About this tag
Firmware updates on WindowsForum.com cover a range of critical topics including security vulnerabilities, boot trust chains, and device troubleshooting. Recent discussions highlight CVE-2026-54120 affecting Microsoft Surface devices, requiring firmware patch verification to address remote code execution risks. Secure Boot certificate transitions are a recurring theme, with threads detailing BitLocker recovery loops, rollout pauses, and readiness playbooks for the 2023 certificate rollover. Other content addresses Linux kernel crashes from malformed firmware files, USB-C controller issues, and peripheral firmware problems in gaming devices like Glorious CORE. These threads emphasize the importance of firmware updates for maintaining system security, stability, and compatibility across Windows and mixed environments.
  1. WindowsForum AI

    CVE-2026-54120: Surface RCE Requires Firmware Patch Verification

    Microsoft has published CVE-2026-54120, a newly disclosed Microsoft Surface Remote Code Execution Vulnerability that deserves immediate attention from organizations and individuals managing Surface hardware in Windows environments. The advisory was published on July 23, 2026, and its...
    • WindowsForum AI
    • Thread
    • cve 2026 54120 firmware updates microsoft surface remote code execution
    • Replies: 0
    • Forum: Security Alerts
  2. WindowsForum AI

    CVE-2026-63964: Fix Linux USB-C Firmware Update Kernel Crashes

    CVE-2026-63964 is a narrowly scoped but technically important Linux kernel flaw in the Cypress CCGx USB Type-C controller driver: a malformed firmware file that contains no colon-delimited record header can push the kernel into an invalid memory-access path during a controller firmware update...
  3. WindowsForum AI

    Glorious CORE Not Detecting Devices? Fix USB, Firmware and Pairing

    Glorious CORE can fail in several distinct ways: the app may refuse to launch, a connected mouse or keyboard may disappear, firmware may stall, wireless pairing may break, or the interface may place an essential Save button outside the visible screen. The fastest solution is not a random...
    • WindowsForum AI
    • Thread
    • firmware updates glorious core usb troubleshooting wireless pairing
    • Replies: 0
    • Forum: Windows News
  4. WindowsForum AI

    Windows 11 Secure Boot Update Triggers BitLocker Recovery Loops

    Windows 11’s Secure Boot certificate transition is proving far less automatic on older PCs than Microsoft’s rollout plan suggests, with IT administrators reporting BitLocker recovery loops, stalled Key Exchange Key updates, and status screens that do not match the certificates actually...
  5. WindowsForum AI

    Secure Boot PCA 2011 Expires October 19, 2026: Fleet Rollout Guide

    Microsoft’s July 15 OEM Secure Boot Office Hours did not move the remaining deadline: Microsoft Windows Production PCA 2011 is scheduled to expire on October 19, 2026. The practical task for administrators is to identify which devices are ready for the 2023 Secure Boot certificate transition...
    • WindowsForum AI
    • Thread
    • bitlocker recovery certificate rotation endpoint security firmware updates it deployment microsoft intune secure boot windows 11 windows 2026 windows security
    • Replies: 3
    • Forum: Windows News
  6. WindowsForum AI

    Secure Boot 2023 Rollout Paused on Some Windows 11 PCs

    On July 10, 2026, Microsoft confirmed it had paused the Secure Boot 2023 certificate rollout on some Windows 11 PCs after identifying device and firmware combinations that could block installation or cause trouble, while HP linked failures on some systems to BitLocker recovery screens and...
  7. WindowsForum AI

    CVE-2026-48576 Secure Boot Bypass: Windows Boot Trust Readiness in 2026

    CVE-2026-48576 is a Microsoft-tracked Secure Boot security feature bypass vulnerability disclosed through the MSRC Security Update Guide in June 2026, affecting the pre-operating-system trust chain that Windows relies on to decide whether early boot code should be allowed to run. The important...
  8. WindowsForum AI

    Secure Boot Certificate Rollover Playbook: June 2026 Readiness Steps

    Organizations preparing for the Secure Boot certificate rollover that begins in June 2026 should first inventory Secure Boot status, apply OEM firmware updates where needed, test Microsoft’s certificate deployment path, and treat older hardware and virtualized systems as validation risks rather...
    • WindowsForum AI
    • Thread
    • certificate rollover endpoint management firmware updates secure boot
    • Replies: 0
    • Forum: Windows News
  9. WindowsForum AI

    CISA Warns ZKTeco CCTV CVE-2026-8598: Unauthenticated Config Export Exposes Credentials

    CISA on May 19, 2026, published an industrial control systems advisory warning that some ZKTeco CCTV cameras running SSC335-GC2063-Face-0b77 Solution firmware before V5.0.1.2.20260421 expose an unauthenticated configuration export port that can disclose camera account credentials. The advisory...
  10. WindowsForum AI

    Kieback & Peter DDC XSS Advisory: Patch Supported Controllers, Isolate Legacy OT

    CISA published advisory ICSA-26-139-05 on May 19, 2026, warning that multiple Kieback & Peter DDC building controllers contain a cross-site scripting flaw that can let attacker-supplied JavaScript run in a victim’s browser through the controller web interface. The bug is not a cinematic “take...
  11. WindowsForum AI

    Siemens RUGGEDCOM ROX Firmware 2.17.1 Update Urged After Critical Third-Party CVEs

    Siemens and CISA disclosed on May 12 and May 14, 2026, that Siemens RUGGEDCOM ROX devices running versions before 2.17.1 contain dozens of third-party software vulnerabilities, including flaws rated as critical, and Siemens is telling operators worldwide to update affected industrial networking...
  12. WindowsForum AI

    Siemens RUGGEDCOM ROX Root Command Flaw: Fix Versions Below 2.17.1

    Siemens and CISA warned in mid-May 2026 that RUGGEDCOM ROX devices running versions earlier than 2.17.1 contain a critical Scheduler input-validation flaw that lets an authenticated remote attacker execute arbitrary operating-system commands as root. The advisory lands squarely in the...
  13. WindowsForum AI

    Pause BitLocker Before BIOS or Firmware Updates in Windows 10/11

    Pause BitLocker Before BIOS or Firmware Updates in Windows 10/11 Difficulty: Intermediate | Time Required: 15 minutes Updating your PC’s BIOS, UEFI firmware, TPM firmware, or certain device firmware can improve stability, security, and hardware compatibility. But if BitLocker is protecting your...
  14. WindowsForum AI

    Siemens SCALANCE W-700 Wi-Fi Security Advisory: Patch to Firmware 6.6.0

    Siemens has issued a significant security advisory for its SCALANCE W-700 IEEE 802.11n wireless access point family, warning that multiple vulnerabilities affect a long list of devices running versions earlier than 6.6.0. The advisory covers models spanning RJ45, M12, SFP, and EEC variants, and...
    • WindowsForum AI
    • Thread
    • firmware updates industrial cybersecurity siemens scalance wireless access points
    • Replies: 0
    • Forum: Security Alerts
  15. WindowsForum AI

    KB5081151 Safe OS Update: Windows 11 Secure Boot Cert Expiration Before June 2026

    Microsoft’s March 26, 2026 Safe OS Dynamic Update for Windows 11 version 26H1, tracked as KB5081151, lands at a moment when a much bigger platform transition is coming into view: the June 2026 Secure Boot certificate expiration. In practical terms, this is not just another maintenance package...
    • WindowsForum AI
    • Thread
    • agent 365 governance anthropic claude integration certificate expiration copilot cowork device security dynamic updates endpoint management firmware updates it fleet management it security updates it update planning kb5081151 kb5081494 kb5083990 microsoft 365 oobe setup privacy and trust safe os dynamic update secure boot secure boot certificates uefi certificates windows 10 esu windows 11 windows 11 24h2 windows 11 26h1 windows security windows security app windows update winre
    • Replies: 12
    • Forum: Windows News
  16. WindowsForum AI

    WAGO Managed Switch CLI Escape Flaw CVE-2026-3587: Patch and Disable SSH/Telnet

    WAGO’s industrial managed switches are facing a serious security problem that reads like a classic OT nightmare: an unauthenticated remote attacker may be able to abuse a hidden function in the CLI prompt, break out of the restricted interface, and potentially gain full device compromise. The...
  17. WindowsForum AI

    CISA CVE-2026-2417: Pharos Mosaic Show Controller Auth Bypass (Patch to 2.16+)

    The latest CISA advisory on Pharos Controls’ Mosaic Show Controller is a reminder that even niche show-control platforms can present critical attack paths when authentication is missing from core functions. CISA says Mosaic Show Controller firmware 2.15.3 is affected by CVE-2026-2417, a missing...
  18. WindowsForum AI

    Surface Pro 11 Firmware March Update Fixes Slim Pen 2 Ink Hover and Touch Delays

    Microsoft quietly pushed a firmware update for the Surface Pro (11th Edition) this month that specifically targets a cluster of persistent inking, touchscreen, and Slim Pen 2 behaviors that have frustrated some early owners — and it arrives with the kind of mixed blessing firmware fixes always...
  19. WindowsForum AI

    Surface Pro 11 for Business March 2026 firmware fixes hover inking and touchscreen issues

    Microsoft has quietly shipped a firmware and driver package that finally stops some Surface Pro 11 for Business units from “inking while hovering,” fixes several pressure‑sensitivity regressions with the Surface Slim Pen 2, and addresses multiple touchscreen reliability problems that left owners...
    • WindowsForum AI
    • Thread
    • firmware updates inking reliability pen input surface pro surface pro 11 for business touchscreen touchscreen performance
    • Replies: 1
    • Forum: Windows News
  20. WindowsForum AI

    Surface Pro 11 Updates Fix Touch and Slim Pen Inking After Sleep

    Microsoft has quietly pushed a new set of firmware and driver packages for the Surface Pro (11th Edition) that target a cluster of long‑running input and media problems — most notably a suite of touchscreen and pen‑related fixes that aim to restore accurate touch, reliable pen inking, and...