Latest updates on cloud, security, Microsoft and the tools that keep your infrastructure running.
Stay informed with the latest IT news, security updates and product changes.
Microsoft released KB5086096 on April 16, 2026, a critical security update for .NET 8.0 runtime and SDK patching CVE-2026-0145, CVE-2026-0146, and CVE-2026-0147 on Windows, Linux, and macOS.
Microsoft released KB5082417, a cumulative security and reliability update for .NET Framework 3.5 and 4.8.1 on Windows 11 25H2 and Windows Server 2025. It patches a critical CLR elevation-of-privilege vulnerability (CVE-2026-0847) and resolves ASP.NET memory corruption, WCF reliability, Entity Framework performance and XML serialization issues.
Microsoft released KB5083769 on April 14, 2026, a critical security update for Windows 11 version 25H2 and 24H2 that addresses six CVEs across the Windows Kernel, Edge WebView2, Graphics Component, Common Log File System and Print Spooler. The update moves systems to build 26200.8246 (25H2) or 26100.8246 (24H2).
Microsoft released KB5082142 on April 14, 2026, a critical security update for Windows Server 2022 that patches remote code execution, privilege escalation, information disclosure, and denial-of-service vulnerabilities. The cumulative update raises the OS build to 20348.5020 and requires a restart.
KB5086097 is the April 2026 security update for .NET 9.0, updating to version 9.0.15. Includes security fixes for runtime and ASP.NET Core on Windows, Linux, and macOS. Part of the April Patch Tuesday cycle.
KB5082424 patches six CVEs in .NET Framework 3.5 and 4.8.1 for Windows 11 23H2: CVE-2026-32178 (RCE), CVE-2026-32203/32226/23666 (DoS), CVE-2026-26171 (bypass), CVE-2026-33116 (info disclosure).
KB5083252 patches CVE-2026-32167 (SQL injection EoP), CVE-2026-32176 (PolyBase EoP), and a SQL injection in system stored procedures in SQL Server 2022 CU24. Build 16.0.4250.1. MSDASQL breaking change.
An Edge update broke right-click paste in Teams desktop chats starting April 14, 2026. The paste option appears greyed out for URLs, text, and images. Ctrl+V still works. Root cause: Edge WebView2 runtime regression. Fix rolling out in stages.
KB5084816 patches CVE-2026-32167 (CVSS 6.7, SQL injection in internal stored procedures) and CVE-2026-32176 (PolyBase linked server EoP) in SQL Server 2019 CU32. Build 15.0.4465.1. Superseded by KB5090407.
KB5082052 is the April 2026 Patch Tuesday update for Windows 11 23H2 (Build 22631.6936) with Secure Boot cert status in Windows Security, RDP phishing protection, MS account sign-in fix, and vulnerable driver blocklist update.
Microsoft released KB5083252 on April 14, 2026, a security update for SQL Server 2022 CU24 patching CVE-2026-32167 (PolyBase EoP), CVE-2026-32176 (EoP), and SQL injection in stored procedures. Build 16.0.4250.1.
Microsoft released KB5082420 on April 14, 2026, a cumulative update for .NET Framework 3.5 and 4.8.1 on Windows 11 24H2 patching CVE-2026-0847 (CLR EoP), ASP.NET memory corruption, WCF failures, and ARM64 compatibility issues.
Microsoft released KB5082063 on April 14, 2026, a security update for Windows 11 24H2 and Windows Server 2025 patching 6 CVEs including kernel EoP, TCP/IP RCE, Hyper-V escape, and auth token manipulation.
Microsoft released KB5082424 on April 14, 2026, a cumulative update for .NET Framework 3.5 and 4.8.1 on Windows 11 23H2 patching CLR privilege escalation. Superseded by KB5087058.
Microsoft released KB5082123 on April 14, 2026, a security update for Windows 10 Version 1809 and Windows Server 2019 that patches five vulnerabilities, including critical remote code execution flaws in Remote Desktop Services and SMB. The update brings systems to OS Build 17763.8644 and carries known issues affecting Print Spooler, Remote Desktop and SMB.
Microsoft's April 2026 Patch Tuesday update KB5082198 raises Windows 10 Version 1607 and Windows Server 2016 to build 14393.9060, addressing kernel remote code execution, LSA privilege escalation, networking information disclosure, file system denial of service, and a Windows Defender Application Control bypass.
Microsoft released out-of-band cumulative update KB5086672 for Windows 11 versions 25H2 and 24H2 on March 31, 2026, fixing an installation failure (error 0x80073712) that blocked the pulled March 2026 non-security preview update KB5079391. The OOB update raises builds to 26200.8117 and 26100.8117.
Threat actors used credentials harvested in the TeamPCP Trivy supply-chain compromise (CVE-2026-33634) to breach Cisco's development environment, cloning 300+ GitHub repositories - including AI Assistant and AI Defense source code - and accessing a small number of AWS accounts, according to BleepingComputer.
