What do the terms mean?
- Critical / Important
- Microsoft’s rating of the update. Critical: at least one vulnerability can be exploited without any user action – install promptly. Important: vulnerabilities that put data or the system at risk, usually requiring a user action first.
- Actively exploited
- At least one of the fixed vulnerabilities is already being used in attacks, according to Microsoft.
- Known issues
- Problems Microsoft confirmed after release – with a status (confirmed, mitigated, resolved) and the update that fixes them.
- Security update
- The mandatory monthly update from Patch Tuesday, the second Tuesday of the month. Installs automatically.
- Preview
- Optional update towards the end of the month: voluntary, brings next month’s improvements early, but no new security fixes.
- Out-of-band
- Released outside the Patch Tuesday rhythm, usually to fix a problem with the last update quickly.
- Hotpatch
- Security update without a restart – for Windows Server 2025 and Windows 11 Enterprise with hotpatching enabled.
- Vulnerabilities, CVE, CVSS
- Every vulnerability has a CVE number (e.g. CVE-2026-50349). CVSS rates its severity from 0 to 10.
Nothing found.