Patch Tuesday Archives

Winsage

July 29, 2026

Windows 11’s optional July update speeds up the Start menu and taskbar

The optional update KB5101684 introduces updated Secure Boot certificates for a broader range of computers, enhancing system security. It is available for manual installation through the Microsoft Update Catalog and will be released to all users during the upcoming Patch Tuesday in August. After installation, Windows 11 25H2 will have a build number of 26200.8973, and Windows 11 24H2 will have a build number of 26100.8973.

Winsage

July 29, 2026

Missed Windows 11 Secure Boot? Don’t panic, Microsoft is still pushing it in the coming months

Microsoft reassured Windows 11 and Windows 10 users that their PCs will continue to boot normally and receive updates even if they have not yet received the new Secure Boot 2023 certificates. The rollout of these certificates is expected to continue over the upcoming months. The initial Secure Boot certificate expired on June 24, 2026, and Microsoft has been replacing older 2011 certificates since 2024. The latest update, KB5101650, transitioned Windows 11 to OS builds 26200.8875 and 26100.8875 for versions 25H2 and 24H2, respectively. The 2023 certificates replace older certificates with modern cryptographic standards, allowing Microsoft to deliver DBX revocation updates without interruption. Devices using the 2011 KEK can only receive DBX updates signed with that key, which is no longer valid after June 24. Microsoft has been rolling out the 2023 certificates for the past two years, and many devices remained in a yellow or red status by the June deadline. To check Secure Boot status, users can navigate to Windows Security > Device Security. A green checkmark indicates successful application of the certificates, while yellow and red alerts indicate compatibility issues or firmware incompatibility. PCs that are older or operating in Legacy BIOS mode will not receive the updates. Windows 10 also receives Secure Boot updates, but enrollment in Extended Security Updates (ESU) is required.

Winsage

July 29, 2026

Windows 11’s August Patch Tuesday update brings several important changes, and I break down the biggest ones

Microsoft will release the Windows 11 August 2026 Security Update on August 11, 2026, featuring new functionalities and enhancements. Key additions include Windows Hello Enhanced Sign-in Security, the ability to uninstall AI models from Copilot+ PCs, new touchpad gestures, voice isolation for Voice Access, Fluid Dictation for Voice Typing, and a redesigned Start menu with parental controls notice. File Explorer improvements include displaying file sizes in appropriate units, middle-clicking to open folders in new tabs, and fixes for bugs. Users can manage AI models through Settings, and the Lock screen will default to the Weather widget. Touchpad settings will allow customization of scroll and zoom speeds. Fluid Dictation will be deactivated by default, with tooltips for guidance, while Voice Access will feature enhanced speech recognition settings. The Account Control interface will be redesigned for clarity, and power settings will apply across all plans. Windows Update will provide better progress estimates and improved post-update cleanup. Enhancements to system sounds in dark mode will also be included.

Winsage

July 28, 2026

Windows Insiders Get More Windows 11 In-Box App Updates

Microsoft has begun documenting updates to its in-box applications for Windows 11 through the Windows Insider Program. As of the end of July, updates have been rolled out for the following applications: - Calculator: Three fixes addressing issues in Scientific mode, an access key conflict, and improved screen reader support. - Clock: Two fixes targeting a bug in Focus Sessions and enhancing the accuracy of sunrise and sunset times for users at high latitudes. - Media Player: Three fixes for problems with local album art, disabled libraries, and track list rendering. - Notepad: Several fixes improving functionality with Markdown files, copying and pasting of indented and nested lists, concurrent print jobs, launch performance, and rendering of underscore characters. These updates are being distributed through various channels and are expected to be available during next month’s Patch Tuesday.

Winsage

July 27, 2026

New Certighost PoC exploit lets attackers hijack Windows domains

A proof-of-concept exploit for the "Certighost" vulnerability (CVE-2026-54121) has been released, affecting Windows Active Directory Certificate Services. This vulnerability allows authenticated attackers to compromise a Windows domain by manipulating machine account attributes to obtain certificates from AD CS, enabling them to authenticate as that machine or even as a domain controller. The flaw was reported to Microsoft on May 14, 2026, and addressed in the July 2026 Patch Tuesday updates. The vulnerability exploits a fallback mechanism in AD CS during certificate enrollment requests, allowing attackers to direct the Certification Authority to their controlled systems. The researchers demonstrated that a low-privileged user could create a machine account and use it to impersonate a domain controller, leading to potential domain compromise. Microsoft has added validation to the chase process in the July updates to prevent this exploitation. For those unable to install the updates, a temporary workaround involves disabling the chase fallback, though this has not been extensively tested.

Winsage

July 22, 2026

One in six Windows PCs still runs Windows 10, and the vulnerabilities are piling up

Approximately 17% of all Windows client devices are still running Windows 10, equating to about one in six machines. Windows 11 accounts for 78% of Windows devices, with third-party trackers indicating it surpassed 70% of desktop share as of February 2026. Official support for Windows 10 ended in October 2025, but Microsoft’s Extended Security Updates (ESU) program will provide patches until October 2027 for eligible devices. A typical Windows 10 device has an average of 1,903 active security vulnerabilities, nearly three times the 652 CVE-tracked flaws found on a Windows 11 machine. 66% of Windows 10 vulnerabilities are classified as "high" or "critical." Small and medium enterprises have 21.4% of their Windows devices still on Windows 10, while larger enterprises have 16.6%. The healthcare and pharmaceuticals sectors have 23% of devices on Windows 10, followed by consumer and retail at 22%, and manufacturing at 18%. Lansweeper is urging organizations to enroll in the ESU program and address reasons for remaining on Windows 10 as 2026 approaches.

Winsage

July 21, 2026

One in six PCs still run Windows 10, and they’re far less secure than Windows 11

Windows 10 officially reached its end of support in October 2025. Windows 11 has a 78.8% share of Windows devices, while Windows 10 maintains 16.9%. A typical Windows 10 device has an average of 1,903 active Common Vulnerabilities and Exposures (CVEs), compared to 652 on Windows 11, with 66.6% of Windows 10 vulnerabilities rated as high or critical. Microsoft's Extended Security Updates (ESU) program has been extended until October 12, 2027, providing critical security patches for eligible Windows 10 devices. The rise in memory and storage prices has made older Windows 10-compatible hardware more economically viable for some users.

Winsage

July 21, 2026

Microsoft Releases New Windows 11 Security Update Fix For Dell Users

On July 21, Microsoft announced an emergency security update, KB5121767, for Windows 11 versions 25H2 and 24H2, due to complications from the July Patch Tuesday update, KB5101650, which caused performance issues for certain Dell users, including unexpected system shutdowns. The problem was linked to a conflict between the Windows USB-C Connection Manager interface and the Intel Innovation Platform Framework Processor Participant driver. Affected Dell models include the Dell Pro Max 14 Premium MA14250, Dell Pro Max 16 Premium MA16250, Dell XPS 17 9720, and Dell XPS 17 9730. Microsoft recommends that only users of these impacted devices install the update, while assuring unaffected users that no action is necessary. Additionally, Microsoft acknowledged issues affecting Windows Server Update Services that hinder Windows Update scans, stemming from a buildup of publishing metadata, and has implemented a service-side mitigation to address this.

Winsage

July 21, 2026

Microsoft Releases New Windows 11 Security Update Fix For Dell Users

Microsoft has released an emergency out-of-band security update (KB5121767) for Windows 11 versions 25H2 and 24H2 due to performance issues caused by the July Patch Tuesday update (KB5101650) affecting certain Dell devices. The issues include system shutdowns, stemming from a conflict between the Windows USB-C Connection Manager and the Intel Innovation Platform Framework Processor Participant driver. Confirmed affected Dell models include the Dell Pro Max 14 Premium MA14250, Dell Pro Max 16 Premium MA16250, Dell XPS 17 9720, and Dell XPS 17 9730. The update is specifically for users of these devices experiencing performance-related issues, and Microsoft stated that no action is required for unaffected devices.

Winsage

July 21, 2026

Microsoft issues emergency Windows 11 KB5121767 update to address unexpected shutdowns and overheating on certain Dell PCs

Microsoft has halted the deployment of its latest Patch Tuesday update for Windows 11 on select Dell PCs due to incompatibility with Intel's IPF driver, which caused issues such as unexpected shutdowns, overheating, and decreased system performance. Microsoft is working to resolve these complications and has released an emergency out-of-band update, KB5121767, for Windows 11 versions 24H2 and 25H2 to address the concerns.