All updates

ASP.NET performance and thread-pool stalls addressed

Addresses an ASP.NET performance issue after the January 2024 .NET Framework update and an issue that could make thread-pool lists unresponsive on computers with multiple CPU groups.

.NET 3.5, 4.8 and 4.8.1 get quality changes

Includes cumulative quality and reliability improvements for .NET Framework 3.5, 4.8 and 4.8.1 on Windows 10, version 22H2. Windows Update downloads and installs it automatically.

Stops LSASS memory leaks that could restart domain controllers

Addresses an LSASS memory leak that could cause domain controllers to stop responding and restart unexpectedly while handling Kerberos requests.

LSASS memory leak on domain controllers addressed

The update addresses an LSASS memory leak that could make domain controllers stop responding and restart unexpectedly.

LSASS memory leak could trigger unexpected domain controller restarts

Addresses an LSASS memory leak on domain controllers. If the leak becomes substantial, LSASS might stop responding and the controllers might restart unexpectedly.

LSASS memory leak on domain controllers addressed

Addresses an LSASS memory leak on domain controllers that could cause the service to stop responding and trigger unexpected restarts.

LSASS memory leak on domain controllers addressed

Addresses an LSASS memory leak that can cause domain controllers to stop responding and restart unexpectedly after KB5035855.

Replication authentication and stronger password verifiers arrive

CU12 brings 51 fixes, makes Microsoft Entra authentication for replication generally available, and adds iterated, salted password verifiers. Queries using SESSION_CONTEXT might return incorrect results or trigger access violation dumps in parallel plans.

Critical Hyper-V flaws addressed; February update hang resolved

Addresses two critical Hyper-V vulnerabilities and an installation problem that could leave February updates stuck at 96%.

Hyper-V remote-code flaw addressed; Copilot icon issues remain

Addresses 35 vulnerabilities, including two critical Hyper-V flaws. Copilot can still disrupt desktop icon placement on multi-monitor devices, and the update is no longer available from Microsoft’s release channels.

DC memory leak risk flagged; touch keyboard issue fixed

Fixes a touch-keyboard opening problem and changes certificate-mapping support for some Active Directory domains. LSASS might leak memory on domain controllers after installation; KB5037425 addresses the issue.

Critical Hyper-V flaws patched; update is no longer available

Addresses 29 vulnerabilities, including two critical Hyper-V flaws. It has not been available from Microsoft release channels since March 31, 2026.

Critical Hyper-V flaw addressed; domain controllers risk memory leaks

The update addresses 39 vulnerabilities, including two critical Hyper-V flaws. Domain controllers might develop an LSASS memory leak; Microsoft recommends KB5037422 for domain controllers.

Touch keyboard fix; LSASS leak can reboot domain controllers

The update addresses a touch keyboard problem and includes 35 security fixes, including two critical Hyper-V flaws. A separate LSASS memory leak on domain controllers is addressed by KB5037425.

Domain controller memory leaks can trigger reboots; update expired

An LSASS memory leak can crash domain controllers and trigger unscheduled reboots while they handle Kerberos requests. This update is no longer available; Microsoft recommends updating devices to the latest Windows version.

Attachment scanning loses support for some file types

Text extraction stops for JPEG, TIFF, and AutoCAD attachments, which can affect some mail rules. EWS search results are also corrected.

Exchange remote-code flaw patched; attachment text extraction removed

A remote-code flaw in Exchange is patched. Text extraction from JPEG, TIFF, and AutoCAD attachments stops for transport rules and DLP scans.

Remote-code flaw fixed; farm joins may fail after the update

Fixes an Important SharePoint Server remote-code execution vulnerability and adds the Version 24H1 feature update. It also introduces a Microsoft.Owin change that requires a SharePoint upgrade action before sites can be browsed.

Edit Android photos from your PC; adds 80Gbps USB support

Adds Android photo editing through Snipping Tool and support for USB 80Gbps. It also addresses several Windows and app problems; a later update resolves the reported installation failure.

Share links to apps and keep games installed on other drives

Adds direct sharing of URLs to apps and keeps games installed on secondary drives. It also fixes several sign-in, input, and Remote Desktop problems.

Availability databases return in SSMS; parallel SESSION_CONTEXT remains risky

Fixes 14 issues in SQL Server 2019, including missing availability databases in SSMS. Queries using SESSION_CONTEXT can still return incorrect results or trigger access violations in parallel plans.