Skip to the content
The Update Bureau

Windows Server 2022

Windows Server 2022

Every published release for Windows Server 2022, newest first: what each update changes, whether to install it and any confirmed known issues.

Latest
KB5136487 Nov 13, 2026
Build
20348.5873
Released
Aug 18, 2021
All editions
updates until Oct 14, 2031
Known issues
11 open

Build history

  • Windows Server 2022 Windows Server 2022 Security update
    Zero-day

    KB5060526

    Exploited Internet Shortcut flaw patched; DHCP service may stall

    Fixes 40 vulnerabilities, including an actively exploited Internet Shortcut Files flaw. The DHCP Server service might intermittently stop responding; KB5062572 resolves that issue.

    Check the newer update, KB5062572

    Key changes 40 CVEs · 6 changes

    • Improved Servicing stack: The component that installs Windows updates receives quality improvements.
    • Fix Graphics: Some characters no longer appear wider than standard characters, and the sample paragraph in the font preview displays correctly.
    • Fix Graphics: Some characters in the extended Chinese character set display correctly.

    Read update Source: Microsoft

    Build
    20348.3807
    Security
    40 fixed · 4 critical · 1 exploited
    Restart
    Required
  • Windows Server 2022 Windows Server 2022 Out-of-band update
    Out-of-band

    KB5061906

    Hyper-V fix for confidential VM hangs and unexpected restarts

    Fixes an issue that could make confidential virtual machines on Hyper-V stop responding or restart unexpectedly, disrupting service. It also includes a servicing stack update.

    Check the newer update, KB5060526

    Key changes 2 changes

    • Improved Servicing stack: The component that installs Windows updates receives quality improvements.
    • Fix Hyper-V Platform: Confidential virtual machines might intermittently stop responding or restart unexpectedly, disrupting service and requiring manual int...

    Read update Source: Microsoft

    Build
    20348.3695
    Restart
    Required
  • Windows Server 2022 Windows Server 2022 Security update
    Zero-day

    KB5058385

    Critical Remote Desktop flaws patched; remote-session screen issue addressed

    Addresses 42 vulnerabilities, including five critical flaws and five already exploited. It also addresses problems that could cause black screens during Remote Desktop sessions or prevent a new console session from starting.

    Check the newer update, KB5061906

    Key changes 42 CVEs · 5 changes

    • Improved Secure Boot Advanced Targeting (SBAT) and Linux Extensible Firmware Interface (EFI): Linux system detection through Secure Boot Advanced Targeting is improved.
    • Improved Windows Kernel Vulnerable Driver Blocklist file (DriverSiPolicy.p7b): The vulnerable driver blocklist includes additional drivers at risk of being used in attacks.
    • Improved Servicing stack: The update improves the component that installs Windows updates.

    Read update Source: Microsoft

    Build
    20348.3692
    Security
    42 fixed · 5 critical · 5 exploited
    Restart
    Required
  • Windows Server 2022 Windows Server 2022 Out-of-band update
    Out-of-band

    KB5059092

    Hyper-V-isolated containers start reliably; Citrix update failures remain

    Fixes startup failures for some Hyper-V-isolated Windows containers. Devices with Citrix Session Recording Agent 2411 might still fail to install the January 2025 security update; Citrix version 2503 or newer resolves that issue.

    Check the newer update, KB5058385
    Known issues: 1 open Organizations and IT administrators
    • Citrix

    Key changes 2 changes

    • Improved Servicing stack: The component that installs Windows updates receives quality improvements to help devices receive and install updates.
    • Fix Windows containers: Some Windows containers running in Hyper-V isolation no longer fail to start when their update level differs from the host utility virt...

    Read update Source: Microsoft

    Build
    20348.3566
    Restart
    Required
  • Windows Server 2022 Windows Server 2022 Out-of-band update
    Out-of-band

    KB5058920

    Audit policy status display addressed; Citrix update failures have a workaround

    The out-of-band update addresses an Active Directory audit-policy display issue and improves the servicing stack. Devices with Citrix Session Recording Agent 2411 might still fail to install the January 2025 security update.

    Check the newer update, KB5059092
    Known issues: 2 open
    • Citrix
    • System Guard Runtime Monitor Broker service

    Key changes 2 changes

    • Improved Active Directory Group Policy: Enabled logon auditing no longer appears as “No auditing” in local policy.
    • Improved Servicing stack: The component that installs Windows updates receives quality improvements.

    Read update Source: Microsoft

    Build
    20348.3561
    Restart
    Required
  • Windows Server 2022 Windows Server 2022 Security update
    Zero-day

    KB5055526

    Exploited Common Log File System flaw patched

    Attackers are exploiting a flaw in the Common Log File System driver. This update also changes daylight saving time support in Chile and adds a protected system folder.

    Check the newer update, KB5058920
    Known issues: 2 open
    • Citrix
    • System Guard Runtime Monitor Broker service

    Key changes 80 CVEs · 5 changes

    • Improved Daylight Saving Time (DST): Daylight saving time in Chile’s Aysen region follows the government’s 2025 change.
    • Improved OS Security: A new folder appears on the system drive. Leave it in place, even if IIS is not enabled.
    • Improved Kerberos Authentication: Kerberos gets added protection against a certificate-related flaw. Domain controllers might log Event ID 45.

    Read update Source: Microsoft

    Build
    20348.3453
    Security
    80 fixed · 7 critical · 1 exploited
    Restart
    Required
  • Windows Server 2022 Windows Server 2022 Security update
    Zero-day

    KB5053603

    Exploited file-system flaws and a console security bypass fixed

    Flaws in NTFS, Fast FAT, and Microsoft Management Console are being exploited. This update also fixes SSH startup and adds support for GB18030-2022.

    Check the newer update, KB5055526
    Known issues: 2 open
    • Citrix
    • System Guard Runtime Monitor Broker service

    Key changes 34 CVEs · 5 changes

    • New GB18030-2022: Adds support for the GB18030-2022 amendment.
    • Improved Daylight saving time (DST): Daylight saving time changes in Paraguay are supported.
    • Improved Servicing stack: The component that installs Windows updates gets quality improvements.

    Read update Source: Microsoft

    Build
    20348.3328
    Security
    34 fixed · 5 critical · 5 exploited
    Restart
    Required
  • Windows Server 2022 Windows Server 2022 Security update
    Zero-day

    KB5051979

    Exploited Storage and Winsock driver flaws patched

    Attackers are exploiting elevation-of-privilege flaws in Windows Storage and the Winsock ancillary function driver. The update also fixes server issues, including USB audio playback problems.

    Check the newer update, KB5053603
    Known issues: 3 open
    • Citrix
    • System Guard Runtime Monitor Broker service
    • Open Secure Shell service

    Key changes 34 CVEs · 11 changes

    • New GB18030-2022: Adds support for the GB18030-2022 amendment.
    • Improved Windows Kernel Vulnerable Driver Blocklist file (DriverSiPolicy.p7b): Adds more at-risk drivers to the blocklist that helps protect against attacks using vulnerable drivers.
    • Improved Servicing stack: Includes an update to the component that installs Windows updates.

    Read update Source: Microsoft

    Build
    20348.3207
    Security
    34 fixed · 1 critical · 2 exploited
    Restart
    Required
  • Windows Server 2022 Windows Server 2022 Out-of-band update
    Out-of-band

    KB5052819

    Fixes startup failures on servers with multiple NUMA nodes

    Fixes a startup failure affecting some servers with two or more NUMA nodes and improves the servicing stack.

    Check the newer update, KB5051979

    Key changes 2 changes

    • Improved Servicing stack: The component that installs Windows updates receives quality improvements.
    • Fix Non-uniform memory access (NUMA) nodes: Some servers with two or more NUMA nodes can start up again.

    Read update Source: Microsoft

    Build
    20348.3095
    Restart
    Required
  • Windows Server 2022 Windows Server 2022 Security update

    KB5049983

    Remote Desktop and OLE flaws patched; vulnerable-driver list grows

    Patches 122 vulnerabilities, including eight critical flaws, and adds at-risk drivers to the blocklist to help guard against BYOVD attacks.

    Check the newer update, KB5052819

    Key changes 122 CVEs · 2 changes

    • Improved Windows Kernel Vulnerable Driver Blocklist file (DriverSiPolicy.p7b): The vulnerable-driver blocklist includes more drivers that could be used in BYOVD attacks.
    • Improved Servicing stack: The component that installs Windows updates receives quality improvements.
    • Critical CVE-2025-21298: Windows OLE Remote Code Execution Vulnerability

    Read update Source: Microsoft

    Build
    20348.3091
    Security
    122 fixed · 8 critical
    Restart
    Required
  • Windows Server 2022 Windows Server 2022 Security update
    Zero-day

    KB5048654

    Exploited log-file driver flaw patched; motherboard activation fixed

    The update patches 41 vulnerabilities, including an actively exploited flaw in the Common Log File System Driver, and fixes Windows activation after a motherboard replacement.

    Check the newer update, KB5049983

    Key changes 41 CVEs · 2 changes

    • Improved Servicing stack: The component that installs Windows updates gets quality improvements to help devices receive and install updates reliably.
    • Fix Motherboard replacement: Windows activates again after a motherboard replacement.
    • Exploited CVE-2024-49138: Windows Common Log File System Driver Elevation of Privilege Vulnerability

    Read update Source: Microsoft

    Build
    20348.2966
    Security
    41 fixed · 15 critical · 1 exploited
    Restart
    Required
  • Windows Server 2022 Windows Server 2022 Security update
    Zero-day

    KB5046616

    Exploited Task Scheduler flaw patched; backup failure fixed

    Fixes 37 vulnerabilities, including two critical flaws and two that are being exploited. It also fixes Windows Backup failures on devices with an EFI system partition.

    Check the newer update, KB5048654

    Key changes 37 CVEs · 9 changes

    • Improved Product activation phone numbers: New product activation phone numbers are available for several regions.
    • Improved Windows Kernel Vulnerable Driver Blocklist file: The blocklist includes more drivers that could put devices at risk.
    • Improved Remote Desktop Connection Broker in high availability mode: Smart-card authentication now uses Kerberos in Remote Desktop Connection Broker high availability mode.

    Read update Source: Microsoft

    Build
    20348.2849
    Security
    37 fixed · 2 critical · 2 exploited
    Restart
    Required
  • Windows Server 2022 Windows Server 2022 Security update
    Zero-day

    KB5044281

    Exploited MMC and MSHTML flaws patched; server issues fixed

    Fixes 67 vulnerabilities, including two exploited flaws and a critical Remote Desktop Protocol server flaw. It also improves large-scale SDN performance and fixes several server and app problems.

    Check the newer update, KB5047767

    Key changes 67 CVEs · 9 changes

    • New Software Defined Networking (SDN): The SDN API performs better in large-scale deployments. Load balancer connectivity issues might occur after installation.
    • Improved Servicing stack: The component that installs Windows updates receives quality improvements to help devices receive and install updates reliably.
    • Fix MSIX applications: MSIX apps installed from an HTTPS address open correctly when their download is complete.

    Read update Source: Microsoft

    Build
    20348.2762
    Security
    67 fixed · 1 critical · 2 exploited
    Restart
    Required
  • Windows Server 2022 Windows Server 2022 Security update
    Zero-day

    KB5042881

    Exploited Windows flaws closed; installer prompts change

    The update fixes 41 security vulnerabilities, including three being exploited, and changes how Windows Installer repairs prompt for credentials. Some users might be unable to change their account profile picture.

    Check the newer update, KB5044281
    Known issues: 1 open
    • After installing this update, you might be unable to [change your user account profile picture](https://support.microsoft.com/en-us/windows/change-your-account-picture-3645cdc7-acab-49d2-76a9-4ce7e5e…

    Key changes 41 CVEs · 6 changes

    • Improved Windows Installer: When Windows Installer repairs an application, a User Account Control prompt now asks for credentials.
    • Improved Dual boot of Windows and Linux (known issue): Linux might fail to start when Windows and Linux are set up to boot on the same device.
    • Improved Servicing stack: The component that installs Windows updates receives quality improvements to help devices receive and install updates reliably.

    Read update Source: Microsoft

    Build
    20348.2700
    Security
    41 fixed · 2 critical · 3 exploited
    Restart
    Required
  • Windows Server 2022 Windows Server 2022 Security update
    Zero-day

    KB5041160

    Exploited scripting flaw patched; Linux dual-boot issue remains

    Fixes 47 vulnerabilities, including 2 critical flaws and 4 exploited vulnerabilities; a fifth vulnerability was publicly disclosed. It also adds a Secure Boot change that can prevent some Linux dual-boot systems from starting.

    Check the newer update, KB5042881
    Known issues: 2 open
    • After installing this update, you might be unable to [change your user account profile picture](https://support.microsoft.com/en-us/windows/change-your-account-picture-3645cdc7-acab-49d2-76a9-4ce7e5e…
    • After installing this security update, you might face issues with booting Linux if you have enabled the dual-boot setup for Windows and Linux in your device.

    Key changes 47 CVEs · 12 changes

    • Improved Windows Kernel Vulnerable Driver Blocklist file (DriverSiPolicy.p7b): The vulnerable driver blocklist includes more drivers at risk of being used in attacks.
    • Improved Microsoft 365 Defender: The Network Detection and Response service might have issues that interrupt network data reporting.
    • Improved BitLocker: A BitLocker recovery screen might appear at startup after installing the July 9, 2024 update; this is more likely when device encryptio...

    Read update Source: Microsoft

    Build
    20348.2655
    Security
    47 fixed · 2 critical · 4 exploited
    Restart
    Required
  • Windows Server 2022 Windows Server 2022 Security update
    Zero-day

    KB5040437

    Closes exploited Hyper-V and MSHTML flaws; fixes remote access issues

    Fixes 86 vulnerabilities, including two flaws already exploited in Hyper-V and the MSHTML Platform, and addresses problems with Remote Desktop, BitLocker, and other features.

    Check the newer update, KB5041160
    Known issues: 1 open
    • After installing this update, you might be unable to [change your user account profile picture](https://support.microsoft.com/en-us/windows/change-your-account-picture-3645cdc7-acab-49d2-76a9-4ce7e5e…

    Key changes 86 CVEs · 11 changes

    • Improved Double-wide character set range: PowerShell identifies and handles additional double-wide characters correctly.
    • Improved BitLocker: The default Secure Boot validation profile uses an updated set of checks for BitLocker.
    • Improved File shortcut icons: Remote paths for shortcut icons need a policy configured; without it, icons on the Start menu, desktop, and taskbar will fail to render...

    Read update Source: Microsoft

    Build
    20348.2582
    Security
    86 fixed · 4 critical · 2 exploited
    Restart
    Required
  • Windows Server 2022 Windows Server 2022 Out-of-band update
    Out-of-band

    KB5041054

    RSA signing errors addressed; profile-picture changes may fail

    Addresses an error affecting some RSA signing calls. Changing a user account profile picture might still fail on some devices.

    Check the newer update, KB5040437
    Known issues: 1 open
    • After installing this update, you might be unable to [change your user account profile picture](https://support.microsoft.com/en-us/windows/change-your-account-picture-3645cdc7-acab-49d2-76a9-4ce7e5e…

    Key changes 2 changes

    • Improved Servicing stack: The servicing stack, which installs Windows updates, receives quality improvements.
    • Fix BCryptSignHash API: The update addresses a problem that could make apps fail while signing RSA data.

    Read update Source: Microsoft

    Build
    20348.2529
    Restart
    Required
  • Windows Server 2022 Windows Server 2022 Security update
    Zero-day

    KB5039227

    Exploited Mark of the Web bypass patched; SMB access controls added

    Patches an exploited Mark of the Web security bypass and adds client-certificate access controls for SMB over QUIC.

    Check the newer update, KB5041054
    Known issues: 1 open
    • After installing this update, you might be unable to [change your user account profile picture](https://support.microsoft.com/en-us/windows/change-your-account-picture-3645cdc7-acab-49d2-76a9-4ce7e5e…

    Key changes 31 CVEs · 20 changes

    • New SMB over QUIC: Administrators can restrict which clients access SMB over QUIC servers using client-certificate authentication.
    • Improved LCU package: The update package is about 20% smaller, reducing downloads and network traffic and helping downloads on slow connections.
    • Improved curl.exe: The included curl.exe version changes to 8.7.1.

    Read update Source: Microsoft

    Build
    20348.2527
    Security
    31 fixed · 1 critical · 1 exploited
    Restart
    Required
  • Windows Server 2022 Windows Server 2022 Security update
    Zero-day

    KB5037782

    Closes exploited MSHTML and DWM security flaws

    Fixes 50 vulnerabilities, including two actively exploited flaws affecting MSHTML and the Desktop Window Manager. It also addresses server, networking, and IE mode issues.

    Check the newer update, KB5039227
    Known issues: 1 open
    • After installing this update, you might be unable to [change your user account profile picture](https://support.microsoft.com/en-us/windows/change-your-account-picture-3645cdc7-acab-49d2-76a9-4ce7e5e…

    Key changes 50 CVEs · 15 changes

    • Improved DNS Server: NSEC3 validation in a recursive resolver now has a default limit of 1,000 computations.
    • Improved Windows Kernel Vulnerable Driver Blocklist: The blocklist gets its quarterly update, adding drivers at risk of Bring Your Own Vulnerable Driver (BYOVD) attacks.
    • Improved Servicing stack: The update includes quality improvements to the component that installs Windows updates.

    Read update Source: Microsoft

    Build
    20348.2461
    Security
    50 vulnerabilities fixed · 2 actively exploited
    Restart
    Required
  • Windows Server 2022 Windows Server 2022 Security update
    Zero-day

    KB5036909

    Exploited proxy-driver spoofing flaw patched; server issues addressed

    The update fixes 78 Important vulnerabilities, including an actively exploited proxy-driver spoofing flaw. It also addresses high CPU usage after opening Snipping Tool and several server issues.

    Check the newer update, KB5037782
    Known issues: 1 open
    • After installing this update, you might be unable to [change your user account profile picture](https://support.microsoft.com/en-us/windows/change-your-account-picture-3645cdc7-acab-49d2-76a9-4ce7e5e…

    Key changes 78 CVEs · 20 changes

    • New Windows Hello for Business: IT admins can use MDM to turn off the prompt that appears after sign-in on an Entra-joined machine. Provisioning is off afterward for W...
    • Improved Daylight saving time: Daylight saving time changes in Palestine are supported.
    • Improved Daylight saving time: Daylight saving time changes in Kazakhstan are supported.

    Read update Source: Microsoft

    Build
    20348.2402
    Security
    78 vulnerabilities fixed · 1 actively exploited
    Restart
    Required
  • Windows Server 2022 Windows Server 2022 Out-of-band update
    Out-of-band

    KB5037422

    LSASS memory leak on domain controllers addressed

    Addresses an LSASS memory leak on domain controllers that could cause the service to stop responding and trigger unexpected restarts.

    Check the newer update, KB5036909

    Key changes 2 changes

    • Improved Servicing stack: The component that installs Windows updates receives quality improvements.
    • Fix Local Security Authority Subsystem Service (LSASS): An LSASS memory leak on domain controllers is addressed.

    Read update Source: Microsoft

    Build
    20348.2342
    Restart
    Required
  • Windows Server 2022 Windows Server 2022 Security update

    KB5035857

    Critical Hyper-V flaw addressed; domain controllers risk memory leaks

    The update addresses 39 vulnerabilities, including two critical Hyper-V flaws. Domain controllers might develop an LSASS memory leak; Microsoft recommends KB5037422 for domain controllers.

    Check the newer update, KB5037422

    Key changes 39 CVEs · 7 changes

    • Improved Active Directory: Active Directory domains that host MDM providers can move from Compatibility mode to Enforcement mode for strong certificate mapping.
    • Improved Explorer User Shell Folders: The device can now set and maintain the correct default permissions for user shell folders.
    • Improved Servicing stack: The component that installs Windows updates receives quality improvements.

    Read update Source: Microsoft

    Build
    20348.2340
    Security
    39 fixed · 2 critical
    Restart
    Required
  • Windows Server 2022 Windows Server 2022 Security update
    Zero-day

    KB5034770

    Exploited kernel and SmartScreen flaws patched

    Fixes 40 vulnerabilities, including three exploited flaws affecting the Windows kernel, Internet Shortcut files, and SmartScreen. It also addresses issues with server networking, sign-in, touchscreens, and Chromium-based browsers.

    Check the newer update, KB5035857

    Key changes 40 CVEs · 18 changes

    • Improved UEFI Secure Boot: A renewed signing certificate is available for UEFI Secure Boot systems; you can opt in to this change.
    • Improved Device metadata: Downloads of device metadata over HTTPS are more secure.
    • Improved Windows Kernel Vulnerable Driver Blocklist: The vulnerable-driver blocklist includes additional drivers that could be used in BYOVD attacks.

    Read update Source: Microsoft

    Build
    20348.2322
    Security
    40 fixed · 2 critical · 3 exploited
    Restart
    Required
  • Windows Server 2022 Windows Server 2022 Security update

    KB5034129

    Critical Kerberos and Hyper-V flaws; sign-in and browser issues addressed

    Fixes 36 vulnerabilities, including critical flaws in Kerberos and Hyper-V, and addresses issues affecting sign-in, servers, and other features. Chromium-based browser launch problems are resolved by KB5034770.

    Check the newer update, KB5034770

    Key changes 36 CVEs · 22 changes

    • Improved Servicing stack: The servicing stack, which installs Windows updates, receives quality improvements.
    • Fix Microsoft Intune: An Intune feature that was not working properly is addressed.
    • Fix Account lockout event 4625: Account lockout event 4625 is addressed when the account name uses UPN format.

    Read update Source: Microsoft

    Build
    20348.2227
    Security
    36 fixed · 2 critical
    Restart
    Required