NewApp Digest
search bot

Windows Server updates

The Last Windows Security Updates of January 2026 Are Here
Winsage
January 19, 2026

The Last Windows Security Updates of January 2026 Are Here

Microsoft released its first set of security updates for the Windows operating system and various products in January 2026, addressing over 110 vulnerabilities. The updates are available for all supported versions of Windows, with Windows 10 receiving fixes only through the Extended Security Updates (ESU) program. Windows 11 versions 24H2 and 25H2 are the main consumer releases benefiting from these updates. Approximately 112–114 security updates were released, with around 8 rated as Critical. At least one zero-day vulnerability is actively exploited. The updates include security fixes for Windows, Office, Edge, Azure, and server components. Windows 11 versions 23H2, 24H2, and 25H2, as well as Windows Server 2023 and 2025, have known issues. Windows 11 version 24H2 and 25H2 received security fixes for multiple vulnerabilities, while version 23H2 continues to receive support through enterprise servicing channels. Windows 10 updates are limited to ESU-enrolled systems, with general support ending in October 2025. Windows Server 2016, 2019, 2022, 2023, and 2025 received January security updates, addressing important vulnerabilities without disclosing any critical ones. Microsoft also released updates for Office products and SharePoint Server components. Known issues after the January updates include credential prompt failures and authentication issues in Azure Virtual Desktop and Windows 365, particularly affecting the new Windows App. Workarounds involve using the classic Remote Desktop client or the web-based RDP client. Additionally, devices with Secure Launch enabled may experience shutdown and sleep mode failures. Microsoft has provided out-of-band fixes for certain affected systems as of January 18, 2026. Users can manually install updates through the Windows Update feature, and it is recommended to create a full system backup before proceeding with updates.
Microsoft: Sept Windows Server updates cause Active Directory issues
Winsage
October 15, 2025

Microsoft: Sept Windows Server updates cause Active Directory issues

Microsoft has acknowledged that the September 2025 security updates are causing complications with Active Directory on Windows Server 2025 systems, particularly affecting Active Directory Domain Services (AD DS) synchronization related to Microsoft Entra Connect Sync. Applications using the Active Directory directory synchronization control may face incomplete synchronization for large security groups exceeding 10,000 members. This issue is linked to the installation of the September 2025 Windows security update (KB5065426) or later updates. Microsoft's engineering teams are working on a resolution and have provided a workaround for IT administrators, which involves adding a specific registry key to mitigate disruptions. The registry key details are as follows: - Path: ComputerHKEYLOCALMACHINESYSTEMCurrentControlSetPoliciesMicrosoftFeatureManagementOverrides - Name: 2362988687 - Type: REG_DWORD - Value: 0 Microsoft cautions that improper registry modifications could lead to significant problems, including the potential need for a complete operating system reinstallation. The exact cause of the synchronization issues has not been disclosed, but support for Microsoft Entra Cloud Sync on Windows Server 2025 is expected in a future release. Additionally, Microsoft is addressing another known issue affecting Windows 11 24H2 and Windows Server 2025 devices, which causes update failures when installing updates from a network share using the Windows Update Standalone Installer (WUSA). Automatic mitigations are being implemented for home and non-managed business devices through Known Issue Rollback (KIR).
Microsoft fixes critical wormable Windows flaw (CVE-2025-47981)
Winsage
July 10, 2025

Microsoft fixes critical wormable Windows flaw (CVE-2025-47981)

Microsoft released patches for 130 vulnerabilities in the July 2025 Patch Tuesday update. Notable vulnerabilities include CVE-2025-49719, an uninitialized memory disclosure in Microsoft SQL Server, and CVE-2025-47981, a wormable remote code execution flaw in Windows. CVE-2025-49719 is assessed as having "unproven" exploit code, while CVE-2025-47981 has a high likelihood of exploitation within 30 days. Other vulnerabilities include CVE-2025-49717, a buffer overflow in SQL Server, and CVE-2025-49704, which allows code injection in SharePoint. Additionally, updates address vulnerabilities in Windows Routing and Remote Access Service (RRAS) and Microsoft Edge, including CVE-2025-6554, which has been actively exploited. Administrators are advised to prioritize patching internet-facing assets and consider additional mitigations for RRAS vulnerabilities.
Windows Server update may disrupt IP refreshes
Winsage
June 16, 2025

Windows Server update may disrupt IP refreshes

Microsoft has acknowledged that the June security update has caused complications for users of Windows Server systems, specifically affecting the Dynamic Host Configuration Protocol (DHCP) service, which is failing and leading to improper functioning of IP refreshes. The issue impacts multiple versions of Windows Server, including 2016 (KB5061010), 2019 (KB5060531), 2022 (KB5060526), and 2025 (KB5060842). Users have reported that the DHCP service may stop responding after installing the update, with one administrator noting their 2016 server crashed shortly after the update was applied. Microsoft is working on a solution and advises affected users to uninstall the update to restore functionality. The company has a history of DHCP-related issues dating back over a decade and has faced other problems with Windows Server updates in the past year, including issues with keyboard and mouse inputs and authentication challenges.
Windows Server August updates fix Microsoft 365 Defender issue
Winsage
August 14, 2024

Windows Server August updates fix Microsoft 365 Defender issue

Microsoft resolved an issue affecting Microsoft 365 Defender (Defender XDR) that arose after the July 2024 Windows Server updates, specifically impacting Windows Server 2022 and disrupting the Network Detection and Response (NDR) service. This disruption also affected other Defender functionalities reliant on NDR, such as Incident Response and Device Inventory. The issue was addressed by Windows updates released on August 13, 2024 (KB5041160) and later. Users are advised to install the latest updates for crucial improvements. Additionally, Microsoft fixed another issue causing LPD printing jobs to fail across Windows Server 2022, 2019, and 2016 systems after the July 2024 updates. An emergency fix was also deployed in May for Windows Server 2019 to resolve 0x800f0982 errors. Earlier in May, Microsoft addressed issues disrupting VPN connections, unexpected reboots of domain controllers, and NTLM authentication failures after April's updates. However, a lingering bug affecting remote desktop connections on Windows Server 2012 and later continues to cause intermittent logon session losses, requiring reconnections.
Microsoft shares temp fix for Windows 11 Photos not launching
Winsage
July 15, 2024

Microsoft shares temp fix for Windows 11 Photos not launching

Microsoft has provided a workaround for a known issue preventing the Microsoft Photos app from launching on certain Windows 11 systems. The problem affects devices running Windows 11 22H2 and 23H2 with specific policies enabled. Users who updated the app from the Windows store after June 4, 2024, may experience difficulties. To address this, Windows admins are advised to install the latest Windows App SDK released during the July Patch Tuesday as a temporary solution.
Search