Red items need doing during this cycle, amber ones need checking against your estate, blue ones are upcoming deadlines. Tick an item when it's handled; ticks are shared with everyone who can use this tracker.
B is the Patch Tuesday security update, OOB an out-of-band release, D the optional non-security preview that rolls into next month's B. Select a product for its servicing stack, release channels and the known issues its KB article lists.
| Product | Security update (B) | Out-of-band | Preview (D) | Hotpatch | Open issues | CVEs |
|---|---|---|---|---|---|---|
| Loading… | ||||||
Shipped through Windows Update, WSUS and the Catalog alongside the OS update. On Server 2016 and 1607 the 4.6.2–4.7.2 fixes are inside the OS cumulative update.
| Operating system | Framework | KB |
|---|
Not part of the Windows cumulative update. Update runtimes, SDKs and ASP.NET Core hosting bundles yourself, or through Microsoft Update if you opted in.
| Version | Support | Releases this cycle |
|---|
Behaviour changes, hardening and fixes from the KB release notes, merged across products. Check these against your apps before you approve.
| CVE | Title | Status | CVSS |
|---|
Bar length is the number of CVEs Microsoft lists for the product this month; the red part is Critical.
For hotpatch-enrolled devices: BL baseline months install with a restart, HP hotpatch months install without one. Planned months show no KB until release.
| Product | Status |
|---|
A suggested sequence from preparation to close-out. Days count from Patch Tuesday; adjust them to your change process. Progress is kept per cycle and shared with your team.
Patch, known issue and lifecycle details on this page are taken from these Microsoft and CISA publications.