The Update BureauFiltered Update Catalog
Known issues — All products
26–50 of 355 updates, newest first.
Terms & labels
Label legend
- Security
- Contains fixes for security vulnerabilities.
- Preview
- Optional update with new features and fixes, without new security patches. Its content joins the next Patch Tuesday update.
- Out-of-band
- Released outside the usual monthly schedule, usually to fix a specific problem.
- Cumulative
- Includes everything from earlier updates, so the latest one is enough.
- Zero-day
- Microsoft reports a vulnerability that was already exploited or publicly known when the fix came out.
- Windows Insider Preview
- A pre-release build for testers, not meant for everyday PCs.
- Updated
- We revised this page after publishing because Microsoft changed its notes.
-
SQL Server · GDRSQL Server 2019 GDR SQL Server 2019 GDR Security updateUpdatedKB5128495
21 vulnerabilities fixed; MSDASQL linked queries can fail
The update fixes 21 vulnerabilities in SQL Server 2019 GDR. A known issue can make linked server queries using MSDASQL and a provider string fail with error 7416.
-
SQL Server · CU31 + GDRSQL Server 2017 CU31 + GDR SQL Server 2017 CU31 + GDR Security updateUpdatedKB5128496
Database Engine vulnerability fixes; MSDASQL queries can fail
Fixes security vulnerabilities in SQL Server 2017, but linked server queries using MSDASQL and a provider string might fail with error 7416.
-
SQL Server · GDRSQL Server 2017 GDR SQL Server 2017 GDR Security updateUpdatedKB5128497
SQL Satellite flaws fixed; MSDASQL linked queries can fail
The update fixes 14 vulnerabilities, including flaws in SQL Satellite and the Virtual Device Interface. Some linked-server queries that use MSDASQL can still fail with error 7416.
-
Exchange Server · RTMExchange Server Subscription Edition RTM Exchange Server Subscription Edition RTM Out-of-band security updateOut-of-bandKB5129955
Exchange vulnerabilities patched; hybrid free/busy times corrected
Nine Exchange vulnerabilities are addressed, and two hybrid mailbox problems are resolved: wrapper messages in shared mailboxes and shifted free/busy times.
-
Exchange Server · CU15Exchange Server 2019 CU15 Exchange Server 2019 CU15 ESU only Out-of-band security updateOut-of-bandKB5129956
Published calendar feeds can fail with HTTP 500
Addresses 9 vulnerabilities in Exchange Server 2019 CU15. A known issue can stop published calendar subscriptions from refreshing and return HTTP 500; an IIS workaround is available.
-
Exchange Server · CU14Exchange Server 2019 CU14 Exchange Server 2019 CU14 ESU only Out-of-band security updateOut-of-bandKB5129957
Hybrid shared-mailbox wrapper messages fixed; calendar feeds may fail
Fixes a hybrid shared-mailbox message issue and addresses 9 vulnerabilities. It is available only to organizations in the Period 2 ESU program; published calendar feeds can still return HTTP 500.
-
Exchange Server · CU23Exchange Server 2016 CU23 Exchange Server 2016 CU23 ESU only Out-of-band security updateOut-of-bandKB5129958
Shared mailbox wrapper messages fixed; published calendars can fail
Fixes wrapper messages appearing in shared mailboxes in hybrid environments. Published calendar subscriptions can still return HTTP 500; KB5128898 later resolves the issue for Exchange Server 2016 CU23.
-
Windows 11 · 26H1Windows 11 26H1 Windows 11 26H1 Optional previewPreview UpdatedKB5124006
Remote Desktop failures reported; taskbar moves to four screen edges
Adds taskbar and Start menu customization, while some non-admin Remote Desktop connections can fail on devices with Administrator protection enabled.
Build 28000.3086Replaced by KB5127646 →
-
SQL Server · CU9SQL Server 2025 CU9 SQL Server 2025 CU9 Cumulative update
Parallel session results can be wrong; recovery queries can crash
CU9 for SQL Server 2025 includes 45 fixes, but it also has open issues that can affect parallel SESSION_CONTEXT queries, MSDASQL linked servers, and queries during database recovery.
-
SQL Server · CU27SQL Server 2022 CU27 SQL Server 2022 CU27 Cumulative update
New multi-database link mode; recovery queries can trigger access violations
Adds a multi-database link mode and includes 42 fixes. Open issues include incorrect SESSION_CONTEXT results in parallel plans and access violations during database recovery.
-
Windows 11 · 23H2Windows 11 23H2 Windows 11 23H2 Out-of-band updateOut-of-bandKB5129242
Remote Desktop failures and Linux shared-folder access fixed
Addresses Remote Desktop instability, restores Plan9 host-folder access to Linux VMs, and resolves only 8-channel or 3D-mode symptoms for affected USB audio devices. Other USB audio symptoms remain.
Build 22631.7584Replaced by KB5126653 → -
Windows 10 · 1607Windows 10 1607 Windows 10 1607 Out-of-band update Also for Windows ServerOut-of-bandKB5129239
Remote Desktop instability and multichannel USB audio addressed
Addresses Remote Desktop instability and fixes failures in 8-channel or 3D audio on some USB Audio Class 1.0 devices. Other USB audio symptoms remain unresolved.
Build 14393.9514Replaced by KB5126868 → -
Windows Server · 2025Windows Server 2025 Windows Server 2025 Out-of-band updateOut-of-band UpdatedKB5129235
Remote Desktop failures fixed; USB audio partly restored
Remote Desktop connections and sign-ins work again in affected environments. USB audio in 8-channel or 3D modes is also fixed, but other USB audio problems remain.
-
Windows Server · 2022Windows Server 2022 Windows Server 2022 Out-of-band updateOut-of-bandKB5129237
Remote Desktop failures and multichannel USB audio fixed
Remote Desktop connection and sign-in failures are fixed, along with 8-channel and 3D audio problems on some USB Audio Class 1.0 devices. The update is available only through the Microsoft Update Catalog.
-
Windows 11 · 26H1Windows 11 26H1 Windows 11 26H1 Security updateZero-day UpdatedKB5124012
An exploited Windows Update Stack flaw is closed
An actively exploited Windows Update Stack flaw gets a security fix, and Teams and Outlook crashes on Arm64 PCs are addressed. The update also changes Morocco time and improves remote-session audio.
-
Windows 11 · 24H2, 25H2Windows 11 24H2 / 25H2 Windows 11 24H2 / 25H2 Security updateZero-day UpdatedKB5124008
Windows Update flaw exploited; mouse and desktop display fixes
An actively exploited flaw in the Windows Update stack gets a security fix, alongside fixes for mouse settings, black desktop backgrounds, and app crashes on Arm64 PCs.
-
Windows 11 · 23H2Windows 11 23H2 Windows 11 23H2 Security updateZero-day UpdatedKB5122880
An exploited Windows Update flaw gets an access fix
An actively exploited Windows Update flaw could let attackers gain higher access. The update also addresses remote audio problems and adjusts Morocco's time zone.
-
Windows 10 · 21H2, 22H2Windows 10 21H2 / 22H2 Windows 10 21H2 / 22H2 Security updateZero-day UpdatedKB5122878
Windows ALPC flaw under attack; remote audio issue addressed
An actively exploited Windows ALPC flaw is among the security fixes. The update also addresses Remote Desktop audio and a BitLocker recovery-key issue.
-
Windows 10 · 1809Windows 10 1809 Windows 10 1809 Security update Also for Windows ServerZero-day UpdatedKB5122876
Exploited ALPC flaw patched; remote-session audio addressed
Attackers are exploiting a Windows ALPC flaw to gain higher access. Remote-session audio also gets a fix, though some USB audio problems remain.
-
Windows 10 · 1607Windows 10 1607 Windows 10 1607 Security update Also for Windows ServerZero-day UpdatedKB5123099
Windows ALPC flaw under attack; Remote Desktop audio addressed
Attackers are exploiting a Windows ALPC privilege flaw. The update also addresses Remote Desktop audio problems and adds Secure Boot certificate targeting data.
-
Windows Server · 2025Windows Server 2025 Windows Server 2025 Security updateZero-day UpdatedKB5122871
Windows Update Stack flaw under active attack
An actively exploited Windows Update Stack flaw is among the security fixes. The update also improves networking, Remote Desktop audio, and Sysmon.
Build 26100.33438Security 690 CVEs 64 critical 1 exploitedKnown issues 1 openReplaced by KB5129235 → -
Windows Server · 2022Windows Server 2022 Windows Server 2022 Security updateZero-day UpdatedKB5122882
Exploited ALPC flaw patched; Hyper-V restart issue fixed
Patches an actively exploited flaw in Windows ALPC and fixes a Hyper-V issue that could unexpectedly restart some virtual machines.
Build 20348.5622Security 651 CVEs 61 critical 1 exploitedKnown issues 1 openReplaced by KB5129237 → -
Windows Server · 2019Windows Server 2019 Windows Server 2019 Security update Also for Windows 10Zero-day UpdatedKB5122876
An exploited ALPC flaw is patched; Remote Desktop audio is addressed
An exploited Windows ALPC flaw is patched, and Remote Desktop audio redirection is addressed for some configurations. USB Audio Class 1.0 devices can still have sound problems.
-
Windows Server · 2016Windows Server 2016 Windows Server 2016 Security update Also for Windows 10Zero-day UpdatedKB5123099
Actively exploited ALPC flaw; Remote Desktop audio addressed
An actively exploited ALPC flaw could let attackers gain higher privileges. The update also addresses remote-session audio problems, but some USB audio issues remain.
-
Exchange Server · RTMExchange Server Subscription Edition RTM Exchange Server Subscription Edition RTM Security update
Exchange vulnerabilities addressed; published calendar feeds may fail
Security flaws are addressed, but published calendar feeds and Korean-content processing have known issues.