Windows Server 26100.32522 → 26100.33650

9 releases · 0 breaking changes · 190 security fixes · 179 advisories fixed

190security0breaking1deprecated5feature2fix

Is 26100.32522 affected?

Vulnerabilities fixed by this upgrade

9.8 CVE-2026-100202 Windows Message Queuing Queue Manager Remote Code Execution Vulnerability
7.8 CVE-2026-100215 Microsoft Graphics Component Remote Code Execution Vulnerability
9.8 CVE-2026-100219 Microsoft QUIC Remote Code Execution Vulnerability
8.8 CVE-2026-100220 Windows Media Video Decoder Remote Code Execution Vulnerability
7.0 CVE-2026-102211 Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
8.8 CVE-2026-102214 Windows Hyper-V Remote Code Execution Vulnerability
8.8 CVE-2026-102225 Windows Text Shaping Remote Code Execution Vulnerability
9.8 CVE-2026-105016 Microsoft QUIC Remote Code Execution Vulnerability
8.8 CVE-2026-105733 Windows Hyper-V Remote Code Execution Vulnerability
7.8 CVE-2026-108130 Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
7.5 CVE-2026-108131 Active Directory Federation Services (AD FS) Spoofing Vulnerability
7.2 CVE-2026-108399 Windows Hyper-V Elevation of Privilege Vulnerability
8.1 CVE-2026-108457 Microsoft Windows PDF Remote Code Execution Vulnerability
8.1 CVE-2026-108460 Windows Message Queuing Remote Code Execution Vulnerability
8.8 CVE-2026-108467 Microsoft PostScript Printer Driver Remote Code Execution Vulnerability
7.5 CVE-2026-69789 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
8.1 CVE-2026-69802 Network Device Enrollment Service (NDES) Remote Code Execution Vulnerability
9.8 CVE-2026-70147 Microsoft PostScript Printer Driver Remote Code Execution Vulnerability
9.8 CVE-2026-70153 Microsoft PostScript Printer Driver Remote Code Execution Vulnerability
8.1 CVE-2026-70187 Windows Remote Desktop Services Remote Code Execution Vulnerability
8.1 CVE-2026-70229 Windows Active Directory Domain Services Remote Code Execution Vulnerability
8.8 CVE-2026-70250 Windows DHCP Client Remote Code Execution Vulnerability
7.0 CVE-2026-83917 Windows ALPC Elevation of Privilege Vulnerability
8.8 CVE-2026-83934 Windows GDI+ Remote Code Execution Vulnerability
8.8 CVE-2026-88073 Windows Graphics Kernel Elevation of Privilege Vulnerability
8.1 CVE-2026-88117 Windows DHCP Server Remote Code Execution Vulnerability
8.1 CVE-2026-88119 Windows DHCP Server Remote Code Execution Vulnerability
8.1 CVE-2026-88120 Windows DHCP Server Remote Code Execution Vulnerability
8.1 CVE-2026-88171 Windows DHCP Server Remote Code Execution Vulnerability
8.1 CVE-2026-88174 Windows Deployment Services Remote Code Execution Vulnerability
7.4 CVE-2026-96222 Active Directory Federation Services (AD FS) Spoofing Vulnerability
8.8 CVE-2026-96913 Windows Kernel Elevation of Privilege Vulnerability
8.8 CVE-2026-96914 Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
9.8 CVE-2026-96934 Windows DHCP Server Remote Code Execution Vulnerability
8.8 CVE-2026-96951KEV Windows Shell Security Feature Bypass Vulnerability
8.8 CVE-2026-96952 Microsoft Windows Media Foundation Remote Code Execution Vulnerability
9.8 CVE-2026-97814 Windows Text Shaping Remote Code Execution Vulnerability
8.8 CVE-2026-69499 Windows Imaging Component Remote Code Execution Vulnerability
7.0 CVE-2026-69501 Windows Secure Kernel Mode Elevation of Privilege Vulnerability
8.8 CVE-2026-69518 Windows Remote Desktop Remote Code Execution Vulnerability
8.1 CVE-2026-69530 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
9.8 CVE-2026-69579 Windows Message Queuing Remote Code Execution Vulnerability
9.8 CVE-2026-69590 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
9.8 CVE-2026-69595 Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability
8.8 CVE-2026-69601 Microsoft Windows Media Foundation Remote Code Execution Vulnerability
8.8 CVE-2026-69603 Windows Hyper-V Remote Code Execution Vulnerability
8.8 CVE-2026-69676 Windows Kerberos Remote Code Execution Vulnerability
8.8 CVE-2026-69712 Windows Key Distribution Center Remote Code Execution Vulnerability
9.8 CVE-2026-69730 Windows DNS Server Remote Code Execution Vulnerability
9.8 CVE-2026-69769 Windows HTTP Print Provider Remote Code Execution Vulnerability
8.1 CVE-2026-69813 Windows DNS Server Remote Code Execution Vulnerability
8.1 CVE-2026-69827 Windows DNS Server Remote Code Execution Vulnerability
9.8 CVE-2026-69829 Windows Shell Remote Code Execution Vulnerability
9.8 CVE-2026-69845 Windows DHCP Server Remote Code Execution Vulnerability
8.2 CVE-2026-69846 Windows Secure Kernel Mode Elevation of Privilege Vulnerability
7.5 CVE-2026-69852 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
8.1 CVE-2026-69858 Windows DNS Server Remote Code Execution Vulnerability
8.8 CVE-2026-69860 Windows Imaging Component Remote Code Execution Vulnerability
8.2 CVE-2026-69874 Windows ALPC Elevation of Privilege Vulnerability
7.5 CVE-2026-69890 Windows Virtual Trusted Platform Module Elevation of Privilege Vulnerability
8.2 CVE-2026-69906 Windows Secure Kernel Mode Elevation of Privilege Vulnerability
8.8 CVE-2026-70203 Windows Media Player Remote Code Execution Vulnerability
9.8 CVE-2026-70296 Windows Imaging Component Remote Code Execution Vulnerability
7.0 CVE-2026-70585 Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability
8.8 CVE-2026-70586 Windows Paint Remote Code Execution Vulnerability
8.8 CVE-2026-72950 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
7.5 CVE-2026-72954 Windows Deployment Services Remote Code Execution Vulnerability
7.8 CVE-2026-72957 Windows Deployment Services Remote Code Execution Vulnerability
8.2 CVE-2026-72958 Windows Credential Guard Elevation of Privilege Vulnerability
8.8 CVE-2026-72959 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
8.8 CVE-2026-72960 Windows Media Player Remote Code Execution Vulnerability
8.2 CVE-2026-72961 Windows Hyper-V Elevation of Privilege Vulnerability
8.2 CVE-2026-72962 Windows USB Video Driver Elevation of Privilege Vulnerability
9.8 CVE-2026-72979 Windows DHCP Server Remote Code Execution Vulnerability
4.4 CVE-2026-72980 Windows Hello Security Feature Bypass Vulnerability
8.1 CVE-2026-72981 IP Helper Remote Code Execution Vulnerability
9.8 CVE-2026-72982 Windows Netlogon Remote Code Execution Vulnerability
9.8 CVE-2026-72983 Internet Connection Sharing (ICS) Remote Code Execution Vulnerability
8.8 CVE-2026-72986 Graphic Fonts Remote Code Execution Vulnerability
8.1 CVE-2026-72987 Windows DNS Remote Code Execution Vulnerability
8.8 CVE-2026-73006 DirectWrite Remote Code Execution Vulnerability
9.8 CVE-2026-73009 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
9.8 CVE-2026-73010 Microsoft Failover Cluster Remote Code Execution Vulnerability
8.8 CVE-2026-73013 Windows Imaging Component Remote Code Execution Vulnerability
7.5 CVE-2026-73017 Graphics Kernel Remote Code Execution Vulnerability
8.8 CVE-2026-73018 Graphic Fonts Remote Code Execution Vulnerability
8.8 CVE-2026-73023 Windows Imaging Component Remote Code Execution Vulnerability
9.8 CVE-2026-77493 Windows Graphics Component Remote Code Execution Vulnerability
8.8 CVE-2026-77495 Windows Imaging Component Remote Code Execution Vulnerability
8.8 CVE-2026-77504 Microsoft Office Word Remote Code Execution Vulnerability
8.1 CVE-2026-77505 Windows DNS Server Remote Code Execution Vulnerability
8.1 CVE-2026-78444 Microsoft Failover Cluster Remote Code Execution Vulnerability
9.8 CVE-2026-78445 Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability
8.1 CVE-2026-78449 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
8.1 CVE-2026-78450 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
8.8 CVE-2026-80083 Windows Hyper-V Remote Code Execution Vulnerability
7.5 CVE-2026-81355 Virtual Hard Disk (VHD) Miniport Driver Remote Code Execution Vulnerability
8.8 CVE-2026-81955 Windows Graphics Component Remote Code Execution Vulnerability
7.8 CVE-2026-81963KEV Windows Update Stack Elevation of Privilege Vulnerability
7.8 CVE-2026-83498 Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
5.5 CVE-2026-83501 Windows Virtualization-Based Security (VBS) Information Disclosure Vulnerability
9.8 CVE-2026-62815 Microsoft QUIC Remote Code Execution Vulnerability
8.8 CVE-2026-62816 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
8.8 CVE-2026-62817 Windows DNS Server Remote Code Execution Vulnerability
8.8 CVE-2026-62818 Windows Active Directory Certificate Services (AD CS) Remote Code Execution Vulnerability
8.1 CVE-2026-62819 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
8.1 CVE-2026-62820 Windows DNS Server Remote Code Execution Vulnerability
8.8 CVE-2026-62822 Windows GDI+ Remote Code Execution Vulnerability
8.8 CVE-2026-62823 Windows DHCP Server Remote Code Execution Vulnerability
9.8 CVE-2026-62878 Windows DNS Server Remote Code Execution Vulnerability
8.1 CVE-2026-62889 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
7.8 CVE-2026-62890 Windows GDI+ Elevation of Privilege Vulnerability
9.8 CVE-2026-62893 Windows Deployment Services TFTP Server Remote Code Execution Vulnerability
8.1 CVE-2026-65679 Windows iSCSI Target Service Remote Code Execution Vulnerability
8.1 CVE-2026-65789 Windows DNS Server Remote Code Execution Vulnerability
9.8 CVE-2026-65791 Windows iSCSI Target Service Remote Code Execution Vulnerability
8.1 CVE-2026-65796 Windows iSCSI Target Service Remote Code Execution Vulnerability
7.8 CVE-2026-66799 Windows Key Guard Elevation of Privilege Vulnerability
8.1 CVE-2026-66802 Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability
7.0 CVE-2026-68820KEV Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
8.1 CVE-2026-71331 Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability
7.8 CVE-2026-42982 Windows Secure Kernel Mode Elevation of Privilege Vulnerability
8.8 CVE-2026-48564 DHCP Server Service Remote Code Execution Vulnerability
8.1 CVE-2026-49164 Windows Active Directory Domain Services Remote Code Execution Vulnerability
7.8 CVE-2026-49796 Windows GDI+ Remote Code Execution Vulnerability
7.8 CVE-2026-50327 Windows Media Remote Code Execution Vulnerability
8.8 CVE-2026-50370 DHCP Server Service Remote Code Execution Vulnerability
9.6 CVE-2026-50380 Windows GDI+ Remote Code Execution Vulnerability
8.8 CVE-2026-50382 DirectX Graphics Kernel Remote Code Execution Vulnerability
7.0 CVE-2026-50392 Windows Secure Kernel Mode Elevation of Privilege Vulnerability
8.8 CVE-2026-50444 Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability
8.8 CVE-2026-50474 Remote Desktop Client Remote Code Execution Vulnerability
9.8 CVE-2026-50518 Windows DHCP Server Remote Code Execution Vulnerability
7.8 CVE-2026-50655 Microsoft Windows Media Foundation Remote Code Execution Vulnerability
8.2 CVE-2026-50680 Windows Hyper-V Elevation of Privilege Vulnerability
8.1 CVE-2026-50694 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
8.8 CVE-2026-54121 Active Directory Certificate Services Elevation of Privilege Vulnerability
7.4 CVE-2026-54127 Windows Hyper-V Elevation of Privilege Vulnerability
8.4 CVE-2026-54128 Windows DHCP Client Remote Code Execution Vulnerability
8.8 CVE-2026-54982 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
8.4 CVE-2026-54992 Microsoft Message Queuing Queue Manager Remote Code Execution Vulnerability
8.1 CVE-2026-54995 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
8.8 CVE-2026-54999 Windows TCP/IP Remote Code Execution Vulnerability
7.8 CVE-2026-56155KEV Active Directory Federation Services Elevation of Privilege Vulnerability
9.8 CVE-2026-56159 DHCP Server Service Remote Code Execution Vulnerability
9.8 CVE-2026-56188 Windows Server Network driver Remote Code Execution Vulnerability
7.8 CVE-2026-56189 Microsoft Windows Media Foundation Remote Code Execution Vulnerability
8.8 CVE-2026-57087 Microsoft Windows Media Foundation Remote Code Execution Vulnerability
8.8 CVE-2026-57090 Microsoft Windows Media Foundation Remote Code Execution Vulnerability
9.9 CVE-2026-57092 Microsoft Windows VMSwitch Elevation of Privilege Vulnerability
8.8 CVE-2026-57094 Microsoft Windows Media Foundation Remote Code Execution Vulnerability
7.8 CVE-2026-58542 Windows Media Remote Code Execution Vulnerability
8.8 CVE-2026-58608 Windows Print Spooler Remote Code Execution Vulnerability
7.8 CVE-2026-33828 Windows Device Health Attestation (DHA) Elevation of Privilege Vulnerability
8.8 CVE-2026-42985 Remote Desktop Client Remote Code Execution Vulnerability
8.1 CVE-2026-42987 Windows Deployment Services (WDS) Remote Code Execution
7.5 CVE-2026-42992 Remote Desktop Client Remote Code Execution Vulnerability
7.5 CVE-2026-44799 Remote Desktop Client Remote Code Execution Vulnerability
7.5 CVE-2026-44801 Remote Desktop Client Remote Code Execution Vulnerability
7.8 CVE-2026-44803 Windows Graphics Component Remote Code Execution Vulnerability
8.4 CVE-2026-44810 Microsoft Cryptographic Services Elevation of Privilege Vulnerability
7.8 CVE-2026-44812 Windows Graphics Component Remote Code Execution Vulnerability
9.8 CVE-2026-44815 DHCP Client Service Remote Code Execution Vulnerability
8.4 CVE-2026-45607 Windows Hyper-V Remote Code Execution Vulnerability
8.4 CVE-2026-45641 Windows Hyper-V Remote Code Execution Vulnerability
8.8 CVE-2026-45648 Windows Active Directory Domain Services Remote Code Execution Vulnerability
9.8 CVE-2026-45657 Windows Kernel Remote Code Execution Vulnerability
7.1 CVE-2026-47288 Windows Kerberos Key Distribution Center (KDC) Remote Code Execution
8.8 CVE-2026-47289 Remote Desktop Client Remote Code Execution Vulnerability
9.8 CVE-2026-47291 HTTP.sys Remote Code Execution Vulnerability
8.2 CVE-2026-47652 Windows Hyper-V Remote Code Execution Vulnerability
7.5 CVE-2026-47654 Remote Desktop Client Remote Code Execution Vulnerability
7.5 CVE-2026-48563 Remote Desktop Client Remote Code Execution Vulnerability
7.8 CVE-2026-48574 Windows Media Remote Code Execution Vulnerability
7.5 CVE-2026-32161 Windows Native WiFi Miniport Driver Remote Code Execution Vulnerability
7.8 CVE-2026-35421 Windows GDI Remote Code Execution Vulnerability
8.8 CVE-2026-40403 Windows Graphics Component Remote Code Execution Vulnerability
9.8 CVE-2026-41089 Windows Netlogon Remote Code Execution Vulnerability
9.8 CVE-2026-41096 Windows DNS Client Remote Code Execution Vulnerability

Breaking changes

None in the release notes.

Security changes

security Fixes CVE-2026-96951: Windows Shell Security Feature Bypass Vulnerability in 26100.33650
security Fixes CVE-2026-100202: Windows Message Queuing Queue Manager Remote Code Execution Vulnerability in 26100.33650
security Fixes CVE-2026-100219: Microsoft QUIC Remote Code Execution Vulnerability in 26100.33650
security Fixes CVE-2026-105016: Microsoft QUIC Remote Code Execution Vulnerability in 26100.33650
security Fixes CVE-2026-70147: Microsoft PostScript Printer Driver Remote Code Execution Vulnerability in 26100.33650
security Fixes CVE-2026-70153: Microsoft PostScript Printer Driver Remote Code Execution Vulnerability in 26100.33650
security Fixes CVE-2026-96934: Windows DHCP Server Remote Code Execution Vulnerability in 26100.33650
security Fixes CVE-2026-97814: Windows Text Shaping Remote Code Execution Vulnerability in 26100.33650
security Fixes CVE-2026-100220: Windows Media Video Decoder Remote Code Execution Vulnerability in 26100.33650
security Fixes CVE-2026-102214: Windows Hyper-V Remote Code Execution Vulnerability in 26100.33650
security Fixes CVE-2026-102225: Windows Text Shaping Remote Code Execution Vulnerability in 26100.33650
security Fixes CVE-2026-105733: Windows Hyper-V Remote Code Execution Vulnerability in 26100.33650
security Fixes CVE-2026-108467: Microsoft PostScript Printer Driver Remote Code Execution Vulnerability in 26100.33650
security Fixes CVE-2026-70250: Windows DHCP Client Remote Code Execution Vulnerability in 26100.33650
security Fixes CVE-2026-83934: Windows GDI+ Remote Code Execution Vulnerability in 26100.33650
security Fixes CVE-2026-88073: Windows Graphics Kernel Elevation of Privilege Vulnerability in 26100.33650
security Fixes CVE-2026-96913: Windows Kernel Elevation of Privilege Vulnerability in 26100.33650
security Fixes CVE-2026-96914: Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability in 26100.33650
security Fixes CVE-2026-96952: Microsoft Windows Media Foundation Remote Code Execution Vulnerability in 26100.33650
security Fixes CVE-2026-108457: Microsoft Windows PDF Remote Code Execution Vulnerability in 26100.33650
security Fixes CVE-2026-108460: Windows Message Queuing Remote Code Execution Vulnerability in 26100.33650
security Fixes CVE-2026-69802: Network Device Enrollment Service (NDES) Remote Code Execution Vulnerability in 26100.33650
security Fixes CVE-2026-70187: Windows Remote Desktop Services Remote Code Execution Vulnerability in 26100.33650
security Fixes CVE-2026-70229: Windows Active Directory Domain Services Remote Code Execution Vulnerability in 26100.33650
security Fixes CVE-2026-88117: Windows DHCP Server Remote Code Execution Vulnerability in 26100.33650
security Fixes CVE-2026-88119: Windows DHCP Server Remote Code Execution Vulnerability in 26100.33650
security Fixes CVE-2026-88120: Windows DHCP Server Remote Code Execution Vulnerability in 26100.33650
security Fixes CVE-2026-88171: Windows DHCP Server Remote Code Execution Vulnerability in 26100.33650
security Fixes CVE-2026-88174: Windows Deployment Services Remote Code Execution Vulnerability in 26100.33650
security Fixes CVE-2026-100215: Microsoft Graphics Component Remote Code Execution Vulnerability in 26100.33650
security Fixes CVE-2026-108130: Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability in 26100.33650
security Fixes CVE-2026-108131: Active Directory Federation Services (AD FS) Spoofing Vulnerability in 26100.33650
security Fixes CVE-2026-96222: Active Directory Federation Services (AD FS) Spoofing Vulnerability in 26100.33650
security Fixes CVE-2026-108399: Windows Hyper-V Elevation of Privilege Vulnerability in 26100.33650
security Fixes CVE-2026-102211: Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability in 26100.33650
security Fixes CVE-2026-83917: Windows ALPC Elevation of Privilege Vulnerability in 26100.33650
security Security update: includes the October 2026 Security Updates in 26100.33650
security [ReFS security] This update adds auditing and optional policy controls for ReFS volumes on externally attached storage devices. Auditing is enabled by default, while enforcement controls remain disabled by default to give administrators time to evaluate and prepare for future security hardening… in 26100.33650
security [Security] This update adds support for ML-KEM post-quantum key exchange in Transport Layer Security (TLS) 1.3, helping protect encrypted connections against future quantum-computing threats. in 26100.33650
security [Security] This update upgrades the version of cURL included with Windows to version 8.21.0. in 26100.33650
security [Emoji] This update improves security for emoji search in the Expressive Input Panel by updating the libraries used by EmojiSearchData. in 26100.33650
security [Distributed Key Manager (DKM)] This update automatically remediates insecure DKM container ACL configurations in AD FS by default. Administrators can opt out of automatic remediation by setting RemediateDkmAcl to 0. This change helps address an elevation of privilege vulnerability that can occur… in 26100.33650
security [Remote Desktop Services (known issue)] Fixed: This update addresses an issue affecting Remote Desktop Services (RDS) after installing the September 2026 Windows security update (KB5122871). In affected environments, RDS might become unstable, causing RDP connection and sign-in failures or servers… in 26100.33451
security Fixes CVE-2026-81963: Windows Update Stack Elevation of Privilege Vulnerability in 26100.33438
security Fixes CVE-2026-69579: Windows Message Queuing Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-69590: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-69595: Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-69730: Windows DNS Server Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-69769: Windows HTTP Print Provider Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-69829: Windows Shell Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-69845: Windows DHCP Server Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-70296: Windows Imaging Component Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-72979: Windows DHCP Server Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-72982: Windows Netlogon Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-72983: Internet Connection Sharing (ICS) Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-73009: Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-73010: Microsoft Failover Cluster Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-77493: Windows Graphics Component Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-78445: Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-69499: Windows Imaging Component Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-69518: Windows Remote Desktop Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-69601: Microsoft Windows Media Foundation Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-69603: Windows Hyper-V Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-69676: Windows Kerberos Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-69712: Windows Key Distribution Center Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-69860: Windows Imaging Component Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-70203: Windows Media Player Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-70586: Windows Paint Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-72950: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-72959: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-72960: Windows Media Player Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-72986: Graphic Fonts Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-73006: DirectWrite Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-73013: Windows Imaging Component Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-73018: Graphic Fonts Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-73023: Windows Imaging Component Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-77495: Windows Imaging Component Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-77504: Microsoft Office Word Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-80083: Windows Hyper-V Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-81955: Windows Graphics Component Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-69846: Windows Secure Kernel Mode Elevation of Privilege Vulnerability in 26100.33438
security Fixes CVE-2026-69874: Windows ALPC Elevation of Privilege Vulnerability in 26100.33438
security Fixes CVE-2026-69906: Windows Secure Kernel Mode Elevation of Privilege Vulnerability in 26100.33438
security Fixes CVE-2026-72958: Windows Credential Guard Elevation of Privilege Vulnerability in 26100.33438
security Fixes CVE-2026-72961: Windows Hyper-V Elevation of Privilege Vulnerability in 26100.33438
security Fixes CVE-2026-72962: Windows USB Video Driver Elevation of Privilege Vulnerability in 26100.33438
security Fixes CVE-2026-69530: Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-69813: Windows DNS Server Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-69827: Windows DNS Server Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-69858: Windows DNS Server Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-72981: IP Helper Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-72987: Windows DNS Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-77505: Windows DNS Server Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-78444: Microsoft Failover Cluster Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-78449: Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-78450: Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-72957: Windows Deployment Services Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-83498: Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability in 26100.33438
security Fixes CVE-2026-69789: Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-69852: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-69890: Windows Virtual Trusted Platform Module Elevation of Privilege Vulnerability in 26100.33438
security Fixes CVE-2026-72954: Windows Deployment Services Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-73017: Graphics Kernel Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-81355: Virtual Hard Disk (VHD) Miniport Driver Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-69501: Windows Secure Kernel Mode Elevation of Privilege Vulnerability in 26100.33438
security Fixes CVE-2026-70585: Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-83501: Windows Virtualization-Based Security (VBS) Information Disclosure Vulnerability in 26100.33438
security Fixes CVE-2026-72980: Windows Hello Security Feature Bypass Vulnerability in 26100.33438
security Security update: includes the September 2026 Security Updates in 26100.33438
security Fixes CVE-2026-68820: Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability in 26100.33296
security Fixes CVE-2026-62815: Microsoft QUIC Remote Code Execution Vulnerability in 26100.33296
security Fixes CVE-2026-62878: Windows DNS Server Remote Code Execution Vulnerability in 26100.33296
security Fixes CVE-2026-62893: Windows Deployment Services TFTP Server Remote Code Execution Vulnerability in 26100.33296
security Fixes CVE-2026-65791: Windows iSCSI Target Service Remote Code Execution Vulnerability in 26100.33296
security Fixes CVE-2026-62816: Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability in 26100.33296
security Fixes CVE-2026-62817: Windows DNS Server Remote Code Execution Vulnerability in 26100.33296
security Fixes CVE-2026-62818: Windows Active Directory Certificate Services (AD CS) Remote Code Execution Vulnerability in 26100.33296
security Fixes CVE-2026-62822: Windows GDI+ Remote Code Execution Vulnerability in 26100.33296
security Fixes CVE-2026-62823: Windows DHCP Server Remote Code Execution Vulnerability in 26100.33296
security Fixes CVE-2026-62819: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability in 26100.33296
security Fixes CVE-2026-62820: Windows DNS Server Remote Code Execution Vulnerability in 26100.33296
security Fixes CVE-2026-62889: Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability in 26100.33296
security Fixes CVE-2026-65679: Windows iSCSI Target Service Remote Code Execution Vulnerability in 26100.33296
security Fixes CVE-2026-65789: Windows DNS Server Remote Code Execution Vulnerability in 26100.33296
security Fixes CVE-2026-65796: Windows iSCSI Target Service Remote Code Execution Vulnerability in 26100.33296
security Fixes CVE-2026-66802: Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability in 26100.33296
security Fixes CVE-2026-71331: Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability in 26100.33296
security Fixes CVE-2026-62890: Windows GDI+ Elevation of Privilege Vulnerability in 26100.33296
security Fixes CVE-2026-66799: Windows Key Guard Elevation of Privilege Vulnerability in 26100.33296
security Security update: includes the August 2026 Security Updates in 26100.33296
security Fixes CVE-2026-56155: Active Directory Federation Services Elevation of Privilege Vulnerability in 26100.33158
security Fixes CVE-2026-57092: Microsoft Windows VMSwitch Elevation of Privilege Vulnerability in 26100.33158
security Fixes CVE-2026-50518: Windows DHCP Server Remote Code Execution Vulnerability in 26100.33158
security Fixes CVE-2026-56159: DHCP Server Service Remote Code Execution Vulnerability in 26100.33158
security Fixes CVE-2026-56188: Windows Server Network driver Remote Code Execution Vulnerability in 26100.33158
security Fixes CVE-2026-50380: Windows GDI+ Remote Code Execution Vulnerability in 26100.33158
security Fixes CVE-2026-48564: DHCP Server Service Remote Code Execution Vulnerability in 26100.33158
security Fixes CVE-2026-50370: DHCP Server Service Remote Code Execution Vulnerability in 26100.33158
security Fixes CVE-2026-50382: DirectX Graphics Kernel Remote Code Execution Vulnerability in 26100.33158
security Fixes CVE-2026-50444: Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability in 26100.33158
security Fixes CVE-2026-50474: Remote Desktop Client Remote Code Execution Vulnerability in 26100.33158
security Fixes CVE-2026-54121: Active Directory Certificate Services Elevation of Privilege Vulnerability in 26100.33158
security Fixes CVE-2026-54982: Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability in 26100.33158
security Fixes CVE-2026-54999: Windows TCP/IP Remote Code Execution Vulnerability in 26100.33158
security Fixes CVE-2026-57087: Microsoft Windows Media Foundation Remote Code Execution Vulnerability in 26100.33158
security Fixes CVE-2026-57090: Microsoft Windows Media Foundation Remote Code Execution Vulnerability in 26100.33158
security Fixes CVE-2026-57094: Microsoft Windows Media Foundation Remote Code Execution Vulnerability in 26100.33158
security Fixes CVE-2026-58608: Windows Print Spooler Remote Code Execution Vulnerability in 26100.33158
security Fixes CVE-2026-54128: Windows DHCP Client Remote Code Execution Vulnerability in 26100.33158
security Fixes CVE-2026-54992: Microsoft Message Queuing Queue Manager Remote Code Execution Vulnerability in 26100.33158
security Fixes CVE-2026-50680: Windows Hyper-V Elevation of Privilege Vulnerability in 26100.33158
security Fixes CVE-2026-49164: Windows Active Directory Domain Services Remote Code Execution Vulnerability in 26100.33158
security Fixes CVE-2026-50694: Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability in 26100.33158
security Fixes CVE-2026-54995: Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability in 26100.33158
security Fixes CVE-2026-42982: Windows Secure Kernel Mode Elevation of Privilege Vulnerability in 26100.33158
security Fixes CVE-2026-49796: Windows GDI+ Remote Code Execution Vulnerability in 26100.33158
security Fixes CVE-2026-50327: Windows Media Remote Code Execution Vulnerability in 26100.33158
security Fixes CVE-2026-50655: Microsoft Windows Media Foundation Remote Code Execution Vulnerability in 26100.33158
security Fixes CVE-2026-56189: Microsoft Windows Media Foundation Remote Code Execution Vulnerability in 26100.33158
security Fixes CVE-2026-58542: Windows Media Remote Code Execution Vulnerability in 26100.33158
security Fixes CVE-2026-54127: Windows Hyper-V Elevation of Privilege Vulnerability in 26100.33158
security Fixes CVE-2026-50392: Windows Secure Kernel Mode Elevation of Privilege Vulnerability in 26100.33158
security Fixes CVE-2026-44815: DHCP Client Service Remote Code Execution Vulnerability in 26100.32995
security Fixes CVE-2026-45657: Windows Kernel Remote Code Execution Vulnerability in 26100.32995
security Fixes CVE-2026-47291: HTTP.sys Remote Code Execution Vulnerability in 26100.32995
security Fixes CVE-2026-42985: Remote Desktop Client Remote Code Execution Vulnerability in 26100.32995
security Fixes CVE-2026-45648: Windows Active Directory Domain Services Remote Code Execution Vulnerability in 26100.32995
security Fixes CVE-2026-47289: Remote Desktop Client Remote Code Execution Vulnerability in 26100.32995
security Fixes CVE-2026-44810: Microsoft Cryptographic Services Elevation of Privilege Vulnerability in 26100.32995
security Fixes CVE-2026-45607: Windows Hyper-V Remote Code Execution Vulnerability in 26100.32995
security Fixes CVE-2026-45641: Windows Hyper-V Remote Code Execution Vulnerability in 26100.32995
security Fixes CVE-2026-47652: Windows Hyper-V Remote Code Execution Vulnerability in 26100.32995
security Fixes CVE-2026-42987: Windows Deployment Services (WDS) Remote Code Execution in 26100.32995
security Fixes CVE-2026-33828: Windows Device Health Attestation (DHA) Elevation of Privilege Vulnerability in 26100.32995
security Fixes CVE-2026-44803: Windows Graphics Component Remote Code Execution Vulnerability in 26100.32995
security Fixes CVE-2026-44812: Windows Graphics Component Remote Code Execution Vulnerability in 26100.32995
security Fixes CVE-2026-48574: Windows Media Remote Code Execution Vulnerability in 26100.32995
security Fixes CVE-2026-42992: Remote Desktop Client Remote Code Execution Vulnerability in 26100.32995
security Fixes CVE-2026-44799: Remote Desktop Client Remote Code Execution Vulnerability in 26100.32995
security Fixes CVE-2026-44801: Remote Desktop Client Remote Code Execution Vulnerability in 26100.32995
security Fixes CVE-2026-47654: Remote Desktop Client Remote Code Execution Vulnerability in 26100.32995
security Fixes CVE-2026-48563: Remote Desktop Client Remote Code Execution Vulnerability in 26100.32995
security Fixes CVE-2026-47288: Windows Kerberos Key Distribution Center (KDC) Remote Code Execution in 26100.32995
security Fixes CVE-2026-41089: Windows Netlogon Remote Code Execution Vulnerability in 26100.32860
security Fixes CVE-2026-41096: Windows DNS Client Remote Code Execution Vulnerability in 26100.32860
security Fixes CVE-2026-40403: Windows Graphics Component Remote Code Execution Vulnerability in 26100.32860
security Fixes CVE-2026-35421: Windows GDI Remote Code Execution Vulnerability in 26100.32860
security Fixes CVE-2026-32161: Windows Native WiFi Miniport Driver Remote Code Execution Vulnerability in 26100.32860
security [Active Directory] Fixed: After installing the April 2026 Windows security update and restarting, domain controllers (DCs) with multi-domain forests that use Privileged Access Management (PAM), might experience startup issues. In some cases, Local Security Authority Subsystem Service (LSASS) might… in 26100.32698
security [Windows update installation] Fixed: A small number of Windows Server 2025 devices might fail to install the April 14, 2026, Windows security update (KB5082063). When this issue occurs, affected devices might display one of the following error messages: “Install error: 0x800F0983” or “Some update… in 26100.32698

Deprecations

deprecated [Emoji Panel] The emoji panel (Windows key + period (.)) now supports GIPHY following the deprecation of Google's Tenor API. in 26100.33296

Every release in between

26100.33650 Oct 13, 2026 Release notes ↗

securityFixes CVE-2026-96951: Windows Shell Security Feature Bypass Vulnerability

securityFixes CVE-2026-100202: Windows Message Queuing Queue Manager Remote Code Execution Vulnerability

securityFixes CVE-2026-100219: Microsoft QUIC Remote Code Execution Vulnerability

securityFixes CVE-2026-105016: Microsoft QUIC Remote Code Execution Vulnerability

securityFixes CVE-2026-70147: Microsoft PostScript Printer Driver Remote Code Execution Vulnerability

securityFixes CVE-2026-70153: Microsoft PostScript Printer Driver Remote Code Execution Vulnerability

securityFixes CVE-2026-96934: Windows DHCP Server Remote Code Execution Vulnerability

securityFixes CVE-2026-97814: Windows Text Shaping Remote Code Execution Vulnerability

securityFixes CVE-2026-100220: Windows Media Video Decoder Remote Code Execution Vulnerability

securityFixes CVE-2026-102214: Windows Hyper-V Remote Code Execution Vulnerability

securityFixes CVE-2026-102225: Windows Text Shaping Remote Code Execution Vulnerability

securityFixes CVE-2026-105733: Windows Hyper-V Remote Code Execution Vulnerability

securityFixes CVE-2026-108467: Microsoft PostScript Printer Driver Remote Code Execution Vulnerability

securityFixes CVE-2026-70250: Windows DHCP Client Remote Code Execution Vulnerability

securityFixes CVE-2026-83934: Windows GDI+ Remote Code Execution Vulnerability

securityFixes CVE-2026-88073: Windows Graphics Kernel Elevation of Privilege Vulnerability

securityFixes CVE-2026-96913: Windows Kernel Elevation of Privilege Vulnerability

securityFixes CVE-2026-96914: Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability

securityFixes CVE-2026-96952: Microsoft Windows Media Foundation Remote Code Execution Vulnerability

securityFixes CVE-2026-108457: Microsoft Windows PDF Remote Code Execution Vulnerability

securityFixes CVE-2026-108460: Windows Message Queuing Remote Code Execution Vulnerability

securityFixes CVE-2026-69802: Network Device Enrollment Service (NDES) Remote Code Execution Vulnerability

securityFixes CVE-2026-70187: Windows Remote Desktop Services Remote Code Execution Vulnerability

securityFixes CVE-2026-70229: Windows Active Directory Domain Services Remote Code Execution Vulnerability

securityFixes CVE-2026-88117: Windows DHCP Server Remote Code Execution Vulnerability

securityFixes CVE-2026-88119: Windows DHCP Server Remote Code Execution Vulnerability

securityFixes CVE-2026-88120: Windows DHCP Server Remote Code Execution Vulnerability

securityFixes CVE-2026-88171: Windows DHCP Server Remote Code Execution Vulnerability

securityFixes CVE-2026-88174: Windows Deployment Services Remote Code Execution Vulnerability

securityFixes CVE-2026-100215: Microsoft Graphics Component Remote Code Execution Vulnerability

securityFixes CVE-2026-108130: Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability

securityFixes CVE-2026-108131: Active Directory Federation Services (AD FS) Spoofing Vulnerability

securityFixes CVE-2026-96222: Active Directory Federation Services (AD FS) Spoofing Vulnerability

securityFixes CVE-2026-108399: Windows Hyper-V Elevation of Privilege Vulnerability

securityFixes CVE-2026-102211: Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability

securityFixes CVE-2026-83917: Windows ALPC Elevation of Privilege Vulnerability

securitySecurity update: includes the October 2026 Security Updates

feature[Quick machine recovery] New! Quick machine recovery is now supported on Windows Server 2025. During outages, Quick machine recovery helps recover devices from critical boot failures by using Windows Recovery Environment (WinRE) to find and apply targeted remediations from Windows Update. The…

security[ReFS security] This update adds auditing and optional policy controls for ReFS volumes on externally attached storage devices. Auditing is enabled by default, while enforcement controls remain disabled by default to give administrators time to evaluate and prepare for future security hardening…

security[Security] This update adds support for ML-KEM post-quantum key exchange in Transport Layer Security (TLS) 1.3, helping protect encrypted connections against future quantum-computing threats.

+9 more items in the release notes

26100.33451 Sep 14, 2026 Release notes ↗

security[Remote Desktop Services (known issue)] Fixed: This update addresses an issue affecting Remote Desktop Services (RDS) after installing the September 2026 Windows security update (KB5122871). In affected environments, RDS might become unstable, causing RDP connection and sign-in failures or servers…

fix[8-channel or 3D audio modes] Fixed: Some USB Audio Class 1.0 devices functioning as expected in standard stereo configurations failed when using multichannel audio features, including 8-channel or 3D audio modes. (Note: There are other audio symptoms not resolved in this OOB update. See the…

26100.33438 Sep 8, 2026 Release notes ↗

securityFixes CVE-2026-81963: Windows Update Stack Elevation of Privilege Vulnerability

securityFixes CVE-2026-69579: Windows Message Queuing Remote Code Execution Vulnerability

securityFixes CVE-2026-69590: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

securityFixes CVE-2026-69595: Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability

securityFixes CVE-2026-69730: Windows DNS Server Remote Code Execution Vulnerability

securityFixes CVE-2026-69769: Windows HTTP Print Provider Remote Code Execution Vulnerability

securityFixes CVE-2026-69829: Windows Shell Remote Code Execution Vulnerability

securityFixes CVE-2026-69845: Windows DHCP Server Remote Code Execution Vulnerability

securityFixes CVE-2026-70296: Windows Imaging Component Remote Code Execution Vulnerability

securityFixes CVE-2026-72979: Windows DHCP Server Remote Code Execution Vulnerability

securityFixes CVE-2026-72982: Windows Netlogon Remote Code Execution Vulnerability

securityFixes CVE-2026-72983: Internet Connection Sharing (ICS) Remote Code Execution Vulnerability

securityFixes CVE-2026-73009: Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

securityFixes CVE-2026-73010: Microsoft Failover Cluster Remote Code Execution Vulnerability

securityFixes CVE-2026-77493: Windows Graphics Component Remote Code Execution Vulnerability

securityFixes CVE-2026-78445: Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability

securityFixes CVE-2026-69499: Windows Imaging Component Remote Code Execution Vulnerability

securityFixes CVE-2026-69518: Windows Remote Desktop Remote Code Execution Vulnerability

securityFixes CVE-2026-69601: Microsoft Windows Media Foundation Remote Code Execution Vulnerability

securityFixes CVE-2026-69603: Windows Hyper-V Remote Code Execution Vulnerability

securityFixes CVE-2026-69676: Windows Kerberos Remote Code Execution Vulnerability

securityFixes CVE-2026-69712: Windows Key Distribution Center Remote Code Execution Vulnerability

securityFixes CVE-2026-69860: Windows Imaging Component Remote Code Execution Vulnerability

securityFixes CVE-2026-70203: Windows Media Player Remote Code Execution Vulnerability

securityFixes CVE-2026-70586: Windows Paint Remote Code Execution Vulnerability

securityFixes CVE-2026-72950: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

securityFixes CVE-2026-72959: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

securityFixes CVE-2026-72960: Windows Media Player Remote Code Execution Vulnerability

securityFixes CVE-2026-72986: Graphic Fonts Remote Code Execution Vulnerability

securityFixes CVE-2026-73006: DirectWrite Remote Code Execution Vulnerability

securityFixes CVE-2026-73013: Windows Imaging Component Remote Code Execution Vulnerability

securityFixes CVE-2026-73018: Graphic Fonts Remote Code Execution Vulnerability

securityFixes CVE-2026-73023: Windows Imaging Component Remote Code Execution Vulnerability

securityFixes CVE-2026-77495: Windows Imaging Component Remote Code Execution Vulnerability

securityFixes CVE-2026-77504: Microsoft Office Word Remote Code Execution Vulnerability

securityFixes CVE-2026-80083: Windows Hyper-V Remote Code Execution Vulnerability

securityFixes CVE-2026-81955: Windows Graphics Component Remote Code Execution Vulnerability

securityFixes CVE-2026-69846: Windows Secure Kernel Mode Elevation of Privilege Vulnerability

securityFixes CVE-2026-69874: Windows ALPC Elevation of Privilege Vulnerability

securityFixes CVE-2026-69906: Windows Secure Kernel Mode Elevation of Privilege Vulnerability

+34 more items in the release notes

26100.33296 Aug 11, 2026 Release notes ↗

securityFixes CVE-2026-68820: Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

securityFixes CVE-2026-62815: Microsoft QUIC Remote Code Execution Vulnerability

securityFixes CVE-2026-62878: Windows DNS Server Remote Code Execution Vulnerability

securityFixes CVE-2026-62893: Windows Deployment Services TFTP Server Remote Code Execution Vulnerability

securityFixes CVE-2026-65791: Windows iSCSI Target Service Remote Code Execution Vulnerability

securityFixes CVE-2026-62816: Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability

securityFixes CVE-2026-62817: Windows DNS Server Remote Code Execution Vulnerability

securityFixes CVE-2026-62818: Windows Active Directory Certificate Services (AD CS) Remote Code Execution Vulnerability

securityFixes CVE-2026-62822: Windows GDI+ Remote Code Execution Vulnerability

securityFixes CVE-2026-62823: Windows DHCP Server Remote Code Execution Vulnerability

securityFixes CVE-2026-62819: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

securityFixes CVE-2026-62820: Windows DNS Server Remote Code Execution Vulnerability

securityFixes CVE-2026-62889: Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

securityFixes CVE-2026-65679: Windows iSCSI Target Service Remote Code Execution Vulnerability

securityFixes CVE-2026-65789: Windows DNS Server Remote Code Execution Vulnerability

securityFixes CVE-2026-65796: Windows iSCSI Target Service Remote Code Execution Vulnerability

securityFixes CVE-2026-66802: Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability

securityFixes CVE-2026-71331: Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability

securityFixes CVE-2026-62890: Windows GDI+ Elevation of Privilege Vulnerability

securityFixes CVE-2026-66799: Windows Key Guard Elevation of Privilege Vulnerability

securitySecurity update: includes the August 2026 Security Updates

other[File Explorer] This update improves File Explorer for files stored on DFS mapped drives, helping previews and copied files work as expected after reconnecting to the network.

feature[Windows] This update improves support for post‑quantum cryptography (PQC) certificates by restoring PQC options during Certificate Authority configuration and enabling successful enrollment with newly created PQC certificate templates.

feature[Secure Boot] This update includes additional high confidence device targeting data, increasing coverage of devices eligible to automatically receive new Secure Boot certificates. Certificate deployment via Windows updates continues across supported PCs and non-managed business devices in the…

deprecated[Emoji Panel] The emoji panel (Windows key + period (.)) now supports GIPHY following the deprecation of Google's Tenor API.

26100.33158 Jul 14, 2026 Release notes ↗

securityFixes CVE-2026-56155: Active Directory Federation Services Elevation of Privilege Vulnerability

securityFixes CVE-2026-57092: Microsoft Windows VMSwitch Elevation of Privilege Vulnerability

securityFixes CVE-2026-50518: Windows DHCP Server Remote Code Execution Vulnerability

securityFixes CVE-2026-56159: DHCP Server Service Remote Code Execution Vulnerability

securityFixes CVE-2026-56188: Windows Server Network driver Remote Code Execution Vulnerability

securityFixes CVE-2026-50380: Windows GDI+ Remote Code Execution Vulnerability

securityFixes CVE-2026-48564: DHCP Server Service Remote Code Execution Vulnerability

securityFixes CVE-2026-50370: DHCP Server Service Remote Code Execution Vulnerability

securityFixes CVE-2026-50382: DirectX Graphics Kernel Remote Code Execution Vulnerability

securityFixes CVE-2026-50444: Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability

securityFixes CVE-2026-50474: Remote Desktop Client Remote Code Execution Vulnerability

securityFixes CVE-2026-54121: Active Directory Certificate Services Elevation of Privilege Vulnerability

securityFixes CVE-2026-54982: Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability

securityFixes CVE-2026-54999: Windows TCP/IP Remote Code Execution Vulnerability

securityFixes CVE-2026-57087: Microsoft Windows Media Foundation Remote Code Execution Vulnerability

securityFixes CVE-2026-57090: Microsoft Windows Media Foundation Remote Code Execution Vulnerability

securityFixes CVE-2026-57094: Microsoft Windows Media Foundation Remote Code Execution Vulnerability

securityFixes CVE-2026-58608: Windows Print Spooler Remote Code Execution Vulnerability

securityFixes CVE-2026-54128: Windows DHCP Client Remote Code Execution Vulnerability

securityFixes CVE-2026-54992: Microsoft Message Queuing Queue Manager Remote Code Execution Vulnerability

securityFixes CVE-2026-50680: Windows Hyper-V Elevation of Privilege Vulnerability

securityFixes CVE-2026-49164: Windows Active Directory Domain Services Remote Code Execution Vulnerability

securityFixes CVE-2026-50694: Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

securityFixes CVE-2026-54995: Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability

securityFixes CVE-2026-42982: Windows Secure Kernel Mode Elevation of Privilege Vulnerability

securityFixes CVE-2026-49796: Windows GDI+ Remote Code Execution Vulnerability

securityFixes CVE-2026-50327: Windows Media Remote Code Execution Vulnerability

securityFixes CVE-2026-50655: Microsoft Windows Media Foundation Remote Code Execution Vulnerability

securityFixes CVE-2026-56189: Microsoft Windows Media Foundation Remote Code Execution Vulnerability

securityFixes CVE-2026-58542: Windows Media Remote Code Execution Vulnerability

securityFixes CVE-2026-54127: Windows Hyper-V Elevation of Privilege Vulnerability

securityFixes CVE-2026-50392: Windows Secure Kernel Mode Elevation of Privilege Vulnerability

26100.32995 Jun 9, 2026 Release notes ↗

securityFixes CVE-2026-44815: DHCP Client Service Remote Code Execution Vulnerability

securityFixes CVE-2026-45657: Windows Kernel Remote Code Execution Vulnerability

securityFixes CVE-2026-47291: HTTP.sys Remote Code Execution Vulnerability

securityFixes CVE-2026-42985: Remote Desktop Client Remote Code Execution Vulnerability

securityFixes CVE-2026-45648: Windows Active Directory Domain Services Remote Code Execution Vulnerability

securityFixes CVE-2026-47289: Remote Desktop Client Remote Code Execution Vulnerability

securityFixes CVE-2026-44810: Microsoft Cryptographic Services Elevation of Privilege Vulnerability

securityFixes CVE-2026-45607: Windows Hyper-V Remote Code Execution Vulnerability

securityFixes CVE-2026-45641: Windows Hyper-V Remote Code Execution Vulnerability

securityFixes CVE-2026-47652: Windows Hyper-V Remote Code Execution Vulnerability

securityFixes CVE-2026-42987: Windows Deployment Services (WDS) Remote Code Execution

securityFixes CVE-2026-33828: Windows Device Health Attestation (DHA) Elevation of Privilege Vulnerability

securityFixes CVE-2026-44803: Windows Graphics Component Remote Code Execution Vulnerability

securityFixes CVE-2026-44812: Windows Graphics Component Remote Code Execution Vulnerability

securityFixes CVE-2026-48574: Windows Media Remote Code Execution Vulnerability

securityFixes CVE-2026-42992: Remote Desktop Client Remote Code Execution Vulnerability

securityFixes CVE-2026-44799: Remote Desktop Client Remote Code Execution Vulnerability

securityFixes CVE-2026-44801: Remote Desktop Client Remote Code Execution Vulnerability

securityFixes CVE-2026-47654: Remote Desktop Client Remote Code Execution Vulnerability

securityFixes CVE-2026-48563: Remote Desktop Client Remote Code Execution Vulnerability

securityFixes CVE-2026-47288: Windows Kerberos Key Distribution Center (KDC) Remote Code Execution

26100.32860 May 12, 2026 Release notes ↗

securityFixes CVE-2026-41089: Windows Netlogon Remote Code Execution Vulnerability

securityFixes CVE-2026-41096: Windows DNS Client Remote Code Execution Vulnerability

securityFixes CVE-2026-40403: Windows Graphics Component Remote Code Execution Vulnerability

securityFixes CVE-2026-35421: Windows GDI Remote Code Execution Vulnerability

securityFixes CVE-2026-32161: Windows Native WiFi Miniport Driver Remote Code Execution Vulnerability

26100.32698 Apr 19, 2026 Release notes ↗

security[Active Directory] Fixed: After installing the April 2026 Windows security update and restarting, domain controllers (DCs) with multi-domain forests that use Privileged Access Management (PAM), might experience startup issues. In some cases, Local Security Authority Subsystem Service (LSASS) might…

security[Windows update installation] Fixed: A small number of Windows Server 2025 devices might fail to install the April 14, 2026, Windows security update (KB5082063). When this issue occurs, affected devices might display one of the following error messages: “Install error: 0x800F0983” or “Some update…

26100.32690 Apr 14, 2026 Release notes ↗