CVE-2025-11577 Clevo UEFI firmware exposed Boot Guard private keys, enabling potential abuse of the Boot Guard trust chain

Clevo’s UEFI firmware update packages, including B10717.exe, inadvertently contained private signing keys used for Boot Guard and Boot Policy Manifest verification. The exposure of these keys could allow attackers to sign malicious firmware that appears trusted by affected systems, undermining th...

October 14, 2025—KB5066876 (Security-only update)

October 14, 2025—KB5066876 Security-only update Applies To Windows Server 2008 R2 Premium Assurance Windows Secure Boot certificate expiration Important: Secure Boot certificates used by most Windows devices have started expiring in June 2026. This might affect the ability of certain personal and...

October 14, 2025—KB5066873 (Monthly Rollup)

October 14, 2025—KB5066873 Monthly Rollup Applies To Windows Server 2012 R2 ESU Important The installation of this Extended Security Update ESU might fail when you try to install it on an Azure Arc-enabled device that is running Windows Server 2012 R2. For a successful installation, please make...

October 14, 2025—KB5066872 (Monthly Rollup)

October 14, 2025—KB5066872 Monthly Rollup Applies To Windows Server 2008 R2 Premium Assurance Windows Secure Boot certificate expiration Important: Secure Boot certificates used by most Windows devices have started expiring in June 2026. This might affect the ability of certain personal and...

October 23, 2025—KB5070883 (OS Build 17763.7922) Out-of-band

October 23, 2025—KB5070883 OS Build 17763.7922 Out-of-band Applies To Windows Server 2019 Windows Secure Boot certificate expiration Important: Secure Boot certificates used by most Windows devices have started expiring in June 2026. This might affect the ability of certain personal and business...

October 24, 2025—KB5070892 (OS Build 20348.4297) Security Update for Windows Server Update Services

October 24, 2025—KB5070892 OS Build 20348.4297 Security Update for Windows Server Update Services Applies To Windows Server 2022 Datacenter: Azure Edition Note Windows Secure Boot certificate expiration Important: Secure Boot certificates used by most Windows devices are set to expire starting in...

September 9, 2025—KB5065425 (OS Build 25398.1849)

September 9, 2025—KB5065425 OS Build 25398.1849 Applies To Windows Server, version 23H2 Windows Secure Boot certificate expiration Secure Boot certificates used by most Windows devices have started expiring in June 2026. This might affect the ability of certain personal and business devices to bo...

September 9, 2025—KB5065426 (OS Build 26100.6584) for Windows

September 9, 2025—KB5065426 OS Build 26100.6584 for Windows Applies To Windows 11 version 24H2, all editions Windows Secure Boot certificate expiration Secure Boot certificates used by most Windows devices have started expiring in June 2026. This might affect the ability of certain personal and...

September 9, 2025—KB5065429 (OS Builds 19044.6332 and 19045.6332)

September 9, 2025—KB5065429 OS Builds 19044.6332 and 19045.6332 Applies To Windows 10 Home and Pro, version 21H2 Windows 10 Enterprise and Education, version 21H2 Windows 10 IoT Enterprise, version 21H2 Windows 10 Home and Pro, version 22H2 Windows 10 Enterprise Multi-Session, version 22H2 Window...

September 9, 2025—KB5065432 (OS Build 20348.4171)

September 9, 2025—KB5065432 OS Build 20348.4171 Applies To Windows Server 2022 Windows Secure Boot certificate expiration Secure Boot certificates used by most Windows devices have started expiring in June 2026. This might affect the ability of certain personal and business devices to boot secure...

September 9, 2025—KB5065428 (OS Build 17763.7792)

September 9, 2025—KB5065428 OS Build 17763.7792 Applies To Windows 10 Enterprise, version 1809 Windows Server 2019 Windows Secure Boot certificate expiration Important: Secure Boot certificates used by most Windows devices have started expiring in June 2026. This might affect the ability of certa...

October 23, 2025—KB5070884 (OS Build 20348.4297) Out-of-band

October 23, 2025—KB5070884 OS Build 20348.4297 Out-of-band Applies To Windows Server 2022 Windows Secure Boot certificate expiration Secure Boot certificates used by most Windows devices have started expiring in June 2026. This might affect the ability of certain personal and business devices to...

October 23, 2025—KB5070882 (OS Build 14393.8524) Out-of-band

October 23, 2025—KB5070882 OS Build 14393.8524 Out-of-band Applies To Windows Server 2016, all editions Windows Secure Boot certificate expiration Important: Secure Boot certificates used by most Windows devices have started expiring in June 2026. This might affect the ability of certain personal...

October 23, 2025—KB5070881 (OS Build 26100.6905) Out-of-band

October 23, 2025—KB5070881 OS Build 26100.6905 Out-of-band Applies To Windows Server 2025, all editions Windows Secure Boot certificate expiration Secure Boot certificates used by most Windows devices have started expiring in June 2026. This might affect the ability of certain personal and busine...

October 24, 2025—KB5070893 (OS Build 26100.6905) Security Update for Windows Server Update Services

October 24, 2025—KB5070893 OS Build 26100.6905 Security Update for Windows Server Update Services Applies To Windows Server 2025 Datacenter: Azure Edition Note Windows Secure Boot certificate expiration Important: Secure Boot certificates used by most Windows devices are set to expire starting in...

KB5066840: Cumulative security update for Internet Explorer: October 14, 2025

KB5066840: Cumulative security update for Internet Explorer: October 14, 2025 Applies To Windows Server 2008 Premium Assurance Windows Server 2008 R2 Premium Assurance Windows Server 2012 ESU Windows Server 2012 R2 ESU Note Important Certain versions of Microsoft Internet Explorer have reached th...

October 14, 2025—KB5066877 (Security-only update)

October 14, 2025—KB5066877 Security-only update Applies To Windows Server 2008 Premium Assurance Windows Secure Boot certificate expiration Important: Secure Boot certificates used by most Windows devices have started expiring in June 2026. This might affect the ability of certain personal and...

October 14, 2025—KB5066874 (Monthly Rollup)

October 14, 2025—KB5066874 Monthly Rollup Applies To Windows Server 2008 Premium Assurance Windows Secure Boot certificate expiration Important: Secure Boot certificates used by most Windows devices have started expiring in June 2026. This might affect the ability of certain personal and business...

October 23, 2025—KB5070886 (Monthly Rollup) Out-of-band

October 23, 2025—KB5070886 Monthly Rollup Out-of-band Applies To Windows Server 2012 R2 ESU Important The installation of this Extended Security Update ESU might fail when you try to install it on an Azure Arc-enabled device that is running Windows Server 2012 R2. For a successful installation,...

October 23, 2025—KB5070879 (OS Build 25398.1916) Out-of-band

October 23, 2025—KB5070879 OS Build 25398.1916 Out-of-band Applies To Windows Server, version 23H2 Windows Secure Boot certificate expiration Secure Boot certificates used by most Windows devices have started expiring in June 2026. This might affect the ability of certain personal and business...