September 8, 2026—KB5122878 (OS Builds 19045.7725 and 19044.7725)

September 8, 2026—KB5122878 OS Builds 19045.7725 and 19044.7725 Applies To Windows 10 ESU Windows 10 Enterprise LTSC 2021 Windows 10 IoT Enterprise LTSC 2021 Important Free support for Windows 10 Enterprise LTSC 2021 will end soon. For information about the availability of an Extended Security...

October 13, 2026—KB5126836 (Monthly Rollup)

October 13, 2026—KB5126836 Monthly Rollup Applies To Windows Server 2012 R2 ESU Important Windows Server 2012 R2 reached the end of support on October 10, 2023. The Extended Security Updates ESU program for Windows Server 2012 R2 ended on October 13, 2026. This update is the final security update...

October 13, 2026—KB5126657 (OS Builds 19045.7807 and 19044.7807)

October 13, 2026—KB5126657 OS Builds 19045.7807 and 19044.7807 Applies To Windows 10 ESU Windows 10 Enterprise LTSC 2021 Windows 10 IoT Enterprise LTSC 2021 Important Free support for Windows 10 Enterprise LTSC 2021 ends on January 12, 2027. To learn about continuing support, see Plan for Windows...

November 10, 2026—KB5131096 (OS Builds 19045.7846 and 19044.7846)

November 10, 2026—KB5131096 OS Builds 19045.7846 and 19044.7846 Applies To Windows 10 ESU Windows 10 Enterprise LTSC 2021 Windows 10 IoT Enterprise LTSC 2021 Important Free support for Windows 10 Enterprise LTSC 2021 ends on January 12, 2027. To learn about continuing support, see Plan for Window...

November 06, 2026—KB5135582 (Monthly Rollup) Out-of-band

November 06, 2026—KB5135582 Monthly Rollup Out-of-band Applies To Windows Server 2012 R2 ESU Important This update is being released as an exception for devices that are past Year 3 of the Extended Security Updates ESU program. It is provided to deliver a quality improvement. Windows Server 2012 ...

KLA91400 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products ESU. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, gain privileges, obtain sensitive information, spoof user interface. Below is a complete list of...

KB5127356: Servicing stack update for Windows Server 2012 R2: October 13, 2026

KB5127356: Servicing stack update for Windows Server 2012 R2: October 13, 2026 Applies To Windows Server 2012 R2 ESU Summary This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. Servicing stack updates SSU makes sure that you have a...

KB5127357: Servicing stack update for Windows Server 2012: October 13, 2026

KB5127357: Servicing stack update for Windows Server 2012: October 13, 2026 Applies To Windows Server 2012 ESU Summary This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. Servicing stack updates SSU makes sure that you have a robust...

KLA91338 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products ESU. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, gain privileges, obtain sensitive information, perform cross-site scripting attack, spoof user...

September 14, 2026—KB5129236 (OS Builds 19045.7727 and 19044.7727) Out-of-band

September 14, 2026—KB5129236 OS Builds 19045.7727 and 19044.7727 Out-of-band Applies To Windows 10 ESU Windows 10 Enterprise LTSC 2021 Important Free support for Windows 10 Enterprise LTSC 2021 will end soon. For information about the availability of an Extended Security Update ESU, see the End o...

September 14, 2026—KB5129243 (Monthly Rollup) Out-of-band

September 14, 2026—KB5129243 Monthly Rollup Out-of-band Applies To Windows Server 2012 R2 ESU Important The installation of this Extended Security Update ESU might fail when you try to install it on an Azure Arc-enabled device that is running Windows Server 2012 R2. For a successful installation,...

KB5123602: Servicing stack update for Windows Server 2012: September 8, 2026

KB5123602: Servicing stack update for Windows Server 2012: September 8, 2026 Applies To Windows Server 2012 ESU Summary This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. Servicing stack updates SSU makes sure that you have a robus...

KB5123499: Servicing stack update for Windows Server 2012 R2: September 8, 2026

KB5123499: Servicing stack update for Windows Server 2012 R2: September 8, 2026 Applies To Windows Server 2012 R2 ESU Summary This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. Servicing stack updates SSU makes sure that you have a...

KB5123038: Cumulative security update for Internet Explorer: September 8, 2026

KB5123038: Cumulative security update for Internet Explorer: September 8, 2026 Applies To Windows Server 2012 R2 ESU Windows Server 2012 ESU Note Important Certain versions of Microsoft Internet Explorer have reached the end of support. Note that some versions of Internet Explorer may be supporte...

Malicious code in @zalastax/nolb-esu (npm)

The package @zalastax/nolb-esu was found to contain malicious code. --- Credit: OpenSSF source...

KLA91207 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products ESU. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, gain privileges, obtain sensitive information, perform cross-site scripting attack, spoof user...

PT-2026-123494

Build for tuxcare9.6esu AlmaLinux 9.6 ESU...

KLA91091 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products ESU. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, gain privileges, obtain sensitive information, perform cross-site scripting attack, spoof user...

PT-2026-45482

Bump leading release to maintain monotonic rpm-version ordering in the AlmaLinux 9.2 ESU update stream...

CLSA-2026-1778177253 perl: Fix of 2 CVEs

CVE-2023-47038: fix write past buffer end via illegal user-defined Unicode property, for almalinux9.2esu - CVE-2025-40909: clone dirhandles without fchdir, for almalinux9.2esu...