The Update BureauUpdates, page 2
-
Windows Server · 2019Windows Server 2019 Windows Server 2019 Security update Also for Windows 10
Three critical remote-code flaws; Secure Boot and server changes
Fixes 107 vulnerabilities, including three critical remote-code execution flaws, and changes Secure Boot, Remote Desktop, Kerberos, and WDS behavior. A domain-controller restart issue is resolved by KB5091573, not this update.
-
Windows Server · 2016Windows Server 2016 Windows Server 2016 Security update Also for Windows 10
Remote Desktop files get safer defaults; Secure Boot coverage expands
Remote Desktop shows requested connection settings before opening an .rdp file, and Secure Boot certificate targeting expands. The update also changes WDS, Kerberos, and WinCS behavior.
-
SQL Server · CU3 + GDRSQL Server 2025 CU3 + GDR SQL Server 2025 CU3 + GDR Security update
Linked-server privilege flaw fixed; MSDASQL queries can fail
The update fixes two SQL Server vulnerabilities, including a linked-server privilege issue. Linked-server queries using MSDASQL and a provider string might fail with error 7416.
-
SQL Server · GDRSQL Server 2025 GDR SQL Server 2025 GDR Security update
Linked-server privilege flaw addressed; MSDASQL queries can fail
The update addresses two Important elevation-of-privilege vulnerabilities, with fixes involving linked servers and SQL Agent. Some linked-server queries using MSDASQL can fail with error 7416 after installation.
-
SQL Server · CU24 + GDRSQL Server 2022 CU24 + GDR SQL Server 2022 CU24 + GDR Security update
Linked-server privilege flaw addressed; MSDASQL queries can fail
Addresses two important SQL Server elevation-of-privilege vulnerabilities. Linked-server queries using MSDASQL can fail with error 7416 after the update.
-
SQL Server · GDRSQL Server 2022 GDR SQL Server 2022 GDR Security update
Linked-server flaws fixed; MSDASQL queries can fail
Addresses three Important SQL Server vulnerabilities, including flaws that could enable privilege escalation or remote code execution. Linked-server queries using MSDASQL and a provider string might fail with error 7416.
-
SQL Server · CU32 + GDRSQL Server 2019 CU32 + GDR SQL Server 2019 CU32 + GDR Security update
Linked-server privilege flaws fixed; MSDASQL queries can fail
The update addresses two SQL Server elevation-of-privilege vulnerabilities. Linked-server queries using MSDASQL can still fail with error 7416.
-
SQL Server · GDRSQL Server 2019 GDR SQL Server 2019 GDR Security update
Linked-server security flaws fixed; MSDASQL queries can fail
Fixes two Important SQL Server elevation-of-privilege vulnerabilities. Linked-server queries using MSDASQL might fail with error 7416 after installation.
-
SQL Server · CU31 + GDRSQL Server 2017 CU31 + GDR SQL Server 2017 CU31 + GDR Security update
Linked-server privilege flaws addressed; MSDASQL queries can fail
Two Important SQL Server elevation-of-privilege vulnerabilities are addressed, including flaws in linked servers and SQL Agent. A known issue can make MSDASQL linked-server queries fail with error 7416.
-
SQL Server · GDRSQL Server 2017 GDR SQL Server 2017 GDR Security update
Linked-server privilege flaw addressed; MSDASQL queries fail
Fixes two Important elevation-of-privilege vulnerabilities. Linked server queries using MSDASQL with a provider string fail with error 7416.
-
SQL Server · SP3 AC + GDRSQL Server 2016 SP3 AC + GDR SQL Server 2016 SP3 AC + GDR Security update
Linked-server privilege flaw addressed; MSDASQL queries fail
The update addresses two SQL Server elevation-of-privilege vulnerabilities. Linked-server queries using MSDASQL with a provider string might fail with error 7416.
-
SQL Server · SP3 + GDRSQL Server 2016 SP3 + GDR SQL Server 2016 SP3 + GDR Security update
MSDASQL linked-server queries fail with error 7416
The update addresses two SQL Server elevation-of-privilege vulnerabilities. Linked-server queries using MSDASQL with a provider string fail with error 7416.
-
SharePoint Server · SESharePoint Server SE SharePoint Server SE Security updateZero-dayKB5002853
An exploited spoofing flaw and publishing-page fixes
Closes an exploited spoofing vulnerability and fixes several issues, including publishing pages that show the wrong interface and a rich text editor that cannot insert line breaks.
-
SharePoint Server · 2019SharePoint Server 2019 SharePoint Server 2019 Security updateZero-dayKB5002854
Exploited spoofing flaw patched; pages render again
Addresses an actively exploited spoofing flaw and fixes an issue that kept some pages from rendering. SharePoint Server 2019 updates end July 14, 2026.
-
SharePoint Server · 2016SharePoint Server 2016 SharePoint Server 2016 Security updateZero-dayKB5002861
Exploited server spoofing flaw addressed; page rendering fixed
Addresses an exploited server spoofing vulnerability and fixes an issue that kept some pages from rendering. It also delivers SharePoint Feature Pack 2, including the SharePoint Framework.
-
Office Online Server OOS Office Online Server Security update
Excel flaws that could run code or expose information fixed
The update fixes five Important vulnerabilities, including Excel flaws that could let attackers run code or expose information. Office Online Server updates end for all editions on December 31, 2026.
-
.NET Framework · 3.5, 4.8.1
Critical denial-of-service flaw addressed; WCF issue fixed
The update addresses six .NET Framework vulnerabilities, including one critical denial-of-service flaw, and a problem running WCF NamedPipe services in Win32 app containers.
-
.NET Framework · 3.5, 4.8.1
WCF service issue in app containers addressed
Addresses a .NET Framework issue affecting local communication services in some Windows apps, and fixes six vulnerabilities, including one critical denial-of-service flaw.
-
.NET Framework · 3.5, 4.8.1
Runtime denial-of-service flaw addressed; app-container service fixed
The update addresses six vulnerabilities, including a critical denial-of-service flaw, and addresses a problem running a Windows communication service in an app's restricted environment.
-
.NET Framework · 3.5, 4.8.1
Critical denial-of-service flaw addressed; ARM runtime crash improved
The update addresses six .NET Framework vulnerabilities, including one critical denial-of-service flaw, and improves reliability for ClickOnce checks, ARM devices, and WCF services.
-
.NET Framework · 3.5, 4.8.1
Six security flaws addressed; ARM runtime crash fixed
Addresses six .NET Framework vulnerabilities, including one critical denial-of-service flaw, and fixes an ARM64 runtime crash. Installation might fail through DISM on an offline Windows 10 IoT Enterprise LTSC 21H2 image.
-
.NET Framework · 3.5, 4.8.1
Critical denial-of-service flaw addressed; ARM64 runtime crash improved
The update addresses six vulnerabilities, including a critical .NET Framework denial-of-service flaw, and reliability issues in ClickOnce, the ARM64 runtime, and WCF.
-
.NET Framework · 3.5, 4.8
Critical runtime denial-of-service flaw addressed; ClickOnce adds hash support
The update addresses six vulnerabilities, including a critical .NET Framework denial-of-service flaw, and adds SHA384 and SHA512 verification support for ClickOnce. Installation might fail through DISM on offline Windows 10 IoT Enterprise LTSC 21H2 images.
-
.NET Framework · 3.5, 4.8
Critical service-disruption flaw addressed; ClickOnce checks expanded
Six .NET Framework vulnerabilities are addressed, including one critical flaw that can cause denial of service. ClickOnce checks now support SHA384 and SHA512.
-
.NET Framework · 3.5, 4.8
Critical runtime service-disruption flaw addressed; app checks improve
Addresses six .NET Framework vulnerabilities, including one critical flaw that can cause a denial of service. It also adds support for two app verification methods.