Windows Server 26100.6901 → 26100.33438

16 releases · 0 breaking changes · 157 security fixes · 143 advisories fixed

157security0breaking2deprecated15feature29fix

Is 26100.6901 affected? · What changed up to 26100.33650

Vulnerabilities fixed by this upgrade

7.5 CVE-2026-69789 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
8.8 CVE-2026-69499 Windows Imaging Component Remote Code Execution Vulnerability
7.0 CVE-2026-69501 Windows Secure Kernel Mode Elevation of Privilege Vulnerability
8.8 CVE-2026-69518 Windows Remote Desktop Remote Code Execution Vulnerability
8.1 CVE-2026-69530 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
9.8 CVE-2026-69579 Windows Message Queuing Remote Code Execution Vulnerability
9.8 CVE-2026-69590 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
9.8 CVE-2026-69595 Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability
8.8 CVE-2026-69601 Microsoft Windows Media Foundation Remote Code Execution Vulnerability
8.8 CVE-2026-69603 Windows Hyper-V Remote Code Execution Vulnerability
8.8 CVE-2026-69676 Windows Kerberos Remote Code Execution Vulnerability
8.8 CVE-2026-69712 Windows Key Distribution Center Remote Code Execution Vulnerability
9.8 CVE-2026-69730 Windows DNS Server Remote Code Execution Vulnerability
9.8 CVE-2026-69769 Windows HTTP Print Provider Remote Code Execution Vulnerability
8.1 CVE-2026-69813 Windows DNS Server Remote Code Execution Vulnerability
8.1 CVE-2026-69827 Windows DNS Server Remote Code Execution Vulnerability
9.8 CVE-2026-69829 Windows Shell Remote Code Execution Vulnerability
9.8 CVE-2026-69845 Windows DHCP Server Remote Code Execution Vulnerability
8.2 CVE-2026-69846 Windows Secure Kernel Mode Elevation of Privilege Vulnerability
7.5 CVE-2026-69852 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
8.1 CVE-2026-69858 Windows DNS Server Remote Code Execution Vulnerability
8.8 CVE-2026-69860 Windows Imaging Component Remote Code Execution Vulnerability
8.2 CVE-2026-69874 Windows ALPC Elevation of Privilege Vulnerability
7.5 CVE-2026-69890 Windows Virtual Trusted Platform Module Elevation of Privilege Vulnerability
8.2 CVE-2026-69906 Windows Secure Kernel Mode Elevation of Privilege Vulnerability
8.8 CVE-2026-70203 Windows Media Player Remote Code Execution Vulnerability
9.8 CVE-2026-70296 Windows Imaging Component Remote Code Execution Vulnerability
7.0 CVE-2026-70585 Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability
8.8 CVE-2026-70586 Windows Paint Remote Code Execution Vulnerability
8.8 CVE-2026-72950 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
7.5 CVE-2026-72954 Windows Deployment Services Remote Code Execution Vulnerability
7.8 CVE-2026-72957 Windows Deployment Services Remote Code Execution Vulnerability
8.2 CVE-2026-72958 Windows Credential Guard Elevation of Privilege Vulnerability
8.8 CVE-2026-72959 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
8.8 CVE-2026-72960 Windows Media Player Remote Code Execution Vulnerability
8.2 CVE-2026-72961 Windows Hyper-V Elevation of Privilege Vulnerability
8.2 CVE-2026-72962 Windows USB Video Driver Elevation of Privilege Vulnerability
9.8 CVE-2026-72979 Windows DHCP Server Remote Code Execution Vulnerability
4.4 CVE-2026-72980 Windows Hello Security Feature Bypass Vulnerability
8.1 CVE-2026-72981 IP Helper Remote Code Execution Vulnerability
9.8 CVE-2026-72982 Windows Netlogon Remote Code Execution Vulnerability
9.8 CVE-2026-72983 Internet Connection Sharing (ICS) Remote Code Execution Vulnerability
8.8 CVE-2026-72986 Graphic Fonts Remote Code Execution Vulnerability
8.1 CVE-2026-72987 Windows DNS Remote Code Execution Vulnerability
8.8 CVE-2026-73006 DirectWrite Remote Code Execution Vulnerability
9.8 CVE-2026-73009 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
9.8 CVE-2026-73010 Microsoft Failover Cluster Remote Code Execution Vulnerability
8.8 CVE-2026-73013 Windows Imaging Component Remote Code Execution Vulnerability
7.5 CVE-2026-73017 Graphics Kernel Remote Code Execution Vulnerability
8.8 CVE-2026-73018 Graphic Fonts Remote Code Execution Vulnerability
8.8 CVE-2026-73023 Windows Imaging Component Remote Code Execution Vulnerability
9.8 CVE-2026-77493 Windows Graphics Component Remote Code Execution Vulnerability
8.8 CVE-2026-77495 Windows Imaging Component Remote Code Execution Vulnerability
8.8 CVE-2026-77504 Microsoft Office Word Remote Code Execution Vulnerability
8.1 CVE-2026-77505 Windows DNS Server Remote Code Execution Vulnerability
8.1 CVE-2026-78444 Microsoft Failover Cluster Remote Code Execution Vulnerability
9.8 CVE-2026-78445 Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability
8.1 CVE-2026-78449 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
8.1 CVE-2026-78450 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
8.8 CVE-2026-80083 Windows Hyper-V Remote Code Execution Vulnerability
7.5 CVE-2026-81355 Virtual Hard Disk (VHD) Miniport Driver Remote Code Execution Vulnerability
8.8 CVE-2026-81955 Windows Graphics Component Remote Code Execution Vulnerability
7.8 CVE-2026-81963KEV Windows Update Stack Elevation of Privilege Vulnerability
7.8 CVE-2026-83498 Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
5.5 CVE-2026-83501 Windows Virtualization-Based Security (VBS) Information Disclosure Vulnerability
9.8 CVE-2026-62815 Microsoft QUIC Remote Code Execution Vulnerability
8.8 CVE-2026-62816 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
8.8 CVE-2026-62817 Windows DNS Server Remote Code Execution Vulnerability
8.8 CVE-2026-62818 Windows Active Directory Certificate Services (AD CS) Remote Code Execution Vulnerability
8.1 CVE-2026-62819 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
8.1 CVE-2026-62820 Windows DNS Server Remote Code Execution Vulnerability
8.8 CVE-2026-62822 Windows GDI+ Remote Code Execution Vulnerability
8.8 CVE-2026-62823 Windows DHCP Server Remote Code Execution Vulnerability
9.8 CVE-2026-62878 Windows DNS Server Remote Code Execution Vulnerability
8.1 CVE-2026-62889 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
7.8 CVE-2026-62890 Windows GDI+ Elevation of Privilege Vulnerability
9.8 CVE-2026-62893 Windows Deployment Services TFTP Server Remote Code Execution Vulnerability
8.1 CVE-2026-65679 Windows iSCSI Target Service Remote Code Execution Vulnerability
8.1 CVE-2026-65789 Windows DNS Server Remote Code Execution Vulnerability
9.8 CVE-2026-65791 Windows iSCSI Target Service Remote Code Execution Vulnerability
8.1 CVE-2026-65796 Windows iSCSI Target Service Remote Code Execution Vulnerability
7.8 CVE-2026-66799 Windows Key Guard Elevation of Privilege Vulnerability
8.1 CVE-2026-66802 Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability
7.0 CVE-2026-68820KEV Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
8.1 CVE-2026-71331 Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability
7.8 CVE-2026-42982 Windows Secure Kernel Mode Elevation of Privilege Vulnerability
8.8 CVE-2026-48564 DHCP Server Service Remote Code Execution Vulnerability
8.1 CVE-2026-49164 Windows Active Directory Domain Services Remote Code Execution Vulnerability
7.8 CVE-2026-49796 Windows GDI+ Remote Code Execution Vulnerability
7.8 CVE-2026-50327 Windows Media Remote Code Execution Vulnerability
8.8 CVE-2026-50370 DHCP Server Service Remote Code Execution Vulnerability
9.6 CVE-2026-50380 Windows GDI+ Remote Code Execution Vulnerability
8.8 CVE-2026-50382 DirectX Graphics Kernel Remote Code Execution Vulnerability
7.0 CVE-2026-50392 Windows Secure Kernel Mode Elevation of Privilege Vulnerability
8.8 CVE-2026-50444 Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability
8.8 CVE-2026-50474 Remote Desktop Client Remote Code Execution Vulnerability
9.8 CVE-2026-50518 Windows DHCP Server Remote Code Execution Vulnerability
7.8 CVE-2026-50655 Microsoft Windows Media Foundation Remote Code Execution Vulnerability
8.2 CVE-2026-50680 Windows Hyper-V Elevation of Privilege Vulnerability
8.1 CVE-2026-50694 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
8.8 CVE-2026-54121 Active Directory Certificate Services Elevation of Privilege Vulnerability
7.4 CVE-2026-54127 Windows Hyper-V Elevation of Privilege Vulnerability
8.4 CVE-2026-54128 Windows DHCP Client Remote Code Execution Vulnerability
8.8 CVE-2026-54982 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
8.4 CVE-2026-54992 Microsoft Message Queuing Queue Manager Remote Code Execution Vulnerability
8.1 CVE-2026-54995 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
8.8 CVE-2026-54999 Windows TCP/IP Remote Code Execution Vulnerability
7.8 CVE-2026-56155KEV Active Directory Federation Services Elevation of Privilege Vulnerability
9.8 CVE-2026-56159 DHCP Server Service Remote Code Execution Vulnerability
9.8 CVE-2026-56188 Windows Server Network driver Remote Code Execution Vulnerability
7.8 CVE-2026-56189 Microsoft Windows Media Foundation Remote Code Execution Vulnerability
8.8 CVE-2026-57087 Microsoft Windows Media Foundation Remote Code Execution Vulnerability
8.8 CVE-2026-57090 Microsoft Windows Media Foundation Remote Code Execution Vulnerability
9.9 CVE-2026-57092 Microsoft Windows VMSwitch Elevation of Privilege Vulnerability
8.8 CVE-2026-57094 Microsoft Windows Media Foundation Remote Code Execution Vulnerability
7.8 CVE-2026-58542 Windows Media Remote Code Execution Vulnerability
8.8 CVE-2026-58608 Windows Print Spooler Remote Code Execution Vulnerability
7.8 CVE-2026-33828 Windows Device Health Attestation (DHA) Elevation of Privilege Vulnerability
8.8 CVE-2026-42985 Remote Desktop Client Remote Code Execution Vulnerability
8.1 CVE-2026-42987 Windows Deployment Services (WDS) Remote Code Execution
7.5 CVE-2026-42992 Remote Desktop Client Remote Code Execution Vulnerability
7.5 CVE-2026-44799 Remote Desktop Client Remote Code Execution Vulnerability
7.5 CVE-2026-44801 Remote Desktop Client Remote Code Execution Vulnerability
7.8 CVE-2026-44803 Windows Graphics Component Remote Code Execution Vulnerability
8.4 CVE-2026-44810 Microsoft Cryptographic Services Elevation of Privilege Vulnerability
7.8 CVE-2026-44812 Windows Graphics Component Remote Code Execution Vulnerability
9.8 CVE-2026-44815 DHCP Client Service Remote Code Execution Vulnerability
8.4 CVE-2026-45607 Windows Hyper-V Remote Code Execution Vulnerability
8.4 CVE-2026-45641 Windows Hyper-V Remote Code Execution Vulnerability
8.8 CVE-2026-45648 Windows Active Directory Domain Services Remote Code Execution Vulnerability
9.8 CVE-2026-45657 Windows Kernel Remote Code Execution Vulnerability
7.1 CVE-2026-47288 Windows Kerberos Key Distribution Center (KDC) Remote Code Execution
8.8 CVE-2026-47289 Remote Desktop Client Remote Code Execution Vulnerability
9.8 CVE-2026-47291 HTTP.sys Remote Code Execution Vulnerability
8.2 CVE-2026-47652 Windows Hyper-V Remote Code Execution Vulnerability
7.5 CVE-2026-47654 Remote Desktop Client Remote Code Execution Vulnerability
7.5 CVE-2026-48563 Remote Desktop Client Remote Code Execution Vulnerability
7.8 CVE-2026-48574 Windows Media Remote Code Execution Vulnerability
7.5 CVE-2026-32161 Windows Native WiFi Miniport Driver Remote Code Execution Vulnerability
7.8 CVE-2026-35421 Windows GDI Remote Code Execution Vulnerability
8.8 CVE-2026-40403 Windows Graphics Component Remote Code Execution Vulnerability
9.8 CVE-2026-41089 Windows Netlogon Remote Code Execution Vulnerability
9.8 CVE-2026-41096 Windows DNS Client Remote Code Execution Vulnerability

Breaking changes

None in the release notes.

Security changes

security Fixes CVE-2026-81963: Windows Update Stack Elevation of Privilege Vulnerability in 26100.33438
security Fixes CVE-2026-69579: Windows Message Queuing Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-69590: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-69595: Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-69730: Windows DNS Server Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-69769: Windows HTTP Print Provider Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-69829: Windows Shell Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-69845: Windows DHCP Server Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-70296: Windows Imaging Component Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-72979: Windows DHCP Server Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-72982: Windows Netlogon Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-72983: Internet Connection Sharing (ICS) Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-73009: Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-73010: Microsoft Failover Cluster Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-77493: Windows Graphics Component Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-78445: Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-69499: Windows Imaging Component Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-69518: Windows Remote Desktop Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-69601: Microsoft Windows Media Foundation Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-69603: Windows Hyper-V Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-69676: Windows Kerberos Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-69712: Windows Key Distribution Center Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-69860: Windows Imaging Component Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-70203: Windows Media Player Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-70586: Windows Paint Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-72950: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-72959: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-72960: Windows Media Player Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-72986: Graphic Fonts Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-73006: DirectWrite Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-73013: Windows Imaging Component Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-73018: Graphic Fonts Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-73023: Windows Imaging Component Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-77495: Windows Imaging Component Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-77504: Microsoft Office Word Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-80083: Windows Hyper-V Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-81955: Windows Graphics Component Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-69846: Windows Secure Kernel Mode Elevation of Privilege Vulnerability in 26100.33438
security Fixes CVE-2026-69874: Windows ALPC Elevation of Privilege Vulnerability in 26100.33438
security Fixes CVE-2026-69906: Windows Secure Kernel Mode Elevation of Privilege Vulnerability in 26100.33438
security Fixes CVE-2026-72958: Windows Credential Guard Elevation of Privilege Vulnerability in 26100.33438
security Fixes CVE-2026-72961: Windows Hyper-V Elevation of Privilege Vulnerability in 26100.33438
security Fixes CVE-2026-72962: Windows USB Video Driver Elevation of Privilege Vulnerability in 26100.33438
security Fixes CVE-2026-69530: Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-69813: Windows DNS Server Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-69827: Windows DNS Server Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-69858: Windows DNS Server Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-72981: IP Helper Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-72987: Windows DNS Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-77505: Windows DNS Server Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-78444: Microsoft Failover Cluster Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-78449: Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-78450: Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-72957: Windows Deployment Services Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-83498: Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability in 26100.33438
security Fixes CVE-2026-69789: Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-69852: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-69890: Windows Virtual Trusted Platform Module Elevation of Privilege Vulnerability in 26100.33438
security Fixes CVE-2026-72954: Windows Deployment Services Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-73017: Graphics Kernel Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-81355: Virtual Hard Disk (VHD) Miniport Driver Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-69501: Windows Secure Kernel Mode Elevation of Privilege Vulnerability in 26100.33438
security Fixes CVE-2026-70585: Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability in 26100.33438
security Fixes CVE-2026-83501: Windows Virtualization-Based Security (VBS) Information Disclosure Vulnerability in 26100.33438
security Fixes CVE-2026-72980: Windows Hello Security Feature Bypass Vulnerability in 26100.33438
security Security update: includes the September 2026 Security Updates in 26100.33438
security Fixes CVE-2026-68820: Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability in 26100.33296
security Fixes CVE-2026-62815: Microsoft QUIC Remote Code Execution Vulnerability in 26100.33296
security Fixes CVE-2026-62878: Windows DNS Server Remote Code Execution Vulnerability in 26100.33296
security Fixes CVE-2026-62893: Windows Deployment Services TFTP Server Remote Code Execution Vulnerability in 26100.33296
security Fixes CVE-2026-65791: Windows iSCSI Target Service Remote Code Execution Vulnerability in 26100.33296
security Fixes CVE-2026-62816: Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability in 26100.33296
security Fixes CVE-2026-62817: Windows DNS Server Remote Code Execution Vulnerability in 26100.33296
security Fixes CVE-2026-62818: Windows Active Directory Certificate Services (AD CS) Remote Code Execution Vulnerability in 26100.33296
security Fixes CVE-2026-62822: Windows GDI+ Remote Code Execution Vulnerability in 26100.33296
security Fixes CVE-2026-62823: Windows DHCP Server Remote Code Execution Vulnerability in 26100.33296
security Fixes CVE-2026-62819: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability in 26100.33296
security Fixes CVE-2026-62820: Windows DNS Server Remote Code Execution Vulnerability in 26100.33296
security Fixes CVE-2026-62889: Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability in 26100.33296
security Fixes CVE-2026-65679: Windows iSCSI Target Service Remote Code Execution Vulnerability in 26100.33296
security Fixes CVE-2026-65789: Windows DNS Server Remote Code Execution Vulnerability in 26100.33296
security Fixes CVE-2026-65796: Windows iSCSI Target Service Remote Code Execution Vulnerability in 26100.33296
security Fixes CVE-2026-66802: Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability in 26100.33296
security Fixes CVE-2026-71331: Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability in 26100.33296
security Fixes CVE-2026-62890: Windows GDI+ Elevation of Privilege Vulnerability in 26100.33296
security Fixes CVE-2026-66799: Windows Key Guard Elevation of Privilege Vulnerability in 26100.33296
security Security update: includes the August 2026 Security Updates in 26100.33296
security Fixes CVE-2026-56155: Active Directory Federation Services Elevation of Privilege Vulnerability in 26100.33158
security Fixes CVE-2026-57092: Microsoft Windows VMSwitch Elevation of Privilege Vulnerability in 26100.33158
security Fixes CVE-2026-50518: Windows DHCP Server Remote Code Execution Vulnerability in 26100.33158
security Fixes CVE-2026-56159: DHCP Server Service Remote Code Execution Vulnerability in 26100.33158
security Fixes CVE-2026-56188: Windows Server Network driver Remote Code Execution Vulnerability in 26100.33158
security Fixes CVE-2026-50380: Windows GDI+ Remote Code Execution Vulnerability in 26100.33158
security Fixes CVE-2026-48564: DHCP Server Service Remote Code Execution Vulnerability in 26100.33158
security Fixes CVE-2026-50370: DHCP Server Service Remote Code Execution Vulnerability in 26100.33158
security Fixes CVE-2026-50382: DirectX Graphics Kernel Remote Code Execution Vulnerability in 26100.33158
security Fixes CVE-2026-50444: Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability in 26100.33158
security Fixes CVE-2026-50474: Remote Desktop Client Remote Code Execution Vulnerability in 26100.33158
security Fixes CVE-2026-54121: Active Directory Certificate Services Elevation of Privilege Vulnerability in 26100.33158
security Fixes CVE-2026-54982: Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability in 26100.33158
security Fixes CVE-2026-54999: Windows TCP/IP Remote Code Execution Vulnerability in 26100.33158
security Fixes CVE-2026-57087: Microsoft Windows Media Foundation Remote Code Execution Vulnerability in 26100.33158
security Fixes CVE-2026-57090: Microsoft Windows Media Foundation Remote Code Execution Vulnerability in 26100.33158
security Fixes CVE-2026-57094: Microsoft Windows Media Foundation Remote Code Execution Vulnerability in 26100.33158
security Fixes CVE-2026-58608: Windows Print Spooler Remote Code Execution Vulnerability in 26100.33158
security Fixes CVE-2026-54128: Windows DHCP Client Remote Code Execution Vulnerability in 26100.33158
security Fixes CVE-2026-54992: Microsoft Message Queuing Queue Manager Remote Code Execution Vulnerability in 26100.33158
security Fixes CVE-2026-50680: Windows Hyper-V Elevation of Privilege Vulnerability in 26100.33158
security Fixes CVE-2026-49164: Windows Active Directory Domain Services Remote Code Execution Vulnerability in 26100.33158
security Fixes CVE-2026-50694: Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability in 26100.33158
security Fixes CVE-2026-54995: Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability in 26100.33158
security Fixes CVE-2026-42982: Windows Secure Kernel Mode Elevation of Privilege Vulnerability in 26100.33158
security Fixes CVE-2026-49796: Windows GDI+ Remote Code Execution Vulnerability in 26100.33158
security Fixes CVE-2026-50327: Windows Media Remote Code Execution Vulnerability in 26100.33158
security Fixes CVE-2026-50655: Microsoft Windows Media Foundation Remote Code Execution Vulnerability in 26100.33158
security Fixes CVE-2026-56189: Microsoft Windows Media Foundation Remote Code Execution Vulnerability in 26100.33158
security Fixes CVE-2026-58542: Windows Media Remote Code Execution Vulnerability in 26100.33158
security Fixes CVE-2026-54127: Windows Hyper-V Elevation of Privilege Vulnerability in 26100.33158
security Fixes CVE-2026-50392: Windows Secure Kernel Mode Elevation of Privilege Vulnerability in 26100.33158
security Fixes CVE-2026-44815: DHCP Client Service Remote Code Execution Vulnerability in 26100.32995
security Fixes CVE-2026-45657: Windows Kernel Remote Code Execution Vulnerability in 26100.32995
security Fixes CVE-2026-47291: HTTP.sys Remote Code Execution Vulnerability in 26100.32995
security Fixes CVE-2026-42985: Remote Desktop Client Remote Code Execution Vulnerability in 26100.32995
security Fixes CVE-2026-45648: Windows Active Directory Domain Services Remote Code Execution Vulnerability in 26100.32995
security Fixes CVE-2026-47289: Remote Desktop Client Remote Code Execution Vulnerability in 26100.32995
security Fixes CVE-2026-44810: Microsoft Cryptographic Services Elevation of Privilege Vulnerability in 26100.32995
security Fixes CVE-2026-45607: Windows Hyper-V Remote Code Execution Vulnerability in 26100.32995
security Fixes CVE-2026-45641: Windows Hyper-V Remote Code Execution Vulnerability in 26100.32995
security Fixes CVE-2026-47652: Windows Hyper-V Remote Code Execution Vulnerability in 26100.32995
security Fixes CVE-2026-42987: Windows Deployment Services (WDS) Remote Code Execution in 26100.32995
security Fixes CVE-2026-33828: Windows Device Health Attestation (DHA) Elevation of Privilege Vulnerability in 26100.32995
security Fixes CVE-2026-44803: Windows Graphics Component Remote Code Execution Vulnerability in 26100.32995
security Fixes CVE-2026-44812: Windows Graphics Component Remote Code Execution Vulnerability in 26100.32995
security Fixes CVE-2026-48574: Windows Media Remote Code Execution Vulnerability in 26100.32995
security Fixes CVE-2026-42992: Remote Desktop Client Remote Code Execution Vulnerability in 26100.32995
security Fixes CVE-2026-44799: Remote Desktop Client Remote Code Execution Vulnerability in 26100.32995
security Fixes CVE-2026-44801: Remote Desktop Client Remote Code Execution Vulnerability in 26100.32995
security Fixes CVE-2026-47654: Remote Desktop Client Remote Code Execution Vulnerability in 26100.32995
security Fixes CVE-2026-48563: Remote Desktop Client Remote Code Execution Vulnerability in 26100.32995
security Fixes CVE-2026-47288: Windows Kerberos Key Distribution Center (KDC) Remote Code Execution in 26100.32995
security Fixes CVE-2026-41089: Windows Netlogon Remote Code Execution Vulnerability in 26100.32860
security Fixes CVE-2026-41096: Windows DNS Client Remote Code Execution Vulnerability in 26100.32860
security Fixes CVE-2026-40403: Windows Graphics Component Remote Code Execution Vulnerability in 26100.32860
security Fixes CVE-2026-35421: Windows GDI Remote Code Execution Vulnerability in 26100.32860
security Fixes CVE-2026-32161: Windows Native WiFi Miniport Driver Remote Code Execution Vulnerability in 26100.32860
security [Active Directory] Fixed: After installing the April 2026 Windows security update and restarting, domain controllers (DCs) with multi-domain forests that use Privileged Access Management (PAM), might experience startup issues. In some cases, Local Security Authority Subsystem Service (LSASS) might… in 26100.32698
security [Windows update installation] Fixed: A small number of Windows Server 2025 devices might fail to install the April 14, 2026, Windows security update (KB5082063). When this issue occurs, affected devices might display one of the following error messages: “Install error: 0x800F0983” or “Some update… in 26100.32698
security [Graphics] Fixed: This update addresses an issue where certain GPU configurations might recently have experienced a system error related to dxgmms2.sys, resulting in the KERNEL_SECURITY_CHECK_FAILURE error. in 26100.32370
security [Remote Desktop] Fixed: After installing the January 2026 Windows security update (KB5073379), some users experienced sign-in failures during Remote Desktop connections. This issue affected authentication steps for different Remote Desktop applications on Windows such as the Windows App. in 26100.32234
security [Credentials autofill] This update introduces a security hardening behavior restricting certain applications to autofill credentials during remote support sessions or automated authentication workflows. With this change, credential dialogs do not respond to virtual keyboard input from remote… in 26100.32230
security [WinSqlite3.dll] Fixed: The Windows core component, WinSqlite3.dll, has been updated. Previously, some security software might have detected this component as vulnerable. Note WinSqlite3.dll is a separate component from sqlite3.dll, which is found in application-specific directories and is not a… in 26100.32230
security [PowerShell 5.1] Invoke-WebRequest now includes a confirmation prompt with a security warning of script execution risk. You can choose to continue or cancel the request. For additional details, see CVE-2025-54100 and KB5074596: PowerShell 5.1: Preventing script execution from web content. in 26100.7462
security [App compatibility (known issue)] Fixed: This update addresses an issue that created unexpected User Account Control (UAC) prompts for some apps, including Autodesk AutoCAD. For more information, see Unexpected UAC prompts when running MSI repair operations after installing the August 2025 Windows… in 26100.7171
security [Authentication] Fixed: This update addresses an issue that affects the Local Security Authority Subsystem Service (LSASS). LSASS might stop responding during machine password changes with specific audit settings. in 26100.7171
security [Stability issue] This update addresses an issue observed in rare cases after installing the May 2025 security update and subsequent updates causing devices to experience stability issues. Some devices became unresponsive and stopped responding in specific scenarios. in 26100.7171
security [Windows Firewall (known issue)] Fixed: This update addresses an issue found in Event Viewer as Event 2042 for Windows Firewall with Advanced Security. The event appears as "Config Read Failed" with the message "More data is available." For more information about this issue, see "Error events are… in 26100.7171
security [Windows Server Update Services (WSUS)] Fixed: This update addresses a remote code execution (RCE) vulnerability that was identified in WSUS reporting web services. For more information about the security fix, see CVE-2025-59287. in 26100.6905

Deprecations

deprecated [Emoji Panel] The emoji panel (Windows key + period (.)) now supports GIPHY following the deprecation of Google's Tenor API. in 26100.33296
deprecated [PowerShell 2.0] Starting in August 2025, Windows 11, version 24H2, will no longer include Windows PowerShell 2.0. This legacy component was introduced in Windows 7 and officially deprecated in 2017. Most users won’t be affected, as newer versions such as PowerShell 5.1 and PowerShell 7.x remain… in 26100.7462

Every release in between

26100.33438 Sep 8, 2026 Release notes ↗

securityFixes CVE-2026-81963: Windows Update Stack Elevation of Privilege Vulnerability

securityFixes CVE-2026-69579: Windows Message Queuing Remote Code Execution Vulnerability

securityFixes CVE-2026-69590: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

securityFixes CVE-2026-69595: Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability

securityFixes CVE-2026-69730: Windows DNS Server Remote Code Execution Vulnerability

securityFixes CVE-2026-69769: Windows HTTP Print Provider Remote Code Execution Vulnerability

securityFixes CVE-2026-69829: Windows Shell Remote Code Execution Vulnerability

securityFixes CVE-2026-69845: Windows DHCP Server Remote Code Execution Vulnerability

securityFixes CVE-2026-70296: Windows Imaging Component Remote Code Execution Vulnerability

securityFixes CVE-2026-72979: Windows DHCP Server Remote Code Execution Vulnerability

securityFixes CVE-2026-72982: Windows Netlogon Remote Code Execution Vulnerability

securityFixes CVE-2026-72983: Internet Connection Sharing (ICS) Remote Code Execution Vulnerability

securityFixes CVE-2026-73009: Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

securityFixes CVE-2026-73010: Microsoft Failover Cluster Remote Code Execution Vulnerability

securityFixes CVE-2026-77493: Windows Graphics Component Remote Code Execution Vulnerability

securityFixes CVE-2026-78445: Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability

securityFixes CVE-2026-69499: Windows Imaging Component Remote Code Execution Vulnerability

securityFixes CVE-2026-69518: Windows Remote Desktop Remote Code Execution Vulnerability

securityFixes CVE-2026-69601: Microsoft Windows Media Foundation Remote Code Execution Vulnerability

securityFixes CVE-2026-69603: Windows Hyper-V Remote Code Execution Vulnerability

securityFixes CVE-2026-69676: Windows Kerberos Remote Code Execution Vulnerability

securityFixes CVE-2026-69712: Windows Key Distribution Center Remote Code Execution Vulnerability

securityFixes CVE-2026-69860: Windows Imaging Component Remote Code Execution Vulnerability

securityFixes CVE-2026-70203: Windows Media Player Remote Code Execution Vulnerability

securityFixes CVE-2026-70586: Windows Paint Remote Code Execution Vulnerability

securityFixes CVE-2026-72950: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

securityFixes CVE-2026-72959: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

securityFixes CVE-2026-72960: Windows Media Player Remote Code Execution Vulnerability

securityFixes CVE-2026-72986: Graphic Fonts Remote Code Execution Vulnerability

securityFixes CVE-2026-73006: DirectWrite Remote Code Execution Vulnerability

securityFixes CVE-2026-73013: Windows Imaging Component Remote Code Execution Vulnerability

securityFixes CVE-2026-73018: Graphic Fonts Remote Code Execution Vulnerability

securityFixes CVE-2026-73023: Windows Imaging Component Remote Code Execution Vulnerability

securityFixes CVE-2026-77495: Windows Imaging Component Remote Code Execution Vulnerability

securityFixes CVE-2026-77504: Microsoft Office Word Remote Code Execution Vulnerability

securityFixes CVE-2026-80083: Windows Hyper-V Remote Code Execution Vulnerability

securityFixes CVE-2026-81955: Windows Graphics Component Remote Code Execution Vulnerability

securityFixes CVE-2026-69846: Windows Secure Kernel Mode Elevation of Privilege Vulnerability

securityFixes CVE-2026-69874: Windows ALPC Elevation of Privilege Vulnerability

securityFixes CVE-2026-69906: Windows Secure Kernel Mode Elevation of Privilege Vulnerability

+34 more items in the release notes

26100.33296 Aug 11, 2026 Release notes ↗

securityFixes CVE-2026-68820: Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

securityFixes CVE-2026-62815: Microsoft QUIC Remote Code Execution Vulnerability

securityFixes CVE-2026-62878: Windows DNS Server Remote Code Execution Vulnerability

securityFixes CVE-2026-62893: Windows Deployment Services TFTP Server Remote Code Execution Vulnerability

securityFixes CVE-2026-65791: Windows iSCSI Target Service Remote Code Execution Vulnerability

securityFixes CVE-2026-62816: Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability

securityFixes CVE-2026-62817: Windows DNS Server Remote Code Execution Vulnerability

securityFixes CVE-2026-62818: Windows Active Directory Certificate Services (AD CS) Remote Code Execution Vulnerability

securityFixes CVE-2026-62822: Windows GDI+ Remote Code Execution Vulnerability

securityFixes CVE-2026-62823: Windows DHCP Server Remote Code Execution Vulnerability

securityFixes CVE-2026-62819: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

securityFixes CVE-2026-62820: Windows DNS Server Remote Code Execution Vulnerability

securityFixes CVE-2026-62889: Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

securityFixes CVE-2026-65679: Windows iSCSI Target Service Remote Code Execution Vulnerability

securityFixes CVE-2026-65789: Windows DNS Server Remote Code Execution Vulnerability

securityFixes CVE-2026-65796: Windows iSCSI Target Service Remote Code Execution Vulnerability

securityFixes CVE-2026-66802: Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability

securityFixes CVE-2026-71331: Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability

securityFixes CVE-2026-62890: Windows GDI+ Elevation of Privilege Vulnerability

securityFixes CVE-2026-66799: Windows Key Guard Elevation of Privilege Vulnerability

securitySecurity update: includes the August 2026 Security Updates

other[File Explorer] This update improves File Explorer for files stored on DFS mapped drives, helping previews and copied files work as expected after reconnecting to the network.

feature[Windows] This update improves support for post‑quantum cryptography (PQC) certificates by restoring PQC options during Certificate Authority configuration and enabling successful enrollment with newly created PQC certificate templates.

feature[Secure Boot] This update includes additional high confidence device targeting data, increasing coverage of devices eligible to automatically receive new Secure Boot certificates. Certificate deployment via Windows updates continues across supported PCs and non-managed business devices in the…

deprecated[Emoji Panel] The emoji panel (Windows key + period (.)) now supports GIPHY following the deprecation of Google's Tenor API.

26100.33158 Jul 14, 2026 Release notes ↗

securityFixes CVE-2026-56155: Active Directory Federation Services Elevation of Privilege Vulnerability

securityFixes CVE-2026-57092: Microsoft Windows VMSwitch Elevation of Privilege Vulnerability

securityFixes CVE-2026-50518: Windows DHCP Server Remote Code Execution Vulnerability

securityFixes CVE-2026-56159: DHCP Server Service Remote Code Execution Vulnerability

securityFixes CVE-2026-56188: Windows Server Network driver Remote Code Execution Vulnerability

securityFixes CVE-2026-50380: Windows GDI+ Remote Code Execution Vulnerability

securityFixes CVE-2026-48564: DHCP Server Service Remote Code Execution Vulnerability

securityFixes CVE-2026-50370: DHCP Server Service Remote Code Execution Vulnerability

securityFixes CVE-2026-50382: DirectX Graphics Kernel Remote Code Execution Vulnerability

securityFixes CVE-2026-50444: Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability

securityFixes CVE-2026-50474: Remote Desktop Client Remote Code Execution Vulnerability

securityFixes CVE-2026-54121: Active Directory Certificate Services Elevation of Privilege Vulnerability

securityFixes CVE-2026-54982: Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability

securityFixes CVE-2026-54999: Windows TCP/IP Remote Code Execution Vulnerability

securityFixes CVE-2026-57087: Microsoft Windows Media Foundation Remote Code Execution Vulnerability

securityFixes CVE-2026-57090: Microsoft Windows Media Foundation Remote Code Execution Vulnerability

securityFixes CVE-2026-57094: Microsoft Windows Media Foundation Remote Code Execution Vulnerability

securityFixes CVE-2026-58608: Windows Print Spooler Remote Code Execution Vulnerability

securityFixes CVE-2026-54128: Windows DHCP Client Remote Code Execution Vulnerability

securityFixes CVE-2026-54992: Microsoft Message Queuing Queue Manager Remote Code Execution Vulnerability

securityFixes CVE-2026-50680: Windows Hyper-V Elevation of Privilege Vulnerability

securityFixes CVE-2026-49164: Windows Active Directory Domain Services Remote Code Execution Vulnerability

securityFixes CVE-2026-50694: Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

securityFixes CVE-2026-54995: Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability

securityFixes CVE-2026-42982: Windows Secure Kernel Mode Elevation of Privilege Vulnerability

securityFixes CVE-2026-49796: Windows GDI+ Remote Code Execution Vulnerability

securityFixes CVE-2026-50327: Windows Media Remote Code Execution Vulnerability

securityFixes CVE-2026-50655: Microsoft Windows Media Foundation Remote Code Execution Vulnerability

securityFixes CVE-2026-56189: Microsoft Windows Media Foundation Remote Code Execution Vulnerability

securityFixes CVE-2026-58542: Windows Media Remote Code Execution Vulnerability

securityFixes CVE-2026-54127: Windows Hyper-V Elevation of Privilege Vulnerability

securityFixes CVE-2026-50392: Windows Secure Kernel Mode Elevation of Privilege Vulnerability

26100.32995 Jun 9, 2026 Release notes ↗

securityFixes CVE-2026-44815: DHCP Client Service Remote Code Execution Vulnerability

securityFixes CVE-2026-45657: Windows Kernel Remote Code Execution Vulnerability

securityFixes CVE-2026-47291: HTTP.sys Remote Code Execution Vulnerability

securityFixes CVE-2026-42985: Remote Desktop Client Remote Code Execution Vulnerability

securityFixes CVE-2026-45648: Windows Active Directory Domain Services Remote Code Execution Vulnerability

securityFixes CVE-2026-47289: Remote Desktop Client Remote Code Execution Vulnerability

securityFixes CVE-2026-44810: Microsoft Cryptographic Services Elevation of Privilege Vulnerability

securityFixes CVE-2026-45607: Windows Hyper-V Remote Code Execution Vulnerability

securityFixes CVE-2026-45641: Windows Hyper-V Remote Code Execution Vulnerability

securityFixes CVE-2026-47652: Windows Hyper-V Remote Code Execution Vulnerability

securityFixes CVE-2026-42987: Windows Deployment Services (WDS) Remote Code Execution

securityFixes CVE-2026-33828: Windows Device Health Attestation (DHA) Elevation of Privilege Vulnerability

securityFixes CVE-2026-44803: Windows Graphics Component Remote Code Execution Vulnerability

securityFixes CVE-2026-44812: Windows Graphics Component Remote Code Execution Vulnerability

securityFixes CVE-2026-48574: Windows Media Remote Code Execution Vulnerability

securityFixes CVE-2026-42992: Remote Desktop Client Remote Code Execution Vulnerability

securityFixes CVE-2026-44799: Remote Desktop Client Remote Code Execution Vulnerability

securityFixes CVE-2026-44801: Remote Desktop Client Remote Code Execution Vulnerability

securityFixes CVE-2026-47654: Remote Desktop Client Remote Code Execution Vulnerability

securityFixes CVE-2026-48563: Remote Desktop Client Remote Code Execution Vulnerability

securityFixes CVE-2026-47288: Windows Kerberos Key Distribution Center (KDC) Remote Code Execution

26100.32860 May 12, 2026 Release notes ↗

securityFixes CVE-2026-41089: Windows Netlogon Remote Code Execution Vulnerability

securityFixes CVE-2026-41096: Windows DNS Client Remote Code Execution Vulnerability

securityFixes CVE-2026-40403: Windows Graphics Component Remote Code Execution Vulnerability

securityFixes CVE-2026-35421: Windows GDI Remote Code Execution Vulnerability

securityFixes CVE-2026-32161: Windows Native WiFi Miniport Driver Remote Code Execution Vulnerability

26100.32698 Apr 19, 2026 Release notes ↗

security[Active Directory] Fixed: After installing the April 2026 Windows security update and restarting, domain controllers (DCs) with multi-domain forests that use Privileged Access Management (PAM), might experience startup issues. In some cases, Local Security Authority Subsystem Service (LSASS) might…

security[Windows update installation] Fixed: A small number of Windows Server 2025 devices might fail to install the April 14, 2026, Windows security update (KB5082063). When this issue occurs, affected devices might display one of the following error messages: “Install error: 0x800F0983” or “Some update…

26100.32690 Apr 14, 2026 Release notes ↗

26100.32522 Mar 10, 2026 Release notes ↗

feature[Secure Boot] With this update, Windows quality updates include additional high confidence device targeting data, increasing coverage of devices eligible to automatically receive new Secure Boot certificates. This targeting is based primarily on client device diagnostic data; due to limited data,…

other[System services and reliability] Improved: Windows Server 2025 now supports newer server platforms that expose more hardware error reporting features, including systems with up to 64 Machine Check Architecture (MCA) banks. This update ensures Windows parses and configures all supported error…

26100.32370 Feb 10, 2026 Release notes ↗

fix[File Explorer] Fixed: This update addresses an issue where folder renaming with desktop.ini files in File Explorer isn't work correctly. The LocalizedResourceName setting is ignored, so custom folder names don't appear.

other[Fonts & Display] Updates the Chinese fonts to support the GB18030‑2022A standard for character coverage and display.

security[Graphics] Fixed: This update addresses an issue where certain GPU configurations might recently have experienced a system error related to dxgmms2.sys, resulting in the KERNEL_SECURITY_CHECK_FAILURE error.

fix[Performance & Reliability] Fixed: This update disables the forwarded I/O feature in the NVMe stack by default.

featureNew! DNS over HTTPS (DoH) support for Windows DNS Server is now available in public preview. This preview enables evaluation of DoH for traffic between the server and its clients. This is intended for feedback only. It isn’t supported for production use, and it might contain issues. Functionality…

featureNew! Windows Server now supports random shuffling of resource records in DNS Server responses. This helps reduce scenarios where a single resource record becomes overloaded because it appears first in the returned list. To enable, create a DWORD registry key named “RandomShuffle” at: Registry Key:…

26100.32236 Jan 24, 2026 Release notes ↗

fix[File System] Fixed: After installing the Windows update released on and after January 13, 2026, some applications became unresponsive or encountered unexpected errors when opening files from or saving files to cloud-based storage, such as OneDrive or Dropbox. In certain Outlook configurations…

26100.32234 Jan 17, 2026 Release notes ↗

security[Remote Desktop] Fixed: After installing the January 2026 Windows security update (KB5073379), some users experienced sign-in failures during Remote Desktop connections. This issue affected authentication steps for different Remote Desktop applications on Windows such as the Windows App.

26100.32230 Jan 13, 2026 Release notes ↗

other[Compatibility] This update removes the following modem drivers: agrsm64.sys (x64), agrsm.sys (x86), smserl64.sys (x64) and smserial.sys (x86). Modem hardware dependent on these specific drivers will no longer work in Windows.

security[Credentials autofill] This update introduces a security hardening behavior restricting certain applications to autofill credentials during remote support sessions or automated authentication workflows. With this change, credential dialogs do not respond to virtual keyboard input from remote…

fix[Networking (known issue)] Fixed: This update addresses an issue where you might experience RemoteApp connection failures in Azure Virtual Desktop (AVD) environments. This might occur after installing KB5072033.

fix[Servicing (known issue] This update addresses an issue where devices that installed the out-of-band update (KB5070881) stopped receiving Hotpatch updates. Affected machines will resume Hotpatch updates after installing the January 2026 baseline update.

feature[Secure Boot] Starting with this update, Windows quality updates include a subset of high confidence device targeting data that identifies devices eligible to automatically receive new Secure Boot certificates. Devices will receive the new certificates only after demonstrating sufficient…

feature[Windows Deployment Services (WDS] This update introduces a change in behavior in which WDS will stop supporting hands-free deployment functionality by default. Detailed guidance for IT administrators is available in Windows Deployment Services (WDS) Hands‑Free Deployment Hardening Guidance.

security[WinSqlite3.dll] Fixed: The Windows core component, WinSqlite3.dll, has been updated. Previously, some security software might have detected this component as vulnerable. Note WinSqlite3.dll is a separate component from sqlite3.dll, which is found in application-specific directories and is not a…

26100.7462 Dec 9, 2025 Release notes ↗

feature[File Explorer] New! Dividers now separate top-level icons in the File Explorer context menu.

feature[General] New! When an app requests access to location, camera, microphone, or other device capabilities, Windows shows a redesigned system dialog box. To emphasize the privacy prompt, the screen dims slightly, and the prompt appears at the center of the screen.

feature[Search on the Taskbar] New! When you use Search from the Windows taskbar, a new grid view will help you more quickly and accurately identify the desired image within your search.

feature[Settings] New! Windows activation and expiration prompts match the Windows 11 design and appear as system notifications when action is required. There also have been improvements to messaging under Settings > System > Activation.

featureNew! The larger clock with seconds is now back in the notification center, displayed above the date and calendar. To turn this option on, go to Settings > Time & language > Date & time, and turn on Show time in the Notification Center.

fixFixed: If you accidentally click and drag your mouse across the taskbar preview thumbnail, the preview might stop working.

feature[Task Manager] New! Task Manager now uses standard metrics to show CPU workload consistently across all pages, aligning with industry standards and third-party tools. If you prefer the previous view, you can enable a new optional column called CPU Utility in the Details tab to display the earlier…

deprecated[PowerShell 2.0] Starting in August 2025, Windows 11, version 24H2, will no longer include Windows PowerShell 2.0. This legacy component was introduced in Windows 7 and officially deprecated in 2017. Most users won’t be affected, as newer versions such as PowerShell 5.1 and PowerShell 7.x remain…

other[Audio] Improved: Addressed an underlying audio service stops responding which could impact the ability to play audio in certain cases.

fix[Active Directory (known issue)]) Fixed: This update addresses an issue that occurs when you use ntdsutil.exe with 8KB database pages during an in-place upgrade to Windows Server 2025. The issue could damage the NTDS.dit database and prevent the Domain Controller from mounting it.

fix[Cryptographic Provider (known issue)] Fixed: Fixed: This update addresses an issue where you might see an error in Windows Event Viewer with Error ID 57. The event displays the following message: The 'Microsoft Pluton Cryptographic Provider' provider was not loaded because initialization failed.

fix[dbgcore.dll] Fixed: An underlying issue with dbgcore.dll could result in certain apps, including explorer.exe, crashing.

fix[Device management] Fixed: This update addresses an issue that prevented some system recovery features from working properly due to a temporary file sharing conflict. This affected certain device management tools and disrupted key functions on some devices.

fix[File system] Fixed: An issue in Resilient File System (ReFS) where using backup apps with large files could sometimes exhaust system memory.

fixFixed: Attempting to type Chinese with an IME after copying something with CTRL + C can result in the first character not displaying.

fixFixed: An underlying issue related to textinputframework.dll could result in certain apps like Sticky Notes and Notepad crashing.

fixFixed: This update addresses an issue with the Chinese (Simplified) Input Method Editor (IME) where some extended characters appear as empty boxes.

fix[Fixed This update addresses an issue that prevents typing on the touch keyboard when using the Microsoft Changjie, Microsoft Bopomofo, or Microsoft Japanese Input Method Editors (IMEs). The issue occurs after switching to a previous version of the IME.

fix[Kerberos]⁠ Fixed: There might be an underlying crash in Kerberos when attempting to access a cloud file share.

fix[Live captions] Fixed: Changing the opacity of live captions in Settings > Accessibility > Captions > Caption Style, has no effect.

other[Login] Improved: Addressed some underlying cases which could lead to you seeing a blank white screen, or a screen saying, "just a moment", for a few minutes when logging into your PC.

security[PowerShell 5.1] Invoke-WebRequest now includes a confirmation prompt with a security warning of script execution risk. You can choose to continue or cancel the request. For additional details, see CVE-2025-54100 and KB5074596: PowerShell 5.1: Preventing script execution from web content.

other[System Components] The AppX Deployment Service (Appxsvc) has moved to Automatic startup type to improve reliability in some isolated scenarios.

26100.7178 Nov 18, 2025 Release notes ↗

fix[Upgrade to Windows Server 2025] Fixed: On some Intel C2030 systems with Samsung Non-Volatile Memory Express (NVMe) devices running Windows Server 2022, the upgrade to Windows Server 2025 might fail. Affected systems might fail to boot with error code 0x7B indicating INACCESSIBLE_BOOT_DEVICE…

26100.7171 Nov 11, 2025 Release notes ↗

feature[Start menu] New! We are adding a Boolean option to the Configure Start Pins policy to allow admins to apply Start menu pins once. This means that a user will receive admin pins on day 0 but can then make any changes to their Start pinned layout and have those changes safeguarded.

feature[Post-Quantum Cryptography] New! Building on post-quantum cryptography (PQC) algorithms in SymCrypt, this update adds API support for NIST post-quantum cryptography algorithms ML-KEM and ML-DSA in accordance with FIPS 203 and FIPS 204 standards. These algorithms can be used for key exchange,…

fixFixed: This update addresses an issue in Active Directory where duplicate entries could be added to a multi-valued attribute that requires unique values. Schema modifications to these attributes could result in replication failures due to a schema mismatch.

fixFixed: This update addresses an issue that could cause incomplete synchronization of large Active Directory groups (over 10,000 members) when using the directory synchronization (DirSync) control for on-premises Active Directory Domain Services (AD DS). This problem occurred after installing…

security[App compatibility (known issue)] Fixed: This update addresses an issue that created unexpected User Account Control (UAC) prompts for some apps, including Autodesk AutoCAD. For more information, see Unexpected UAC prompts when running MSI repair operations after installing the August 2025 Windows…

security[Authentication] Fixed: This update addresses an issue that affects the Local Security Authority Subsystem Service (LSASS). LSASS might stop responding during machine password changes with specific audit settings.

fix[Desktop icons] Fixed: If you have an app pinned to your desktop and it updates, the app icon might not display correctly and instead show a white page.

fixFixed: If you open More options in File Explorer to view the full list of folders for the current path, the dropdown menu might not display completely, making the bottom part inaccessible.

fixFixed: File operation progress dialogs might stop appearing when displayed from apps.

fixFixed: Syncing more SharePoint sites to File Explorer might slow performance when navigating folders or opening the context menu. This can also affect how quickly files launch.

fixFixed: File Explorer Home might unexpectedly only display a single folder (for example, Desktop), rather than the expected content with recent files and more.

other[Graphics] An issue where external graphics cards connected through Thunderbolt weren’t always recognized in some cases.

fix[Notifications] Fixed: When you select a Windows notification, it might not bring the related app to the foreground as expected—for example, this can happen with Outlook notifications.

fix[Settings] Fixed: Settings might stop responding when you try to save Wi-Fi network credentials.

security[Stability issue] This update addresses an issue observed in rare cases after installing the May 2025 security update and subsequent updates causing devices to experience stability issues. Some devices became unresponsive and stopped responding in specific scenarios.

security[Windows Firewall (known issue)] Fixed: This update addresses an issue found in Event Viewer as Event 2042 for Windows Firewall with Advanced Security. The event appears as "Config Read Failed" with the message "More data is available." For more information about this issue, see "Error events are…

fix[Networking] Fixed: This update fixes an issue in the HTTP.sys request parser, a Windows component that reads and processes HTTP requests. The parser allowed a single line break within HTTP/1.1 chunk extensions, where the RFC 9112 standard requires a carriage return and line feed (CRLF) sequence…

26100.6905 Oct 23, 2025 Release notes ↗

security[Windows Server Update Services (WSUS)] Fixed: This update addresses a remote code execution (RCE) vulnerability that was identified in WSUS reporting web services. For more information about the security fix, see CVE-2025-59287.