Skip to the content
The Update Bureau

Windows Server

Windows Server updates

All published releases for Windows Server, newest first: what each update changes, whether to install it and any confirmed known issues. Latest release: November 13, 2026.

24 active known issues →

Windows Server updates

  • Windows Server 2016 Windows Server 2016 Security update Also for Windows 10

    KB5062560

    NEGOEX remote-code flaw patched; DHCP server stalls fixed

    Fixes DHCP Server stalls that interrupt client IP renewal and hardens Netlogon RPC access. It also addresses 88 vulnerabilities, including five critical ones and the publicly disclosed CVE-2024-21302.

    Check the newer update, KB5063871
    Secure Boot certificates used by most Windows devices have started expiring in June 2026. Microsoft recommends reviewing its guidance and updating certificates in advance; certain personal and business devices might otherwise be unable to boot securely.

    Key changes 88 CVEs · 2 changes

    • Improved Microsoft RPC Netlogon protocol: Anonymous clients can no longer make some RPC requests through Active Directory domain controllers. Some file and print service softwar...
    • Fix DHCP Server: The DHCP Server service no longer intermittently stops responding and disrupting clients’ IP renewal.
    • Critical CVE-2025-47981: SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability

    Read update Source: Microsoft

    Build
    14393.8246
    Security
    88 fixed · 5 critical
    Restart
    Required
  • Windows Server 2025 Windows Server 2025 Security update Also for Windows 11
    Zero-day

    KB5060842

    Exploited shortcut-file flaw patched; AD replication issue remains

    An actively exploited flaw in Internet Shortcut Files is patched. Active Directory replication can still fail on some schema master servers; KB5068861 addresses that issue.

    Check the newer update, KB5062553
    Known issues: 3 open
    • Active Directory Replication
    • Noto fonts
    • Print to PDF might not work

    Key changes 40 CVEs · 18 changes

    • New Narrator: Narrator scan mode can jump to the start of an item with a comma and to its end with a period.
    • Improved File Explorer: File Explorer loads folders with many media files faster.
    • Improved File Explorer: Thumbnails for cloud files appear more consistently in search results.

    Read update Source: Microsoft

    Build
    26100.4349
    Security
    40 fixed · 4 critical · 1 exploited
    Restart
    Required
  • Windows Server 2022 Windows Server 2022 Security update
    Zero-day

    KB5060526

    Exploited Internet Shortcut flaw patched; DHCP service may stall

    Fixes 40 vulnerabilities, including an actively exploited Internet Shortcut Files flaw. The DHCP Server service might intermittently stop responding; KB5062572 resolves that issue.

    Check the newer update, KB5062572

    Key changes 40 CVEs · 6 changes

    • Improved Servicing stack: The component that installs Windows updates receives quality improvements.
    • Fix Graphics: Some characters no longer appear wider than standard characters, and the sample paragraph in the font preview displays correctly.
    • Fix Graphics: Some characters in the extended Chinese character set display correctly.

    Read update Source: Microsoft

    Build
    20348.3807
    Security
    40 fixed · 4 critical · 1 exploited
    Restart
    Required
  • Windows Server 2019 Windows Server 2019 Security update Also for Windows 10
    Zero-day

    KB5060531

    Exploited Internet Shortcut flaw patched; DHCP service issue noted

    Closes an actively exploited Internet Shortcut Files flaw and fixes a GDI rendering problem. The DHCP Server service might intermittently stop responding; KB5062557 resolves that issue.

    Check the newer update, KB5062557

    Key changes 39 CVEs · 3 changes

    • Improved Servicing stack: The servicing stack receives quality improvements to help install Windows updates reliably.
    • Fix GDI and GDI+: Some characters no longer appear too wide, and the sample paragraph is no longer broken.
    • Fix Windows Hello: The update addresses a sign-in problem for users with self-signed certificates.

    Read update Source: Microsoft

    Build
    17763.7434
    Security
    39 fixed · 3 critical · 1 exploited
    Restart
    Required
  • Windows Server 2016 Windows Server 2016 Security update Also for Windows 10
    Zero-day

    KB5061010

    Exploited Internet Shortcut flaw fixed; DHCP service could stall

    Fixes 37 vulnerabilities, including an actively exploited flaw in Internet Shortcut files. It also introduced a DHCP Server issue that KB5062560 later resolved.

    Check the newer update, KB5062560

    Key changes 37 CVEs · 2 changes

    • Fix Cloud Infrastructure: Remote Web Access connections no longer behave unpredictably.
    • Fix Windows Hello: The update addresses an issue that prevents some users from signing in with self-signed certificates using Windows Hello for Business.
    • Exploited CVE-2025-33053: Internet Shortcut Files Remote Code Execution Vulnerability

    Read update Source: Microsoft

    Build
    14393.8148
    Security
    37 fixed · 3 critical · 1 exploited
    Restart
    Required
  • Windows Server 2025 Windows Server 2025 Out-of-band update Also for Windows 11
    Out-of-band

    KB5061977

    Hyper-V guest hangs fixed; print and replication issues remain

    Confidential virtual machines on Hyper-V might stop responding or restart unexpectedly; this update fixes that problem. Print to PDF and Active Directory replication issues are also listed.

    Known issues: 2 open
    • Active Directory Replication
    • Print to PDF might not work

    Key changes 3 changes

    • Improved Catalog: The x64 download name on the Catalog tab was corrected.
    • Improved Servicing stack: The update includes quality improvements to the component that installs Windows updates.
    • Fix Hyper-V Platform: Confidential virtual machines on Hyper-V might stop responding or restart unexpectedly. This can affect service availability and requir...

    Read update Source: Microsoft

    Build
    26100.4066
  • Windows Server 2019 Windows Server 2019 Out-of-band update Also for Windows 10
    Out-of-band

    KB5061978

    Confidential VM hangs and unexpected restarts fixed

    The update fixes intermittent stops and unexpected restarts for confidential virtual machines on Hyper-V with Windows Server 2022, primarily Azure confidential VMs. It is available only from the Update Catalog.

    Check the newer update, KB5060531

    Key changes 2 changes

    • Improved Servicing stack: The component that installs Windows updates receives quality improvements.
    • Fix Hyper-V Platform: The intermittent stops and unexpected restarts affecting confidential virtual machines on Hyper-V with Windows Server 2022 are fixed. A...

    Read update Source: Microsoft

    Build
    17763.7322
    Restart
    Required
  • Windows Server 2022 Windows Server 2022 Out-of-band update
    Out-of-band

    KB5061906

    Hyper-V fix for confidential VM hangs and unexpected restarts

    Fixes an issue that could make confidential virtual machines on Hyper-V stop responding or restart unexpectedly, disrupting service. It also includes a servicing stack update.

    Check the newer update, KB5060526

    Key changes 2 changes

    • Improved Servicing stack: The component that installs Windows updates receives quality improvements.
    • Fix Hyper-V Platform: Confidential virtual machines might intermittently stop responding or restart unexpectedly, disrupting service and requiring manual int...

    Read update Source: Microsoft

    Build
    20348.3695
    Restart
    Required
  • Windows Server 2025 Windows Server 2025 Security update Also for Windows 11
    Zero-day

    KB5058411

    Remote Desktop flaws patched; File Explorer search fixed

    Remote Desktop code-execution flaws and several exploited security bugs are addressed. The update also fixes File Explorer search and other problems.

    Check the newer update, KB5060842
    Known issues: 2 open
    • Active Directory Replication
    • Print to PDF might not work

    Key changes 43 CVEs · 23 changes

    • New Fonts: A new Chinese font includes the Biangbiang noodles character. Some apps might not show these added characters yet.
    • New Settings: You can change time zones in Settings without being an admin.
    • Improved Chinese Pinyin Input Method Editor (IME): Bing no longer gives automatic search suggestions for search engines such as Baidu. You can still request suggestions manually.

    Read update Source: Microsoft

    Build
    26100.4061
    Security
    43 fixed · 5 critical · 5 exploited
    Restart
    Required
  • Windows Server 2022 Windows Server 2022 Security update
    Zero-day

    KB5058385

    Critical Remote Desktop flaws patched; remote-session screen issue addressed

    Addresses 42 vulnerabilities, including five critical flaws and five already exploited. It also addresses problems that could cause black screens during Remote Desktop sessions or prevent a new console session from starting.

    Check the newer update, KB5061906

    Key changes 42 CVEs · 5 changes

    • Improved Secure Boot Advanced Targeting (SBAT) and Linux Extensible Firmware Interface (EFI): Linux system detection through Secure Boot Advanced Targeting is improved.
    • Improved Windows Kernel Vulnerable Driver Blocklist file (DriverSiPolicy.p7b): The vulnerable driver blocklist includes additional drivers at risk of being used in attacks.
    • Improved Servicing stack: The update improves the component that installs Windows updates.

    Read update Source: Microsoft

    Build
    20348.3692
    Security
    42 fixed · 5 critical · 5 exploited
    Restart
    Required
  • Windows Server 2019 Windows Server 2019 Security update Also for Windows 10
    Zero-day

    KB5058392

    Exploited Scripting Engine and Windows driver flaws patched

    The update fixes 42 vulnerabilities, including five exploited flaws, and addresses a blue-screen error tied to certain GDI updates and fonts. A Citrix Session Recording Agent issue can still block installation of the January 2025 security update.

    Check the newer update, KB5061978
    Known issues: 1 open Organizations and IT administrators
    • Citrix

    Key changes 42 CVEs · 4 changes

    • Improved OS Security: Windows blocks more vulnerable drivers that have been used in attacks.
    • Improved Secure Boot Advanced Targeting (SBAT) and Linux Extensible Firmware Interface (EFI): Linux system detection through SBAT gets improvements.
    • Improved Servicing stack: The component that installs Windows updates gets quality improvements.

    Read update Source: Microsoft

    Build
    17763.7314
    Security
    42 fixed · 5 critical · 5 exploited
    Restart
    Required
  • Windows Server 2016 Windows Server 2016 Security update Also for Windows 10
    Zero-day

    KB5058383

    Exploited scripting and driver flaws patched

    Fixes 39 vulnerabilities, including five critical ones, and improves Secure Boot detection of Linux systems. Four vulnerabilities were already being exploited.

    Check the newer update, KB5061010

    Key changes 39 CVEs · 1 change

    • Improved Secure Boot Advanced Targeting (SBAT) and Linux Extensible Firmware Interface (EFI): Secure Boot improves detection of Linux systems.
    • Exploited CVE-2025-32701: Windows Common Log File System Driver Elevation of Privilege Vulnerability
    • Exploited CVE-2025-32706: Windows Common Log File System Driver Elevation of Privilege Vulnerability

    Read update Source: Microsoft

    Build
    14393.8066
    Security
    39 fixed · 5 critical · 4 exploited
    Restart
    Required
  • Windows Server 2025 Windows Server 2025 Out-of-band update Also for Windows 11
    Out-of-band

    KB5059087

    Hyper-V container startup failures fixed

    Windows containers in Hyper-V isolation can start again when their update level differs from the host utility virtual machine. The update also improves the servicing stack.

    Known issues: 4 open
    • Active Directory Replication
    • Citrix
    • and 2 more

    Key changes 2 changes

    • Improved Servicing stack: The servicing stack gets quality improvements to help devices receive and install updates.
    • Fix Windows containers: Windows containers in Hyper-V isolation can start when their update level differs from the host utility virtual machine.

    Read update Source: Microsoft

    Build
    26100.3781
  • Windows Server 2022 Windows Server 2022 Out-of-band update
    Out-of-band

    KB5059092

    Hyper-V-isolated containers start reliably; Citrix update failures remain

    Fixes startup failures for some Hyper-V-isolated Windows containers. Devices with Citrix Session Recording Agent 2411 might still fail to install the January 2025 security update; Citrix version 2503 or newer resolves that issue.

    Check the newer update, KB5058385
    Known issues: 1 open Organizations and IT administrators
    • Citrix

    Key changes 2 changes

    • Improved Servicing stack: The component that installs Windows updates receives quality improvements to help devices receive and install updates.
    • Fix Windows containers: Some Windows containers running in Hyper-V isolation no longer fail to start when their update level differs from the host utility virt...

    Read update Source: Microsoft

    Build
    20348.3566
    Restart
    Required
  • Windows Server 2019 Windows Server 2019 Out-of-band update Also for Windows 10
    Out-of-band

    KB5059091

    Hyper-V-isolated Windows containers start reliably across update levels

    Fixes startup failures for some Windows containers running in Hyper-V isolation when their update level differs from the hosting utility virtual machine. It also includes a servicing stack update.

    Check the newer update, KB5058392
    Known issues: 1 open Organizations and IT administrators
    • Citrix

    Key changes 2 changes

    • Improved Servicing stack: The component that installs Windows updates receives quality improvements.
    • Fix Windows containers: Windows containers running in Hyper-V isolation can start when their update level differs from the hosting utility virtual machine.

    Read update Source: Microsoft

    Build
    17763.7249
    Restart
    Required
  • Windows Server 2022 Windows Server 2022 Out-of-band update
    Out-of-band

    KB5058920

    Audit policy status display addressed; Citrix update failures have a workaround

    The out-of-band update addresses an Active Directory audit-policy display issue and improves the servicing stack. Devices with Citrix Session Recording Agent 2411 might still fail to install the January 2025 security update.

    Check the newer update, KB5059092
    Known issues: 2 open
    • Citrix
    • System Guard Runtime Monitor Broker service

    Key changes 2 changes

    • Improved Active Directory Group Policy: Enabled logon auditing no longer appears as “No auditing” in local policy.
    • Improved Servicing stack: The component that installs Windows updates receives quality improvements.

    Read update Source: Microsoft

    Build
    20348.3561
    Restart
    Required
  • Windows Server 2019 Windows Server 2019 Out-of-band update Also for Windows 10
    Out-of-band

    KB5058922

    Enabled logon auditing display issue addressed

    The update addresses a mismatch where local audit policy could show enabled logon auditing as “No auditing.” It also includes servicing stack improvements and documents a Citrix installation issue.

    Check the newer update, KB5059091
    Known issues: 1 open Organizations and IT administrators
    • Citrix

    Key changes 2 changes

    • Improved Active Directory Group Policy: Addresses a mismatch where local audit policies could show “No auditing” for logon events even when auditing was enabled and working.
    • Improved Servicing stack: The component that installs Windows updates receives quality improvements.

    Read update Source: Microsoft

    Build
    17763.7240
    Restart
    Required
  • Windows Server 2016 Windows Server 2016 Out-of-band update Also for Windows 10
    Out-of-band

    KB5058921

    Audit policy status display issue addressed

    Addresses a display issue where enabled logon and logoff auditing can appear disabled in local policy settings on Windows Server 2016.

    Check the newer update, KB5058383

    Key changes 1 change

    • Fix Active Directory Group Policy: Enabled logon and logoff auditing can appear disabled in local policy settings; this update addresses the display issue.

    Read update Source: Microsoft

    Build
    14393.7973
    Restart
    Required
  • Windows Server 2025 Windows Server 2025 Security update Also for Windows 11
    Zero-day

    KB5055523

    Exploited CLFS flaw patched; Remote Desktop freezes addressed

    Attackers are exploiting a Windows Common Log File System Driver flaw. The update also addresses Remote Desktop session freezes.

    Check the newer update, KB5058411
    Known issues: 4 open
    • Active Directory Replication
    • Citrix
    • and 2 more

    Key changes 81 CVEs · 20 changes

    • New IFilters: Windows Search runs IFilters with fewer permissions to limit the harm if a process is compromised.
    • New Input Method Editor (IME): The IME toolbar hides in full-screen apps while you type Chinese or Japanese characters.
    • New Narrator: Narrator scan mode adds shortcuts to skip past links and jump to lists.

    Read update Source: Microsoft

    Build
    26100.3775
    Security
    81 fixed · 6 critical · 1 exploited
    Restart
    Required
  • Windows Server 2022 Windows Server 2022 Security update
    Zero-day

    KB5055526

    Exploited Common Log File System flaw patched

    Attackers are exploiting a flaw in the Common Log File System driver. This update also changes daylight saving time support in Chile and adds a protected system folder.

    Check the newer update, KB5058920
    Known issues: 2 open
    • Citrix
    • System Guard Runtime Monitor Broker service

    Key changes 80 CVEs · 5 changes

    • Improved Daylight Saving Time (DST): Daylight saving time in Chile’s Aysen region follows the government’s 2025 change.
    • Improved OS Security: A new folder appears on the system drive. Leave it in place, even if IIS is not enabled.
    • Improved Kerberos Authentication: Kerberos gets added protection against a certificate-related flaw. Domain controllers might log Event ID 45.

    Read update Source: Microsoft

    Build
    20348.3453
    Security
    80 fixed · 7 critical · 1 exploited
    Restart
    Required
  • Windows Server 2019 Windows Server 2019 Security update Also for Windows 10
    Zero-day

    KB5055519

    Exploited log file driver flaw patched; Hello sign-in tightened

    The update addresses 75 vulnerabilities, including the exploited CVE-2025-29824, and requires a color camera for Windows Hello facial recognition. It has not been available since March 31, 2026.

    As of March 31, 2026, this update is no longer available through Microsoft Update Catalog or other release channels. Microsoft recommends updating devices to the latest version of Windows.
    Known issues: 1 open Organizations and IT administrators
    • Citrix

    Key changes 75 CVEs · 5 changes

    • Improved Daylight Saving Time (DST): Daylight saving time support is updated for Chile’s Aysen region to follow the government’s 2025 change order.
    • Improved OS Security: A new %systemdrive%\inetpub folder is created for protection purposes. Do not delete it, whether or not IIS is enabled.
    • Improved Kerberos Authentication: Kerberos adds protections for a certificate authority that is in the Windows root store but not the NTAuth store. Domain controllers mi...

    Read update Source: Microsoft

    Build
    17763.7136
    Security
    75 fixed · 7 critical · 1 exploited
  • Windows Server 2016 Windows Server 2016 Security update Also for Windows 10
    Zero-day

    KB5055521

    An exploited Common Log File System flaw is patched

    Addresses 62 vulnerabilities, including an actively exploited elevation-of-privilege flaw in the Common Log File System Driver. It also adds security and time-zone changes; a Group Policy audit-reporting issue is resolved by KB5058921.

    Check the newer update, KB5058921

    Key changes 62 CVEs · 3 changes

    • New OS Security: A new %systemdrive%\inetpub folder is created as part of security protections. Do not delete it; no action is needed.
    • Improved Daylight Saving Time (DST): Time-zone support is updated for Chile’s Aysen region to follow the government’s 2025 daylight saving time change.
    • Improved Kerberos Authentication: Kerberos adds protections for a certificate authority that is in the Windows root store but not the NTAuth store. This might cause Even...

    Read update Source: Microsoft

    Build
    14393.7969
    Security
    62 fixed · 7 critical · 1 exploited
    Restart
    Required
  • Windows Server 2025 Windows Server 2025 Security update Also for Windows 11
    Zero-day

    KB5053598

    Exploited NTFS, Fast FAT and MMC flaws patched

    Attackers are exploiting flaws in NTFS, Fast FAT, and Microsoft Management Console. The KB page also lists Remote Desktop freezes and Azure Arc setup hangs, later resolved by KB5055523.

    Check the newer update, KB5055523
    Known issues: 3 open
    • Citrix
    • Remote desktop
    • Azure Arc Setup wizard app

    Key changes 35 CVEs · 11 changes

    • New Narrator: Narrator can copy its last spoken content to the clipboard with a keyboard shortcut.
    • New Narrator: Narrator can now read email messages in the new Outlook.
    • New Virtual hard disk (VHD/VHDx): Settings adds a button to detach a virtual hard disk.

    Read update Source: Microsoft

    Build
    26100.3476
    Security
    35 fixed · 5 critical · 5 exploited
    Restart
    Required
  • Windows Server 2022 Windows Server 2022 Security update
    Zero-day

    KB5053603

    Exploited file-system flaws and a console security bypass fixed

    Flaws in NTFS, Fast FAT, and Microsoft Management Console are being exploited. This update also fixes SSH startup and adds support for GB18030-2022.

    Check the newer update, KB5055526
    Known issues: 2 open
    • Citrix
    • System Guard Runtime Monitor Broker service

    Key changes 34 CVEs · 5 changes

    • New GB18030-2022: Adds support for the GB18030-2022 amendment.
    • Improved Daylight saving time (DST): Daylight saving time changes in Paraguay are supported.
    • Improved Servicing stack: The component that installs Windows updates gets quality improvements.

    Read update Source: Microsoft

    Build
    20348.3328
    Security
    34 fixed · 5 critical · 5 exploited
    Restart
    Required
  • Windows Server 2019 Windows Server 2019 Security update Also for Windows 10
    Zero-day

    KB5053596

    Exploited file-system flaws patched; SSH startup fixed

    The update fixes 33 vulnerabilities, including five exploited flaws in Windows file systems and the Microsoft Management Console, and restores OpenSSH service startup. It is no longer available from Microsoft’s release channels.

    As of March 31, 2026, this update is no longer available from Microsoft Update Catalog or other release channels; Microsoft recommends updating devices to the latest version of Windows.
    Known issues: 1 open Organizations and IT administrators
    • Citrix

    Key changes 33 CVEs · 5 changes

    • New GB18030-2022: Support is added for the GB18030-2022 amendment.
    • Improved Daylight saving time (DST): The time change rules for Paraguay are updated.
    • Improved Temporary files: System processes can store temporary files in a secure directory, reducing the risk of unauthorized access.

    Read update Source: Microsoft

    Build
    17763.7009
    Security
    33 fixed · 5 critical · 5 exploited