security updates

Microsoft Edge’s security story has become less about isolated browser patches and more about following the flow of Chromium fixes as they move from Google’s upstream codebase into Microsoft’s release train. For enterprise admins, that means the real question is not simply whether a...

Chromium’s CVE‑2026‑3926 — an out‑of‑bounds read in the V8 JavaScript engine — was cataloged in Microsoft’s Security Update Guide (SUG) because Microsoft Edge (the Chromium‑based browser) consumes upstream Chromium open‑source code; the SUG entry exists to tell Edge users whether Microsoft’s...

Mozilla's latest posture on legacy Windows is a study in trade-offs: the organization will continue shipping security patches for Firefox 115 ESR to machines still running Windows 7, Windows 8, and Windows 8.1 — but it admits doing so is increasingly expensive, fragile, and ultimately risky for...

Mozilla has quietly given Windows 7 and its siblings another lease on life by keeping the Firefox 115 Extended Support Release (ESR) safety net open for a little while longer — but that extra time is both a pragmatic lifeline for legacy users and a final countdown that IT teams and hobbyists...

Microsoft shipped the March 10, 2026 cumulative update for Windows 11 version 26H1 — KB5079466 — moving eligible systems to OS Build 28000.1719 and delivering a mix of security hardening, reliability fixes, and servicing updates aimed at the new 26H1 platform. While the release contains no...

The Go standard library's html/template package has a newly disclosed security flaw — tracked as CVE-2026-27142 — that can leave web applications vulnerable to cross-site scripting (XSS) when untrusted values are templated into the content attribute of HTML meta tags, particularly those using...

Microsoft’s March 2026 Patch Tuesday brings a sizeable cumulative update for Windows 11 that folds a handful of user-facing conveniences and several enterprise-grade capabilities into the monthly security rollup — and, importantly, it introduces Sysmon as an optional, in‑box feature for the...

Microsoft has issued coordinated security updates to fix CVE-2026-26115, a newly disclosed elevation of privilege (EoP) vulnerability in Microsoft SQL Server; if you run any supported SQL Server release, your immediate action is to identify the exact build you’re running, match it to Microsoft’s...

Microsoft’s security tracker today lists CVE-2026-24287 as a Windows kernel elevation-of-privilege (EoP) vulnerability that can be abused by an authorized local user to elevate to SYSTEM, and Microsoft has published a vendor advisory confirming the issue and that a patch is available...

AMD has quietly shipped a new Ryzen chipset driver package for Windows 10 and Windows 11 — version 7.06.02.123 — that stretches across roughly the entire modern Ryzen family and focuses on security hardening, targeted bug fixes, and compatibility updates for features Microsoft has been pressing...

Microsoft is rolling out Build 26220.7934 (KB5077242) to the Windows 11 Beta Channel, a measured update that stitches together security-focused changes for scripting and system integrity, accessibility improvements in Narrator, meaningful refinements to Bluetooth LE Audio “shared audio,” and...

Mozilla has drawn a clear line under one of the last ongoing safety nets for legacy Windows desktops: Firefox 115 (ESR) is the final Firefox build that will run with official security updates on Windows 7, Windows 8, and Windows 8.1, and Mozilla’s Extended Support Release maintenance for that...

Microsoft’s January patch cycle quietly widened protection for a pair of aging platforms that many organizations still rely on: the company delivered cumulative security updates for Windows 10 Enterprise LTSB 2016 (version 1607) and Windows Server 2016, a move that has prompted IT teams to...

Mozilla has confirmed that Firefox will no longer receive security updates on older desktop Windows releases: Firefox 115 (ESR) is the final build that runs on Windows 7, Windows 8, and Windows 8.1, and Mozilla’s Extended Support Release maintenance for that branch is scheduled to stop at the...

Mozilla’s support path for users running pre–Windows 10 desktops has reached a clear milestone: Firefox 115 ESR will be the last maintained Firefox build for Windows 7, Windows 8 and Windows 8.1, and Mozilla’s support documentation now states that security updates for those legacy installations...

Microsoft’s February cumulative for Windows 11, shipped as KB5077181, lands as a broad stability-and-security repair but arrives with a complicated aftertaste: it formally addresses the Nvidia “black screen” crashes and several gaming regressions introduced in January, while simultaneously being...

Mozilla pushed a small but important maintenance release for the stable channel this week: Firefox 147.0.4 ships a targeted user-experience fix that stops some users from seeing a blank New Tab (about:home/about:newtab) and closes a heap-buffer-overflow in the libvpx video codec (tracked as...

Ammon News’ now-unavailable piece urging readers that “it’s time to upgrade to Windows 11 without hesitation” landed on a familiar note: upgrade, because security and future compatibility are no longer optional. The original Ammon News URL the user supplied returns an error, but an archived copy...

I’m on Windows 11 Home 25H2, OS Build 26200.7623. KB5077181 repeatedly fails to install with error 0x800f0983 (download completes, install phase fails, retries). I’ve already run the usual integrity checks (SFC/DISM) and they report no corruption, but the update continues to fail. I also tried...

CVE‑2026‑21231 represents another entry in the long, high‑stakes catalog of Windows kernel elevation‑of‑privilege advisories — a vendor‑registered vulnerability whose public metadata, patch mapping, and “report confidence” signal should drive immediate, prioritized operational action even while...