Windows Archives

Winsage

May 18, 2026

Windows boot partition runs out of space for Microsoft’s May security update

Microsoft has acknowledged a potential issue with its May 2026 security update, which may fail to install properly due to insufficient space in the EFI System Partition (ESP). If the available space in the ESP drops below 10 MB, users may encounter a 0x800f0922 error code, leading to installation failures during the reboot phase. This issue affects Windows 11 versions 25H2 and 24H2. Microsoft has proposed two solutions: a registry edit or a Known Issue Rollback (KIR), which has already propagated to consumer and non-managed business devices. The update addresses several critical Microsoft CVEs, although there have been no reports of active exploitation.

Winsage

May 18, 2026

Microsoft admits Windows users ‘experienced some challenges’ with the forced CoPilot key — now it’s finally doing something about it

Microsoft introduced a dedicated Copilot key with its Copilot+ PCs, marking a significant change in Windows keyboard design after three decades. Users have expressed dissatisfaction with the key, particularly those who rely on the Right Ctrl or Context menu keys for shortcuts and assistive technologies. Microsoft acknowledged these challenges and announced that a future Windows 11 update will allow users to remap the Copilot key to function as either the Context menu key or Right Ctrl key. While some PC manufacturers have provided their own remapping solutions, they often require additional steps. The timeline for the update is unspecified, but major updates typically occur in October or September.

Winsage

May 18, 2026

Old Windows Flaw Returns to Spotlight With MiniPlasma Exploit

Security researcher Chaotic Eclipse has introduced a Windows exploit called MiniPlasma, which may allow privilege escalation from standard user accounts to SYSTEM level access, even on patched versions of Windows. This exploit is linked to CVE-2020-17103, a flaw in the Windows Cloud Filter driver that was addressed by Microsoft in December 2020. Tests have reportedly demonstrated the exploit functioning on a patched Windows 11 Pro system, achieving SYSTEM access from a standard user account. The exploit involves an undocumented registry-key path within the .DEFAULT user hive, raising concerns about the effectiveness of the 2020 fix. There is a discrepancy between public and Canary builds of Windows 11, with the exploit working on the public build but not on the Canary build. Microsoft’s April 2026 Patch Tuesday updates included another entry related to the Windows Cloud Files Mini Filter Driver elevation-of-privilege issue. Defenders are advised to monitor the CVE-2020-17103 record for further clarification regarding the status of the original fix and the implications of the MiniPlasma exploit.

AppWizard

May 18, 2026

You think you’ve seen it all and then there’s a Wayland Compositor inside Minecraft on Linux

A developer named EVVIE has integrated a Linux Wayland Compositor with Minecraft, enabling users to display Linux desktop windows within the game. This integration allows for an immersive experience similar to using a virtual reality headset. In a demonstration, EVVIE played the rhythm game Osu! while navigating the Minecraft interface. The project is available on GitHub under the GPL license and requires Minecraft version 26.1.2, the Fabric mod loader, xkbcommon library version 1.11.0, and xkbcommon tools. Additionally, recent updates for Minecraft have introduced a friends list feature for the Java version.

Winsage

May 18, 2026

Microsoft confirms Windows 11 security update install issues

Microsoft has acknowledged a significant issue with the May 2026 Windows 11 security update, KB5089549, where users are encountering difficulties in installation, specifically the 0x800f0922 error code. This issue is primarily due to insufficient free space on the EFI System Partition (ESP), especially for devices with 10 MB or less available. The installation may fail during the reboot phase at around 35–36% completion, with users receiving notifications like "Something didn't go as planned. Undoing changes." Log entries may indicate insufficient ESP free space, such as "SpaceCheck: Insufficient free space" and "ServicingBootFiles failed. Error = 0x70." Microsoft recommends affected users utilize the Known Issue Rollback feature to reverse problematic updates and advises IT departments to install and configure the relevant Group Policy to address the issue.

Winsage

May 18, 2026

MiniPlasma zero-day gives SYSTEM access on fully patched Windows 11

GitHub has introduced enhancements aimed at improving security and user experience on its platform. Key features include a more robust authentication process to protect user accounts, improved monitoring tools for tracking changes and vulnerabilities in repositories, a streamlined interface for easier navigation, and new collaboration features such as integrated chat options and real-time updates. Additionally, GitHub has launched initiatives to encourage user feedback to ensure the enhancements meet the needs of its user base.

Winsage

May 18, 2026

Steam Controller Reservation Emails Begin Going Out With 72-Hour Purchase Windows

Valve has started contacting individuals on the Steam Controller waitlist by sending reservation emails to finalize purchases. Recipients have until May 18 to confirm their orders, or their reservations will be canceled. The first batch of controllers began arriving this week after the reservation system launched on May 8, following the controller's sellout in 30 minutes on May 4. Those with reservations should check their email and spam folder, as Valve is not sending reminder messages. The purchase window is 72 hours from when the email is received. Fulfillment will start in the United States and Canada, followed by the UK, Europe, and Australia. The reservation system does not strictly follow chronological order for email distribution. Users not included in the current wave of reservations will remain in line for future batches, though Valve has not announced when these will be dispatched. Resale prices for the Steam Controller on platforms like eBay are significantly higher than the retail price, despite anti-scalper measures in place. The Steam Controller features TMR magnetic thumbsticks, dual trackpads, gyro support, four rear grip buttons, and a Puck accessory that functions as a charger and 2.4GHz wireless receiver.

Winsage

May 18, 2026

Microsoft Brings Back Windows 10-Style Taskbar and Start Menu Customization in Windows 11

Microsoft is set to introduce comprehensive support for Taskbar and Start Menu customization in Windows 11, rolling out to Windows Insiders in the Experimental channel over the next few weeks. Users will be able to reposition the Taskbar to any side of the screen and adjust icon alignment with options for top-aligned, center-aligned, left-aligned, and right-aligned. Access to these settings will be through Settings > Personalization > Taskbar > Taskbar behaviors. A new feature will also allow for smaller icons and a more discreet Taskbar presence. Additionally, a redesigned Start Menu customization initiative will allow users to select between smaller and larger Start sizes, independently hide or show sections like Pinned, Recent, and All, and remove their name and profile photo for privacy. The Start Menu's file recommendations will be decoupled from File Explorer's recent items and jump lists, meaning disabling recommendations will not affect recent activity elsewhere in Windows. The recommendation area will be rebranded as "Recent," ensuring visibility for newly installed applications while refining the selection of displayed files. These updates are expected to be available to regular Windows 11 users on versions 24H2, 25H2, and 26H1 within approximately a month.

Winsage

May 18, 2026

MiniPlasma Windows 0-Day Enables SYSTEM Privilege Escalation on Fully Patched Systems

Chaotic Eclipse has unveiled a proof-of-concept (PoC) for a Windows privilege escalation zero-day vulnerability, codenamed MiniPlasma, which targets the "cldflt.sys" component and could grant SYSTEM privileges on fully patched Windows systems. This vulnerability was initially reported to Microsoft by James Forshaw from Google Project Zero in September 2020. Although Microsoft was believed to have resolved it in December 2020 as part of CVE-2020-17103, further analysis indicates that the flaw remains unaddressed. Chaotic Eclipse demonstrated that the original PoC could still spawn a SYSTEM shell reliably on his machines. The vulnerability is believed to affect all versions of Windows, with confirmation that MiniPlasma opens a "cmd.exe" prompt with SYSTEM privileges on Windows 11 systems with the latest May 2026 updates, though it does not function on the latest Insider Preview Canary version. In December 2025, Microsoft addressed a separate privilege escalation flaw in the same component, identified as CVE-2025-62221, which had a CVSS score of 7.8 and was reportedly being exploited by threat actors.

Winsage

May 18, 2026

Microsoft Changes ‘Most Windows Devices’ In June—Update Yours Now

Microsoft has alerted users that Secure Boot certificates will begin to expire in June, affecting most Windows devices. Users must update these certificates to avoid disruptions, as failing to install the latest Windows update could prevent devices from booting securely. A "one-time restart" will be required after the update to load new certificates. If the update is not installed by June 1, users may see a red stop icon in the Windows Security app. The update issued on May 12 was modified on May 15 to warn that it might fail to install. Microsoft indicates that most users will need to restart their PCs, although this may revert the update. The latest updates will expand the number of devices eligible for new Secure Boot certificates, but users are uncertain about how many PCs will be affected due to a phased rollout approach.