Patch Tuesday updates Archives

Winsage

August 11, 2026

Windows 11 KB5121003 & KB5120240 cumulative updates released

Microsoft has released cumulative updates KB512103 and KB5120240 for Windows 11 versions 25H2, 24H2, and 23H2, addressing security vulnerabilities, bugs, and introducing new features. These updates include the August 2026 Patch Tuesday security patches, which address 400 vulnerabilities. Users can install the updates via Start > Settings > Windows Update or manually from the Microsoft Update Catalog. This is the eighth 'Patch Tuesday' release of 2026, with no exclusive changes for either version. Key enhancements in the August 2026 update include: - File Explorer: Improved file size display, middle-click functionality for folders, resolution of loading issues, and enhanced clarity of file thumbnails. - Windows Search: Better handling of typos in app search and improved relevance of settings in search results. - Voice Access: Introduction of Voice Isolation and Korean language support, along with reliability improvements. - Widgets: Taskbar notification badges now reflect the Windows accent color, and the Lock screen Widgets experience has been simplified. - Start Menu: Improved reliability of view preferences and enhanced keyboard navigation. - Windows Hello: Enhanced Sign-in Security now supports peripheral fingerprint sensors. - Power and Battery: Improved reliability of power settings and restored threshold setting for energy saver activation. - Accessibility: Enhanced Magnifier experience on touch devices. Microsoft has not reported any new issues related to this month's updates.

Winsage

August 11, 2026

Microsoft Releases August 2026 Patch Tuesday Updates

Microsoft has released the August 2026 Patch Tuesday updates for all supported versions of Windows 11, including the KB5121000 update for version 26H1, which introduces a new Screen tint accessibility option, a subdued Widgets experience, and the ability to pause Windows Updates for up to 35 days. The KB5121003 update for versions 25H2 and 24H2 includes new gesture controls for precision touchpads, enhanced Windows Hello security for peripheral fingerprint sensors, taskbar notification badges reflecting the Windows accent color, improved app search functionality, upgraded Voice Access with Voice Isolation, better Windows Update settings, and the ability to set a threshold for energy saver activation. Additionally, Microsoft has addressed 398 Common Vulnerabilities and Exposures (CVEs) this month, with 62 classified as ‘Critical’ and one ‘Important’ flaw currently being exploited by attackers.

Winsage

July 30, 2026

Windows 11 KB5101684 update released with 42 changes and fixes

Microsoft has released the KB5101684 preview cumulative update for Windows 11 versions 24H2 and 25H2, which includes 42 bug fixes and various enhancements. This update is part of the optional non-security preview update schedule and does not include security updates. Users can install it via Settings > Windows Update > Check for Updates, with an option to choose installation. The update elevates Windows 11 24H2 to build 26100.8973 and Windows 11 25H2 to build 26200.8973. It addresses issues such as false invalid credential errors in File History backups, noncompliance in newly enrolled devices, and incorrect file markings on DFS mapped drives. New features include enhanced navigation in File Explorer, more accurate file size indicators, improved search results for app names, and new precision touchpad controls. Voice Isolation support for Voice Access is introduced, along with expanded Windows Hello Enhanced Sign-in Security for external fingerprint readers. Immediate features include enhancements to Secure Boot, app stability improvements, and fixes for MDM compliance issues. Additional features rolling out post-update involve better file size displays in File Explorer, enhanced app search, Voice Isolation for voice access, taskbar notification badge updates, new touchpad gesture controls, and reliability improvements for the Start menu and Windows sign-in screens. Microsoft reports no known issues with this update.

Winsage

July 27, 2026

New Certighost PoC exploit lets attackers hijack Windows domains

A proof-of-concept exploit for the "Certighost" vulnerability (CVE-2026-54121) has been released, affecting Windows Active Directory Certificate Services. This vulnerability allows authenticated attackers to compromise a Windows domain by manipulating machine account attributes to obtain certificates from AD CS, enabling them to authenticate as that machine or even as a domain controller. The flaw was reported to Microsoft on May 14, 2026, and addressed in the July 2026 Patch Tuesday updates. The vulnerability exploits a fallback mechanism in AD CS during certificate enrollment requests, allowing attackers to direct the Certification Authority to their controlled systems. The researchers demonstrated that a low-privileged user could create a machine account and use it to impersonate a domain controller, leading to potential domain compromise. Microsoft has added validation to the chase process in the July updates to prevent this exploitation. For those unable to install the updates, a temporary workaround involves disabling the chase fallback, though this has not been extensively tested.

Winsage

July 22, 2026

One in six Windows PCs still runs Windows 10, and the vulnerabilities are piling up

Approximately 17% of all Windows client devices are still running Windows 10, equating to about one in six machines. Windows 11 accounts for 78% of Windows devices, with third-party trackers indicating it surpassed 70% of desktop share as of February 2026. Official support for Windows 10 ended in October 2025, but Microsoft’s Extended Security Updates (ESU) program will provide patches until October 2027 for eligible devices. A typical Windows 10 device has an average of 1,903 active security vulnerabilities, nearly three times the 652 CVE-tracked flaws found on a Windows 11 machine. 66% of Windows 10 vulnerabilities are classified as "high" or "critical." Small and medium enterprises have 21.4% of their Windows devices still on Windows 10, while larger enterprises have 16.6%. The healthcare and pharmaceuticals sectors have 23% of devices on Windows 10, followed by consumer and retail at 22%, and manufacturing at 18%. Lansweeper is urging organizations to enroll in the ESU program and address reasons for remaining on Windows 10 as 2026 approaches.

Winsage

July 19, 2026

Microsoft confirms WSUS service degradation impacting all versions of Windows

A significant issue has emerged with the Windows Server Update Service (WSUS), affecting all versions of Windows client and server. Microsoft acknowledged the service degradation that began before July 14, coinciding with the latest Patch Tuesday. This degradation has caused prolonged synchronization times and occasional timeouts during sync operations on WSUS servers, attributed to a buildup of publishing metadata. Microsoft is working on a resolution to improve performance and restore synchronization times. The affected platforms include various versions of Windows 11, Windows 10, and Windows Server from 2012 to 2025. An update is expected to be released shortly to address the issue.

Winsage

July 16, 2026

Microsoft’s July patches fix over 600 flaws, shattering last month’s record

Microsoft has released its July 2026 Patch Tuesday updates, addressing 570 new security vulnerabilities, bringing the total for the month to over 620. The cumulative count of vulnerabilities patched this year has reached 1,380, exceeding the total of 1,250 for the entire year of 2020. Over 400 vulnerabilities are related to various versions of Windows, and the Windows 10 Extended Security Update program has been extended until October 12, 2027. Notable vulnerabilities include CVE-2026-56155 in Active Directory Federation Services, which allows attackers to gain administrator rights, and several critical Remote Code Execution vulnerabilities, including CVE-2026-57092 in Hyper-V and CVE-2026-56190 in Remote Desktop Protocol. Microsoft has also patched 97 vulnerabilities in Office products, with 17 classified as critical RCE vulnerabilities, and four vulnerabilities in Exchange Server, including CVE-2026-55008. The latest Microsoft Edge update addresses 27 vulnerabilities related to Chromium, and a vulnerability in Minecraft Bedrock servers has been patched.

Winsage

July 16, 2026

Windows 11 gets new registry policy to give IT admins more control

Microsoft will introduce a new registry policy in Windows 11 in July 2026 that allows IT administrators to enable automatic acceptance of single sign-on (SSO) prompts on managed devices. This policy will streamline user authentication by using Windows sign-in credentials automatically for Microsoft apps or services, reducing the need for manual authentication. The registry path for this policy is HKLMSOFTWAREPoliciesMicrosoftWindowsAAD, with the value AutoAcceptSsoPermission (DWORD) set to 1. It can be deployed using Group Policy Objects (GPO), Intune, Microsoft Configuration Manager, or mobile device management (MDM) tools. This setting is applicable only to Windows 11 versions 25H2 and 24H2 that have received the July 2026 Patch Tuesday updates (KB5101650 and KB5094126) and is designed for managed devices using Entra ID accounts, not personal Microsoft accounts or unmanaged devices.

Winsage

July 15, 2026

Microsoft patches record 570 Windows security bugs with two exploited zero days

Microsoft released its July Patch Tuesday updates, addressing 570 security vulnerabilities in Windows, a record number for the company. This update includes three zero-day vulnerabilities, two of which have been exploited in real-world attacks, affecting Microsoft’s Active Directory and SharePoint, while the third concerns BitLocker encryption. The update also enhances Windows features, including changes to the Widgets app, improvements in File Explorer speed, refined Bluetooth connectivity, and a new feature allowing users to pause updates until a specific date. However, the update has been temporarily halted for certain Dell computers due to compatibility issues, with Microsoft working on a fix.

Winsage

July 14, 2026

Microsoft Just Patched a Record 570 Flaws in Windows

Microsoft's July Patch Tuesday update addresses 570 vulnerabilities, including three critical zero-days. The vulnerabilities include 254 elevation-of-privilege flaws, 17 security feature bypasses, 145 remote-code-execution issues, 102 information disclosures, 16 spoofing vulnerabilities, and 35 denial-of-service vulnerabilities. Among these, 59 bugs are classified as "critical." The three zero-days patched are CVE-2026-56155 (elevation of privilege in Active Directory Federation Services), CVE-2026-56164 (elevation of privilege in Microsoft SharePoint Server), and CVE-2026-50661 (security bypass in Windows BitLocker). The update is recommended to be installed as soon as possible, and users can check for updates through the Windows Update settings.