Patch Tuesday Archives

Winsage

July 22, 2026

One in six Windows PCs still runs Windows 10, and the vulnerabilities are piling up

Approximately 17% of all Windows client devices are still running Windows 10, equating to about one in six machines. Windows 11 accounts for 78% of Windows devices, with third-party trackers indicating it surpassed 70% of desktop share as of February 2026. Official support for Windows 10 ended in October 2025, but Microsoft’s Extended Security Updates (ESU) program will provide patches until October 2027 for eligible devices. A typical Windows 10 device has an average of 1,903 active security vulnerabilities, nearly three times the 652 CVE-tracked flaws found on a Windows 11 machine. 66% of Windows 10 vulnerabilities are classified as "high" or "critical." Small and medium enterprises have 21.4% of their Windows devices still on Windows 10, while larger enterprises have 16.6%. The healthcare and pharmaceuticals sectors have 23% of devices on Windows 10, followed by consumer and retail at 22%, and manufacturing at 18%. Lansweeper is urging organizations to enroll in the ESU program and address reasons for remaining on Windows 10 as 2026 approaches.

Winsage

July 21, 2026

One in six PCs still run Windows 10, and they’re far less secure than Windows 11

Windows 10 officially reached its end of support in October 2025. Windows 11 has a 78.8% share of Windows devices, while Windows 10 maintains 16.9%. A typical Windows 10 device has an average of 1,903 active Common Vulnerabilities and Exposures (CVEs), compared to 652 on Windows 11, with 66.6% of Windows 10 vulnerabilities rated as high or critical. Microsoft's Extended Security Updates (ESU) program has been extended until October 12, 2027, providing critical security patches for eligible Windows 10 devices. The rise in memory and storage prices has made older Windows 10-compatible hardware more economically viable for some users.

Winsage

July 21, 2026

Microsoft Releases New Windows 11 Security Update Fix For Dell Users

On July 21, Microsoft announced an emergency security update, KB5121767, for Windows 11 versions 25H2 and 24H2, due to complications from the July Patch Tuesday update, KB5101650, which caused performance issues for certain Dell users, including unexpected system shutdowns. The problem was linked to a conflict between the Windows USB-C Connection Manager interface and the Intel Innovation Platform Framework Processor Participant driver. Affected Dell models include the Dell Pro Max 14 Premium MA14250, Dell Pro Max 16 Premium MA16250, Dell XPS 17 9720, and Dell XPS 17 9730. Microsoft recommends that only users of these impacted devices install the update, while assuring unaffected users that no action is necessary. Additionally, Microsoft acknowledged issues affecting Windows Server Update Services that hinder Windows Update scans, stemming from a buildup of publishing metadata, and has implemented a service-side mitigation to address this.

Winsage

July 21, 2026

Microsoft Releases New Windows 11 Security Update Fix For Dell Users

Microsoft has released an emergency out-of-band security update (KB5121767) for Windows 11 versions 25H2 and 24H2 due to performance issues caused by the July Patch Tuesday update (KB5101650) affecting certain Dell devices. The issues include system shutdowns, stemming from a conflict between the Windows USB-C Connection Manager and the Intel Innovation Platform Framework Processor Participant driver. Confirmed affected Dell models include the Dell Pro Max 14 Premium MA14250, Dell Pro Max 16 Premium MA16250, Dell XPS 17 9720, and Dell XPS 17 9730. The update is specifically for users of these devices experiencing performance-related issues, and Microsoft stated that no action is required for unaffected devices.

Winsage

July 21, 2026

Microsoft issues emergency Windows 11 KB5121767 update to address unexpected shutdowns and overheating on certain Dell PCs

Microsoft has halted the deployment of its latest Patch Tuesday update for Windows 11 on select Dell PCs due to incompatibility with Intel's IPF driver, which caused issues such as unexpected shutdowns, overheating, and decreased system performance. Microsoft is working to resolve these complications and has released an emergency out-of-band update, KB5121767, for Windows 11 versions 24H2 and 25H2 to address the concerns.

Winsage

July 20, 2026

Windows Server Update Services buckle under Microsoft’s metadata mountain

Microsoft's Windows Server Update Services (WSUS) is facing significant challenges, particularly with existing deployments experiencing synchronization issues described as "sync purgatory." The problems stem from "severe degradation" due to a "buildup of publishing metadata," leading to slow synchronization processes and timeouts. This issue is not related to the recent Patch Tuesday update but has seen a "heightened impact" since July 13, 2026. Although WSUS is a critical tool for managing updates in enterprise environments and remains supported, Microsoft has recommended transitioning to alternative solutions, especially cloud-based options, since October 2024. Many administrators continue to rely on WSUS, which poses risks of failed synchronization and potential vulnerabilities. As of now, Microsoft has not provided a workaround for affected servers but has implemented a mitigation for new installations as of July 18. Existing servers are still experiencing difficulties, and Microsoft is working on solutions to help remove problematic metadata. The issue affects nearly all desktop and server operating systems supported by WSUS, including Windows 11 26H1 and older versions like Windows 10 1607 and Windows Server 2012. Administrators currently have limited options and must monitor the situation as it develops.

Winsage

July 20, 2026

Microsoft rushes out Windows fix for Dell’s hot and bothered PCs

Microsoft has released an out-of-band update, KB5121767, to resolve an incompatibility issue affecting certain Dell models, allowing them to receive the July 2026 Windows security patch. This update targets the Intel Innovation Platform Framework drive, which caused performance, power consumption, and system behavior issues. It is applicable for Windows 11 versions 25H2 and 24H2. A separate hotpatch, KB5121768, is available for eligible Windows 11 Enterprise devices. Microsoft paused the Patch Tuesday rollout for the affected models to facilitate this update. The incompatibility was linked to the Intel driver and the Windows USB-C Connection Manager interface introduced in a June 23 preview update. Users experienced slowdowns, overheating, and unexpected shutdowns.

Winsage

July 20, 2026

Windows 11’s biggest updates may need multiple reboots, but that’s normal, don’t force shutdown

Users may experience double reboots when installing substantial Windows updates, such as the April and July 2026 Updates, due to factors like Secure Boot and .NET Framework updates. The July 2026 .NET Framework update specifically requires a separate reboot. Microsoft is still rolling out the Secure Boot 2023 certificate update, which may also lead to multiple reboots. Users are advised not to panic during these reboots and to allow the system time to complete the installation process. Additionally, Microsoft has warned against delaying updates for more than three days due to increasing update sizes related to security vulnerabilities. Some users may encounter SCEP certificate errors in the Event Viewer after the July 2026 Update, but these errors do not indicate a failure of the update process.

Winsage

July 20, 2026

July 2026 Patch Tuesday: KB5101650 Windows 11 Update

On July 14, 2026, Microsoft released cumulative update KB5101650 for Windows 11 versions 25H2 and 24H2, addressing OS Builds 26200.8875 and 26100.8875. This update includes essential security fixes, updates to Secure Boot certificates, and enhanced Remote Desktop Protocol (RDP) defenses against phishing attacks. It consolidates July 2026's security content, addressing known vulnerabilities and introducing functional improvements. The update is critical for minimizing exposure to identified threats and is prioritized for systems managing remote access or nearing certificate expiration. The update enhances Remote Desktop security by supporting SHA-2 certificate thumbprints while retaining SHA-1 for legacy compatibility. It includes new Group Policy options to mitigate phishing risks associated with malicious .rdp files. The curl upgrade to version 8.21.0 incorporates security patches for command-line tools in Windows environments. Secure Boot certificates are automatically updated through Windows updates, ensuring boot security across various hardware. KB5101650 installs primarily through the Windows Update interface, requiring a restart to activate changes. Enterprise environments can use the Microsoft Update Catalog for manual distribution. A temporary restriction affects certain Dell devices with Intel Innovation Platform Framework drivers, which Microsoft plans to address in a future update. The cumulative update resolves a total of 622 Microsoft CVEs, including 416 affecting Windows components. Users are advised to verify and install the update promptly to secure the full suite of improvements.

Winsage

July 20, 2026

Windows 11 trades noisy Bing ads for the clean Search experience it always needed

Microsoft has announced a comprehensive upgrade to the Search feature in Windows 11, eliminating ads and promotional materials to enhance user experience. The July 2026 Patch Tuesday update introduces new features, including Point-in-time Restore and addresses 570 vulnerabilities, with AI aiding in vulnerability discovery. The rollout of the KB5101650 update faced challenges for Dell users, leading Microsoft to pause it for affected devices. Additionally, Microsoft is testing a slightly larger search box to improve design consistency.