Microsoft Patch Tuesday: dates, versions & actively exploited flaws
Microsoft Patch Tuesday is the second Tuesday of the month, when Microsoft ships bundled security updates for Windows, Windows Server, Office, Exchange and more. patchletter shows the current versions of the Microsoft products it tracks and which flaws are already being actively exploited according to CISA.
Actively exploited at Microsoft (CISA KEV)
These tracked Microsoft products currently appear in the CISA KEV catalog with an actively exploited vulnerability — patch these first.
| Product | CVE | |
|---|---|---|
| Exchange Server | CVE-2023-21529Ransomware | → |
| Exchange Server | CVE-2022-41080Ransomware | → |
| Exchange Server | CVE-2022-41082Ransomware | → |
| Exchange Server | CVE-2022-41040Ransomware | → |
| Exchange Server | CVE-2018-8581Ransomware | → |
| Exchange Server | CVE-2021-26855Ransomware | → |
| Exchange Server | CVE-2021-26858Ransomware | → |
| Exchange Server | CVE-2021-27065Ransomware | → |
| Exchange Server | CVE-2021-26857Ransomware | → |
| Exchange Server | CVE-2021-34523Ransomware | → |
| Exchange Server | CVE-2020-0688Ransomware | → |
| Exchange Server | CVE-2021-34473Ransomware | → |
| Exchange Server | CVE-2021-31207Ransomware | → |
| Exchange Server | CVE-2021-31196 | → |
| Exchange Server | CVE-2024-21410 | → |
| Exchange Server | CVE-2021-33766 | → |
| Exchange Server | CVE-2020-17144 | → |
Source: CISA KEV · updated daily
Current Microsoft versions
12 Microsoft products tracked by patchletter and their currently detected version.
| Product | Current version | |
|---|---|---|
| .NET | 10.0.10 | → |
| Exchange Server | 15.2.2562.43 | → |
| Microsoft Defender (Platform) | – | → |
| Microsoft Edge | 150.0.4078.65 | → |
| Microsoft PowerToys | 0.100.2 | → |
| Microsoft SQL Server | 17.0.4055.5 CU6 | → |
| Microsoft Teams (Client) | 26163.405.4842.717 | → |
| PowerShell 7 | 7.6.3 | → |
| Visual Studio Code | 1.128.1 | → |
| Windows 11 | 10.0.28000 | → |
| Windows Server | 10.0.26100 | → |
| Windows Terminal | 1.24.11321.0 | → |
All Patch Tuesday details
patchletter does not track individual Patch Tuesday CVEs — the full, rated list lives in the official Microsoft Security Update Guide. We show you what got updated and what is already being actively exploited.
Microsoft Security Update Guide (MSRC) →Frequently asked questions
What is Microsoft Patch Tuesday?
Patch Tuesday is the second Tuesday of each month, when Microsoft releases its bundled security updates for Windows, Office, Exchange and other products. Admins plan their patching around this date.
When is the next Patch Tuesday?
The next Microsoft Patch Tuesday is 11/08/2026. It always falls on the second Tuesday of the month.
Does patchletter show every Patch Tuesday CVE?
No. patchletter shows the current versions of the Microsoft products it tracks and which of their vulnerabilities are actively exploited (CISA KEV). The complete list of every CVE is in Microsoft's Security Update Guide.
What does patchletter cost?
Nothing. Subscribe to your Microsoft tools with just an email address and get notified about new versions and actively exploited vulnerabilities.
Never miss a Microsoft update
Subscribe to your Microsoft tools and get an email the moment a new version ships or an actively exploited vulnerability appears.
Browse the catalog