2026-65679: Windows iSCSI Target Service Remote Code Execution Vulnerability in 20348.5499
• security Fixes CVE-2026-65789: Windows DNS Server Remote Code Execution Vulnerability in 20348.5499
• security Fixes CVE-2026-65796: Windows iSCSI Target Service Remote Code Execution Vulnerability in 20348.5499
• security Fixes CVE-2026-66802: Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability in 20348.5499
• security Fixes CVE-2026-71331: Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability in 20348.5499
• security Fixes CVE-2026-62890: Windows GDI+ Elevation of Privilege Vulnerability in 20348.5499
• security Fixes CVE-2026-66799: Windows Key Guard Elevation of Privilege Vulnerability in 20348.5499
• security Security update: includes the August 2026 Security Updates in 20348.5499
• security Fixes CVE-2026-56155: Active Directory Federation Services Elevation of Privilege Vulnerability in 20348.5386
• security Fixes CVE-2026-57092: Microsoft Windows VMSwitch Elevation of Privilege Vulnerability in 20348.5386
• security Fixes CVE-2026-50518: Windows DHCP Server Remote Code Execution Vulnerability in 20348.5386
• security Fixes CVE-2026-56159: DHCP Server Service Remote Code Execution Vulnerability in 20348.5386
• security Fixes CVE-2026-56188: Windows Server Network driver Remote Code Execution Vulnerability in 20348.5386
• security Fixes CVE-2026-50380: Windows GDI+ Remote Code Execution Vulnerability in 20348.5386
• security Fixes CVE-2026-48564: DHCP Server Service Remote Code Execution Vulnerability in 20348.5386
• security Fixes CVE-2026-50370: DHCP Server Service Remote Code Execution Vulnerability in 20348.5386
• security Fixes CVE-2026-50382: DirectX Graphics Kernel Remote Code Execution Vulnerability in 20348.5386
• security Fixes CVE-2026-50444: Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability in 20348.5386
• security Fixes CVE-2026-50474: Remote Desktop Client Remote Code Execution Vulnerability in 20348.5386
• security Fixes CVE-2026-54121: Active Directory Certificate Services Elevation of Privilege Vulnerability in 20348.5386
• security Fixes CVE-2026-54982: Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability in 20348.5386
• security Fixes CVE-2026-54999: Windows TCP/IP Remote Code Execution Vulnerability in 20348.5386
• security Fixes CVE-2026-57087: Microsoft Windows Media Foundation Remote Code Execution Vulnerability in 20348.5386
• security Fixes CVE-2026-57090: Microsoft Windows Media Foundation Remote Code Execution Vulnerability in 20348.5386
• security Fixes CVE-2026-57094: Microsoft Windows Media Foundation Remote Code Execution Vulnerability in 20348.5386
• security Fixes CVE-2026-58608: Windows Print Spooler Remote Code Execution Vulnerability in 20348.5386
• security Fixes CVE-2026-54128: Windows DHCP Client Remote Code Execution Vulnerability in 20348.5386
• security Fixes CVE-2026-54992: Microsoft Message Queuing Queue Manager Remote Code Execution Vulnerability in 20348.5386
• security Fixes CVE-2026-50680: Windows Hyper-V Elevation of Privilege Vulnerability in 20348.5386
• security Fixes CVE-2026-49164: Windows Active Directory Domain Services Remote Code Execution Vulnerability in 20348.5386
• security Fixes CVE-2026-50694: Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability in 20348.5386
• security Fixes CVE-2026-54995: Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability in 20348.5386
• security Fixes CVE-2026-42982: Windows Secure Kernel Mode Elevation of Privilege Vulnerability in 20348.5386
• security Fixes CVE-2026-49796: Windows GDI+ Remote Code Execution Vulnerability in 20348.5386
• security Fixes CVE-2026-50655: Microsoft Windows Media Foundation Remote Code Execution Vulnerability in 20348.5386
• security Fixes CVE-2026-56189: Microsoft Windows Media Foundation Remote Code Execution Vulnerability in 20348.5386
• security Fixes CVE-2026-54127: Windows Hyper-V Elevation of Privilege Vulnerability in 20348.5386
• security Fixes CVE-2026-44815: DHCP Client Service Remote Code Execution Vulnerability in 20348.5256
• security Fixes CVE-2026-45657: Windows Kernel Remote Code Execution Vulnerability in 20348.5256
• security Fixes CVE-2026-47291: HTTP.sys Remote Code Execution Vulnerability in 20348.5256
• security Fixes CVE-2026-42985: Remote Desktop Client Remote Code Execution Vulnerability in 20348.5256
• security Fixes CVE-2026-45648: Windows Active Directory Domain Services Remote Code Execution Vulnerability in 20348.5256
• security Fixes CVE-2026-47289: Remote Desktop Client Remote Code Execution Vulnerability in 20348.5256
• security Fixes CVE-2026-44810: Microsoft Cryptographic Services Elevation of Privilege Vulnerability in 20348.5256
• security Fixes CVE-2026-45607: Windows Hyper-V Remote Code Execution Vulnerability in 20348.5256
• security Fixes CVE-2026-45641: Windows Hyper-V Remote Code Execution Vulnerability in 20348.5256
• security Fixes CVE-2026-47652: Windows Hyper-V Remote Code Execution Vulnerability in 20348.5256
• security Fixes CVE-2026-42987: Windows Deployment Services (WDS) Remote Code Execution in 20348.5256
• security Fixes CVE-2026-33828: Windows Device Health Attestation (DHA) Elevation of Privilege Vulnerability in 20348.5256
• security Fixes CVE-2026-44803: Windows Graphics Component Remote Code Execution Vulnerability in 20348.5256
• security Fixes CVE-2026-44812: Windows Graphics Component Remote Code Execution Vulnerability in 20348.5256
• security Fixes CVE-2026-48574: Windows Media Remote Code Execution Vulnerability in 20348.5256
• security Fixes CVE-2026-42992: Remote Desktop Client Remote Code Execution Vulnerability in 20348.5256
• security Fixes CVE-2026-44799: Remote Desktop Client Remote Code Execution Vulnerability in 20348.5256
• security Fixes CVE-2026-44801: Remote Desktop Client Remote Code Execution Vulnerability in 20348.5256
• security Fixes CVE-2026-47654: Remote Desktop Client Remote Code Execution Vulnerability in 20348.5256
• security Fixes CVE-2026-48563: Remote Desktop Client Remote Code Execution Vulnerability in 20348.5256
• security Fixes CVE-2026-47288: Windows Kerberos Key Distribution Center (KDC) Remote Code Execution in 20348.5256
• security Fixes CVE-2026-41089: Windows Netlogon Remote Code Execution Vulnerability in 20348.5139
• security Fixes CVE-2026-40402: Windows Hyper-V Elevation of Privilege Vulnerability in 20348.5139
• security Fixes CVE-2026-40403: Windows Graphics Component Remote Code Execution Vulnerability in 20348.5139
• security Fixes CVE-2026-35421: Windows GDI Remote Code Execution Vulnerability in 20348.5139
• security Fixes CVE-2026-32161: Windows Native WiFi Miniport Driver Remote Code Execution Vulnerability in 20348.5139
• security [Domain controllers (known issue)] Fixed: After installing the April 14, 2026, (KB5082142) Windows security update and restarting, domain controllers with multi-domain forests that use Privileged Access Management (PAM), might experience startup issues. In some cases, Local Security Authority… in 20348.5024
• security Security update: includes the April 2026 Security Updates in 20348.5020
• security [Kerberos protocol] This update changes the default DefaultDomainSupportedEncTypes value for Kerberos Key Distribution Center (KDC) operations to leverage AES-SHA1 for accounts that do not have an explicit msds-SupportedEncryptionTypes Active Directory attribute defined. For more information see,… in 20348.5020
• security [Remote Desktop] This update improves protection against phishing attacks that use Remote Desktop (.rdp) files. When you open an .rdp file, Remote Desktop shows all requested connection settings before it connects, with each setting turned off by default. A one-time security warning also appears… in 20348.5020
• security [Vulnerable driver blocklist] This update introduces a security hardening change that adds known vulnerable kernel drivers to the Microsoft vulnerable driver blocklist. Backup applications that rely on blocked drivers might experience failures when attempting to mount or manage disk images. These… in 20348.5020
• security [Windows Deployment Services (WDS)] This update disables the “Hands-Free Deployment” feature in WDS by default and is no longer a supported feature. For more information about this change, see Windows Deployment Services (WDS) Hands-Free Deployment Hardening Guidance related to CVE-2026-0386. in 20348.5020
• security Security update: includes the March 2026 Security Updates in 20348.4893
• security [Graphics] Fixed: This update addresses an issue where certain GPU configurations might recently have experienced a system error related to dxgmms2.sys, resulting in the KERNEL_SECURITY_CHECK_FAILURE error. in 20348.4773
• security [OS Security (known issue)] Fixed: After installing the Windows security update released on or after January 13, 2026, some PCs which run Virtual Secure Mode (VSM) are unable to shut down or enter hibernation. Instead, the device restarts. in 20348.4773
• security [Remote Desktop] Fixed: After installing the January 2026 Windows security update (KB5073457), some users experienced sign-in failures during Remote Desktop connections. This issue affected authentication steps for different Remote Desktop applications on Windows such as the Windows App. in 20348.4650
• security [Credentials autofill] This update introduces a security hardening behavior restricting certain applications to autofill credentials during remote support sessions or automated authentication workflows. With this change, credential dialogs do not respond to virtual keyboard input from remote… in 20348.4648
• security [WinSqlite3.dll] Fixed: The Windows core component, WinSqlite3.dll, has been updated. Previously, some security software might have detected this component as vulnerable. Note WinSqlite3.dll is a separate component from sqlite3.dll, which is found in application-specific directories and is not a… in 20348.4648
• security [PowerShell 5.1] Invoke-WebRequest now includes a confirmation prompt with a security warning of script execution risk. You can choose to continue or cancel the request. For additional details, see CVE-2025-54100 and KB5074596: PowerShell 5.1: Preventing script execution from web content. in 20348.4529
• security [App compatibility (known issue)] Fixed: This update addresses an issue that created unexpected User Account Control (UAC) prompts for some apps, including Autodesk AutoCAD. For more information, see Unexpected UAC prompts when running MSI repair operations after installing the August 2025 Windows… in 20348.4405
• security [Security] Fixed: This update addresses an issue that affects Windows Server domain controllers using Microsoft Defender for Endpoint. After domain controller promotion, changes to registry permissions disrupted cloud-based communication. in 20348.4405
• security [Windows Server Update Services (WSUS)] Fixed: This update addresses a remote code execution (RCE) vulnerability that was identified in WSUS reporting web services. For more information about the security fix, see CVE-2025-59287. in 20348.4297
• security [Stability issue] Fixed: This update addresses an issue observed in rare cases after installing the May 2025 security update and subsequent updates causing devices to experience stability issues. Some devices became unresponsive and stopped responding in specific scenarios. in 20348.4294
• security [Cryptography] This update enforces a security hardening improvement by requiring use of Key Storage Provider (KSP) instead of Cryptographic Service Provider {CSP) for RSA-based smart card certificates. If you experience problems with smart card authentication as a result of this design change,… in 20348.4294
• security [File Explorer] After installing this update, File Explorer automatically disables the preview feature for files downloaded from the internet. This change is designed to enhance security by preventing a vulnerability when users preview potentially unsafe files. For details, including steps to… in 20348.4294
• security [App compatibility (known issue)] Fixed: Addresses an issue that caused non-admin users to receive unexpected User Account Control (UAC) prompts when MSI installers perform certain custom actions. These actions might include configuration or repair operations in the foreground or background,… in 20348.4171
• security [File server]⁠ This update enabled auditing SMB client compatibility for SMB Server signing as well as SMB Server EPA. This allows customers to assess their environment and identify any potential device or software incompatibility issues before deploying the hardening measures that are already… in 20348.4171
• security Security update: includes the July 2025 Security Updates in 20348.3932
• security [Microsoft RPC Netlogon protocol] This update includes a security hardening change to the Microsoft RPC Netlogon protocol. This change improves security by tightening access checks for a set of remote procedure call (RPC) requests. After this update is installed, Active Directory domain… in 20348.3932
• security [Windows Kernel Vulnerable Driver Blocklist file (DriverSiPolicy.p7b)] This update adds to the list of drivers that are at risk for Bring Your Own Vulnerable Driver (BYOVD) attacks. in 20348.3692
• security It addresses a known issue where Audit Logon/Logoff events in the local policy of the Active Directory Group Policy might not show as enabled on the device even if they are enabled and working as expected. This can be observed in the Local Group Policy Editor or Local Security Policy, where local… in 20348.3561
• security Security update: includes the April 2025 Security Updates in 20348.3453
• security [OS Security] After installing this update or a later Windows update, a new %systemdrive%\inetpub folder will be created on your device. This folder should not be deleted regardless of whether Internet Information Services (IIS) is enabled on the target device. This behavior is part of changes… in 20348.3453
• security [Kerberos Authentication] Change of behavior: Adds protections for a vulnerability which occurs when a certificate authority is part of the Windows root store but not the NTAuth store. This change enabled by default might cause Event ID: 45 events to be logged on the domain controller. For more… in 20348.3453
• security Security update: includes the February 2025 Security Updates in 20348.3207
• security [Windows Kernel Vulnerable Driver Blocklist file (DriverSiPolicy.p7b)] This update adds to the list of drivers that are at risk for Bring Your Own Vulnerable Driver (BYOVD) attacks. in 20348.3207
• security [USB cameras] Fixed: Your device does not recognize the camera is on. This issue occurs after you install the January 2025 security update. in 20348.3207
• security Security update: includes the January 2025 Security Updates in 20348.3091
• security [Windows Kernel Vulnerable Driver Blocklist file (DriverSiPolicy.p7b)] This update adds to the list of drivers that are at risk for Bring Your Own Vulnerable Driver (BYOVD) attacks. in 20348.3091
• security Security update: includes the December 2024 Security Updates in 20348.2966
• security [Windows Kernel Vulnerable Driver Blocklist file (DriverSiPolicy.p7b)] This update adds to the list of drivers that are at risk for Bring Your Own Vulnerable Driver (BYOVD) attacks. in 20348.2849
• security Security update: includes the October 2024 Security Updates in 20348.2762
• security Security update: includes the September 2024 Security Updates in 20348.2700
• security [Dual boot of Windows and Linux (known issue)] Linux might fail to start up when you turn on dual-boot setup for Windows and Linux on your device. The error message is, “Verifying shim SBAT data failed: Security Policy Violation. Something has gone seriously wrong: SBAT self-check failed: Security… in 20348.2700
• security Security update: includes the August 2024 Security Updates in 20348.2655
• security [Windows Kernel Vulnerable Driver Blocklist file (DriverSiPolicy.p7b)] This update adds to the list of drivers that are at risk for Bring Your Own Vulnerable Driver (BYOVD) attacks. in 20348.2655
• security [BitLocker (known issue)] A BitLocker recovery screen shows when you start up your device. This occurs after you install the July 9, 2024, update. This issue is more likely to occur if device encryption is on. Go to Settings > Privacy & Security > Device encryption. To unlock your drive, Windows… in 20348.2655
• security [Lock screen] This update addresses CVE-2024-38143. Because of this, the “Use my Windows user account” checkbox is not available on the lock screen to connect to Wi-Fi. in 20348.2655
• security [Secure Boot Advanced Targeting (SBAT) and Linux Extensible Firmware Interface (EFI)] This update applies SBAT to systems that run Windows. This stops vulnerable Linux EFI (Shim bootloaders) from running. This SBAT update will not apply to systems that dual-boot Windows and Linux. After the SBAT… in 20348.2655
• security [Domain Name System (DNS)] This update hardens DNS server security to address CVE-2024-37968. If the configurations of your domains are not up to date, you might get the SERVFAIL error or time out. in 20348.2655
• security Security update: includes the July 2024 Security Updates in 20348.2582
• security [BitLocker] This update adds PCR 4 to PCR 7 and 11 for the default Secure Boot validation profile. See CVE-2024-38058 for more information. in 20348.2582
• security Security update: includes the June 2024 Security Updates in 20348.2527
• security This update addresses an issue that affects lsass.exe. It stops responding. This occurs after you install the April 2024 security updates on Windows servers. in 20348.2527
• security This update addresses an issue that affects lsass.exe. It leaks memory. This occurs during a Local Security Authority (Domain Policy) Remote Protocol (LSARPC) call. in 20348.2527
• security Security update: includes the May 2024 Security Updates in 20348.2461
• security This update includes quarterly changes to the Windows Kernel Vulnerable Driver Blocklist file, DriverSiPolicy.p7b. It adds to the list of drivers that are at risk for Bring Your Own Vulnerable Driver (BYOVD) attacks. in 20348.2461
• security This update addresses an issue that affects Group Policy Folder Redirection in a multi-forest deployment. The issue stops you from choosing a group account from the target domain. Because of this, you cannot apply advanced folder redirection settings to that domain. This issue occurs when the… in 20348.2461
• security Security update: includes the April 2024 Security Updates in 20348.2402
• security This update addresses a known issue that affects the Local Security Authority Subsystem Service (LSASS). It might leak memory on domain controllers (DCs). This issue occurs after you install KB5035857 (March 12, 2024). The leak occurs when on-premises and cloud-based Active Directory DCs process… in 20348.2342
• security Security update: includes the March 2024 Security Updates in 20348.2340
• security The update affects Active Directory domains that host mobile device management (MDM) providers. They can transition from “Compatibility mode” to the strong certificate mapping “Enforcement mode.” To do this, they can allow an Active Directory Key Distribution Center (KDC) to read user security… in 20348.2340
• security Security update: includes the February 2024 Security Updates in 20348.2322
• security This update addresses an issue that affects the Local Security Authority Subsystem Service (LSASS). It might stop working. This occurs when you access the Active Directory database. in 20348.2322
• security This update includes quarterly changes to the Windows Kernel Vulnerable Driver Blocklist file, DriverSiPolicy.p7b. It adds to the list of drivers that are at risk for Bring Your Own Vulnerable Driver (BYOVD) attacks. in 20348.2322
• security Security update: includes the January 2024 Security Updates in 20348.2227
• security Security update: includes the December 2023 Security Updates in 20348.2159
• security Security update: includes the November 2023 Security Updates in 20348.2113
• security This update includes quarterly changes to the Windows Kernel Vulnerable Driver Blocklist file, DriverSiPolicy.p7b. It adds to the list of drivers that are at risk for Bring Your Own Vulnerable Driver (BYOVD) attacks. in 20348.2113
• security Security update: includes the October 2023 Security Updates in 20348.2031
• security This update addresses an issue that affects Kerberos delegation. It might fail in the wrong way. The error code is 0xC000006E (STATUS_ACCOUNT_RESTRICTION). This issue might occur when you mark the intermediate service account as “This account is sensitive and cannot be delegated” in Active… in 20348.2031
• security To protect against CVE-2023-44487, you should install the latest Windows update. Based on your use case, you can also set the limit of the RST_STREAMS per minute using the new registry keys in this update. You can create the DWORD registry values in the table below under the following registry… in 20348.2031
• security Security update: includes the September 2023 Security Updates in 20348.1970
• security This update addresses an issue that affects the Local Security Authority Subsystem Service (LSASS). It stops responding. This occurs when you use Azure Virtual Desktop (AVD). in 20348.1970
• security This update addresses an issue that affects the Local Security Authority Subsystem Service (LSASS) process. It might stop responding. Because of this, the machine restarts. The error is 0xc0000005 (STATUS_ACCESS_VIOLATION). in 20348.1970
• security Security update: includes the August 2023 Security Updates in 20348.1906
• security This update addresses a deadlock in Internet Protocol Security (IPsec). When you configure servers with IPsec rules, they stop responding. This issue affects virtual and physical servers. in 20348.1906
• security This update affects the Windows Kernel Vulnerable Driver Blocklist, DriverSiPolicy.p7b. It adds drivers that are at risk for Bring Your Own Vulnerable Driver (BYOVD) attacks. in 20348.1906
• security Security update: includes the July 2023 Security Updates in 20348.1850
• security Security update: includes the June 2023 Security Updates in 20348.1787
• security This update addresses an issue that might affect the Local Security Authority Subsystem Service (LSASS). It might close sporadically. The system logs the exception 0xc0000710 in the Application Error event 1000. Because of this, the domain controller restarts unexpectedly. This issue affects… in 20348.1787
• security This update addresses an issue that affects the Windows Kernel. This issue is related to CVE-2023-32019. To learn more, see KB5028407. in 20348.1787
• security Security update: includes the May 2023 Security Updates in 20348.1726
• security This update addresses a race condition in Windows Local Administrator Password Solution (LAPS). The Local Security Authority Subsystem Service (LSASS) might stop responding. This occurs when the system processes multiple local account operations at the same time. The access violation error code is… in 20348.1726
• security Security update: includes the April 2023 Security Updates in 20348.1668
• security Security update: includes the March 2023 Security Updates in 20348.1607
• security This update addresses an issue that occurs when an access control policy denies you access to a resource. When you sign out, the system does not delete the POST Security Assertion Markup Language (SAML) Request cookie. This stops you from choosing other resources the next time you sign in. in 20348.1607
• security This update addresses an issue that affects the Local Security Authority Subsystem Service (LSASS). LSASS might stop responding. This occurs after you run Sysprep on a domain-joined machine. in 20348.1607
• security This update addresses an issue that affects a computer account and Active Directory. When you reuse an existing computer account to join an Active Directory domain, joining fails. This occurs on devices that have installed Windows updates dated October 11, 2022 or later. The error message is,… in 20348.1607
• security Security update: includes the February 2023 Security Updates in 20348.1547
• security This update addresses an issue that affects all commands that change security tags. On Windows 11, version 22H2 computers, the change will fail if you update the Network Controller but not the Remote Server Administration Tools (RSAT) clients. in 20348.1547
• security Security update: includes the January 2023 Security Updates in 20348.1487
• security Security update: includes the December 2022 Security Updates in 20348.1366
• security It addresses a known issue that might affect Windows Servers that have the Domain Controller (DC) role. They might have Kerberos authentication issues if both of the following are true: You might receive Microsoft-Windows-Kerberos-Key-Distribution-Center Event ID 14 errors. These appear in the… in 20348.1251
• security Security update: includes the November 2022 Security Updates in 20348.1249
• security It addresses security vulnerabilities in the Kerberos and Netlogon protocols as outlined in CVE-2022-38023, CVE-2022-37966, and CVE-2022-37967. For deployment guidance, see the following: in 20348.1249
• security KB5020805: How to manage the Kerberos Protocol changes related to CVE-2022-37967 in 20348.1249
• security KB5021130: How to manage Netlogon Protocol changes related to CVE-2022-38023 in 20348.1249
• security KB5021131: How to manage the Kerberos Protocol changes related to CVE-2022-37966 in 20348.1249
• security It addresses an issue that might affect some types of Secure Sockets Layer (SSL) and Transport Layer Security (TLS) connections. These connections might have handshake failures. For developers, the affected connections are likely to receive one or more records followed by a partial record with a… in 20348.1131
• security Security update: includes the October 2022 Security Updates in 20348.1129
• security Security update: includes the September 2022 Security Updates in 20348.1006
• security This update contains miscellaneous security improvements to internal OS functionality. No additional issues were documented for this release. in 20348.1006
• security Security update: includes the August 2022 Security Updates in 20348.887
• security Addresses an issue that might cause the Local Security Authority Server Service (LSASS) to leak tokens. This issue affects devices that have installed Windows updates dated June 14, 2022 or later. This issue occurs when the device performs a specific form of service for user (S4U) in a non-Trusted… in 20348.887
• security Security update: includes the July 2022 Security Updates in 20348.825
• security Security update: includes the June 2022 Security Updates in 20348.768
• security Addresses an elevation of privilege (EOP) vulnerability under CVE-2022-30154 for the Microsoft File Server Shadow Copy Agent Service. To become protected and functional, you must install the June 14, 2022 or later Windows update on both the application server and the file server. The application… in 20348.768
• security This update contains miscellaneous security improvements to internal OS functionality. No additional issues were documented for this release. in 20348.707
• security Addresses an issue that causes a Denial of Service vulnerability on Cluster Shared Volumes (CSV). For more information, see CVE-2020-26784. in 20348.643
• security Security update: includes the March 2022 Security Updates in 20348.587
• security This update contains miscellaneous security improvements to internal OS functionality. No additional issues were documented for this release. in 20348.587
• security Addresses a known issue that might cause IP Security (IPSEC) connections that contain a Vendor ID to fail. VPN connections using Layer 2 Tunneling Protocol (L2TP) or IP security Internet Key Exchange (IPSEC IKE) might also be affected. in 20348.473
• security Security update: includes the January 2022 Security Updates in 20348.469
• security Security update: includes the December 2021 Security Updates in 20348.405
• security Fixes CVE-2026-96951: Windows Shell Security Feature Bypass Vulnerability in 17763.9376
• security Fixes CVE-2026-100202: Windows Message Queuing Queue Manager Remote Code Execution Vulnerability in 17763.9376
• security Fixes CVE-2026-70147: Microsoft PostScript Printer Driver Remote Code Execution Vulnerability in 17763.9376
• security Fixes CVE-2026-70153: Microsoft PostScript Printer Driver Remote Code Execution Vulnerability in 17763.9376
• security Fixes CVE-2026-96934: Windows DHCP Server Remote Code Execution Vulnerability in 17763.9376
• security Fixes CVE-2026-97814: Windows Text Shaping Remote Code Execution Vulnerability in 17763.9376
• security Fixes CVE-2026-100220: Windows Media Video Decoder Remote Code Execution Vulnerability in 17763.9376
• security Fixes CVE-2026-102214: Windows Hyper-V Remote Code Execution Vulnerability in 17763.9376
• security Fixes CVE-2026-102225: Windows Text Shaping Remote Code Execution Vulnerability in 17763.9376
• security Fixes CVE-2026-108467: Microsoft PostScript Printer Driver Remote Code Execution Vulnerability in 17763.9376
• security Fixes CVE-2026-108471: Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability in 17763.9376
• security Fixes CVE-2026-70250: Windows DHCP Client Remote Code Execution Vulnerability in 17763.9376
• security Fixes CVE-2026-83934: Windows GDI+ Remote Code Execution Vulnerability in 17763.9376
• security Fixes CVE-2026-96913: Windows Kernel Elevation of Privilege Vulnerability in 17763.9376
• security Fixes CVE-2026-96914: Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability in 17763.9376
• security Fixes CVE-2026-96952: Microsoft Windows Media Foundation Remote Code Execution Vulnerability in 17763.9376
• security Fixes CVE-2026-108460: Windows Message Queuing Remote Code Execution Vulnerability in 17763.9376
• security Fixes CVE-2026-69802: Network Device Enrollment Service (NDES) Remote Code Execution Vulnerability in 17763.9376
• security Fixes CVE-2026-70187: Windows Remote Desktop Services Remote Code Execution Vulnerability in 17763.9376
• security Fixes CVE-2026-70229: Windows Active Directory Domain Services Remote Code Execution Vulnerability in 17763.9376
• security Fixes CVE-2026-88117: Windows DHCP Server Remote Code Execution Vulnerability in 17763.9376
• security Fixes CVE-2026-88119: Windows DHCP Server Remote Code Execution Vulnerability in 17763.9376
• security Fixes CVE-2026-88120: Windows DHCP Server Remote Code Execution Vulnerability in 17763.9376
• security Fixes CVE-2026-88171: Windows DHCP Server Remote Code Execution Vulnerability in 17763.9376
• security Fixes CVE-2026-88174: Windows Deployment Services Remote Code Execution Vulnerability in 17763.9376
• security Fixes CVE-2026-100215: Microsoft Graphics Component Remote Code Execution Vulnerability in 17763.9376
• security Fixes CVE-2026-108131: Active Directory Federation Services (AD FS) Spoofing Vulnerability in 17763.9376
• security Fixes CVE-2026-96222: Active Directory Federation Services (AD FS) Spoofing Vulnerability in 17763.9376
• security Fixes CVE-2026-108399: Windows Hyper-V Elevation of Privilege Vulnerability in 17763.9376
• security Fixes CVE-2026-102211: Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability in 17763.9376
• security Fixes CVE-2026-83917: Windows ALPC Elevation of Privilege Vulnerability in 17763.9376
• security Security update: includes the October 2026 Security Updates in 17763.9376
• security [ReFS security] This update adds auditing and optional policy controls for ReFS volumes on externally attached storage devices. Auditing is enabled by default, while enforcement controls remain disabled by default to give administrators time to evaluate and prepare for future security hardening… in 17763.9376
• security [Distributed Key Manager (DKM)] This update automatically remediates insecure DKM container ACL configurations in AD FS by default. Administrators can opt out of automatic remediation by setting RemediateDkmAcl to 0. This change helps address an elevation of privilege vulnerability that can occur… in 17763.9376
• security Security update: includes the September 2026 Security Updates in 17763.9247
• security [Remote Desktop Services (known issue)] Fixed: This update addresses an issue affecting Remote Desktop Services (RDS) after installing the September 2026 Windows security update (KB5122876). In affected environments, RDS might become unstable, causing RDP connection and sign-in failures or servers… in 17763.9247
• security Fixes CVE-2026-85880: Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability in 17763.9245
• security Fixes CVE-2026-69579: Windows Message Queuing Remote Code Execution Vulnerability in 17763.9245
• security Fixes CVE-2026-69590: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability in 17763.9245
• security Fixes CVE-2026-69595: Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability in 17763.9245
• security Fixes CVE-2026-69730: Windows DNS Server Remote Code Execution Vulnerability in 17763.9245
• security Fixes CVE-2026-69769: Windows HTTP Print Provider Remote Code Execution Vulnerability in 17763.9245
• security Fixes CVE-2026-69829: Windows Shell Remote Code Execution Vulnerability in 17763.9245
• security Fixes CVE-2026-69845: Windows DHCP Server Remote Code Execution Vulnerability in 17763.9245
• security Fixes CVE-2026-70296: Windows Imaging Component Remote Code Execution Vulnerability in 17763.9245
• security Fixes CVE-2026-72979: Windows DHCP Server Remote Code Execution Vulnerability in 17763.9245
• security Fixes CVE-2026-72982: Windows Netlogon Remote Code Execution Vulnerability in 17763.9245
• security Fixes CVE-2026-72983: Internet Connection Sharing (ICS) Remote Code Execution Vulnerability in 17763.9245
• security Fixes CVE-2026-73009: Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability in 17763.9245
• security Fixes CVE-2026-73010: Microsoft Failover Cluster Remote Code Execution Vulnerability in 17763.9245
• security Fixes CVE-2026-77493: Windows Graphics Component Remote Code Execution Vulnerability in 17763.9245
• security Fixes CVE-2026-78445: Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability in 17763.9245
• security Fixes CVE-2026-69499: Windows Imaging Component Remote Code Execution Vulnerability in 17763.9245
• security Fixes CVE-2026-69518: Windows Remote Desktop Remote Code Execution Vulnerability in 17763.9245
• security Fixes CVE-2026-69601: Microsoft Windows Media Foundation Remote Code Execution Vulnerability in 17763.9245
• security Fixes CVE-2026-69603: Windows Hyper-V Remote Code Execution Vulnerability in 17763.9245
• security Fixes CVE-2026-69676: Windows Kerberos Remote Code Execution Vulnerability in 17763.9245
• security Fixes CVE-2026-69712: Windows Key Distribution Center Remote Code Execution Vulnerability in 17763.9245
• security Fixes CVE-2026-69860: Windows Imaging Component Remote Code Execution Vulnerability in 17763.9245
• security Fixes CVE-2026-70203: Windows Media Player Remote Code Execution Vulnerability in 17763.9245
• security Fixes CVE-2026-70586: Windows Paint Remote Code Execution Vulnerability in 17763.9245
• security Fixes CVE-2026-72950: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability in 17763.9245
• security Fixes CVE-2026-72959: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability in 17763.9245
• security Fixes CVE-2026-72960: Windows Media Player Remote Code Execution Vulnerability in 17763.9245
• security Fixes CVE-2026-72986: Graphic Fonts Remote Code Execution Vulnerability in 17763.9245
• security Fixes CVE-2026-73006: DirectWrite Remote Code Execution Vulnerability in 17763.9245
• security Fixes CVE-2026-73013: Windows Imaging Component Remote Code Execution Vulnerability in 17763.9245
• security Fixes CVE-2026-73018: Graphic Fonts Remote Code Execution Vulnerability in 17763.9245
• security Fixes CVE-2026-73023: Windows Imaging Component Remote Code Execution Vulnerability in 17763.9245
• security Fixes CVE-2026-77495: Windows Imaging Component Remote Code Execution Vulnerability in 17763.9245
• security Fixes CVE-2026-77504: Microsoft Office Word Remote Code Execution Vulnerability in 17763.9245
• security Fixes CVE-2026-81955: Windows Graphics Component Remote Code Execution Vulnerability in 17763.9245
• security Fixes CVE-2026-69846: Windows Secure Kernel Mode Elevation of Privilege Vulnerability in 17763.9245
• security Fixes CVE-2026-69874: Windows ALPC Elevation of Privilege Vulnerability in 17763.9245
• security Fixes CVE-2026-69906: Windows Secure Kernel Mode Elevation of Privilege Vulnerability in 17763.9245
• security Fixes CVE-2026-72961: Windows Hyper-V Elevation of Privilege Vulnerability in 17763.9245
• security Fixes CVE-2026-72962: Windows USB Video Driver Elevation of Privilege Vulnerability in 17763.9245
• security Fixes CVE-2026-81354: Windows Hello Elevation of Privilege Vulnerability in 17763.9245
• security Fixes CVE-2026-69530: Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability in 17763.9245
• security Fixes CVE-2026-69813: Windows DNS Server Remote Code Execution Vulnerability in 17763.9245
• security Fixes CVE-2026-69827: Windows DNS Server Remote Code Execution Vulnerability in 17763.9245
• security Fixes CVE-2026-72981: IP Helper Remote Code Execution Vulnerability in 17763.9245
• security Fixes CVE-2026-72987: Windows DNS Remote Code Execution Vulnerability in 17763.9245
• security Fixes CVE-2026-77505: Windows DNS Server Remote Code Execution Vulnerability in 17763.9245
• security Fixes CVE-2026-78444: Microsoft Failover Cluster Remote Code Execution Vulnerability in 17763.9245
• security Fixes CVE-2026-78449: Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability in 17763.9245
• security Fixes CVE-2026-78450: Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability in 17763.9245
• security Fixes CVE-2026-72957: Windows Deployment Services Remote Code Execution Vulnerability in 17763.9245
• security Fixes CVE-2026-69789: Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability in 17763.9245
• security Fixes CVE-2026-69852: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability in 17763.9245
• security Fixes CVE-2026-69890: Windows Virtual Trusted Platform Module Elevation of Privilege Vulnerability in 17763.9245
• security Fixes CVE-2026-72954: Windows Deployment Services Remote Code Execution Vulnerability in 17763.9245
• security Fixes CVE-2026-73017: Graphics Kernel Remote Code Execution Vulnerability in 17763.9245
• security Fixes CVE-2026-81355: Virtual Hard Disk (VHD) Miniport Driver Remote Code Execution Vulnerability in 17763.9245
• security Fixes CVE-2026-70585: Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability in 17763.9245
• security Fixes CVE-2026-72980: Windows Hello Security Feature Bypass Vulnerability in 17763.9245
• security Security update: includes the September 2026 Security Updates in 17763.9245
• security Fixes CVE-2026-68820: Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability in 17763.9121
• security Fixes CVE-2026-62878: Windows DNS Server Remote Code Execution Vulnerability in 17763.9121
• security Fixes CVE-2026-62893: Windows Deployment Services TFTP Server Remote Code Execution Vulnerability in 17763.9121
• security Fixes CVE-2026-65791: Windows iSCSI Target Service Remote Code Execution Vulnerability in 17763.9121
• security Fixes CVE-2026-62816: Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability in 17763.9121
• security Fixes CVE-2026-62817: Windows DNS Server Remote Code Execution Vulnerability in 17763.9121
• security Fixes CVE-2026-62818: Windows Active Directory Certificate Services (AD CS) Remote Code Execution Vulnerability in 17763.9121
• security Fixes CVE-2026-62822: Windows GDI+ Remote Code Execution Vulnerability in 17763.9121
• security Fixes CVE-2026-62823: Windows DHCP Server Remote Code Execution Vulnerability in 17763.9121
• security Fixes CVE-2026-62819: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability in 17763.9121
• security Fixes CVE-2026-62820: Windows DNS Server Remote Code Execution Vulnerability in 17763.9121
• security Fixes CVE-2026-62889: Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability in 17763.9121
• security Fixes CVE-2026-65679: Windows iSCSI Target Service Remote Code Execution Vulnerability in 17763.9121
• security Fixes CVE-2026-65789: Windows DNS Server Remote Code Execution Vulnerability in 17763.9121
• security Fixes CVE-2026-65796: Windows iSCSI Target Service Remote Code Execution Vulnerability in 17763.9121
• security Fixes CVE-2026-66802: Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability in 17763.9121
• security Fixes CVE-2026-71331: Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability in 17763.9121
• security Fixes CVE-2026-62890: Windows GDI+ Elevation of Privilege Vulnerability in 17763.9121
• security Fixes CVE-2026-66799: Windows Key Guard Elevation of Privilege Vulnerability in 17763.9121
• security Security update: includes the August 2026 Security Updates in 17763.9121
• security Fixes CVE-2026-56155: Active Directory Federation Services Elevation of Privilege Vulnerability in 17763.9020
• security Fixes CVE-2026-57092: Microsoft Windows VMSwitch Elevation of Privilege Vulnerability in 17763.9020
• security Fixes CVE-2026-50518: Windows DHCP Server Remote Code Execution Vulnerability in 17763.9020
• security Fixes CVE-2026-56159: DHCP Server Service Remote Code Execution Vulnerability in 17763.9020
• security Fixes CVE-2026-56188: Windows Server Network driver Remote Code Execution Vulnerability in 17763.9020
• security Fixes CVE-2026-50380: Windows GDI+ Remote Code Execution Vulnerability in 17763.9020
• security Fixes CVE-2026-48564: DHCP Server Service Remote Code Execution Vulnerability in 17763.9020
• security Fixes CVE-2026-50370: DHCP Server Service Remote Code Execution Vulnerability in 17763.9020
• security Fixes CVE-2026-50382: DirectX Graphics Kernel Remote Code Execution Vulnerability in 17763.9020
• security Fixes CVE-2026-50444: Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability in 17763.9020
• security Fixes CVE-2026-50474: Remote Desktop Client Remote Code Execution Vulnerability in 17763.9020
• security Fixes CVE-2026-54121: Active Directory Certificate Services Elevation of Privilege Vulnerability in 17763.9020
• security Fixes CVE-2026-54982: Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability in 17763.9020
• security Fixes CVE-2026-54999: Windows TCP/IP Remote Code Execution Vulnerability in 17763.9020
• security Fixes CVE-2026-57087: Microsoft Windows Media Foundation Remote Code Execution Vulnerability in 17763.9020
• security Fixes CVE-2026-57090: Microsoft Windows Media Foundation Remote Code Execution Vulnerability in 17763.9020
• security Fixes CVE-2026-57094: Microsoft Windows Media Foundation Remote Code Execution Vulnerability in 17763.9020
• security Fixes CVE-2026-58608: Windows Print Spooler Remote Code Execution Vulnerability in 17763.9020
• security Fixes CVE-2026-54128: Windows DHCP Client Remote Code Execution Vulnerability in 17763.9020
• security Fixes CVE-2026-54992: Microsoft Message Queuing Queue Manager Remote Code Execution Vulnerability in 17763.9020
• security Fixes CVE-2026-50680: Windows Hyper-V Elevation of Privilege Vulnerability in 17763.9020
• security Fixes CVE-2026-49164: Windows Active Directory Domain Services Remote Code Execution Vulnerability in 17763.9020
• security Fixes CVE-2026-50694: Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability in 17763.9020
• security Fixes CVE-2026-54995: Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability in 17763.9020
• security Fixes CVE-2026-42982: Windows Secure Kernel Mode Elevation of Privilege Vulnerability in 17763.9020
• security Fixes CVE-2026-49796: Windows GDI+ Remote Code Execution Vulnerability in 17763.9020
• security Fixes CVE-2026-50655: Microsoft Windows Media Foundation Remote Code Execution Vulnerability in 17763.9020
• security Fixes CVE-2026-56189: Microsoft Windows Media Foundation Remote Code Execution Vulnerability in 17763.9020
• security Fixes CVE-2026-44815: DHCP Client Service Remote Code Execution Vulnerability in 17763.8880
• security Fixes CVE-2026-47291: HTTP.sys Remote Code Execution Vulnerability in 17763.8880
• security Fixes CVE-2026-42985: Remote Desktop Client Remote Code Execution Vulnerability in 17763.8880
• security Fixes CVE-2026-47289: Remote Desktop Client Remote Code Execution Vulnerability in 17763.8880
• security Fixes CVE-2026-45607: Windows Hyper-V Remote Code Execution Vulnerability in 17763.8880
• security Fixes CVE-2026-42987: Windows Deployment Services (WDS) Remote Code Execution in 17763.8880
• security Fixes CVE-2026-33828: Windows Device Health Attestation (DHA) Elevation of Privilege Vulnerability in 17763.8880
• security Fixes CVE-2026-44803: Windows Graphics Component Remote Code Execution Vulnerability in 17763.8880
• security Fixes CVE-2026-44812: Windows Graphics Component Remote Code Execution Vulnerability in 17763.8880
• security Fixes CVE-2026-48574: Windows Media Remote Code Execution Vulnerability in 17763.8880
• security Fixes CVE-2026-42992: Remote Desktop Client Remote Code Execution Vulnerability in 17763.8880
• security Fixes CVE-2026-44799: Remote Desktop Client Remote Code Execution Vulnerability in 17763.8880
• security Fixes CVE-2026-44801: Remote Desktop Client Remote Code Execution Vulnerability in 17763.8880
• security Fixes CVE-2026-47654: Remote Desktop Client Remote Code Execution Vulnerability in 17763.8880
• security Fixes CVE-2026-48563: Remote Desktop Client Remote Code Execution Vulnerability in 17763.8880
• security Fixes CVE-2026-47288: Windows Kerberos Key Distribution Center (KDC) Remote Code Execution in 17763.8880
• security Fixes CVE-2026-41089: Windows Netlogon Remote Code Execution Vulnerability in 17763.8755
• security Fixes CVE-2026-40403: Windows Graphics Component Remote Code Execution Vulnerability in 17763.8755
• security Fixes CVE-2026-35421: Windows GDI Remote Code Execution Vulnerability in 17763.8755
• security Fixes CVE-2026-32161: Windows Native WiFi Miniport Driver Remote Code Execution Vulnerability in 17763.8755
• security Security update: includes the April 2026 Security Updates in 17763.8647
• security [Domain controllers (known issue)] Fixed: After installing the April 14, 2026, (KB5082123) Windows security update and restarting, domain controllers with multi-domain forests that use Privileged Access Management (PAM), might experience startup issues. In some cases, Local Security Authority… in 17763.8647
• security Security update: includes the April 2026 Security Updates in 17763.8644
• security [Remote Desktop] This update improves protection against phishing attacks that use Remote Desktop (.rdp) files. When you open an .rdp file, Remote Desktop shows all requested connection settings before it connects, with each setting turned off by default. A one-time security warning also appears… in 17763.8644
• security [Vulnerable driver blocklist] This update introduces a security hardening change that adds known vulnerable kernel drivers to the Microsoft vulnerable driver blocklist. Backup applications that rely on blocked drivers might experience failures when attempting to mount or manage disk images. These… in 17763.8644
• security [Windows Deployment Services (WDS)] This update disables the “Hands-Free Deployment” feature in WDS by default and is no longer a supported feature. For more information about this change, see Windows Deployment Services (WDS) Hands-Free Deployment Hardening Guidance related to CVE-2026-0386. in 17763.8644
• security [Kerberos protocol] This update changes the default DefaultDomainSupportedEncTypes value for Kerberos Key Distribution Center (KDC) operations to leverage AES-SHA1 for accounts that do not have an explicit msds-SupportedEncryptionTypes Active Directory attribute defined. For more information see,… in 17763.8644
• security This update enables dynamic status reporting for Secure Boot states in the Windows Security App (Settings > Update & Security > Windows Security). Learn more about the status alerts via badges and notifications. Note that these enhancements are disabled by default on commercial devices and servers. in 17763.8644
• security Security update: includes the March 2026 Security Updates in 17763.8511
• security Security update: includes the February 2026 Security Updates in 17763.8389
• security [OS Security (known issue)] Fixed: After installing the Windows security update released on or after January 13, 2026, some Secure Launch-capable PCs with Virtual Secure Mode (VSM) enabled are unable to shut down or enter hibernation. Instead, the device restarts. in 17763.8389
• security Security update: includes the January 2026 Security Updates in 17763.8281
• security Security update: includes the January 2026 Security Updates in 17763.8280
• security Security update: includes the January 2026 Security Updates in 17763.8276
• security [Credentials autofill] This update introduces a security hardening behavior restricting certain applications to autofill credentials during remote support sessions or automated authentication workflows. With this change, credential dialogs do not respond to virtual keyboard input from remote… in 17763.8276
• security [WinSqlite3.dll] Fixed: The Windows core component, WinSqlite3.dll, has been updated. Previously, some security software might have detected this component as vulnerable. Note WinSqlite3.dll is a separate component from sqlite3.dll, which is found in application-specific directories and is not a… in 17763.8276
• security Security update: includes the December 2025 Security Updates in 17763.8148
• security Security update: includes the December 2025 Security Updates in 17763.8146
• security [PowerShell 5.1] The Invoke-WebRequest command now includes a confirmation prompt with a security warning of a script execution risk. You can choose to continue or cancel the request. For additional details, see CVE-2025-54100 and KB5074596: PowerShell 5.1: Preventing script execution from web… in 17763.8146
• security Security update: includes the November 2025 Security Updates in 17763.8027
• security [App compatibility (known issue)] Fixed: This update addresses an issue that created unexpected User Account Control (UAC) prompts for some apps, including Autodesk AutoCAD. For more information, see Unexpected UAC prompts when running MSI repair operations after installing the August 2025 Windows… in 17763.8027
• security [Internal Windows OS] This update contains miscellaneous security improvements to internal Windows OS functionality. No specific issues are documented for this release. in 17763.8027
• security Security update: includes the October 2025 Security Updates in 17763.7922
• security [Windows Server Update Services (WSUS)] Fixed: This update addresses a remote code execution (RCE) vulnerability that was identified in WSUS reporting web services. For more information about the security fix, see CVE-2025-59287. in 17763.7922
• security Security update: includes the October 2025 Security Updates in 17763.7919
• security This update enforces a security hardening improvement by requiring use of Key Storage Provider (KSP) instead of Cryptographic Service Provider {CSP) for RSA-based smart card certificates. If you experience problems with smart card authentication as a result of this design change, see the Windows… in 17763.7919
• security After installing this update, File Explorer automatically disables the preview feature for files downloaded from the internet. This change is designed to enhance security by preventing a vulnerability when users preview potentially unsafe files. For details, including steps to unblock files, see… in 17763.7919
• security Fixed: This update addresses an issue observed in rare cases after installing the May 2025 security update and subsequent updates causing devices to experience stability issues. Some devices became unresponsive and stopped responding in specific scenarios. in 17763.7919
• security Security update: includes the September 2025 Security Updates in 17763.7792
• security [App compatibility (known issue)] Fixed: Addresses an issue that caused non-admin users to receive unexpected User Account Control (UAC) prompts when MSI installers perform certain custom actions. These actions might include configuration or repair operations in the foreground or background,… in 17763.7792
• security [File Server] New! This update enables auditing SMB client compatibility for SMB Server signing as well as SMB Server EPA. This allows customers to assess their environment and identify any potential device or software incompatibility issues before deploying the hardening measures that are already… in 17763.7792
• security Security update: includes the August 2025 Security Updates in 17763.7683
• security [Fix for reset and recovery issue] This update addresses an issue introduced by the August 2025 security update (KB5063877) in which attempts to reset and recover the device fails. This issue happens when users perform one or more of the following processes: For more information on this issue, see… in 17763.7683
• security Security update: includes the August 2025 Security Updates in 17763.7678
• security Security update: includes the July 2025 Security Updates in 17763.7558
• security [Network Security and Containers] Fixed: An issue in the CharNextW function which caused incorrect character rendering for GB18030-2022 compliance. The function has been deprecated and replaced with a modern ICU-based solution to ensure proper handling of GB18030-2022 requirements. in 17763.7558
• security [Microsoft RPC Netlogon protocol] This update includes a security hardening change to the Microsoft RPC Netlogon protocol. This change improves security by tightening access checks for a set of remote procedure call (RPC) requests. After this update is installed, Active Directory domain… in 17763.7558
• security Security update: includes the June 2025 Security Updates in 17763.7434
• security Security update: includes the May 2025 Security Updates in 17763.7322
• security Security update: includes the May 2025 Security Updates in 17763.7314
• security [OS Security] Updates to the Windows Kernel Vulnerable Driver Blocklist (DriverSiPolicy.p7b). Additions have been made to blocklist drivers with security vulnerabilities that have been used in Bring Your Own Vulnerable Driver (BYOVD) attacks. in 17763.7314
• security It addresses a known issue where Audit Logon/Logoff events in the local policy of the Active Directory Group Policy might not show as enabled on the device even if they are enabled and working as expected. This can be observed in the Local Group Policy Editor or Local Security Policy, where local… in 17763.7240
• security Security update: includes the April 2025 Security Updates in 17763.7136
• security This update addresses security issues for your Windows operating system. in 17763.7136
• security [OS Security] After installing this update or a later Windows update, a new %systemdrive%\inetpub folder will be created on your device. This folder should not be deleted regardless of whether Internet Information Services (IIS) is enabled on the target device. This behavior is part of changes… in 17763.7136
• security [Kerberos Authentication] Change of behavior: Adds protections for a vulnerability which occurs when a certificate authority is part of the Windows root store but not the NTAuth store. This change enabled by default might cause Event ID: 45 events to be logged on the domain controller. For more… in 17763.7136
• security [Windows Hello] After installing this update or a later Windows update, for enhanced security, Windows Hello facial recognition requires color cameras to see a visible face when signing in. For more information, see CVE-2025-26644. in 17763.7136
• security Security update: includes the March 2025 Security Updates in 17763.7009
• security This update addresses security issues for your Windows operating system. in 17763.7009
• security Security update: includes the February 2025 Security Updates in 17763.6893
• security [USB cameras] Fixed: Your device does not recognize the camera is on. This issue occurs after you install the January 2025 security update. in 17763.6893
• security Security update: includes the January 2025 Security Updates in 17763.6775
• security This update addresses security issues for your Windows operating system. in 17763.6775
• security Security update: includes the December 2024 Security Updates in 17763.6659
• security This update addresses security issues for your Windows operating system. in 17763.6659
• security Security update: includes the November 2024 Security Updates in 17763.6532
• security This update addresses security issues for your Windows operating system. in 17763.6532
• security Security update: includes the October 2024 Security Updates in 17763.6414
• security This update addresses security issues for your Windows operating system. in 17763.6414
• security Security update: includes the September 2024 Security Updates in 17763.6293
• security This update addresses security issues for your Windows operating system. in 17763.6293
• security Security update: includes the August 2024 Security Updates in 17763.6189
• security This update addresses security issues for your Windows operating system. in 17763.6189
• security Security update: includes the July 2024 Security Updates in 17763.6054
• security Security update: includes the June 2024 Security Updates in 17763.5936
• security This update addresses security issues for your Windows operating system. in 17763.5936
• security Security update: includes the May 2024 Security Updates in 17763.5820
• security Security update: includes the April 2024 Security Updates in 17763.5696
• security This update addresses a known issue that affects the Local Security Authority Subsystem Service (LSASS). in 17763.5579
• security Security update: includes the March 2024 Security Updates in 17763.5576
• security Security update: includes the February 2024 Security Updates in 17763.5458
• security This update addresses security issues for your Windows operating system. in 17763.5458
• security Security update: includes the January 2024 Security Updates in 17763.5329
• security This update addresses security issues for your Windows operating system. in 17763.5329
• security Security update: includes the December 2023 Security Updates in 17763.5206
• security This update addresses security issues for your Windows operating system. in 17763.5206
• security Security update: includes the November 2023 Security Updates in 17763.5122
• security This update addresses security issues for your Windows operating system. in 17763.5122
• security Security update: includes the October 2023 Security Updates in 17763.4974
• security This update addresses security issues for your Windows operating system. in 17763.4974
• security Security update: includes the September 2023 Security Updates in 17763.4851
• security This update addresses security issues for your Windows operating system. in 17763.4851
• security Security update: includes the August 2023 Security Updates in 17763.4737
• security This update addresses security issues for your Windows operating system. in 17763.4737
• security Security update: includes the July 2023 Security Updates in 17763.4645
• security Security update: includes the June 2023 Security Updates in 17763.4499
• security This update addresses security issues for your Windows operating system. in 17763.4499
• security Security update: includes the May 2023 Security Updates in 17763.4377
• security This update addresses security issues for your Windows operating system. in 17763.4377
• security Security update: includes the April 2023 Security Updates in 17763.4252
• security This update addresses security issues for your Windows operating system. in 17763.4252
• security Security update: includes the March 2023 Security Updates in 17763.4131
• security This update addresses security issues for your Windows operating system. in 17763.4131
• security Security update: includes the February 2023 Security Updates in 17763.4010
• security This update addresses security issues for your Windows operating system. in 17763.4010
• security Security update: includes the January 2023 Security Updates in 17763.3887
• security This update addresses security issues for your Windows operating system. in 17763.3887
• security Security update: includes the December 2022 Security Updates in 17763.3770
• security This update addresses security issues for your Windows operating system. in 17763.3770
• security Security update: includes the November 2022 Security Updates in 17763.3650
• security It addresses security issues for your Windows operating system. in 17763.3650
• security It addresses an issue that might affect some types of Secure Sockets Layer (SSL) and Transport Layer Security (TLS) connections. These connections might have handshake failures. For developers, the affected connections are likely to receive one or more records followed by a partial record with a… in 17763.3534
• security Security update: includes the October 2022 Security Updates in 17763.3532
• security It addresses security issues for your Windows operating system. in 17763.3532
• security Security update: includes the September 2022 Security Updates in 17763.3406
• security Addresses security issues for your Windows operating system. in 17763.3406
• security Security update: includes the August 2022 Security Updates in 17763.3287
• security Addresses security issues for your Windows operating system. in 17763.3287
• security Security update: includes the July 2022 Security Updates in 17763.3165
• security Addresses security issues for your Windows operating system. in 17763.3165
• security Security update: includes the June 2022 Security Updates in 17763.3046
• security Addresses security issues for your Windows operating system. in 17763.3046
• security Security update: includes the May 2022 Security Updates in 17763.2928
• security Addresses security issues for your Windows operating system. in 17763.2928
• security Security update: includes the April 2022 Security Updates in 17763.2803
• security Updates security for your Windows operating system. in 17763.2803
• security Security update: includes the March 2022 Security Updates in 17763.2686
• security Updates security for your Windows operating system. in 17763.2686
• security Security update: includes the February 2022 Security Updates in 17763.2565
• security Updates security for your Windows operating system. in 17763.2565
• security Security update: includes the January 2022 Security Updates in 17763.2452
• security Updates security for your Windows operating system. in 17763.2452

Deprecations

• deprecated [Emoji Panel] The emoji panel (Windows key + period (.)) now supports GIPHY following the deprecation of Google's Tenor API. in 26100.33296
• deprecated [PowerShell 2.0] Starting in August 2025, Windows 11, version 24H2, will no longer include Windows PowerShell 2.0. This legacy component was introduced in Windows 7 and officially deprecated in 2017. Most users won’t be affected, as newer versions such as PowerShell 5.1 and PowerShell 7.x remain… in 26100.7462
• deprecated [PowerShell 2.0] Starting in September 2025, Windows Server 2025, will no longer include Windows PowerShell 2.0. This legacy component was introduced in Windows 7 and officially deprecated in 2017. Most users won’t be affected, as newer versions such as PowerShell 5.1 and PowerShell 7.x remain… in 26100.6584
• deprecated [Line Printer Daemon (LPD) protocol] Using this deprecated protocol to print might not work as you expect or fail. This issue occurs after you install the July 9, 2024, and later updates. Note When it is no longer available, clients, like UNIX, that use it will not connect to a server to print.… in 20348.2655
• deprecated [People app] After installing this update, the People icon on the taskbar will no longer respond. This feature is being deprecated in Windows Server 2019 and Windows 10, version 1809. in 17763.8146

Every release in between