Windows Server 2016 security updates end on January 12, 2027
The January 2027 update is the last for every Server 2016 edition; Microsoft urges a move to Server 2025.
55
Product
Windows Server 2025
- Mentions · 7d0
- Mentions · 30d5
- All mentions17
- First seenAug 12, 2026
- Last mentioned7d ago
Timeline
17 articles · newest firstWindows Server 2025 gains quick machine recovery after October 2026 update
Cloud remediation stays off by default and is enabled in Group Policy under Quick Machine Recovery.
32
Microsoft says October Windows updates can break on-premises Exchange email
Four October 13 Windows Server updates can stall mail and webmail; Microsoft says do not uninstall them.
64
Networking problems after the October 2026 Windows update? NTLM might be to blame
October 2026 Windows update blocks NTLMv1 single sign-on by default, which can break Wi-Fi, Ethernet, and VPN logins.
60
Microsoft: Windows Server 2022 reached end of mainstream support
Windows Server 2022 left mainstream support on October 13, 2026, with security updates until October 2031.
42
Microsoft fixes bug behind ‘Defender Antivirus is turned off’ alerts
Microsoft's Defender Antivirus update 4.18.26080.4 fixes false 'Defender Antivirus is turned off' alerts affecting all supported Windows client and server versions.
15
Microsoft shares workaround for Windows domain login issues
Microsoft confirms September 2026 Windows updates trigger domain trust failures via Machine Identity Isolation and shares a workaround for Windows 11 enterprises.
58
Windows Server 2022 reaches end of mainstream support next month
Microsoft says Windows Server 2022 ends mainstream support on October 13, 2026, entering extended security updates through October 14, 2031.
25
Remote Desktop Services Failures on Windows Servers Following September Update
September 2026 Patch Tuesday updates cause Windows Server 2019/2022/2025 RDS sessions to freeze, forcing administrators to roll back.
55
September Windows Server updates break Remote Desktop Services
September 2026 Windows Server cumulative updates cause Remote Desktop Services failures on Server 2019, 2022 and 2025, forcing some admins to roll back.
52
Chaotic Eclipse Releases Crowdstrike Falcon ZeroDay FalconFlank
Researcher Chaotic Eclipse released FalconFlank, a PoC zero-day privilege escalation exploit against CrowdStrike Falcon's Microsoft Office macro removal feature.
72
September 2026 Patch Tuesday roundup: Plugs for two zero day holes among almost 1,000 fixes in Windows
Microsoft's September 2026 Patch Tuesday ships 964 fixes including two exploited Windows zero-days (CVE-2026-85880, CVE-2026-81963) and a wormable DNS RCE.
84
AD Rights Management Service (Part 1): Architecture, Deprecation, and Reconnaissance
Huntress maps AD RMS architecture and recon paths, setting up an offline key-extraction attack against its unrotatable 255-year root key.
55
Researcher Publishes CrowdStrike Privilege Escalation Zero Day
Researcher NightmareEclipse published FalconFlank, a zero-day local privilege escalation in CrowdStrike Falcon Sensor abusing its Office malicious macro remediation feature.
62
Prolific Microsoft 0-day hunter drops CrowdStrike Falcon exploit PoC
Researcher Nightmare Eclipse released a PoC for FalconFlank, a privilege escalation zero-day in CrowdStrike Falcon's Office macro remediation feature.
55
ShieldBreak Zero-Day PoC Claims Microsoft Defender Patch Bypass With SYSTEM Access
Researcher Chaotic Eclipse released ShieldBreak PoC, a claimed patch bypass for Microsoft Defender flaw CVE-2026-50656, now tracked as CVE-2026-69414.
62
ShieldBreak: New Windows Zero-Day Bypasses Microsoft’s RoguePlanet Patch
Researcher Chaotic Eclipse published a PoC bypassing Microsoft's CVE-2026-50656 Defender patch, enabling SYSTEM-level code execution on fully patched Windows systems.
58
Related CVEs
by mentions- CVE-2026-81963<1%7.8Local Privilege Escalation via Link Following in Windows Update Stack
- CVE-2026-85880<1%7.8Heap-Based Buffer Overflow in Windows ALPC Enables Local Privilege Escalation
- CVE-2026-5065611%7.0Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "RoguePlanet "
- CVE-2026-628933%9.8Pre-auth use-after-free RCE in Microsoft Windows Deployment Services (WDS)
- CVE-2026-697301%9.8Use-After-Free RCE in Windows DNS Server
- CVE-2026-69590<1%9.8Unauthenticated RCE in Microsoft Windows Routing and Remote Access Service (RRAS)
- CVE-2026-69485<1%8.8Use-of-Uninitialized-Resource RCE in Microsoft Windows Remote Desktop Client
- CVE-2026-694141%7.8Local Elevation of Privilege in Microsoft Defender Malware Protection Engine
- CVE-2026-628323%7.8Local Privilege Escalation via Link Following in Windows User Profile Service
- CVE-2026-72971<1%5.5Local Tampering via Link-Following Flaw in Windows 11 26H1 Container Isolation Driver
Appears with
- Microsoftvendor · 17
- Windows 11product · 8
- Windows Server 2022product · 5
- Microsoftorganization · 4
- CrowdStrike Falconproduct · 3
- Chaotic Eclipseorganization · 3
- CrowdStrikevendor · 3
- Kasperskyvendor · 3
- Windows Server 2019product · 3
- Remote Desktop Servicesproduct · 2
- Gen Digitalvendor · 2
- Windows 11 24H2product · 2
- Avast Antivirusproduct · 2
- Microsoft Defenderproduct · 2
- Kaspersky Endpoint Securityproduct · 2
- Avastvendor · 2
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.