The Update BureauUpdates, page 3
-
Office Online Server OOS Office Online Server Security updateUpdatedKB5002928
Excel remote code execution vulnerabilities addressed before support ends
Addresses 44 vulnerabilities, including 13 critical Excel remote code execution vulnerabilities. Updates for all Office Online Server editions end December 31, 2026.
-
.NET Framework · 3.5, 4.8.1
Critical AD FS spoofing flaw and .NET security bypass addressed
The update addresses 21 vulnerabilities, including a critical AD FS spoofing flaw and a publicly disclosed .NET security-feature bypass. It applies to .NET Framework 3.5 and 4.8.1 on Windows 11, version 26H2.
Builds 4.8.10008.0 2.0.50727.9188Security 21 CVEs 1 critical -
.NET Framework · 3.5, 4.8.1
Critical AD FS spoofing flaw and public .NET bypass fixed
Fixes 20 security flaws, including a Critical AD FS spoofing flaw and a publicly disclosed .NET Framework flaw that bypasses a security feature. Restart if affected files are in use.
Build 4.8.9363.0Security 20 CVEs 1 critical -
.NET Framework · 3.5, 4.8.1
Fixes 21 vulnerabilities (1 critical)
Addresses a critical spoofing flaw and other security risks in .NET Framework. It covers 21 vulnerabilities, including one that was publicly disclosed.
Builds 4.8.9363.0 2.0.50727.9188Security 21 CVEs 1 critical -
.NET Framework · 3.5, 4.8.1
Critical spoofing flaw and disclosed security bypass addressed
The update addresses 21 vulnerabilities, including one critical flaw and a publicly disclosed security bypass. It also updates .NET Framework 3.5 and 4.8.1.
Builds 4.8.9363.0 2.0.50727.9188Security 21 CVEs 1 critical -
.NET Framework · 3.5, 4.8.1
AD FS spoofing flaw and disclosed security bypass addressed
Addresses 21 vulnerabilities. One is a critical AD FS spoofing flaw; another is a publicly disclosed .NET Framework security bypass.
Builds 4.8.9363.0 2.0.50727.9188Security 21 CVEs 1 critical -
.NET Framework · 3.5, 4.8.1
Spoofing flaw fixed alongside a security bypass
The update fixes 21 flaws: 1 Critical, 18 Important, and 2 Unrated. They include spoofing flaw CVE-2026-96222 and publicly disclosed CVE-2026-108398, a security feature bypass.
Builds 4.8.9363.0 2.0.50727.9188Security 21 CVEs 1 critical -
.NET Framework · 3.5, 4.8UpdatedKB5127683
Critical .NET spoofing flaw addressed
CVE-2026-96222 is a critical .NET Framework spoofing flaw addressed by this update. It also addresses the publicly disclosed security-feature bypass CVE-2026-108398.
Builds 4.8.4811.0 2.0.50727.9188Security 21 CVEs 1 critical -
.NET Framework · 3.5, 4.8
Remote-code and security-bypass flaws are addressed
Addresses .NET Framework security flaws, including risks that could let attackers run code or bypass a security feature. It covers Windows Server 2022 systems with .NET Framework 3.5 or 4.8 installed.
Builds 4.8.4811.0 2.0.50727.9188Security 21 CVEs 1 critical -
.NET Framework · 3.5, 4.8
Closes a critical spoofing flaw and a disclosed security bypass
Fixes 21 security flaws, including a critical spoofing flaw and a publicly disclosed .NET Framework security bypass. It applies to Windows 10 version 1809 and Windows Server 2019.
Builds 4.8.4811.0 2.0.50727.9073Security 21 CVEs 1 critical -
.NET Framework · 4.8
Critical spoofing flaw among 20 vulnerabilities fixed
Fixes 20 vulnerabilities, including one critical spoofing flaw and a publicly disclosed security-feature bypass. It applies to .NET Framework 4.8 on Windows 10, version 1607 and Windows Server 2016.
Build 4.8.4811.0Security 20 CVEs 1 critical -
.NET Framework · 3.5, 4.7.2
Publicly disclosed .NET security bypass addressed
The update addresses 21 vulnerabilities, including one critical flaw. CVE-2026-108398 could bypass a .NET Framework security protection and was publicly disclosed.
Builds 4.7.4150.0 2.0.50727.9073Security 21 CVEs 1 critical -
Windows 11 · Future platformsWindows 11 Windows 11 Insider Future platforms Insider PreviewExperimental ChannelBuild 29683.1000
Build symbols return after being missing in the previous flight
Includes general improvements and fixes, and symbols should be available again. The notes also list internet access and VMware issues under investigation.
Changes 1 improved -
Windows 11 · 26H1Windows 11 Windows 11 Insider 26H1 Insider PreviewExperimental ChannelBuild 28120.3181
Windows Search inline actions and Narrator math reading
Experimental Channel Insiders get a redesigned Windows Search with inline actions, Narrator math reading and navigation, and improved taskbar settings persistence across monitor changes.
Changes 2 new · 4 improved -
Windows 11 · 26H1Windows 11 Windows 11 Insider 26H1 Insider PreviewBeta ChannelBuild 28020.3172
Overall experience improvements for Beta Channel PCs
Build 28020.3172 gradually brings a small set of general improvements and fixes to Insiders in the Beta Channel.
-
Windows 11 · 26H2Windows 11 Windows 11 Insider 26H2 Insider PreviewExperimental ChannelBuild 26340.9616
Windows Search actions and a battery status widget
Adds inline actions to Windows Search and a battery widget, and fixes several crashes and taskbar lag. These changes are for Windows Insiders, not everyday devices.
Changes 4 new · 4 improved · 3 fixes -
Windows 11 · 25H2Windows 11 Windows 11 Insider 25H2 Insider PreviewBeta ChannelBuild 26220.9606
Weather on the lock screen and cloud-based PC recovery
Makes Weather the primary lock-screen widget, adds Cloud rebuild recovery, and fixes crashes in some apps and games.
Changes 1 new · 1 improved · 1 fix -
Windows 11 · Future platformsWindows 11 Windows 11 Insider Future platforms Insider PreviewExperimental ChannelBuild 29680.1000
Favorite apps in Share and new downloaded-file previews
Adds app pinning in Windows Share and changes File Explorer previews for downloaded files, alongside fixes for audio, Remote Desktop, and performance.
Changes 1 new · 3 improved · 5 fixes -
Windows 11 · 26H1Windows 11 Windows 11 Insider 26H1 Insider PreviewExperimental ChannelBuild 28120.3151
Magnifier zoom controls and drive sanitizing during Cloud rebuild
Adds more precise Magnifier zoom controls and drive sanitizing during Cloud rebuild, alongside File Explorer improvements and fixes.
Changes 2 new · 5 improved · 2 fixes -
Windows 11 · 26H1Windows 11 Windows 11 Insider 26H1 Insider PreviewBeta ChannelBuild 28020.3142
Cloud rebuild and more precise Magnifier zoom
Build 28020.3142 is rolling out to Beta Channel Insiders with Cloud rebuild, more precise Magnifier zoom controls, and File Explorer improvements and fixes.
Changes 1 new · 5 improved · 2 fixes -
Windows 11 · 26H2Windows 11 Windows 11 Insider 26H2 Insider PreviewExperimental ChannelBuild 26340.9596
Unicode text support and quicker profile-folder navigation
Updates Unicode text support, adds `~` shortcuts in File Explorer, and adds a Settings entry for Cloud Rebuild. Settings improvements should reduce loading times in certain scenarios.
Changes 1 new · 3 improved -
Windows 11 · 25H2Windows 11 Windows 11 Insider 25H2 Insider PreviewBeta ChannelBuild 26220.9587
Unicode 17.0 text support and faster Settings loading
Beta Channel Insiders get Unicode 17.0 text support and faster loading on the Settings home page. The update also removes the cloud recovery entry point.
Changes 2 improved -
Exchange Server · RTMExchange Server Subscription Edition RTM Exchange Server Subscription Edition RTM Out-of-band security updateOut-of-bandKB5129955
Exchange vulnerabilities patched; hybrid free/busy times corrected
Nine Exchange vulnerabilities are addressed, and two hybrid mailbox problems are resolved: wrapper messages in shared mailboxes and shifted free/busy times.
-
Exchange Server · CU15Exchange Server 2019 CU15 Exchange Server 2019 CU15 ESU only Out-of-band security updateOut-of-bandKB5129956
Published calendar feeds can fail with HTTP 500
Addresses 9 vulnerabilities in Exchange Server 2019 CU15. A known issue can stop published calendar subscriptions from refreshing and return HTTP 500; an IIS workaround is available.
-
Exchange Server · CU14Exchange Server 2019 CU14 Exchange Server 2019 CU14 ESU only Out-of-band security updateOut-of-bandKB5129957
Hybrid shared-mailbox wrapper messages fixed; calendar feeds may fail
Fixes a hybrid shared-mailbox message issue and addresses 9 vulnerabilities. It is available only to organizations in the Period 2 ESU program; published calendar feeds can still return HTTP 500.