Microsoft Updates
The latest Microsoft Updates coverage — news, analysis, and updates from the WindowsNews.AI desk.
Microsoft’s July Patch Closes ReFS Hole That Hands Attackers System Control—Who Needs to Update First
Microsoft’s July 14, 2026 security update patched a high-severity flaw in the Windows Resilient File System (ReFS) that could allow a locally authenticated attacker to seize full control of a...
Microsoft Patches Windows Certificate Bypass Vulnerability — Here’s What You Need to Install
Microsoft’s July 14, 2026 cumulative updates patch a security flaw in Windows Cryptographic Services that could allow a remote attacker to bypass certificate validation and trick systems into...
Patch Now: Microsoft Fixes Windows Backup Flaw That Hands Over Full System Control
On July 14, 2026, Microsoft released a security update that patches a high-severity vulnerability in the Windows Backup Service, identified as CVE-2026-50364. The flaw carries a CVSS base score of...
Microsoft’s July Patch Closes a Kernel-Level Data Leak in Windows: All Versions Affected
Microsoft’s July 14, 2026 cumulative security updates resolve CVE-2026-50381, a type-confusion vulnerability in the Windows Composite Image File System (CimFS) kernel driver that leaks information...
July 2026 Windows Update Closes USB Print Driver Flaw That Could Hand Attackers System Control
Microsoft's July 2026 security update fixes a vulnerability in the Windows USB print driver that could allow an attacker already on a machine to escalate their privileges and take full control of the...
Microsoft Closes Secure Boot Security Gap—Patches for All Windows Versions Out Now
Microsoft fixed a vulnerability in Windows Secure Boot on July 14, 2026 that could allow an attacker with local access to bypass the very mechanism designed to keep malware out of the boot process....
Microsoft Fixes Remote LSASS Vulnerability That Can Take Down Windows Domain Controllers
On July 14, 2026, Microsoft released its monthly security updates, and among the fixes is a patch for a vulnerability that should make every IT administrator sit up and take notice. CVE-2026-40378 is...
Microsoft’s July Windows Update Seals a Storage Bug That Could Hand Attackers SYSTEM Control
Microsoft fixed a use-after-free vulnerability in Windows Storage on July 14, 2026, closing a local privilege-escalation hole that could let an attacker with limited user rights take full SYSTEM...
Windows 11 Insiders Get a Kill Switch for Web Results in Search — Here’s How It Works
Microsoft has given Windows Insiders a rare and long-awaited gift: the ability to completely strip web and Microsoft Store suggestions from the operating system’s search experience. Starting July...
Microsoft Emails Say Windows 10 ESU Extended to 2027—Here's What You Need to Know
Microsoft has begun telling Windows 10 users what many had hoped: the security patches they rely on will keep coming through October 12, 2027. In an email that landed in Outlook “Other” folders...
Windows 10’s Settings About Page Gets a Permanent Makeover—Here’s What Changed
Microsoft has quietly rolled out a redesigned About page in Windows 10’s Settings app, and there’s no supported way to switch back to the old look. The change, delivered through the November 2024...
Expired Secure Boot Certificates Spark Microsoft's Auto-Update Expansion: What Windows 10 Users Need to Know
On June 24, a foundational layer of security protecting millions of Windows 10 PCs expired, forcing Microsoft to accelerate an automated certificate-renewal push that same day. The Secure Boot...