2 publishers · first seen Tue, 27 Oct 2026 12:30 UTC · updated Tue, 27 Oct 2026 16:41 UTC
Microsoft released an out-of-band update for Windows on October 26, 2025, to remove seven certificates from the Windows trust list, including six eMudhra G3 roots and one AAA Certificate Services cross-sign, following the compromise of eMudhra's private keys earlier in October. The update applies to supported systems from Windows 10 to Windows 11 and Windows Server 2025, targeting devices that cannot access Microsoft's automatic certificate trust list updates.
The update includes all changes from the October 13 release, which involved issues with VPNs, on-premises Exchange Servers, Smart App Control, audio, and Remote Desktop for non-admin users, none of which are resolved in this patch. Microsoft issued the update to prevent trust in fraudulent certificates that could appear to come from legitimate certificate authorities.
Content auto-generated. May contain inaccuracies.