The Update BureauUpdates, page 2
-
Windows 10 · 1607Windows 10 1607 Windows 10 1607 Security update Also for Windows Server
Secure Boot certificate targeting expands; catalog warning added
Secure Boot certificate targeting now covers more eligible devices, and Windows System Image Manager warns users to confirm a catalog is trusted. The update addresses 35 Important vulnerabilities.
-
Windows Server · 2025Windows Server 2025 Windows Server 2025 Security update
Secure Boot targeting expands; newer server errors are handled
Fixes 39 Important vulnerabilities and expands targeted delivery of new Secure Boot certificates. It also improves hardware error reporting on newer server platforms.
-
Windows Server · 2022Windows Server 2022 Windows Server 2022 Security update
Secure Boot certificate targeting expands; catalog selection gets safer
The update fixes 40 Important-severity vulnerabilities and improves Secure Boot certificate targeting and trusted catalog selection in Windows System Image Manager.
-
Windows Server · 2019Windows Server 2019 Windows Server 2019 Security update Also for Windows 10
Secure Boot certificate targeting expands; File History backs up more files
The update fixes 38 Important-severity vulnerabilities and expands phased Secure Boot certificate targeting. File History can now back up files with certain Chinese and Private Use Area characters.
-
Windows Server · 2016Windows Server 2016 Windows Server 2016 Security update Also for Windows 10
Secure Boot certificate targeting expands ahead of expirations
The update expands targeting for automatic Secure Boot certificate delivery and adds a trusted-source warning in Windows System Image Manager. Secure Boot certificates have started expiring in June 2026, which might affect some devices’ ability to boot securely.
-
SQL Server · CU2 + GDRSQL Server 2025 CU2 + GDR SQL Server 2025 CU2 + GDR Security update
Internal procedure removed; merge replication upgrade flaw fixed
The update removes an internal procedure tied to a potential SQL injection vulnerability and fixes an elevation-of-privilege flaw in merge replication upgrades. It also blocks a specific ALTER USER operation.
-
SQL Server · GDRSQL Server 2025 GDR SQL Server 2025 GDR Security update
Merge replication upgrade privilege flaw patched
The update fixes three Important vulnerabilities; CVE-2026-21262 is publicly disclosed. It also removes a potential SQL injection path and blocks ALTER USER against the system Administrator login.
-
SQL Server · CU23 + GDRSQL Server 2022 CU23 + GDR SQL Server 2022 CU23 + GDR Security update
Merge replication upgrade flaw fixed; ALTER USER restricted
Fixes two Important vulnerabilities, including publicly disclosed CVE-2026-21262, and blocks ALTER USER when its target is the system Administrator account.
-
SQL Server · GDRSQL Server 2022 GDR SQL Server 2022 GDR Security update
Merge replication privilege flaw fixed; system Administrator protected
The update fixes two Important SQL Server vulnerabilities, including publicly disclosed CVE-2026-21262, and blocks an ALTER USER operation that targets the system Administrator login.
-
SQL Server · CU32 + GDRSQL Server 2019 CU32 + GDR SQL Server 2019 CU32 + GDR Security update
Merge replication upgrade flaw fixed; ALTER USER restricted
The update addresses two SQL Server elevation-of-privilege vulnerabilities. It also fixes a flaw in the merge replication version-upgrade process and blocks a specific ALTER USER operation.
-
SQL Server · GDRSQL Server 2019 GDR SQL Server 2019 GDR Security update
Merge replication privilege flaw fixed; ALTER USER restricted
Fixes two Important SQL Server vulnerabilities, including the publicly disclosed CVE-2026-21262, and blocks a specific ALTER USER operation.
-
SQL Server · CU31 + GDRSQL Server 2017 CU31 + GDR SQL Server 2017 CU31 + GDR Security update
Merge replication flaw fixed; ALTER USER blocked for Administrator
The update fixes two Important SQL Server elevation-of-privilege vulnerabilities, including publicly disclosed CVE-2026-21262. It also blocks ALTER USER when the target login is the system Administrator account.
-
SQL Server · GDRSQL Server 2017 GDR SQL Server 2017 GDR Security update
Merge replication privilege flaw fixed; system Administrator protected
The update fixes an elevation-of-privilege vulnerability in merge replication and blocks an ALTER USER operation targeting the system Administrator account.
-
SQL Server · SP3 AC + GDRSQL Server 2016 SP3 AC + GDR SQL Server 2016 SP3 AC + GDR Security update
Merge replication privilege flaw fixed; Administrator changes blocked
The update fixes two Important SQL Server vulnerabilities, including publicly disclosed CVE-2026-21262, and blocks ALTER USER operations that target the system Administrator account.
-
SQL Server · SP3 + GDRSQL Server 2016 SP3 + GDR SQL Server 2016 SP3 + GDR Security update
Merge replication privilege flaw fixed; Administrator login protected
Fixes two important vulnerabilities in SQL Server 2016 SP3 GDR, including a publicly disclosed elevation-of-privilege flaw. It also blocks ALTER USER when the target is the system Administrator account.
-
SharePoint Server · SESharePoint Server SE SharePoint Server SE Security update
Critical Office code-execution flaw fixed; direct upgrade can fail
The update fixes three security vulnerabilities, including a critical Office remote-code execution flaw. SharePoint Server Subscription Edition farms moving directly from the January to March update can hit a PSConfig failure.
-
SharePoint Server · 2019SharePoint Server 2019 SharePoint Server 2019 Security update
Critical Office code flaw addressed; pages render again
The update addresses four vulnerabilities, including a critical Microsoft Office remote code execution flaw, and fixes an issue where some SharePoint pages do not render.
-
SharePoint Server · 2016SharePoint Server 2016 SharePoint Server 2016 Security update
Critical Office remote-code flaw patched; pages render again
The update closes four vulnerabilities, including a critical Office remote-code flaw, and fixes an issue that kept some pages from rendering. It also delivers SharePoint Framework (SPFx).
-
Office Online Server OOS Office Online Server Security update
Excel remote code execution vulnerability resolved
Resolves a Microsoft Excel remote code execution vulnerability in Office Online Server.
-
Windows 11 · 26H1Windows 11 Windows 11 Insider 26H1 Insider PreviewExperimental ChannelBuild 28020.1685
Storage cleanup reliability and voice typing for file renames
Improves reliability when removing update and Windows.old files, and adds voice typing while renaming files in File Explorer.
Changes 1 new · 1 improved -
Windows 11 · 26H2Windows 11 Windows 11 Insider 26H2 Insider PreviewDev ChannelBuild 26300.7966
Servicing pipeline test requires a restart
Dev Channel Insiders receive a servicing pipeline test with no new content. A restart is required, but the device build version stays the same.
Package KB5082257 -
Windows 11 · 26H2Windows 11 Windows 11 Insider 26H2 Insider PreviewExperimental ChannelBuild 26300.7965
Administrator protection returns and File Explorer adds voice renaming
Re-enables Administrator protection and adds voice typing when renaming files, alongside refinements to Sharing and File Explorer.
Package KB5079385Changes 2 new · 3 improved -
Windows 11 · 25H2Windows 11 Windows 11 Insider 25H2 Insider PreviewBeta ChannelBuild 26220.7961
Administrator protection returns and File Explorer adds voice typing
Re-enables Administrator protection and adds voice typing for file renaming, alongside refinements and fixes. These changes are gradually rolling out to Insiders who have turned on the latest-updates toggle.
Package KB5079382Changes 2 new · 2 improved · 1 fix -
Windows Server · 2022Windows Server 2022 Windows Server 2022 Out-of-band updateOut-of-bandKB5082314
ADFS certificate-renewal issue addressed for specific deployments
Addresses a Windows Hello for Business certificate-renewal issue in certain ADFS deployments on Windows Server 2022. The fix is disabled by default and must be enabled through Microsoft Support.