Practical IT guides, comparisons, explainers and news — curated by practitioners.
Browse articles tagged Microsoft.
Microsoft released KB5094127 on June 11, 2026, a security update for Windows 10 22H2 patching CVE-2026-0234 (kernel EoP), CVE-2026-0235 (RDP RCE), CVE-2026-0236 (graphics info disclosure), and CVE-2026-0237 (WebView2 bypass).
Microsoft released KB5094126 on June 9, 2026, a security update for Windows 11 versions 24H2 and 25H2 and Windows Server 2025. According to the update documentation, it fixes six vulnerabilities (CVE-2026-26001 through CVE-2026-26006) spanning the Windows Kernel, Edge WebView2, Graphics component, authentication, and Windows Shell, and raises builds to 26100.8655 (24H2) and 26200.8655 (25H2).
Microsoft's June 2026 security update KB5094125 patches five vulnerabilities in Windows Server 2025, including a critical unauthenticated Remote Desktop Services RCE (CVE-2026-0235) and a Hyper-V guest-to-host escape (CVE-2026-0237). The update raises the OS build to 26100.32995 and applies to all editions across full GUI and Server Core installations.
Microsoft released KB5094122, the June 2026 cumulative security update for Windows 10 Version 1607 and Windows Server 2016, addressing critical remote code execution and privilege escalation vulnerabilities. The update moves the build to 14393.9234 and fixes flaws in the Windows Kernel, CLFS Driver, Graphics Component and Print Spooler.
Microsoft released KB5094041 on June 9, 2026, the monthly rollup for Windows Server 2012 R2 ESU systems. It patches kernel security flaws, fixes TLS 1.3 compatibility, resolves WMI memory leaks, and improves AD replication stability.
Microsoft's June 2026 security update KB5094128 patches multiple critical vulnerabilities in Windows Server 2022, including an unauthenticated NFS remote code execution flaw (CVE-2026-26001, CVSS 9.8), a Task Scheduler privilege escalation bug, an AD CS authentication bypass, and a Windows kernel memory corruption issue. The update raises the OS build to 20348.5256 and requires a restart.
Microsoft released KB5087054, a cumulative security update for .NET Framework 3.5 and 4.8.1 on Windows 11 Version 24H2 (x64). The update patches an elevation-of-privilege flaw in the CLR (CVE-2026-0234) and an ASP.NET request-validation bypass (CVE-2026-0235), alongside garbage-collector and reliability fixes. It requires a restart and carries several known post-install issues admins should test for.
Microsoft released KB5087539 on May 12, 2026, a security update for Windows Server 2025 that patches remote code execution, privilege escalation and information disclosure flaws across the kernel, Active Directory Domain Services and Remote Desktop Services. The update raises the OS build to 26100.32860 and applies to Standard and Datacenter editions in both Desktop Experience and Server Core.
