Category: WSUS

CVE-2026-21509 | 0-day exploit mitigation Batch OF2016 + OF2019

Microsoft Office Security Feature Bypass Vulnerability | How to import into WSUS Server or deploy with Intune or Autopatch CVE-2026-21509, Security Vulnerability, Released: Jan 26, 2026, Last updated: Jan 26, 2026 Assigning CNA Microsoft CVE.org link CVE-2026-21509  Impact Security Feature Bypass Max Severity Important Weakness CWE-807: Reliance on Untrusted Inputs in a Security Decision CVSS […]

Is your SBS environment update ready for 25H2 W11, SMB-Version, smbchecker.ps1

PowerShell script to check if you SMB setup is 25H2 ready   Windows 11 25H2 – Small Update, Big Impact for SMB Environments Windows 11 25H2 is now being offered on home and business systems as an Enablement Pack. This means it’s not a full new installation — instead, it’s a small ~50 MB update […]

WSUS Out of Band Patch Installer – CVE-2025-59287 for all OS automatic

Powershell skript to force the Out of band patches for WSUS Exploit fully automatic on WSUS. WSUS Out-of-Band Patch Installer – Overview (CVE-2025-59287) for all OS automatic Run our emergency skript direct on your WSUS Server. The 24.10.2025 emergency patches itself are in WSUS. If they are APROVED there our skript will install them from […]

W11 24H2 + Server 2025 Hotpatch without Reboot how to set VBS via GPO so it works

Hotpatching is coming to Windows 11 24H2 Enterprise E3+. Users will be able to patch “Security ONLY” updates on Patch Tuesday without requiring a reboot each time. W11 Hotpatch only available for Windows Enterprise E3 or E5 (e.g. Microsoft 365 A3/A5 or Microsoft 365 F3); or a Windows 365 Enterprise subscription. Windows 11 version 24H2 […]

Crl Check

Crl Check a Freeware tool to analyse start-up delay of an application because of Certificate Revocation lookup When you sign an executable in Windows with a code-signing certificate, there are certain registry settings that control how Windows behaves. As soon as an EXE or DLL is signed, a complex mechanism comes into play that checks […]

Crl Check Tool

13.06.2024 False-Postive with ENS 10.7, AMCORE 5554 on Windows Defender AM_Delta_Patch Server 2019 German

  Trellix ENS 10.7 deletes Windows Defender Update which come from WSUS-Server on German Server 2019 We just did see a false positive on Windows Defender Updates we provide via WSUS with autoaprove on a Windows Server 2019 German with Trellix ENS 10.7 and AMCORE 5554. The file was deleted from C:\Windows\SoftwareDistribution\Download\ Microsoft affected file: […]

CRL check, Zertifikatsperrlisten Software, Certificate Revocation List Check Tool zum suchen aller geblockten CRL in Firmenumgebungen, crlcheck.exe

crl check | crlcheck tool Eine Certificate Revocation List (CRL) ist eine von einer Certification Authority (CA) geführte Liste, die digitale Zertifikate auflistet, die revoziert wurden und nicht mehr gültig sind. Sie stellt sicher, dass Benutzer die Gültigkeit eines Zertifikats überprüfen können, was die Sicherheit innerhalb einer Public Key Infrastructure (PKI) erhöht. Mit diesem Tool […]