Windows Autopatch

Reported Context (4)

Microsoft fixed a Windows Autopatch issue that pushed restricted driver updates to some managed Windows devices in the European Union. Microsoft Fixes Windows Autopatch Bug That Bypassed Driver Restrictions
The cumulative hotpatch (covering CVE-2026-25172, CVE-2026-25173, and CVE-2026-26111) applies in-memory fixes to avoid reboots and is automatically delivered to devices enrolled in the Windows Autopatch hotpatch program. Microsoft Releases No-Reboot Hotpatch for Windows RRAS RCE Flaws
that can expose managed identity tokens, while Microsoft is enabling hotpatch updates via Windows Autopatch for faster deployment. Microsoft Patches 84 Vulnerabilities in May 2026 Update, Including Two Publicly Disclosed Zero-Days
Updates will be delivered through Windows Autopatch, which Microsoft says will halve the time to reach 90% patch compliance and can be managed or disabled using Intune controls that go live April 1, 2026. Microsoft to Enable Windows Hotpatch Updates by Default for Eligible Devices

CVE (9)

People (5)

MITRE ATT&CK (2)

Vendors (1)

Products (13)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.