Windows Server 2022

Build history

• Windows Server 2022 Windows Server 2022 Out-of-band update

  Out-of-band Updated Nov 13

  KB5136487 Nov 13, 2026

  SLMGR activation failures fixed for KMS and license tasks

  Some Windows licensing and activation commands that failed with error 0x80041008 now work again. The fix mainly matters to organizations managing KMS activation, product keys, or Windows licenses.

  Known issues: 1 open Organizations and IT administrators

  • Windows Server Update Services (WSUS) does not display error details

  Key changes 2 changes

  • Improved Servicing stack: The component that installs Windows updates gets quality improvements to help devices install updates reliably.
  • Fix Licensing and Activation: Some Windows licensing and activation commands no longer fail with error 0x80041008.

  Read update → Source: Microsoft ↗

• Windows Server 2022 Windows Server 2022 Security update

  Updated Nov 14

  KB5131090 Nov 10, 2026

  Critical Windows Search remote-code flaw patched

  A critical Windows Search flaw and other serious security bugs get fixes, alongside Exchange, printer, and Remote Desktop repairs. Some Exchange and WSUS problems remain open.

  Check the newer update, KB5136487

  Mainstream support for Windows Server 2022 has ended. Monthly security updates continue during extended support through October 14, 2031.

  Known issues: 1 open Organizations and IT administrators

  • Windows Server Update Services (WSUS) does not display error details

  Key changes 593 CVEs · 9 changes

  • Improved Date and Time: Cuba's daylight saving time schedule is adjusted for the extended 2026–2027 period.
  • Improved Security: NTLM connections get stronger protection against relay attacks, with auditing to help identify connections that lack signing.
  • Improved Windows PowerShell: PowerShell scripts with invalid UTF-8 encoding might fail signature checks, even if they passed before.

  Read update → Source: Microsoft ↗

• Windows Server 2022 Windows Server 2022 Out-of-band update

  Out-of-band Updated Nov 11

  KB5134140 Oct 26, 2026

  Root certificates updated for isolated servers; Exchange mail can fail

  An updated trusted root certificate list helps servers that cannot reach Microsoft's certificate service. Some on-premises Exchange servers might also have trouble with sign-in and mail delivery.

  Check the newer update, KB5131090

  Known issues: 1 open Organizations and IT administrators

  • Windows Server Update Services (WSUS) does not display error details

  Key changes 2 changes

  • Improved Certificates: Servers that cannot get certificate updates from Microsoft receive an updated list of trusted root certificates.
  • Improved Servicing stack: The component that installs Windows updates gets quality improvements.

  Read update → Source: Microsoft ↗

• Windows Server 2022 Windows Server 2022 Security update

  Zero-day Updated Nov 13

  KB5126655 Oct 13, 2026

  Exploited Shell flaw patched; Exchange mail issues mitigated

  An exploited Windows Shell security bypass is addressed. Some Exchange servers may still have sign-in and email delivery problems, with a temporary mitigation available.

  Check the newer update, KB5134140

  This is the last mainstream support update for this version. Extended support provides monthly security updates through October 14, 2031.

  Known issues: 1 open Organizations and IT administrators

  • Windows Server Update Services (WSUS) does not display error details

  Key changes 1,034 CVEs · 8 changes

  • New Authentication: Administrators can get more details about NTLM use, including who uses it and where.
  • New Date and Time: A new Manitoba time zone is available.
  • Improved Date and Time: British Columbia and Alberta switch to permanent daylight saving time starting in November 2026.

  Read update → Source: Microsoft ↗

• Windows Server 2022 Windows Server 2022 Out-of-band update

  Out-of-band

  KB5129237 Sep 14, 2026

  Remote Desktop failures and multichannel USB audio fixed

  Remote Desktop connection and sign-in failures are fixed, along with 8-channel and 3D audio problems on some USB Audio Class 1.0 devices. The update is available only through the Microsoft Update Catalog.

  Check the newer update, KB5126655

  Secure Boot certificates used by most Windows devices have started expiring. Microsoft recommends reviewing its guidance and updating certificates in advance to avoid disruption.

  Known issues: 1 open Organizations and IT administrators

  • Windows Server Update Services (WSUS) does not display error details

  Key changes 3 changes

  • Improved Servicing stack: The component that installs Windows updates receives quality improvements.
  • Fix Remote Desktop Services: Remote Desktop connections and sign-ins work again in affected environments, where the service could become unstable and leave servers...
  • Fix 8-channel or 3D audio modes: Some USB Audio Class 1.0 devices can use 8-channel or 3D audio modes without the failures addressed by this update.

  Read update → Source: Microsoft ↗

• Windows Server 2022 Windows Server 2022 Security update

  Zero-day Updated Nov 10

  KB5122882 Sep 8, 2026

  Exploited ALPC flaw patched; Hyper-V restart issue fixed

  Patches an actively exploited flaw in Windows ALPC and fixes a Hyper-V issue that could unexpectedly restart some virtual machines.

  Check the newer update, KB5129237

  Mainstream support ends October 13, 2026; monthly security updates continue through October 14, 2031.

  Known issues: 1 open Organizations and IT administrators

  • Windows Server Update Services (WSUS) does not display error details

  Key changes 651 CVEs · 6 changes

  • Improved Certificates: Applications are more likely to keep working during certificate updates.
  • Improved Date and Time: Morocco's local time stays correct after its time change on September 20, 2026.
  • Improved Networking: Network connections respond faster when an adapter disconnects, helping storage and file access keep working.

  Read update → Source: Microsoft ↗

• Windows Server 2022 Windows Server 2022 Security update

  Zero-day Updated Nov 10

  KB5120242 Aug 11, 2026

  WinSock driver flaw under active attack

  An actively exploited elevation-of-privilege flaw affects the Ancillary Function Driver for WinSock. The update also improves Secure Boot certificate targeting.

  Check the newer update, KB5122882

  Mainstream support ends October 13, 2026. The October 2026 security update is the last mainstream support update for this version.

  Known issues: 1 open Organizations and IT administrators

  • Windows Server Update Services (WSUS) does not display error details

  Key changes 195 CVEs · 2 changes

  • Improved Secure Boot: More devices are eligible to receive new Secure Boot certificates automatically.
  • Improved Servicing stack: The component that installs Windows updates gets quality improvements.
  • Exploited CVE-2026-68820: Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

  Read update → Source: Microsoft ↗

• Windows Server 2022 Windows Server 2022 Security update

  Zero-day Updated Nov 10

  KB5099540 Jul 14, 2026

  Exploited AD FS flaw patched; BitLocker recovery prompt remains possible

  An actively exploited AD FS elevation flaw and a Windows Shell spoofing flaw get security fixes. Check BitLocker settings before installing on affected managed servers.

  Check the newer update, KB5120242

  Mainstream support ends October 13, 2026; the October 2026 security update is the last mainstream update. Monthly security updates continue through October 14, 2031.

  Known issues: 2 open Organizations and IT administrators

  • Windows Server Update Services (WSUS) does not display error details
  • Devices with an unrecommended BitLocker Group Policy configuration might be required to enter their BitLocker recovery key

  Key changes 327 CVEs · 11 changes

  • New Distributed Key Manager (DKM): A new check can spot insecure AD FS key-container permissions, with an optional way for administrators to improve them.
  • Improved Secure Boot: More eligible devices can receive the updated Secure Boot certificates automatically.
  • Improved Authentication: Identity auditing records more sign-ins that use NTLM, helping administrators spot identity threats.

  Read update → Source: Microsoft ↗

• Windows Server 2022 Windows Server 2022 Security update

  KB5094128 Jun 9, 2026

  Remote Desktop and HTTP.sys remote-code flaws addressed

  Remote Desktop, HTTP.sys, Hyper-V, and other components receive security fixes. File Explorer search and app reliability also improve.

  Check the newer update, KB5099540

  Windows Server 2022 reaches the end of mainstream support on October 13, 2026. Its October 2026 security update is the last mainstream support update; extended support continues through October 14, 2031.

  Known issues: 2 open Organizations and IT administrators

  • Windows Server Update Services (WSUS) does not display error details
  • Devices with an unrecommended BitLocker Group Policy configuration might be required to enter their BitLocker recovery key

  Key changes 105 CVEs · 8 changes

  • New Secure Boot: Administrators can limit the Secure Boot service data Windows sends to Microsoft.
  • Improved Secure Boot: More eligible devices can receive new Secure Boot certificates automatically, in a controlled rollout.
  • Improved App: Windows Security shows real-time status updates for Secure Boot.

  Read update → Source: Microsoft ↗

• Windows Server 2022 Windows Server 2022 Security update

  KB5087545 May 12, 2026

  Critical Netlogon flaw patched; BitLocker recovery risk remains

  Fixes 58 vulnerabilities, including five critical flaws, and addresses a Remote Desktop warning-dialog issue. Some BitLocker configurations might prompt for a recovery key after the first restart.

  Check the newer update, KB5094128

  Secure Boot certificates used by most Windows devices started expiring in June 2026; devices without newer certificates continue to start and receive standard updates. Windows Server 2022 reaches the end of mainstream support on October 13, 2026.

  Known issues: 2 open Organizations and IT administrators

  • Windows Server Update Services (WSUS) does not display error details
  • Devices with an unrecommended BitLocker Group Policy configuration might be required to enter their BitLocker recovery key

  Key changes 58 CVEs · 8 changes

  • New Secure Boot: Eligible devices get a new C:\Windows\SecureBoot folder containing sample scripts for checking certificate-update status and managing d...
  • Improved Secure Boot: More eligible devices can receive new Secure Boot certificates automatically, through a controlled rollout that waits for successful up...
  • Improved App: Apps and system components get more consistent calculation results, especially when working with very small values.

  Read update → Source: Microsoft ↗

• Windows Server 2022 Windows Server 2022 Out-of-band update

  Out-of-band

  KB5091575 Apr 19, 2026

  PAM-related domain controller startup failures fixed

  Domain controllers in multi-domain forests using PAM can start again after restart failures caused by the April 14 update. This out-of-band release is available only from the Microsoft Update Catalog.

  Check the newer update, KB5087545

  Known issues: 3 open

  • Windows Server Update Services (WSUS) does not display error details
  • Devices with an unrecommended BitLocker Group Policy configuration might be required to enter their BitLocker recovery key
  • Warnings related to Remote Desktop might not display correctly

  Key changes 1 change

  • Fix Domain controllers (known issue): Domain controllers in multi-domain forests using PAM can start again after restart failures caused by the April 14 update.

  Read update → Source: Microsoft ↗

• Windows Server 2022 Windows Server 2022 Security update

  KB5082142 Apr 14, 2026

  Critical IKE flaw patched; BitLocker recovery risk remains

  A critical flaw in the Windows IKE service could allow remote code execution. Some managed servers might also ask for a BitLocker recovery key after the first restart.

  Check the newer update, KB5091575

  Known issues: 3 open

  • Windows Server Update Services (WSUS) does not display error details
  • Devices with an unrecommended BitLocker Group Policy configuration might be required to enter their BitLocker recovery key
  • Warnings related to Remote Desktop might not display correctly

  Key changes 117 CVEs · 11 changes

  • New Texts and Fonts: Windows fonts now include the Saudi Riyal currency symbol.
  • Improved Connectivity: Audio features are more reliable, which can reduce system slowdowns linked to sound activity.
  • Improved Kernel: Large file operations are more stable, with fewer unexpected interruptions during work or file transfers.

  Read update → Source: Microsoft ↗

• Windows Server 2022 Windows Server 2022 Security update

  KB5078766 Mar 10, 2026

  Secure Boot certificate targeting expands; catalog selection gets safer

  The update fixes 40 Important-severity vulnerabilities and improves Secure Boot certificate targeting and trusted catalog selection in Windows System Image Manager.

  Check the newer update, KB5082142

  Secure Boot certificates used by most Windows devices started expiring in June 2026. Devices without newer certificates continue to start and operate normally, and standard Windows updates continue to install.

  Known issues: 1 open Organizations and IT administrators

  • Windows Server Update Services (WSUS) does not display error details

  Key changes 40 CVEs · 3 changes

  • Improved Secure Boot: Eligible devices are more likely to receive new Secure Boot certificates automatically. Servers are unlikely to qualify.
  • Improved Windows System Image Manager: A warning helps you confirm that a catalog file you select comes from a trusted source.
  • Improved Servicing stack: The component that installs Windows updates receives quality improvements to help devices receive and install updates reliably.

  Read update → Source: Microsoft ↗

• Windows Server 2022 Windows Server 2022 Out-of-band update

  Out-of-band

  KB5082314 Mar 2, 2026

  ADFS certificate-renewal issue addressed for specific deployments

  Addresses a Windows Hello for Business certificate-renewal issue in certain ADFS deployments on Windows Server 2022. The fix is disabled by default and must be enabled through Microsoft Support.

  Check the newer update, KB5078766

  Known issues: 1 open Organizations and IT administrators

  • Windows Server Update Services (WSUS) does not display error details

  Key changes 1 change

  • Fix Windows Hello for Business: Addresses a certificate-renewal issue in certain Windows Hello for Business deployments using ADFS on Windows Server 2022. The fix is d...

  Read update → Source: Microsoft ↗

• Windows Server 2022 Windows Server 2022 Security update

  Zero-day

  KB5075906 Feb 10, 2026

  Exploited Shell and MSHTML bypasses patched; folder names fixed

  Fixes 27 security vulnerabilities, including five that are being exploited, and addresses several Windows Server issues. It also adds optional DNS response record shuffling.

  Check the newer update, KB5082314

  Secure Boot certificates used by most Windows devices have started expiring in June 2026. Devices without newer certificates continue to start and operate normally; administrators should follow Microsoft’s Windows Server guidance.

  Known issues: 1 open Organizations and IT administrators

  • Windows Server Update Services (WSUS) does not display error details

  Key changes 27 CVEs · 6 changes

  • New Networking: DNS Server can now shuffle the order of resource records in its responses, helping reduce the chance that one record becomes overloaded...
  • Improved Fonts & Display: Chinese fonts are updated to support the GB18030-2022A character coverage and display standard.
  • Improved Servicing stack: Includes quality improvements to the component that installs Windows updates.

  Read update → Source: Microsoft ↗

• Windows Server 2022 Windows Server 2022 Out-of-band update

  Out-of-band

  KB5078136 Jan 24, 2026

  Cloud-file errors and Outlook hangs get a fix

  Apps that open or save files in cloud storage might stop responding after the January 13 update. This out-of-band update fixes that problem, including hangs in some Outlook setups.

  Check the newer update, KB5075906

  Known issues: 1 open Organizations and IT administrators

  • Windows Server Update Services (WSUS) does not display error details

  Key changes 2 changes

  • Improved Servicing stack: The component that installs Windows updates gets quality improvements.
  • Fix File System: Apps can open and save cloud files again without the errors or hangs reported after the January 13 update.

  Read update → Source: Microsoft ↗

• Windows Server 2022 Windows Server 2022 Out-of-band update

  Out-of-band

  KB5077800 Jan 17, 2026

  Remote Desktop sign-ins work again after the January update

  A sign-in failure affecting some Remote Desktop apps after the January 13 security update is fixed. The package also includes servicing stack improvements.

  Check the newer update, KB5078136

  Known issues: 2 open Organizations and IT administrators

  • Windows Server Update Services (WSUS) does not display error details
  • Apps might become unresponsive when saving files to cloud-based storage

  Key changes 2 changes

  • Improved Servicing stack: The component that installs Windows updates gets quality improvements.
  • Fix Remote Desktop: Some people who had sign-in failures with Remote Desktop apps can connect again.

  Read update → Source: Microsoft ↗

• Windows Server 2022 Windows Server 2022 Security update

  Zero-day

  KB5073457 Jan 13, 2026

  Exploited Desktop Window Manager flaw patched; modem drivers removed

  An exploited Desktop Window Manager flaw is addressed, and four modem drivers are removed, so hardware that depends on them stops working.

  Check the newer update, KB5077800

  Secure Boot certificates used by most Windows devices started expiring in June 2026. Devices without newer certificates continue to start and receive standard updates.

  Known issues: 2 open

  • Windows Server Update Services (WSUS) does not display error details
  • Apps might become unresponsive when saving files to cloud-based storage

  Key changes 78 CVEs · 6 changes

  • Improved Credentials autofill: Some credential dialogs no longer accept typing sent by remote desktop or screen sharing tools.
  • Improved Windows Deployment Services (WDS): Hands-free deployment is no longer supported by default.
  • Improved Servicing stack: The component that installs Windows updates gets quality improvements.

  Read update → Source: Microsoft ↗

• Windows Server 2022 Windows Server 2022 Security update

  Zero-day

  KB5071547 Dec 9, 2025

  Exploited Cloud Files driver flaw patched; WSUS still hides sync errors

  The update fixes 29 Important vulnerabilities, including an exploited Cloud Files Mini Filter Driver flaw and a publicly disclosed PowerShell flaw. WSUS synchronization error details remain unavailable after KB5070884 or later.

  Check the newer update, KB5073457

  Known issues: 1 open Organizations and IT administrators

  • Windows Server Update Services (WSUS) does not display error details

  Key changes 29 CVEs · 2 changes

  • New PowerShell 5.1: Invoke-WebRequest now shows a security warning and asks whether to continue or cancel a request that could run scripts.
  • Improved Servicing stack: The component that installs Windows updates receives quality improvements.
  • Exploited CVE-2025-62221: Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

  Read update → Source: Microsoft ↗

• Windows Server 2022 Windows Server 2022 Security update

  Zero-day

  KB5068787 Nov 11, 2025

  Exploited Windows kernel flaw patched; unexpected UAC prompts addressed

  The update fixes 30 vulnerabilities, including an actively exploited Windows kernel flaw, and addresses unexpected UAC prompts and HTTP request parsing behavior.

  Check the newer update, KB5071547

  Known issues: 1 open Organizations and IT administrators

  • Windows Server Update Services (WSUS) does not display error details

  Key changes 30 CVEs · 4 changes

  • Improved Servicing stack: The component that installs Windows updates receives quality improvements.
  • Fix App compatibility (known issue): The update addresses unexpected User Account Control prompts for some apps, including Autodesk AutoCAD.
  • Fix Security: The update addresses a problem that could disrupt cloud communication after promoting a domain controller.

  Read update → Source: Microsoft ↗

• Windows Server 2022 Windows Server 2022 Out-of-band security update

  Out-of-band

  KB5070884 Oct 23, 2025

  WSUS remote-code flaw fixed; synchronization error details disappear

  Fixes a critical remote code execution vulnerability in WSUS reporting web services. WSUS synchronization error details are temporarily unavailable after installation.

  Check the newer update, KB5068787

  Secure Boot certificates used by most Windows devices have started expiring in June 2026. Review Microsoft's guidance and update certificates in advance to avoid possible boot disruption.

  Known issues: 1 open Organizations and IT administrators

  • Windows Server Update Services (WSUS) does not display error details

  Key changes 1 CVE · 3 changes

  • Improved Includes the security fixes and improvements from the October 14, 2025 update, KB5066782.
  • Improved Servicing stack: The component that installs Windows updates receives quality improvements.
  • Fix Windows Server Update Services (WSUS): The remote code execution vulnerability in WSUS reporting web services is addressed.

  Read update → Source: Microsoft ↗

• Windows Server 2022 Windows Server 2022 Security update

  Zero-day

  KB5066782 Oct 14, 2025

  Exploited Remote Access flaw addressed; downloaded-file previews disabled

  The update addresses security vulnerabilities, including exploited flaws, and changes File Explorer so it disables previews of files downloaded from the internet. It also fixes several server issues and removes a fax modem driver.

  Check the newer update, KB5070884

  Secure Boot certificates used by most Windows devices have started expiring in June 2026. Review Microsoft's guidance and update certificates in advance to avoid disruption.

  Key changes 104 CVEs · 10 changes

  • Improved Cryptography: RSA-based smart card certificates now use a security-hardened method, which might affect smart card authentication.
  • Improved File Explorer: File Explorer automatically disables previews for files downloaded from the internet, helping prevent a vulnerability when previewing p...
  • Improved Servicing stack: The update includes quality improvements to the component that installs Windows updates.

  Read update → Source: Microsoft ↗

• Windows Server 2022 Windows Server 2022 Security update

  KB5065432 Sep 9, 2025

  SMB flaw disclosed; MSI repair prompts reduced

  A publicly disclosed SMB elevation-of-privilege flaw is addressed, and fixes reduce unexpected prompts during some MSI repairs. Secure Boot certificates also need attention before they begin expiring in June 2026.

  Check the newer update, KB5066782

  Secure Boot certificates used by most Windows devices have started expiring in June 2026. Review Microsoft's guidance and update certificates in advance.

  Known issues: 2 open Organizations and IT administrators

  • SMBv1 protocol connectivity
  • PSDirect connections failing in hotpatched devices

  Key changes 59 CVEs · 5 changes

  • New File server: Customers can check whether devices or software might have problems with SMB Server security settings before applying them.
  • Improved Servicing stack: The component that installs Windows updates gets quality improvements.
  • Fix App compatibility (known issue): Some non-admin users see fewer unexpected prompts when apps repair or configure themselves. This can help those apps run.

  Read update → Source: Microsoft ↗

• Windows Server 2022 Windows Server 2022 Security update

  KB5063880 Aug 12, 2025

  Critical GDI+ remote-code flaw patched; Changjie IME fixed

  A critical GDI+ flaw could allow remote code execution, and the Changjie Chinese input problem is fixed. Standard users might also see UAC prompts during MSI repairs.

  Check the newer update, KB5065432

  Secure Boot certificates have started expiring in June 2026. Review Microsoft's guidance and update certificates in advance to avoid possible boot problems.

  Key changes 56 CVEs · 2 changes

  • Improved Servicing stack: The component that installs Windows updates gets quality improvements.
  • Fix Input (know issue): The Changjie input method for Traditional Chinese works again after problems with typing, word selection, and the candidate window.
  • Critical CVE-2025-53766: GDI+ Remote Code Execution Vulnerability

  Read update → Source: Microsoft ↗

• Windows Server 2022 Windows Server 2022 Security update

  KB5062572 Jul 8, 2025

  Critical NEGOEX flaw patched; Changjie typing issue remains

  A critical SPNEGO NEGOEX flaw could allow remote code execution. Some users might also have trouble typing Traditional Chinese with the Changjie input method.

  Check the newer update, KB5063880

  Secure Boot certificates used by most Windows devices have started expiring in June 2026. Review Microsoft's guidance and prepare to update them.

  Key changes 96 CVEs · 5 changes

  • Improved Microsoft RPC Netlogon protocol: Some anonymous requests to domain controllers are blocked. Certain file and print software might be affected.
  • Improved Servicing stack: The component that installs Windows updates gets quality improvements.
  • Fix DHCP Server (known issue): The DHCP Server service might stop responding and disrupt IP renewal for clients. This issue is fixed.

  Read update → Source: Microsoft ↗