Microsoft confirmed that its September 8 Patch Tuesday update broke File History backups on Windows 11 (23H2 through 26H1) and Windows 10 ESU devices, causing errors like false 'reconnect drive' prompts and missing previous file versions. The company has released an optional preview update to fix the issue, though it currently does not apply to Windows 11 23H2 or Windows 10.
zdnet.com
· 2026-09-23
Microsoft released an out-of-band update this week for Windows 11 versions 26H2, 25H2, and 24H2 to fix an audio bug that broke sound on older USB devices using the legacy Audio Class 1.0 driver. The flaw, introduced by the September 8 security update, left affected headsets and speakers silent, with unresponsive volume controls or a Device Manager error. The new patch also resolves several other recent issues alongside a couple of security flaws.
zdnet.com
· 2026-09-16
Microsoft's latest Patch Tuesday addressed close to 1,000 vulnerabilities, but the scale of the update introduced new problems for some users. The company has since issued out-of-band emergency patches to correct issues caused by the original round of fixes.
darkreading.com
· 2026-09-15
Microsoft has verified that its September 2026 security updates are causing Remote Desktop Services failures across Windows Server 2012 and later, plus Windows 10 and 11. Affected systems show RDP connections dropping after a few minutes, sign-in errors, servers stuck loading the Remote Desktop Configuration screen, and related tools like MMC and File Explorer becoming unresponsive.
bleepingcomputer.com
· 2026-09-14
Microsoft has patched a bug that stopped Teams and the new Outlook for Windows from launching on ARM-based devices like the Surface Pro 11 and Surface Laptop 7. The issue, triggered by August 2026 security updates (KB5121003), mainly hit new or freshly imaged PCs without Microsoft Store updates. The fix arrived with the September 8 cumulative update, KB5124012.
bleepingcomputer.com
· 2026-09-11
Windows admins report that this month's cumulative updates for Windows Server 2019, 2022, and 2025 are breaking Remote Desktop Services, with servers working fine for a few hours before connections begin to fail. Existing sessions can get stuck unable to disconnect, new logins hang and time out, and in many cases only a hard reset restores service. Some administrators say uninstalling the September patch is the only reliable fix so far.
bleepingcomputer.com
· 2026-09-10
Security researcher Nightmare-Eclipse has published a new proof-of-concept exploit called ShieldCrash on GitHub, claiming it circumvents Microsoft's fix for CVE-2026-69414 (ShieldBreak), a privilege escalation bug in the Malware Protection Engine. The exploit reportedly allows arbitrary file reads as SYSTEM on all supported Windows versions, despite Microsoft's September patch. Microsoft has not yet responded to requests for comment on the claim.
darkreading.com
· 2026-09-10
Users of multiple Excel versions, from Office 2016 through 2024 including LTSC 2021, report that this week's KB5002914 security update, part of Microsoft's September 2026 Patch Tuesday, disables copy-paste and formula-dragging functions. Complaints surfaced on Reddit and Microsoft's Q&A forums, with some teams reporting workflow disruptions after widespread installation of the patch. BleepingComputer could not reproduce the bug on a tested Excel 2019 build, suggesting the issue may not affect all configurations equally.
bleepingcomputer.com
· 2026-09-10
Microsoft has resolved a bug that made desktop wallpapers turn solid black and reset mouse settings on Windows 11 24H2 and 25H2 devices. The issue stemmed from the KB5120998 preview update released in August 2026, and Microsoft says installing the KB5124008 update from September 8 fixes it.
bleepingcomputer.com
· 2026-09-10
Microsoft's latest Patch Tuesday update addresses 966 vulnerabilities, the largest batch it has ever released in a single month, including 105 critical-rated bugs. Two of the flaws are zero-days already being actively exploited by attackers. This follows 570 fixes in August and 400 the month before, showing a sharp month-over-month escalation.
it.slashdot.org
· 2026-09-09
A researcher using the alias Nightmare Eclipse publicly released details of a new zero-day exploit dubbed 'ShieldCrash' targeting Microsoft Defender, timed to appear right after Microsoft's September 2026 Patch Tuesday updates. The exploit reportedly allows attackers to gain SYSTEM-level access on affected Windows machines, the highest level of privilege on the system.
bleepingcomputer.com
· 2026-09-09
Microsoft released patches for 974 vulnerabilities across Windows and other products, its largest single update batch ever, surpassing July's record of 570 fixes. The release includes two actively exploited zero-day flaws that let attackers escalate privileges, plus 113 critical-rated bugs including a dangerous DNS weakness and a Windows Shell remote code execution flaw scoring 9.8 out of 10 in severity.
krebsonsecurity.com
· 2026-09-08