MS09-046: Vulnerability in the DHTML Editing Component ActiveX control could allow remote code execution

MS09-046: Vulnerability in the DHTML Editing Component ActiveX control could allow remote code execution INTRODUCTION Microsoft has released security bulletin MS09-046. To view the complete security bulletin, visit one of the following Microsoft Web sites: Home users:...

September 10, 2024—KB5043064 (OS Builds 19044.4894 and 19045.4894) - EXPIRED

September 10, 2024—KB5043064 OS Builds 19044.4894 and 19045.4894 - EXPIRED EXPIRATION NOTICEIMPORTANT As of March 31, 2026, this update is no longer available from the Microsoft Update Catalog or other release channels. We recommend that you update your devices to the latest version of Windows. -...

Servicing stack update for Windows 10, version 1803: November 12, 2019

Servicing stack update for Windows 10, version 1803: November 12, 2019 Summary This update makes quality improvements to the servicing stack, which is the component that installs Windows updates.We strongly recommend you install the latest servicing stack update SSU for your operating system befo...

September 10, 2019—KB4516055 (Monthly Rollup)

September 10, 2019—KB4516055 Monthly Rollup Improvements and fixes This security update includes improvements and fixes that were a part of update KB4512512 released August 17, 2019 and addresses the following issues: Provides protections against a new subclass of speculative execution side-chann...

March 12, 2024—KB5035888 (Monthly Rollup)

March 12, 2024—KB5035888 Monthly Rollup Reminder As of January 10, 2023, Microsoft no longer provides security updates or technical support for Windows 7 Service Pack 1 SP1. We recommend that you upgrade to a supported version of Windows. For more information, see Update that enables you to upgra...

May 10, 2022-KB5013628 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows 11

May 10, 2022-KB5013628 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows 11 Release Date: May 10, 2022 Version: .NET Framework 3.5 and 4.8 Summary Security Improvements This security update addresses an issue where a local user opening a specially crafted file could cause a denial of...

MS11-100: Vulnerability in the .NET Framework could allow elevation of privilege: December 29, 2011

This article contains details for the ASP.NET update for the .NET Framework.IntroductionMicrosoft has released security bulletin MS11-100. To view the complete security bulletin, visit one of the following Microsoft websites:Home...

Description of the security update for SharePoint Enterprise Server 2016: January 10, 2023 (KB5002338)

Description of the security update for SharePoint Enterprise Server 2016: January 10, 2023 KB5002338 Summary This security update resolves a Microsoft SharePoint Server remote code execution vulnerability and Microsoft SharePoint Server security feature bypass vulnerability. To learn more about t...

KB4535706 - Description of the security update for SQL Server 2016 SP2 CU11: February 11, 2020

KB4535706 - Description of the security update for SQL Server 2016 SP2 CU11: February 11, 2020 Summary A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services if it incorrectly handles page requests. An attacker who successfully exploits this vulnerability could...

MS14-059: Vulnerability in ASP.NET MVC could allow security feature bypass: October 14, 2014

Describes a security update that resolves a vulnerability in ASP.NET MVC that could allow security feature bypass if an attacker convinces a user to click a specially crafted link or to go to a webpage that contains specially crafted content.View products that this article applies...

MS12-043: Vulnerability in Microsoft XML Core Services could allow remote code execution: August 14, 2012

Resolves a security vulnerability in Microsoft XML Core Services that could allow arbitrary code to run when you view a specially crafted webpage by using Windows Internet Explorer.View products that this article applies to.Microsoft has rereleased security bulletin MS12-043. This security bullet...

KB5046857 - Description of the security update for SQL Server 2017 GDR: November 12, 2024

KB5046857 - Description of the security update for SQL Server 2017 GDR: November 12, 2024 Summary Improvements and fixes included in this update How to obtain and install the update More information File information Information about protection and security Summary This security update contains...

September 13, 2022—KB5017377 (Security-only update)

September 13, 2022—KB5017377 Security-only update Summary Learn more about this security-only update, including improvements, any known issues, and how to get the update. IMPORTANTWindows Server 2012 has reached the end of mainstream support and is now in extended support. Starting in July 2020,...

Servicing stack update for Windows 10, version 1809: April 14, 2020

Servicing stack update for Windows 10, version 1809: April 14, 2020 Applies to Windows 10 Version 1809 for 32-bit Systems Windows 10 Version 1809 for ARM64-based Systems Windows 10 Version 1809 for x64-based Systems Windows Server 2019 Windows Server 2019 Server Core installation Summary This...

February 8, 2022—KB5010345 (OS Build 18363.2094)

February 8, 2022—KB5010345 OS Build 18363.2094 EXPIRATION NOTICE As of 9/12/2023, KB5010345 is only available from Windows Update. This update is no longer available from the Microsoft Update Catalog, or other release channels. We recommend that you update your devices to the latest security...

Escalation of privilege possible in Power BI Report Server (September, May 2021): March 4, 2022 (KB5007903)

Escalation of privilege possible in Power BI Report Server September, May 2021: March 4, 2022 KB5007903 INTRODUCTION Microsoft has released security update guide CVE-2021-41372 for Power BI Report Server. See the complete guide at...

Description of the security update for Office 2010: January 14, 2020

Description of the security update for Office 2010: January 14, 2020 Summary This security update resolves a remote code execution vulnerability that exists in Microsoft Office software if the software does not correctly handle objects in memory. To learn more about the vulnerability, see Microso...

October 8, 2024-KB5044091 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 10 Version 22H2

October 8, 2024-KB5044091 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 10 Version 22H2 Release Date: October 8, 2024 Version: .NET Framework 3.5, 4.8 and 4.8.1 Summary This article describes the security and cumulative update for 3.5, 4.8 and 4.8.1 for Windows 10 Version...

July 14, 2020—KB4565503 (OS Build 19041.388)

July 14, 2020—KB4565503 OS Build 19041.388 NEW IMPORTANT Starting in July 2020, we will resume non-security releases for Windows 10 and Windows Server, version 1809 and later. There is no change to the cumulative monthly security updates also referred to as the "B" release or Update Tuesday...

June 9, 2020—KB4557957 (OS Build 19041.329)

June 9, 2020—KB4557957 OS Build 19041.329 IMPORTANT We have been evaluating the public health situation, and we understand this is impacting our customers. In response to these challenges, we are prioritizing our focus on security updates. Starting in May 2020, we are pausing all optional...

Description of the security update for Outlook 2016: October 9, 2018

Description of the security update for Outlook 2016: October 9, 2018 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Security Advisory...

Security and Quality Rollup for the .NET Framework 3.5 SP1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, and 4.7.1 updates for Windows 8.1, RT 8.1, and Server 2012 R2 (KB 4055266)

Security and Quality Rollup for the .NET Framework 3.5 SP1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, and 4.7.1 updates for Windows 8.1, RT 8.1, and Server 2012 R2 KB 4055266 Notice This update has been released as part of the January 2018 Preview of the Quality Rollups for .NET Framework 3.5 SP1, 4.5.2, 4....

Description of the security update for Office 2010: May 9, 2017

Description of the security update for Office 2010: May 9, 2017 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Common...

February 10, 2026—KB5075999 (OS Build 14393.8868)

February 10, 2026—KB5075999 OS Build 14393.8868 Windows Secure Boot certificate expirationImportant: Secure Boot certificates used by most Windows devices are set to expire starting in June 2026. Microsoft has been updating these certificates on consumer and non-managed business devices for the...

December 10, 2024—KB5048735 (Monthly Rollup)

December 10, 2024—KB5048735 Monthly Rollup Important The installation of this Extended Security Update ESU might fail when you try to install it on an Azure Arc-enabled device that is running Windows Server 2012 R2. For a successful installation, please make sure all Subset of endpoints for ESU...

KB5046860 - Description of the security update for SQL Server 2019 CU29: November 12, 2024

KB5046860 - Description of the security update for SQL Server 2019 CU29: November 12, 2024 Summary Improvements and fixes included in this update How to obtain and install the update How to obtain or download the latest cumulative update package for Linux More information File information...

Description of the security update for Microsoft Exchange Server 2019 and 2016: August 9, 2022 (KB5015322)

Description of the security update for Microsoft Exchange Server 2019 and 2016: August 9, 2022 KB5015322 This security update rollup resolves vulnerabilities in Microsoft Exchange Server. To learn more about these vulnerabilities, see the following Common Vulnerabilities and Exposures CVE:...

Description of the security update for SharePoint Server Subscription Edition: May 10, 2022 (KB5002194)

Description of the security update for SharePoint Server Subscription Edition: May 10, 2022 KB5002194 Summary This security update resolves a Microsoft SharePoint Server remote code execution vulnerability. To learn more about the vulnerability, see Microsoft Common Vulnerabilities and Exposures...

KB4494351 - Description of the security update for SQL Server 2017 GDR: May 14, 2019

KB4494351 - Description of the security update for SQL Server 2017 GDR: May 14, 2019 Summary An information disclosure vulnerability exists in Microsoft SQL Server Analysis Services if it incorrectly enforces metadata permissions. An attacker could exploit the vulnerability if the attacker's...

July 11, 2017—KB4025336 (Monthly Rollup)

July 11, 2017—KB4025336 Monthly Rollup Improvements and fixes This security update includes improvements and fixes that were a part of update KB4022720 released June 27, 2017 and resolves the following issues: Addressed issue called out in KB4022720 where Internet Explorer 11 may close unexpected...

Cumulative update for Windows 10 Version 1607 and Windows Server 2016: November 8, 2016

Cumulative update for Windows 10 Version 1607 and Windows Server 2016: November 8, 2016 Summary This security update includes improvements and fixes in the functionality of Windows 10 Version 1607 and Windows Server 2016. It also resolves the following vulnerabilities in Windows: 3198467 MS16-142...

Description of the security update for SharePoint Enterprise Server 2016: June 11, 2019

Description of the security update for SharePoint Enterprise Server 2016: June 11, 2019 Summary This security update resolves a cross-site-scripting XSS vulnerability that exists when Microsoft SharePoint Server does not correctly sanitize a specially crafted web request to an affected SharePoint...

June 9, 2026—KB5094125 (OS Build 26100.32995)

June 9, 2026—KB5094125 OS Build 26100.32995 ​​​​​This cumulative update for Windows Server 2025 KB5094125, includes the latest security fixes and improvements, along with non-security updates from last month’s optional preview release. To learn more about differences between security updates,...

Description of the security update for SharePoint Enterprise Server 2016: August 11, 2020

Description of the security update for SharePoint Enterprise Server 2016: August 11, 2020 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, se...

July 14, 2020—KB4565539 (Security-only update)

July 14, 2020—KB4565539 Security-only update NEW IMPORTANT Starting in July 2020, all Windows Updates will disable the RemoteFX vGPU feature because of a security vulnerability. For more information about the vulnerability, seeCVE-2020-1036 and KB4570006. After you install this update, attempts t...

MS15-022: Description of the security update for Microsoft Excel 2010: March 10, 2015

Resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file in an affected version of Office software.IntroductionThis security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if an...

Description of the security update for SharePoint Enterprise Server 2016: April 9, 2019

Description of the security update for SharePoint Enterprise Server 2016: April 9, 2019 Summary This security update resolves a cross-site-scripting XSS vulnerability that exists when Microsoft SharePoint Server does not correctly sanitize a specially crafted web request to an affected SharePoint...

May 13, 2025—KB5058379 (OS Builds 19044.5854 and 19045.5854) - EXPIRED

May 13, 2025—KB5058379 OS Builds 19044.5854 and 19045.5854 - EXPIRED EXPIRATION NOTICEIMPORTANT As of March 31, 2026, this update is no longer available from the Microsoft Update Catalog or other release channels. We recommend that you update your devices to the latest version of Windows. ---...

November 14, 2023-KB5032339 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 10 Version 22H2

November 14, 2023-KB5032339 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 10 Version 22H2 Revised 11/15/23: to remove CVE details which were not affected by the .NET Framework November Security and Quality rollup. Release Date: November 14, 2023 Version: .NET Framework 3.5,...

February 14, 2023-KB5022727 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 10, version 20H2

February 14, 2023-KB5022727 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 10, version 20H2 Notes: Revised 3/29/2023 to add an resolution to a Known issues in this update. Revised 3/24/2023 to add an additional Known issues in this update. Note: Revised on Jun 20, 2023 to add...

Description of the security update for SharePoint Foundation 2010: April 9, 2019

Description of the security update for SharePoint Foundation 2010: April 9, 2019 Summary This security update resolves a cross-site–scripting XSS vulnerability that exists if Microsoft SharePoint Server does not correctly sanitize a specially crafted web request that's made to an affected...

November 14, 2023—KB5032198 (OS Build 20348.2113)

November 14, 2023—KB5032198 OS Build 20348.2113 For information about Windows update terminology, see the article about the types of Windows updates and the monthly quality update types. For an overview of Windows Server 2022, see its update history page. Note Follow @WindowsUpdate to find out wh...

September 14, 2021—KB5005566 (OS Build 18363.1801)

September 14, 2021—KB5005566 OS Build 18363.1801 EXPIRATION NOTICE As of 9/12/2023, KB5005566 is only available from Windows Update. This update is no longer available from the Microsoft Update Catalog, or other release channels. We recommend that you update your devices to the latest security...

Description of the security update for Outlook 2016: August 11, 2020

Description of the security update for Outlook 2016: August 11, 2020 Summary This security update resolves a remote code execution vulnerability that exists in Microsoft Outlook when the software does not correctly handle objects in memory. It also resolves an information disclosure vulnerability...

Microsoft security advisory: Update to default cipher suite priority order: May 12, 2015

Microsoft security advisory: Update to default cipher suite priority order: May 12, 2015 INTRODUCTION Microsoft has released a Microsoft security advisory about this issue for IT professionals. The security advisory contains additional security-related information. To view the security advisory,...

February 11, 2020—KB4537813 (Security-only update)

February 11, 2020—KB4537813 Security-only update IMPORTANT Verify that you have installed the required updates listed in the How to get this update section before installing this update. NEW IMPORTANT Some customers who use Windows Server 2008 R2 SP1 and have activated their ESU multiple activati...

MS13-002: Description of the security update for XML Core Services 4.0: January 8, 2013

MS13-002: Description of the security update for XML Core Services 4.0: January 8, 2013 Microsoft has released security bulletin MS13-002. To view the complete security bulletin, go to one of the following Microsoft websites: Home...

December 10, 2024—KB5048695 (Monthly Rollup)

December 10, 2024—KB5048695 Monthly Rollup End of support information Windows Server 2008 R2 Premium Assurance ends on January 13, 2026.Windows Server 2008 R2 Extended Security Updates ESU ended on January 10, 2023. Additionally, Extended Security Updates on Azure only support ended on January 9,...

May 14, 2024— Hotpatch KB5037848 (OS Build 20348.2458)

None None...

Update for the Extended Security Updates (ESU) Licensing Preparation Package for Windows 7 SP1 and Windows Server 2008 R2 SP1

Update for the Extended Security Updates ESU Licensing Preparation Package for Windows 7 SP1 and Windows Server 2008 R2 SP1 Important: WSUS scan cab files will continue to be available for Windows 7 SP1 and Windows Server 2008 R2 SP1. If you have a subset of devices running these operating system...