Four Windows Remote Desktop Client flaws can execute code
The highest score is 8.8 for a double-free; one bug needs only local low privileges, not a network connection.
Stories per day · 30 days
2 RSS
Relatedmicrosoft6endpoint-mapper2exchange-server2active-directory1cve-2026-701111denial-of-service1dfs1email1end-of-support1exchange1hardening1intcube1kerberos1lifecycle1municipalities1outlook1owa1patch-tuesday1
16 stories, newest first · one card per story
Stories tagged #windows-server
Microsoft fixes Exchange sign-ins broken by October Windows Server updates
November Patch Tuesday updates KB5131080 and KB5131090 lift an Endpoint Mapper memory cap on Server 2019 and later.
1
Windows Server 2016 security updates end on January 12, 2027
The January 2027 update is the last for every Server 2016 edition; Microsoft urges a move to Server 2025.
Windows Server 2025 gains quick machine recovery after October 2026 update
Cloud remediation stays off by default and is enabled in Group Policy under Quick Machine Recovery.
1
October Windows Server updates break Exchange sign-in and mail flow
A new 512-call Endpoint Mapper limit can stall OWA and delivery; Microsoft offers a registry workaround, not an uninstall.
2
Microsoft says October Windows updates can break on-premises Exchange email
Four October 13 Windows Server updates can stall mail and webmail; Microsoft says do not uninstall them.
1
Why Active Directory weaknesses stay open for years in teams with one or two admins
intcube led 27 municipalities through a 12-week program to harden Windows Server and Active Directory.
2
Microsoft Windows Server 0-Day Flaw Lets Attackers Crash Servers With a Single Packet
Microsoft patched CVE-2026-70111, a Windows Server DFS flaw that can crash servers with one malicious SMB response.
4
Microsoft plans to deprecate Windows Deployment Services
Microsoft will deprecate Windows Deployment Services starting with the Windows Server release after 2025.
Microsoft releases emergency Windows updates to fix RDS failures
Microsoft released emergency out-of-band Windows updates fixing Remote Desktop Services failures and Hyper-V issues caused by September 2026 security patches.
4
Microsoft: September updates cause RDS failures on Windows Server
Microsoft confirms September 2026 Patch Tuesday updates break Remote Desktop Services on Windows Server 2012+; Group Policy mitigations and rollback workarounds available.
4
Remote Desktop Services Failures on Windows Servers Following September Update
September 2026 Patch Tuesday updates cause Windows Server 2019/2022/2025 RDS sessions to freeze, forcing administrators to roll back.
11
September Windows Server updates break Remote Desktop Services
September 2026 Windows Server cumulative updates cause Remote Desktop Services failures on Server 2019, 2022 and 2025, forcing some admins to roll back.
3
2026-007: Critical Vulnerability in Windows Netlogon
Actively exploited CVSS 9.8 Windows Netlogon flaw lets unauthenticated attackers execute code with SYSTEM privileges on domain controllers.
4
AD Rights Management Service (Part 1): Architecture, Deprecation, and Reconnaissance
Huntress maps AD RMS architecture and recon paths, setting up an offline key-extraction attack against its unrotatable 255-year root key.
11
ZDI-26-544: Microsoft Windows Deployment Services Use-After-Free Remote Code Execution Vulnerability
ZDI discloses an unauthenticated use-after-free remote code execution flaw in Windows Deployment Services (CVE-2026-62893, CVSS 7.5).