
Microsoft fixes Exchange sign-ins broken by October Windows Server updates
November Patch Tuesday updates KB5131080 and KB5131090 lift an Endpoint Mapper memory cap on Server 2019 and later.
11 stories, newest first · one card per story

November Patch Tuesday updates KB5131080 and KB5131090 lift an Endpoint Mapper memory cap on Server 2019 and later.

Four October 13 Windows Server updates can stall mail and webmail; Microsoft says do not uninstall them.

CISA added an exploited NetScaler flaw to KEV as Atlassian, Exchange, and SonicWall patches landed amid active attacks.

Microsoft patched CVE-2026-96940, which lets authenticated attackers read other Exchange mailboxes in the same organization.

Canada's Cyber Centre urges patches for Exchange elevation-of-privilege flaw CVE-2026-96940.

Microsoft issued an out-of-band Exchange update for CVE-2026-96940, a same-organization mailbox read flaw.

Microsoft issued a revised September 2026 Exchange Server update (V2) adding a fix for CVE-2026-96940 across Exchange SE, 2019, and 2016.

Microsoft reissued September 2026 Exchange updates to fix CVE-2026-96940, an authenticated mailbox-access flaw scored 8.8.

Microsoft's record September 2026 Patch Tuesday fixes 974 CVEs, including two exploited Windows privilege-escalation zero-days and 20 wormable bugs.

High-severity authentication bypass CVE-2026-62911 in Exchange Server has public exploit code; about 22,000 servers remain unpatched and internet-exposed.

About 22,000 Microsoft Exchange servers remain unpatched against critical auth bypass CVE-2026-62911 as a working exploit circulates online.
Today 1.5K readers · 2.4K views · 754 reads · all time 189K views