AMD: CVE-2025-54518 CPU OP Cache Corruption

This vulnerability was found and addressed by AMD. We are documenting it in the Security Update Guide to encourage customers to install the May 2026 version of Windows as soon as possible. The vulnerability assigned to this CVE is in certain processor models offered by AMD. The mitigation for thi...

AMD: CVE-2023-20585 IOMMU Write Buffer Vulnerability

The vulnerability assigned to this CVE could lead to corruption of guest encrypted memory. The mitigation for this vulnerability requires a Windows update. This CVE is being documented in the Security Update Guide to announce that the latest builds of Windows enable the mitigation and provide...

Patch Tuesday - September 2025

Microsoft is addressing 176 vulnerabilities today, which seems like a lot, and it is. Curiously, Microsoft’s own Security Update Guide SUG for September 2025 Patch Tuesday only lists 86 vulns, and that’s because the SUG doesn’t include a large number of open source software OSS fixes published...

AMD: CVE-2024-36357 Transient Scheduler Attack in L1 Data Queue

The vulnerability assigned to this CVE is in certain processor models offered by AMD. The mitigation for this vulnerability requires a Windows update. This CVE is being documented in the Security Update Guide to announce that the latest builds of Windows enable the mitigation and provide protecti...

AMD: CVE-2025-36357 Transient Scheduler Attack in L1 Data Queue

The vulnerability assigned to this CVE is in certain processor models offered by AMD. The mitigation for this vulnerability requires a Windows update. This CVE is being documented in the Security Update Guide to announce that the latest builds of Windows enable the mitigation and provide protecti...

AMD: CVE-2024-36350 Transient Scheduler Attack in Store Queue

The vulnerability assigned to this CVE is in certain processor models offered by AMD. The mitigation for this vulnerability requires a Windows update. This CVE is being documented in the Security Update Guide to announce that the latest builds of Windows enable the mitigation and provide protecti...

February 11, 2025—KB5052040 (OS Build 10240.20915) - EXPIRED

February 11, 2025—KB5052040 OS Build 10240.20915 - EXPIRED Applies To Windows 10 EXPIRATION NOTICE IMPORTANT As of January 27, 2026, this update is no longer available from the Microsoft Update Catalog or other release channels. We recommend that you update your devices to the latest version of...

Description of the security update for Office Online Server: November 12, 2024 (KB5002648)

Description of the security update for Office Online Server: November 12, 2024 KB5002648 Applies To Office Online Server Summary This security update resolves a Microsoft Excel remote code execution vulnerability. To learn more about the vulnerability, see Microsoft Common Vulnerabilities and...

Description of the security update for SharePoint Enterprise Server 2016: November 12, 2024 (KB5002654)

Description of the security update for SharePoint Enterprise Server 2016: November 12, 2024 KB5002654 Applies To SharePoint Server 2016 Summary This security update for SharePoint Server provides defense-in-depth updates to help improve security-related features. To learn more about the updates,...

Description of the security update for SharePoint Enterprise Server 2016: October 8, 2024 (KB5002645)

Description of the security update for SharePoint Enterprise Server 2016: October 8, 2024 KB5002645 Applies To SharePoint Server 2016 Summary This security update resolves a Microsoft SharePoint elevation of privilege vulnerability. To learn more about the vulnerability, see Microsoft Common...

July 9, 2024—KB5040434 (OS Build 14393.7159) - EXPIRED

July 9, 2024—KB5040434 OS Build 14393.7159 - EXPIRED Applies To Windows 10, version 1607, all editions Windows Server 2016, all editions EXPIRATION NOTICE IMPORTANT As of March 31, 2026, this update is no longer available from the Microsoft Update Catalog or other release channels. We recommend...

June 11, 2024—KB5039236 (OS Build 25398.950)

June 11, 2024—KB5039236 OS Build 25398.950 Applies To Windows Server, version 23H2 Note For information about Windows update terminology, see the article about the types of Windows updates and the monthly quality update types. For an overview of Windows Server, version 23H2, see its update histor...

CVE-2024-21302

Summary: As of July 8, 2025 Microsoft has completed mitigations to address this vulnerability. See KB5042562: Guidance for blocking rollback of virtualization-based security related updates and the Recommended Actions section of this CVE for guidance on how to protect your systems from this...

May 10, 2022 Security update (KB5013951)

May 10, 2022 Security update KB5013951 Applies To Azure Local, version 20H2 Note For information about Windows update terminology, see the article about the types of Windows updates and the monthly quality update types. For an overview of Azure Stack HCI, version 20H2, see its update history page...

October 11, 2022 Security update (KB5018415)

October 11, 2022 Security update KB5018415 Applies To Azure Local, version 20H2 Note For information about Windows update terminology, see the article about the types of Windows updates and the monthly quality update types. For an overview of Azure Stack HCI, version 20H2, see its update history...

Microsoft Releases June 2024 Security Updates

Microsoft has released security updates to address vulnerabilities in multiple products. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. Users and administrators are encouraged to review the following advisory and apply the necessary updates...

May 14, 2024—KB5037763 (OS Build 14393.6981) - EXPIRED

May 14, 2024—KB5037763 OS Build 14393.6981 - EXPIRED Applies To Windows 10, version 1607, all editions Windows Server 2016, all editions EXPIRATION NOTICE IMPORTANT As of March 31, 2026, this update is no longer available from the Microsoft Update Catalog or other release channels. We recommend...

April 9, 2024—KB5036899 (OS Build 14393.6897) - EXPIRED

April 9, 2024—KB5036899 OS Build 14393.6897 - EXPIRED Applies To Windows 10, version 1607, all editions Windows Server 2016, all editions EXPIRATION NOTICE IMPORTANT As of March 31, 2026, this update is no longer available from the Microsoft Update Catalog or other release channels. We recommend...

April 9, 2024—KB5036932 (Monthly Rollup)

April 9, 2024—KB5036932 Monthly Rollup Applies To Windows Server 2008 Premium Assurance Note Reminder Windows Server 2008 SP2 Extended Security Updates ESU third and final year ended on January 10, 2023. Additionally, Extended Security Updates on Azure only support ended on January 9, 2024. For...

January 9, 2024—KB5034119 (OS Build 14393.6614) - EXPIRED

January 9, 2024—KB5034119 OS Build 14393.6614 - EXPIRED Applies To Windows 10, version 1607, all editions Windows Server 2016, all editions EXPIRATION NOTICE IMPORTANT As of March 31, 2026, this update is no longer available from the Microsoft Update Catalog or other release channels. We recommen...