The Update BureauUpdate Catalog & Archive
All updates
1,376–1,400 of 1,409 updates, newest first.
Terms & labels
Label legend
- Security
- Contains fixes for security vulnerabilities.
- Preview
- Optional update with new features and fixes, without new security patches. Its content joins the next Patch Tuesday update.
- Out-of-band
- Released outside the usual monthly schedule, usually to fix a specific problem.
- Cumulative
- Includes everything from earlier updates, so the latest one is enough.
- Zero-day
- Microsoft reports a vulnerability that was already exploited or publicly known when the fix came out.
- Windows Insider Preview
- A pre-release build for testers, not meant for everyday PCs.
- Updated
- We revised this page after publishing because Microsoft changed its notes.
-
Windows 10 · 1607Windows 10 1607 Windows 10 1607 Security update Also for Windows ServerZero-dayKB5034767
Exploited SmartScreen bypass patched; Secure Boot certificate added
The update fixes 33 vulnerabilities, including an actively exploited SmartScreen bypass (CVE-2024-21351) and a critical remote-code-execution flaw (CVE-2024-21357). It also adds an optional Secure Boot certificate and secures HTTPS device-metadata downloads.
Build 14393.6709Security 33 CVEs 1 critical 1 exploited -
Windows Server · 2022Windows Server 2022 Windows Server 2022 Security updateZero-dayKB5034770
Exploited kernel and SmartScreen flaws patched
Fixes 40 vulnerabilities, including three exploited flaws affecting the Windows kernel, Internet Shortcut files, and SmartScreen. It also addresses issues with server networking, sign-in, touchscreens, and Chromium-based browsers.
-
Windows Server · 2019Windows Server 2019 Windows Server 2019 Security update Also for Windows 10Zero-dayKB5034768
Exploited Windows flaws closed; LAPS and LSASS issues addressed
Closes 39 vulnerabilities, including critical CVE-2024-21357 (Windows PGM remote code execution) and exploited CVE-2024-21338 (Windows Kernel), CVE-2024-21412 (Internet Shortcut Files), and CVE-2024-21351 (SmartScreen). It also addresses several sign-in and system issues.
Build 17763.5458Security 39 CVEs 1 critical 3 exploited -
Windows Server · 2016Windows Server 2016 Windows Server 2016 Security update Also for Windows 10Zero-dayKB5034767
Exploited SmartScreen bypass and critical PGM flaw addressed
The update addresses 34 vulnerabilities, including an actively exploited SmartScreen bypass and a critical PGM remote-code-execution flaw. It also updates Secure Boot certificate support and makes device metadata downloads more secure.
Build 14393.6709Security 34 CVEs 1 critical 1 exploited -
Exchange Server · CU14Exchange Server 2019 CU14 Exchange Server 2019 CU14 ESU only Security updateZero-dayKB5035606
Mail-server access flaw is under attack
Fixes one critical flaw in Exchange Server 2019 CU14. Attackers are already using it to gain higher access.
-
.NET Framework · 3.5, 4.8.1PreviewKB5034466
ASP.NET path errors and an outdated zlib version addressed
The update addresses an illegal-path error in some ASP.NET MVC requests and an outdated OSS zlib library version in .NET.
Builds 4.8.9220.0 2.0.50727.9176Replaced by KB5036618 → -
.NET Framework · 3.5, 4.8.1
ASP.NET path errors addressed; outdated zlib library
Addresses an “Illegal characters in path” error in some ASP.NET MVC requests and an issue with an outdated zlib library.
Builds 4.8.9224.0 2.0.50727.9176Replaced by KB5036621 → -
.NET Framework · 3.5, 4.8PreviewKB5034468
ASP.NET MVC path errors and outdated zlib version addressed
The update addresses an error in some ASP.NET MVC requests and an issue with an outdated zlib library. If you already installed it in the January 23 rollup, no action is needed.
Builds 4.8.4697.0 2.0.50727.9176Replaced by KB5036608 →
-
.NET Framework · 3.5, 4.8
ASP.NET MVC path errors and an outdated zlib library addressed
The update addresses an “Illegal characters in path” error in some ASP.NET MVC requests and an outdated version of the OSS zlib library.
Builds 4.8.4700.0 2.0.50727.9176Replaced by KB5036613 → -
.NET Framework · 3.5, 4.8
ASP.NET MVC path errors and outdated zlib addressed
Addresses an illegal-path error in some ASP.NET MVC requests and an outdated OSS zlib library version. It contains no new security improvements.
Builds 4.8.4700.0 2.0.50727.9063Replaced by KB5036610 → -
.NET Framework · 4.8
ASP.NET path errors and outdated zlib addressed
The update addresses an illegal-path error in some ASP.NET MVC requests and an outdated zlib library version.
Build 4.8.4700.0Replaced by KB5036609 → -
.NET Framework · 3.5, 4.7.2
Illegal-path errors in some ASP.NET MVC requests addressed
The update addresses an illegal-path error in some ASP.NET MVC requests. It adds no new security improvements but includes previously released ones.
Builds 4.7.4087.0 2.0.50727.9063Replaced by KB5036604 →
-
Windows 11 · 23H2Windows 11 23H2 Windows 11 23H2 Optional previewPreviewKB5034204
Start menu search, Bluetooth audio and print-related freezes fixed
Fixes Start menu search and several audio and stability problems, including freezes after installing a print support app. It also includes fixes and changes for Windows 11 versions 22H2 and 23H2.
Build 22631.3085Replaced by KB5034765 → -
Windows 10 · 22H2Windows 10 22H2 Windows 10 22H2 Optional previewPreviewKB5034203
Printer setup issue addressed; richer weather comes to the lock screen
Addresses an issue that could make some single-function printers install as scanners and begins rolling out interactive weather on the lock screen.
-
.NET Framework · 3.5, 4.8PreviewKB5034582
Includes quality and reliability improvements for .NET Framework 3.5, 4.8, and 4.8.1 on Windows 10, version 22H2. Microsoft reports no known issues.
Replaced by KB5036580 →
-
Windows 11 · 24H2Windows 11 Windows 11 Insider 24H2 Insider PreviewDev ChannelBuild 26120.2992
Natural-language search and a text-refinement action
Build 26120.2992 previews natural-language search on Snapdragon-powered Copilot+ PCs and adds a text-refinement action. It also includes File Explorer and Magnifier changes, fixes, and known issues for Dev Channel Insiders.
Package KB5050083Changes 5 new · 2 improved · 7 fixes
-
SQL Server · CU11SQL Server 2022 CU11 SQL Server 2022 CU11 Cumulative update
SESSION_CONTEXT errors remain; 16 fixes included
Includes 16 fixes for SQL Server 2022. An issue that can make SESSION_CONTEXT return wrong results or produce access-violation dumps in parallel queries remains open.
-
Windows 11 · 23H2Windows 11 23H2 Windows 11 23H2 Security update
Dynamic lock-screen weather arrives; spellchecker issue addressed
The update adds interactive weather to the lock screen over the coming weeks and addresses a spellchecker issue. It also fixes connection problems for some Wi-Fi adapters and includes 35 security fixes, including two critical vulnerabilities.
-
Windows 10 · 21H2, 22H2Windows 10 21H2 / 22H2 Windows 10 21H2 / 22H2 Security update
Critical Kerberos and Hyper-V flaws patched; Copilot issues remain
The update fixes 34 vulnerabilities, including critical flaws in Kerberos and Hyper-V. It is no longer available through Microsoft release channels as of March 31, 2026.
Builds 19044.3930 19045.3930Security 34 CVEs 2 criticalKnown issues 2 open -
Windows 10 · 1809Windows 10 1809 Windows 10 1809 Security update Also for Windows Server
IE mode hangs and multi-monitor touch input issues addressed
Addresses problems that can make IE mode stop responding and touchscreens work improperly with multiple monitors. As of March 31, 2026, it is no longer available through Microsoft release channels.
Build 17763.5329Security 32 CVEs 2 critical -
Windows 10 · 1607Windows 10 1607 Windows 10 1607 Security update Also for Windows Server
Critical Kerberos bypass risk and IE mode scroll bar addressed
Addresses 24 vulnerabilities, including the critical Kerberos security feature bypass CVE-2024-20674, and an ActiveX scroll bar issue in IE mode. It is no longer available from Microsoft as of March 31, 2026.
Build 14393.6614Security 24 CVEs 1 critical -
Windows Server · 2022Windows Server 2022 Windows Server 2022 Security update
Critical Kerberos and Hyper-V flaws; sign-in and browser issues addressed
Fixes 36 vulnerabilities, including critical flaws in Kerberos and Hyper-V, and addresses issues affecting sign-in, servers, and other features. Chromium-based browser launch problems are resolved by KB5034770.
-
Windows Server · 2019Windows Server 2019 Windows Server 2019 Security update Also for Windows 10
IE mode and touchscreens work more reliably
Fixes several Windows Server 2019 problems, including IE mode becoming unresponsive and touchscreens malfunctioning with multiple monitors. It also addresses 33 security vulnerabilities, including two critical flaws.
Build 17763.5329Security 33 CVEs 2 critical -
Windows Server · 2016Windows Server 2016 Windows Server 2016 Security update Also for Windows 10
Critical Kerberos bypass and IE mode scroll bar addressed
The update addresses 26 vulnerabilities, including a critical Windows Kerberos security feature bypass, and a problem with the ActiveX scroll bar in IE mode. It is no longer available from Microsoft release channels as of March 31, 2026.
Build 14393.6614Security 26 CVEs 1 critical -
SQL Server · CU10 + GDRSQL Server 2022 CU10 + GDR SQL Server 2022 CU10 + GDR Security update
SQL data provider security bypass vulnerability resolved
Resolves a security feature-bypass vulnerability in the SQL data providers. It also updates SQL Server 2022 to build 16.0.4100.1.