The Update BureauUpdates, page 2
-
Windows Server · 2016Windows Server 2016 Windows Server 2016 Security update Also for Windows 10Zero-day UpdatedKB5120418
Exploited WinSock flaw; File History backup failures fixed
An actively exploited WinSock driver flaw gets a security fix, and scheduled File History backups to SMB shares work again after failing with invalid credentials.
-
Exchange Server · RTMExchange Server Subscription Edition RTM Exchange Server Subscription Edition RTM Security update
Exchange privilege flaw addressed; published calendar feeds can fail
A critical Exchange privilege-escalation flaw is addressed. Published calendar subscriptions might stop refreshing and return HTTP 500.
-
Exchange Server · CU15Exchange Server 2019 CU15 Exchange Server 2019 CU15 ESU only Security update
Critical privilege-escalation flaw in the mail server addressed
A critical flaw could let attackers gain higher privileges on the mail server. Only organizations enrolled in the Extended Security Update program can receive this release.
-
Exchange Server · CU14Exchange Server 2019 CU14 Exchange Server 2019 CU14 ESU only Security update
Critical Exchange privilege flaw covered; CU14 ESU ends in October
A critical Exchange privilege flaw is addressed. CU14 security updates are available only to ESU organizations through October 31, 2026.
-
Exchange Server · CU23Exchange Server 2016 CU23 Exchange Server 2016 CU23 ESU only Security update
Critical mailbox privilege flaw; shared-mailbox wrappers persist
A critical elevation-of-privilege flaw in Exchange is fixed. Two known issues remain, including wrapper messages in shared mailboxes in hybrid setups.
-
SharePoint Server · SESharePoint Server SE SharePoint Server SE Security updateUpdatedKB5002893
Critical privilege and code-execution flaws patched; workflow changes ahead
Critical flaws include privilege escalation and remote code execution risks. The update also fixes broken cache and workflow links.
-
SharePoint Server · 2019SharePoint Server 2019 SharePoint Server 2019 Security updateFinal update for this version Final update for this version UpdatedKB5002894
Remote-code execution and privilege-escalation risks addressed
The update addresses 27 vulnerabilities, including three critical SharePoint Server flaws involving remote-code execution and privilege escalation. It also fixes broken workflow status links and changes several SharePoint features.
Build 16.0.10417.20198Security 27 CVEs 3 critical -
SharePoint Server · 2016SharePoint Server 2016 SharePoint Server 2016 Security updateFinal update for this version Final update for this version UpdatedKB5002905
Two critical privilege flaws; workflow and cache fixes
Fixes two critical SharePoint Server elevation-of-privilege vulnerabilities and resolves problems with workflow links, Distributed Cache, and Office Online Server document editing.
Build 16.0.5565.1001Security 23 CVEs 2 critical -
Office Online Server OOS Office Online Server Update
The previous server security package is superseded
This package replaces KB5002884 and requires the release version of Office Online Server. It can request a restart.
Build 16.0.10417.20197Replaced by KB5002910 → -
.NET Framework · 3.5, 4.8.1
Six vulnerabilities fixed; later updates resolve WPF print failures
The update addresses six .NET Framework vulnerabilities. Two WPF printing failures were also reported; later cumulative updates resolve them.
-
.NET Framework · 3.5, 4.8.1UpdatedKB5120708
Six runtime vulnerabilities addressed; WPF print failures later resolved
The update addresses six .NET Framework vulnerabilities. Two WPF printing failures reported after installation are resolved by later updates: one in September and one in October 2026.
-
.NET Framework · 3.5, 4.8.1UpdatedKB5120710
Six runtime flaws addressed; WPF print errors need later updates
Addresses six .NET Framework vulnerabilities. Two WPF printing problems are resolved only by later cumulative updates.
-
.NET Framework · 3.5, 4.8.1UpdatedKB5120713
Elevation-of-privilege and code-execution flaws addressed
The update addresses six .NET Framework vulnerabilities, including remote-code-execution flaws. Two WPF printing problems associated with the August update were later resolved by September and October updates.
-
.NET Framework · 3.5, 4.8.1UpdatedKB5120709
Runtime vulnerabilities closed; WPF printing errors need later updates
Closes six .NET Framework vulnerabilities, including three remote-code-execution flaws. Two WPF printing issues are resolved only in later updates.
-
.NET Framework · 3.5, 4.8.1UpdatedKB5120714
Six runtime vulnerabilities addressed; WPF printing may fail
Addresses six .NET Framework vulnerabilities, including remote-code-execution flaws. Some WPF apps may fail when printing or generating PDF/XPS content; later cumulative updates resolve the two listed issues.
-
.NET Framework · 3.5, 4.8UpdatedKB5120701
Code-execution and privilege flaws addressed
Addresses six .NET Framework vulnerabilities, including flaws involving code execution, elevation of privilege, and information disclosure. Some WPF printing problems are resolved by later updates.
-
.NET Framework · 3.5, 4.8UpdatedKB5120705
Six .NET vulnerabilities addressed; later updates fix WPF errors
Addresses six .NET Framework vulnerabilities. Some WPF printing errors caused by the update are resolved in later updates.
-
.NET Framework · 3.5, 4.8UpdatedKB5120703
Six runtime flaws addressed; WPF failures need newer updates
The update addresses six .NET Framework vulnerabilities. Some WPF printing problems are resolved only by later cumulative updates.
-
.NET Framework · 4.8UpdatedKB5120702
Six runtime vulnerabilities addressed; WPF print failures later resolved
The update addresses six .NET Framework vulnerabilities. Some WPF printing failures associated with the August update are resolved in the September and October 2026 updates.
-
.NET Framework · 3.5, 4.7.2
Six .NET vulnerabilities addressed; WPF issues resolved later
The update addresses six .NET Framework vulnerabilities. Two WPF printing issues were later resolved in the September and October 2026 cumulative updates.