security updates

CVE‑2026‑21231 represents another entry in the long, high‑stakes catalog of Windows kernel elevation‑of‑privilege advisories — a vendor‑registered vulnerability whose public metadata, patch mapping, and “report confidence” signal should drive immediate, prioritized operational action even while...

Microsoft published the February 2026 Security Updates for Exchange Server and again urged administrators to apply them immediately — the rollup covers Exchange Server Subscription Edition (SE) RTM and, under Microsoft’s paid Extended Security Update (ESU) program, specific builds of Exchange...

Microsoft’s February 2026 cumulative for Windows 11, tracked as KB5077181, is now available and arrives as a focused security-and-quality rollup that folds in fixes from January preview packages while adding targeted hardenings and platform updates for both consumer and enterprise systems. The...

Microsoft has quietly begun enforcing a long‑announced cleanup of Windows’ printing stack: starting with January 2026 updates, Windows 11 will stop servicing legacy V3 and V4 printer drivers through Windows Update and will prefer Microsoft's modern IPP inbox class driver and Print Support Apps...

Microsoft’s Security Update Guide has recorded CVE‑2026‑0391 — a spoofing or UI‑misrepresentation flaw affecting Microsoft Edge (Chromium‑based) on Android — and organizations should treat it as an operational phishing‑enabler that demands immediate verification and patching. Background /...

Microsoft has begun previewing a substantial Windows 11 update in the Release Preview channel that pushes Microsoft’s continuity and AI agendas forward while smoothing a pile of everyday reliability and security rough edges for Insiders and early adopters. The package — delivered as KB5074105...

A routine January Patch Tuesday update left a significant slice of Windows users temporarily unable to rely on core productivity workflows after the January 13, 2026 cumulative update (KB5074109) introduced regressions that broke parts of classic Outlook and disrupted remote access for some...

Millions of Windows gamers woke up to worse frame rates and unexplained stutters after January’s cumulative, and the fastest way back to smooth play is methodical: confirm the cause, update or reinstall the GPU driver cleanly, and only use Windows rollback as a last‑resort temporary step while...

Microsoft’s first scheduled Windows 11 cumulative update of 2026 began rolling out on January 13, 2026 as KB5074109, advancing consumer installs to OS Build 26200.7623 (25H2) and 26100.7623 (24H2) while delivering a mix of security patches, reliability fixes and a handful of operational changes...

Microsoft’s January cumulative for Windows 11, KB5074109, intended to harden Secure Boot and fix NPU power-drain problems, has instead introduced a cluster of high-impact regressions — from intermittent black screens on GPU systems to Outlook POP freezes, Azure Virtual Desktop authentication...

Short answer Microsoft lists CVE‑2026‑0905 in its Security Update Guide because the bug is an upstream Chromium (OSS) vulnerability that Microsoft Edge (Chromium‑based) consumes. The SUG entry tells Edge customers whether/when Microsoft has ingested the Chromium fix and shipped an Edge build...

Short answer — Microsoft lists that Chromium CVE in the Security Update Guide because Edge is built on Chromium: MSRC publishes Chromium-assigned CVEs so Edge customers can see when Microsoft has ingested the upstream Chromium fix and which Edge build is no longer vulnerable. What happened for...

Microsoft has started rolling out the January 2026 cumulative update for Windows 11—KB5074109—which advances affected machines to OS Build 26200.7623 (25H2) or 26100.7623 (24H2) and bundles this month's security fixes, quality improvements, and a phased distribution of updated Secure Boot...

A patch released in January 2026 is causing some Windows 11 PCs to restart when users try to shut them down or put them to sleep, and Microsoft has published an emergency workaround while it works on a permanent fix. Background / Overview Microsoft shipped its January cumulative updates on...

Microsoft’s hard stop on Windows 10 support has left an enormous tail of still‑working machines exposed, prompted consumer and environmental outcry, and forced a practical reckoning about what “end of support” actually means for hundreds of millions of users around the world. Background...

Microsoft’s January cumulative update for Windows 11 — delivered as KB5074109 — does more than fix a handful of bugs: it begins a deliberate rollback of a long‑standing, convenience‑focused WDS (Windows Deployment Services) behavior that can expose sensitive Unattend.xml data to adjacent‑network...

Microsoft has closed the final vendor‑backed update channel for the Windows Vista/Windows Server 2008 codebase: the last Premium Assurance entitlements expired on January 13, 2026, and with them went Microsoft’s final promised security updates for the NT 6.x (Vista/Longhorn) lineage. Background...

Microsoft has reached a definitive end‑of‑service milestone for one of its longest‑running Windows families: the final vendor‑backed security update pathway for the Vista‑era Windows Server 2008 codebase expired on January 13, 2026, closing the Premium Assurance bridge and leaving Server 2008...

Microsoft's emergency fixes for the Meltdown CPU vulnerability in early 2018 inadvertently introduced a far more dangerous weakness on 64‑bit installations of Windows 7 and Windows Server 2008 R2 — a bug that made kernel page tables accessible to unprivileged code and allowed trivial, high‑speed...

Microsoft has quietly drawn a line under one of the longest‑lived branches of Windows: the Vista‑derived codebase that powered Windows Server 2008 has reached the absolute end of vendor‑supplied security updates, with the final paid lifecycle option (Premium Assurance) closing on January 13...