June 23, 2026—KB5095093 (OS Builds 26200.8737 and 26100.8737) Preview

None None...

May 12, 2026—KB5087539(OS Build 26100.32860)

None None...

June 9, 2026—KB5094125 (OS Build 26100.32995)

None None...

May 12, 2026—KB5089549 (OS Builds 26200.8457 and 26100.8457)

None None...

KB5094141: Servicing stack update for Windows 10, version 1607 and Windows Server 2016: June 9, 2026

None None...

Improper Validation of Certificate Expiration

Overview Affected versions of this package are vulnerable to Improper Validation of Certificate Expiration in the GetTokenExchangeToken function. An attacker can maintain access to revoked or invalidated tokens by reusing JWTs that should no longer be valid, potentially bypassing session...

May 26, 2026—KB5089573 (OS Builds 26200.8524 and 26100.8524) Preview

None None...

May 12, 2026—KB5087544 (OS Builds 19045.7291 and 19044.7291)

None None...

May 12, 2026—KB5087541 (OS Build 25398.2330)

None None...

March 10, 2026—Hotpatch KB5078737 (OS Build 20348.4830)

None None...

May 12, 2026—KB5087545 (OS Build 20348.5139)

None None...

KB5088064: Servicing stack update for Windows 10, version 1607 and Windows Server 2016: May 12, 2026

None None...

April 19, 2026—KB5091573 (OS Build 17763.8647) Out-of-band

None None...

April 19, 2026—KB5091575 (OS Build 20348.5024) Out-of-band

None None...

April 14, 2026—KB5082052 (OS Build 22631.6936)

None None...

April 14, 2026—KB5082063(OS Build 26100.32690)

None None...

March 10, 2026—KB5078734 (OS Build 25398.2207)

None None...

March 10, 2026—KB5079473 (OS Builds 26200.8037 and 26100.8037)

None None...

March 10, 2026—KB5078885 (OS Builds 19045.7058 and 19044.7058)

None None...

March 10, 2026—KB5078752 (OS Build 17763.8511)

None None...