Windows Server 20348.3695 → 20348.5631

22 releases · 0 breaking changes · 163 security fixes · 137 advisories fixed

163security0breaking0deprecated7feature23fix

Is 20348.3695 affected? · What changed up to 26100.33650

Vulnerabilities fixed by this upgrade

7.5 CVE-2026-69789 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
8.8 CVE-2026-69499 Windows Imaging Component Remote Code Execution Vulnerability
7.0 CVE-2026-69501 Windows Secure Kernel Mode Elevation of Privilege Vulnerability
8.8 CVE-2026-69518 Windows Remote Desktop Remote Code Execution Vulnerability
8.1 CVE-2026-69530 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
9.8 CVE-2026-69579 Windows Message Queuing Remote Code Execution Vulnerability
9.8 CVE-2026-69590 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
9.8 CVE-2026-69595 Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability
8.8 CVE-2026-69601 Microsoft Windows Media Foundation Remote Code Execution Vulnerability
8.8 CVE-2026-69603 Windows Hyper-V Remote Code Execution Vulnerability
8.8 CVE-2026-69676 Windows Kerberos Remote Code Execution Vulnerability
8.8 CVE-2026-69712 Windows Key Distribution Center Remote Code Execution Vulnerability
9.8 CVE-2026-69730 Windows DNS Server Remote Code Execution Vulnerability
9.8 CVE-2026-69769 Windows HTTP Print Provider Remote Code Execution Vulnerability
8.1 CVE-2026-69813 Windows DNS Server Remote Code Execution Vulnerability
8.1 CVE-2026-69827 Windows DNS Server Remote Code Execution Vulnerability
9.8 CVE-2026-69829 Windows Shell Remote Code Execution Vulnerability
9.8 CVE-2026-69845 Windows DHCP Server Remote Code Execution Vulnerability
8.2 CVE-2026-69846 Windows Secure Kernel Mode Elevation of Privilege Vulnerability
7.5 CVE-2026-69852 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
8.1 CVE-2026-69858 Windows DNS Server Remote Code Execution Vulnerability
8.8 CVE-2026-69860 Windows Imaging Component Remote Code Execution Vulnerability
8.2 CVE-2026-69874 Windows ALPC Elevation of Privilege Vulnerability
7.5 CVE-2026-69890 Windows Virtual Trusted Platform Module Elevation of Privilege Vulnerability
8.2 CVE-2026-69906 Windows Secure Kernel Mode Elevation of Privilege Vulnerability
8.8 CVE-2026-70203 Windows Media Player Remote Code Execution Vulnerability
9.8 CVE-2026-70296 Windows Imaging Component Remote Code Execution Vulnerability
7.0 CVE-2026-70585 Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability
8.8 CVE-2026-70586 Windows Paint Remote Code Execution Vulnerability
8.8 CVE-2026-72950 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
7.5 CVE-2026-72954 Windows Deployment Services Remote Code Execution Vulnerability
7.8 CVE-2026-72957 Windows Deployment Services Remote Code Execution Vulnerability
8.8 CVE-2026-72959 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
8.8 CVE-2026-72960 Windows Media Player Remote Code Execution Vulnerability
8.2 CVE-2026-72961 Windows Hyper-V Elevation of Privilege Vulnerability
8.2 CVE-2026-72962 Windows USB Video Driver Elevation of Privilege Vulnerability
9.8 CVE-2026-72979 Windows DHCP Server Remote Code Execution Vulnerability
4.4 CVE-2026-72980 Windows Hello Security Feature Bypass Vulnerability
8.1 CVE-2026-72981 IP Helper Remote Code Execution Vulnerability
9.8 CVE-2026-72982 Windows Netlogon Remote Code Execution Vulnerability
9.8 CVE-2026-72983 Internet Connection Sharing (ICS) Remote Code Execution Vulnerability
8.8 CVE-2026-72986 Graphic Fonts Remote Code Execution Vulnerability
8.1 CVE-2026-72987 Windows DNS Remote Code Execution Vulnerability
8.8 CVE-2026-73006 DirectWrite Remote Code Execution Vulnerability
9.8 CVE-2026-73009 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
9.8 CVE-2026-73010 Microsoft Failover Cluster Remote Code Execution Vulnerability
8.8 CVE-2026-73013 Windows Imaging Component Remote Code Execution Vulnerability
7.5 CVE-2026-73017 Graphics Kernel Remote Code Execution Vulnerability
8.8 CVE-2026-73018 Graphic Fonts Remote Code Execution Vulnerability
8.8 CVE-2026-73023 Windows Imaging Component Remote Code Execution Vulnerability
9.8 CVE-2026-77493 Windows Graphics Component Remote Code Execution Vulnerability
8.8 CVE-2026-77495 Windows Imaging Component Remote Code Execution Vulnerability
8.8 CVE-2026-77504 Microsoft Office Word Remote Code Execution Vulnerability
8.1 CVE-2026-77505 Windows DNS Server Remote Code Execution Vulnerability
8.1 CVE-2026-78444 Microsoft Failover Cluster Remote Code Execution Vulnerability
9.8 CVE-2026-78445 Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability
8.1 CVE-2026-78449 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
8.1 CVE-2026-78450 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
8.8 CVE-2026-80083 Windows Hyper-V Remote Code Execution Vulnerability
7.5 CVE-2026-81355 Virtual Hard Disk (VHD) Miniport Driver Remote Code Execution Vulnerability
8.8 CVE-2026-81955 Windows Graphics Component Remote Code Execution Vulnerability
7.8 CVE-2026-85880KEV Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
9.8 CVE-2026-62815 Microsoft QUIC Remote Code Execution Vulnerability
8.8 CVE-2026-62816 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
8.8 CVE-2026-62817 Windows DNS Server Remote Code Execution Vulnerability
8.8 CVE-2026-62818 Windows Active Directory Certificate Services (AD CS) Remote Code Execution Vulnerability
8.1 CVE-2026-62819 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
8.1 CVE-2026-62820 Windows DNS Server Remote Code Execution Vulnerability
8.8 CVE-2026-62822 Windows GDI+ Remote Code Execution Vulnerability
8.8 CVE-2026-62823 Windows DHCP Server Remote Code Execution Vulnerability
9.8 CVE-2026-62878 Windows DNS Server Remote Code Execution Vulnerability
8.1 CVE-2026-62889 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
7.8 CVE-2026-62890 Windows GDI+ Elevation of Privilege Vulnerability
9.8 CVE-2026-62893 Windows Deployment Services TFTP Server Remote Code Execution Vulnerability
8.1 CVE-2026-65679 Windows iSCSI Target Service Remote Code Execution Vulnerability
8.1 CVE-2026-65789 Windows DNS Server Remote Code Execution Vulnerability
9.8 CVE-2026-65791 Windows iSCSI Target Service Remote Code Execution Vulnerability
8.1 CVE-2026-65796 Windows iSCSI Target Service Remote Code Execution Vulnerability
7.8 CVE-2026-66799 Windows Key Guard Elevation of Privilege Vulnerability
8.1 CVE-2026-66802 Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability
7.0 CVE-2026-68820KEV Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
8.1 CVE-2026-71331 Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability
7.8 CVE-2026-42982 Windows Secure Kernel Mode Elevation of Privilege Vulnerability
8.8 CVE-2026-48564 DHCP Server Service Remote Code Execution Vulnerability
8.1 CVE-2026-49164 Windows Active Directory Domain Services Remote Code Execution Vulnerability
7.8 CVE-2026-49796 Windows GDI+ Remote Code Execution Vulnerability
8.8 CVE-2026-50370 DHCP Server Service Remote Code Execution Vulnerability
9.6 CVE-2026-50380 Windows GDI+ Remote Code Execution Vulnerability
8.8 CVE-2026-50382 DirectX Graphics Kernel Remote Code Execution Vulnerability
8.8 CVE-2026-50444 Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability
8.8 CVE-2026-50474 Remote Desktop Client Remote Code Execution Vulnerability
9.8 CVE-2026-50518 Windows DHCP Server Remote Code Execution Vulnerability
7.8 CVE-2026-50655 Microsoft Windows Media Foundation Remote Code Execution Vulnerability
8.2 CVE-2026-50680 Windows Hyper-V Elevation of Privilege Vulnerability
8.1 CVE-2026-50694 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
8.8 CVE-2026-54121 Active Directory Certificate Services Elevation of Privilege Vulnerability
7.4 CVE-2026-54127 Windows Hyper-V Elevation of Privilege Vulnerability
8.4 CVE-2026-54128 Windows DHCP Client Remote Code Execution Vulnerability
8.8 CVE-2026-54982 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
8.4 CVE-2026-54992 Microsoft Message Queuing Queue Manager Remote Code Execution Vulnerability
8.1 CVE-2026-54995 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
8.8 CVE-2026-54999 Windows TCP/IP Remote Code Execution Vulnerability
7.8 CVE-2026-56155KEV Active Directory Federation Services Elevation of Privilege Vulnerability
9.8 CVE-2026-56159 DHCP Server Service Remote Code Execution Vulnerability
9.8 CVE-2026-56188 Windows Server Network driver Remote Code Execution Vulnerability
7.8 CVE-2026-56189 Microsoft Windows Media Foundation Remote Code Execution Vulnerability
8.8 CVE-2026-57087 Microsoft Windows Media Foundation Remote Code Execution Vulnerability
8.8 CVE-2026-57090 Microsoft Windows Media Foundation Remote Code Execution Vulnerability
9.9 CVE-2026-57092 Microsoft Windows VMSwitch Elevation of Privilege Vulnerability
8.8 CVE-2026-57094 Microsoft Windows Media Foundation Remote Code Execution Vulnerability
8.8 CVE-2026-58608 Windows Print Spooler Remote Code Execution Vulnerability
7.8 CVE-2026-33828 Windows Device Health Attestation (DHA) Elevation of Privilege Vulnerability
8.8 CVE-2026-42985 Remote Desktop Client Remote Code Execution Vulnerability
8.1 CVE-2026-42987 Windows Deployment Services (WDS) Remote Code Execution
7.5 CVE-2026-42992 Remote Desktop Client Remote Code Execution Vulnerability
7.5 CVE-2026-44799 Remote Desktop Client Remote Code Execution Vulnerability
7.5 CVE-2026-44801 Remote Desktop Client Remote Code Execution Vulnerability
7.8 CVE-2026-44803 Windows Graphics Component Remote Code Execution Vulnerability
8.4 CVE-2026-44810 Microsoft Cryptographic Services Elevation of Privilege Vulnerability
7.8 CVE-2026-44812 Windows Graphics Component Remote Code Execution Vulnerability
9.8 CVE-2026-44815 DHCP Client Service Remote Code Execution Vulnerability
8.4 CVE-2026-45607 Windows Hyper-V Remote Code Execution Vulnerability
8.4 CVE-2026-45641 Windows Hyper-V Remote Code Execution Vulnerability
8.8 CVE-2026-45648 Windows Active Directory Domain Services Remote Code Execution Vulnerability
9.8 CVE-2026-45657 Windows Kernel Remote Code Execution Vulnerability
7.1 CVE-2026-47288 Windows Kerberos Key Distribution Center (KDC) Remote Code Execution
8.8 CVE-2026-47289 Remote Desktop Client Remote Code Execution Vulnerability
9.8 CVE-2026-47291 HTTP.sys Remote Code Execution Vulnerability
8.2 CVE-2026-47652 Windows Hyper-V Remote Code Execution Vulnerability
7.5 CVE-2026-47654 Remote Desktop Client Remote Code Execution Vulnerability
7.5 CVE-2026-48563 Remote Desktop Client Remote Code Execution Vulnerability
7.8 CVE-2026-48574 Windows Media Remote Code Execution Vulnerability
7.5 CVE-2026-32161 Windows Native WiFi Miniport Driver Remote Code Execution Vulnerability
7.8 CVE-2026-35421 Windows GDI Remote Code Execution Vulnerability
9.3 CVE-2026-40402 Windows Hyper-V Elevation of Privilege Vulnerability
8.8 CVE-2026-40403 Windows Graphics Component Remote Code Execution Vulnerability
9.8 CVE-2026-41089 Windows Netlogon Remote Code Execution Vulnerability

Breaking changes

None in the release notes.

Security changes

security [Remote Desktop Services (known issue)] Fixed: This update addresses an issue affecting Remote Desktop Services (RDS) after installing the September 2026 Windows security update (KB5122882). In affected environments, RDS might become unstable, causing RDP connection and sign-in failures or servers… in 20348.5631
security Fixes CVE-2026-85880: Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability in 20348.5622
security Fixes CVE-2026-69579: Windows Message Queuing Remote Code Execution Vulnerability in 20348.5622
security Fixes CVE-2026-69590: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability in 20348.5622
security Fixes CVE-2026-69595: Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability in 20348.5622
security Fixes CVE-2026-69730: Windows DNS Server Remote Code Execution Vulnerability in 20348.5622
security Fixes CVE-2026-69769: Windows HTTP Print Provider Remote Code Execution Vulnerability in 20348.5622
security Fixes CVE-2026-69829: Windows Shell Remote Code Execution Vulnerability in 20348.5622
security Fixes CVE-2026-69845: Windows DHCP Server Remote Code Execution Vulnerability in 20348.5622
security Fixes CVE-2026-70296: Windows Imaging Component Remote Code Execution Vulnerability in 20348.5622
security Fixes CVE-2026-72979: Windows DHCP Server Remote Code Execution Vulnerability in 20348.5622
security Fixes CVE-2026-72982: Windows Netlogon Remote Code Execution Vulnerability in 20348.5622
security Fixes CVE-2026-72983: Internet Connection Sharing (ICS) Remote Code Execution Vulnerability in 20348.5622
security Fixes CVE-2026-73009: Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability in 20348.5622
security Fixes CVE-2026-73010: Microsoft Failover Cluster Remote Code Execution Vulnerability in 20348.5622
security Fixes CVE-2026-77493: Windows Graphics Component Remote Code Execution Vulnerability in 20348.5622
security Fixes CVE-2026-78445: Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability in 20348.5622
security Fixes CVE-2026-69499: Windows Imaging Component Remote Code Execution Vulnerability in 20348.5622
security Fixes CVE-2026-69518: Windows Remote Desktop Remote Code Execution Vulnerability in 20348.5622
security Fixes CVE-2026-69601: Microsoft Windows Media Foundation Remote Code Execution Vulnerability in 20348.5622
security Fixes CVE-2026-69603: Windows Hyper-V Remote Code Execution Vulnerability in 20348.5622
security Fixes CVE-2026-69676: Windows Kerberos Remote Code Execution Vulnerability in 20348.5622
security Fixes CVE-2026-69712: Windows Key Distribution Center Remote Code Execution Vulnerability in 20348.5622
security Fixes CVE-2026-69860: Windows Imaging Component Remote Code Execution Vulnerability in 20348.5622
security Fixes CVE-2026-70203: Windows Media Player Remote Code Execution Vulnerability in 20348.5622
security Fixes CVE-2026-70586: Windows Paint Remote Code Execution Vulnerability in 20348.5622
security Fixes CVE-2026-72950: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability in 20348.5622
security Fixes CVE-2026-72959: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability in 20348.5622
security Fixes CVE-2026-72960: Windows Media Player Remote Code Execution Vulnerability in 20348.5622
security Fixes CVE-2026-72986: Graphic Fonts Remote Code Execution Vulnerability in 20348.5622
security Fixes CVE-2026-73006: DirectWrite Remote Code Execution Vulnerability in 20348.5622
security Fixes CVE-2026-73013: Windows Imaging Component Remote Code Execution Vulnerability in 20348.5622
security Fixes CVE-2026-73018: Graphic Fonts Remote Code Execution Vulnerability in 20348.5622
security Fixes CVE-2026-73023: Windows Imaging Component Remote Code Execution Vulnerability in 20348.5622
security Fixes CVE-2026-77495: Windows Imaging Component Remote Code Execution Vulnerability in 20348.5622
security Fixes CVE-2026-77504: Microsoft Office Word Remote Code Execution Vulnerability in 20348.5622
security Fixes CVE-2026-80083: Windows Hyper-V Remote Code Execution Vulnerability in 20348.5622
security Fixes CVE-2026-81955: Windows Graphics Component Remote Code Execution Vulnerability in 20348.5622
security Fixes CVE-2026-69846: Windows Secure Kernel Mode Elevation of Privilege Vulnerability in 20348.5622
security Fixes CVE-2026-69874: Windows ALPC Elevation of Privilege Vulnerability in 20348.5622
security Fixes CVE-2026-69906: Windows Secure Kernel Mode Elevation of Privilege Vulnerability in 20348.5622
security Fixes CVE-2026-72961: Windows Hyper-V Elevation of Privilege Vulnerability in 20348.5622
security Fixes CVE-2026-72962: Windows USB Video Driver Elevation of Privilege Vulnerability in 20348.5622
security Fixes CVE-2026-69530: Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability in 20348.5622
security Fixes CVE-2026-69813: Windows DNS Server Remote Code Execution Vulnerability in 20348.5622
security Fixes CVE-2026-69827: Windows DNS Server Remote Code Execution Vulnerability in 20348.5622
security Fixes CVE-2026-69858: Windows DNS Server Remote Code Execution Vulnerability in 20348.5622
security Fixes CVE-2026-72981: IP Helper Remote Code Execution Vulnerability in 20348.5622
security Fixes CVE-2026-72987: Windows DNS Remote Code Execution Vulnerability in 20348.5622
security Fixes CVE-2026-77505: Windows DNS Server Remote Code Execution Vulnerability in 20348.5622
security Fixes CVE-2026-78444: Microsoft Failover Cluster Remote Code Execution Vulnerability in 20348.5622
security Fixes CVE-2026-78449: Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability in 20348.5622
security Fixes CVE-2026-78450: Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability in 20348.5622
security Fixes CVE-2026-72957: Windows Deployment Services Remote Code Execution Vulnerability in 20348.5622
security Fixes CVE-2026-69789: Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability in 20348.5622
security Fixes CVE-2026-69852: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability in 20348.5622
security Fixes CVE-2026-69890: Windows Virtual Trusted Platform Module Elevation of Privilege Vulnerability in 20348.5622
security Fixes CVE-2026-72954: Windows Deployment Services Remote Code Execution Vulnerability in 20348.5622
security Fixes CVE-2026-73017: Graphics Kernel Remote Code Execution Vulnerability in 20348.5622
security Fixes CVE-2026-81355: Virtual Hard Disk (VHD) Miniport Driver Remote Code Execution Vulnerability in 20348.5622
security Fixes CVE-2026-69501: Windows Secure Kernel Mode Elevation of Privilege Vulnerability in 20348.5622
security Fixes CVE-2026-70585: Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability in 20348.5622
security Fixes CVE-2026-72980: Windows Hello Security Feature Bypass Vulnerability in 20348.5622
security Security update: includes the September 2026 Security Updates in 20348.5622
security Fixes CVE-2026-68820: Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability in 20348.5499
security Fixes CVE-2026-62815: Microsoft QUIC Remote Code Execution Vulnerability in 20348.5499
security Fixes CVE-2026-62878: Windows DNS Server Remote Code Execution Vulnerability in 20348.5499
security Fixes CVE-2026-62893: Windows Deployment Services TFTP Server Remote Code Execution Vulnerability in 20348.5499
security Fixes CVE-2026-65791: Windows iSCSI Target Service Remote Code Execution Vulnerability in 20348.5499
security Fixes CVE-2026-62816: Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability in 20348.5499
security Fixes CVE-2026-62817: Windows DNS Server Remote Code Execution Vulnerability in 20348.5499
security Fixes CVE-2026-62818: Windows Active Directory Certificate Services (AD CS) Remote Code Execution Vulnerability in 20348.5499
security Fixes CVE-2026-62822: Windows GDI+ Remote Code Execution Vulnerability in 20348.5499
security Fixes CVE-2026-62823: Windows DHCP Server Remote Code Execution Vulnerability in 20348.5499
security Fixes CVE-2026-62819: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability in 20348.5499
security Fixes CVE-2026-62820: Windows DNS Server Remote Code Execution Vulnerability in 20348.5499
security Fixes CVE-2026-62889: Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability in 20348.5499
security Fixes CVE-2026-65679: Windows iSCSI Target Service Remote Code Execution Vulnerability in 20348.5499
security Fixes CVE-2026-65789: Windows DNS Server Remote Code Execution Vulnerability in 20348.5499
security Fixes CVE-2026-65796: Windows iSCSI Target Service Remote Code Execution Vulnerability in 20348.5499
security Fixes CVE-2026-66802: Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability in 20348.5499
security Fixes CVE-2026-71331: Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability in 20348.5499
security Fixes CVE-2026-62890: Windows GDI+ Elevation of Privilege Vulnerability in 20348.5499
security Fixes CVE-2026-66799: Windows Key Guard Elevation of Privilege Vulnerability in 20348.5499
security Security update: includes the August 2026 Security Updates in 20348.5499
security Fixes CVE-2026-56155: Active Directory Federation Services Elevation of Privilege Vulnerability in 20348.5386
security Fixes CVE-2026-57092: Microsoft Windows VMSwitch Elevation of Privilege Vulnerability in 20348.5386
security Fixes CVE-2026-50518: Windows DHCP Server Remote Code Execution Vulnerability in 20348.5386
security Fixes CVE-2026-56159: DHCP Server Service Remote Code Execution Vulnerability in 20348.5386
security Fixes CVE-2026-56188: Windows Server Network driver Remote Code Execution Vulnerability in 20348.5386
security Fixes CVE-2026-50380: Windows GDI+ Remote Code Execution Vulnerability in 20348.5386
security Fixes CVE-2026-48564: DHCP Server Service Remote Code Execution Vulnerability in 20348.5386
security Fixes CVE-2026-50370: DHCP Server Service Remote Code Execution Vulnerability in 20348.5386
security Fixes CVE-2026-50382: DirectX Graphics Kernel Remote Code Execution Vulnerability in 20348.5386
security Fixes CVE-2026-50444: Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability in 20348.5386
security Fixes CVE-2026-50474: Remote Desktop Client Remote Code Execution Vulnerability in 20348.5386
security Fixes CVE-2026-54121: Active Directory Certificate Services Elevation of Privilege Vulnerability in 20348.5386
security Fixes CVE-2026-54982: Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability in 20348.5386
security Fixes CVE-2026-54999: Windows TCP/IP Remote Code Execution Vulnerability in 20348.5386
security Fixes CVE-2026-57087: Microsoft Windows Media Foundation Remote Code Execution Vulnerability in 20348.5386
security Fixes CVE-2026-57090: Microsoft Windows Media Foundation Remote Code Execution Vulnerability in 20348.5386
security Fixes CVE-2026-57094: Microsoft Windows Media Foundation Remote Code Execution Vulnerability in 20348.5386
security Fixes CVE-2026-58608: Windows Print Spooler Remote Code Execution Vulnerability in 20348.5386
security Fixes CVE-2026-54128: Windows DHCP Client Remote Code Execution Vulnerability in 20348.5386
security Fixes CVE-2026-54992: Microsoft Message Queuing Queue Manager Remote Code Execution Vulnerability in 20348.5386
security Fixes CVE-2026-50680: Windows Hyper-V Elevation of Privilege Vulnerability in 20348.5386
security Fixes CVE-2026-49164: Windows Active Directory Domain Services Remote Code Execution Vulnerability in 20348.5386
security Fixes CVE-2026-50694: Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability in 20348.5386
security Fixes CVE-2026-54995: Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability in 20348.5386
security Fixes CVE-2026-42982: Windows Secure Kernel Mode Elevation of Privilege Vulnerability in 20348.5386
security Fixes CVE-2026-49796: Windows GDI+ Remote Code Execution Vulnerability in 20348.5386
security Fixes CVE-2026-50655: Microsoft Windows Media Foundation Remote Code Execution Vulnerability in 20348.5386
security Fixes CVE-2026-56189: Microsoft Windows Media Foundation Remote Code Execution Vulnerability in 20348.5386
security Fixes CVE-2026-54127: Windows Hyper-V Elevation of Privilege Vulnerability in 20348.5386
security Fixes CVE-2026-44815: DHCP Client Service Remote Code Execution Vulnerability in 20348.5256
security Fixes CVE-2026-45657: Windows Kernel Remote Code Execution Vulnerability in 20348.5256
security Fixes CVE-2026-47291: HTTP.sys Remote Code Execution Vulnerability in 20348.5256
security Fixes CVE-2026-42985: Remote Desktop Client Remote Code Execution Vulnerability in 20348.5256
security Fixes CVE-2026-45648: Windows Active Directory Domain Services Remote Code Execution Vulnerability in 20348.5256
security Fixes CVE-2026-47289: Remote Desktop Client Remote Code Execution Vulnerability in 20348.5256
security Fixes CVE-2026-44810: Microsoft Cryptographic Services Elevation of Privilege Vulnerability in 20348.5256
security Fixes CVE-2026-45607: Windows Hyper-V Remote Code Execution Vulnerability in 20348.5256
security Fixes CVE-2026-45641: Windows Hyper-V Remote Code Execution Vulnerability in 20348.5256
security Fixes CVE-2026-47652: Windows Hyper-V Remote Code Execution Vulnerability in 20348.5256
security Fixes CVE-2026-42987: Windows Deployment Services (WDS) Remote Code Execution in 20348.5256
security Fixes CVE-2026-33828: Windows Device Health Attestation (DHA) Elevation of Privilege Vulnerability in 20348.5256
security Fixes CVE-2026-44803: Windows Graphics Component Remote Code Execution Vulnerability in 20348.5256
security Fixes CVE-2026-44812: Windows Graphics Component Remote Code Execution Vulnerability in 20348.5256
security Fixes CVE-2026-48574: Windows Media Remote Code Execution Vulnerability in 20348.5256
security Fixes CVE-2026-42992: Remote Desktop Client Remote Code Execution Vulnerability in 20348.5256
security Fixes CVE-2026-44799: Remote Desktop Client Remote Code Execution Vulnerability in 20348.5256
security Fixes CVE-2026-44801: Remote Desktop Client Remote Code Execution Vulnerability in 20348.5256
security Fixes CVE-2026-47654: Remote Desktop Client Remote Code Execution Vulnerability in 20348.5256
security Fixes CVE-2026-48563: Remote Desktop Client Remote Code Execution Vulnerability in 20348.5256
security Fixes CVE-2026-47288: Windows Kerberos Key Distribution Center (KDC) Remote Code Execution in 20348.5256
security Fixes CVE-2026-41089: Windows Netlogon Remote Code Execution Vulnerability in 20348.5139
security Fixes CVE-2026-40402: Windows Hyper-V Elevation of Privilege Vulnerability in 20348.5139
security Fixes CVE-2026-40403: Windows Graphics Component Remote Code Execution Vulnerability in 20348.5139
security Fixes CVE-2026-35421: Windows GDI Remote Code Execution Vulnerability in 20348.5139
security Fixes CVE-2026-32161: Windows Native WiFi Miniport Driver Remote Code Execution Vulnerability in 20348.5139
security [Domain controllers (known issue)] Fixed: After installing the April 14, 2026, (KB5082142) Windows security update and restarting, domain controllers with multi-domain forests that use Privileged Access Management (PAM), might experience startup issues. In some cases, Local Security Authority… in 20348.5024
security Security update: includes the April 2026 Security Updates in 20348.5020
security [Kerberos protocol] This update changes the default DefaultDomainSupportedEncTypes value for Kerberos Key Distribution Center (KDC) operations to leverage AES-SHA1 for accounts that do not have an explicit msds-SupportedEncryptionTypes Active Directory attribute defined. For more information see,… in 20348.5020
security [Remote Desktop] This update improves protection against phishing attacks that use Remote Desktop (.rdp) files. When you open an .rdp file, Remote Desktop shows all requested connection settings before it connects, with each setting turned off by default. A one-time security warning also appears… in 20348.5020
security [Vulnerable driver blocklist] This update introduces a security hardening change that adds known vulnerable kernel drivers to the Microsoft vulnerable driver blocklist. Backup applications that rely on blocked drivers might experience failures when attempting to mount or manage disk images. These… in 20348.5020
security [Windows Deployment Services (WDS)] This update disables the “Hands-Free Deployment” feature in WDS by default and is no longer a supported feature. For more information about this change, see Windows Deployment Services (WDS) Hands-Free Deployment Hardening Guidance related to CVE-2026-0386. in 20348.5020
security Security update: includes the March 2026 Security Updates in 20348.4893
security [Graphics] Fixed: This update addresses an issue where certain GPU configurations might recently have experienced a system error related to dxgmms2.sys, resulting in the KERNEL_SECURITY_CHECK_FAILURE error. in 20348.4773
security [OS Security (known issue)] Fixed: After installing the Windows security update released on or after January 13, 2026, some PCs which run Virtual Secure Mode (VSM) are unable to shut down or enter hibernation. Instead, the device restarts. in 20348.4773
security [Remote Desktop] Fixed: After installing the January 2026 Windows security update (KB5073457), some users experienced sign-in failures during Remote Desktop connections. This issue affected authentication steps for different Remote Desktop applications on Windows such as the Windows App. in 20348.4650
security [Credentials autofill] This update introduces a security hardening behavior restricting certain applications to autofill credentials during remote support sessions or automated authentication workflows. With this change, credential dialogs do not respond to virtual keyboard input from remote… in 20348.4648
security [WinSqlite3.dll] Fixed: The Windows core component, WinSqlite3.dll, has been updated. Previously, some security software might have detected this component as vulnerable. Note WinSqlite3.dll is a separate component from sqlite3.dll, which is found in application-specific directories and is not a… in 20348.4648
security [PowerShell 5.1] Invoke-WebRequest now includes a confirmation prompt with a security warning of script execution risk. You can choose to continue or cancel the request. For additional details, see CVE-2025-54100 and KB5074596: PowerShell 5.1: Preventing script execution from web content. in 20348.4529
security [App compatibility (known issue)] Fixed: This update addresses an issue that created unexpected User Account Control (UAC) prompts for some apps, including Autodesk AutoCAD. For more information, see Unexpected UAC prompts when running MSI repair operations after installing the August 2025 Windows… in 20348.4405
security [Security] Fixed: This update addresses an issue that affects Windows Server domain controllers using Microsoft Defender for Endpoint. After domain controller promotion, changes to registry permissions disrupted cloud-based communication. in 20348.4405
security [Windows Server Update Services (WSUS)] Fixed: This update addresses a remote code execution (RCE) vulnerability that was identified in WSUS reporting web services. For more information about the security fix, see CVE-2025-59287. in 20348.4297
security [Stability issue] Fixed: This update addresses an issue observed in rare cases after installing the May 2025 security update and subsequent updates causing devices to experience stability issues. Some devices became unresponsive and stopped responding in specific scenarios. in 20348.4294
security [Cryptography] This update enforces a security hardening improvement by requiring use of Key Storage Provider (KSP) instead of Cryptographic Service Provider {CSP) for RSA-based smart card certificates. If you experience problems with smart card authentication as a result of this design change,… in 20348.4294
security [File Explorer] After installing this update, File Explorer automatically disables the preview feature for files downloaded from the internet. This change is designed to enhance security by preventing a vulnerability when users preview potentially unsafe files. For details, including steps to… in 20348.4294
security [App compatibility (known issue)] Fixed: Addresses an issue that caused non-admin users to receive unexpected User Account Control (UAC) prompts when MSI installers perform certain custom actions. These actions might include configuration or repair operations in the foreground or background,… in 20348.4171
security [File server]⁠ This update enabled auditing SMB client compatibility for SMB Server signing as well as SMB Server EPA. This allows customers to assess their environment and identify any potential device or software incompatibility issues before deploying the hardening measures that are already… in 20348.4171
security Security update: includes the July 2025 Security Updates in 20348.3932
security [Microsoft RPC Netlogon protocol] This update includes a security hardening change to the Microsoft RPC Netlogon protocol. This change improves security by tightening access checks for a set of remote procedure call (RPC) requests. After this update is installed, Active Directory domain… in 20348.3932

Every release in between

20348.5631 Sep 14, 2026 Release notes ↗

security[Remote Desktop Services (known issue)] Fixed: This update addresses an issue affecting Remote Desktop Services (RDS) after installing the September 2026 Windows security update (KB5122882). In affected environments, RDS might become unstable, causing RDP connection and sign-in failures or servers…

fix[8-channel or 3D audio modes] Fixed: Some USB Audio Class 1.0 devices functioning as expected in standard stereo configurations failed when using multichannel audio features, including 8-channel or 3D audio modes. (Note: There are other audio symptoms not resolved in this OOB update. See the…

20348.5622 Sep 8, 2026 Release notes ↗

securityFixes CVE-2026-85880: Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

securityFixes CVE-2026-69579: Windows Message Queuing Remote Code Execution Vulnerability

securityFixes CVE-2026-69590: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

securityFixes CVE-2026-69595: Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability

securityFixes CVE-2026-69730: Windows DNS Server Remote Code Execution Vulnerability

securityFixes CVE-2026-69769: Windows HTTP Print Provider Remote Code Execution Vulnerability

securityFixes CVE-2026-69829: Windows Shell Remote Code Execution Vulnerability

securityFixes CVE-2026-69845: Windows DHCP Server Remote Code Execution Vulnerability

securityFixes CVE-2026-70296: Windows Imaging Component Remote Code Execution Vulnerability

securityFixes CVE-2026-72979: Windows DHCP Server Remote Code Execution Vulnerability

securityFixes CVE-2026-72982: Windows Netlogon Remote Code Execution Vulnerability

securityFixes CVE-2026-72983: Internet Connection Sharing (ICS) Remote Code Execution Vulnerability

securityFixes CVE-2026-73009: Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

securityFixes CVE-2026-73010: Microsoft Failover Cluster Remote Code Execution Vulnerability

securityFixes CVE-2026-77493: Windows Graphics Component Remote Code Execution Vulnerability

securityFixes CVE-2026-78445: Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability

securityFixes CVE-2026-69499: Windows Imaging Component Remote Code Execution Vulnerability

securityFixes CVE-2026-69518: Windows Remote Desktop Remote Code Execution Vulnerability

securityFixes CVE-2026-69601: Microsoft Windows Media Foundation Remote Code Execution Vulnerability

securityFixes CVE-2026-69603: Windows Hyper-V Remote Code Execution Vulnerability

securityFixes CVE-2026-69676: Windows Kerberos Remote Code Execution Vulnerability

securityFixes CVE-2026-69712: Windows Key Distribution Center Remote Code Execution Vulnerability

securityFixes CVE-2026-69860: Windows Imaging Component Remote Code Execution Vulnerability

securityFixes CVE-2026-70203: Windows Media Player Remote Code Execution Vulnerability

securityFixes CVE-2026-70586: Windows Paint Remote Code Execution Vulnerability

securityFixes CVE-2026-72950: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

securityFixes CVE-2026-72959: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

securityFixes CVE-2026-72960: Windows Media Player Remote Code Execution Vulnerability

securityFixes CVE-2026-72986: Graphic Fonts Remote Code Execution Vulnerability

securityFixes CVE-2026-73006: DirectWrite Remote Code Execution Vulnerability

securityFixes CVE-2026-73013: Windows Imaging Component Remote Code Execution Vulnerability

securityFixes CVE-2026-73018: Graphic Fonts Remote Code Execution Vulnerability

securityFixes CVE-2026-73023: Windows Imaging Component Remote Code Execution Vulnerability

securityFixes CVE-2026-77495: Windows Imaging Component Remote Code Execution Vulnerability

securityFixes CVE-2026-77504: Microsoft Office Word Remote Code Execution Vulnerability

securityFixes CVE-2026-80083: Windows Hyper-V Remote Code Execution Vulnerability

securityFixes CVE-2026-81955: Windows Graphics Component Remote Code Execution Vulnerability

securityFixes CVE-2026-69846: Windows Secure Kernel Mode Elevation of Privilege Vulnerability

securityFixes CVE-2026-69874: Windows ALPC Elevation of Privilege Vulnerability

securityFixes CVE-2026-69906: Windows Secure Kernel Mode Elevation of Privilege Vulnerability

+28 more items in the release notes

20348.5499 Aug 11, 2026 Release notes ↗

securityFixes CVE-2026-68820: Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

securityFixes CVE-2026-62815: Microsoft QUIC Remote Code Execution Vulnerability

securityFixes CVE-2026-62878: Windows DNS Server Remote Code Execution Vulnerability

securityFixes CVE-2026-62893: Windows Deployment Services TFTP Server Remote Code Execution Vulnerability

securityFixes CVE-2026-65791: Windows iSCSI Target Service Remote Code Execution Vulnerability

securityFixes CVE-2026-62816: Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability

securityFixes CVE-2026-62817: Windows DNS Server Remote Code Execution Vulnerability

securityFixes CVE-2026-62818: Windows Active Directory Certificate Services (AD CS) Remote Code Execution Vulnerability

securityFixes CVE-2026-62822: Windows GDI+ Remote Code Execution Vulnerability

securityFixes CVE-2026-62823: Windows DHCP Server Remote Code Execution Vulnerability

securityFixes CVE-2026-62819: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

securityFixes CVE-2026-62820: Windows DNS Server Remote Code Execution Vulnerability

securityFixes CVE-2026-62889: Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

securityFixes CVE-2026-65679: Windows iSCSI Target Service Remote Code Execution Vulnerability

securityFixes CVE-2026-65789: Windows DNS Server Remote Code Execution Vulnerability

securityFixes CVE-2026-65796: Windows iSCSI Target Service Remote Code Execution Vulnerability

securityFixes CVE-2026-66802: Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability

securityFixes CVE-2026-71331: Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability

securityFixes CVE-2026-62890: Windows GDI+ Elevation of Privilege Vulnerability

securityFixes CVE-2026-66799: Windows Key Guard Elevation of Privilege Vulnerability

securitySecurity update: includes the August 2026 Security Updates

feature[Secure Boot] This update includes additional high confidence device targeting data, increasing coverage of devices eligible to automatically receive new Secure Boot certificates. Certificate deployment via Windows updates continues across supported PCs and non-managed business devices in the…

20348.5386 Jul 14, 2026 Release notes ↗

securityFixes CVE-2026-56155: Active Directory Federation Services Elevation of Privilege Vulnerability

securityFixes CVE-2026-57092: Microsoft Windows VMSwitch Elevation of Privilege Vulnerability

securityFixes CVE-2026-50518: Windows DHCP Server Remote Code Execution Vulnerability

securityFixes CVE-2026-56159: DHCP Server Service Remote Code Execution Vulnerability

securityFixes CVE-2026-56188: Windows Server Network driver Remote Code Execution Vulnerability

securityFixes CVE-2026-50380: Windows GDI+ Remote Code Execution Vulnerability

securityFixes CVE-2026-48564: DHCP Server Service Remote Code Execution Vulnerability

securityFixes CVE-2026-50370: DHCP Server Service Remote Code Execution Vulnerability

securityFixes CVE-2026-50382: DirectX Graphics Kernel Remote Code Execution Vulnerability

securityFixes CVE-2026-50444: Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability

securityFixes CVE-2026-50474: Remote Desktop Client Remote Code Execution Vulnerability

securityFixes CVE-2026-54121: Active Directory Certificate Services Elevation of Privilege Vulnerability

securityFixes CVE-2026-54982: Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability

securityFixes CVE-2026-54999: Windows TCP/IP Remote Code Execution Vulnerability

securityFixes CVE-2026-57087: Microsoft Windows Media Foundation Remote Code Execution Vulnerability

securityFixes CVE-2026-57090: Microsoft Windows Media Foundation Remote Code Execution Vulnerability

securityFixes CVE-2026-57094: Microsoft Windows Media Foundation Remote Code Execution Vulnerability

securityFixes CVE-2026-58608: Windows Print Spooler Remote Code Execution Vulnerability

securityFixes CVE-2026-54128: Windows DHCP Client Remote Code Execution Vulnerability

securityFixes CVE-2026-54992: Microsoft Message Queuing Queue Manager Remote Code Execution Vulnerability

securityFixes CVE-2026-50680: Windows Hyper-V Elevation of Privilege Vulnerability

securityFixes CVE-2026-49164: Windows Active Directory Domain Services Remote Code Execution Vulnerability

securityFixes CVE-2026-50694: Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

securityFixes CVE-2026-54995: Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability

securityFixes CVE-2026-42982: Windows Secure Kernel Mode Elevation of Privilege Vulnerability

securityFixes CVE-2026-49796: Windows GDI+ Remote Code Execution Vulnerability

securityFixes CVE-2026-50655: Microsoft Windows Media Foundation Remote Code Execution Vulnerability

securityFixes CVE-2026-56189: Microsoft Windows Media Foundation Remote Code Execution Vulnerability

securityFixes CVE-2026-54127: Windows Hyper-V Elevation of Privilege Vulnerability

20348.5256 Jun 9, 2026 Release notes ↗

securityFixes CVE-2026-44815: DHCP Client Service Remote Code Execution Vulnerability

securityFixes CVE-2026-45657: Windows Kernel Remote Code Execution Vulnerability

securityFixes CVE-2026-47291: HTTP.sys Remote Code Execution Vulnerability

securityFixes CVE-2026-42985: Remote Desktop Client Remote Code Execution Vulnerability

securityFixes CVE-2026-45648: Windows Active Directory Domain Services Remote Code Execution Vulnerability

securityFixes CVE-2026-47289: Remote Desktop Client Remote Code Execution Vulnerability

securityFixes CVE-2026-44810: Microsoft Cryptographic Services Elevation of Privilege Vulnerability

securityFixes CVE-2026-45607: Windows Hyper-V Remote Code Execution Vulnerability

securityFixes CVE-2026-45641: Windows Hyper-V Remote Code Execution Vulnerability

securityFixes CVE-2026-47652: Windows Hyper-V Remote Code Execution Vulnerability

securityFixes CVE-2026-42987: Windows Deployment Services (WDS) Remote Code Execution

securityFixes CVE-2026-33828: Windows Device Health Attestation (DHA) Elevation of Privilege Vulnerability

securityFixes CVE-2026-44803: Windows Graphics Component Remote Code Execution Vulnerability

securityFixes CVE-2026-44812: Windows Graphics Component Remote Code Execution Vulnerability

securityFixes CVE-2026-48574: Windows Media Remote Code Execution Vulnerability

securityFixes CVE-2026-42992: Remote Desktop Client Remote Code Execution Vulnerability

securityFixes CVE-2026-44799: Remote Desktop Client Remote Code Execution Vulnerability

securityFixes CVE-2026-44801: Remote Desktop Client Remote Code Execution Vulnerability

securityFixes CVE-2026-47654: Remote Desktop Client Remote Code Execution Vulnerability

securityFixes CVE-2026-48563: Remote Desktop Client Remote Code Execution Vulnerability

securityFixes CVE-2026-47288: Windows Kerberos Key Distribution Center (KDC) Remote Code Execution

20348.5139 May 12, 2026 Release notes ↗

securityFixes CVE-2026-41089: Windows Netlogon Remote Code Execution Vulnerability

securityFixes CVE-2026-40402: Windows Hyper-V Elevation of Privilege Vulnerability

securityFixes CVE-2026-40403: Windows Graphics Component Remote Code Execution Vulnerability

securityFixes CVE-2026-35421: Windows GDI Remote Code Execution Vulnerability

securityFixes CVE-2026-32161: Windows Native WiFi Miniport Driver Remote Code Execution Vulnerability

20348.5024 Apr 19, 2026 Release notes ↗

security[Domain controllers (known issue)] Fixed: After installing the April 14, 2026, (KB5082142) Windows security update and restarting, domain controllers with multi-domain forests that use Privileged Access Management (PAM), might experience startup issues. In some cases, Local Security Authority…

20348.5020 Apr 14, 2026 Release notes ↗

securitySecurity update: includes the April 2026 Security Updates

other[Connectivity] This update improves the reliability of audio features in Windows, helping reduce system unresponsiveness related to sound or audio activity.

other[Kernel] This update improves system stability during large file operations. Users should experience fewer unexpected interruptions while working with or transferring large files.

security[Kerberos protocol] This update changes the default DefaultDomainSupportedEncTypes value for Kerberos Key Distribution Center (KDC) operations to leverage AES-SHA1 for accounts that do not have an explicit msds-SupportedEncryptionTypes Active Directory attribute defined. For more information see,…

other[Networking] This update improves reliability when Windows uses SMB compression over QUIC. After you install this update, SMB compression requests over QUIC complete more consistently, reducing the likelihood of timeouts and supporting smoother, more dependable performance.

security[Remote Desktop] This update improves protection against phishing attacks that use Remote Desktop (.rdp) files. When you open an .rdp file, Remote Desktop shows all requested connection settings before it connects, with each setting turned off by default. A one-time security warning also appears…

featureWith this update, Windows quality updates include additional high confidence device targeting data, increasing coverage of devices eligible to automatically receive new Secure Boot certificates. Devices receive the new certificates only after demonstrating sufficient successful update signals,…

fixThis update addresses an issue where the device might enter BitLocker Recovery after the Secure Boot updates.

feature[Texts and Fonts] This update improves Windows fonts by adding the new Saudi Riyal currency symbol. This change helps keep text clear, accurate, and visually consistent across your Windows apps and experiences.

security[Vulnerable driver blocklist] This update introduces a security hardening change that adds known vulnerable kernel drivers to the Microsoft vulnerable driver blocklist. Backup applications that rely on blocked drivers might experience failures when attempting to mount or manage disk images. These…

security[Windows Deployment Services (WDS)] This update disables the “Hands-Free Deployment” feature in WDS by default and is no longer a supported feature. For more information about this change, see Windows Deployment Services (WDS) Hands-Free Deployment Hardening Guidance related to CVE-2026-0386.

20348.4893 Mar 10, 2026 Release notes ↗

securitySecurity update: includes the March 2026 Security Updates

feature[Secure Boot] With this update, Windows quality updates include additional high confidence device targeting data, increasing coverage of devices eligible to automatically receive new Secure Boot certificates. This targeting is based primarily on client device diagnostic data; due to limited data,…

feature[Windows System Image Manager] Improved: This update improves the reliability of choosing trusted catalog files. It adds a warning dialog that helps you confirm that the file you select comes from a trusted source.

20348.4776 Mar 2, 2026 Release notes ↗

20348.4773 Feb 10, 2026 Release notes ↗

fix[File Explorer] Fixed: This update addresses an issue where folder renaming with desktop.ini files in File Explorer isn't work correctly. The LocalizedResourceName setting is ignored, so custom folder names don't appear.

other[Fonts & Display] Updates the Chinese fonts to support the GB18030‑2022A standard for character coverage and display.

security[Graphics] Fixed: This update addresses an issue where certain GPU configurations might recently have experienced a system error related to dxgmms2.sys, resulting in the KERNEL_SECURITY_CHECK_FAILURE error.

security[OS Security (known issue)] Fixed: After installing the Windows security update released on or after January 13, 2026, some PCs which run Virtual Secure Mode (VSM) are unable to shut down or enter hibernation. Instead, the device restarts.

feature[Networking]New! Windows Server now supports random shuffling of resource records in DNS Server responses. This helps reduce scenarios where a single resource record becomes overloaded because it appears first in the returned list. To enable, create a DWORD registry key named “RandomShuffle” at:…

20348.4651 Jan 24, 2026 Release notes ↗

fix[File System] Fixed: After installing the Windows update released on and after January 13, 2026, some applications became unresponsive or encountered unexpected errors when opening files from or saving files to cloud-based storage, such as OneDrive or Dropbox. In certain Outlook configurations…

20348.4650 Jan 17, 2026 Release notes ↗

security[Remote Desktop] Fixed: After installing the January 2026 Windows security update (KB5073457), some users experienced sign-in failures during Remote Desktop connections. This issue affected authentication steps for different Remote Desktop applications on Windows such as the Windows App.

20348.4648 Jan 13, 2026 Release notes ↗

other[Compatibility] This update removes the following modem drivers: agrsm64.sys (x64), agrsm.sys (x86), smserl64.sys (x64) and smserial.sys (x86). Modem hardware dependent on these specific drivers will no longer work in Windows.

security[Credentials autofill] This update introduces a security hardening behavior restricting certain applications to autofill credentials during remote support sessions or automated authentication workflows. With this change, credential dialogs do not respond to virtual keyboard input from remote…

fix[Remote Desktop] Fixed: This update addresses an issue that causes SearchIndexer (the Windows service that indexes files for search) to stop responding on Citrix hosts, which might prevent users from starting remote sessions.

feature[Windows Deployment Services (WDS] This update introduces a change in behavior in which WDS will stop supporting hands-free deployment functionality by default. Detailed guidance for IT administrators is available in Windows Deployment Services (WDS) Hands‑Free Deployment Hardening Guidance.

security[WinSqlite3.dll] Fixed: The Windows core component, WinSqlite3.dll, has been updated. Previously, some security software might have detected this component as vulnerable. Note WinSqlite3.dll is a separate component from sqlite3.dll, which is found in application-specific directories and is not a…

20348.4529 Dec 9, 2025 Release notes ↗

security[PowerShell 5.1] Invoke-WebRequest now includes a confirmation prompt with a security warning of script execution risk. You can choose to continue or cancel the request. For additional details, see CVE-2025-54100 and KB5074596: PowerShell 5.1: Preventing script execution from web content.

20348.4405 Nov 11, 2025 Release notes ↗

security[App compatibility (known issue)] Fixed: This update addresses an issue that created unexpected User Account Control (UAC) prompts for some apps, including Autodesk AutoCAD. For more information, see Unexpected UAC prompts when running MSI repair operations after installing the August 2025 Windows…

security[Security] Fixed: This update addresses an issue that affects Windows Server domain controllers using Microsoft Defender for Endpoint. After domain controller promotion, changes to registry permissions disrupted cloud-based communication.

fix[Networking] Fixed: This update fixes an issue in the HTTP.sys request parser, a Windows component that reads and processes HTTP requests. The parser allowed a single line break within HTTP/1.1 chunk extensions, where the RFC 9112 standard requires a carriage return and line feed (CRLF) sequence…

20348.4297 Oct 23, 2025 Release notes ↗

security[Windows Server Update Services (WSUS)] Fixed: This update addresses a remote code execution (RCE) vulnerability that was identified in WSUS reporting web services. For more information about the security fix, see CVE-2025-59287.

20348.4294 Oct 14, 2025 Release notes ↗

fixFixed: An issue where some characters didn’t display correctly when using the Chinese Input Method Editor (IME).

fixFixed: This update addresses an issue where certain Chinese characters appeared as empty boxes in some text fields, such as those used in Connection Manager Administration Kit, when a character limit was set.

fix[Networking (known issue)] Fixed: This update addresses an issue where you might not be able to connect to shared files and folders if you're using the Server Message Block (SMB) v1 protocol on NetBIOS over TCP/IP NetBIOS (NetBT). This can happen after installing update KB5065432.

fix[PowerShell] Fixed: This update addresses an issue that affects PowerShell Remoting and Windows Remote Management (WinRM), where commands might time out after 10 minutes.

security[Stability issue] Fixed: This update addresses an issue observed in rare cases after installing the May 2025 security update and subsequent updates causing devices to experience stability issues. Some devices became unresponsive and stopped responding in specific scenarios.

fix[System services and reliability] Fixed: Addresses an issue that caused McpManagement service to appear without a description on Windows.

other[Compatibility] This update removes the ltmdm64.sys driver. Fax modem hardware dependent on this specific driver will no longer work in Windows.

security[Cryptography] This update enforces a security hardening improvement by requiring use of Key Storage Provider (KSP) instead of Cryptographic Service Provider {CSP) for RSA-based smart card certificates. If you experience problems with smart card authentication as a result of this design change,…

security[File Explorer] After installing this update, File Explorer automatically disables the preview feature for files downloaded from the internet. This change is designed to enhance security by preventing a vulnerability when users preview potentially unsafe files. For details, including steps to…

20348.4171 Sep 9, 2025 Release notes ↗

security[App compatibility (known issue)] Fixed: Addresses an issue that caused non-admin users to receive unexpected User Account Control (UAC) prompts when MSI installers perform certain custom actions. These actions might include configuration or repair operations in the foreground or background,…

security[File server]⁠ This update enabled auditing SMB client compatibility for SMB Server signing as well as SMB Server EPA. This allows customers to assess their environment and identify any potential device or software incompatibility issues before deploying the hardening measures that are already…

fix[Input] Fixed: This update addresses an issue with the Chinese (Simplified) Input Method Editor (IME) where some extended characters appeared as empty boxes.

fix[Performance]⁠ Fixed: This update addresses an issue where a single, oversized Certificate Revocation List (CRL) file slows down system performance. To improve speed and privacy, the system now plans to use smaller, partitioned CRLs.

20348.4052 Aug 12, 2025 Release notes ↗

fix[Input (know issue)] Fixed: An issue when using the Microsoft Changjie IME (input method editor) for Traditional Chinese might cause problems such as not being able to form or select words, unresponsive spacebar or blank key, incorrect word output, or a broken candidate window display. This can…

20348.3932 Jul 8, 2025 Release notes ↗

securitySecurity update: includes the July 2025 Security Updates

fix[DHCP Server (known issue] Fixed: An issue in which the DHCP Server service might intermittently stop responding and affects IP renewal for clients.

fix[Language and character support] Fixed: An issue that affected some Chinese characters and experienced compliance issue with GB18030. These characters didn’t display correctly or weren’t accepted when using extended Unicode. A modern ICU-based solution now properly supports GB18030-2022…

fix[Performance]⁠ Fixed: This update addresses an issue that prevented the complete removal of unused language packs and Feature on Demand packages, which previously led to unnecessary storage use and longer Windows Update installation times.

security[Microsoft RPC Netlogon protocol] This update includes a security hardening change to the Microsoft RPC Netlogon protocol. This change improves security by tightening access checks for a set of remote procedure call (RPC) requests. After this update is installed, Active Directory domain…

20348.3807 Jun 10, 2025 Release notes ↗

fixFixed: An issue where some characters appear wider than standard characters, and the sample paragraph in the font preview section doesn’t display correctly.

fixFixed: This update addresses an issue where some GB18030-2022 characters don’t display correctly within the extended Chinese character set⁠.⁠

fix[Memory leak] Fixed: This update addresses an issue in the Input Service that causes increased memory usage, potentially impacting performance in multi-user, multilingual, and remote desktop environments.

fix[Settings] Fixed: This update addresses an issue in the Settings app where turning on the "Prohibit Access to Control Panel and PC Settings" policy could make the system repeatedly restart and automatically enter repair mode.

fix[Windows Hello] Fixed: This update addresses an issue that prevents users from signing in with self-signed certificates when using Windows Hello for Business with the Key Trust model.