openssh: openssh: Incorrect certificate expiration times via Daylight Saving Time mishandling

A flaw was found in OpenSSH. During certificate generation with the ssh-keygen utility, Daylight Saving Time DST is mishandled when converting dates. This flaw can cause certificates to be issued with incorrect expiration times, potentially allowing them to remain valid longer than intended or...

June 23, 2026—KB5095093 (OS Builds 26200.8737 and 26100.8737) Preview

June 23, 2026—KB5095093 OS Builds 26200.8737 and 26100.8737 Preview Applies To Windows 11 version 25H2, all editions Windows 11 version 24H2, all editions This cumulative update for Windows 11, version 25H2 and 24H2 KB5095093, includes production-quality improvements. Announcements and messages...

June 9, 2026—KB5094125 (OS Build 26100.32995)

June 9, 2026—KB5094125 OS Build 26100.32995 Applies To Windows Server 2025, all editions This cumulative update for Windows Server 2025 KB5094125, includes the latest security fixes and improvements, along with non-security updates from last month’s optional preview release. To learn more about...

May 12, 2026—KB5089549 (OS Builds 26200.8457 and 26100.8457)

May 12, 2026—KB5089549 OS Builds 26200.8457 and 26100.8457 Applies To Windows 11 version 25H2, all editions Windows 11 version 24H2, all editions This cumulative update for Windows 11, version 25H2 and 24H2 KB5089549 includes the latest security fixes and improvements, along with non-security...

May 12, 2026—KB5087539(OS Build 26100.32860)

May 12, 2026—KB5087539OS Build 26100.32860 Applies To Windows Server 2025, all editions This cumulative update for Windows Server 2025 KB5087539, includes the latest security fixes and improvements, along with non-security updates from last month’s optional preview release. To learn more about...

Improper Validation of Certificate Expiration

Overview Affected versions of this package are vulnerable to Improper Validation of Certificate Expiration in the GetTokenExchangeToken function. An attacker can maintain access to revoked or invalidated tokens by reusing JWTs that should no longer be valid, potentially bypassing session...

May 12, 2026—KB5087545 (OS Build 20348.5139)

May 12, 2026—KB5087545 OS Build 20348.5139 Applies To Windows Server 2022 This cumulative update for Windows Server 2022 KB5087545, includes the latest security fixes and improvements, along with non-security updates from last month’s optional preview release. To learn more about differences...

May 12, 2026—KB5087544 (OS Builds 19045.7291 and 19044.7291)

May 12, 2026—KB5087544 OS Builds 19045.7291 and 19044.7291 Applies To Windows 10 ESU Windows 10 Enterprise LTSC 2021 Windows 10 IoT Enterprise LTSC 2021 Windows Secure Boot certificate expiration Important: Secure Boot certificates used by most Windows devices have started expiring in June 2026...

May 12, 2026—KB5087541 (OS Build 25398.2330)

May 12, 2026—KB5087541 OS Build 25398.2330 Applies To Windows Server, version 23H2 This cumulative update for Windows Server, version 23H2 KB5087541, includes the latest security fixes and improvements, along with non-security updates from last month’s optional preview release. To learn more abou...

March 10, 2026—Hotpatch KB5078737 (OS Build 20348.4830)

March 10, 2026—Hotpatch KB5078737 OS Build 20348.4830 Applies To Windows Server 2022 Datacenter: Azure Edition This Hotpatch update for Windows Server 2022 KB5078737, improves functionality, performance, and reliability. To learn more about differences between security updates, optional...

April 14, 2026—KB5082063(OS Build 26100.32690)

April 14, 2026—KB5082063OS Build 26100.32690 Applies To Windows Server 2025, all editions This cumulative update for Windows Server 2025 KB5082063, includes the latest security fixes and improvements, along with non-security updates from last month’s optional preview release. To learn more about...

April 14, 2026—KB5082052 (OS Build 22631.6936)

April 14, 2026—KB5082052 OS Build 22631.6936 Applies To Windows 11 version 23H2, all editions This cumulative update for Windows 11, version 23H2 KB5082052, includes the latest security fixes and improvements, along with non-security updates from last month’s optional preview release. To learn mo...

March 10, 2026—KB5078734 (OS Build 25398.2207)

March 10, 2026—KB5078734 OS Build 25398.2207 Applies To Windows Server, version 23H2 This cumulative update for Windows Server, version 23H2 KB5078734, includes the latest security fixes and improvements, along with non-security updates from last month’s optional preview release. To learn more...

March 10, 2026—KB5078885 (OS Builds 19045.7058 and 19044.7058)

March 10, 2026—KB5078885 OS Builds 19045.7058 and 19044.7058 Applies To Windows 10 ESU Windows 10 Enterprise LTSC 2021 Windows Secure Boot certificate expiration Important: Secure Boot certificates used by most Windows devices have started expiring in June 2026. This might affect the ability of...

March 10, 2026—KB5078766 (OS Build 20348.4893)

March 10, 2026—KB5078766 OS Build 20348.4893 Applies To Windows Server 2022 This cumulative update for Windows Server 2022 KB5078766, includes the latest security fixes and improvements, along with non-security updates from last month’s optional preview release. To learn more about differences...

March 10, 2026—KB5078752 (OS Build 17763.8511)

March 10, 2026—KB5078752 OS Build 17763.8511 Applies To Windows Server 2019 Win 10 Ent LTSC 2019 Windows Secure Boot certificate expiration Important: Secure Boot certificates used by most Windows devices have started expiring in June 2026. This might affect the ability of certain personal and...

March 10, 2026—KB5079473 (OS Builds 26200.8037 and 26100.8037)

March 10, 2026—KB5079473 OS Builds 26200.8037 and 26100.8037 Applies To Windows 11 version 25H2, all editions Windows 11 version 24H2, all editions This cumulative update for Windows 11, version 25H2 and 24H2 KB5079473, includes the latest security fixes and improvements, along with non-security...

KB5079234: Servicing stack update for Windows Server 2012: March 10, 2026

KB5079234: Servicing stack update for Windows Server 2012: March 10, 2026 Applies To Windows Server 2012 ESU Windows Secure Boot certificate expiration Important: Secure Boot certificates used by most Windows devices have started expiring in June 2026. This might affect the ability of certain...

KB5079233: Servicing stack update for Windows Server 2012 R2: March 10, 2026

KB5079233: Servicing stack update for Windows Server 2012 R2: March 10, 2026 Applies To Windows Server 2012 R2 ESU Windows Secure Boot certificate expiration Important: Secure Boot certificates used by most Windows devices have started expiring in June 2026. This might affect the ability of certa...

MGASA-2026-0035 Updated golang packages fix security vulnerabilities

net/http: memory exhaustion in Request.ParseForm. CVE-2025-61726 archive/zip: denial of service when parsing arbitrary ZIP archives. CVE-2025-61728 crypto/tls: handshake messages may be processed at the incorrect encryption level. CVE-2025-61730 cmd/go: bypass of flag sanitization can lead to...