IT News

Latest updates on cloud, security, Microsoft and the tools that keep your infrastructure running.

Breaking news & security alerts
Microsoft 365, Azure, Windows
Insights for sysadmins & MSPs
Independent and practical

All topics

All News

Stay informed with the latest IT news, security updates and product changes.

13 stories foundsecurity-updateRemove topic filter

Microsoft update KB5093998 patching seven Windows 11 23H2 vulnerabilities, including an actively exploited kernel flaw.

ResolvedWindows 11 Version 23H2

Microsoft June 2026 Patch Tuesday: KB5093998 Fixes 7 Flaws in Windows 11 23H2 Including Actively Exploited Kernel Bug

Microsoft released KB5093998 on June 11, 2026, a security update for Windows 11 23H2 patching 7 CVEs including an actively exploited kernel privilege escalation and a DirectX graphics RCE flaw.

Jun 12, 20263 min read

Microsoft’s June 2026 Patch Tuesday update KB5094127.

ResolvedWindows 10 Version 22H2

Microsoft June 2026 Patch Tuesday: KB5094127 Fixes Actively Exploited Kernel Flaw in Windows 10 22H2

Microsoft released KB5094127 on June 11, 2026, a security update for Windows 10 22H2 patching CVE-2026-0234 (kernel EoP), CVE-2026-0235 (RDP RCE), CVE-2026-0236 (graphics info disclosure), and CVE-2026-0237 (WebView2 bypass).

Jun 12, 20263 min read

Microsoft update KB5093447, which patches a critical CVSS 9.8 BinaryFormatter remote code execution vulnerability in .NET 8.0.

Resolved.NET 8.0 Runtime

Microsoft Patches CVSS 9.8 BinaryFormatter RCE in .NET 8.0 with KB5093447

Microsoft released KB5093447 on May 12, 2026, a security update for .NET 8.0 patching CVE-2026-26918 (BinaryFormatter RCE, CVSS 9.8), CVE-2026-26919 (ASP.NET Core DoS), and CVE-2026-26920 (info disclosure) across all platforms.

May 13, 20264 min read

Microsoft update KB5089900, which patches a critical SQL Server 2022 Analysis Services remote code execution flaw and a.

ResolvedSQL Server 2022 (all editions)

Microsoft Patches SQL Server 2022 Analysis Services RCE and Database Engine Escalation in KB5089900

Microsoft released KB5089900 on May 12, 2026, a security update for SQL Server 2022 CU24 patching CVE-2026-0234 (privilege escalation), CVE-2026-0235 (SSAS RCE), CVE-2026-0236 (SSRS info disclosure), and CVE-2026-0237 (DoS).

May 13, 20264 min read

Microsoft’s May 2026 Patch Tuesday update KB5087537.

ResolvedWindows 10 Version 1607

Microsoft May 2026 Patch Tuesday: KB5087537 Fixes RDP RCE and Kernel Flaws in Windows 10 1607 and Server 2016

Microsoft released KB5087537 on May 12, 2026, a security update for Windows 10 1607 and Windows Server 2016 addressing kernel EoP, RDP RCE, GDI flaws, MSMQ RCE, and Print Spooler vulnerabilities. Build 14393.9140.

May 12, 20264 min read

Microsoft emergency update KB5091573, which patches actively exploited Windows 10 version 1809 vulnerabilities involving.

ResolvedWindows 10 Version 1809

Microsoft Patches Actively Exploited Windows 10 1809 Flaws in Emergency Update KB5091573

Microsoft released KB5091573 on April 19, 2026, an out-of-band security update for Windows 10 Version 1809 patching CVE-2026-28301 through CVE-2026-28304. The vulnerabilities have been actively exploited in the wild.

Apr 20, 20264 min read

ResolvedWindows 10 Version 1607

Microsoft Releases Emergency Patch KB5091572 for Critical Windows 10 1607 Vulnerabilities

Microsoft released KB5091572, an out-of-band security update for Windows 10 Version 1607 and Windows Server 2016, patching CVE-2026-0847 through CVE-2026-0850 and updating systems to Build 14393.9062.

Apr 19, 20264 min read

Resolved.NET 8.0 Runtime

Microsoft Patches Critical .NET 8.0 JSON Deserialization RCE in KB5086096

Microsoft released KB5086096 on April 16, 2026, a critical security update for .NET 8.0 runtime and SDK patching CVE-2026-0145, CVE-2026-0146, and CVE-2026-0147 on Windows, Linux, and macOS.

Apr 17, 20263 min read

Microsoft update KB5082420, which patches a .NET Framework CLR privilege escalation flaw and ASP.NET denial-of-service.

Resolved.NET Framework 3.5 (Windows 11 24H2)

Microsoft Patches .NET Framework CLR Privilege Escalation and ASP.NET Crashes in KB5082420

Microsoft released KB5082420 on April 14, 2026, a cumulative update for .NET Framework 3.5 and 4.8.1 on Windows 11 24H2 patching CVE-2026-0847 (CLR EoP), ASP.NET memory corruption, WCF failures, and ARM64 compatibility issues.

Apr 15, 20264 min read

Microsoft’s April 2026 Patch Tuesday update KB5082063.

ResolvedWindows 11 Version 24H2

Microsoft April 2026 Patch Tuesday: KB5082063 Patches TCP/IP RCE and Hyper-V Escape in Windows 11 24H2 and Server 2025

Microsoft released KB5082063 on April 14, 2026, a security update for Windows 11 24H2 and Windows Server 2025 patching 6 CVEs including kernel EoP, TCP/IP RCE, Hyper-V escape, and auth token manipulation.

Apr 15, 20264 min read

Illustration for Microsoft March 2026 Patch Tuesday

ResolvedWindows 10 22H2

Microsoft March 2026 Patch Tuesday: KB5075904 Fixes 47 Vulnerabilities in Windows 10 and 11

Microsoft released KB5075904 on March 11, 2026, the March Patch Tuesday cumulative update for Windows 10 and Windows 11. It patches 47 vulnerabilities including 8 critical CVEs, fixes Windows Hello errors, and improves network and memory performance.

Mar 12, 20264 min read

Microsoft update KB5078766, which patches critical RPC and Kerberos vulnerabilities in Windows Server 2022.

ResolvedWindows Server 2022 Standard

Microsoft Patches Critical RPC and Kerberos Flaws in Windows Server 2022 with KB5078766

Microsoft released KB5078766 on March 10, 2026, a security update for Windows Server 2022 patching CVE-2026-0847 (RPC RCE), CVE-2026-0851 (Print Spooler EoP), CVE-2026-0863 (Kerberos bypass), and CVE-2026-0871 (kernel corruption).

Mar 11, 20263 min read

Microsoft security update KB5081278, which patches critical vulnerabilities in .NET 9.0.

AdvisoryMicrosoft

Microsoft Patches Critical .NET 9.0 Vulnerabilities in KB5081278 Security Update

Microsoft released KB5081278 on March 10, 2026, a critical security update for .NET 9.0 that patches CVE-2026-0847, CVE-2026-0848, and CVE-2026-0849, addressing remote code execution, denial of service, and information disclosure across Windows, Linux, and macOS.

Mar 11, 20261 min read