Skip to the content
The Update Bureau

Windows Server

Windows Server updates

All published releases for Windows Server, newest first: what each update changes, whether to install it and any confirmed known issues. Latest release: November 13, 2026.

24 active known issues →

Windows Server updates

  • Windows Server 2022 Windows Server 2022 Security update
    Zero-day

    KB5034770

    Exploited kernel and SmartScreen flaws patched

    Fixes 40 vulnerabilities, including three exploited flaws affecting the Windows kernel, Internet Shortcut files, and SmartScreen. It also addresses issues with server networking, sign-in, touchscreens, and Chromium-based browsers.

    Check the newer update, KB5035857

    Key changes 40 CVEs · 18 changes

    • Improved UEFI Secure Boot: A renewed signing certificate is available for UEFI Secure Boot systems; you can opt in to this change.
    • Improved Device metadata: Downloads of device metadata over HTTPS are more secure.
    • Improved Windows Kernel Vulnerable Driver Blocklist: The vulnerable-driver blocklist includes additional drivers that could be used in BYOVD attacks.

    Read update Source: Microsoft

    Build
    20348.2322
    Security
    40 fixed · 2 critical · 3 exploited
    Restart
    Required
  • Windows Server 2019 Windows Server 2019 Security update Also for Windows 10
    Zero-day

    KB5034768

    Exploited Windows flaws closed; LAPS and LSASS issues addressed

    Closes 39 vulnerabilities, including critical CVE-2024-21357 (Windows PGM remote code execution) and exploited CVE-2024-21338 (Windows Kernel), CVE-2024-21412 (Internet Shortcut Files), and CVE-2024-21351 (SmartScreen). It also addresses several sign-in and system issues.

    The update is no longer available from the Microsoft Update Catalog or other release channels as of March 31, 2026. The page recommends updating devices to the latest version of Windows.

    Key changes 39 CVEs · 9 changes

    • Improved Device metadata: Downloads of device metadata over HTTPS from Windows Metadata and Internet Services are more secure.
    • Improved Windows nesting limit: The nesting limit can now be set as low as 35 instead of 50. Do not change it unless a kernel stack overflow and recursion in DestroyWi...
    • Improved UEFI Secure Boot: UEFI Secure Boot systems can opt to add a renewed signing certificate.

    Read update Source: Microsoft

    Build
    17763.5458
    Security
    39 fixed · 1 critical · 3 exploited
  • Windows Server 2016 Windows Server 2016 Security update Also for Windows 10
    Zero-day

    KB5034767

    Exploited SmartScreen bypass and critical PGM flaw addressed

    The update addresses 34 vulnerabilities, including an actively exploited SmartScreen bypass and a critical PGM remote-code-execution flaw. It also updates Secure Boot certificate support and makes device metadata downloads more secure.

    Key changes 34 CVEs · 2 changes

    • Improved UEFI Secure Boot: UEFI Secure Boot systems can opt in to use a renewed signing certificate.
    • Improved Device metadata: Device metadata downloads over HTTPS are more secure.
    • Exploited CVE-2024-21351: Windows SmartScreen Security Feature Bypass Vulnerability

    Read update Source: Microsoft

    Build
    14393.6709
    Security
    34 fixed · 1 critical · 1 exploited
  • Windows Server 2022 Windows Server 2022 Security update

    KB5034129

    Critical Kerberos and Hyper-V flaws; sign-in and browser issues addressed

    Fixes 36 vulnerabilities, including critical flaws in Kerberos and Hyper-V, and addresses issues affecting sign-in, servers, and other features. Chromium-based browser launch problems are resolved by KB5034770.

    Check the newer update, KB5034770

    Key changes 36 CVEs · 22 changes

    • Improved Servicing stack: The servicing stack, which installs Windows updates, receives quality improvements.
    • Fix Microsoft Intune: An Intune feature that was not working properly is addressed.
    • Fix Account lockout event 4625: Account lockout event 4625 is addressed when the account name uses UPN format.

    Read update Source: Microsoft

    Build
    20348.2227
    Security
    36 fixed · 2 critical
    Restart
    Required
  • Windows Server 2019 Windows Server 2019 Security update Also for Windows 10

    KB5034127

    IE mode and touchscreens work more reliably

    Fixes several Windows Server 2019 problems, including IE mode becoming unresponsive and touchscreens malfunctioning with multiple monitors. It also addresses 33 security vulnerabilities, including two critical flaws.

    As of March 31, 2026, this update is no longer available from Microsoft Update Catalog or other release channels. Microsoft recommends updating devices to the latest Windows version.

    Key changes 33 CVEs · 13 changes

    • Improved Servicing stack: The component that installs Windows updates receives quality improvements.
    • Fix Internet Explorer mode: IE mode no longer stops responding when you press the left arrow key in an empty text box while caret browsing is on.
    • Fix Touchscreens: Touchscreens work properly when you use more than one monitor.

    Read update Source: Microsoft

    Build
    17763.5329
    Security
    33 fixed · 2 critical
  • Windows Server 2016 Windows Server 2016 Security update Also for Windows 10

    KB5034119

    Critical Kerberos bypass and IE mode scroll bar addressed

    The update addresses 26 vulnerabilities, including a critical Windows Kerberos security feature bypass, and a problem with the ActiveX scroll bar in IE mode. It is no longer available from Microsoft release channels as of March 31, 2026.

    As of March 31, 2026, this update is no longer available from the Microsoft Update Catalog or other release channels. Microsoft recommends updating devices to the latest version of Windows.

    Key changes 26 CVEs · 1 change

    • Fix ActiveX scroll bar: The update addresses a problem affecting the ActiveX scroll bar in IE mode.
    • Critical CVE-2024-20674: Windows Kerberos Security Feature Bypass Vulnerability
    • CVSS 8.1 CVE-2024-20652: Windows HTML Platforms Security Feature Bypass Vulnerability

    Read update Source: Microsoft

    Build
    14393.6614
    Security
    26 fixed · 1 critical