Patch Tuesday update

Winsage
July 14, 2026
Microsoft's July Patch Tuesday update addresses 570 vulnerabilities, including three critical zero-days. The vulnerabilities include 254 elevation-of-privilege flaws, 17 security feature bypasses, 145 remote-code-execution issues, 102 information disclosures, 16 spoofing vulnerabilities, and 35 denial-of-service vulnerabilities. Among these, 59 bugs are classified as "critical." The three zero-days patched are CVE-2026-56155 (elevation of privilege in Active Directory Federation Services), CVE-2026-56164 (elevation of privilege in Microsoft SharePoint Server), and CVE-2026-50661 (security bypass in Windows BitLocker). The update is recommended to be installed as soon as possible, and users can check for updates through the Windows Update settings.
Winsage
July 6, 2026
A hidden bug in Windows 11 can consume up to 500 GB of storage due to the CapabilityAccessManager.db-wal file, which should only occupy a few megabytes but can grow significantly on certain systems. Users can check for this issue using applications like TreeSize or by executing a command in the Windows Command Prompt. Microsoft has acknowledged the problem and provided a fix in the optional June 2026 update, with a broader rollout planned for the July Patch Tuesday update. Users are advised not to modify or delete the file to avoid further complications.
Winsage
July 6, 2026
To check for excessive storage consumption in Windows 11, navigate to Settings > Storage > System & Reserved. A file named CapabilityAccessManager.db-wal can cause significant storage issues, potentially consuming hundreds of gigabytes. This file is associated with the Windows Capability Access Manager service, which manages app permissions for features like microphone and camera access. Normally, this file should occupy only a few megabytes, but reports indicate it can expand to sizes like 200GB or even 513GB. Microsoft acknowledged this issue in the release notes for Windows 11 KB5095093, stating that an update to improve disk space usage for this file is scheduled for July 14, 2026. To check if your system is affected, tools like WizTree or TreeSize can be used, or a command can be executed in Command Prompt to verify the file size. If the file is excessively large, it is recommended to wait for the update or rename the file to allow Windows to regenerate it, rather than deleting it.
Winsage
July 6, 2026
Microsoft introduced an update to the out-of-box experience (OOBE) for Windows 11, identified as KB5095189, targeting versions 25H2 and 24H2. This update includes enhancements and fixes, coinciding with additional updates KB5102558 and KB5095615 from the June C-release preview update (KB5095093). A major fix addresses a storage issue caused by the Capability Access Manager process, which was consuming significant disk space. Another fix resolves a malfunction affecting Shell components, impacting the Start menu, Search bar, Settings, Taskbar, and File Explorer, primarily on provisioned PCs due to compatibility issues with XAML. This bug had been present since July 2025 and is being resolved with updates released starting June 23, 2026 (KB5095093), with full deployment expected in the following month. Users are advised to use previous workarounds until the fix is fully available. Further details can be found in support article KB5072911 on Microsoft's website.
Winsage
June 29, 2026
Major PC manufacturers, including HP, Dell, ASUS, Lenovo, MSI, Acer, Samsung, LG, and Microsoft’s Surface division, have provided guidance on transitioning to new Secure Boot certificates as the expiration of Microsoft’s 2011 certificates approaches. The expiration will occur in three phases: Microsoft Corporation KEK CA 2011 expired on June 24, 2026; Microsoft UEFI CA 2011 expired on June 27, 2026; and Microsoft Windows Production PCA 2011 is set to expire on October 19, 2026. Microsoft has begun rolling out replacement certificates through Windows Update, contingent on OEMs providing compatible BIOS updates. ASUS offers detailed documentation for both consumer and commercial devices, confirming that most users will receive updates automatically. Lenovo provides direct download links for BIOS updates organized by product family and specifies which products will not receive updates. Dell's support article covers its entire product lineup, noting that devices with an End of Service Life before January 1, 2026, will not receive updates. HP outlines a dual-track approach for updates, with specific timelines for commercial PCs. Microsoft's Surface devices receive updates directly from Microsoft, while MSI categorizes guidance based on processor generation for its laptops. Acer emphasizes backing up the BitLocker recovery key and provides a model table for confirmed BIOS release dates. Samsung confirms that all PCs running Windows 10 or 11 will function normally post-expiration, but security updates will cease. LG has released a guide for checking BIOS updates for its PCs. To verify if a PC has the 2023 certificates, users can check the Secure Boot section in Windows Security. A green checkmark indicates successful application, while yellow or red icons indicate pending updates or incompatibility. Microsoft has pushed the certificates to all eligible devices as of June 2026.
Winsage
June 22, 2026
Windows 11 has introduced the Low Latency Profile to enhance the responsiveness of the Start menu, Search, and Action Center by rapidly increasing CPU frequency during user interactions. Testing on a Lenovo ThinkCentre M700 Mini Desktop with a 6th Generation Intel Core i3-6100 processor showed that the Low Latency Profile could be activated via the June 2026 Patch Tuesday update (KB5094126) and the third-party tool ViVeTool. Initially, no significant CPU frequency spike was observed, but after enabling the feature, the CPU frequency increased from approximately 800MHz to 3.0GHz and then to 3.7GHz almost instantaneously during interactions. This resulted in a marked improvement in the responsiveness of the Start menu and Action Center, with the latter showing the most significant enhancement. The Low Latency Profile effectively improved performance on older systems without adverse effects on battery life or thermal output.
Winsage
June 22, 2026
In the June 9, 2026 Patch Tuesday update for Windows 11, users experienced a bug where the Recycle Bin's confirmation dialog for permanent deletions displayed internal file names (e.g., $Rxxxxx.ext) instead of original filenames. Microsoft acknowledged this issue in its documentation for Windows 11 version 26H1. The Recycle Bin still correctly shows original filenames, and restoring items also uses the original names. This bug arose after installing the June security update (KB5095051), but file management remains functional. Microsoft plans to address this issue in a future update.
Winsage
June 21, 2026
Microsoft has confirmed the upcoming Windows 11 26H2 feature update, set to roll out in fall 2026, likely in October. This update will not be a major overhaul and will utilize an enablement package (eKB) for installation, similar to the previous Windows 11 25H2 version. The last major update was the 24H2 version, released on October 1, 2024, while 25H2 launched in 2025 and reset the OS life cycle, extending support by an additional year. Support for Windows 11 24H2 ends on October 13, 2026, and for 25H2 until October 12, 2027. Windows 11 26H2 will be supported until October 2028 for Home, Pro, Pro EDU, and Pro for Workstations editions, and until October 2029 for Enterprise, Education, or IoT Enterprise editions. Devices running Windows 11 24H2 or 25H2 will transition to 26H2 without new hardware requirements, maintaining specifications of 4GB RAM, 64GB storage, and a 1GHz or faster 64-bit dual-core processor. Windows 11 26H1, another update, requires new silicon but does not introduce exclusive features. Major changes will be delivered through monthly cumulative updates rather than annual feature updates.
Winsage
June 19, 2026
Microsoft has confirmed a bug affecting the Recycle Bin across all supported versions of Windows following its June 2026 Patch Tuesday update. The glitch causes the confirmation dialog to display an "internal" filename instead of the user-friendly filename when deleting files, although the actual file and its deletion process remain unaffected. The issue affects various Windows client and server versions, including Windows 11 (versions 26H1, 25H2, 24H2, 23H2), Windows 10 (versions 22H2, Enterprise LTSC 2021, Enterprise LTSC 2019, Enterprise LTSB 2016), and Windows Server (2025, 2022, 2019, 2016, 2012 R2, 2012). Microsoft is developing a permanent solution, but it is unclear when it will be released. Commercial customers can contact Microsoft Support for Business for a workaround.
Search