security fixes

Winsage
October 14, 2026
Microsoft released its October 2026 Patch Tuesday updates for Windows 11, addressing 1,413 vulnerabilities, including a critical fix for an exploited Windows Shell vulnerability (CVE-2026-96951) that bypasses Mark of the Web defenses. This update is the last monthly security update for Windows 11 24H2 Home and Pro users, who must upgrade to a supported version for future security fixes. The update packages KB5127648 and KB5127646 cover versions 24H2, 25H2, and 26H2, and also include fixes for reliability issues such as Explorer.exe startup failures, VPN connection problems, and gaming mouse stuttering. Additionally, the update resolves issues with AC-3 playback, printing failures, and fingerprint sign-in failures after a cold boot. Users are advised to install the updates promptly and restart their systems to complete the process.
Winsage
October 12, 2026
Microsoft has reminded IT administrators about the expiration of certificates that enable trusted connections between Windows devices and Windows Update servers, set to expire in May and June of 2027. Devices without replacement certificates by these deadlines may lose access to Windows Update services. Most supported Windows devices will receive new certificates automatically through security updates, but older or infrequently updated systems may require manual intervention. Organizations that do not update their devices risk losing access to critical updates, particularly unsupported Windows versions that will not receive necessary certificate updates. IT teams should audit device inventories and ensure compliance with updates, as systems on supported versions will obtain replacement certificates seamlessly. Upgrading unsupported systems is essential, and organizations are encouraged to conduct audits and expedite upgrade projects to avoid losing access to Windows Update.
Winsage
October 8, 2026
On October 2, Microsoft announced that its optional preview update "KB5124010," released on September 22, causes crashes in applications using the Dolby Digital (AC-3) codec on Windows 11 versions 24H2, 25H2, and 26H2. The update does not include security fixes and affects media players, games, and certain line-of-business applications that rely on Windows' built-in AC-3 audio decoding. Symptoms include applications failing to launch or crashing during specific features like music playback. Users can check if they are affected by verifying their OS version, installed updates, and application implementation. Microsoft plans to address the issue in a future update, but a timeline is not provided. Users can uninstall KB5124010 or pause updates as temporary solutions. The update has already caused issues for the game "WARDOGS," leading to compatibility investigations by the publisher, Team17.
Winsage
October 4, 2026
In October 2026, Microsoft is addressing ongoing issues from its September updates for Windows 11, particularly related to audio decoding. Certain applications and games using Windows' built-in AC-3 (Dolby Digital) audio decoding may crash when users adjust volume or audio settings. This issue primarily affects older applications and games, while most modern apps are expected to function normally. Microsoft has issued multiple updates, including a mandatory Patch Tuesday update and an emergency patch, but some audio problems remain unresolved. The September updates also introduced a significant increase in security fixes, addressing 974 vulnerabilities compared to 86 in September 2025. Additionally, an emergency update disrupted the functionality of File History, which Microsoft is investigating. An optional update aimed to fix File History but led to new crashes in various applications. Microsoft is currently working on a resolution for the audio-decoding bug without a specified timeline.
Winsage
September 25, 2026
Microsoft has released the KB5124010 September 2026 non-security preview update for Windows 11 versions 24H2 and 25H2, introducing 46 enhancements, including improvements to Bluetooth functionality and the ability to remap the Copilot key. This update is optional and focuses on quality improvements without security fixes. Key features include support for Emoji 17.0, a new accessibility setting for maximizing app windows, and a recovery remote management plug-in. Bluetooth issues have been addressed, including crashes related to audio streaming and microphone compatibility. Users can remap the Copilot key to function as the Right Ctrl or Context Menu key. The update elevates Windows 11 25H2 and 24H2 devices to builds 26200.9550 and 26100.9550, respectively. Other highlights include the ability to use slideshow wallpapers across multiple desktops, enhanced gesture controls for precision touchpads, and a Camera roll backup feature for OneDrive. Microsoft has fixed a known issue with the File History backup feature and removed the PC-to-PC Migration tool, recommending Windows Backup instead. KB5124010 is the last preview update for Windows 11 24H2, which will reach end of support in October 2026.
Winsage
September 18, 2026
Microsoft acknowledged a bug affecting Excel's copy and paste functionality that emerged after the September Patch Tuesday update. They have released an out-of-band update to resolve various issues, including the Excel bug. Instructions for users to navigate the issue include using the Paste Special feature and selecting options like Formulas, Values, or Links. Microsoft is investigating the root cause of the issue and plans to implement broader fixes. Additionally, Windows 11 is being refreshed to streamline the update process and reduce bugs.
AppWizard
September 18, 2026
Google's September 2026 Pixel Update Bulletin includes patches that affect standard Android platform code, relevant to both Pixel and non-Pixel devices, which have not been included in the regular monthly Android Security Bulletin. GrapheneOS has noted that Android 17 QPR1 introduced new developer APIs not present in the Android Open Source Project (AOSP) for the first time since Android Honeycomb, with one new package and modifications to sixteen others. GrapheneOS is backporting Pixel firmware and drivers from QPR1 onto Android 17 but lacks permissions to distribute this work. Additionally, there has been a delay in Google’s compliance with a GPL source request, with access granted over two weeks after the initial request. Starting in 2027, Google will require all Android app developers to register with them and provide legal identification and signing key evidence, complicating the process of sideloading unverified apps. GrapheneOS and other organizations are advocating for the Keep Android Open campaign against these developments, which may restrict competition and tighten Google's control over the Android ecosystem.
AppWizard
September 18, 2026
Google has launched the AndroidX Security State and Security State Provider libraries, enhancing Android's security framework. These tools allow applications to assess the security status of individual components on a device, rather than relying solely on the overall security patch level. Applications can now verify specific security fixes, identify available updates, and check for pending installations. This is particularly useful for security-sensitive applications, such as banking software, which can confirm the presence of necessary security fixes before allowing transactions. The libraries also enable apps to check for the resolution of specific vulnerabilities (CVEs), ensuring critical fixes are in place before enabling features like tap-to-pay. Phone manufacturers can communicate specific security fixes without changing the overall security patch date, meaning a device may show an outdated patch date while still having resolved certain vulnerabilities.
Search