As cited
Copy frozen at (site build).
vulnerabilities
Microsoft releases out-of-band Windows fixes with certificate updates
Microsoft released an out-of-band update on October 26 to distribute certificate trust list (CTL) updates to Windows devices that lack access to Microsoft's certificate-update service or have automatic CTL updates disabled. The patch includes seven certificates associated with compromised Indian certification authority eMudhra and addresses the need to block potentially misused certificate keys across Windows 11, Windows 10, and Windows Server 2025. The update carries forward known issues from the October 13 patch, including virtual private network (VPN) problems, Exchange Server compatibility concerns, and Remote Desktop connection issues for non-admin users.
Why it matters: Administrators managing disconnected Windows environments or those with disabled automatic certificate updates should evaluate this patch to prevent certificate verification failures in applications and websites, while documenting the unresolved known issues before deployment.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
Microsoft releases out-of-band Windows fixes with certificate updates
Microsoft released an out-of-band update on October 26 to distribute certificate trust list (CTL) updates to Windows devices that lack access to Microsoft's certificate-update service or have automatic CTL updates disabled. The patch includes seven certificates associated with compromised Indian certification authority eMudhra and addresses the need to block potentially misused certificate keys across Windows 11, Windows 10, and Windows Server 2025. The update carries forward known issues from the October 13 patch, including virtual private network (VPN) problems, Exchange Server compatibility concerns, and Remote Desktop connection issues for non-admin users.
Why it matters: Administrators managing disconnected Windows environments or those with disabled automatic certificate updates should evaluate this patch to prevent certificate verification failures in applications and websites, while documenting the unresolved known issues before deployment.
- Source published
- First seen by Cybersecurity Tracker