Microsoft Patch Tuesday: dates, versions & actively exploited flaws
Microsoft Patch Tuesday is the second Tuesday of the month, when Microsoft ships bundled security updates for Windows, Windows Server, Office, Exchange and more. patchletter shows the current versions of the Microsoft products it tracks and which flaws are already being actively exploited according to CISA.
Actively exploited at Microsoft (CISA KEV)
These tracked Microsoft products currently appear in the CISA KEV catalog with an actively exploited vulnerability — patch these first.
Source: CISA KEV · updated daily
Current Microsoft versions
31 Microsoft products tracked by patchletter and their currently detected version.
| Product | Current version | |
|---|---|---|
| .NET | 10.0.11 | → |
| Azure Storage Explorer | 1.45.0 | → |
| Citus | 14.2.0 | → |
| Exchange Server | 15.2.2562.46 | → |
| GitHub Actions Runner | 2.337.0 | → |
| Microsoft 365 Apps for Enterprise | – | → |
| Microsoft Defender (Platform) | 4.18.26070.9 | → |
| Microsoft Edge | 152.0.4191.53 | → |
| Microsoft Edge WebView2 Runtime | – | → |
| Microsoft Exchange Server | 15.2.2562.46 | → |
| Microsoft ODBC Driver for SQL Server | 18.6.2.1 | → |
| Microsoft OLE DB Driver for SQL Server | 19.4.2 | → |
| Microsoft OneDrive | – | → |
| Microsoft PowerToys | 0.101.2362.0 | → |
| Microsoft SharePoint Server | 16.0.19725.20522 | → |
| Microsoft SQL Server | 17.0.4075.5 CU8 | → |
| Microsoft Teams (Client) | 26198.304.4946.9672 | → |
| Microsoft Visual C++ Redistributable | 14.51.36247.0 | → |
| Outlook | 20326.20112 | → |
| PowerShell 7 | 7.6.5 | → |
| Process Explorer | 17.13 | → |
| SQL Server Management Studio | 22.9.1 | → |
| sqlcmd | 1.10.0 | → |
| Sysinternals Suite | 2026-07-09 | → |
| Visual Studio Code | 1.135.0 | → |
| Windows 11 | 10.0.28000 | → |
| Windows ADK | 10.1.28000.1 | → |
| Windows Admin Center | 2.7.4.18 | → |
| Windows Server | 10.0.26100 | → |
| Windows Terminal | 1.24.11911.0 | → |
| WinGet | 1.29.290 | → |
All Patch Tuesday details
patchletter does not track individual Patch Tuesday CVEs — the full, rated list lives in the official Microsoft Security Update Guide. We show you what got updated and what is already being actively exploited.
Microsoft Security Update Guide (MSRC) →Frequently asked questions
What is Microsoft Patch Tuesday?
Patch Tuesday is the second Tuesday of each month, when Microsoft releases its bundled security updates for Windows, Office, Exchange and other products. Admins plan their patching around this date.
When is the next Patch Tuesday?
The next Microsoft Patch Tuesday is 08/09/2026. It always falls on the second Tuesday of the month.
Does patchletter show every Patch Tuesday CVE?
No. patchletter shows the current versions of the Microsoft products it tracks and which of their vulnerabilities are actively exploited (CISA KEV). The complete list of every CVE is in Microsoft's Security Update Guide.
What does patchletter cost?
Nothing. Subscribe to your Microsoft tools with just an email address and get notified about new versions and actively exploited vulnerabilities.
Never miss a Microsoft update
Subscribe to your Microsoft tools and get an email the moment a new version ships or an actively exploited vulnerability appears.
Browse the catalog