security updates

Microsoft’s January cumulative for Windows 11, delivered as KB5074109, patches a broad set of security issues while correcting a surprisingly practical battery‑life regression on NPU‑equipped devices and preparing the platform for a phased Secure Boot certificate rotation — but it also...

Microsoft released the January 13, 2026 security baseline today — published as KB5074109 — and enterprise administrators should treat this as both a mandatory security checkpoint and a practical reminder about the new Hotpatch servicing cadence for Windows 11 Enterprise (24H2 and 25H2). The...

Microsoft’s first security update for Windows 10 in 2026, KB5073724, is a compact but consequential patch: it’s a security-only cumulative for Extended Security Update (ESU) and LTSC devices that removes legacy modem drivers, prepares devices for Microsoft’s replacement Secure Boot certificates...

Microsoft has confirmed that an August 2025 security update intended to close a Windows Installer privilege‑escalation hole instead changed MSI repair behavior in ways that produced unexpected User Account Control (UAC) prompts and silent repair failures for many non‑administrator users across a...

Microsoft's January 13, 2026 cumulative update for Windows 11 (KB5073455, OS Build 22631.6491) closes several security gaps, removes legacy modem drivers with known high-severity vulnerabilities, and introduces a controlled, phased mechanism to deliver replacement Secure Boot certificates ahead...

Microsoft’s advisory record and community triage indicate a local Elevation of Privilege vulnerability affecting the Capability Access Management Service (camsvc) identified as CVE‑2026‑21221, but the public technical footprint remains deliberately sparse: the MSRC Security Update Guide entry...

Microsoft has published a Security Update Guide entry for CVE-2026-20951, a Microsoft Office SharePoint Server remote code execution (RCE) vulnerability included in the January 2026 security rollup, and administrators running on‑premises SharePoint should treat it as a high‑priority...

A time‑of‑check/time‑of‑use (TOCTOU) race condition in the Windows Installer service has been cataloged as CVE‑2026‑20816 and is being treated as a high‑priority local elevation‑of‑privilege (EoP) vulnerability that can allow an authorized local account to escalate to administrative or SYSTEM...

A newly disclosed elevation‑of‑privilege issue affecting Windows Admin Center (WAC) stems from improper verification and handling of trusted artifacts and allows a local, authorized attacker to escalate privileges on a host running WAC; operators should treat affected management hosts as...

A high‑severity Chromium vulnerability, tracked as CVE‑2026‑0628, was disclosed in early January 2026 and patched upstream in Chrome 143.x; Microsoft has recorded the same CVE in its Security Update Guide (SUG) to tell Edge customers when their downstream Microsoft Edge builds have ingested the...

I still run a Windows 10 PC in my living room because it does exactly what I need—and with a careful, layered approach I’ve kept it safe even after Microsoft’s official support ended on October 14, 2025. Background / Overview Windows 10 reached its official end-of-support date on October 14...

Microsoft’s Security Update Guide now lists CVE-2025-14765 — an out‑of‑bounds read and write vulnerability in the V8 JavaScript engine used by Chromium — because Microsoft Edge (Chromium‑based) consumes upstream Chromium code and Microsoft publishes the Security Update Guide entry to show...

Microsoft appears to be tightening the Windows 10 update pathway in ways that will change how millions of PCs receive security fixes — and some recent headlines suggesting the company will “remove an essential update feature for non‑ESU users” need careful unpacking to separate confirmed policy...

Microsoft has confirmed a serious regression in its December 2025 Extended Security Update (ESU) rollups for Windows 10 and several server builds: the cumulative patches that include KB5071546 (and companion KBs for older server SKUs) modify the Message Queuing (MSMQ) security model and NTFS...

Microsoft’s December Patch Tuesday update, delivered as KB5072033, landed on December 9, 2025, and while it does not introduce headline-grabbing features, it fixes two of the most visible annoyances in everyday Windows 11 use: the File Explorer white-flash when navigating and a buggy Ask Copilot...

Microsoft’s plan to install Windows quality (monthly security) updates during the out-of-box experience (OOBE) for managed Windows 11 devices is now a live, configurable admin control — but it comes with caveats, prerequisites, and real-world trade-offs that every IT team should evaluate before...

Microsoft's December security update contains another reminder that old, system-level services can still be an attractive target for attackers: CVE-2025-62474 is an elevation of privilege vulnerability affecting the Windows Remote Access Connection Manager (RasMan) component, and system...

Microsoft’s advisory for CVE-2025-62562 — an Outlook remote code execution (RCE) vulnerability — is unambiguous: if your systems are offered multiple security updates for this issue, you must install every update that applies to the Office/Outlook binaries in your estate. Microsoft states that...

Microsoft’s December Patch Tuesday brought a focused Windows 11 rollup for the 23H2 servicing baseline: KB5071417 (OS Build 22631.6345), a cumulative security-and-quality update that formally carries forward fixes from November’s roll and introduces a notable behavioral change in PowerShell 5.1...

Dell’s blunt math on the PC installed base — roughly 1.5 billion machines, with “about 500 million” capable of running Windows 11 but still on Windows 10 and another “about 500 million” too old to meet Windows 11’s hardware gate — has pushed a quiet but important story into the open: the Windows...