security fixes

Winsage
February 20, 2026
Microsoft has announced Windows 11 26H1, a release intended exclusively for new ARM devices launching in 2026, specifically those powered by the Snapdragon X2 series. This version is not a feature update for existing PCs and will not appear in Windows Update notifications for users on Intel or AMD hardware. Windows 11 26H1 is based on a new internal core designed for ARM silicon, referred to as a "hardware-optimized release," and may carry the codename Bromine. The OS Build number for 26H1 is 28020.1611, distinguishing it from previous updates. Key enhancements include full integration of semantic natural-language search within Settings, an increase in the FAT32 format limit from 32 GB to 2 TB, and UI refinements. Notable omissions include the removal of .NET Framework 3.5 as an optional feature and a safeguard preventing the System Preparation Tool from running in Safe Mode. Windows 11 26H2 is expected later in 2026 for existing PCs.
Winsage
February 14, 2026
Microsoft has released a patch for a significant vulnerability in Notepad on Windows 11 that could allow attackers to execute code by opening a Markdown file and clicking on a malicious link. This vulnerability was due to how Notepad processed links within Markdown files, which could trigger unverified protocols to load remote content. The patch now includes a security warning before such links can be activated. Users are advised to check for updates via Windows Update and the Microsoft Store to ensure Notepad and related components are up to date. Security tips include inspecting URLs before clicking and keeping Microsoft Defender features enabled.
Winsage
February 12, 2026
Microsoft's February Patch Tuesday update addresses feature and security bugs, continuing the refresh of Secure Boot certificates to protect against bootkit malware. Secure Boot prevents malicious software from executing during startup by using trusted certificates, many of which are set to expire in June. The update is available for both Windows 11 and Windows 10 users, with the latter needing to be enrolled in the Extended Security Updates (ESU) program until October 2026. Windows 11 fixes include resolutions for full-screen gaming and WPA3-Personal Wi-Fi connectivity issues, while Windows 10 improvements address Chinese fonts, specific graphics processing units, and custom folder names in File Explorer. A bug causing unexpected restarts in Secure Launch-compatible PCs has also been fixed. The update includes 55 security patches, a decrease from January's 114, with two classified as critical and six identified as zero-day vulnerabilities. One vulnerability exploited in the wild could allow system privilege escalation, another could disrupt network connectivity, and a third could disable security controls and access sensitive data. Users can update their Windows 11 PCs through System > Windows Update, and Windows 10 users through System > Update & Security. Due to previous buggy updates, users may consider waiting a few days before installing the February update, with the option to uninstall if issues arise.
Winsage
February 11, 2026
To address slowdowns and glitches in Windows 11, users should verify several settings before considering a complete reinstallation. Key actions include: 1. Check for Windows Updates: Navigate to Settings > Windows Update to install patches and update device drivers. Uninstall problematic updates if necessary. 2. Manage Startup Applications: Use Task Manager (Ctrl+Shift+Esc) or Settings > Apps > Startup to disable unnecessary auto-starting applications to improve boot speed. 3. Pause OneDrive Syncing: Temporarily pause OneDrive syncing during resource-intensive tasks to prevent performance degradation. 4. Adjust Visual Effects: Disable Transparency effects and Animation effects in Settings > Personalization > Colors and Settings > Accessibility > Visual effects, respectively, to reduce GPU strain. 5. Limit Notifications: Turn off notifications in Settings > System > Notifications to minimize interruptions. 6. Restrict Background Activity: Set background app permissions to "Never" for infrequently used applications to conserve memory and disk usage. 7. Run Security Scans: Use Windows Security to perform a Quick scan and ensure that real-time protection features are enabled to detect malware and adware. 8. Browser Maintenance: Reset browser settings, remove unknown extensions, and enable tracking protection to improve resource management. If issues persist, further steps include running System File Checker, testing memory, checking storage health, or performing a repair install of Windows.
Winsage
February 11, 2026
Microsoft's February 2026 Patch Tuesday addressed 59 vulnerabilities in Windows 11, with six confirmed as actively exploited. The most critical vulnerability is CVE-2026-21510, a Windows Shell security feature bypass with a CVSS rating of 8.8, allowing attackers to evade warnings by tricking users into opening malicious files. Another significant vulnerability, CVE-2026-21513, also rated at 8.8, affects MSHTML and allows remote attackers to bypass execution prompts through malicious code in HTML or shortcut files. CVE-2026-21514 impacts Microsoft Word and enables adversaries to disable OLE mitigations, posing risks through document-based attacks. Two local privilege escalation vulnerabilities are CVE-2026-21519 in Desktop Window Manager and CVE-2026-21533 in Windows Remote Desktop Services, with CVSS scores of 7.8. CVE-2026-21525 is a denial-of-service vulnerability in Remote Access Connection Manager. The update includes 53 additional vulnerabilities across various Microsoft products and services, with CVE-2026-21531 in Azure SDK rated at 9.8 and CVE-2026-20841 affecting Windows Notepad rated at 8.8. The cumulative update for Windows 11 (KB5077181) also includes enhancements and resolves WPA3 Wi-Fi connectivity issues. Microsoft reminded users of the June 2026 expiration of Secure Boot certificates, which requires timely updates to ensure secure booting. Users can install the updates via Windows Update.
Winsage
January 26, 2026
In early 2023, Microsoft announced the end of official support for Windows 10 by 2025, with regular updates and security patches ceasing on October 14, 2025. Users have options such as upgrading to Windows 11, switching to Linux, or subscribing to Microsoft's Extended Security Updates (ESU), which will end in October 2026. 0patch is a third-party service that provides micropatches for Windows 10, addressing specific vulnerabilities identified by security researchers. The service offers a free tier for zero-day patches and a paid Pro plan that includes legacy patches and post-End of Service updates. The free version should be used alongside Microsoft's ESU for comprehensive protection. 0patch plans to support Windows 10 until at least October 2030. The Pro plan is priced at approximately €35 annually, with a 30-day trial available. Users have reported some performance issues after installing patches, but the updates are lightweight and do not significantly affect system performance. Uninstallation is straightforward, and users can opt out at any time.
Winsage
January 22, 2026
Windows 11 users are experiencing application crashes, particularly with programs like MSI's Armoury Crate and the Alienware Command Center, due to issues related to the Microsoft Store and user accounts. A licensing validation error (0x803f8001) is a primary cause, often linked to a corrupted Store cache or temporary sync issues. Additionally, after the January update, users have reported that applications like Outlook freeze when saving files to cloud services such as OneDrive or Dropbox. Microsoft has acknowledged this issue, indicating that certain Outlook configurations may become unresponsive if PST files are stored on OneDrive. Users are advised to move PST files out of OneDrive and may consider resetting the Store cache or reinstalling affected applications as potential fixes. Microsoft is working on a resolution, but no timeline has been provided. Some users have found success by reinstalling the January update, while others have resolved issues by simply waiting.
Search